Allot SG-9100 Series Hardware Manual
  1. Manuals
  2. Brands
  3. Allot Manuals
  4. Gateway
  5. SG-9100
  6. Hardware manual

Allot SG-9100 Series Hardware Manual

Hide thumbs Also See for SG-9100 Series:
Table of Contents

Advertisement

Quick Links

SG-9100
Hardware Guide

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the SG-9100 Series and is the answer not in the manual?

Questions and answers

Related Manuals for Allot SG-9100 Series

Summary of Contents for Allot SG-9100 Series

  • Page 1 SG-9100 Hardware Guide...
  • Page 2 Document updates are released in electronic form from time to time and the most up to date version of this document will always be found on Allot’s online Knowledge Base. Internal...

  • Page 3: Table Of Contents

    SG-9100 Hardware Guide Contents Introducing the SG-9100 ....................1-1 Planning Your Deployment ................1-2 Packing List ......................1-2 SG-9100 V2 ..................1-2 SG-9100 V1 ..................1-2 Cabling and Transceivers .................. 1-4 Cable types ..................1-4 Transceivers ..................1-5 Connectors ..................1-5 Connectors and LEDs .....................
  • Page 4 SG-9100 Hardware Guide Deploying the SG-9100 ....................6-1 Connecting Network Traffic ................6-1 Configuring Active Redundancy ................ 6-5 Physical Connections ................6-6 Configuration ..................6-8 Powering Up the SG-9100 ................6-10 Accessing the SG-9100 ..................6-11 Identifying the Revision ..............6-11 Accessing the SG-9100 via Physical Ports .........

  • Page 5: Introducing The Sg-9100

    Intel-based appliance, designed especially for cloud data center, enterprise, and ISP networks. Its small-footprint is equipped with the same rich features and functions as our chassis-based Allot Service Gateway, enabling you to roll out Security as a Service as well as other revenue-generating services rapidly and cost-effectively, while you lower your total cost of ownership and accelerate ROI.

  • Page 6: Planning Your Deployment

    3. Up to 16 SFP/SFP+ Optical Transceivers (either SR, LR, SX or LX5 Fiber) or Copper transceivers. Note: All Transceivers MUST be provided by Allot specifically for the SG-9100. Any other Transceivers will not function in the SG-9100. 4. Ethernet cable straight CAT6 RJ45_2_RJ45 3m for management (Allot P/N...
  • Page 7 3. Up to 12 SFP/SFP+ Optical Transceivers (either SR, LR, SX or LX5 Fiber) or Copper transceivers. Note: All Transceivers MUST be provided by Allot specifically for the SG-9100. Any other Transceivers will not function in the SG-9100. 4. Ethernet cable straight CAT6 RJ45_2_RJ45 3m for management (Allot P/N...

  • Page 8: Cabling And Transceivers

    Full Duplex LC to Full Full Duplex LC to Full Duplex LC Duplex LC Connectors Connectors USB Bypass Cable Allot USB Bypass Cable USB Bypass Cable Allot P/N P/N C245055 Allot P/N C245055 C245055 Service Gateway’s (Included with Bypass). (Included with (Included with Bypass).

  • Page 9: Transceivers

    Introducing the SG-9100 Transceivers Note: All Transceivers MUST be provided or approved by Allot specifically for the SG- 9100. Any other Transceivers will not function in the SG-9100. The following transceivers (available from Allot) may be used with the SG-9100: 10G Fiber •...

  • Page 10: Connectors And Leds

    Connectors and LEDs Allot Service Gateway 9100 (SG-9100) provides a high performance service delivery platform with rich functionality in an efficient, small-footprint appliance. With high- density connectivity, the platform allows enterprises, cloud data centers and ISP networks to satisfy the ever-growing demand for Internet bandwidth and network- based services in cost-efficient manner.
  • Page 11 Connectors and LEDs DESCRIPTION STATUS Power LED Solid green = Power is On Blinking = Initializing Off = Power is Off Front Panel Connectors The USB Connectors on the front panel of the SG-9100 V2 are not in use at this time.

  • Page 12: Rear Panel

    Connectors and LEDs Rear Panel PORT XCC PORT POWER MONITOR BYPASS SUPPLIES PORT Figure 2-3 – SG-9100 V2 Rear Panel Rear Panel Connectors 10G/1G NETWORK LINKS (P1 – P4): There are 4 x 1G/10G Ethernet • network interfaces on each of the 4 PCIe cards (P1 and P2) used for Network traffic, which can support 1G/10G SFP+ fiber or 1G RJ45 Copper interfaces.
  • Page 13 XCC Port is used to connect the XCC system to the Network. For more information see Accessing the SG-9100 V2 via the XCC on page 6-14. Note: Each Rear USB connector should be connected to a single Allot Bypass Units. The bypass cable should only be connected/disconnected when the system is powered down.
  • Page 14 Connectors and LEDs Power Supply The SG-9100 contains two built in power supply modules and a dual line feed for Redundancy purposes. Each line feed drives one power supply. It is possible for the unit to operate normally with only one of the two power supplies active. Note: The AC power supply automatically adapts to voltages between 100 V and 240 V, 50/60 Hz.

  • Page 15: Sg-9100 V1

    Connectors and LEDs SG-9100 V1 Figure 2-6 – SG-9100 Front Panel Front Panel Buttons and LEDS Description Power System Health Button and System ID Button Network Status Figure 2-7 – SG-9100 Front Panel Buttons and LEDs DESCRIPTION STATUS Network Status LED Flashing = Network is Connected and Active Off = The System is Disconnected System Health LED...
  • Page 16 Connectors and LEDs Front Panel Connectors There are no connectors on the front panel of the SG-9100. Note: Since the SG-9100 has only 2 USB ports on the read of the server, these ports are designated for bypass unit connectivity only. They cannot be used for anything else (such as keyboard/mouse), even if there is no bypass unit being connected to any of the ports.

  • Page 17: Rear Panel

    Connectors and LEDs Rear Panel Fiber Cable Release Tool P3 (L9-L10) P4 (L11-L12) P1 (L1-L4) P2 (L5-L8) PORT POWER MONITOR BYPASS SUPPLIES PORT Figure 2-8 – SG-9100 V1 Rear Panel Rear Panel Connectors 10G/1G NETWORK LINKS (P1 – P4): There are 4 x 1G/10G Ethernet •...
  • Page 18 Connectors and LEDs NETXPLORER USAGE NETXPLORER USAGE P1.L1 Int1 P3.L1 Int5 P1.L2 Ext1 P3.L2 Ext5 P1.L3 Int2 P3.L3 Int6 P1.L4 Ext2 P3.L4 Ext6 P2.L1 Int3 P2.L2 Ext3 P2.L3 Int4 P2.L4 Ext4 Different kinds of transceivers (Copper, 1G Fiber and 10G Fiber) may be used on a single NIC card.
  • Page 19 Accessing the SG-9100 V1 via the TSM on page 6-11. Warning: Each Rear USB connectors should ONLY be connected to a single Allot Bypass Units. The bypass cable should only be connected/disconnected when the system is powered down.
  • Page 20 Connectors and LEDs DESCRIPTION STATUS Fault LED Solid Amber = The Power Supply has failed Off = The Power Supply is working normally 2-11 SG-9100 Hardware Guide...

  • Page 21: Bypass

    The Bypass mechanism provides "connectivity insurance" in the event of a subsystems failure. Each Allot Bypass unit features low insertion loss (< 1dB) in both Normal mode and Bypass mode and fast switching time (< 10mSec) between modes. A Service Gateway unit Network ports must be connected to the appropriate External Bypass Unit.

  • Page 22: Hd 8 Fiber Or Copper Bypass Unit

    Bypass HD 8 Fiber or Copper Bypass Unit The HD 8 Bypass Unit (previously known as the Allot Multi-Port Bypass) can work in conjunction with all SG-9100 Configuration and is available with Fiber or Copper interfaces. Links to Network Mode LED...

  • Page 23: Hd 16 Fiber Bypass Unit

    A single HD 16 Fiber Bypass unit supports up to 16 ports (8 links), for more links additional units are required. In addition, the HD 16 Fiber Bypass Unit includes two D-type 9-pin connectors (DB- 9) for connection to the SG-9100 via special DB-9/USB cables (available from Allot). SG-9100 Hardware Guide...
  • Page 24 Bypass The HD 16 Fiber Bypass Unit is a passive optical device with no need for external power connection. It is powered by the SG-9100 as long as it is Active. It will move automatically to bypass mode when SG-9100 is powered off, or by being forced to bypass mode as protective action is taken.

  • Page 25: External Bypass Control Cabling

    USB ports on the rear of the SG-9100. This cable is provided with the Bypass unit. Note: To avoid damage, use ONLY the cable provided with the Bypass Unit for connection to the SG-9100. Figure 3-4: Allot USB Bypass Cable SG-9100 Hardware Guide...

  • Page 26: Power Connectivity Planning

    Power Connectivity Planning This chapter is to be used in planning the power requirements and resources for the SG-9100 system. Topics which are covered include: • AC Power Source Requirements • AC Cabling Requirements and Overcurrent Protection Power Source Requirements Installation of this equipment must comply with local and regional electrical regulations governing the installation of information technology equipment by licensed electricians.

  • Page 27: Electrical Grounding Requirements

    Cable and Cord Specifications AC Power Cord Specifications Allot provides a set of 2 x IEC-320 C13 to C14 Power Cord Black 2.5m 10A Figure 4-1: IEC-320 C13 to C14 Power Cord All power cords used must meet the following specifications: Use copper conductors only.
  • Page 28 Power Connectivity Planning The cord must have insulation material suitable • for at least 75 °C • The cord must have local safety approvals, and preferable additional approvals such as UL, CSA, TUV or VDE. • The flexible cord and attachment plug cap length must not exceed 4.5 m (15 ft.).

  • Page 29: Preparation And Installation

    • Remove all items from the box. If any items listed on the purchase order are missing, notify Allot customer service immediately. Inspect the product for damage. If there is damage, notify Allot customer • service immediately. • Save the box and packing material for possible future shipment.

  • Page 30: Mounting The Sg-9100

    Preparation and Installation SG-9100 shipping containers are designed to protect contents under normal shipping conditions. Nevertheless, inspect each carton carefully for signs of damage that may have occurred during transportation. If the container is damaged, document the damage with photographs and contact the transport carrier immediately.

  • Page 31: Rack Mounting The Service Gateway

    Preparation and Installation Rack Mounting the Service Gateway Note: To reduce the risk of personal injury or damage to the equipment, be sure that: The leveling jacks are extended to the floor. The full weight of the rack rests on the leveling jacks. The stabilizing feet are attached to the rack if it is a single-rack installation.
  • Page 32 Preparation and Installation Note: Pour limiter les risques d'électrocution ou de détérioration du matériel : Ne désactivez pas la prise de terre du cordon d'alimentation. Il s'agit d'une protection importante. Branchez le cordon d'alimentation dans une prise électrique mise à la terre et facilement accessible à...

  • Page 33: Sg-9100 Hardware Guide

    Deploying the SG-9100 Connecting Network Traffic The SG-9100 operates with an external Bypass Units. The Bypass Unit is a mission- critical subsystem designed to ensure network connectivity at all times. The Bypass mechanism provides ‘connectivity insurance’ in the event of a subsystems failure. Bypass Units are connected to the SG-9100 by a series of leads and cables.
  • Page 34 Deploying the SG-9100 Link Stand Alone Usage High Availability Usage P1.L1 Int1 (Connected to Bypass) Int1 (Connected to Bypass) P1.L2 Ext1 (Connected to Bypass) Ext1 (Connected to Bypass) P1.L3 Int2 (Connected to Bypass) Int1 Cloned (Connected to second SG-9100) P1.L4 Ext2 (Connected to Bypass) Ext1 Cloned (Connected to second SG-9100) P2.L1...
  • Page 35 Deploying the SG-9100 SG-9100 V1 Connectivity Link Stand Alone Usage High Availability Usage P1.L1 Int1 (Connected to Bypass) Int1 (Connected to Bypass) P1.L2 Ext1 (Connected to Bypass) Ext1 (Connected to Bypass) P1.L3 Int2 (Connected to Bypass) Int1 Cloned (Connected to second SG-9100) P1.L4 Ext2 (Connected to Bypass) Ext1 Cloned (Connected to second SG-9100)
  • Page 36 Deploying the SG-9100 Note: The bypass cable should only be connected/disconnected when the system is powered down. SG-9100 Hardware Guide...

  • Page 37: Configuring Active Redundancy

    Deploying the SG-9100 Configuring Active Redundancy Active redundancy is recommended for network topologies where at least two network links are active in load-balancing mode. It requires two Service Gateway installations and typically, no bypass units. In the Active Redundancy configuration, a Service Gateway duplicates each link’s traffic to the other Service Gateway.

  • Page 38: Physical Connections

    Deploying the SG-9100 Physical Connections L1 and L2 on each NIC card are used to pass actual traffic – these interfaces will be used to connect the Service Gateway to the corresponding switches or routers. L3 and L4 are used to duplicate traffic and pass it to the second Service Gateway so must be connected to L3 and L4 on the same number NIC card being used by the second Service Gateway.
  • Page 39 Deploying the SG-9100 P1.L1-L4 P2.L1-L4 P4.L1-L4 P3.L1-L4 Link Active Redundancy Usage P1.L1 Int1 (Connected to Network) P1.L2 Ext1 (Connected to Network) P1.L3 Int1 Cloned (Connected to second SG-9100) P1.L4 Ext1 Cloned (Connected to second SG-9100) P2.L1 Int2 (Connected to Network) P2.L2 Ext2 (Connected to Network) P2.L3...

  • Page 40: Configuration

    Deploying the SG-9100 Link Active Redundancy Usage Int1 (Connected to Network) Ext1 (Connected to Network) Int1 Cloned (Connected to second SG-9100) Ext1 Cloned (Connected to second SG-9100) Int2 (Connected to Network) Ext2 (Connected to Network) Int2 Cloned (Connected to second SG-9100) Ext2 Cloned (Connected to second SG-9100) Int3 (Connected to Network) Ext3 (Connected to Network)
  • Page 41 Deploying the SG-9100 3. Right-click the Service Gateway and select Configuration from the drop down menu. Click the Configuration button in the Toolbar. 4. Open the Networking tab and set the Redundancy Mode to Active. 5. Confirm that the Enable Bypass Unit checkbox is not selected. 6.

  • Page 42: Powering Up The Sg-9100

    Deploying the SG-9100 Powering Up the SG-9100 Note: It is recommended to connect the two power line feeds to separate power sources to have full power redundancy. 1. Press the Power On/Standby button. The Power LED will flash green during the boot up process and then become steady green when the system is ready.

  • Page 43: Accessing The Sg-9100

    Accessing the SG-9100 V1 via the TSM The ThinkServer System Manager (TSM) is provided with every SG-9100 appliance that is shipped from Allot. The module enables an administrator to connect remotely to the SG-9100 as if connecting locally via a console connection.
  • Page 44 Deploying the SG-9100 2. Turn on the SG-9100. Press F1 as soon as you see the Lenovo logo screen. 3. On the following screen select TSM Settings Figure 6-6 – System Information 4. On System Configuration screen select TSM Network Settings. Figure 6-7 –...
  • Page 45 Deploying the SG-9100 7. After TSM network parameters are set and TSM management port is connected to a network, the rear USB ports may be used for Bypass management only and the system may be controlled remotely via web interface. 8.

  • Page 46: Accessing The Sg-9100 V2 Via The Xcc/Bmc

    Allot CLI for device configuration. Figure 6-9: Remote Console Accessing the SG-9100 V2 via the XCC/BMC The XClarity Controller (XCC) and Baseboard Management Controller (BCM) are provided with every SG-9100 V2 appliance that is shipped from Allot. 6-14 SG-9100 Hardware Guide...
  • Page 47 Deploying the SG-9100 Note: The USB ports are designated for bypass unit connectivity only. They cannot be used for anything else (such as keyboard/mouse), even if there is no bypass unit being connected to any of the ports. This means that the initial IP configurations will have to be done using the XCC/BMC.
  • Page 48 Deploying the SG-9100 Figure 6-10 – ThinkSystem Summary Screen 3. Press F1 again to go to the XCC Main Menu. 6-16 SG-9100 Hardware Guide...
  • Page 49 Deploying the SG-9100 Figure 6-11 – XCC Main Menu 4. Select UEFI Setup from the menu on the left. 5. On the following screen select BMC Settings and then Network Settings 6-17 SG-9100 Hardware Guide...
  • Page 50 Deploying the SG-9100 Figure 6-12 – BMC Settings 6. Define network parameters for the XCC by entering or changing default values for Host Name, IP Address, Subnet mask and Gateway IP. 7. Save network settings and reboot. 8. After XCC network parameters are set and XCC management port is connected to a network, the rear USB ports may be used for Bypass management only and the system may be controlled remotely via web interface.
  • Page 51 Deploying the SG-9100 12. Click Add and type in the SG URL, as follows: http://<IP OF SG> 13. Click OK to add the SG to the allowed hosts list. 14. Open the following file on your PC: C:\Program Files\Java\jre1.8.0_161\lib\security\java.security 6-19 SG-9100 Hardware Guide...
  • Page 52 Deploying the SG-9100 15. Look for the following line: jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, DSA keySize < 1024 16. Edit it to read as follows: jdk.jar.disabledAlgorithms=MD2, RSA keySize < 1024 17. Save the file. 18. Open a web browser. In the address field, type, type the IP address or host name of the XCC to which you want to connect.
  • Page 53 21. Click on the menu items on the left of the screen to access the menu options if desired. 22. Click the Remote Console menu item and select NMS Admin to open the Remote Console opens where you can log in to the Allot CLI for device configuration. Figure 6-15: Remote Console...

  • Page 54: Configuring The Sg-9100

    Deploying the SG-9100 Configuring the SG-9100 1. After entering the Remote Console, enter sysadmin for the login and sysadmin for the password. 2. Use the go config ips command to configure the IP address, gateway IP, DNS and NTP servers for the SG-9100. Command: go config ips Usage: go config ips <-OPTION>...

  • Page 55: Changing The Aos Passwords

    Changing the AOS Passwords Allot provides end-users with CLI access to the system via a user privilege called “sysadmin”. The sysadmin user can access all of the CLI commands outlined in Chapter 6 below. The default password for the sysadmin user is sysadmin.
  • Page 56 Deploying the SG-9100 Note: You can further protect access to the Service Gateway by limiting the hosts that are allowed to manage the unit. For more information see the NetXplorer Operation Guide. To change the admin password: 1. Enter sysadmin for the login and the sysadmin password (default is sysadmin), and then press <Enter>.

  • Page 57: Technical Information

    Technical Information Technical Specifications INTERFACES AND CONNECTIONS Management 2 x 1GE Copper 2 x 1GE Copper Interface Network 12 x 1GE/10GE (SFP+) 16 x 1GE/10GE (SFP+) Interfaces (Internal / External) SG-9100 UNIT Size Standard 1U by 19" rack mount, Standard 2U by 19" rack mount, Dimensions 780 mm x 447 mm x 43 mm 720 mm x 445 mm x 87 mm...
  • Page 58 Technical Information EN 55022:2010+AC:2011(Class A), EN55032:2012/AC:2013 EN 55024:2015, EN 61000-3-2:2014 EN 61000-3-3:2008, FCC CFR 47 Part 15 Sub B Canada ICES-003 Issue 5 VCCI V-3/2013.04 (member ID:1798 [C3775, R-3404, T1630 ] SG-9100 Hardware Guide...

  • Page 59: Environmental Specifications

    Technical Information Environmental Specifications Operating 10°C to 35°C (50°F to 95°F), Relative humidity (%RH) 8% to 80% Maximum temperature Altitude Operating relative 8% to 80% humidity Operating altitude 3,048 m Safety Certifications Normative UL 60950-1:2006+A1:2010+A11:2009+A12:2011+A2:2013 EN60950- Standards 1:2006+A11:2009+A1:2010+A12:2011+A2:2013 Environmental Certifications Environmental RoHS/WEEE compliance China ROHS REACH EU 1907:2006 Bypass Physical Specifications...

  • Page 60: Laser Safety Requirements

    As long as the Equipment is operated in accordance with the applicable safety instructions, the Hazard Level in Equipment access locations is inherently Class 1. Allot provides product and installation information in order that the products may be installed and serviced safely.
  • Page 61 Technical Information Failure to observe this warning could result in bodily injury and damage to equipment. Warning: Invisible laser radiation may be emitted from the aperture of optical ports when no fiber cable is connected. Avoid exposure and do not stare into open apertures.
  • Page 62 SG-9100 Hardware Guide...

This manual is also suitable for:

Sg-9100 v1Sg-9100 v2

Table of Contents

Save PDF