SG-9100 Hardware Guide R1

You might also like

Download as pdf or txt
Download as pdf or txt
You are on page 1of 53

Service Gateway

SG-9100

Hardware Guide
Important Notice
Allot Communications Ltd. and any of its affiliates and subsidiaries ("Allot") is not a party to the purchase or other agreement under
which the Allot product (hardware and/or software) was purchased, and will not be liable for any damages of any kind whatsoever
caused to the end users using this manual, regardless of the form of action, whether in contract, tort (including negligence), strict
liability or otherwise.
SPECIFICATIONS AND INFORMATION CONTAINED IN THIS MANUAL ARE FURNISHED FOR INFORMATIONAL USE
ONLY, AND ARE SUBJECT TO CHANGE AT ANY TIME WITHOUT NOTICE, AND SHOULD NOT BE CONSTRUED AS A
COMMITMENT BY ALLOT. ALLOT ASSUMES NO RESPONSIBILITY OR LIABILITY FOR ANY ERRORS OR
INACCURACIES THAT MAY APPEAR IN THIS MANUAL, INCLUDING THE PRODUCTS AND SOFTWARE DESCRIBED
IN IT.
Please read the End User License Agreement and Warranty Certificate provided with this product before using the product. Please
note that using the products indicates that you accept the terms of the End User License Agreement and Warranty Certificate.
WITHOUT DEROGATING IN ANY WAY FROM THE AFORESAID, ALLOT WILL NOT BE LIABLE FOR ANY SPECIAL,
EXEMPLARY, INDIRECT, INCIDENTAL OR CONSEQUENTIAL DAMAGES OF ANY KIND, REGARDLESS OF THE FORM
OF ACTION WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY OR OTHERWISE,
INCLUDING, BUT NOT LIMITED TO, LOSS OF REVENUE OR ANTICIPATED PROFITS, OR LOST BUSINESS, EVEN IF
ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Copyright
Copyright © 1997-2017 Allot Communications. All rights reserved. No part of this document may be reproduced, photocopied, stored
on a retrieval system, transmitted, or translated into any other language without a written permission and specific authorization from
Allot Communications Ltd.

Trademarks
Products and corporate names appearing in this manual may or may not be registered trademarks or copyrights of their respective
companies, and are used only for identification or explanation and to the owners' benefit, without intent to infringe.
Allot and the Allot Communications logo are registered trademarks of Allot Communications Ltd.
NOTE: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the
FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated
in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used
in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a
residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own
expense.

Changes or modifications not expressly approved by Allot Communication Ltd. could void the user's authority to operate
the equipment.

Allot SG-9100 Hardware Guide v


Version History
Each document has a version and a build number. You can tell the exact version and build
of this document by checking the table below. Details of this document version are
contained in the top row of the table below.
Document updates are released in electronic form from time to time and the most up to date
version of this document will always be found on Allot’s online Knowledge Base. To check
for more recent versions, login to the support area www.allot.com/support.html and from
the knowledgebase tab, enter the title of this document into the search field.

Doc Document Build Date Summary of


Release Changes

1 b3 18/05/17

1 b2 27/04/17

1 b1 24/01/17

vi Allot SG-9100 Hardware Guide


TABLE OF CONTENTS
Version History ............................................................................................................................. vi
TABLE OF CONTENTS ............................................................................................................ vii

CHAPTER 1: INTRODUCING THE SG-9100 ................................................... 1-1


Planning Your Deployment ....................................................................................................... 1-2
Packing List................................................................................................................................. 1-2
Cabling and Transceivers .......................................................................................................... 1-3
Cable types................................................................................................................................ 1-3
Transceivers .............................................................................................................................. 1-4
Connectors ................................................................................................................................ 1-4

CHAPTER 2: CONNECTORS AND LEDS ....................................................... 2-1


Packing List .............................................................................................................................. 2-1
Front Panel ................................................................................................................................ 2-2
Rear Panel ................................................................................................................................. 2-3

CHAPTER 3: BYPASS ..................................................................................... 3-1


External Bypass Unit.................................................................................................................. 3-1
HD 8 Fiber or Copper Bypass Unit........................................................................................... 3-3
HD 16 Fiber Bypass Unit.......................................................................................................... 3-4
External Bypass Control Cabling ............................................................................................. 3-6

CHAPTER 4: POWER CONNECTIVITY PLANNING....................................... 4-1


Power Source Requirements ..................................................................................................... 4-1
Electrical Grounding Requirements .......................................................................................... 4-2
Cable and Cord Specifications .................................................................................................. 4-2
AC Power Cord Specifications ................................................................................................. 4-2

CHAPTER 5: PREPARATION AND INSTALLATION ..................................... 5-1


Unpacking the SG-9100 ............................................................................................................. 5-1
Mounting the SG-9100 ............................................................................................................... 5-2
Space and Airflow Requirements............................................................................................. 5-2
Rack Mounting the Service Gateway ..................................................................................... 5-2

CHAPTER 6: DEPLOYING THE SG-9100 ....................................................... 6-1


Connecting Network Traffic ...................................................................................................... 6-1
Configuring Active Redundancy ............................................................................................... 6-2
Physical Connections ................................................................................................................ 6-3
Configuration ............................................................................................................................ 6-4
Powering Up the SG-9100 .......................................................................................................... 6-5
Initial Configuration .................................................................................................................. 6-6
Accessing the SG-9100 via Physical Ports ............................................................................... 6-6
Allot SG-9100 Hardware Guide vii
Accessing the SG-9100 via the TSM ........................................................................................ 6-6

CHAPTER 7: TECHNICAL INFORMATION .................................................... 7-1


Technical Specifications ............................................................................................................. 7-1
Environmental Specifications .................................................................................................... 7-3
Safety Certifications ................................................................................................................... 7-3
Environmental Certifications .................................................................................................... 7-3
Bypass Physical Specifications .................................................................................................. 7-3
Laser Safety Requirements ........................................................................................................ 7-4
Laser Classification................................................................................................................... 7-4
Laser Information ..................................................................................................................... 7-4
Laser Safety Statutory Warning ................................................................................................ 7-4
Training for Laser Safety .......................................................................................................... 7-4
Laser Device Operating Precautions......................................................................................... 7-4

viii Allot SG-9100 Hardware Guide


TABLE OF FIGURES

Figure 1-1 – Full Duplex LC Connector ...................................................................................... 1-4


Figure 2-1 – SG-9100 ................................................................................................................... 2-1
Figure 2-2 – SG-9100 Front Panel Buttons and LEDs ................................................................. 2-2
Figure 2-3 – SG-9100 Rear Panel ................................................................................................ 2-3
Figure 2-4 – NETWORK Links ................................................................................................... 2-3
Figure 2-4 – Fiber Cable Release Tool......................................................................................... 2-4
Figure 2-6 – SG 9100 AC Power Feed ......................................................................................... 2-5
Figure 3-1: HD 8 Fiber Bypass Unit ............................................................................................ 3-3
Figure 3-2: HD 16 Fiber Bypass Unit .......................................................................................... 3-4
Figure 3-3: Allot USB Bypass Cable .......................................................................................... 3-6
Figure 4-1: IEC-320 C13 to C14 Power Cord ............................................................................. 4-2
Figure 6-1 – Active Redundancy Links........................................................................................ 6-3
Figure 6-2 – SG-9100 Interfaces .................................................................................................. 6-3
Figure 6-3 – System Information ................................................................................................. 6-7
Figure 6-4 – TSM Settings ........................................................................................................... 6-7
Figure 6-5: TSM System Status Screen........................................................................................ 6-9
Figure 6-6: Remote Console......................................................................................................... 6-9

Allot SG-9100 Hardware Guide ix


Chapter 1: Introducing the SG-9100
Allot Service Gateway 9100 provides a powerful service delivery platform in an Intel-
based appliance, designed especially for cloud data center, enterprise, and ISP networks.
Its small-footprint is equipped with the same rich features and functions as our chassis-
based Allot Service Gateway, enabling you to roll out Security as a Service as well as
other revenue-generating services rapidly and cost-effectively, while you lower your
total cost of ownership and accelerate ROI.
 Powerful and cost-efficient service delivery platform
 Real-time Layer-7 application visibility, policy enforcement and charging
 Real-time visibility of encrypted traffic
 Supporting turnkey Security as a Service solutions
 Deployment and management across any access
 Easy installation and pay-as-you-grow scalability

Allot SG-9100 Hardware Guide 1-1


Chapter 1: Introducing the SG-9100

Planning Your Deployment


This equipment is intended to be installed by trained service personnel and in
environments where access by unauthorized personnel is restricted (Restricted Access
Location). The SG-9100 complies with the requirements for operator access.
Please note that the power resources used by the SG-9100 must be planned and installed
by a qualified electrical engineer only. Before installing or using the SG-9100, please
read all Safety Information carefully to avoid electrical hazards that can result in injury
or loss of equipment.
In addition, be aware that all network and power connections to the SG-9100 are from
the rear of the device so there must be adequate space behind the unit for safe access at
all times.

Packing List
Verify that the following items are included with the SG-9100:
SG-9100 System
Pair of AC power IEC-320 C13/C14 cables
One or Two Bypass units (Multi-Mode, Single Mode or Copper)
and appropriate cables to connect to the SG-9100
Up to 12 SFP/SFP+ Optical Transceivers (either SR, LR, SX or
LX5 Fiber) or Copper transceivers.
NOTE All Transceivers MUST be provided by Allot specifically for the
SG-9100. Any other Transceivers will not function in the SG-
9100.

BYPASS USB Control Cable(s) – number depends on number of


BYPASS units ordered (Allot P/N C245055)
Ethernet cable straight CAT6 RJ45_2_RJ45 3m for management
(Allot P/N C243010)
NOTE Cables to connect from the Bypass Unit to the Network are not
provided by Allot.

1-2 Allot SG-9100 Hardware Guide


Chapter 1: Introducing the SG-9100

Cabling and Transceivers


Cable types
COPPER CABLE
CONNECTIONS MM CABLE TYPE SM CABLE TYPE
TYPE
Ethernet (CAT 6) Ethernet (CAT 6) Ethernet (CAT 6)
(Allot P/N C243010 (Allot P/N C243010 (Allot P/N C243010
included) Included) or Fiber. Included) or Fiber.
Management
Dual RJ-45 Dual RJ-45 Dual RJ-45 Connectors
Port
Connectors Connectors

8P Bypass 8P Bypass 8P Bypass:


8 x Standard 62.5/125 8 x 9/125 SM fiber 8 x CABLE STR CAT6
MM fiber optic cross optic cross cable. 2x RJ45 1M
cable. (Allot P/N C411029 (Allot PN
(Allot P/N C411055 included). C411019 included).
included). Full Duplex LC to Dual RJ45 Connectors.
Full Duplex LC to Full Duplex LC
Full Duplex LC Connectors
Connectors
Between Bypass
and System
16P Bypass: 16P Bypass:
16 x Standard 16 x 9/125 SM fiber
62.5/125 MM fiber optic cross cable.
optic cross cable (Allot P/N C411029
(Allot P/N C411030 included).
included). Full Duplex LC to
Full Duplex LC to Full Duplex LC
Full Duplex LC Connectors
Connectors
Service USB Bypass Cable USB Bypass Cable USB Bypass Cable Allot
Gateway’s Allot P/N C245055 Allot P/N C245055 P/N C245055
Bypass (Included). (Included). (Included).
Connector to USB to DB-9 USB to DB-9 USB to DB-9
Bypass Unit Connectors. Connectors. Connectors.
Standard 62.5/125 or Standard 9/125 SM STR CAT6 Copper
50/125 MM fiber fiber optic cross cabling (Not Included).
Between Bypass optic cross cable cable Dual RJ45 Connectors
Unit and (Not Included). (Not Included).
Network Full Duplex LC to Full Duplex LC to
Full Duplex LC Full Duplex LC
Connectors. Connectors

Allot SG-9100 Hardware Guide 1-3


Chapter 1: Introducing the SG-9100

Transceivers
NOTE All Transceivers MUST be provided by Allot specifically for the
SG-9100. Any other Transceivers will not function in the SG-
9100.

The following transceivers (available from Allot) may be used with the SG-9100:

10G Fiber
 SG-TRNSCV-10G-SR
 SG-TRNSCV-10G-LR

1G Fiber (Dual Rate)


 SG-TRNSCV-1G-SX-A
 SG-TRNSCV-1G-LX5-A

1G Copper (10/100/1000)
 SG-TRNSCV-1G-COP-A
NOTE 1G Copper interfaces may only use the 8 Port Bypass Unit if
available, limiting the number of ports which may be used on
the SG-9100.

Connectors
The SG-9100’s 8-port and 16-port Fiber Bypass Units use Multi Mode fiber (MM) or
Single Mode fiber (SM) dual LC Connectors. The 24-port Fiber Bypass unit uses MTP
Fiber connectors. The 8-port Copper Bypass Unit uses dual RJ45 connectors.

Figure 1-1 – Full Duplex LC Connector


NOTE Color and appearance of actual connectors may vary.

1-4 Allot SG-9100 Hardware Guide


Chapter 2: Connectors and LEDs
Allot Service Gateway 9100 (SG-9100) provides a high performance service delivery
platform with rich functionality in an efficient, small-footprint appliance. With high-
density 10 Gigabit Ethernet connectivity and 140 Gbps of throughput, the platform
allows enterprises, cloud data centers and ISP networks to satisfy the ever-growing
demand for Internet bandwidth and network-based services in cost-efficient manner.

Figure 2-1 – SG-9100

Packing List
Verify that the following items are included with the SG-9100:
SG-9100 System. The SG-9100 is provided with the Allot Service
Gateway software pre-installed.
Pair of AC power IEC-320 C13/C14 cables
One or Two Bypass units (Multi-Mode, Single Mode or Copper)
and appropriate cables to connect to the SG-9100
Up to 12 SFP/SFP+ Optical Transceivers (either SR, LR, SX or
LX5 Fiber) or Copper transceivers.
NOTE All Transceivers MUST be provided by Allot specifically for the
SG-9100. Any other Transceivers will not function in the SG-
9100.

BYPASS USB Control Cable(s) – number depends on number of


BYPASS units ordered (Allot P/N C245055)
Ethernet cable straight CAT6 RJ45_2_RJ45 3m for management
(Allot P/N C243010)
NOTE Cables to connect from the Bypass Unit to the Network are not
provided by Allot.

Allot SG-9100 Hardware Guide 2-1


Chapter 2: Connectors and LEDs

Front Panel
Front Panel Buttons and LEDS Description
System Health Power Button
LED and LED System ID
Button
Network Status
LED

Figure 2-2 – SG-9100 Front Panel Buttons and LEDs

DESCRIPTION STATUS

Network Status LED Flashing = Network is Connected and Active


Off = The System is Disconnected

System Health LED Solid Amber = System Fault


Flashing Amber = The SG is Initializing
Off = The System is working normally

Power LED Solid green = Power is On


Off = Power is Off
Off = No network activity
Front Panel Connectors
There are no connectors on the front panel of the SG-9100.
NOTE Since the SG-9100 has only 2 USB ports on the read of the
server, these ports are designated for bypass unit connectivity
only. They cannot be used for anything else (such as
keyboard/mouse), even if there is no bypass unit being
connected to any of the ports. This means that the initial IP
configurations will have to be done using the TSM. After that
everything can be done using SSH.

2-2 Allot SG-9100 Hardware Guide


Chapter 2: Connectors and LEDs

Rear Panel M2
M1
Fiber Cable
Release Tool
P3 (L9-L10) P4 (L11-L12)

P1 (L1-L4) P2 (L5-L8)
TSM
POWER MONITOR PORT
SUPPLIES PORT BYPASS

Figure 2-3 – SG-9100 Rear Panel

Rear Panel Connectors


 10G/1G NETWORK LINKS (P1 – P4): There are 4 x 1G/10G Ethernet
network interfaces on each of the lower 2 PCIe cards (P1 and P2) and 2 x
1G/10G Ethernet network interfaces on each of the upper two PCIe cards (P3 and
P4), used for Network traffic, which can support 1G/10G SFP+ fiber or 1G RJ45
Copper interfaces.
NOTE The two upper PCIe cards (P3 and P4) have transceivers
loaded in upside down.

L1 L2 L3 L4

Figure 2-4 – NETWORK Links


Each PCIe card has four ports which may be used for either 1G/10G fiber or 1G
copper network or steering interfaces. On all ports the TX connection is on the
left and the RX connection is on the right. In the NetXplorer, SG-9100 ports are
labeled L1 through L12.
Different kinds of transceivers (Copper, 1G Fiber and 10G Fiber) may be used on
a single NIC card.
When removing a transceiver use the Fiber Cable Release Tool, located on the
rear panel of the unit. Slide the tool into the slot at the bottom of the transceiver
and slowly draw the unit out of the chassis.

Allot SG-9100 Hardware Guide 2-3


Chapter 2: Connectors and LEDs

Figure 2-5 – Fiber Cable Release Tool


LINK/ACT LEDs for each connection are located together to the left of the
interfaces.
NOTE 1G Copper interfaces may only use the 8 Port Bypass Unit,
limiting the number of ports which may be used on the SG-
9100 with Copper.

Ports should be connected from right to left on each card. For


example, on Card 1 L4 should be connected first, followed by
L3, L2 and finally L1.

 M1 & M2 are two RJ-45 connectors (1G Copper) which may be used for system
monitoring and maintenance. M2 acts as a redundant port for M1.
 Rear USB Ports should only be used to connect the SG-9100 to the Bypass unit
ONLY.
 TSM Port is used to connect the TSM system to the Network. For more
information see Accessing the SG-9100 via the TSM on page 6-6.
CAUTION Each Rear USB connectors should ONLY be connected to a
single Allot Bypass Units. The bypass cable should only be
connected/disconnected when the system is powered down.

Power Supply
The SG-9100 contains two built in power supply modules and a dual line feed for
Redundancy purposes. Each line feed drives one power supply. It is possible for the unit
to operate normally with only one of the two power supplies active.
NOTE The AC power supply automatically adapts to voltages
between 100 V and 240 V, 50/60 Hz.

2-4 Allot SG-9100 Hardware Guide


Chapter 2: Connectors and LEDs

Fault LED

Power Output
LED

Power Input
LED

Figure 2-6 – SG 9100 AC Power Feed


Power Supply LEDs

DESCRIPTION STATUS

Power Input (AC) LED Solid Green = The Power Supply is connected to the AC
Power Source
Off = The Power Supply is disconnected from the AC
Power Source

Power Output (DC) Solid Green = The SG-9100 is On or the Power Supply is
LED working Normally.
Blinking Green = The Power Supply is on Redundancy
Mode.
Off = The SG-9100 is Off or the Power Supply is
malfunctioning.

Fault LED Solid Amber = The Power Supply has failed


Off = The Power Supply is working normally

Allot SG-9100 Hardware Guide 2-5


Chapter 3: Bypass

External Bypass Unit


The SG-9100 operates with an external Bypass Unit. The Bypass Unit is a mission-
critical subsystem designed to ensure network connectivity at all times. The Bypass
mechanism provides "connectivity insurance" in the event of a subsystems failure. Each
Allot Bypass unit features low insertion loss (< 1dB) in both Normal mode and Bypass
mode and fast switching time (< 10mSec) between modes. A Service Gateway unit
Network ports must be connected to the appropriate External Bypass Unit. This is to
ensure continuous service in the event of failure. The Service Gateway should be
ordered with appropriate Bypass Units considering total number of ports that need
bypass protection and Fiber interface Type (Multi-Mode / Single-Mode).

A single HD 16 Fiber Bypass unit supports up to 8 links (16 ports) and an HD 8 Fiber
Bypass Unit supports up to 4 links (8 ports). In terms of Management, all Bypass units
are connected to the SG-9100 via a single USB cable.
NOTE If you have mix of Single-Mode and Multi-Mode optical
interfaces in a single SG-9100 system, then you will need to
split them into groups and connect them to appropriate
Bypass according to interface type. i.e. all Single-Mode ports
(LR) should be connected to Single-Mode Bypass SG-BP-EXT-
16P-SM-A or SG-BP-EXT-8P-SM-A, All Multi-Mode ports (SR)
should be connected to Multi-Mode Bypass SG-BP-EXT-16P-
MM-A or SG-BP-EXT-8P-MM-A.
ATTENTION Ports that are used for steering should not be routed through
Bypass.
The following bypass units are supported by the SG-9100:

Allot SG-9100 Hardware Guide 3-1


Chapter 3: Bypass

PRODUCT NUMBER DESCRIPTION

SG-BP-EXT-16P-MM-A HD 16 Multimode Fiber Bypass

SG-BP-EXT-16P-SM-A HD 16 Single-mode Fiber Bypass

SG-BP-EXT-8P-MM-A HD 8 Multimode Fiber Bypass

SG-BP-EXT-8P-MM-50UM-A HD 8 MM Fiber Bypass, 50/125 um

SG-BP-EXT-8P-SM-A HD 8 Single-mode Fiber Bypass

SG-BP-EXT-8P-COP-A HD 8 Copper Bypass

3-2 Allot SG-9100 Hardware Guide


Chapter 3: Bypass

HD 8 Fiber or Copper Bypass Unit


The HD 8 Bypass Unit (previously known as the Allot Multi-Port Bypass) can work in
conjunction with all SG-9100 Configuration and is available with Fiber or Copper
interfaces.

Links 1-4 to Mode LED Secondary


Network

Links 1-4 to the Primary


SG-9500

Figure 3-1: HD 8 Fiber Bypass Unit


NOTE Use Multi-Mode 62.5μmor Single-Mode 9μm fiber optic cables
CROSS with LC-LC Duplex connectors (not provided) to
connect ports of the switch and the router.

The HD 8 Bypass Unit includes connectors for up to 4 links on the SG-9100. In


addition, the HD 8 Bypass Unit includes two D-type 9-pin connectors (DB-9) for
connection to the SG-9100 via special DB-9/USB cables (available from Allot).
An HD 8 Bypass Unit supports up to 8 ports (4 links).
The HD 8 Bypass Unit is a passive optical device with no need for external power
connection. It is powered by the SG-9100 as long as it is Active. It will move
automatically to bypass mode when SG-9100 is powered off, or by being forced to
bypass mode as protective action is taken. There is no way to have a single link go into
bypass independently. When moving to Bypass mode all links are switched into
Bypass.
NOTE 1G Copper interfaces must be enabled via CLI command. See
Configuring the SG-9100 for more information.

1G Copper interfaces may only use the 8 Port Bypass Unit is


available, limiting the number of ports which may be used on
the SG-9100.

HD 8 Bypass Unit LEDS Description


The following indicators can be used to identify the operation of the blade:
 Mode LED is STEADY GREEN when the Bypass Unit is operating normally
and OFF when the Link is in Bypass mode.

Allot SG-9100 Hardware Guide 3-3


Chapter 3: Bypass

HD 8 Bypass Unit Front Panel Connectors


 Link 1-4 connect to the network (on the left) and the SG-9100 (on the right).
 Primary connects to the USB port on the SG-9100
 Secondary is not in use.

HD 16 Fiber Bypass Unit


The HD 16 Fiber Bypass Unit can work in conjunction with all SG-9100
Configurations.

Links to Network Mode LED Secondary

Links to SG-9500 Primary

Figure 3-2: HD 16 Fiber Bypass Unit


NOTE Use Multi-Mode 50μm/62.5μmor Single-Mode 9μm fiber optic
cables CROSS with LC-LC Duplex connectors (not provided) to
connect ports of the switch and the router.

A single HD 16 Fiber Bypass unit supports up to 16 ports (8 links), for more links
additional units are required.
NOTE A single SG-9100 will only require 6 links.

In addition, the HD 16 Fiber Bypass Unit includes two D-type 9-pin connectors (DB-9)
for connection to the SG-9100 via special DB-9/USB cables (available from Allot).
The HD 16 Fiber Bypass Unit is a passive optical device with no need for external
power connection. It is powered by the SG-9100 as long as it is Active. It will move
automatically to bypass mode when SG-9100 is powered off, or by being forced to
bypass mode as protective action is taken. When moving to Bypass mode all links are
switched into Bypass. There is no way to have a single link go into bypass
independently.

HD 16 Fiber Bypass Unit LEDs Description


The following indicators can be used to identify the operation of the blade:

3-4 Allot SG-9100 Hardware Guide


Chapter 3: Bypass

 Mode LED is STEADY GREEN when the Bypass Unit is operating normally
and OFF when all Links are in Bypass mode.

HD 16 Fiber Bypass Unit Front Panel Connectors


 Network Ports 1-16 connect to your network. These ports are split into eight
blocks of four, each representing a link. Be sure to insert the Internal and
External connectors into the correct ports on the Bypass Unit. Internal is on the
left of each link and External is on the right. In addition please note that the in
each Duplex LC connector on the Bypass unit’s front panel the Tx connector is
the left LC connector and the Rx is the right LC connector.
 System Ports 1-16 connect to the SG-9100. Be sure to insert the Internal and
External connectors into the correct ports on the Bypass Unit. Internal is on the
left of each link and External is on the right. In addition please note that the in
each Duplex LC connector on the Bypass unit’s front panel the Tx connector is
the left LC connector and the Rx is the right LC connector.
 Primary connects to the USB port on the SG-9100
 Secondary is not in use.

Allot SG-9100 Hardware Guide 3-5


Chapter 3: Bypass

External Bypass Control Cabling


The HD 8 and HD 16 External Bypass Units are connected to the SG-9100 by a Single
USB Unit Cable (1:1) connected to the Primary port on the Bypass Unit and one of the
two USB ports on the rear of the SG-9100.
WARNING To avoid damage, use ONLY the cable provided with the
Bypass Unit for connection to the SG-9100.

Figure 3-3: Allot USB Bypass Cable

3-6 Allot SG-9100 Hardware Guide


Chapter 4: Power Connectivity Planning
This chapter is to be used in planning the power requirements and resources for the SG-
9100 system. Topics which are covered include:
 AC Power Source Requirements
 AC Cabling Requirements and Overcurrent Protection

Power Source Requirements


Installation of this equipment must comply with local and regional electrical regulations
governing the installation of information technology equipment by licensed electricians.
This equipment is designed to operate in installations covered by NFPA 70, 1999
Edition (National Electric Code) and NFPA-75, 1992 (code for Protection of Electronic
Computer/Data Processing Equipment).
WARNING To reduce the risk of personal injury, fire, or damage to the
equipment, do not overload the AC supply branch circuit that
provides power to the rack. Consult the electrical authority
having jurisdiction over wiring and installation requirements of
your facility.
CAUTION Protect the server from power fluctuations and temporary
interruptions with a regulating uninterruptible power supply.
This device protects the hardware from damage caused by
power surges and voltage spikes and keeps the system in
operation during a power failure.

When installing more than one Service Gateway, you may need to use additional power
distribution devices to safely provide power to all devices. Observe the following
guidelines:
 Balance the power load between available AC supply branch circuits.
 Do not allow the overall system AC current load to exceed 80% of the branch
circuit AC current rating.
 Do not use common power outlet strips for this equipment.
 Provide a separate electrical circuit for the Service Gateway.

Allot SG-9100 Hardware Guide 4-1


Chapter 4: Power Connectivity Planning

Electrical Grounding Requirements


The server must be grounded properly for proper operation and safety. In the United
States, you must install the equipment in accordance with NFPA 70, 1999 Edition
(National Electric Code), Article 250, as well as any local and regional building codes.
In Canada, you must install the equipment in accordance with Canadian Standards
Association, CSA C22.1, Canadian Electrical Code. In all other countries, you must
install the equipment in accordance with any regional or national electrical wiring
codes, such as the International Electro technical Commission (IEC) Code 364, parts 1
through 7. Furthermore, you must be sure that all power distribution devices used in the
installation, such as branch wiring and receptacles, are listed or certified grounding-type
devices.
Because of the high ground-leakage currents associated with multiple servers connected
to the same power source, Allot recommends the use of a PDU that is either permanently
wired to the building’s branch circuit or includes a non detachable cord that is wired to
an industrial-style plug. NEMA locking-style plugs or those complying with IEC 60309
are considered suitable for this purpose. Using common power outlet strips for the server
is not recommended.

Cable and Cord Specifications


AC Power Cord Specifications
Allot provides a set of 2 x IEC-320 C13 to C14 Power Cord Black 2.5m 10A

Figure 4-1: IEC-320 C13 to C14 Power Cord

All power cords used must meet the following specifications:


 Use copper conductors only.
 The cord must have the appropriate cross-sectional dimension for the current
rating.

4-2 Allot SG-9100 Hardware Guide


Chapter 4: Power Connectivity Planning

 The cord must have insulation material suitable


for at least 75 °C
 The cord must have local safety approvals, and preferable additional approvals
such as UL, CSA, TUV or VDE.
 The flexible cord and attachment plug cap length must not exceed 4.5 m (15
ft.).
 For a cord set assembly, the cords must be protected against physical damage
and arranged in appropriate cable ducts.
 Connector:
 Wall outlet end - Cords must be terminated in an industrial grounding-
type male plug designed for use in your region.
 Connector unit end - The connectors that plug into the AC receptacle on
the unit must be an approved IEC 320, C13 type female connector.
Chapter 5: Preparation and Installation
This chapter provides information on unpacking and installing the SG-9100.
DANGER Servicing and installation of this product is to be performed by
trained service personnel only.
DANGER L'installation et l'entretien de ce produit doivent être effectués
uniquement par des techniciens d'entretien dument formés.

Unpacking the SG-9100


ATTENTION To minimize the risk of physical damage to the equipment,
ensure that the floor space is free of other equipment and/or
commodities.

Follow these recommendations while unpacking:


 After the equipment arrives at the installation site, carefully inspect each carton
for signs of shipping damage. If the package is damaged, document the damage
with photographs and contact the transport carrier immediately.
 Remove all items from the box. If any items listed on the purchase order are
missing, notify Allot customer service immediately.
 Inspect the product for damage. If there is damage, notify Allot customer
service immediately.
 Save the box and packing material for possible future shipment.
 Keep tools and components off the floor and away from foot traffic.
 Clear the area of possible hazards, such as moist floors, ungrounded power
extension cables, and missing safety grounds.
 Keep the area around the Service Gateway free from dust and foreign
conductive material.

Allot SG-9100 Hardware Guide 5-1


Chapter 5: Preparation and Installation

SG-9100 shipping containers are designed to protect contents under normal shipping
conditions. Nevertheless, inspect each carton carefully for signs of damage that may
have occurred during transportation. If the container is damaged, document the damage
with photographs and contact the transport carrier immediately.
NOTE The Installation warranty is effective from the time the
shipment is received until the installation is complete.

Check all equipment and accessories against the shipping manifest. If any parts or
accessories are missing or defective contact the representative for replacement.

Mounting the SG-9100


Space and Airflow Requirements
To allow for servicing and adequate airflow, observe the following space and airflow
requirements when deciding where to install a rack:
 Leave a minimum clearance of 63.5 cm (25 in) in front of the rack.
 Leave a minimum clearance of 76.2 cm (30 in) behind the rack.
 Leave a minimum clearance of 121.9 cm (48 in) from the back of the rack to the
back of another rack or row of racks.

The SG-9100 draws in cool air through the front door and expel warm air through the
rear door. Therefore, the front and rear rack doors must be adequately ventilated to allow
ambient room air to enter the cabinet, and the rear door must be adequately ventilated to
allow the warm air to escape from the cabinet.
When vertical space in the rack is not filled by a server or rack component, the gaps
between the components cause changes in airflow through the rack and across the
servers. Cover all gaps with blanking panels to maintain proper airflow.

Rack Mounting the Service Gateway


WARNING To reduce the risk of personal injury or damage to the
equipment, be sure that:
The leveling jacks are extended to the floor.
The full weight of the rack rests on the leveling jacks.
The stabilizing feet are attached to the rack if it is a single-rack
installation.
The racks are coupled together in multiple-rack installations.

5-2 Allot SG-9100 Hardware Guide


Chapter 5: Preparation and Installation

Only one component is extended at a time. A rack may become


unstable if more than one component is extended for any
reason.
AVERTISSEMENT Pour limiter les risques de blessure ou de détérioration du
matériel, vérifiez les points suivants :

Les pieds de mise à niveau doivent être abaissés jusqu'au sol.

Les pieds de mise à niveau supportent tout le poids du rack.

Les pieds de stabilisation sont fixés au rack dans le cas d'une


configuration à un seul rack.

Les racks doivent être couplés, en cas d'installation de


plusieurs racks.

Un seul élément à la fois doit être extrait. La stabilité du rack


peut être compromise si vous retirez plusieurs composants,
pour quelque raison que ce soit.
CAUTION Always plan the rack installation so that the heaviest item is on
the bottom of the rack. Install the heaviest item first, and
continue to populate the rack from the bottom to the top.

Install the server into the rack.


Connect the power cord to the rear of the server.
WARNING To reduce the risk of electric shock, fire, or damage to the
equipment, do not plug telephone or telecommunications
connectors into RJ-45 connectors.
AVERTISSEMENT Pour limiter les risques d'électrocution, d'incendie ou de
détérioration du matériel, évitez de brancher des connecteurs
de téléphone ou de télécommunication aux connecteurs RJ-45.

Connect the power cord to the AC power source.


WARNING To reduce the risk of electric shock or damage to the
equipment:
Do not disable the power cord grounding plug. The grounding
plug is an important safety feature.
Plug the power cord into a grounded (earthed) electrical outlet
that is easily accessible at all times.
Unplug the power cord from the power supply to disconnect
power to the equipment.
Do not route the power cord where it can be walked on or
pinched by items placed against it. Pay particular attention to
the plug, electrical outlet, and the point where the cord extends
from the server.
Chapter 5: Preparation and Installation

AVERTISSEMENT Pour limiter les risques d'électrocution ou de détérioration du


matériel :

Ne désactivez pas la prise de terre du cordon d'alimentation. Il


s'agit d'une protection importante.

Branchez le cordon d'alimentation dans une prise électrique


mise à la terre et facilement accessible à tout moment.

Débranchez le cordon d'alimentation du bloc d'alimentation


pour déconnecter le matériel de toute source d'alimentation.

Acheminez le cordon d'alimentation en dehors des lieux de


passage et loin de tout objet pouvant le comprimer ou le
pincer. Faites particulièrement attention à la fiche, à la prise
secteur et au point de sortie du cordon sur le serveur.

5-4 Allot SG-9100 Hardware Guide


Chapter 6: Deploying the SG-9100

Connecting Network Traffic


The SG-9100 operates with an external Bypass Units. The Bypass Unit is a mission-
critical subsystem designed to ensure network connectivity at all times. The Bypass
mechanism provides ‘connectivity insurance’ in the event of a subsystems failure.
Bypass Units are connected to the SG-9100 by a series of leads and cables.
Use the following procedure when connecting to the Network via the Bypass Unit.
1. Before installation make sure there is traffic flow in the location where you are
about to install the In-line platform.
2. Connect the bypass to the Network, connecting to the Router and Switch via the
Network ports for each Link.
3. Connect the In-line platform to the bypass with ethernet cables using the System
ports for each Link. Connect the Bypass management cable to the Primary port
on the Bypass and the USB port on the SG-9100. Keep the In-line platform
turned off while connecting the cables.
NOTE When the In-line platform is powered on it validates that it is
connected to a bypass. If you attempt to power on an In-line
platform that is not connected to a Bypass, boot will fail.

4. Make sure all cables are secure.


5. Power up the In-line platform and verify the traffic flow.
See Chapter 3: Bypass on page 3-1 for details concerning connecting HD 8 and HD 16
Bypass units to the SG-9100 and the network.
CAUTION The bypass cable should only be connected/disconnected
when the system is powered down.

Allot SG-9100 Hardware Guide 6-1


Chapter 6: Deploying the SG-9100

Configuring Active Redundancy


Active redundancy is recommended for network topologies where at least two network
links are active in load-balancing mode. It requires two Service Gateway installations
and typically, no bypass units.
In the Active Redundancy configuration, a Service Gateway duplicates each link’s
traffic to the other Service Gateway. Both Service Gateways are active.
In the event that one of the links fails due to router, switch or line malfunction, the
network redundancy mechanism (for example, spanning tree) will ensure that traffic is
routed or switched via the other link and managed by the second Service Gateway.
Since both Service Gateways maintain a constant view of the two links, there will be no
loss of flow's state and other information required for correct shaping and application
classification.
In the Active Redundancy configuration, the two Service Gateways should share the
same policy configuration.
NOTE Users should be aware that a Service Gateway working in Active
Redundancy mode duplicates all traffic passing through it.
Therefore, the overall throughput of each Service Gateway in Active
Redundancy will be half of the throughput enabled.

6-2 Allot SG-9100 Hardware Guide


Chapter 6: Deploying the SG-9100

Physical Connections
L1 and L2 on each NIC card are used to pass actual traffic – these interfaces will be
used to connect the Service Gateway to the corresponding switches or routers.
L3 and L4 are used to duplicate traffic and pass it to the second Service Gateway so
must be connected to L3 and L4 on the same number NIC card being used by the
second Service Gateway. Traffic that is passed between Service Gateways is only used
for monitoring and classification purposes.
All other links work in the same way, with L1 and L2 on a NIC card passing actual
traffic and L3 and L4 duplicating the traffic and so on.
NOTE If the Service Gateway Active Redundancy mechanism is
implemented a bypass unit should not be used. This ensures that
the network is made aware of any failure and is able to smoothly
transfer traffic to the secondary link.

Cloned to Second
SG-9100

L1 L2 L3 L4

To Network

Figure 6-1 – Active Redundancy Links


On the SG-9100, the following port configuration is used for Active Configuration:

L9-L10 L11-L12
Network Cloned

L1-L2 L3-L4 L5-L6 L7-L8


Network Cloned Network Cloned

Figure 6-2 – SG-9100 Interfaces


Chapter 6: Deploying the SG-9100

Configuration
Active redundancy can be configured on the Service Gateway either via the NetXplorer
GUI or via AOS CLI.

Via NetXplorer GUI


To configure Active Redundancy:
Log into the NetXplorer
Select the Service Gateway you wish to configure in the
Navigation Pane.
Right-click the Service Gateway and select Configuration from
the drop down menu.

OR

Click the Configuration button in the Toolbar.


Open the Networking tab and set the Redundancy Mode to
Active.
Confirm that the Enable Bypass Unit checkbox is not selected.
Click Save. The system will reboot.
After rebooting, you can view the changes from the Configuration tab.
For more information concerning Service Gateway configuration via NetXplorer, see
the NetXplorer Operation Guide.

Via AOS CLI


To configure Active Redundancy:
Log into the Service Gateway and enter the following commands:

To disable the bypass unit:


go config network -bypass_unit disable

To set redundancy mode:


go config network -redund_mode active
NOTE There is no need to change the port usage settings after running the
previous command for enabling active-redundancy the port usage
for the cloned ports will be set automatically.

go config network -redund_mode standalone


6-4 Allot SG-9100 Hardware Guide
Chapter 6: Deploying the SG-9100

To view redundancy mode:


go config view network

To view NIC settings:


go config view nic

Powering Up the SG-9100


NOTE It is recommended to connect the two power line feeds to
separate power sources to have full power redundancy.

Press the Power On/Standby button. The Power LED will flash
green during the boot up process and then become steady green
when the system is ready.
During the initial boot it is possible to modify the server
configuration ROM default settings, press the F9 key in the POST
screen to enter the UEFI System Utilities screen. By default, the
System Utilities menus are in the English language.
Chapter 6: Deploying the SG-9100

Initial Configuration
Accessing the SG-9100 via Physical Ports
An external monitor may be connected to the SG-9100 via the MONITOR port on the
rear of the appliance.

Accessing the SG-9100 via the TSM


The ThinkServer System Manager (TSM) is provided with every SG-9100 appliance
that is shipped from Allot.
The module enables an administrator to connect remotely to the SG-9100 as if
connecting locally via a console connection.
NOTE Since the SG-9100 has only 2 USB ports on the read of the
server, these ports are designated for bypass unit connectivity
only. They cannot be used for anything else (such as
keyboard/mouse), even if there is no bypass unit being
connected to any of the ports. This means that the initial IP
configurations will have to be done using the TSM. After that
everything can be done using SSH.

Configuring TSM Network Settings


The default details of the TSM are as follows:
 Default User Name: lenovo
 Default Password: len0vO (where the first 0 is not “o” but “zero” and the
last O is a capital letter.)
To configure the network settings of the TSM, follow the steps below:

6-6 Allot SG-9100 Hardware Guide


Chapter 6: Deploying the SG-9100

Connect an external monitor via the monitor and a


keyboard/mouse via the rear USB ports.
Turn on the SG-9100. Press F1 as soon as you see the Lenovo logo
screen.
On the following screen select TSM Settings

Figure 6-3 – System Information


On System Configuration screen select TSM Network Settings.

Figure 6-4 – TSM Settings


Chapter 6: Deploying the SG-9100

Define network parameters for the TSM by entering relevant


values for IP Address, Subnet mask and Gateway IP.
Press F10 to save network settings and reset. Wait while TSM
resets.
After TSM network parameters are set and TSM management port
is connected to a network, the rear USB ports may be used for
Bypass management only and the system may be controlled
remotely via web interface.
Go to the PC that you will be accessing TSM from remotely and
open the Java Control Panel (Start > Control Panel > Java).
Move to the Security tab.
Click Edit Site List.

The Exception Site List appears.

Click Add and type in the SG-9100 URL, as follows:


http://<IP OF SG>
Click OK to add the SG-9100 to the allowed hosts list.
Open a web browser. In the address field, type, type the IP address
or host name of the TSM to which you want to connect.
Enter User ID and Password
You will see the TSM User Interface, with the default “System
Status” in view which provides important information regarding
system health such as temperature and power levels, as seen
below:

6-8 Allot SG-9100 Hardware Guide


Chapter 6: Deploying the SG-9100

Figure 6-5: TSM System Status Screen


Click on the arrow on the right of the screen to access the menu
options if desired.
Click the Launch button to open the Remote Console opens where
you can log in to the Allot CLI for device configuration.

Figure 6-6: Remote Console


Configuring the SG-9100
Chapter 6: Deploying the SG-9100

After entering the Remote Console, enter sysadmin for the login
and sysadmin for the password.
Use the go config ips command to configure the IP address,
gateway IP, DNS and NTP servers for the SG-9100.
Command: go config ips
Usage: go config ips <-OPTION> <VALUE>...
Options:
-h Hostname set host name of NE
-d Domain set domain name of NE
-g <type:ip> set gateway IP address
-dns <dns1:dns2>|none set DNS IP addresses
-ts <ntp1:ntp2:ntp3>|none set NTP server IP addresses
-ip <type:ip:mask[:vlan]> set IP/netmask/VLAN ID

Examples:

To set the IP address of the SG-9100:


sysadmin@host-prc:~#: go config ips -ip <SG IP ADDRESS>:<MASK>

To set the gateway IP:


sysadmin@host-prc:~$ go config ips -g <GATEWAY IP ADDRESS>

To set the DNS server:


sysadmin@host-prc:~$ go config ips -dns <DNS IP ADDRESS>

To set the NTP server:


sysadmin@host-prc:~$ go config ips -ts <NTP IP ADDRESS>
Working with 1G Copper Interfaces
The use of 1G Copper transceivers must be enabled or disabled via CLI. The 1G
interfaces must be set to auto negotiation. In addition Copper interfaces may only use
the 8 Port Bypass units, restricting the number of ports that may be used on the SG-
9100.

To enable 1G Copper interfaces:

6-10 Allot SG-9100 Hardware Guide


Chapter 6: Deploying the SG-9100

After logging into the SG-9100, enter the following CLI


command:
copperPortsCfg.sh -c enable
Reboot the SG-9100 by entering the following command:
ac_reboot
After the SG-9100 has rebooted, configure the 1G Copper ports as
auto/auto using the following command:
go config nic <nic's label>:auto:auto
For example, go config nic P1.L1:auto:auto
Chapter 6: Deploying the SG-9100

To disable 1G Copper interfaces:


After logging into the SG-9100, enter the following CLI
command:
copperPortsCfg.sh -c disable
Reboot the SG-9100 by entering the following command:
ac_reboot
Connecting Management Traffic
The user is able to select one of two different pairs of 2 ports as the management ports.
There are two available pairs:
 M1 & M2 - 2 RJ45 copper 1G ports
 M3 & M4 - 2 SFP+ that can accommodate any type of SFP interface (1G/10G)
Pair selection is done by configuring one of the pair ports to act as the management
port. The other port in the pair is automatically set as the second port.
The management port is selected and configured using the following CLI command:
go config nic <Label>:<Mode>:<Speed>:<FailureAction>:<PortUsage>
Acceptable Labels are: M1, M2, M3 or M4
Acceptable values for Mode are: full
Acceptable values for Speed are: 10000
Acceptable values for Failure Action are: none
Acceptable values for Port Usage are: management
For example:
go config nic M3:full:10000:none:management
In this example M3 is set as the primary management port & M4 is set as the redundant
port.

NOTE Changing the management ports doesn't change the


management IP. The IP is moved to the selected ports.

Changing the AOS Passwords


Allot provides end-users with CLI access to the system via a user privilege called
“sysadmin”. The sysadmin user can access all of the CLI commands outlined in
Chapter 6 below. The default password for the sysadmin user is sysadmin.

6-12 Allot SG-9100 Hardware Guide


Chapter 6: Deploying the SG-9100

In addition, each Service Gateway has an “admin” password, which is used to enable
secure communication between the NetXplorer and the SG-9100. Whenever a
NetXplorer Operator wishes to add a new In-line Platform to the NetXplorer the admin
password of that In-line Platform must be entered. In addition, no policy changes can be
saved without the correct admin password. The default admin password is allot.
NOTE Allot STRONGLY recommends that the default passwords are
changed to ensure a minimum level of security.

To change the sysadmin password:


Log into the SG-9100 via the iLO Remote Console.
Enter sysadmin for the login and the sysadmin password (default
is sysadmin), and then press <Enter>.
Enter passwd and then press <Enter>.
Enter a new password and press <Enter>. The password must be
between 5 and 8 characters. You can use a combination of upper
and lower case letters and numbers.
Re-enter the new password and press <Enter>.
TIP You can further protect access to the Service Gateway by
limiting the hosts that are allowed to manage the unit. For
more information see the NetXplorer Operation Guide.

To change the admin password:


Enter sysadmin for the login and the sysadmin password (default
is sysadmin), and then press <Enter>.
Enter change_admin_pass and then press <Enter> to run the
script to change the admin password.
Enter a new admin password and press <Enter>.
Re-enter the new password and press <Enter>.
Chapter 7: Technical Information

Technical Specifications
INTERFACES AND CONNECTIONS

Management 2 x 1GE Copper


Interface

Network Interfaces 12 x 1GE/10GE (SFP+)


(Internal / External)

SG-9100 UNIT

Size Standard 1U by 19" rack mount,

Dimensions 780 mm x 447 mm x 43 mm (L x W x H)


Weight Min 29.8 lb (13.5 kg), Max 46.3 lb (21 kg) per number of NIC interfaces

Operating Temp 10°C to 35°C (50°F to 95°F), Relative humidity (%RH) 8% to 90%

EXTERNAL BYPASS UNIT

Configuration Up to two HD-8 units, 8 fiber-optic ports (4 links) OR HD-16, 16 fiber-optic ports (8
links)

HD-8 Bypass Unit External 1U 19" rack mount, 2.44kg (5.38lb)

HD-16 Bypass Unit External 1U 19" rack mount, 2.64kg (5.82lb)

HD-24 Bypass Unit External 1U 19" rack mount, 2.86kg (6.3lb)

POWER

Input Dual Hot Plug, Redundant 100/240VAC or -48VDC, efficiency of up to 94%,


Energy star, 80PLUS, 800W

Power Supply Units 2 (Load Sharing)

Redundancy for 1+1


PSUs

Power Consumption 750W


(Max)

Heat Dissipation 2600 BTU/hour

EMC CERTIFICATIONS

EN 55022:2010+AC:2011(Class A), EN55032:2012/AC:2013

EN 55024:2015, EN 61000-3-2:2014

EN 61000-3-3:2008, FCC CFR 47 Part 15 Sub B

Canada ICES-003 Issue 5

VCCI V-3/2013.04 (member ID:1798 [C3775, R-3404, T1630 ]

Allot SG-9100 Hardware Guide 7-1


Chapter 7: Technical Information

7-2 Allot SG-9100 Hardware Guide


Chapter 7: Technical Information

Environmental Specifications
Operating 10°C to 35°C (50°F to 95°F), Relative humidity (%RH) 8% to 80% Maximum
temperature Altitude

Operating relative
8% to 80%
humidity

Operating altitude 3,048 m

Safety Certifications
Normative UL 60950-1:2006+A1:2010+A11:2009+A12:2011+A2:2013 EN60950-
Standards 1:2006+A11:2009+A1:2010+A12:2011+A2:2013

Environmental Certifications
Environmental RoHS/WEEE compliance China ROHS REACH EU 1907:2006

Bypass Physical Specifications


Bypass Cable Type Max Current Typ Current USB Type
calculated
Measured at USB 2.0=500mA
4.19V
USB 3.0=900mA

Fiber 8 ports MM: OM1 / 367mA 216mA USB 2.0 or USB


OM3 / OM4 3.0
or SM
Fiber 16 ports MM OM4 / 703mA 410mA USB 3.0 ONLY
SM
Copper 8ports Copper 1016mA NA USB 3.0 ONLY
UTP/STP
CAT5 / CAT6
Chapter 7: Technical Information

Laser Safety Requirements


Laser Classification
Allot Equipment and components equipped with laser devices described in this manual
comply with IEC 60825-1: 2007 and FDA CDRH 21CFR - Safety of Laser Products.
They also comply with UL / IEC 60950-1 2nd Edition
All the SFP+ modules that are used in the equipment are Class 1 Laser Products.
As long as the Equipment is operated in accordance with the applicable safety
instructions, the Hazard Level in Equipment access locations is inherently Class 1.
Allot provides product and installation information in order that the products may be
installed and serviced safely.

Laser Information
See the System Specifications for information regarding the laser transmitters available
for the platform.

Laser Safety Statutory Warning


All personnel involved in Equipment installation, operation, and maintenance must be
aware that laser radiation is invisible. Therefore, although protective devices generally
prevent direct exposure to the beam, personnel must strictly observe the
applicable safety precautions and, in particular, must avoid staring into optical
connectors, either directly or using optical instruments.
Remember that observing safety precautions is not a matter of personal choice:
ignoring safety puts all the people within line of sight in danger!

Training for Laser Safety


Personnel must be trained for safety before being authorized to operate, install, and/or
maintain laser products. The IEC 60825 standards require organizations to appoint a
laser safety officer who is responsible for training personnel, establishing safe
operational procedures, and supervising the implementation of these procedures during
routine work.
Untrained personnel must not be allowed to operate, install, and/or maintain laser
products.

Laser Device Operating Precautions


In addition to the general precautions described in this section, be sure to observe the
following warning when operating a product equipped with a laser device. Failure to
observe this warning could result in bodily injury and damage to equipment.

7-4 Allot SG-9100 Hardware Guide


Chapter 7: Technical Information

Warning: Invisible laser radiation may be emitted from the aperture of optical
ports when no fiber cable is connected. Avoid exposure and do not stare into
open apertures.
Advarsel: Der kan forekomme usynlige laserstråler fra de optiske portes åbninger,
når der ikke er tilsluttet et lyslederkabel. Undgå at blive udsat for disse stråler, og
kig ikke ind i åbninger.
Waarschuwing: Er kan onzichtbare laserstraling uit de opening van de optische
poorten komen wanneer er geen fiberkabel is aangesloten. Vermijd blootstelling
aan straling en kijk niet in de openingen.
Varoitus: Optisten porttien aukoista saattaa säteillä näkymätöntä lasersäteilyä
silloin, kun niissä ei ole kuitukaapeleita kiinni. Vältä altistumista ja älä tuijota näihin
avoimiin aukkoihin.
Attention: Un rayonnement laser invisible peut être émis à partir de l'ouverture
des ports optiques lorsque aucun câble à fibres optiques n'est connecté. Évitez
de vous y exposer et ne fixez pas les ouvertures.
Warnung: Wenn kein Faserkabel angeschlossen ist, können aus der Öffnung der
optischen Anschlüsse Laserstrahlen austreten. Vermeiden Sie Bestrahlungen und
schauen Sie nicht in diese Öffnungen.
Avvertenza: Le aperture delle porte ottiche possono emettere radiazioni laser
invisibili quando i cavi in fibra non sono collegati. Evitare lunghe esposizioni
davanti alle aperture.
Aviso: Podem ser emitidas radiações invisíveis de laser a partir das aberturas das
portas ópticas se não estiver ligado qualquer cabo de fibra óptica. Evitar a
exposição e não olhar directamente pelas aberturas aparentes.
Advertencia: Es posible que la radiación láser invisible se emita desde la apertura
de puertos ópticos cuando no haya ningún cable de fibra conectado. Evite la
exposición y no mire fijamente a las aberturas.
Varning: Osynlig laserstrålning kan spridas från öppningen på optiska portar om
ingen fiberoptikkabel är ansluten. Undvik exponering och stirra inte in i
öppningarna.
Allot SG-9100 Hardware Guide 7-1

You might also like