Manuale d’uso / di manutenzione del prodotto ET1000A del fabbricante Black Box
Vai alla pagina of 88
B L A C K B O X ® The Encr yp Tight ™ E n f o r c e m en t P o i n t In s ta l l a t i on G u id e pr o v id e s d et a i l ed i n f o r m a t i o n o n h o w t o i n s ta l l a nd c o n f i g u re En cry p T ig h t E n f or ce me n t Poi nt s .
.
ETEP Installation Guide 3 T able of Content s About This Document ........................................................................................................... .... 7 Purpose ..............................................................
4 ETEP Installation Guide To cable the ET 0010A: ............................................................................................. 34 Powering On the ET0010A .................................................................................
ETEP Installation Guide 5 Setting the Date a nd Time ....................................................................................................6 1 To set the date and time: ...... .............................................................
6 ETEP Installation Guide Emissions .................................................................................................................. 79 FCC Information (USA) ...........................................................................
ETEP Installation Guide 7 About This Document Purpose The ETEP Installation Guide describes how to cable and install the Black Box™ ETEP Black Box Enforcement Point. Intended audience This document is intended for use by net work tech nicians and security admini strators who are familiar with setting up and mai ntaining network equipment.
About This Document 8 ETEP Installation Guide.
ETEP Installation Guide 9 1 Product Overview ETEP Introduction The EncrypT ight Enforcement Poin t (ETEP) V ariable Speed Encr yptors (V SEs) are purpose-built encryption appliances that provid e multi-layer data protection.
Product Overview 10 ETEP Installation Guide • Command Line Interface (CLI) The CLI is all you need to manage a standalo ne deployment, typically a pair of ETEPs. CLI commands are available to perform initial setup of the ETEP, al ong with diagnostic and troubleshooting commands.
ETEP Introduction ETEP Installation Guide 11 S tatus Indicators The ET0010A status indictors are show n in Figure 3 . The status indicat ions are described in T able 1 . Figure 3 ET0010A S tatu s Indicators The following table describ es how to interpret the ET0010A status ind icators.
Product Overview 12 ETEP Installation Guide Figure 4 ET0010A Rear Pa nel and External Power Supply ET0100A Physical Description The ET0100A is a rack-mountable encry ptor that can run at speeds ranging from 100–250 Mbps. The following sections describe the connectors and LED in di cators that appear on the front and rear panels of the ET0100A.
ET0100A Physical Description ETEP Installation Guide 13 Figure 6 ET0100A LED Indicat ors The following table describ es how to interpret the LEDs on the ET0100A fron t panel.
Product Overview 14 ETEP Installation Guide Figure 7 ET0100A Rear Pa nel ET1000A Physical Description The ET1000A is a rack-mountable 1 Gb ps encryptor with dual power supplies. It can operate at speeds ranging from 500 Mbps–1 Gbp s. The following s ections describe the ET10 00A connectors and LED indicators.
ET1000A Physical Description ETEP Installation Guide 15 LED Indicators The ET1000A LED indi cators are shown in Figure 9 . The LEDs are described in Ta b l e 3 . Figure 9 ET1000A LED Indicat ors T able 3 describes how to interpret the LEDs on the ET1000A fro nt panel.
Product Overview 16 ETEP Installation Guide Rear Panel The ET1000A rear panel is shown in Figure 10 . Figure 10 ET1000A Rear Panel Power supply status Off Power supply is not operational . Possible causes include power supply unplugged, power supply removed from chassis, or a malfunction.
ET10000A Physical Description ETEP Installation Guide 17 ET10000A Physical Description The ET10000A is a rack-mount able 10 Gbps encryptor with dual power supplies. It can operate at speeds ranging from 2.5–10 Gbps. The followi ng sections describe the ET10000A con nectors and LED indicators.
Product Overview 18 ETEP Installation Guide Figure 12 ET10000A LED Indicators T able 4 describes how to interpret the LEDs on the ET10000A front panel.
ET10000A Physical Description ETEP Installation Guide 19 Rear Panel The ET10000A rear panel is shown i n Figure 13 . Figure 13 ET10000A Rear Panel Gigabit link status (g reen) a Off Loss of signal on the Gigabit link. On The Gigabit link is u p but no traffic is passing over the interface link.
Product Overview 20 ETEP Installation Guide Features ETEPs share many of the same features and cap abilities across hardware models, as shown in T able 6 . Hardware differe nces between the ETEP models are summarized in T able 5 . The ETEP features are summarized in T able 6 .
Specifications ETEP Installation Guide 21 S pecifications This section lists the mechanical and environmental specifications fo r the following ETEP models: • ET0010A specifications are listed in Ta.
Product Overview 22 ETEP Installation Guide ET0010A Electrical/Mechan ical Dimensions 19 inch rack mount design 1u tamper evident chassis Dimensions: 1.6” H x 9.1” W x 7.1” D Weight (without external power su pply),1 pound 10 ounces External powe r supply: • Weight: 11 ounces • Input voltage: 100-240 VAC @ 1.
Specifications ETEP Installation Guide 23 T able 9 ET10 00A Mechani cal and Environm ental S pecif ications Category Specification Interfaces (2) Gigabit Ethernet p orts for encrypting and decrypting .
Product Overview 24 ETEP Installation Guide MIB Support This section identifies the Black Box MIBs and standa rd MIBs that are used to manage ETEP appliances. The MIBs can be loaded into a management station SN MP client application, wh ich typically includes a MIB browser and an SNMP trap receiver .
MIB Support ETEP Installation Guide 25 T able 1 1 ETEP MIBs Module Filename BLACKBOX-SMI BLACKBOX-SMI.txt BLACKBOX-CRYPTO-MIB BLACKBOX-CRYPTO-MIB.txt SNMPv2-CONF SNMPv2-C ONF.txt SNMPv2-MIB SNMPv2-MI B.txt SNMPv2-SMI SNMPv2-SM I.txt SNMPv2-TC SNMPv2-TC.
Product Overview 26 ETEP Installation Guide.
ETEP Installation Guide 27 2 Inst allation Safety Guidelines The ETEP does not contain any fiel d-replaceable internal parts. Do not remove the unit’ s cover for any reason. The cover is to be rem oved only by authorized Black Bo x service personnel.
Installation 28 ETEP Installation Guide If you are using EncrypTight Manager to manage your ETEPs, you will need to instal l the EncrypTight Manager software on the management station to c onfigure the ETEPs for network operation and to create and deploy policies.
ETEP Installation Guide 29 • Gr ounding Maintain reliable grounding of a rack-mounted ETEP. Pay particular attention to suppl y connections other than direct connections to the branch circuit, such as the use of power strips. • Maintenance Allow at least 19 inches (48.
Installation 30 ETEP Installation Guide Rack Mount Inst allation T o mount the ETEP in a st andard 19-inch equipment rack, have the follow ing tools and materials available: • External power supply .
ETEP Installation Guide 31 Figure 15 Att ach mounting bracket s to the bottom p anel. ET0010A is shown below . 3 T urn the ETEP face up and locate the external powe r supply . W ith the label side facing down, place the power supply in the mounting bracket cradle and snap it in to place, as shown in Figure 16 .
Installation 32 ETEP Installation Guide Figure 17 Insert the power supply cable into the connector on the rear p anel 5 Attach the mounting b rackets to the rack’ s front supports with the large #10-32 screws (item 1 in Figure 23 ), using a #2 Phillips screwdriver .
ETEP Installation Guide 33 Figure 19 Screw holes for rubbe r feet inst allation on bottom of unit 3 Place one of the rubber feet over the hol e and insert a screw into the opening ( Figure 20 ). Tighten the screw . Figure 20 Rubber feet inst alled 4 Repeat step 3 for the remaining feet.
Installation 34 ETEP Installation Guide Figure 21 ET0010A rear p anel connect or for external power supply . Connecting the Cables: ET0010A Follow the instructions bel ow to connect the ET0010A to t he appropriate network devices (see Figure 22 ).
ETEP Installation Guide 35 Figure 22 ET0010A Ca bling NOTE The Aux1 port on the ET001 0A is not enabled in this release. Powering On the ET0010A Use the following p rocedure to power up the ETEP.
Installation 36 ETEP Installation Guide When the appliance powers up, al l LEDs illuminate. The power LED rem ains lit until the unit is powered off. During the boot process the ETEP cycles through its startup tests, and the corresponding status LEDs are illuminated.
Installing the ET0100A ETEP Installation Guide 37 NOTE T o meet the requirements of FCC Part 15 and the EU EMC Directive 2004/10 8/EC, use only shielded cables with the ET0100A (DB-9 null mod em cables and Category 5 STP cables).
Installation 38 ETEP Installation Guide T o inst all the ETEP in a rack: 1 Attach a mounting bracket to each side of the ETEP (n ear the front panel). Attach each bracket with three small screws provided in the Accessory Kit, using a #1 Phillips screwdriver .
Installing the ET0100A ETEP Installation Guide 39 Figure 25 ET0100A Ca bling Powering on the ET0100A Use the following p rocedure to power up the ET0 100A. T o power on the ET0100A: • On the appliance’ s rear panel, plug the power cord into the ET0100A power receptacle.
Installation 40 ETEP Installation Guide Figure 27 Improperly seated ET01 00A power cable When the appliance powers up, all LEDs illuminate (see Figure 28 ). The Alarm LED illuminates briefly and the diagnostic code LED displays 88 to verify th at the diagnostic di splay segments are functioning.
Installing the ET1000A ETEP Installation Guide 41 The steps to perform for a typical installa tion ar e listed below . Cabling Requirement s: ET1000A T able 17 ou tlines the standard cables used with each po rt on the ET1 000A.
Installation 42 ETEP Installation Guide NOTE T o meet the requirements of FCC Part 15 and the EU EMC Directive 2004/10 8/EC, use only shielded Category 5 cables with the ET 1000A Ethernet management port . Unp acking the Shipping Carton: ET1000A Remove all product componen ts from the shipping carton and compare the conten ts to the packing list.
Installing the ET1000A ETEP Installation Guide 43 T o inst all the ET1000A in a rack: 1 Place the unit on a solid surface, with the top faci ng up. Position the mounting brackets on each side of the appliance, as shown in Figure 29 .
Installation 44 ETEP Installation Guide Grounding of DC Power Supply: ET1000A For DC Power Supply Only Rating -36 to -72Vdc + 0%, 6 - 4.5A For Earth Connection 1 Loosen the ground terminal screw .
Installing the ET1000A ETEP Installation Guide 45 3 Plug an SFP Gigabit transceiver into the ET1000A remo te port. If you are using an optical SFP , insert the fiber cable in the SFP and connect the other end to the untrusted network, typically via a ro uter port.
Installation 46 ETEP Installation Guide Figure 33 Dual power supplies on the ET1000A rear p anel T o power on the ET1000A: 1 On the appliance’ s rear panel, plug the power cord s into the power receptacl es for each power supply . 2 Attach the opposite end of the first power cord to a power source.
Installing the ET10000A ETEP Installation Guide 47 During the boot process t he ET1000A cycles through its startup tests, and the corresponding diagnosti c codes are displayed. After the tests execute successfully , th e diagnostic code displa y is solidly illuminated with code 00.
Installation 48 ETEP Installation Guide Cabling Requirement s: ET10000A T able 19 ou tlines the standard cables used with each po rt on th e ET10000A. The connector type listed indicates only what is required t o connect to the ET10000A port, and may or may not be the same connector type required for the other end of the cab le.
Installing the ET10000A ETEP Installation Guide 49 NOTE The polarity of the ET1000 0A DC power cable is indicate d via color coding with Y ellow bei ng + (plus), Black being - (minus), a nd Green bein.
Installation 50 ETEP Installation Guide 1 ET10000A chassis • Firmware and software is factory-installed on the unit. 2 Accessory Kit • Rack mount kit includes 2 mounting brackets, 16 small black s.
Installing the ET10000A ETEP Installation Guide 51 Figure 37 Each bracket is attached to the side of the ET10000A using eight screws 3 Attach the mounting b rackets to the rack’ s front support with the large #10-32 screws, using a #2 Phillips screwdriver .
Installation 52 ETEP Installation Guide Figure 39 ET10000A Cabling NOTE The Aux ports, and USB and Gigabit managemen t ports are not enabled in this rele ase. Powering on the ET10000A This section lists important safety guidelines for the ET10000A power mo dules, and describes how to safely apply power to the appliance.
Installing the ET10000A ETEP Installation Guide 53 Power-Up Procedure Follow the instructions in this section to safely apply po wer to the ET10000A. Figure 40 Dual power supplies on the ET10000A rear p anel T o power on the ET10000A: 1 On the appliance’ s rear panel, plug the power cord s into the power receptacl es for each power supply .
Installation 54 ETEP Installation Guide Figure 41 ET10000A Front Panel S tat us Indicators Shutting Down the ETEP It is important that a pro per system shutdown i s performed prior to pow ering off the appliance. The shutdown command halts all r unning tasks on the ETEP and prepares it for being powered of f.
Shutting Down the ETEP ETEP Installation Guide 55 Example In the following example the user logs in as admin and shuts down the ETEP. pep login: admin Password: Last login: Tue Apr 8 15:12:21 2008 on .
Installation 56 ETEP Installation Guide.
ETEP Installation Guide 57 3 Initial Setup Overview The following steps are required for initial setup of the ETEP: 1 Log in through a seri al link. 2 Configure the ma nagement port. 3 Set the date and time. 4 Enter the throughput license. Logging In Through a Serial Link Initial setup is performed throug h a serial link to the RS-232 p ort.
Initial Setup 58 ETEP Installation Guide 6 When you are successfully logg ed in, the command line prompt disp lays as shown below (password text is not displayed).
Configuring the Management Port ETEP Installation Guide 59 Figure 42 Management Port Default Gateway About auto-negot iation The default setting for the ETEP enables auto-negotiation, whi ch negotiates the link speed, duplex setting, and flow control.
Initial Setup 60 ETEP Installation Guide ip <ip address> <subnet mask> [gate way] After entering the new IP address, it takes 10-20 seconds for the ETEP to set the ad dress on the management port. Duri ng that time you cannot enter an y CLI commands.
Setting the Date and Time ETEP Installation Guide 61 Example The following example sets th e management port IPv4 address, subnet mask, and gateway for the ETEP as shown in Figur e 42 . Auto-negotiatio n is left at its default setting of enabled. admin> configure config> management-interface man-if> ip 192.
Initial Setup 62 ETEP Installation Guide 3T y p e exit to retur n to the command promp t. Example admin> configure config> date 2008 10 11 15 30 00 config> exit Entering a Throughput License .
Configuration Example ETEP Installation Guide 63 T o view the ETEP throughput s peed: 1 At the command prompt, type show throughput-speed . Configuration Example The following example illu strates the.
Initial Setup 64 ETEP Installation Guide CAUTION After entering FIPS Mode, the user must replace t he admin and ops passwords from the default settings.
ETEP Installation Guide 65 4 Maintenance Prevent ative Maintenance Periodically perform maintenan ce on your ETEP. Ke ep com ponents free of dust and other parti culate matter . Examine cables for damage and ensure that airflow requirem ents have been met.
Maintenance 66 ETEP Installation Guide Obt aining a License for Replacement Unit s When replacing the ETEP with a sp are, the replacement ETEP will ru n at full thr oughput for a grace period. During the grace period, c ontact customer support to report the RMA unit and to receive a new license for the replacement.
What To Do If an Appliance Fails ETEP Installation Guide 67 Figure 44 Release lever on po wer supply # 2 4 On the replacement power s upply , press the release lever toward the metal support and insert the new power supply until it latches ( Fi gure 45 ).
Maintenance 68 ETEP Installation Guide Figure 46 The power supply bra cket is secured with two screws 3 Locate the release lever at th e top of the power supply ( Fi gure 47 ). Press the release lever downward toward the black support support to release the power supply latc h.
Tamper Switch and Zeroization ETEP Installation Guide 69 Figure 49 Correctly inserted and latched power supply is shown o n the left . Note the position of the release lev ers. 6 Replace the power supply brack et ( Figure 46 ). 7 Insert the power cord in th e replacement power supply .
Maintenance 70 ETEP Installation Guide T o recover the ETEP following zeroization: W ait approximately 20 minutes for the zeroization proce ss to complete.
Cable Pinouts ETEP Installation Guide 71 RS-232 Serial Cable: ET0100A, ET1000A Models The RS-232 serial cable on the ET0100A , and ET1000A is a null mode m cable with DB-9 connectors (female to male).
Maintenance 72 ETEP Installation Guide.
ETEP Installation Guide 73 5 T roubleshooting Symptoms and Solutions The following tables provide some solutions to common problems that may occur with your ETEP. LED Indicators T able 26 LED Indicators Symptom Explanation and Possible Solutio n No power light.
Troubleshooting 74 ETEP Installation Guide Error S t ate NOTE A FIPS failure puts the ETEP into FIPS error mode, lights the alarm indicator, and puts dat aplane i n discard mode, but does not zeroize the ETEP.
Diagnostic Code Display ETEP Installation Guide 75 Diagnostic Code Display ETEPs display self-test codes during boot up , in add ition to operational stat us and error conditions. See the following sections for inform ation about your appliance model .
Troubleshooting 76 ETEP Installation Guide . Diagnostic Codes: ET0100A, ET1000A and ET10000A The 7-segment diagnostic display on the front panel of the following m odels displays self-test codes during boot up: ET0100A, ET1000A, and ET 10000A. After the ETEP boots, the display reflects the operational state of the applian ce and error conditions.
ETEP Installation Guide 77 Appendix A Environment al and Regulatory Information WEEE Directive Black Box is committed to environmentally responsible behavi or . As part of th is commitment, we have put in place a product end-of-life management solution that meets the European Union’ s W aste Electrical and Electronic Equipment (WEEE) Directive.
Environmental and Regulatory Information 78 ETEP Installation Guide • ET0010A • ET0100A • ET1000A • ET10000A ET0010A Regulatory Information The ET0010A and ET0010A-Desktop, have received a st .
Regulatory Information ETEP Installation Guide 79 European Notice Products with the CE Marking compl y with both the EMC Directive (2004/1 08/EC) and the Low V oltage Directive (2006/95/EC) issu ed by the Commission of the European Community .
Environmental and Regulatory Information 80 ETEP Installation Guide European Notice Products with the CE Marking compl y with both the EMC Directive (2004/1 08/EC) and the Low V oltage Directive (2006/95/EC) issu ed by the Commission of the European Community .
Regulatory Information ETEP Installation Guide 81 Interference-Causing Equipment St andard Compliance Notice (Canada) “The Class A digital apparatus co mplies with Canadian ICES-003.” “Cet appareil numerique de la class A es t conforme a la norme NMB-003 du Canada.
Environmental and Regulatory Information 82 ETEP Installation Guide Interference-Causing Equipment St andard Compliance Notice (Canada) “The Class B digital apparatus complies with Can adian ICES-003.” “Cet appareil numerique d e la class B est conforme a la norme NMB-003 du Canad a.
Regulatory Information ETEP Installation Guide 83 13 Los cables de la fuente de poder deben ser guiados de tal manera que no sean pisados ni pellizcados por objetos colocados sobre o co ntra ellos, poniendo particular atención a los co ntactos y receptáculos donde salen del aparato.
Environmental and Regulatory Information 84 ETEP Installation Guide.
ETEP Installation Guide 85 Index A alarm LED ET0010A 11 ET0100A 13 ET1000A 15 ET10000A 18 autoneg command 60 B battery replacement 27 booting the appliance ET0010A 35 ET0100A 39 ET1000A 45 ET10000A 52.
Index 86 ETEP Installation Guide I initial setup auto-negotiation settings 59 logging in through the serial port 57 overview 57 setting the management IP address 58 installation ET0010A applying power.
ETEP Installation Guide 87 Index regulatory information ET0010A 78 ET0100A 79 ET1000A 80 ET10000A 82 requirements ET0100A cables 36 ET1000A cables 41 ET10000A cables 48 safety guidelines 27 software 2.
72 4 - 7 4 6 -5500 | blac kbox.c om About Bl ack Bo x Black Box Net work Ser vices is your source for an ex tensive range of net working and infra s tructure product s.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il Black Box ET1000A è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del Black Box ET1000A - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso Black Box ET1000A imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul Black Box ET1000A ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il Black Box ET1000A, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del Black Box ET1000A.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il Black Box ET1000A. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo Black Box ET1000A insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.