User Guide"Smart Filtering" ApplianceDoc. PUBDIRU Rev. 2, 9/08www.netoptics.com12BAA BIDSAnalyzer 2Analyzer 1RMON 1 RMON 2Forensic*** Conde
6*** Condential - DO NOT Distribute ***DirectorTypical ApplicationThe following diagram shows a typical application using Director to implement a com
7*** Condential - DO NOT Distribute ***DirectorIn this installation, Director has ten additional Span ports and one in-line link that are available f
8*** Condential - DO NOT Distribute ***DirectorIn-line Monitoring of 10 Gigabit Links To create an in-line link on a 10 Gigabit network segment, use
9*** Condential - DO NOT Distribute ***DirectorDirector Front PanelThe features of the Director front panel are shown in the following diagram.www.ne
10*** Condential - DO NOT Distribute ***DirectorDirector Rear PanelThe features of the Director rear panel are shown in the following diagram.Managem
11*** Condential - DO NOT Distribute ***DirectorChapter 2 Installing DirectorThis chapter describes how to install and connect Director devices. The
12*** Condential - DO NOT Distribute ***DirectorPlan the InstallationBefore you begin the installation of your Director device, determine the followi
13*** Condential - DO NOT Distribute ***DirectorInstall Director Network ModulesIf the Director Network Modules (DNMs) are not already installed when
14*** Condential - DO NOT Distribute ***DirectorConnect Power to DirectorFor power fault protection, Director is equipped with redundant power connec
15*** Condential - DO NOT Distribute ***DirectorLaunch terminal emulation software and set communication parameters to:2. 115200 baud8 data bits No p
PLEASE READ THESE LEGAL NOTICES CAREFULLY.By using a Net Optics Director device you agree to the terms and conditions of usage set forth by Net Optics
16*** Condential - DO NOT Distribute ***DirectorEnter 4. netoptics as the password. For security, the password is not displayed as you type it. The
17*** Condential - DO NOT Distribute ***DirectorCongure Director using the CLIYou should be logged into the Director CLI. The factory-set default va
18*** Condential - DO NOT Distribute ***DirectorAssign a New Director IP Address, Netmask, and Gateway IP AddressIf you are using the local RS-232 se
19*** Condential - DO NOT Distribute ***DirectorTip! ________________________________________________________________________________________________
20*** Condential - DO NOT Distribute ***DirectorUsing the CLI Help CommandTo view CLI help information:Enter 1. Help at the "Net Optics:"
21*** Condential - DO NOT Distribute ***DirectorUsing the CLI Command History BufferYou can save a lot of typing by using the command history buffer
22*** Condential - DO NOT Distribute ***DirectorConnect Span Ports to DirectorTo connect Director to the network using Span ports, be sure that at le
23*** Condential - DO NOT Distribute ***DirectorConnect Director With In-line Network LinksTo connect Director to the network using an in-line instal
24*** Condential - DO NOT Distribute ***Directorwww.netoptics.com™Director12BA16273851049A BIn-Line10/100/1000101001000LINKACTIn-LineGigaBit1 2 3 4 5
25*** Condential - DO NOT Distribute ***DirectorChapter 3 Conguring Filters Using the CLIThis chapter describes how to use the CLI to determine whic
Director*** Condential - DO NOT Distribute ***ContentsChapter 1 Introduction ...
26*** Condential - DO NOT Distribute ***DirectorWhen you dene a lter, you specify and action to be taken when the lter conditions are met. The act
27*** Condential - DO NOT Distribute ***DirectorNetwork Port 1Network Port 2Monitor Port 3+lter add in_ports=n1.1,n1.2 action=redir redir_ports=m.3T
28*** Condential - DO NOT Distribute ***DirectorCreate FiltersFilters process a trafc stream by selecting packets based on criteria in the packet he
29*** Condential - DO NOT Distribute ***Directorip_dst IP destination address• ip_dst_mask IP source address mask• ip_proto IP protocol• l4_src_po
30*** Condential - DO NOT Distribute ***DirectorMonitor Port 1Network Port 5lter add in_ports=n1.5 ip_proto=6 action=redir redir_ports=m.1lter add
31*** Condential - DO NOT Distribute ***DirectorWork with congurable 10 Gigabit portsThe two congurable 10 Gigabit XFP ports on the front panel are
32*** Condential - DO NOT Distribute ***Directorlter add in_ports=n1.11 action=redir redir_ports=t.2lter add in_ports=n1.1-n1.4 action=redir redir_
33*** Condential - DO NOT Distribute ***DirectorUnderstand lter interactionsIt is important to understand that Director uses Content Addressable Mem
34*** Condential - DO NOT Distribute ***DirectorHave we achieved our goal of sending all the TCP trafc to Monitor Port 2? Not quite. What happens wh
35*** Condential - DO NOT Distribute ***DirectorNote: _______________________________________________________________________________________________
Director*** Condential - DO NOT Distribute ***Create Complex Filters ...29View lters
36*** Condential - DO NOT Distribute ***DirectorUnderstand pending and active ltersTo understand the actions of lter commands such as ltercommit,
37*** Condential - DO NOT Distribute ***DirectorPending lter listAddress Filter1 n1.1 ip_proto=UDP action=drop2 n1.1 m.1CAMAddress Filter1 n1.1 ip_p
38*** Condential - DO NOT Distribute ***DirectorBe aware of these similar pairs of commands:lterdiscard• clears the pending lter list, while lt
39*** Condential - DO NOT Distribute ***DirectorChapter 4 Daisy-chaining Multiple Director ChassisThis chapter describes how to expand the capacity o
40*** Condential - DO NOT Distribute ***DirectorAppendix A Director SpecicationsSpecications, chassisMechanicalDimensions: 1.6” high x 15.65” deep
41*** Condential - DO NOT Distribute ***DirectorSpecications, DNMCopper Interface(12) RJ45 Network Ports 10/100/1000Mbps(6) In-line links or (12) Sp
42*** Condential - DO NOT Distribute ***DirectorAppendix B Command Line InterfaceTip! _______________________________________________________________
43*** Condential - DO NOT Distribute ***DirectorCommand Sub-Command Parameters Example and descriptionlter add ipv6=< y | n >in_ports=<netw
44*** Condential - DO NOT Distribute ***DirectorCommand Sub-Command Parameters Example and descriptionlter (continued)list ipv6=< y | n > lte
45*** Condential - DO NOT Distribute ***DirectorCommand Sub-Command Parameters Example and descriptionpasswd passwd Interactively changes the passwor
1*** Condential - DO NOT Distribute ***DirectorChapter 1 IntroductionNet Optics Director is a key component for building a comprehensive, consolidate
46*** Condential - DO NOT Distribute ***DirectorCommand Sub-Command Parameters Example and descriptionsysip commit sysip commitActivates pending chan
47*** Condential - DO NOT Distribute ***DirectorCommand Sub-Command Parameters Example and descriptionuserThis command is only available at root leve
48*** Condential - DO NOT Distribute ***DirectorFilter parametersSwitches and lters are dened using the lteraddandlterinscommands. The lter
49*** Condential - DO NOT Distribute ***DirectorAppendix C Protocol NumbersThe ofcial Assigned Internet Protocol Numbers list is maintained by the I
50*** Condential - DO NOT Distribute ***DirectorNum Keyword Protocol55 MOBILE IP Mobility56 TLSP Transport Layer Security Protocol using Kryptonet ke
51*** Condential - DO NOT Distribute ***DirectorNum Keyword Protocol115 L2TP Layer Two Tunneling Protocol116 DDX D-II Data Exchange (DDX)117 IATP Int
52*** Condential - DO NOT Distribute ***DirectorLimitations on Warranty and LiabilityNet Optics offers a limited warranty for all its products. IN NO
© 2008 by Net Optics, Inc. All Rights Reserved.www.netoptics.com
2*** Condential - DO NOT Distribute ***DirectorKey FeaturesEase of UseTap, aggregation, regeneration, matrix switch, and lter functions in a single
3*** Condential - DO NOT Distribute ***DirectorAbout this GuidePlease read this entire guide before installing Director. This guide applies to the fo
4*** Condential - DO NOT Distribute ***DirectorDirector ArchitectureThe following diagram shows a schematic view of the architecture of the Director
5*** Condential - DO NOT Distribute ***DirectorThe inputs are divided into three groups: two DNMs plus the 10GbE ports. In-line DNM models support 6
Komentarze do niniejszej Instrukcji