evertz 570NAT-HW-X19 User Manual

High density network address translator
Table of Contents

Advertisement

Quick Links

High Density Network Address Translator
© Copyright 2020
EVERTZ MICROSYSTEMS LTD.
5292 John Lucas Drive
Burlington, Ontario
Canada L7L 5Z9
Phone:
+1 905-335-3700
Sales:
sales@evertz.com
Tech Support: service@evertz.com
Web Page:
http://www.evertz.com
Version 1.0, August 2020
The material contained in this manual consists of information that is the property of Evertz Microsystems and is intended solely for the use of
purchasers of the 570NAT-HW-X19 series product. Evertz Microsystems expressly prohibits the use of this manual for any purpose other than the
operation of the 570NAT-HW-X19 series product. Due to on going research and development, features and specifications in this manual are subject
to change without notice.
All rights reserved. No part of this publication may be reproduced without the express written permission of Evertz Microsystems Ltd. Copies of this
manual can be ordered from your Evertz dealer or from Evertz Microsystems.
570NAT-HW-X19
User Manual
Fax: +1 905-335-3573
Fax: +1 905-335-7571

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the 570NAT-HW-X19 and is the answer not in the manual?

Questions and answers

Summary of Contents for evertz 570NAT-HW-X19

  • Page 1 Version 1.0, August 2020 The material contained in this manual consists of information that is the property of Evertz Microsystems and is intended solely for the use of purchasers of the 570NAT-HW-X19 series product. Evertz Microsystems expressly prohibits the use of this manual for any purpose other than the operation of the 570NAT-HW-X19 series product.
  • Page 2 This page left intentionally blank...
  • Page 3 IMPORTANT SAFETY INSTRUCTIONS The lightning flash with arrowhead symbol within an equilateral triangle is intended to alert the user to the presence of uninsulated “Dangerous voltage” within the product’s enclosure that may be of sufficient magnitude to constitute a risk of electric shock to persons. The exclamation point within an equilateral triangle is intended to alert the user to the presence of important operating and maintenance (Servicing) instructions in the literature accompanying the product.
  • Page 4 WARNING Changes or Modifications not expressly approved by Evertz Microsystems Ltd. could void the user’s authority to operate the equipment. Use of unshielded plugs or cables may cause radiation interference. Properly shielded interface cables...
  • Page 5 Evertz products are for informational use only and are not warranties of future performance, either expressed or implied. The only warranty offered by Evertz in relation to this product is the Evertz standard limited warranty, stated in the sales contract or order confirmation form.
  • Page 6 570NAT-HW-X19 High Density Network Address Translator This page left intentionally blank Page - ii Revision 1.0...
  • Page 7: Table Of Contents

    570NAT-HW-X19 High Density Network Address Translator TABLE OF CONTENTS OVERVIEW ........................... 1 GETTING STARTED ........................5 2.1. REAR PLATE DESCRIPTION ....................5 2.2. CARE AND HANDLING OF OPTICAL FIBER ..............6 2.3. SETTING DEVICE IP ......................7 TECHNICAL SPECIFICATIONS ....................9 3.1.
  • Page 8 570NAT-HW-X19 High Density Network Address Translator 4.6. MC-IN-MC NAT + IP NAT ....................30 4.6.1. LAN to WAN: Input Flow Configuration ..............31 4.6.2. LAN to WAN: Address Translation Configuration ............ 31 4.6.3. LAN to WAN : Encapsulation Header Configuration ..........32 4.6.4.
  • Page 9 Figures Figure 1-1: Single NAT Core Block Diagram ....................3 Figure 1-2 : 570NAT-HW-X19 Core Mapping Block Diagram ................3 Figure 1-3: WAN-Side Port Aggregation and Demux (available in all modes) ..........4 Figure 2-1: 570NAT-X19-10G Rear Plate ......................5 Figure 2-2 : WebEASY - Frame Controller Login ...................
  • Page 10 570NAT-HW-X19 High Density Network Address Translator This page left intentionally blank Page - vi Revision 1.0...
  • Page 11: Overview

    WAN–LAN pair. Each processing core can sustain up to 256 data flows, configurable based on multicasts or VLAN Tags. This gives an exceptional product density of 12x 10GbE ports, with 1536 multicast/VLAN flows — all in the space–efficient Evertz 570 modular hardware platform.
  • Page 12 570NAT-HW-X19 High Density Network Address Translator Features & Benefits • One–to–one NAT with user configurable Packet Replication • MC–in–MC NAT for tunneling flows based on multicast addresses • VLAN based NAT for tunneling flows based on VLAN tag • Port based NAT for tunneling all traffic (ingress/egress) on per port basis •...
  • Page 13: Figure 1-1: Single Nat Core Block Diagram

    570NAT-HW-X19 High Density Network Address Translator Figure 1-1: Single NAT Core Block Diagram Figure 1-2 : 570NAT-HW-X19 Core Mapping Block Diagram Page - 3 Revision 1.0...
  • Page 14: Figure 1-3: Wan-Side Port Aggregation And Demux (Available In All Modes)

    570NAT-HW-X19 High Density Network Address Translator Figure 1-3: WAN-Side Port Aggregation and Demux (available in all modes) Page - 4 Revision 1.0...
  • Page 15: Getting Started

    GETTING STARTED 2.1. REAR PLATE DESCRIPTION The 570NAT-HW-X19 comes standard with a companion rear plate. Figure 2-1 provides an illustration of the 570NAT-HW-X19 rear plate. Figure 2-1: 570NAT-X19-10G Rear Plate 1GigE or 10GigE Input / Output: There are 12 SFP bi-directional connections used for the 1GE or 10GE input and output.
  • Page 16: Care And Handling Of Optical Fiber

    The transmission characteristics of the fiber are dependent on the shape of the optical core and therefore care must be taken to prevent fiber damage due to heavy objects or abrupt fiber bending. Evertz recommends that the user maintains a minimum bending radius of 5 cm to avoid fiber-bending loss that will decrease the maximum attainable distance of the fiber cable.
  • Page 17: Setting Device Ip

    2.3. SETTING DEVICE IP The 570NAT-HW-X19 must first be configured through the frame controller. To do so, open a web browser and type the IP address of the frame controller. You will be presented with the login menu, Figure 2-2 : WebEASY - Frame Controller Login ®...
  • Page 18: Figure 2-4: Webeasy

    570NAT-HW-X19 High Density Network Address Translator Figure 2-4: WebEASY - Frame Controller – Side Menu ® Once selected, the proxy configuration page will load. Figure 2-5 : WebEASY - Frame Controller – Proxy Configuration ® Once in the proxy configuration, select the slot number for your 570NAT-X19 card in the frame controller.
  • Page 19: Technical Specifications

    570NAT-HW-X19 High Density Network Address Translator TECHNICAL SPECIFICATIONS 3.1. ONE-TO-ONE NAT 1536x static mapping • • Packet Replication (WAN-to-LAN direction) VLAN ID change • Ingress traffic filtering based on VLAND ID option • 3.2. MC-IN-MC NAT 1536x Multicast Mapping •...
  • Page 20 570NAT-HW-X19 High Density Network Address Translator This page left intentionally blank Page - 10 Revision 1.0...
  • Page 21: Web Interface

    Internet web browser. The 570NAT-HW-X19 web interface can be accessed by entering the IP address of the control port of the 570NAT-HW-X19 into the address bar of an Internet web browser. Refer to section Error! Reference source not found. for setting the network configurations.
  • Page 22: Figure 4-2 : Webeasy - Main Menu

    Main Navigation Menu This menu contains every page specific to the operation of the 570NAT-HW-X19. Here you can change a variety of device settings and monitor the device status.
  • Page 23: System Tab

    4.1.1. Control Port Configuration For Eth0 or USB0 MAC Address: This field displays the MAC Address of the 570NAT-HW-X19. IP Address: This field allows the user to enter the IP address to be assigned to control port of the 570NAT-HW-X19.
  • Page 24: Data Port Traffic Monitoring

    Mode of Operation: Within this drop down menu the user can configure the desired mode of operation for each core of the 570NAT-HW-X19. The NAT can be set to: IP NAT, MC-In-MC NAT + IP NAT, Port Based NAT, VLAN Based NAT.
  • Page 25: Data Port Sfp Monitoring

    570NAT-HW-X19 High Density Network Address Translator Figure 4-4: WebEASY - System Tab – Part 2 ® 4.1.4. Data Port SFP Monitoring For Ports 1 to 12 SFP Part Number: This field displays the SFP part number detected. SFP Type: This field displays the part number detected for the SFP.
  • Page 26: Global Traffic Monitoring

    SFP Temperature High Alarm Threshold (°C): Alarm will trigger if SFP temperature exceeds this threshold. 4.1.9. System System Reboot: This button allows the user to reboot the 570NAT-HW-X19 module, doing this will result in the connection being lost temporarily while the unit resets. A warning pop-up may appear in WebEASY during this time, wait for the unit to reset.
  • Page 27: Data Port Configurations

    570NAT-HW-X19 High Density Network Address Translator 4.2. DATA PORT CONFIGURATIONS Figure 4-5 : WebEASY® - Data Port Configurations This page allows users to set address information for data ports and port interfaces attached to each port. For an explanation of the port assignments see Figure 1-2.
  • Page 28: Port Interfaces

    570NAT-HW-X19 High Density Network Address Translator 4.2.2. Port Interfaces Port interfaces allow the NAT interface for each port to be set individually. MAC Address: MAC set by hardware displayed here for each port. IP Address (WAN): This allows the user to enter the IP address this port pair will use to communicate to the WAN.
  • Page 29: Port Based Nat

    570NAT-HW-X19 High Density Network Address Translator 4.3. PORT BASED NAT Port Mode allows the user to encapsulate all incoming LAN traffic on a given physical port, on a port-by- port basis. There is no multicast or VLAN Tag filtering – All traffic on that physical LAN port is encapsulated out to the WAN, and de-encapsulated in the reverse direction.
  • Page 30: Lan To Wan: Encapsulation Header Configuration

    570NAT-HW-X19 High Density Network Address Translator Figure 4-7 : WebEASY® - Port Based NAT 4.3.1. LAN to WAN: Encapsulation Header Configuration For cores 1 to 6 Mode: This control allows the user to enable or disable the output. Source IP Address: This control allows the user to set the physical source IP address of the incoming traffic.
  • Page 31: Lan To Wan: Output Bandwidth Configuration

    570NAT-HW-X19 High Density Network Address Translator Destination UDP Port: This control is used to configure the output header on encapsulation with the desired Destination UDP Port. Max Latency (0 to 6553 µs): This is a timeout on how long the Core waits while accumulating MTU bytes.
  • Page 32: Wan To Lan: De-Encapsulation Configuration

    570NAT-HW-X19 High Density Network Address Translator 4.3.3. WAN to LAN: De-Encapsulation Configuration Mode: This control allows the user to enable or disable the input stream which is going to be decapsulated. Input Destination IP Address: This control allows the user to set the IP address of the packet to be received.
  • Page 33: Vlan Based Nat

    Each VLAN flow must have a unique Tag value. Two or more flows cannot share the same VLAN Tag because there is no ‘Packet Replication’ in VLAN Mode.  VLAN Mode does not support nested VLAN Tags. The 570NAT-HW-X19 only supports Ether Type=0x8100 traffic. Page - 23 Revision 1.0...
  • Page 34: Figure 4-9 : Webeasy® - Vlan Based Nat

    570NAT-HW-X19 High Density Network Address Translator Figure 4-9 : WebEASY® - VLAN Based NAT Page - 24 Revision 1.0...
  • Page 35: Lan To Wan: Input Configuration

    570NAT-HW-X19 High Density Network Address Translator 4.4.1. LAN to WAN: Input Configuration Flows 1 to 256 Mode: This control allows the user to enable the associated input stream for encapsulation. VLAN ID: This control allows the user to assign a VLAN ID to the associated flow; incoming packets of the flow with the specified VLAN ID will then be encapsulated.
  • Page 36: Ip Nat

    570NAT-HW-X19 High Density Network Address Translator 4.5. IP NAT Figure 4-10 : WebEASY® - Core Configured as IP NAT (Part 1 – LAN to WAN) There is up to 256 transport streams that can be specified to be configured based on its multicast address and is sectioned into flow groups.
  • Page 37: Lan To Wan: Input Flow Configuration

    570NAT-HW-X19 High Density Network Address Translator 4.5.1. LAN to WAN: Input Flow Configuration Flows 1 to 256 Mode: This control allows the user to enable or disable the input associated with that flow. Input Destination IP Address: This control allows the user to set the Input Destination IP address of the packets to be received.
  • Page 38: Wan To Lan: Input Flow Configuration

    570NAT-HW-X19 High Density Network Address Translator Figure 4-11 : WebEASY® - IP NAT (Part 2 – WAN to LAN) 4.5.3. WAN to LAN: Input Flow Configuration Flows 1 to 256 Mode: This control allows the user to enable De-Encap/NAT or disable WAN to LAN for this flow.
  • Page 39: Wan To Lan: Address Translation Configuration

    570NAT-HW-X19 High Density Network Address Translator Input Source IP Address: This control is used in NAT mode to configure the output header with the desired source IP address. Input Bitrate: This monitor will display the bit rate of the streams that are being received in kbps.
  • Page 40: Mc-In-Mc Nat + Ip Nat

    570NAT-HW-X19 High Density Network Address Translator 4.6. MC-IN-MC NAT + IP NAT Figure 4-12 : WebEASY® - MC-in-MC NAT + IP NAT (Part 1) There are up to 256 transport streams that can be specified to be configured based on its multicast address and is sectioned into flow groups.
  • Page 41: Lan To Wan: Input Flow Configuration

    570NAT-HW-X19 High Density Network Address Translator 4.6.1. LAN to WAN: Input Flow Configuration Flows 1-256 Mode: This control allows the user to enable or disable the input associated with that flow. Input Destination IP Address: This control allows the user to set the Input Destination IP address of the packets to be received.
  • Page 42: Lan To Wan : Encapsulation Header Configuration

    570NAT-HW-X19 High Density Network Address Translator Figure 4-13 : WebEASY® - MC-in-MC NAT + IP NAT (Part 2) 4.6.3. LAN to WAN : Encapsulation Header Configuration Flows 1-256 Source IP Address: Allows user to designate source IP for encapsulation header.
  • Page 43: Wan To Lan: Input Flow Configuration

    570NAT-HW-X19 High Density Network Address Translator 4.6.4. WAN to LAN: Input Flow Configuration Flows 1 to 256 Mode: This control allows the user to enable De-Encap/NAT or disable WAN to LAN for this flow. Input Destination IP Address: This control allows the user to set the Input Destination IP address of the packets to be received.
  • Page 44: Link Aggregation \ Import Route

    570NAT-HW-X19 High Density Network Address Translator allows users to change the routing from the default shown in Figure 1-2. This routing can be done using ‘grid’, ‘directed’ and ‘tiled’ views, descbired below. A given processing core cannot contribute its Tx traffic to more than one WAN port.
  • Page 45: Link Aggregation - Grid

    570NAT-HW-X19 High Density Network Address Translator Figure 4-16 : WebEASY - Link Aggregation \ Export Route ® To export the currently set route to a router settings file, select ‘Export’ from the ‘To Perform’ menu. A menu will appear prompting the user to set the range of inputs and outputs to be exported. Selecting ‘Ok’...
  • Page 46: Figure 4-18 : Webeasy - Link Aggregation\Grid View\Linking In Grid

    570NAT-HW-X19 High Density Network Address Translator Figure 4-18 : WebEASY - Link Aggregation\Grid View\Linking in Grid ® Once this new route is selected in grid, it will be placed in the ‘To Perform’ que as shown below in Figure 4-19. Here, the old route will be shown in red on the grid, and the route to be Un-Routed will appear in the ‘Un-Route’...
  • Page 47: Link Aggregation - Directed

    570NAT-HW-X19 High Density Network Address Translator 4.7.2. Link Aggregation – Directed Figure 4-21 : WebEASY - Link Aggregation\Directed View ® The directed view allows users to assign routes in a drag-and-drop manner by selecting a core from the ‘Core’ column and dragging it to the port it is to be assigned. The example shown below in Figure 4-22 shows how to map Core 1 to Port 9 using drag-and-drop in directed view.
  • Page 48: Link Aggregation - Tiled

    570NAT-HW-X19 High Density Network Address Translator Directed view also allows for unmapping without creating a new route (shown below in Figure 4-24). To do so, select the port to be unmapped (1), this will bring up a menu prompting the user if they wish to un- route for that port (2) click ok to un-route, once this is done the link will appear in red and will be displayed in the ‘Un-Route’...
  • Page 49: Figure 4-27 : Webeasy - Link Aggregation\Tiled View\Linking In Tiled

    570NAT-HW-X19 High Density Network Address Translator to the route will appear in the ‘Route’ and ‘Un-route’ (if this new route will undo an old one) tables in the ‘To Perform’ menu. To apply this new route, select ‘Apply’ in the ‘To Perform’ menu.
  • Page 50: Redundancy

    570NAT-HW-X19 High Density Network Address Translator 4.8. REDUNDANCY Redundancy allows for traffic to be re-routed to a backup core upon failure. For redundancy, cores are paired as 1-2, 3-4, 5-6. Behavior of a data flow upon failure can be assigned separately for each individual flow separate from each other flow on that core.
  • Page 51: Flow Redundancy Configuration

    570NAT-HW-X19 High Density Network Address Translator 4.8.2. Flow Redundancy Configuration 1- Revertible - In this mode, when the flow fails over to backup, it will remain on the backup path until the main path heals. When the main path is healed, the output will switch back to main.
  • Page 52: Notify Core

    570NAT-HW-X19 High Density Network Address Translator 4.10. NOTIFY CORE A notify core page is available for all 6 cores, each is identical regardless of which NAT configuration the core is using. The Notify Core allows for the user to set traps based on flow absence, and on bandwidth over limit.
  • Page 53: Figure 4-32 : Webeasy - Notify Core (2) \ Bandwidth Over Limit

    570NAT-HW-X19 High Density Network Address Translator Like the ‘Flow Absent’ notify menu (shown above in Figure 4-31), the ‘Bandwidth Over Limit’ menu (shown beloe in Figure 4-32) Figure 4-32 : WebEASY - Notify Core (2) \ Bandwidth Over Limit ®...
  • Page 54: Configuration Management Tab

    570NAT-HW-X19 High Density Network Address Translator 4.11. CONFIGURATION MANAGEMENT TAB The Configuration Management tab allows the user to export, edit and import each mode in a CSV file format. The CSV file is useable in Microsoft Excel and allows for easy editing, saving and uploading file using the Browse and Upload buttons.
  • Page 55: Upgrade Procedure

    Password. Enter “root” for Password and “evertz” for Login. On the top of the web page for the 570NAT-HW-X19, there is a tab labeled Upgrade. The Upgrade tab is used to check current firmware version and upload the latest firmware.
  • Page 56: Figure 5-3: Webeasy - Firmware Upgrade Menu

    570NAT-HW-X19 High Density Network Address Translator Figure 5-3: WebEASY - Firmware Upgrade Menu ® Page - 46 Revision 1.0...

Table of Contents