Net Optics iBypass HD - Manual (Page 6)

2
iBypass HD
Bi-Directional Heartbeat
The iBypass HD periodically sends small Heartbeat packets through attached IPSs to verify their ability to process
traffic. If a Heartbeat packet is not returned within a configurable timeout and number of retires, the IPS is assumed
to be down and Bypass On mode is entered, taking the IPS offline. Hearbeat packets continue to be sent to the
down IPS; when they start being returned, the IPS is known to be healthy so Bypass Off mode is resumed, with
traffic going through the IPS once again. Heartbeat packets can be sent in one direction, transmitted on Port 1 and
received on Port 2, or both directions, also transmitted on Port 2 and received on Port 1. The Heartbeat packet can be
customized independently for each bypass switch, setting the packet contents, timeout, and number of retries.
High Availability Mode
The two bypasses switches in a DBM can be coupled together in a high availability (HA) mode that supports both
link redundancy and tool redundancy. If the primary link fails, the bypass switch reroutes to the secondary link. If
the primary tool fails, the traffic is routed to the secondary tool. When the primary link or tool comes back online,
they are automatically switched back into the configuration.
SFP Flexibility
DBMs for tapping fiber network links have SFP transciever modules on the monitor ports, so IPSs with any media
type can be attached. Single-mode and multi-mode Gigabit fiber, Gigabit copper, and 10/100/1000 copper interface
SFP modules are supported.
Enterprise-Ready Management
Enterprise networks can easily integrae the iBypass HD into the infrastructure because the device supports SSH secure
remote management, role-based access privileges, and RADIUS and TACACS+ authentication and authorization.
Key Features
Ease of Use
• 19-inch rack frame, 1U high
• Front-mounted connectors for quick and easy installation
• LED indicators show Power, Link, and Activity status
• Modular design for configuration flexibility
• RMON statistics, including network utilization, packet count, and CRC errors
• Text-based command-line interface (CLI) available through RS232 serial port and remotely over secure SSH
connections
• Field-upgradeable software
• Compatible with all major manufacturers’ monitoring devices including IPSs, firewalls, protocol analyzers, probes,
and intrusion detection systems
Passive, Secure Technology
• Passive access at up to 1 Gbps
• In-line links do not interfere with the data stream or introduce a point of failure
• Optimized and tested for 10, 100, and 1000 Mbps copper and 1 Gpbs fiber networks
• Universal AC or -48VDC hot-swappable, redundant power supplies to maximize uptime
• In-line links default to open under a complete power-fail condition, ensuring network availability
• FCC, CE, VCCI, C-Tick, and WEEE certified
• Fully RoHS compliant