Professional Documents
Culture Documents
SG-9100 Hardware Guide R1
SG-9100 Hardware Guide R1
SG-9100 Hardware Guide R1
SG-9100
Hardware Guide
Important Notice
Allot Communications Ltd. and any of its affiliates and subsidiaries ("Allot") is not a party to the purchase or other agreement under
which the Allot product (hardware and/or software) was purchased, and will not be liable for any damages of any kind whatsoever
caused to the end users using this manual, regardless of the form of action, whether in contract, tort (including negligence), strict
liability or otherwise.
SPECIFICATIONS AND INFORMATION CONTAINED IN THIS MANUAL ARE FURNISHED FOR INFORMATIONAL USE
ONLY, AND ARE SUBJECT TO CHANGE AT ANY TIME WITHOUT NOTICE, AND SHOULD NOT BE CONSTRUED AS A
COMMITMENT BY ALLOT. ALLOT ASSUMES NO RESPONSIBILITY OR LIABILITY FOR ANY ERRORS OR
INACCURACIES THAT MAY APPEAR IN THIS MANUAL, INCLUDING THE PRODUCTS AND SOFTWARE DESCRIBED
IN IT.
Please read the End User License Agreement and Warranty Certificate provided with this product before using the product. Please
note that using the products indicates that you accept the terms of the End User License Agreement and Warranty Certificate.
WITHOUT DEROGATING IN ANY WAY FROM THE AFORESAID, ALLOT WILL NOT BE LIABLE FOR ANY SPECIAL,
EXEMPLARY, INDIRECT, INCIDENTAL OR CONSEQUENTIAL DAMAGES OF ANY KIND, REGARDLESS OF THE FORM
OF ACTION WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY OR OTHERWISE,
INCLUDING, BUT NOT LIMITED TO, LOSS OF REVENUE OR ANTICIPATED PROFITS, OR LOST BUSINESS, EVEN IF
ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Copyright
Copyright © 1997-2017 Allot Communications. All rights reserved. No part of this document may be reproduced, photocopied, stored
on a retrieval system, transmitted, or translated into any other language without a written permission and specific authorization from
Allot Communications Ltd.
Trademarks
Products and corporate names appearing in this manual may or may not be registered trademarks or copyrights of their respective
companies, and are used only for identification or explanation and to the owners' benefit, without intent to infringe.
Allot and the Allot Communications logo are registered trademarks of Allot Communications Ltd.
NOTE: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the
FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated
in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used
in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a
residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own
expense.
Changes or modifications not expressly approved by Allot Communication Ltd. could void the user's authority to operate
the equipment.
1 b3 18/05/17
1 b2 27/04/17
1 b1 24/01/17
Packing List
Verify that the following items are included with the SG-9100:
SG-9100 System
Pair of AC power IEC-320 C13/C14 cables
One or Two Bypass units (Multi-Mode, Single Mode or Copper)
and appropriate cables to connect to the SG-9100
Up to 12 SFP/SFP+ Optical Transceivers (either SR, LR, SX or
LX5 Fiber) or Copper transceivers.
NOTE All Transceivers MUST be provided by Allot specifically for the
SG-9100. Any other Transceivers will not function in the SG-
9100.
Transceivers
NOTE All Transceivers MUST be provided by Allot specifically for the
SG-9100. Any other Transceivers will not function in the SG-
9100.
The following transceivers (available from Allot) may be used with the SG-9100:
10G Fiber
SG-TRNSCV-10G-SR
SG-TRNSCV-10G-LR
1G Copper (10/100/1000)
SG-TRNSCV-1G-COP-A
NOTE 1G Copper interfaces may only use the 8 Port Bypass Unit if
available, limiting the number of ports which may be used on
the SG-9100.
Connectors
The SG-9100’s 8-port and 16-port Fiber Bypass Units use Multi Mode fiber (MM) or
Single Mode fiber (SM) dual LC Connectors. The 24-port Fiber Bypass unit uses MTP
Fiber connectors. The 8-port Copper Bypass Unit uses dual RJ45 connectors.
Packing List
Verify that the following items are included with the SG-9100:
SG-9100 System. The SG-9100 is provided with the Allot Service
Gateway software pre-installed.
Pair of AC power IEC-320 C13/C14 cables
One or Two Bypass units (Multi-Mode, Single Mode or Copper)
and appropriate cables to connect to the SG-9100
Up to 12 SFP/SFP+ Optical Transceivers (either SR, LR, SX or
LX5 Fiber) or Copper transceivers.
NOTE All Transceivers MUST be provided by Allot specifically for the
SG-9100. Any other Transceivers will not function in the SG-
9100.
Front Panel
Front Panel Buttons and LEDS Description
System Health Power Button
LED and LED System ID
Button
Network Status
LED
DESCRIPTION STATUS
Rear Panel M2
M1
Fiber Cable
Release Tool
P3 (L9-L10) P4 (L11-L12)
P1 (L1-L4) P2 (L5-L8)
TSM
POWER MONITOR PORT
SUPPLIES PORT BYPASS
L1 L2 L3 L4
M1 & M2 are two RJ-45 connectors (1G Copper) which may be used for system
monitoring and maintenance. M2 acts as a redundant port for M1.
Rear USB Ports should only be used to connect the SG-9100 to the Bypass unit
ONLY.
TSM Port is used to connect the TSM system to the Network. For more
information see Accessing the SG-9100 via the TSM on page 6-6.
CAUTION Each Rear USB connectors should ONLY be connected to a
single Allot Bypass Units. The bypass cable should only be
connected/disconnected when the system is powered down.
Power Supply
The SG-9100 contains two built in power supply modules and a dual line feed for
Redundancy purposes. Each line feed drives one power supply. It is possible for the unit
to operate normally with only one of the two power supplies active.
NOTE The AC power supply automatically adapts to voltages
between 100 V and 240 V, 50/60 Hz.
Fault LED
Power Output
LED
Power Input
LED
DESCRIPTION STATUS
Power Input (AC) LED Solid Green = The Power Supply is connected to the AC
Power Source
Off = The Power Supply is disconnected from the AC
Power Source
Power Output (DC) Solid Green = The SG-9100 is On or the Power Supply is
LED working Normally.
Blinking Green = The Power Supply is on Redundancy
Mode.
Off = The SG-9100 is Off or the Power Supply is
malfunctioning.
A single HD 16 Fiber Bypass unit supports up to 8 links (16 ports) and an HD 8 Fiber
Bypass Unit supports up to 4 links (8 ports). In terms of Management, all Bypass units
are connected to the SG-9100 via a single USB cable.
NOTE If you have mix of Single-Mode and Multi-Mode optical
interfaces in a single SG-9100 system, then you will need to
split them into groups and connect them to appropriate
Bypass according to interface type. i.e. all Single-Mode ports
(LR) should be connected to Single-Mode Bypass SG-BP-EXT-
16P-SM-A or SG-BP-EXT-8P-SM-A, All Multi-Mode ports (SR)
should be connected to Multi-Mode Bypass SG-BP-EXT-16P-
MM-A or SG-BP-EXT-8P-MM-A.
ATTENTION Ports that are used for steering should not be routed through
Bypass.
The following bypass units are supported by the SG-9100:
A single HD 16 Fiber Bypass unit supports up to 16 ports (8 links), for more links
additional units are required.
NOTE A single SG-9100 will only require 6 links.
In addition, the HD 16 Fiber Bypass Unit includes two D-type 9-pin connectors (DB-9)
for connection to the SG-9100 via special DB-9/USB cables (available from Allot).
The HD 16 Fiber Bypass Unit is a passive optical device with no need for external
power connection. It is powered by the SG-9100 as long as it is Active. It will move
automatically to bypass mode when SG-9100 is powered off, or by being forced to
bypass mode as protective action is taken. When moving to Bypass mode all links are
switched into Bypass. There is no way to have a single link go into bypass
independently.
Mode LED is STEADY GREEN when the Bypass Unit is operating normally
and OFF when all Links are in Bypass mode.
When installing more than one Service Gateway, you may need to use additional power
distribution devices to safely provide power to all devices. Observe the following
guidelines:
Balance the power load between available AC supply branch circuits.
Do not allow the overall system AC current load to exceed 80% of the branch
circuit AC current rating.
Do not use common power outlet strips for this equipment.
Provide a separate electrical circuit for the Service Gateway.
SG-9100 shipping containers are designed to protect contents under normal shipping
conditions. Nevertheless, inspect each carton carefully for signs of damage that may
have occurred during transportation. If the container is damaged, document the damage
with photographs and contact the transport carrier immediately.
NOTE The Installation warranty is effective from the time the
shipment is received until the installation is complete.
Check all equipment and accessories against the shipping manifest. If any parts or
accessories are missing or defective contact the representative for replacement.
The SG-9100 draws in cool air through the front door and expel warm air through the
rear door. Therefore, the front and rear rack doors must be adequately ventilated to allow
ambient room air to enter the cabinet, and the rear door must be adequately ventilated to
allow the warm air to escape from the cabinet.
When vertical space in the rack is not filled by a server or rack component, the gaps
between the components cause changes in airflow through the rack and across the
servers. Cover all gaps with blanking panels to maintain proper airflow.
Physical Connections
L1 and L2 on each NIC card are used to pass actual traffic – these interfaces will be
used to connect the Service Gateway to the corresponding switches or routers.
L3 and L4 are used to duplicate traffic and pass it to the second Service Gateway so
must be connected to L3 and L4 on the same number NIC card being used by the
second Service Gateway. Traffic that is passed between Service Gateways is only used
for monitoring and classification purposes.
All other links work in the same way, with L1 and L2 on a NIC card passing actual
traffic and L3 and L4 duplicating the traffic and so on.
NOTE If the Service Gateway Active Redundancy mechanism is
implemented a bypass unit should not be used. This ensures that
the network is made aware of any failure and is able to smoothly
transfer traffic to the secondary link.
Cloned to Second
SG-9100
L1 L2 L3 L4
To Network
L9-L10 L11-L12
Network Cloned
Configuration
Active redundancy can be configured on the Service Gateway either via the NetXplorer
GUI or via AOS CLI.
OR
Press the Power On/Standby button. The Power LED will flash
green during the boot up process and then become steady green
when the system is ready.
During the initial boot it is possible to modify the server
configuration ROM default settings, press the F9 key in the POST
screen to enter the UEFI System Utilities screen. By default, the
System Utilities menus are in the English language.
Chapter 6: Deploying the SG-9100
Initial Configuration
Accessing the SG-9100 via Physical Ports
An external monitor may be connected to the SG-9100 via the MONITOR port on the
rear of the appliance.
After entering the Remote Console, enter sysadmin for the login
and sysadmin for the password.
Use the go config ips command to configure the IP address,
gateway IP, DNS and NTP servers for the SG-9100.
Command: go config ips
Usage: go config ips <-OPTION> <VALUE>...
Options:
-h Hostname set host name of NE
-d Domain set domain name of NE
-g <type:ip> set gateway IP address
-dns <dns1:dns2>|none set DNS IP addresses
-ts <ntp1:ntp2:ntp3>|none set NTP server IP addresses
-ip <type:ip:mask[:vlan]> set IP/netmask/VLAN ID
Examples:
In addition, each Service Gateway has an “admin” password, which is used to enable
secure communication between the NetXplorer and the SG-9100. Whenever a
NetXplorer Operator wishes to add a new In-line Platform to the NetXplorer the admin
password of that In-line Platform must be entered. In addition, no policy changes can be
saved without the correct admin password. The default admin password is allot.
NOTE Allot STRONGLY recommends that the default passwords are
changed to ensure a minimum level of security.
Technical Specifications
INTERFACES AND CONNECTIONS
SG-9100 UNIT
Operating Temp 10°C to 35°C (50°F to 95°F), Relative humidity (%RH) 8% to 90%
Configuration Up to two HD-8 units, 8 fiber-optic ports (4 links) OR HD-16, 16 fiber-optic ports (8
links)
POWER
EMC CERTIFICATIONS
EN 55024:2015, EN 61000-3-2:2014
Environmental Specifications
Operating 10°C to 35°C (50°F to 95°F), Relative humidity (%RH) 8% to 80% Maximum
temperature Altitude
Operating relative
8% to 80%
humidity
Safety Certifications
Normative UL 60950-1:2006+A1:2010+A11:2009+A12:2011+A2:2013 EN60950-
Standards 1:2006+A11:2009+A1:2010+A12:2011+A2:2013
Environmental Certifications
Environmental RoHS/WEEE compliance China ROHS REACH EU 1907:2006
Laser Information
See the System Specifications for information regarding the laser transmitters available
for the platform.
Warning: Invisible laser radiation may be emitted from the aperture of optical
ports when no fiber cable is connected. Avoid exposure and do not stare into
open apertures.
Advarsel: Der kan forekomme usynlige laserstråler fra de optiske portes åbninger,
når der ikke er tilsluttet et lyslederkabel. Undgå at blive udsat for disse stråler, og
kig ikke ind i åbninger.
Waarschuwing: Er kan onzichtbare laserstraling uit de opening van de optische
poorten komen wanneer er geen fiberkabel is aangesloten. Vermijd blootstelling
aan straling en kijk niet in de openingen.
Varoitus: Optisten porttien aukoista saattaa säteillä näkymätöntä lasersäteilyä
silloin, kun niissä ei ole kuitukaapeleita kiinni. Vältä altistumista ja älä tuijota näihin
avoimiin aukkoihin.
Attention: Un rayonnement laser invisible peut être émis à partir de l'ouverture
des ports optiques lorsque aucun câble à fibres optiques n'est connecté. Évitez
de vous y exposer et ne fixez pas les ouvertures.
Warnung: Wenn kein Faserkabel angeschlossen ist, können aus der Öffnung der
optischen Anschlüsse Laserstrahlen austreten. Vermeiden Sie Bestrahlungen und
schauen Sie nicht in diese Öffnungen.
Avvertenza: Le aperture delle porte ottiche possono emettere radiazioni laser
invisibili quando i cavi in fibra non sono collegati. Evitare lunghe esposizioni
davanti alle aperture.
Aviso: Podem ser emitidas radiações invisíveis de laser a partir das aberturas das
portas ópticas se não estiver ligado qualquer cabo de fibra óptica. Evitar a
exposição e não olhar directamente pelas aberturas aparentes.
Advertencia: Es posible que la radiación láser invisible se emita desde la apertura
de puertos ópticos cuando no haya ningún cable de fibra conectado. Evite la
exposición y no mire fijamente a las aberturas.
Varning: Osynlig laserstrålning kan spridas från öppningen på optiska portar om
ingen fiberoptikkabel är ansluten. Undvik exponering och stirra inte in i
öppningarna.
Allot SG-9100 Hardware Guide 7-1