00

FIBER O PTIC GIGABIT LAN EXPANSION MODULE

P/N 20-0249-01 Rev C

DISCLAIMER THIS MANUAL IS PROVIDED "AS IS" WITHOUT ANY EXPRESS OR IMPLIED WARRANTY OF ANY KIND INCLUDING WARRANTIES OF MERCHANTABILITY, NONINFRINGEMENT OF INTELLECTUAL PROPERTY, OR FITNESS FOR ANY PARTICULAR PURPOSE. IN NO EVENT SHALL PACKETEER, INC. OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION, LOSS OF INFORMATION) ARISING OUT OF THE USE OF OR INABILITY TO USE THIS MANUAL, EVEN IF PACKETEER, INC. HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. BECAUSE SOME JURISDICTIONS PROHIBIT THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES, THE ABOVE LIMITATION MAY NOT APPLY TO YOU. Packeteer, Inc. and its suppliers further do not warrant the accuracy or completeness of the information, text, graphics, links or other items contained within this manual or for incidental, indirect, special or consequential damages in connection with the furnishing, and performance of this manual. Packeteer, Inc. may make changes to this manual, or to the products described herein, at any time without notice. Packeteer, Inc. makes no commitment to update this manual. You may not use or export this document in violation of U.S. export laws and regulations. COPYRIGHT/TRADEMARKS Packeteer, the Packeteer logo, combinations of Packeteer and the Packeteer logo as well as PacketShaper and PacketSeeker are trademarks or registered trademarks of Packeteer, Inc. in the United States and other countries. Other product and company names used in this document are used for identification purposes only and may be trademarks of other companies and are the property of their respective owners. Copyright 1996 - 2006 Packeteer, Inc. All rights reserved. No part of this document may be reproduced, photocopied, stored on a retrieval system, transmitted, or translated into another language without the express written consent of Packeteer, Inc. U.S. GOVERNMENT RESTRICTED RIGHTS The Packeteer Software is comprised of "commercial computer software" and "commercial computer software documentation" as such terms are used in 48 C.F.R. 12.212 (SEPT 1995) and is provided to the Government (i) for acquisition by or on behalf of civilian agencies, consistent with the policy set forth in 48 C.F.R. 12.212; or (ii) for acquisition by or on behalf of units of the Department of Defense, consistent with the policies set forth in 48 C.F.R. 227-7202-1 (JUN 1995) and 227.7202-3 (JUN 1995). Packeteer, Inc. software is provided with "RESTRICTED RIGHTS." Use, duplication, or disclosure by the Government is subject to restrictions as set forth in FAR 52.227-14 and DFAR 252.227-7013 et seq. or its successor. Use of Packeteer, Inc. products or software by the Government constitutes acknowledgment of Packeteer Inc.'s proprietary rights in them and to the maximum extent possible under federal law, the Government shall be bound by the terms and conditions set forth in Packeteer, Inc.'s end user agreement. Packeteer, Inc. 10201 North De Anza Drive, Cupertino, CA 95014 October, 2006 20-0249-01 Revision C

SAFETY AND REGULATORY COMPLIANCE For information on safety and regulatory compliance, see the "Safety and Regulatory Information" in Appendix A.

TABLE OF CONTENTS
Chapter 1: Introduction
Fiber Gigabit LAN Expansion Card Requirements ........................... 1-3 Installing a Fiber Optic Gigabit LAN Expansion Module ................. 1-5

Chapter 2: Install into a 6500 model

Installing the LEM into a 6500 model ............................................... 2-2 Insert the SFP Transceiver Modules.................................................. 2-6 Verify the Installation ........................................................................ 2-8 Configure the LEM module............................................................. 2-10 Problems?......................................................................................... 2-15

Chapter 3: Install into an 8500/9500/10000 Model

Installing the LEM into an 8500/9500/10000 model ......................... 3-2 Insert the SFP Transceiver Modules .................................................. 3-4 Verify the Installation......................................................................... 3-6 Configure the LEM module ............................................................... 3-8 Connect the Unit to the Network........................................................ 3-9 Problems? ......................................................................................... 3-13

Appendix A: Safety and Regulatory Information Appendix B: Packeteer-Supported SFP Transceivers

CHAPTER 1: INTRODUCTION
Packeteers third generation Fiber Optic Gigabit Ethernet LAN Expansion Module, or LEM, offers some advanced features not available in earlier models. This Fiber Optic Gigabit LEM utilizes LC-type connectors and smaller, modular SFP (Small Form-factor Pluggable) transceivers that can be easily exchanged, if desired. The LEM also has an RJ-11 port that can control an optional external optical bypass switch, enabling failover bypass in the event the Packeteer unit is reset or powered off. (Refer the Packeteer Fiber Bypass Switch installation guide for additional information.) Bypass switch models are available for LEMs with SX or LX transceivers. No bypass switch is available for LEMs with 1000Base-T transceivers, or where matching transceivers are not found in both SFP ports on the LEM. Use a LAN Expansion Module when: You want to manage a single WAN link and your network includes a firewall/router that splits your network into two separate LANs; a protected segment and a DMZ segment. You want to manage a single WAN link and your network includes a router with multiple LAN segments. You want to implement a port bypass failover mechanism by adding a optical bypass switch. You have a single WAN link and your network includes a router with two separate LANs; one segment may connect to the LAN through a firewall and the other to a VPN tunnel management device.

1-1

Chapter 1: Introduction

Your network includes branch offices with 2-3 separate LANs that you to manage, and only one WAN link.

1-2

Chapter 1: Introduction

Fiber Gigabit LAN Expansion Card Requirements

The software for the LEM2-1000M-SX Fiber Optic Gigabit LAN Expansion Module is included in PacketWise version 6.1.0 and all later versions. The RoHs-compliant LEM2G-1000M-SX requires PacketWise 7.x or later. LANs connected to this fiber-optic connector LEM may use either 1000Base-SX or 1000Base-LX Ethernet ports, or 1000Base-T ports, depending upon the type of transceivers installed into the LEM. If your network uses another standard for fiber optic ethernet, use an appropriate converter cable.

Note: The PacketShaper 10000, PacketSeeker 10000 and PacketShaper/ISP 10000 are only compatible with LEM2G1000M-SX and later-generation LEM2-1000M-SX LAN Expansion Modules. These newer LEMs can be identified by their serial numbers, which have values of 007-10010001 or higher. For details, see Problems? on page 3-12.

Although multimode (SX) transceivers may be included with the SFP Transceivers LEM (depending upon your LEM model type), due to the interchangeable nature of an SFP transceiver it is possible to remove existing transceivers and install into the LEM any supported SFP transceiver appropriate for your type of network.

Note: Refer to Appendix B for a list of Packeteer-supported SFP Transceivers from other vendors.

LED Indicators

The front panel of the LEM has the following LED indicators beside each port. LED Indicator Link Description Illuminated when the network cable is properly connected

1-3

Chapter 1: Introduction

LED Indicator Tx/Rx

Description Illuminated when network cable is properly connected; flickers when the unit is transmitting and receiving data When illuminated green, this light indicates that the port has an SX transceiver installed. When illuminated yellow, it indicates that the port has a copper (1000Base-T) or LX transceiver installed.

SX/LX1

1. Typically, an SX transceiver is used with a multimode fiber network and an LX transceiver is used with a single-mode fiber network.

1-4

Chapter 1: Introduction

Installing a Fiber Optic Gigabit LAN Expansion Module

The connectors on your unit look like one of the four illustrations below. Follow the instructions for your unit. If your unit looks like this, follow installation directions in Chapter 2, "Install into a 6500 model."

CONSOLE STATUS FAULT POWER

LINK Tx/Rx 100

INSIDE

LINK Tx/Rx 100

OUTSIDE

If your unit looks like one of these, follow directions in Chapter 3, "Install into an 8500/9500/10000 Model."
LINK Tx/Rx SPEED
INSIDE

LINK Tx/Rx SPEED

OUTSIDE

CONSOLE STATUS FAULT POWER

OUTSIDE
LINK Tx Rx
INSIDE

LINK Tx Rx

OUTSIDE

CONSOLE STATUS FAULT POWER

OUTSIDE
CONTROL

INSIDE

OUTSIDE

LINK Tx Rx

Link INSIDE Tx/Rx

SX/LX

LINK Tx Rx

Link OUTSIDE Tx/Rx

SX/LX

CONSOLE STATUS FAULT POWER

1-5

Chapter 1: Introduction

1-6

CHAPTER 2: INSTALL INTO A 6500 MODEL

This chapter describes how to install a LEM2G-1000M-SX or LEM2-1000M-SX Fiber Optic Gigabit LAN Expansion Module into PacketShaper 6500 or PacketShaper 6500/ISP. The directions in this chapter apply only to these models, which are hereafter collectively referred to as a 6500 model. The following illustration shows a unit with two Fiber Optic Gigabit LEMs, for a total of three LANs using one 6500 model. This is a maximum configuration; you can install only one module if you wish. Directions begin on page 2-2.
WAN Router
INPUT 100-240 MAX 50-60Hz

WAN

LAN B
INSIDE
CONTROL

OUTSIDE
Link Tx/Rx
SX/LX

Link Tx/Rx
SX/LX

INSIDE
CONTROL

OUTSIDE
Link Tx/Rx
SX/LX

Link Tx/Rx
SX/LX

CONSOLE STATUS FAULT POWER

LINK Tx/Rx 100

INSIDE

LINK Tx/Rx 100

OUTSIDE

LAN A

LAN C

2-1

Chapter 2: Install into a 6500 model

Installing the LEM into a 6500 model

To install the LEM2G-1000M-SX or LEM2-1000M-SX Fiber Optic LEM into a 6500 model: 1. Disconnect the system from any telecommunication links, networks, or modems, and then turn off the system power source. WARNING: Failure to do so before you open the system or do any procedures can result in personal injury or equipment damage. 2. Ensure that you are in a dust-free environment. Dust particles may damage or impair the SFP transceivers, connector openings and fiber cable LC connectors. 3. Ground yourself. WARNING: Electrostatic discharge (ESD) can damage system components. If an ESD station is not available, wear a wrist strap attached to a metal part of the system. If you dont have a strap, touch some metal part of the box to ground yourself. 4. Remove the rackmount ears from the 6500 model (if present), then remove the screws from the back of the unit.

2-2

Chapter 2: Install into a 6500 model

5. Remove the unit cover.

6. Remove the screw that holds one of the slot covers in place. To install two modules, remove both slot covers.

INSIDE

OUTSIDE

2-3

Chapter 2: Install into a 6500 model

7. Remove the screws holding the C-shaped mounting bracket from the module, then remove the bracket.

8. Attach the other bracket supplied with the LEM by aligning the screw holes on the bracket tabs directly above the screw holes on the module, then inserting the screws from below, as shown. WARNING: Using an incorrect bracket can damage the module or the 6500 model.

CO

NT

RO L LIN Tx K INS IDE LIN Tx

/Rx Sx /Lx

2-4

INS IDE

Sx/ Lx Tx/ Rx LIN K

UT SID

Sx/ Lx Tx/ Rx LIN K

CO

NT

RO

K OU TS

/Rx /Lx

Xx

IDE

Chapter 2: Install into a 6500 model

9. Locate the expansion slots on the riser card in the interior of the 6500 model. 10. Insert the LEM completely into the opening, then push it toward the expansion slots on the riser card until it snaps into the slots. Be careful not to push the riser card so hard that it disconnects from the motherboard. There are extra pins on the LEM that are not used on a 6500 model and will not attach to the riser card.

CO

NT

RO

L LINK Tx /R x IN

Sx

/Lx

SI DE LINK Tx /R x Xx /Lx

OUT

SI

DE

11. If you are installing two LEMs, repeat steps 7-10 for the other module. 12. Replace the screw(s) that holds the expansion card(s) in place, then replace the cover and cover screws.

2-5

Chapter 2: Install into a 6500 model

Insert the SFP Transceiver Modules

The following procedure describes how to insert the SFP transceiver modules into an installed Fiber Optic Gigabit LEM: 1. Remove the rubber protector plugs from the transceivers. Save these protectorsafter installing the LEM, you may reinsert these plugs to protect the transceivers from dust when they are not in use.

2. Pull down on the latch handle until the latch on each transceiver is open at a 90 degree angle.

9
2-6

Chapter 2: Install into a 6500 model

Note: If the model of transceiver you install into the Fiber Optic Gigabit LEM does not have a handle or latch similar to the one shown on page 2-6, refer to the transceivers manufacturer for specific instructions on inserting it into and removing it from the LEM.

3. Ensure that the transceivers are correctly oriented as shown, then carefully insert them into their slots.

4. Push up on the small latch on each transceiver until it clicks, to lock the transceiver into place. Removing a transceiver To remove the transceiver, pull down on the latch to unlock the transceiver (as shown in step 2 on page 2-6), then pull on the latch and gently slide the transceiver out of the LEM module. Do not force the transceiver out of the module.

2-7

Chapter 2: Install into a 6500 model

Verify the Installation

Access the 6500 models browser interface and click the setup tab to verify that the LEM was recognized by the system. The setup page should look something like the one below. If no LAN settings appear for a LEM installed in either the upper or lower expansion slots or the setup page displays the message SFP: Not installed, your LEM has not been recognized by the system. Make sure the modules and SFP transceivers are seated correctly.

The figure above indicates that two LEMs have been properly installed with multimode (SX) transceivers. This figure shows just one example configuration; if your LEM transceivers are another supported brand, the setup page will display the transceiver type installed for each interface. If single-mode transceivers are installed, the setup page also displays the wavelength of the installed transceiver in kilometers. For example, an installed single-mode (LX) Infineon transceiver with a wavelength of 5 kilometers would show up on the setup page as SFP: 1000 Base LX-5 Infineon.

2-8

Chapter 2: Install into a 6500 model

If your LEM transceivers are another supported brand, the setup page will display the transceiver type installed for each interface. If the LEM cannot recognize the type of transceiver installed, the setup page will display the message SFP: Unknown.

Note: You do not have to configure NIC modes for the LEM; the LEM will auto-negotiate network speed.

2-9

Chapter 2: Install into a 6500 model

Configure the LEM module

1. From the web browser interface, click the setup tab, then choose the basic setup page, shown on page 2-8. Set Site Router to none. If this is set incorrectly, you may not be able to use the LEM. 2. To check security on this unit, select the setup tab, then choose security from the drop-down box. The Outside and Inside interface settings also apply to the LEM interfaces.

3. You can change security settings for all Inside and Outside interface communication, if desired. Click the Inside Interfaces: and Outside Interfaces: drop-down lists to specify access settings. Setting
unsecure (default) secure list

Access Level
Enables unlimited access over the specified interface.

Blocks all access from the specified interface Enables access to up to eight listed IP addresses, separated by spaces and/or commas. To specify a subnet, use the format: ipaddress:subnet_mask

2-10

Chapter 2: Install into a 6500 model

Connect the Unit to the Network

Connect the Built-in Port (optional)
If your network uses fiber optic connections, you may skip this section and continue to "Connect the First LEM" on page 2-12; 6500 models do not have built-in fiber optic ports. You do not have to connect the built-in port first or connect it at all. Use the following steps to cable the 6500 model to a router: 1. On the router, disconnect the straight-through cable connected to LAN A. 2. Reconnect this cable to the built-in port on the 6500 model labeled INSIDE. 3. Connect the 6500 models OUTSIDE port to the router, using the orange cross-over cable.
WAN Router
INPUT 100-240 MAX 50-60Hz

WAN

INSIDE
CONTROL

OUTSIDE
OUTSIDE Link Tx/Rx

INSIDE Link

Rx Tx Link

Rx Tx Link

Tx/Rx
SX/LX

SX/LX

INSIDE
CONTROL

OUTSIDE
Link Tx/Rx
SX/LX

CONSOLE STATUS FAULT POWER

LINK Tx/Rx 100

INSIDE

LINK Tx/Rx 100

OUTSIDE

Link Tx/Rx
SX/LX

LAN A

2-11

Chapter 2: Install into a 6500 model

Connect the First LEM

Use the following steps to cable the 6500 model to a router: 1. On the routers second LAN port, disconnect the fiber optic cable connected to LAN B. 2. Reconnect this cable to the INSIDE port of the LEM. 3. Connect the LEMs OUTSIDE port to the router.
WAN Router
INPUT 100-240 MAX 50-60Hz

WAN

LAN B
INSIDE
CONTROL

OUTSIDE
Link Tx/Rx
SX/LX

Link Tx/Rx
SX/LX

INSIDE
CONTROL

OUTSIDE
Link Tx/Rx
SX/LX

Link Tx/Rx
SX/LX

CONSOLE STATUS FAULT POWER

LINK Tx/Rx 100

INSIDE

LINK Tx/Rx 100

OUTSIDE

LAN A

4. Make sure the transmit and receive (Tx/Rx) LED on the module is active. The routers transmit port should be connected to the 6500 models receive port and vice versa.

Note: LANs connected to this fiber-optic connector LEM must use 1000Base-SX or 1000Base-LX Ethernet ports, or 1000Base-T ports, depending upon the type of transceivers installed into the LEM. If your network uses another standard, use an appropriate converter.

2-12

Chapter 2: Install into a 6500 model

Connect the Second LEM

Use the following steps to cable the 6500 model to a router: 1. On the routers third LAN port, disconnect the straightthrough cable connected to LAN C. 2. Reconnect this cable to the INSIDE port of the second LEM. 3. Connect the OUTSIDE port to the router.
WAN Router
INPUT 100-240 MAX 50-60Hz

WAN

LAN B
INSIDE
CONTROL

OUTSIDE
Link Tx/Rx
SX/LX

Link Tx/Rx
SX/LX

INSIDE
CONTROL

OUTSIDE
Link Tx/Rx
SX/LX

Link Tx/Rx
SX/LX

CONSOLE STATUS FAULT POWER

LINK Tx/Rx 100

INSIDE

LINK Tx/Rx 100

OUTSIDE

LAN A

LAN C

4. Make sure the transmit and receive (Tx/Rx) LED on the LEM is active. The routers transmit port should be connected to the 6500 models receive port and vice versa.

2-13

Chapter 2: Install into a 6500 model

Managing Traffic with Three LANs

Traffic from all three LANs is now being tracked by one unit. The traffic classes will reflect the combined traffic from all three LANs. For example, POP3 will include POP3 traffic from LAN A, LAN B, and LAN C. If you wanted to manage the individual LAN traffic to/from the WAN, you would create a class for each subnet and put classes such as POP3 under each subnet class.

Note: Even though traffic classes are combined, each LANs traffic is an individual flow; 6500 models cannot route traffic between LANs. For example, if one LAN has public servers and the other does not, the security of the non-public LAN will not be compromised.

Traffic between LANs (LAN A to LAN B for example) should not be controlled with traffic shaping, as it may slow the WAN speed. By default, units auto-discover such traffic as sameside and apply an ignore policy.

2-14

Chapter 2: Install into a 6500 model

Problems?
Problem One of these messages appears on the Packeteer units web browser info page or the LCD on the unit itself: Upper-inside Interface Status: Down Upper-outside Interface Status: Down One of these messages appears on the Packeteer units web browser info page or the LCD on the unit itself: Lower-inside Interface Status: Down Lower-outside Interface Status: Down The lower LAN Expansion Module is not configured correctly. Check your cabling. Possible Solution The upper LAN Expansion Module is not configured correctly. Check your cabling.

2-15

Chapter 2: Install into a 6500 model

2-16

CHAPTER 3: INSTALL INTO AN 8500/9500/10000 MODEL

This chapter describes how to install the LEM2G-1000M-SX or LEM2-1000M-SX Fiber Optic Gigabit LAN Expansion Module into the following Packeteer units: PacketShaper 8500 PacketSeeker 8500 PacketShaper 8500/ISP PacketShaper 9500 PacketSeeker 9500 PacketShaper 9500/ISP PacketShaper 10000 PacketSeeker 10000 PacketShaper 10000/ISP

The directions in this chapter apply only to these models, which are hereafter collectively referred to as an 8500/ 9500/10000 model. Although the illustrations in this chapter represent a 9500 model with a factory-installed Fiber Optic LEM, the same installation procedure also applies to 8500 and 10000 models. Directions begin on page 3-2.
WAN Router

WAN

LAN B
INSIDE
CONTROL

OUTSIDE
Link Tx/Rx
SX/LX

INSIDE
SX/LX

OUTSIDE
SX/LX
CONTROL

Link Tx/Rx
SX/LX

Tx/Rx Link

Tx/Rx Link

INSIDE
SX/LX

OUTSIDE
OUTSIDE

SX/LX

CONTROL

CONSOLE STATUS FAULT POWER

Tx/Rx Link

Tx/Rx Link

LAN C LAN A

3-1

Chapter 3: Install into an 8500/9500/10000 model

Installing the LEM into an 8500/9500/10000 model

To install the LEM2G-1000M-SX or LEM2-1000M-SX Fiber Optic LEM into a 8500/9500/10000 model: 1. Disconnect the system from any telecommunication links, networks, or modems, and then turn off the system power source. WARNING: Failure to do so before you open the system or do any procedures can result in personal injury or equipment damage. 2. Ensure that you are in a dust-free environment. Dust particles may damage or impair the SFP transceivers, connector openings and fiber cable connectors. 3. Ground yourself. WARNING: Electrostatic discharge (ESD) can damage system components. If an ESD station is not available, wear a wrist strap attached to a metal part of the system. If you dont have a strap, touch some metal part of the box to ground yourself. 4. If they are present, remove the rackmount ears. 5. Remove the screws from the door, then remove the door.

3-2

Chapter 3: Install into an 8500/9500/10000 model

6. Remove one of the blanks currently in an expansion slot.

7. Before installing the Fiber Optic Gigabit LEM into a 8500/ 9500/10000 model, ensure that the module has not been removed from its default C-shaped bracket. WARNING: Using the incorrect bracket can damage the module or the 8500/9500/10000 model. 8. Insert the module into the plastic guides then push it toward the riser card until you hear and feel it snap into place.

9. If you are installing two LEMs, repeat steps 6-8 for the second module. 10. Replace the door, then replace the door screws.

3-3

Chapter 3: Install into an 8500/9500/10000 model

Insert the SFP Transceiver Modules

The following procedure describes how to insert the SFP transceiver modules into an installed Fiber Optic Gigabit LEM: 1. Remove the rubber protector plugs from the transceivers. Save these protectorsafter installing the LEM, you may reinsert these plugs to protect the transceivers from dust when they are not in use.

2. Pull down on the latch handle until the latch on each transceiver is open at a 90 degree angle.

3-4

Chapter 3: Install into an 8500/9500/10000 model

Note: If the model of transceiver you install into the Fiber Optic Gigabit LEM does not have a handle or latch similar to the one shown on page 3-4, refer to the transceivers manufacturer for specific instructions on inserting it into and removing it from the LEM.

3. Ensure that the transceivers are correctly oriented as shown, then carefully insert them into their slots.

4. Push down on the small latch on each transceiver until it clicks, to lock the transceiver into place. Removing a transceiver To remove the transceiver, pull up on the latch to unlock the transceiver (as shown in step 2 on page 3-4), then pull on the latch and gently slide the transceiver out of the module. Do not force the transceiver out of the LEM module.

3-5

Chapter 3: Install into an 8500/9500/10000 model

Verify the Installation

Access the 8500/9500/10000 models browser interface and click the setup tab to verify that the LEM was recognized by the system. The setup page should look something like the one below. If no LAN settings appear for a LEM installed in either the upper or lower expansion slots or the setup page displays the message SFP: Not installed, your LEM has not been recognized by the system. Make sure the modules and SFP transceivers are seated correctly.

The figure above indicates that two LEMs have been properly installed with multimode (SX) transceivers. This figure shows just one example configuration; if your LEM transceivers are another supported brand, the setup page will display the transceiver type installed for each interface. If single-mode transceivers are installed, the setup page also displays the wavelength of the installed transceiver in kilometers. For example, an installed single-mode (LX) Infineon transceiver with a wavelength of 5 kilometers would show up on the setup page as SFP: 1000 Base LX-5 Infineon.

3-6

Chapter 3: Install into an 8500/9500/10000 model

If your LEM transceivers are another supported brand, the setup page will display the transceiver type installed for each interface. If the LEM cannot recognize the type of transceiver installed, the setup page will display the message SFP: Unknown.

Note: You do not have to configure NIC modes for the LEM; the LEM will auto-negotiate network speed.

3-7

Chapter 3: Install into an 8500/9500/10000 model

Configure the LEM module

1. From the web browser interface, click the setup tab, then choose the basic setup page shown on page 3-6. Set Site Router to none. If this is set incorrectly, you may not be able to use the LEM. 2. To check security levels, select the setup tab, then choose security from the drop-down box. The Outside and Inside interface settings also apply to the LEM interfaces.

3. You can change security settings for all Inside and Outside interface communication, if desired. Click the Inside Interfaces: and Outside Interfaces: drop-down lists to specify access settings. Setting
unsecure (default) secure list

Access Level
Enables unlimited access over the specified interface.

Blocks all access from the specified interface Enables access to up to eight listed IP addresses, separated by spaces and/or commas. To specify a subnet, use the format: ipaddress:subnet_mask

3-8

Chapter 3: Install into an 8500/9500/10000 model

Connect the Unit to the Network

Connect the Built-in Port (optional)
You do not have to connect the built-in port; you can use the LEM(s) instead of or in addition to the built-in port. Use the following steps to cable the unit to the network: 1. On the router, disconnect the straight-through cable connected to LAN A. 2. Reconnect this cable to the units built-in INSIDE port. 3. Connect the unit's built-in OUTSIDE port to the router.
WAN Router

WAN

INSIDE
CONTROL

OUTSIDE
Link Tx/Rx
SX/LX

INSIDE
SX/LX

OUTSIDE
SX/LX
CONTROL

Link Tx/Rx
SX/LX

Tx/Rx Link

Tx/Rx Link

INSIDE
SX/LX

OUTSIDE
SX/LX
CONTROL

CONSOLE STATUS FAULT POWER

Tx/Rx Link

Tx/Rx Link

LAN A

3-9

Chapter 3: Install into an 8500/9500/10000 model

Connect the First LEM

Use the following steps to cable a LEM to a router: 1. On the routers second LAN port, disconnect the fiber optic cable connected to LAN B. 2. Reconnect this cable to the LEMs INSIDE port. 3. Connect the LEMs OUTSIDE port to the router.
WAN Router

WAN

LAN B
INSIDE
CONTROL

OUTSIDE
Link Tx/Rx
SX/LX

INSIDE
SX/LX

OUTSIDE
SX/LX
CONTROL

Link Tx/Rx
SX/LX

Tx/Rx Link

Tx/Rx Link

INSIDE
SX/LX

OUTSIDE
SX/LX
CONTROL

CONSOLE STATUS FAULT POWER

Tx/Rx Link

Tx/Rx Link

LAN A

4. Make sure the transmit and receive (Tx/Rx) LED on the module is active. The routers transmit port should be connected to the units receive port and vice versa.

Note: LANs connected to this fiber-optic connector LEM must use 1000Base-SX or 1000Base-LX Ethernet ports, or 1000Base-T ports, depending upon the type of transceivers installed into the LEM. If your network uses another standard, use an appropriate converter cable.

3-10

Chapter 3: Install into an 8500/9500/10000 model

Connect the Second LEM

Use the following steps to cable a second LEM to a router: 1. On the routers third LAN port, disconnect the straightthrough cable connected to LAN C. 2. Reconnect this cable to the LEMs INSIDE port. 3. Connect the LEMs OUTSIDE port to LAN C.
WAN Router

WAN

LAN B
INSIDE
CONTROL

OUTSIDE
Link Tx/Rx
SX/LX

INSIDE
SX/LX

OUTSIDE
SX/LX
CONTROL

Link Tx/Rx
SX/LX

Tx/Rx Link

Tx/Rx Link

INSIDE
SX/LX

OUTSIDE
OUTSIDE

SX/LX

CONTROL

CONSOLE STATUS FAULT POWER

Tx/Rx Link

Tx/Rx Link

LAN C LAN A

4. Make sure the transmit and receive (Tx/Rx) LED on the module is active. The routers transmit port should be connected to the units receive port and vice versa.

3-11

Chapter 3: Install into an 8500/9500/10000 model

Managing Traffic with Three LANs

Traffic from all three LANs is now being tracked by one unit. The traffic classes will reflect the combined traffic from all three LANs. For example, POP3 will include POP3 traffic from LAN A, LAN B, and LAN C. If you wanted to manage the individual LAN traffic to/from the WAN, you would create a class for each subnet and put classes such as POP3 under each subnet class.

Note: Even though traffic classes are combined, each LANs traffic is an individual flow; 8500/9500/10000 models cannot route traffic between LANs. For example, if one LAN has public servers and the other does not, the security of the nonpublic LAN will not be compromised.

Traffic between LANs (LAN A to LAN B for example) should not be controlled with traffic shaping, as it may slow the WAN speed. By default, units auto-discover such traffic as sameside and apply an ignore policy.

3-12

Chapter 3: Install into an 8500/9500/10000 model

Problems?
Problem Possible Solution

One of these messages appears The upper LAN Expansion Module is on the Packeteer units Web not configured correctly. Check your browser info page or the LCD cabling. on the unit itself: Upper-inside Interface Status: Down Upper-outside Interface Status: Down One of these messages appears The lower LAN Expansion Module is on the Packeteer units Web not configured correctly. Check your browser info page or the LCD cabling. on the unit itself: Lower-inside Interface Status: Down Lower-outside Interface Status: Down Since I installed the LAN Expansion Module, my unit cannot see the corporate network at all. Are two outside ports connected to the same hub? The two outside ports must be connected to different LANs. Disconnect one of the outside cables; this should solve the problem temporarily. Develop a new strategy for connecting to two LANs.

3-13

Chapter 3: Install into an 8500/9500/10000 model

Problem

Possible Solution

One or both of the following Packeteer 10000 series units are only messages appear on the LCD: compatible with newer-generation LEMs. If your 10000 model does not ! Bad Upper LEM recognize the LEM, or you get one or ! Bad Lower LEM both of the LCD error messages shown (opposite), you may have installed an older LAN Expansion Module into a Packeteer 10000 series. Check the packaging for the LEM module and verify its serial number; the Packeteer 10000 series requires a LEM2G-1000M-T or LEM2-1000M-T with a serial number greater than 00610010001, or a LEM2G-1000M-SX or LEM2-1000M-SX with a serial number greater than 00710010001. If the LEM has a smaller serial number, remove the LEM from the unit and replace it with a Packeteer LEM with a compatible serial number.

3-14

APPENDIX A: SAFETY AND REGULATORY INFORMATION

Safety Warnings
SAFETY ELECTRICAL NOTICES WARNING: ELECTRIC SHOCK HAZARD To prevent ELECTRIC shock, do not remove cover. This unit contains HAZARDOUS VOLTAGES and should only be opened by a trained and qualified technician. To avoid the possibility of ELECTRIC SHOCK, disconnect electric power to the product before connecting or disconnecting the LAN cables. LIGHTNING DANGER DANGER: DO NOT WORK on equipment or CABLES during periods of LIGHTNING ACTIVITY. CAUTION: POWER CORD IS USED AS THE MAIN DISCONNECT DEVICE. Ensure that the socket outlet is located/installed near the equipment and is easily accessible. CAUTION: THIS UNIT MAY HAVE MORE THAN ONE POWER SUPPLY CORD. Disconnect all power supply cords before servicing, to avoid electric shock. INSTALLATION ELECTRICALTYPE CLASS 1 EQUIPMENT THIS EQUIPMENT MUST BE GROUNDED. Power plug must be connected to a properly wired earth ground socket outlet. An improperly wired socket outlet could place hazardous voltages on accessible metal parts. CAUTION: Danger of explosion if battery is replaced with incorrect type. Replace only with the same type recommended by the manufacturer. Dispose of used batteries according to the manufacturers instructions. MOUNTING INSTRUCTIONS CAUTION: Air vents must not be blocked and must have free access to the room ambient air for cooling.

A-1

Appendix A: Safety and Regulatory Information

CAUTION: MECHANICAL LOADINGMounting of the equipment in the rack should be such that a hazardous condition is not achieved due to uneven loading. CAUTION: Packeteer 1200/1550/1700 have no operatorserviceable parts inside. Refer service issues to the manufacturer or a factory-authorized service center. When operating the unit in an equipment rack, ensure that: The ambient temperature around the unit (which may be higher than the room temperature) is within the limit specified for the unit There is sufficient airflow around the unit Electrical circuits are not overloaded consider the nameplate rating of all the connected equipment, and make sure you have over current protection. The equipment is properly grounded No objects are placed on top of the unit

Operating Temperature This product is designed for an ambient temperature of 32 to 104F (0 to 40C). All Countries: Install product in accordance with local and national electrical codes. CAUTION: RISK OF ELECTRIC SHOCK. An improperly wired socket outlet could place hazardous voltages on accessible metal parts. ENERGIE RAYONNEE Ce matriel a t test et est certifi conforme la rglementation amricaine aux normes dfinies pour les appareils. SECURITE INFORMATIONS SUR LELECTRICITE ADVERTISSEMENT: DANGER DELECTROCUTION Pour empcher les dangers dELECTROCUTION, ne pas enlever le couvercle. Lquipement ne contient aucun lment rparable par lutilisateur. Cet appareil comprend des TENSIONS DANGEREUSES et ne doit tre ouvert que par un technicien

A-2

Appendix A: Safety and Regulatory Information

dment qualifi. Pour viter tout risque dELECTROCUTION, dbrancher lappareil de la prise de courant avant de connecter ou de dconnecter les cables LAN. DANGER DE FOUDRE DANGER: NE PAS MANIER lquipement ou les CABLES pendant les priodes dactivit orageuse. ATTENTION: CET APPAREIL COMPORTE PLUS DUN CORDON DALIMENTATION. Rafin de prvenir les chocs lectriques, debrancher les deux cordons dalimentation avant de faire le dpannage. ATTENTION: Le cordon dalimentation est utilis comme interrupteur gnral. La prise de courant doit tre situe ou installe proximit du matriel et tre facile daccs. INSTALLATION ELECTRICITEEQUIPEMENT DE CLASSE 1 CET APPAREIL DOIT ETRE MIS A LA TERRE. La prise de courant doit tre branche dans une prise femelle correctement mise la terre. Sinon, des tensions dangereuses risqueraient datteindre les pices mtalliques accessibles lutilisateur. ATTENTION: Pour ce qui est de la protection contre les courtscircuits (surtension), ce produit dpend de linstallation lectrique du local. Vrifier quon fusible ou quun disjoncteur de 15A/250V est utilis sur les circuits de CC. ATTENTION: Il y a danger dexplosion sil y a remplacement incorrect de la batterie. Remplacer uniquement avec une batterie du mme type ou dun type quivalent recommand par le constructeur. Mettre au rebut les batteries usages conformment aux instructions du fabricant. INSTRUCTIONS DE MONTAGE ATTENTION: Ne pas bloquer les fentes daration, ce qui empcherait lair ambiant de circuler librement pour le refroidissement. ATTENTION: REPARTITION DE LA CHARGE MECANIQUE Le montage des appareils dans le bti doit tre effectu de telle manire que la rpartition de la charge mcanique ne pose aucun danger.

A-3

Appendix A: Safety and Regulatory Information

Temperature de Fonctionnement Ce produit est capable de tolrer une temprature ambiante 0 40C. Pour tous pays: Installer le produit conformment aux normes lectriques nationales et locales.

Zur sicheren Trennung des Gerates vom Netz ist der Netzstecker zu ziehen. Vergewissern Sie sich, das die Steckdose leicht zuganglich ist. Achtung. Explosionsgefahr wenn die Battery in umgekehrter Polaritt eingesetzt wird. Nur mit einem gleichen oder hnlichen, vom Hersteller empfohlenen Typ, ersetzen. Verbrauchte Batterien mssen per den Instructionen des Herstellers verwertet werden.

Warning: Attention:

Read the installation instructions before connecting the system to the power source. Avant de brancher le systme sur la source dalimentation, consulter les directives dinstallation. Vor dem Anschlieen des Systems an die Stromquelle die Installationsanweisungen lesen.

Warnung:

Warning:

This product relies on the buildings installation for short-circuit (over current) protection. Ensure that a fuse or circuit breaker no larger than 120 VAC, 15 A U.S. (240 VAC, 10 A international) is used on the phase conductors (all current-carrying conductors).

A-4

Appendix A: Safety and Regulatory Information

Attention:

Pour ce qui est de la protection contre les courtscircuits (surtension), ce produit dpend de linstallation lectrique du local. Vrifier quun fusible ou quun disjoncteur de 120 V alt., 15 A U.S. maximum (240 V alt., 10 A international) est utilis sur les conducteurs de phase (conducteurs de charge). Dieses Produkt ist darauf angewiesen, da im Gebude ein Kurzschlu- bzw. berstromschutz installiert ist. Stellen Sie sicher, da eine Sicherung oder ein Unterbrecher von nicht mehr als 240 V Wechselstrom, 10 A (bzw. in den USA 120 V Wechselstrom, 15 A) an den Phasenleitern (allen stromfhrenden Leitern) verwendet wird.

Warnung:

Warning:

The plug-socket combination must be accessible at all times, because it serves as the main disconnecting device. La combinaison de prise de courant doit tre accessible tout moment parce quelle fait office de systme principal de dconnexion. Vor dem Anschlieen des Systems an die Stromquelle die Installationsanweisungen lesen.

Attention:

Warnung:

Warning:

The unit has more than one power supply connection; all connections must be removed to remove all power from the unit. Cette unit est quipe de plusieurs raccordements dalimentation. Pour supprimer tout courant lectrique de lunit, tous les cordons dalimentation doivent tre dbranchs.

Attention:

A-5

Appendix A: Safety and Regulatory Information

Warnung:

Diese Einheit verfgt ber mehr als einen Stromanschlu; um Strom gnzlich von der Einheit fernzuhalten, mssen alle Stromzufuhren abgetrennt sein.

Warning:

To prevent bodily injury when mounting or servicing this unit in a rack, you must take special precautions to ensure that the system remains stable. The following guidelines are provided to ensure your safety:
This

unit should be mounted at the bottom of the rack if it is the only unit in the rack. When mounting this unit in a partially filled rack, load the rack from the bottom to the top with the heaviest component at the bottom of the rack. If the rack is provided with stabilizing devices, install the stabilizers before mounting or servicing the unit in the rack.

Attention:

Pour viter toute blessure corporelle pendant les operations de montage ou de rparation de cette unit en casier, il convient de prendre des prcautions spciales afin de maintenir la stabilit du systme. Les directives ci-dessous sont destines assurer la protection du personnel: Si cette unit constitue la seule unit monte en casier, elle doit tre place dans le bas. Si cette unit est monte dans un casier partiellement rempli, charger le casier de bas en haut en plaant llment le plus lourd dans le bas. Si le casier est quip de dispositifs stabilisateurs, installer les stabilisateurs avant de monter ou de rparer lunit en casier.

A-6

Appendix A: Safety and Regulatory Information

Warnung:

Zur Vermeidung von Krperverletzung beim Anbringen oder Warten dieser Einheit in einem Gestell mssen Sie besondere Vorkehrungen treffen, um sicherzustellen, da das System stabil bleibt. Die folgenden Richtlinien sollen zur Gewhrleistung Ihrer Sicherheit dienen: Wenn diese Einheit die einzige im Gestell ist, sollte sie unten im Gestell angebracht werden. Bei Anbringung dieser Einheit in einem zum Teil gefllten Gestell ist das Gestell von unten nach oben zu laden, wobei das schwerste Bauteil unten im Gestell anzubringen ist. Wird das Gestell mit Stabilisierungszubehr geliefert, sind zuerst die Stabilisatoren zu installieren, bevor Sie die Einheit im Gestell anbringen oder sie warten.

A-7

Appendix A: Safety and Regulatory Information

Electro-Magnetic Interference/Compatibility and Safety Compliance

Overview The EMI/EMC emissions and safety compliance information for Packeteer products is listed below. EMI/EMC Standards AS/NZS 3548 Class A AS/NZS 4252.1 ICES-003, Class A EMC Directive 89/336/EEC EMC Directive 73/23/EEC EMC Directive 93/68/EEC EN 55022:1998 Class A EN 61000-3-2:1995_A1(98) +A2(98), & prA14(00) EN 61000-3-3:1995 EN 55024:1998 VCCI:2002, Class A KN55022 Class A KN6100-4-2,3,4,5,6,8,11 GOST-R 60950-2002 GOST-R 51318.22-99, .24-99 FCC 47 CFR part 15, subpart B, Class A CNS 13438 Class A Safety Standards IEC 60950-1 EN 60950-1+A11 UL 60950-1: 03 CAN/CSA C22.2 No. 609501: 03 EN 60825-1,-2 Class I Laser

Products 1200 1550 1700 2500 3500 6500 7500 9500 10000

United States FCC Statement

This product has been tested and found to comply with the limits for a Class A digital device pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This product generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. However, there is no guarantee that interference

A-8

Appendix A: Safety and Regulatory Information

will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning this equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: Change the direction of the radio or TV antenna. To the extent possible, relocate the radio, TV, or other receiver away from the product. Plug the product into a different electrical outlet so that the product and the receiver are on different branch circuits.

If these suggestions dont help, consult your dealer or an experienced radio/TV repair technician for more suggestions. NOTE: This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.

CAUTION: Any modification to the equipment not expressly approved by Packeteer could void your authority to operate the equipment.
European Union (CE) Statement This product is in conformity with the essential requirements of EU directives, specifically EU Directives 89/336/EEC, 73/23/EEC and 93/68/EEC, by applying the following standards EN55022: 1998, EN55024:1998, EN61000-3-2: 2001, EN61000-3-3: 1995 plusA1: 2001,EN60950-1: 2001 CLASS 1 LASER PRODUCT (except for Packeteer 1200 and 1550 series) The Declaration of Conformity is available on the Internet at: http://support.packeteer.com/documentation/conformity/ declaration.pdf

A-9

Appendix A: Safety and Regulatory Information

European Union CISPR 22 Statement

WARNING: This is a Class A product. In a domestic environment this product may cause radio interference, in which case the user may be required to take adequate measures.

Japan VCCI Statement

Class A ITE

This is a Class A product based on the standard of the Voluntary Control Council for Interference by Information Technology Equipment (VCCI). If this equipment is used in a domestic environment, radio disturbance may arise. When such trouble occurs, the user may be required to take corrective actions. Internal access to Packeteer devices is intended only for qualified service personnel.

Canada Complianc e Statement (Industry Canada)

Cet appareil numrique respecte les limites bruits radiolectriques applicables aux appareils numriques de Classe A prescrites dans la norme sur le matriel brouilleur: Appareils Numriques, NMB-003 dicte par le Ministre Canadien des Communications. This digital apparatus does not exceed the Class A limits for radio noise emissions from digital apparatus set out in the interference-causing equipment standard entitled: Digital Apparatus, ICES-003 of the Canadian Department of Communications.

Taiwan BSMI Class A EMI Statement

A-10

Appendix A: Safety and Regulatory Information

Australia C-tick Statement

WARNING The system is designed to operate in a typical office environment. Choose a site that is: Clean and free of airborne particles (other than normal room dust) Well-ventilated and away from sources of heat including direct sunlight Away from sources of vibration or physical shock Isolated from strong electromagnetic fields produced by electrical devices In regions that are susceptible to electrical storms, we recommend you plug your system into a surge suppressor and disconnect telecommunication lines to your modem during an electrical storm. Provided with a properly grounded wall outlet Do not attempt to modify or use the supplied AC power cord if it is not the exact type required. Ensure that the system is disconnected from its power source and from all telecommunications links, networks, or modem lines whenever the chassis cover is to be removed. Do not operate the system with the cover removed.

Russia Certification

The Packeteer 1200, 1550, 1700, 2500, 3500, 6500, 7500, and 10000 models are Russia GOST-R certified.

A-11

Appendix A: Safety and Regulatory Information

Proper Disposal of Packeteer Products

To reduce waste and to protect the environment from hazardous materials, waste electrical equipment must be disposed of properly. The crossed-out wheelie bin symbol pictured here and labeled on Packeteer products (purchased after August 13, 2005) is a reminder that electrical equipment should not be mixed in with general trash or disposed of in a landfill. Once your Packeteer product or component has reached its end-of-life, you should dispose of it through a reputable, licensed hazardous materials processor. If you are located in one of the European Union Member States, please refer to the product's end user license agreement for further information regarding the proper disposal, reporting, and/or return of the product to Packeteer. For additional information and to obtain return instructions, please go to the Packeteer website at http://www.packeteer.com/program/ recycling/.

RoHS Compliance
Packeteer supports the EU directive for Restriction of Hazardous Substances (RoHS). PacketShaper models 1700, 3500, 7500, and 10000 Revision G are RoHS-compliant.

A-12

APPENDIX B: PACKETEER-SUPPORTED SFP TRANSCEIVERS

Packeteer supports a limited number of FTP transceivers for use with the Fiber Optic Gigabit LEM. Packeteers PacketWise software can verify the presence of the SFP transceivers listed below, as well as recognize the transceivers capabilities, standard interfaces and manufacturer. Although other models or types of transceivers may be compatible with the LEM, PacketWise will not be able to identify the transceiver type.

Note: The list below is subject to change. For the most current list of supported transceivers, refer to the online version of this installation guide, available for download at http://support.packeteer.com/documentation. Description

Manufacturer/ Model

Finisar SX FTRJ8519P1BNL 275m max, using 62.5m multimode fiber 1.25Gb/s Finisar LX FTRJ1319P1BTL 5km, using 9m single-mode fiber 1.25Gb/s Infineon V23818-K305B57 Infineon V23818-M15B57 JDS JSM-12L0AA1 SX 275m max, using 62.5m multimode fiber 1.25Gb/s LX 5km max, using 9m single-mode fiber 1.25Gb/s LX 20km max, using 9m single-mode fiber 1.25Gb/s

B-1

Appendix B: Packeteer-Supported SFP Transceivers

Manufacturer/ Model Tyco 1511094-2

Description LX 20km max, using 9m single-mode fiber 1.25Gb/s LX 5km, using 9m single-mode fiber 1.25Gb/s SX 275m max, using 62.5m multimode fiber 1.25Gb/s SX 550m, using 50/125 m multimode fiber 275m, using 62.5/125 m multimode fiber LX 10km, using 9/125m single-mode fiber

Tyco 1511094-2

Tyco 1382392-2

Agilent* AFBR5710PZ (RoHScompliant) Delta* LCP1250B4QSR (RoHScompliant) Delta* LCP1250A4FSR (RoHScompliant) Fiberxon* FTM-3012CSLG (RoHScompliant)

SX 550m, using 50/125 m multimode fiber

LX 10km, using 9/125 m single-mode fiber 550m, using 62.5/125 m multimode fiber

B-2

Appendix B: Packeteer-Supported SFP Transceivers

Manufacturer/ Model Fiberxon* FFTM-8012CSLG (RoHScompliant) Fiberxon* FTM-3012CSL20G (RoHScompliant) Finisar* FTLF8519P2BC L (RoHScompliant)

Description SX 550m, using 50/125 m multimode fiber 275m, using 62.5/125 m multimode fiber

ELX 20km, using 9/125m single-mode fiber 550m, using 62.5/125 m multimode fiber

SX 500m, using 50/125 m multimode fiber 300m, using 62.5/125 m multimode fiber

Finisar* LX FTLF1319P1BTL 10km, using 9/125m single-mode fiber (RoHScompliant) Methode* DM7041-X 100m CAT5 UTP** 1000Base-T only

*These transceivers are recognized in PacketWise versions 7.3 and later **Note that the failover protection for fiber optic networks offered by the Packeteer Fiber Bypass Switch is not available for networks connected to a fiber optic LEM via copper (1000Base-T) SFP transceivers.

B-3