Polycom®, the Polycom logo design, [and others that appear in your document] are registered trademarks of Polycom,
Inc. [List other trademarks]™ are trademarks of Polycom, Inc. in the United States and various other countries. All other
trademarks are the property of their respective owners.
Polycom Inc.
4750 Willow Road
Pleasanton, CA 94588-2708
USA
No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for
any purpose, without the express written permission of Polycom, Inc. Under the law, reproducing includes translating
into another language or format.
As between the parties, Polycom, Inc. retains title to, and ownership of, all proprietary rights with respect to the software
contained within its products. The software is protected by United States copyright laws and international treaty
provision. Therefore, you must treat the software like any other copyrighted material (e.g. a book or sound recording).
Every effort has been made to ensure that the information in this manual is accurate. Polycom, Inc. is not responsible
for printing or clerical errors. Information in this document is subject to change without notice.
User Guide V2IU 6400-S Converged Network Appliance
4
1
Introduction
Introducing the V2IU 6400-S Converged Network Appliance
Installed at the edge of the operations center, 6400-S Series converged network
appliances secure critical voice, video and data infrastructure components
such as VoIP softswitches, video Gatekeepers, gateways and media servers.
1 - 1
User Guide V2IU 6400-S Converged Network Appliance
The 6400-S Series converged network appliances can be deployed in service
provider or enterprise environments as depicted below.
Service Provider
H.323
Gatekeeper
SIP Voice
V500
NMS
Hotspot
NAT/Firewall
User
T-1/E-1NxT-1/E-1
Company ACompany B
4300T
IP
Phone
Laptop
Softswitch
Public IP
Network
Aggregation
GatewayMCU
6400-S
Aggregation Router
Router
H.323 Video
Endpoint
IP
Phone
PSTN
ISDN,
PSTN Network
PSTN
6400-E
Gateway
H.323 Video
Endpoint
1 - 2
EM015A
Headquarters
Introduction
PC
H.323
Gatekeeper
Gateway
Gateway
Application
Server
PSTN
Branch OfficeCompany B
Softswitch
6400-S6400-E
T-1/E-1NxT-1/E-1
4300T
H.323
NMS
Aggregation Router
IP
Network
Aggregation
Router
H.323
Endpoint
PCPC
IP Phone
IP PhoneIP Phone
PSTNPSTN
6400-E
Gateway
IP Phone
PC
EM016
Laptop
IP Phone
The 6400-S is designed to protect managed VoIP service providers and
enterprise customers from network-based attacks. It combines topology
hiding, dynamic session admission control and stateful packet inspection to
secure critical voice, video and data infrastructure components.This chapter
introduces the:
•Functional features
•Hardware features
•Management features
1 - 3
User Guide V2IU 6400-S Converged Network Appliance
Features
•Resolves firewall traversal problems at the Network Operations Center for
VoIP by providing a VoIP application layer gateway (ALG) or voice and
video aware firewall that supports SIP, MGCP and H.323
•Resolves firewall traversal problems at customer offices for VoIP by
providing NAT-Traversal capability for SIP.
•Supports up to 10,000 concurrent VoIP calls or up to 85 Mbps of H.323
video traffic
•Protects the enterprise LAN using a stateful packet inspection (SPI)
firewall for both voice and data traffic
•Performs static IP routing
•Provides integrated test tools to facilitate problem isolation
•Performs TFTP relay for IP phone images
•Uses a simple web based GUI for configuration and management
•Supports logging to external syslog servers and interfaces to network
management systems using SNMP
Physical Connections and Specifications
PortDescription
Subscriber (ETH0) Ethernet
Port 1
Provider (ETH1) Ethernet
Port 2
Out of Band Management
Port 3
Console Port (COM 1)This port is used to establish a local
This port is a 10/100/1000 auto sensing
port. It is connected through an Ethernet
switch to IP phones, IADs or PCs installed
on the public network.
This port is a 10/100/1000 auto sensing
port. It is connected to the private network.
This port can be configured to allow out of
band management sessions. It is typically
connected to a private management
network.
console session with the EdgeProtect
using a VT100 terminal or emulation
program. The baud rate is 9600. It is used
for debug or local diagnostic purposes
only.
1 - 4
PortDescription
DimensionsCompact 2U design - 3.45"(H) x
Weight45 lbs (20411 grams)
PowerDual, redundant 500W AC supplies
Warranty1 Year
Management Features
The 6400-S is configured and managed through the Configuration Menu, a
web-based Graphical User Interface.
Introduction
17.11"(W) x 20"(D)
Dual, redundant 470W DC supplies
Access the Configuration Menu by entering a URL in a web browser such as
Internet Explorer, Netscape, or Firefox.
Using the Configuration Menu, you can set a wide range of network services,
including:
•Provider and subscriber settings and related network settings.
1 - 5
User Guide V2IU 6400-S Converged Network Appliance
•Remote system logging.
•VoIP and subnet routing.
•Firewall
•Administration, maintenance and upgrading.
The following chapters give you detailed processing steps you need to set up
the 6400-S.
1 - 6
Installing the 6400-S
2
Physical Installation
1
Anchor the equipment rack that will contain the 6400.
The equipment rack must be anchored to an unmovable support to prevent it
from falling over when one or more systems are extended in front of the rack
on slides. You must also consider the weight of any other device installed in
the rack. A crush hazard exists should the rack tilt forward which could cause
serious injury.
If AC power supplies are installed
Mains AC power disconnect
The AC power cord(s) is considered the mains disconnect for the 6400-S and
must be readily accessible when installed. If the individual server power
cord(s) will not be readily accessible for disconnection then you are
responsible for installing an AC power disconnect for the entire rack unit. This
main disconnect must be readily accessible, and it must be labeled as
controlling power to the entire rack, not just to the 6400-S(s). To remove all
power, two AC cords must be removed.
Grounding the rack installation
To avoid the potential for an electrical shock hazard, you must include a third
wire safety ground conductor with the rack installation. If the 6400-S power
cord is plugged into an AC outlet that is part of the rack, then you must
provide proper grounding for the rack itself. If the 6400-S power cord is
plugged into a wall AC outlet, the safety ground conductor in the power cord
provides proper grounding only for the 6400-S. You must provide additional,
proper grounding for the rack and other devices installed in it.
1
Intel® Telco/Industrial Grade Server TIGPR2U Product Guide
2 - 1
User Guide V2IU 6400-S Converged Network Appliance
Overcurrent protection
The 6400-S is designed for an AC line voltage source with up to 20 amperes of
overcurrent protection per cord feed. If the power system for the equipment
rack is installed on a branch circuit with more than 20 amperes of protection,
you must provide supplemental protection for the 6400-S. The overall current
rating of a 6400-S configured with two power supplies is less than 4 amperes.
If DC power supplies are installed:
Connection with a DC source should only be performed by trained service
personnel. The 6400-S with DC input is to be installed in a Restricted Access
Location in accordance with articles 110-16, 110-17, and 110-18 of the National
Electric Code, ANSI/NFPA 70. The DC source must be electrically isolated by
double or reinforced insulation from any hazardous AC source. The DC
source must be capable of providing up to 650 Watts of continuous power per
feed pair.
Main DC power disconnect:
You are responsible for installing a properly rated DC power disconnect for
the 6400-S system. This mains disconnect must be readily accessible, and it
must be labeled as controlling power to the 6400-S. The circuit breaker of a
centralized DC power system may be used as a disconnect device when easily
accessible and should be rated no more than 10 amps.
Grounding the 6400-S
To avoid the potential for an electrical shock hazard, you must reliably connect
an earth grounding conductor to the 6400-S. The earth grounding conductor
must be a minimum 14AWG connected to the earth ground stud(s) on the rear
of the 6400-S. The safety ground conductor should be connected to the chassis
stud with a Listed closed two-hole crimp terminal with a maximum width of
0.25 inch. The nuts on the chassis earth ground studs should be installed with
a 10 in/lbs torque. The safety ground conductor provides proper grounding
only for the 6400-S. You must provide additional, proper grounding for the
rack and other devices installed in it.
Overcurrent protection
Overcurrent protection circuit breakers must be provided as part of each host
equipment rack and must be incorporated in the field wiring between the DC
source and the 6400-S. The branch circuit protection shall be rated minimum
75Vdc, 10 A maximum per feed pair. If the DC power system for the
equipment rack is installed with more than 10 amperes of protection, you must
provide supplemental protection for the 6400-S. The overall current rating of
a 6400-S configured with two power supplies is 8 amperes.
Do not attempt to modify or use an AC power cordset that is not the exact type
required. You must use a power cordset that meets the following criteria:
2 - 2
Installing the 6400-S
•Rating: For U.S./Canada cords must be UL Listed/CSA Certified type
SJT, 18-3 AWG. For outside U.S./Canada cords must be flexible
harmonized (<HAR>) or VDE certified cord with 3 x 0.75 mm conductors
rated 250 VAC.
•Connector, wall outlet end: Cords must be terminated in grounding-type
male plug designed for use in your region. The connector must have
certification marks showing certification by an agency acceptable in your
region and for U.S. must be Listed and rated 125% of overall current
rating of the 6400-S.
•Connector, 6400-S end: The connectors that plug into the AC receptacle
on the 6400-S must be an approved IEC 320, sheet C19, type female
connector.
•Cord length and flexibility: Cords must be less than 4.5 meters (14.76 feet)
long. CAUTION Temperature: The temperature in which the 6400-S
operates when installed in an equipment rack, must not go below 5 °C (41
°F) or rise above 40 °C (104 °F). Extreme fluctuations in temperature can
cause a variety of problems in your 6400-S.
•Ventilation: The equipment rack must provide sufficient airflow to the
front of the 6400-S to maintain proper cooling. The rack must also include
ventilation sufficient to exhaust a maximum of 1023 BTU's per hour for the
6400-S. The rack selected and the ventilation provided must be suitable to
the environment in which the 6400-S will be used.
Power Supplies
1
The power supply cage shown is accessed from the rear of the chassis. The
power supply cage supports up to two hot-swap power supplies (either AC
input or DC input) in a (1+1) redundant configuration. Only the DC input
version is NEBS certified. The combined output power to the 6400-S system is
470 Watts per DC supply and 500 Watts per AC supply.
DC Power Supply Interface Requirements
The DC power source may produce hazardous voltage levels exceeding -60
VDC and high energy levels above 240VA that may cause electric shock or
burns. All DC input connections should be made only by a qualified service
person to prevent injury. All wiring terminals connected to the DC input
terminal block must be fully insulated with no exposed bare metal.
The power supply will operate within all specified limits over the input
voltage range outlined as follows:
1
Intel® Telco/Industrial Grade Server TIGPR2U Product Guide
2 - 3
User Guide V2IU 6400-S Converged Network Appliance
Voltage
•Minimum tolerance = -38VDC
•Nominal rating = -48 to -60VDC
•Maximum tolerance = -75VDS
•Maximum input current = 17.0 Amps
The power supply will power-off if the DC input is less than -34 VDC.
DC Power Supply LED Indicators
Power Supply conditionPower Supply LED
No DC power to all PSUsOff
No DC power to this PSU onlyAmber
DC present/Only Standby Outputs OnBlink Green
Power supply DC outputs ON and OKGreen
Current limitAmber
Power supply failureAmber
AC Power Supply Interface Requirements
The AC power supply operates within the following limits:
•AC line voltage = Auto-ranging for either 100-127 VAC or 200-240 VAC
•AC line frequency = 50/60 Hz
•AC input current = 4 Amp at 100-127 VAC, 2 Amp at 200-240 VAC
AC Power Supply LED Indicators
Power Supply conditionPower Supply LED
No AC power to all PSUsOff
No AC power to this PSU onlyAmber
DC present/Only Standby Outputs OnBlink Green
Power supply DC outputs ON and OKGreen
2 - 4
Power supply in Alert ConditionBlink Amber
Power supply failureAmber
Configuring the V2IU 6400-S
Configure the 6400-S using a web browser such as Internet Explorer or
Netscape Navigator. The 6400-S is shipped with a pre-configured IP address
for its Subscriber (Port 1) interface.
This chapter gives you the information you need to get started. It covers:
•Connecting to the 6400-S
•Logging in and out of the 6400-S
•Navigating through the configuration pages
•Getting help
3
Connecting to the 6400-S
You need to connect to the 6400-S before you can configure it to work with
your network. Connect using the supplied preset IP address and subnet mask.
You are also supplied with a default user ID and password.
To connect to the 6400-S:
1. Connect a PC using an IP address of 192.168.1.2 and subnet mask of
255.255.255.0 to Port 1 of the 6400-S.
2. Launch a web browser on the PC and enter the URL string: 192.168.1.1.
3 - 1
User Guide V2IU 6400-S Converged Network Appliance
3. Press Return.
The Main Configuration Menu appears.
4. To log in, select Network from the navigation bar.
5. In the Connect to pop-up enter the following default information:
— For username: root
— For password: default
3 - 2
Caution
To maintain your network security, be sure to change the default username and
password as described under Changing the administration password on page 7-1.
6. Continue to configure the system using the information provided in
subsequent chapters of this guide.
Logging in and out of the 6400-S
You are prompted to log in every time you point a new browser session to the
Configuration URL.
To log out, simply close your browser.
Navigating through the configuration pages
Navigate through the configuration pages from the navigation bar.
Configuring the V2IU 6400-S
The choices are:
3 - 3
User Guide V2IU 6400-S Converged Network Appliance
MenuDescription
NetworkThrough the Network page, you can
VoIP ALGUsing the VoIP ALG page, you can
FirewallThrough the Firewall page, you can
SystemThrough the System menu you have
configure a wide range of multimedia
network services. These services can be
enabled or disabled depending on the
functionality required for a network
configuration. The device's network
settings include configuring the Subscriber
and Provider interfaces, DNS and Default
Gateway.
configure the connectivity and
management for Subscriber and Provider
voice and video over IP devices.
configure the 6400-S to act as a firewall
for voice, video and data traffic.
access to a variety of configuration
operations and status information.
Getting help
You can get help from several sources in the Configuration Menu.
•By pressing Help in the navigation bar.
•Following the link in Info at the top of the various Configuration pages.
•From the links on the Configuration Menu home page.
Getting information about the network
You can view a variety of information about the network from Network
Information in the System menu. Networking Information displays the
low-level IP network and interface configuration of the 6400-S.
To view network information:
1. In the navigation bar, select System.
3 - 4
Configuring the V2IU 6400-S
2. In the System menu, select Network Information.
3. Scroll through the Network Information page to view:
— Routing information
— Link status
— Interface information
Routing Information
The system routing table contains the static routes for the hosts and networks
that are on the Provider side of the 6400-S. When the provider and subscriber
settings have been fully configured, there must be at least four routing lines
displaying:
•The private subnet associated with the Provider interface.
•The immediate subnet associated with the Subscriber interface.
•The loopback interface.
•The network's default gateway, this must be the next-hop-router on the
Subscriber side of the 6400-S.
The order of the lines may vary depending on the subnet masks.
Additional lines may be displayed depending on the contents of the Route and
VoIP Subnet Routing pages. Each of the entries on these pages will cause an
additional entry in the routing table.
3 - 5
User Guide V2IU 6400-S Converged Network Appliance
Link Status
Link Status displays the status of the Ethernet connections. Ethernet auto
negotiation is often unreliable, especially between different vendors or old and
new networking equipment. Failure of auto negotiation is generally not a
cause for concern. However, if the negotiated rates change intermittently, or
the link is down or there is no link, the link rate may need to be set manually
on the Set Link Rate page. Intermittent data and voice outages may be caused
by auto negotiation "flutter". Setting the link rate manually is recommended
and ensures that the device at the far end of the connection will not renegotiate
rates during VoIP operation.
Interface Information
The specific status and configuration information for the system interfaces is
displayed in the Interface Information section. The MAC address of interface
eth0 is needed to retrieve the VoIP ALG License Key if the license information
is lost.
The interface statistics can point to areas of congestion in the network. If the
errors statistic increase during normal operation of the device, it may be an
indication of excessive congestion on the network interface. If the congestion
is not corrected, the quality of voice calls will be affected. The topology of the
network attached to the network interface with the errors should be examined
and modified to better segment and isolate network traffic. See Link Status on
page 3-6.
Getting information about the system
You can view a variety of information about the network from System
Information in the System menu. System Information displays detailed
information regarding the operating system running on the 6400-S. Customer
support may ask you to examine or forward this information when
troubleshooting problems with the 6400-S.
To view system information:
1. In the navigation bar, select System.
3 - 6
2. In the System menu, select System Information.
Configuring the V2IU 6400-S
3. Scroll through the System Information page to view:
— System uptime
— Number of active streams
— Recent call log
— Process information
— Memory usage
— System logging messages
System uptime
System Uptime displays the current time, the amount of time elapsed since the
last system reboot, and the system load averages for the past one, five, and 15
minutes. Uptime can help identify when a power outage may have interrupted
service. Load averages greater than two indicate excessive system loading and
could indicate over provisioning of the VoIP ALG feature.
Number of active streams
The number of active streams indicates how many calls are transiting the
6400-S (crossing from Subscriber to Provider interfaces) OR being hair-pinned
by the 6400-S as part of its NAT-Traversal facility. Calls that are in progress
and between two devices on one side of the 6400-S are not counted in this
number.
3 - 7
User Guide V2IU 6400-S Converged Network Appliance
Recent Call Log
The Recent Call Log displays quality information about calls that are in
progress or have recently completed. If a call falls below the configured MOS
Threshold, a system log message is created. The MOS score for a call is always
displayed when the call is completed. Detailed statistics for the call are
reported in the Advanced MOS syslog message.
Process Information
Process Information displays detailed process table information that may be of
use to technical support.
Memory Usage
Memory Usage displays detailed memory allocation information that may be
of use to technical support.
System Logging Messages
System Logging Messages displays information logged during system boot
and normal operation. Logging messages may indicate unauthorized attempts
to access the 6400-S, process restart messages, and excess resource utilization
messages.
3 - 8
Configuring Network Settings
You can configure the 6400-S for:
•Subscriber interface settings.
•Provider interface settings.
•Network settings.
Optionally, you can:
•Enabling remote system logging.
•Configure a different interface for managing the 6400-S. See Chapter 7 for
details.
4
•Configure additional administrative operations, such as changing
the password and setting the system date and time are available. See
Chapter 7 for details about these, and other operations.
Before
Starting
Collect the following information:
•An IP address for the 6400-S.
•An IP address for the gateway.
•The preferred and secondary IP address for the DNS server.
The 6400-S is shipped with the preset subscriber (Port 1) IP address of:
192.168.1.1, and the default subnet mask: 255.255.255.0 so you can access and
configure the 6400-S.
Configuring subscriber interface settings
The subscriber interface defines the interface between the 6400-S and your
customers’ endpoints or the public network.
4 - 1
Loading...
+ 57 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.