McAfee Network Security Platform

Transcription

1 Revision K McAfee Network Security Platform (NS-series Interface Modules Reference Guide)

2 COPYRIGHT Copyright 2019 McAfee, LLC TRADEMARK ATTRIBUTIONS McAfee and the McAfee logo, McAfee Active Protection, epolicy Orchestrator, McAfee epo, McAfee EMM, Foundstone, McAfee LiveSafe, McAfee QuickClean, Safe Eyes, McAfee SECURE, SecureOS, McAfee Shredder, SiteAdvisor, McAfee Stinger, True Key, TrustedSource, VirusScan are trademarks or registered trademarks of McAfee, LLC or its subsidiaries in the US and other countries. Other marks and brands may be claimed as the property of others. LICENSE INFMATION License Agreement NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FTH THE GENERAL TERMS AND CONDITIONS F THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT PURCHASE DER DOCUMENTS THAT ACCOMPANY YOUR SOFTWARE PACKAGING THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE THE PLACE OF PURCHASE F A FULL REFUND. 2 McAfee Network Security Platform

3 Contents 1 Overview 5 Contents of the box Installation of the interface module Install the interface module during a fresh installation of the Sensor Install the interface module on an up and running Sensor Install the transceiver module Technical 11 2-port QSFP Gigabit interface module port QSFP+ 40 Gigabit interface module port QSFP+ 40 Gigabit interface module port 10/1 Gig SM 8.5 micron with internal fail-open interface module port 10/1 Gig MM 50 micron with internal fail-open interface module port 10/1 Gig MM 62.5 micron with internal fail-open interface module port RJ Gbps/1 Gbps/100 Mbps with internal fail-open interface module port RJ-45 10/100/1000 Mbps with internal fail-open interface module port SFP/SFP+ 1/10 Gigabit interface module McAfee Network Security Platform 3

4 Contents 4 McAfee Network Security Platform

5 1 1 Overview McAfee's NS-series network modules offer a variety of network interfaces, densities, and Sensor deployment options. The 2-port QSFP28 (Quad Small Form-Factor Pluggable Plus) Network Interface Module provides 100 Gigabit ethernet performance on each port. The 2-port QSFP+ (Quad Small Form-Factor Pluggable Plus) Network Interface Module provides 40 Gigabit ethernet performance on each port. The 4-port QSFP+ (Quad Small Form-Factor Pluggable Plus) Network Interface Module provides 40 Gigabit ethernet performance on each port. The 4-port SM 8.5 micron with internal fail-open Network Interface Module provides 10/1 Gigabit ethernet performance on each port. The 4-port MM 50 micron with internal fail-open Network Interface Module provides 10/1 Gigabit ethernet performance on each port. The 4-port MM 62.5 micron with internal fail-open Network Interface Module provides 10/1 Gigabit ethernet performance on each port. The 4-port RJ-45 with internal fail-open Network Interface Module provides 10 Gbps/1 Gbps/100 Mbps ethernet performance on each port. The 6-port RJ 45 with internal fail-open Network Interface Module provides 10/100/1000 Mbps ethernet performance on each port. The 8-port SFP+/SFP (Small Form-Factor Pluggable Plus) Network Interface Module provides 10/1 Gigabit ethernet performance on each port. Contents Contents of the box Installation of the interface module Install the transceiver module Contents of the box The following interface modules are shipped. McAfee Network Security Platform 5

6 1 Overview Contents of the box 2-port QSFP Gigabit interface module(screws fixed on the sides of the module to attach it to the Sensor) Figure port QSFP Gigabit interface module 2-port QSFP+ 40 Gigabit interface module (screws fixed on the sides of the module to attach it to the Sensor) Figure port QSFP+ 40 Gigabit interface module 4-port QSFP+ 40 Gigabit interface module (screws fixed on the sides of the module to attach it to the Sensor) Figure port QSFP+ 40 Gigabit interface module 6 McAfee Network Security Platform

7 Overview Contents of the box 1 4-port 10/1 Gig SM 8.5 micron with internal fail-open interface module (screws fixed on the sides of the module to attach it to the Sensor) Figure port 10/1 Gig SM 8.5 µm with internal fail-open interface module 4-port 10/1 Gig MM 50 micron with internal fail-open interface module (screws fixed on the sides of the module to attach it to the Sensor) Figure port 10/1 Gig MM 50 µm with internal fail-open interface module 4-port 10/1 Gig MM 62.5 micron with internal fail-open interface module (screws fixed on the sides of the module to attach it to the Sensor) Figure port 10/1 Gig MM 62.5 µm with internal fail-open interface module McAfee Network Security Platform 7

8 1 Overview Contents of the box 4-port RJ Gbps/1 Gbps/100 Mbps with internal fail-open interface module (screws fixed onthe sides of the module to attach it to the Sensor) Figure port RJ Gbps/1 Gbps/100 Mbps with internal fail-open interface module 6-port RJ-45 1 Gbps/100 Mbps/10 Mbps with internal fail-open interface module (screws fixed on the sides of the module to attach it to the Sensor) Figure port RJ-45 1 Gbps/100 Mbps/10 Mbps with internal fail-open interface module 8-port SFP/SFP+ 1/10 Gigabit interface module (screws fixed on the sides of the module to attach it to the Sensor) Figure port SFP/SFP+ 1/10 Gigabit interface module 8 McAfee Network Security Platform

9 Overview Installation of the interface module 1 Installation of the interface module This section provides instructions on how to install the interface module based on the following scenarios: Install the interface module during a fresh installation of the Sensor. Install the interface module on an up and running Sensor. Install the interface module during a fresh installation of the Sensor This section provides the steps to install the interface module for a fresh installation of Manager and Sensor. Task 1 Remove the module from its protective packaging. It is assumed that the Sensor is yet to be powered on, and trust between the Sensor and the Manager has not been established. 2 Grip the sides of the module with your thumb and forefinger and insert the module into the slot. Figure 1-10 Install an interface module 3 Drive in the screws fixed on the sides of the module to attach it to the Sensor. 4 Turn on the Sensor. 5 Establish trust between the Sensor and the Manager. Install the interface module on an up and running Sensor This section provides the steps to install the interface module on a Sensor which is up and running. Task 1 Power on the Sensor without inserting the pluggable module(s) into the slot(s). 2 Establish trust between the Sensor and the Manager. 3 Grip the sides of the module with your thumb and forefinger and insert the module into the slot. 4 Wait for 5 minutes. 5 Reboot the Sensor from the CLI. Install the transceiver module McAfee's 850 and 1310 nanometer QSFP28 or QSFP+ transceiver modules are designed for use in 100 or 40 Gbps links over multimode fiber or single mode fiber. McAfee's 850 and 1310 nanometer SFP+/SFP transceivers are designed for use in 10/1 Gbps links over multi mode or single mode fiber. This section provides the steps to install a module. McAfee Network Security Platform 9

10 1 Overview Install the transceiver module Task 1 Remove the module from its protective packaging. 2 Locate the label on the module and make sure that the alignment groove is down. 3 Grip the sides of the module with your thumb and fore-finger and insert the module into the module socket. Modules are keyed to prevent incorrect insertion. Figure 1-11 Insert a transceiver module For more information, see the McAfee Network Security Platform NS-series Transceiver Modules Reference Guide. The 4-port 10/1 Gig SM 8.5 µm, MM 50 µm, and MM 62.5 µm network interface modules have in-built SFP+ transceivers. 10 McAfee Network Security Platform

11 2 Technical 2 This section details the technical of the interface modules. Contents 2-port QSFP Gigabit interface module 2-port QSFP+ 40 Gigabit interface module 4-port QSFP+ 40 Gigabit interface module 4-port 10/1 Gig SM 8.5 micron with internal fail-open interface module 4-port 10/1 Gig MM 50 micron with internal fail-open interface module 4-port 10/1 Gig MM 62.5 micron with internal fail-open interface module 4-port RJ Gbps/1 Gbps/100 Mbps with internal fail-open interface module 6-port RJ-45 10/100/1000 Mbps with internal fail-open interface module 8-port SFP/SFP+ 1/10 Gigabit interface module 2-port QSFP Gigabit interface module The technical for the 2-port QSFP Gigabit interface module are listed in the following table. Product compatibility 2 ports of 100 Gigabit Ethernet QSFP28 Supported in NS9500 Status: Green(Operational), Off (module not initialized) Activity: Amber (blink amber with stretched pulse as a packet is sent or received) Dimensions: (H) x (W) x (D) in Humidity % non-condensing (operating); 5-95% non-condensing (non-operating) 2-port QSFP+ 40 Gigabit interface module The technical for the 2-port QSFP+ 40 Gigabit interface module are listed in the following table. McAfee Network Security Platform 11

12 2 Technical 4-port QSFP+ 40 Gigabit interface module Product compatibility 2 ports of 40 Gigabit Ethernet QSFP+ Supported in NS9500, NS9300, NS9200, and NS9100 Status: Green (Operational), Off (module not initialized) Activity: Amber (blink amber with stretched pulse as a packet is sent or received) Dimensions: (H) x (W) x (D) in Humidity % non condensing (operating); 5-95% non condensing (non-operating) 4-port QSFP+ 40 Gigabit interface module The technical for the 4-port QSFP+ 40 Gigabit interface module are listed in the following table. Product compatibility 4 ports of 40 Gigabit Ethernet QSFP+ Supported in NS9500, NS9300, NS9200, and NS9100 Status: Green (Operational), Off (module not initialized) Activity: Amber (blink amber with stretched pulse as a packet is sent or received) Dimensions: (H) x (W) x (D) in Humidity % non-condensing (operating); 5-95% non-condensing (non-operating) 12 McAfee Network Security Platform

13 Technical 4-port 10/1 Gig SM 8.5 micron with internal fail-open interface module 2 4-port 10/1 Gig SM 8.5 micron with internal fail-open interface module The technical for the 4-port 10/1 Gigabit SM 8.5 micron interface module are listed in the following table: Product compatibility 4 ports of 10 Gigabit Ethernet using Duplex LC connector and 8.5 µm single mode fiber 4 ports of 1 Gigabit Ethernet using Duplex LC connector and 8.5 µm single mode fiber Supported in NS9500, NS9300, NS9200, NS9100, NS7300, NS7200, NS7100, NS7350, NS7250, and NS7150 Status: Green (Operational), Off (module not initialized) Activity: Amber (blink amber with stretched pulse as a packet is sent or received) Normal / Bypass: Green (port pair is inline), Off (port pair is in bypass) Green if configured for any port mode (SPAN, Inline Fail-Closed, Inline Fail-Open, Tap) and dark if port pair is configured for internal fail-open and is in bypass mode (during system reboot or when an administrator disables ports). Dimensions: (H) x (W) x (D) in Humidity % non-condensing (operating); 5-95% non-condensing (non-operating) 4-port 10/1 Gig MM 50 micron with internal fail-open interface module The technical for the 4-port 10/1 Gigabit MM 50 µm interface module are listed in the following table: Product compatibility 4 ports of 10 Gigabit Ethernet using Duplex LC connector and 50 µm multimode fiber 4 ports of 1 Gigabit Ethernet using Duplex LC connector and 50 µm multimode fiber Supported in NS9500, NS9300, NS9200, NS9100, NS7300, NS7200, NS7100, NS7350, NS7250, and NS7150 McAfee Network Security Platform 13

14 2 Technical 4-port 10/1 Gig MM 62.5 micron with internal fail-open interface module Status: Green (Operational), Off (module not initialized) Activity: Amber (blink amber with stretched pulse as a packet is sent or received) Normal / Bypass: Green (port pair is inline), Off (port pair is in bypass) Green if configured for any port mode (SPAN, Inline Fail-Closed, Inline Fail-Open, Tap) and dark if port pair is configured for internal fail-open and is in bypass mode (during system reboot or when an administrator disables ports). Dimensions: (H) x (W) x (D) in Humidity % non-condensing (operating); 5-95% non-condensing (non-operating) 4-port 10/1 Gig MM 62.5 micron with internal fail-open interface module The technical for the 4-port 10/1 Gigabit MM 62.5 µm interface module are listed in the following table: Product compatibility 4 ports of 10 Gigabit Ethernet using Duplex LC connector and 62.5 µm multimode fiber 4 ports of 1 Gigabit Ethernet using Duplex LC connector and 62.5 µm multimode fiber Supported in NS9500, NS9300, NS9200, NS9100, NS7300, NS7200, NS7100, NS7350, NS7250, and NS7150 Status: Green (Operational), Off (module not initialized) Activity: Amber (blink amber with stretched pulse as a packet is sent or received) Normal / Bypass: Green (port pair is inline), Off (port pair is in bypass) Green if configured for any port mode (SPAN, Inline Fail-Closed, Inline Fail-Open, Tap) and dark if port pair is configured for internal fail-open and is in bypass mode (during system reboot or when an administrator disables ports). Dimensions: (H) x (W) x (D) in Humidity % non-condensing (operating); 5-95% non-condensing (non-operating) 14 McAfee Network Security Platform

15 Technical 4-port RJ Gbps/1 Gbps/100 Mbps with internal fail-open interface module 2 4-port RJ Gbps/1 Gbps/100 Mbps with internal fail-open interface module The technical for the 4-port RJ Gbps/1 Gbps/100 Mbps interface module are listed in the following table: Product compatibility 4 RJ-45 ports of 10 Gbps/1 Gbps/100 Mbps Supported in NS9500, NS9300, NS9200, NS9100, NS7300, NS7200, NS7100, NS7350, NS7250, and NS7150 Status: Green (Operational), Off (module not initialized) Speed: Bicolor LED (green/amber). 10 Gbps (green), 1 Gbps (amber), and 100 Mbps (off). Normal / Bypass: Green (port pair is inline), Off (port pair is in bypass) Green if configured for any port mode (SPAN, Inline Fail-Closed, Inline Fail-Open, Tap) and dark if port pair is configured for internal fail-open and is in bypass mode (during system reboot or when an administrator disables ports). Dimensions: (H) x (W) x (D) inches Humidity % non-condensing (operating); 5-95% non-condensing (non-operating) 6-port RJ-45 10/100/1000 Mbps with internal fail-open interface module The technical for the 6-port RJ-45 10/100/1000 Mbps interface module are listed in the following table: 6 ports of 10/100/1000 Mbps Product compatibility Supported in NS9500, NS9300, NS9200, NS9100, NS7300, NS7200, NS7100, NS7350, NS7250, and NS7150 Status: Green (Operational), Off (module not initialized) Speed: Bicolor LED (green/amber). 1 Gbps (green), 100 Mbps Gbps (amber), and 10 Mbps (off). Normal / Bypass: Green (port pair is inline), Off (port pair is in bypass) Green if configured for any port mode (SPAN, Inline Fail-Closed, Inline Fail-Open, Tap) and dark if port pair is configured for internal fail-open and is in bypass mode (during system reboot or when an administrator disables ports). McAfee Network Security Platform 15

16 2 Technical 8-port SFP/SFP+ 1/10 Gigabit interface module Dimensions: (H) x (W) x (D) inches Humidity % non-condensing (operating); 5-95% non-condensing (non-operating) 8-port SFP/SFP+ 1/10 Gigabit interface module The technical for the 8-port SFP/SFP+ 1/10 Gigabit interface module are listed in the following table: Product compatibility A combination of any of the following 8-port modules: 8 ports of 10 Gigabit Ethernet SFP+ (10GBASE-R) 8 ports of 1 Gigabit Ethernet SFP (1GBASE-X) 8 ports of 1000 Mbps Cu SFP Supported in NS9500, NS9300, NS9200, NS9100, NS7300, NS7200, NS7100, NS7350, NS7250, and NS7150 Status: Green (Operational), Off (module not initialized) Activity: Amber (blink amber with stretched pulse as a packet is sent or received) Dimensions: (H) x (W) x (D) inches Humidity % non-condensing (operating); 5-95% non-condensing (non-operating) 16 McAfee Network Security Platform

17 0K00