The following Ethernet ports are coupled and must be used together.
•
On NS9500 Sensors, G0 and G3 indicate the fixed port slots. G1 and G2 indicate the slots for
interface modules.
•
In the following table, it is assumed that G1 is the 2-port QSFP28 1000G interface module, G2 is
the 8-Port SFP+/SFP 1/10G interface module, G5 is the 4-port QSFP+ 40G interface module and
G6 is the 6-port RJ-45 1 Gbps/100 Mbps/10 Mbps interface module. These interface modules can
be interchanged.
•
Since monitoring ports are internally wired, when you disable one of the ports in a pair, the
corresponding port is also disabled.
You cannot disable auto-negotiation in G3 slots.
Port Pairs
G0/1 and G0/2
G1/1 and G1/2
G2/1 and G2/2
G2/3 and G2/4
G2/5 and G2/6
G2/7 and G2/8
G3/1 and G3/2
G3/3 and G3/4
Cable types for routers, switches, hubs, and computers
This section lists the types of cables that you require to connect the Sensor to other network devices:
•
Use a crossover Ethernet RJ-45 cable to connect a router port to the SFP/SFP+/QSFP+ monitoring ports.
•
Use a straight-through Ethernet RJ-45 cable to connect a switch or a hub port to SFP/SFP+/QSFP+ monitoring
ports.
•
Use a crossover Ethernet RJ-45 cable to connect a router port to computer to the Sensor Management port.
•
Use a crossover Ethernet RJ-45 cable to connect a computer to the Sensor monitoring port.
Connect the cables for in-line mode
In-line Gigabit Ethernet ports can be configured as fail-open or fail-closed. The RJ-45 monitoring ports are
built-in and have a fail-open function built-in as well.
All other monitoring ports require the use of external active fail-open (AFO) kits for In-Line Fail-Open Active
configuration.
Gigabit Ethernet ports fail-close, means the flow of traffic will stop if the Sensor fails. To allow traffic to flow
uninterrupted, you must use special hardware, and cable the Sensor to external active fail-open kits. For
instructions, see the subsequent sections of this chapter.
This section provides the steps to connect the Sensor's Gigabit Ethernet ports so they fail-close.
McAfee Network Security Platform
Attaching cables to the Sensor
About connecting cables to the Monitoring ports
Sensor
NS9500
NS9500
NS9500
NS9500
NS9500
NS9500
NS9500
NS9500
7
31