TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
v
Thinklogical, LLC®
100 Washington St.
Milford, CT 06460
2014
2013
We, the Thinklogical team, are committed to understanding and
exceeding our customers’ requirements, the first time and every time.
PREFACE
About Thinklogical
Thinklogical is the leading manufacturer and provider of fiber optic KVM, video, audio, and peripheral
extension and switching solutions used in video-rich, big-data computing environments.
Thinklogical offers the only fiber-optic KVM matrix switches in the world that are accredited to the Common
Criteria EAL4, TEMPEST Level B, and NATO NIAPC Evaluation Scheme: GREEN information assurance
standards. And Thinklogical Velocity products are the first system with both KVM and video matrix switching
capabilities to be placed on the Unified Capabilities Approved Product List (UC APL) under the Video
Distribution System (VDS) category.
Governments, entertainment, scientific and industrial customers worldwide rely on Thinklogical’s products
and solutions for security, high performance, continuous operation and ease of integration. Thinklogical
products are designed and manufactured in the USA and are certified to the ISO 9001-2008 standard.
Thinklogical is headquartered in Milford, Connecticut and is privately held by Riverside Partners, LLC, Boston,
MA (http://www.riversidepartners.com). For more information about Thinklogical products and services,
please visit www.thinklogical.com.
Follow Thinklogical on LinkedIn at http://www.linkedin.com/company/thinklogical and on Facebook at
http://www.facebook.com/ThinklogicalUSA
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
vi
BEFORE STARTING ANY PROCEDURE, IT IS RECOMMENDED
THAT YOU READ THE INSTRUCTIONS THOROUGHLY!
CLASS 1 LASERS do not require any special
precautions under conditions of normal use.
SFP
Modules
Fiber-Optic
Cables
Class 1 Lasers
About this Product Manual
This product manual is divided into four sections: TLX System Features, Set-Up & Installation, Regulatory
& Safety Requirements and Thinklogical Support. These are sub-divided to help you find the topics and
procedures you are looking for. This manual also contains Appendices.
Section 1 – The TLX System Features:Page 1. An overview of the features and functions of your TLX fiber-
optic extension system.
Section 2 – Set-Up and Installation:Page 15. Contains all the requirements and procedures necessary to
connect and install your equipment, including FPGA upgrades.
Section 3 – Regulatory & Safety Requirements:Page 27. Thinklogical® strongly recommends that you read
this section prior to starting the hardware assembly.
Section 4 – Thinklogical Support:Page 29. Thinklogical provides the best customer support available. If you
have any questions or need to contact us for any reason, please refer to this section of the manual.
Note and Warning Symbols
Throughout this manual you will notice certain symbols that bring your attention to important information. These
are Notes and Warnings. Examples are shown below.
Note: Important Notes appear in blue text preceded by a yellow exclamation point symbol, as
shown here.
A note is meant to call the reader’s attention to helpful or important information at a point in the text that is
relevant to the subject being discussed.
Warning! All Warnings appear in red text, followed by blue text, and preceded by a red stop
sign, as shown here.
A warning is meant to call the reader’s attention to critical information at a point in the text that is relevant to
the subject being discussed.
Class 1 Laser Information
The TLX48, like all Thinklogical® products, is designed and identified as a
means the maximum permissible exposure (MPE) cannot be exceeded when viewing the laser with the
naked eye or with the aid of typical magnifying optics (e.g. telescope or microscope).
Class 1 LASER product.
This
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
1
Section 1: The TLX System Features
The Logical Solution
The TLX48 is a 10G high performance modular Matrix Switch and non-blocking matrix switch that
supports full, uncompressed 4K video with full color depth at 60Hz frame rate for complete, endto-end routing of video and peripheral signals over multi-mode or single-mode fiber optic cable.
This highly reliable and resilient Matrix Switch is expandable from 16x16 up to 48x48, which allows for
flexible deployment configurations. In addition, the TLX48 series provides mission critical dependability
and unrivalled signal integrity. Being protocol agnostic, the switch supports DVI, SDI, HD-SDI, Dual-link
DVI, Dual-link SDI, USB HID, USB 2.0 and audio.
Thinklogical’s TLX48 Matrix Switch® includes:
1 Power Supply Module
1 Fan Tray Module (3 fans)
1 Control Card
1 16-port Input/Output Card
Optional Modules (Spares):
Redundant, Current Sharing Power Supply Module
Secondary Control Card
1 or 2 16-port Input/Output Cards
The TLX48 Matrix Switch is available with LC-type fiber connectors.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
2
DisplayPort Connector
HDMI Connector
Features of the TLX Matrix Switch & Extension System
Introducing Thinklogical’s newest family of switching and extension solutions, for
uncompressed, high resolution video and KVM systems over fewer cables.
Offering a higher bandwidth solution, the TLX product line provides 10Gbps
bandwidth per port to preserve signal integrity and provide uncompressed, high
resolution video with no artifacts, latency or lost frames.
The TLX product family offers these features to enhance ease of integration:
Hybrid switching solutions (fiber and CATx) start at 16 ports and scale up to 640 ports.
Offers a higher bandwidth solution to address new video resolutions and prepare for future
protocols.
The TLX reduces system cabling by half by enabling through higher bandwidth.
Extend and switch:
Single display up to 4096x2160 @ 30Hz with full 4:4:4 color depth, over a single fiber or
CATx cable
(or dual displays up to 1920x1200 @ 60Hz with full 4:4:4 color depth)
Single display up to 4096x2160 @ 60Hz with full 4:4:4 color depth, over two fibers or CATx
cables
(or dual displays up to 4096x2160 @ 30Hz with full 4:4:4 color depth)
Dual displays up to 4096x2160 @ 60Hz with full 4:4:4 color depth, over four fibers or CATx
cables
Dual connectors on TLX Extenders, offering support for both HDMI and DisplayPort, reduces
the number of extenders and converter cables required and enables users to future-proof
system designs.
DisplayPort Connector
HDMI Connector
Connector installed on every Video and KVM extender module.
Interoperability with Thinklogical’s Velocity family of switch and extension solutions, to
ensure an easy upgrade path and a smooth transition to Thinklogical’s next generation
solution.
HYBRID SWITCHING SOLUTION
For Uncompressed, High Resolution Video & KVM Systems
Thinklogical’s TLX Matrix Switches are high performance, modular, non-blocking switches for complete
end-to-end switching of video, audio and peripheral signals over multi-mode or single mode fiber optic cable or CATx cable.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
3
TLX switches are protocol agnostic, supporting most video, audio and peripheral signals and allow users
to consolidate all of their system switching requirements in a single chassis. TLX Matrix Switches are ideal
for small or large system applications, with switch sizes ranging from 12 ports to 640 ports. Each port
supports 10Gbps bandwidth, preserving signal integrity to provide uncompressed, high resolution video with no artifacts, latency or lost frames. Thinklogical’s re-clocking technology ensures that every video and
data stream is delivered in perfect synchronization.
SECURITY
Creating physical separation between potential threats (users) and the target (secure data) is essential to
a secure system design. Thinklogical’s system permits users to access sources up to 80 kilometers
away, with no performance degradation. System administrators can safeguard sources in a centralized
location, allowing users to maintain remote access to the sources, but with no means to breach the system,
either accidentally or intentionally (such as downloading sensitive information onto a USB drive).
PARTITIONED AND RESTRICTED SWITCHING
To protect data between multiple networks, partitioning allows the switch resources to be divided to
support more than one network without allowing switching between networks. Restricted switching allows
the administrator to manage access on a port-by-port basis. Partitioned and restricted switching is enabled
through the switch’s firmware, which means a threat would have to physically access the switch to tamper
with the settings.
RESILIENCY
TLX switches are designed to maximize system uptime. The modular approach of the TLX allows user to
hot-swap all critical system components, including power supplies (in dual supply models), fan trays,
control cards, input/output cards and pluggable optics. Furthermore, the system can be easily
reconfigured, such as adding additional input/output cards for expansion, without ever turning off the switch
or interrupting active signals. Redundant and current-sharing power supplies ensure continuous,
uninterrupted power to the switch. Matrix switches are also configurable to include redundant control cards with automatic failover. Enhanced diagnostics and alarms provide extensive real-time monitoring
and diagnostics of critical functions of the switch.
SYSTEM FUNCTIONALITY
TLX Extension Systems have a simple transmit and receive design. The TLX Transmitter connects to the
source to receive video, audio and peripheral data. Utilizing Thinklogical’s proprietary multiplexing
technology, the data is transmitted over fiber through 10Gbps SFP+ technology for up to 80
kilometers, or over CATx cable for up to 100m. At the TLX Receiver, Thinklogical de-multiplexes the
data stream to deliver uncompressed, high resolution video, audio and peripheral data at the end-user’s
workstation.
TLX extension systems are highly configurable to suit the requirements of any application. Extenders are
configurable to support up to 4K video (4096x2160) @ 60Hz, full duplex stereo audio, serial (RS-232),
USB HID, USB 2.0 (480Mbps) and 10/100/1000 Network. The TLX design offers support for both HDMI
1.4 and DisplayPort 1.2 connector types in a single extender, with full support for HDCP content.
Additionally, TLX extension systems support embedded audio, with the ability to de-embed audio at the
receiver. All extenders are equipped with an additional output for a local display, as well as an Ethernet
port for configuration management and updates.
For high-availability applications, redundant fiber path configurations are also available.
The TLX extension systems are compatible with a full line of scalable, non-blocking TLX matrix switches, ranging from 16 to 640 ports.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
4
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
5
FORM FACTOR
TLX extension systems are available in a modular form factor. The modular extenders are compact and
hot-swappable, so users can field-configure any modular chassis. For fiber extenders, the optical modules,
or SFPs, are also hot-swappable. The modular system promotes system flexibility, scalability and
reduced maintenance.
The TLX Modular Extender Chassis Line
Several chassis types are compatible with all TLX modular extenders, allowing users to mix-and-match
chassis types to reduce the overall footprint of the design. Users can choose from the resilient, rack mount
chassis (housing up to four video extenders or up to two KVM extenders in a single rack unit) with
redundant and hot-swappable power supplies, or from our more compact, space-saving designs for
desktop applications.
Each TLX Chassis accommodates the full line of TLX Extender Products.
The CHS-000004 is a rack-space-saving, high-reliability rack mount unit for up to 4 modules of HDMI,
DVI, RGB or SDI in a compact 1U chassis.
The CHS-000002is a desktop solution that accommodates one 7.4” or two 3.7” modules of HDMI,
DVI, RGB or SDI in a compact, desktop chassis. Rack-mount attachments are available.
Ready for the challenges of demanding applications, both the CHS-4 and CHS-2 Chassis can combine a
variety of HDMI, DVI, RGB or SDI modules in transmit/receive units for a space-saving and cost- effective
solution.
The CHS-000001 stand-alone chassis will accommodate one 3.7” TLX video module.
All TLX Extender Chassis are powered by standard 100-240 VAC, 50-60 Hz.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
6
THE TLX48 MATRIX SWITCH DESIGN
The modular approach of the TLX48 10G Matrix Switch (also referred to as a Switch or Router) allows all
critical system components, including Input/Output Cards, Power Supplies, Control Cards and pluggable
optics (SFP+) to be hot-swappable, thus minimizing down-time during reconfigurations, upgrades or
failures.
Thinklogical’s TLX48 line replaceable modules include:
(2) Redundant, Current Sharing Power Supply Modules
(1) Fan Tray Module (3 fans)
(2) Control Cards (Primary/Secondary)
(Up to 3) 16-port Input/Output Cards (SFP+)
DESIGN FEATURES
Each TLX48 includes the following features:
48 fiber ports - In and Out for non-blocking matrix switching
Each connection supports 10Gbps / 6.25 Gbps with re-clocking input
16 ports scalability for in and out cards, hot swappable
Front mounted or stand-alone touch screen option
Redundant, current sharing power supply modules, hot swappable
Single-mode, multi-mode and coaxial capability
Comprehensive system setup and control provided via Thinklogical’s Configurator
software (included)
Multicasting and macros supported
SNMP control protocol
Controllable via LAN or serial connection
Single fan tray with annunciator port (for alarms), hot swappable
Redundant Control Card
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
7
PRODUCT COMPATIBILTY
The TLX48 is compatible with the following Thinklogical® products:
Compatible with Single & Multi-Mode TLX 10G KVM and Video Extenders (10G to 10G only)
Compatible with Single & Multi-Mode Velocity 6G KVM and Video Extenders (6G to 6G only)
Compatible with SDI Xtreme 3G+ Extenders
Compatible with the Configurator / Hot-Key Manager / System Management Interface
Compatible with the standard VX Router ASCII Interface (via RS-232 port or via Network port)
Compatible with the standard VX Router IP Address Configuration Procedure
Compatible with the standard VX Router SNMP Traps
Compatible with VX and MX Matrix Switch 6G I/O cards (6G to 6G only)
POWER SUPPLY MODULES
The dual, redundant power supplies ensure continuous,
uninterrupted power. The supplies are current sharing
which means the supplies share the load equally. If a power
supply fails, the redundant power supply can support the
entire current load of one fully populated Switch.
Although the switch functions properly with one power module, Thinklogical recommends that both modules be used, preferably connected to independent power sources, for redundancy.
Each Power Supply module contains an internal cooling fan.
Additionally, the hot-swappable feature allows easy replacement of a module without interrupting the
Switch’s system functionality. Power Supply status is displayed on the front panel (see below).
TOUCHSCREEN OPTIONS
The TLX48 is offered with a Touchscreen which allows the user to easily make and break connections
with minimal set up time. The Touchscreen is available in a Front-Mounted or Stand-alone version.
Both options include Power Supply status LEDs.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
8
The stand-alone touchscreen is connected via the RS232 serial port on the back of the Switch. The
serial port on the Switch can be configured to work with the touch screen or our ASCII interface. The
Switch ships with the ASCII interface enabled.
ENABLING THE TOUCHSCREEN
To enable the touchscreen, connect the computer's network port to the RJ45 LAN port on the TLX48
using a crossover cable or through a network hub. The TLX48 is shipped with a default IP Address of
192.168.13.15 (which can be changed using the dip switch on the Fan Tray).
Set your computer to use the static address 192.168.13.9 and netmask 255.255.255.0. From here,
open a browser and type in the address of the TLX48 (http://192.168.13.15). Check the Touchscreen
Enable box to allow control of the touchscreen via the serial port.
The names of Sources and Destinations can also be changed easily from this page using the browser.
Set a web browser to the IP address of the TLX48. Make any desired changes to the names and be sure
to press the “SAVE and UPDATE” buttons before disconnecting.
Naming Sources and Destinations
To make a connection, select both a destination and a source (they turn blue when selected) and press
“CONNECT”. To break a connection, select a destination (it turns blue when selected) and press
“DISCONNECT”.
THE CONTROL CARDS
The hot-swappable Control Card connects the TLX48 to an External CPU. The RS-232 serial port
may be used for third party controller integration (such as Crestron, AMX or home-spun interfaces). Also,
the Configurator Software may be used to control the Switch via the LAN port.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
9
A Secondary Control Card ensures uninterrupted functionality if the Primary Control Card should
fail or need to be replaced. The Primary Control Card should always be in the left controller slot. The
Secondary Control Card (sometimes referred to as a Back-up or Fail-Over Control Card) must have a LAN
connection that allows it to communicate with both the Primary Control Card and the Configurator server
(required in order for the Secondary Control Card to take control of the TLX48). Both Control Cards must
have the same CPU Module/Processor. (Also see Safely Remove an Active Control Card or Shut Down of the System on page 23 for more on Primary and Secondary Control Cards.)
THE PROCESSOR – i.MX 6 QUAD (Freescale)
The Processor platform key features:
ARM Cortex-A9 MPCore 4 x CPU
Memory Interfaces
64-Bit DDR3-1066
SD (Memory Card Specification, v3.0 including high-capacity SDHC cards up to 32 GB.
Serial NAND Flash (SPI)
SATA II, 3.0 Gbps HDD
EIM Bus (FPGA Parallel Bus I/F)
HDMI 1.4 port
USB 2.0 Host (2 ports)
UART (4 ports)
Gigabit Ethernet Controller (RGMII)
GPIO (32 bits)
I2C Masters (3 ports)
Internal 100 Megabit Ethernet Interface for Controller to Controller communications
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
10
THE NETWORK INTERFACES
A TLX48 uses up to three IP addresses. The Primary Control Card uses address X and address X+100.
The Secondary Control Card uses address X+1 and will take over address X in the event of a failure in the
Primary Control Card. These addresses are set by an external DIP switch. (See: TLX48 DIP Switch
Settings, page 16.) The primary’s IP address can be set from 15 to 45. The default subnet used by the
TLX48 is 192.168.13.xxx. The user may use their own subnet by reconfiguring the switch’s network
startup.
This procedure is detailed in: How_To_Change_A_TLX_Matrix_Switch’s_IP_Address.pdf
The TLX48 uses several network ports for control and status. Port 17567 accepts commands to control
the switch.
The command API is described in the manual: TLX_Matrix_Switch_ASCII_API_V5.pdf
There are other ports that can be read to access system configuration and operating data. The actual data
format varies by model and is described in the following sections. There are five blocks of data available
for reading.
These ports are documented in the manual:TLX_Switch_Interfaces.pdf
1.Switch connection status (broadcast over port 17564 every few seconds)
The primary CPU IP address
Upper or Lower chassis flag
First port number in this block
Last port number in this block
'N' port number values
2. Port settings (UDP port 17565, TLX48 localhost only)
Port output level value
Port input enable status
Input port number (big-endian format)
3. Hardware sensor status (TCP port 17566)
Reserved for future use.
4. Alarm, Inventory and Power Supply Status (TCP port 17600)
State of the alarm contacts
Card Inventory
Power Supply Status (internal TL use only)
Switch card temperature readings
5. I/O card data (TCP ports 17601 through 17640, 1 port per I/O card)
6.Service Request (LOS) Signaling (UDP port 17560)
The TLX48 can broadcast a message over the network when a remote receiver requests attention. When
enabled, the receiver will toggle its TX pin, causing a LOS (loss of signal) event to occur at the Switch.
When detected, the TLX48 broadcasts an 'Attention Request' message over the network. This message
contains the IP address of the TLX48 and the port number that detected the request. It is left up to an
external system to detect, decode and act upon this request.
32-bits, TLX48's primary IP address
16-bits, 0 for the Upper (or only) Switch chassis, 1 for the Lower Switch chassis (in some models)
16-bits, port number (list starts from 1, not 0)
16-bits, key code in bits 0 – 7, 0x00 and 0xff are ignored
I/O card type
I/O card temperature
SFP serial ID data
SFP Diagnostic data
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
11
SNMP SUPPORT
The TLX48 can be monitored via SNMP Simple Network Management Protocol(supports version 2c
only). Please call our technical support staff at 1-203-647-8798 for downloadable MIB Management
Information Base definition files.
There are a few entries in the SNMP configuration file (/etc/snmp/snmpd.conf) that users may want to
modify:
syslocationText to aid in locating the unit
syscontactName/Phone/email address of a contact
trap2sinkIP address/name of a system to receive SNMP traps
The default name used by trap2sink is 'snmp.trap' and is defined in the file /etc/hosts as pointing to
127.0.0.1. The easiest method to change the trap address is to modify the /etc/hosts entry and not
change the trap2sink setting in the configuration file. You may have multiple trap2sink entries in the
configuration file to specify multiple trap destinations.
NTP SUPPORT
NTP, or Network Time Protocol, is used to keep the internal clock on the TLX48 set to the correct
time. By enabling this service, users keep the Switch’s clock synchronized to an external time reference.
In order to use the service users must have a time server running on their network or allow the Switch to
access a public time server. NTP configuration is contained in the file /etc/ntp.conf
The TLX48 records system events into files located in the directory /var/log/. If you wish to preserve
log files, you may redirect the logs to another system(s). This is a standard feature of Linux's rsyslogd
program. Redirection is enabled by entries in rsyslog configuration files located in /etc/rsyslog.d/
Details about syslog configuration file entries may be found at: http://www.rsyslog.com/doc/
SERIAL/RS-232 INTERFACES
The Control Card has two RS-232 serial ports. One Control Card is for the Linux command line interface
(labeled CONSOLE), and the other is for the Switch's ASCII command interface (labeled RS232). If a
Secondary Control Card is installed, then its Linux console port is active, but only the RS232 port on the active Control Card will function.
A straight cable is needed to connect to a PC (not a null-modem).
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
12
TLX-MSD-M00016
TLX-MSD-C00016
THE FAN TRAY MODULE
The TLX48 uses 3 DC fans located in one modular, hotswappable fan tray designed for easy replacement
without interrupting system functionality. The Fan Tray
introduces air into the chassis through air baffles along the
chassis side panel. This cools the horizontally mounted I/O
Cards, the Control Cards and the backplane.
The Fan Tray is also equipped with an annunciator port for
system alarms which can be configured to trigger an external
control system (adapter included) and an external DIP Switch
for setting IP addresses.
The TLX48 Critical Hardware Alarm contacts are NC,
Normally Closed)
Alarm Descriptions for the TLX48
All fan speeds are monitored. Any fan speed that does not meet specification will cause an alarm
condition.
The temperature in the chassis is monitored by internal temperature sensors in several locations.
Sensors located in the Power Supply(s), Fan Tray, on the Control Card(s) and on the I/O Card(s)
monitor continuously for any anomalous conditions.
THE INPUT / OUTPUT CARDS
The TLX48 10G contains up to 3 horizontally mounted I/O Cards. I/O Cards provide the 1st (ingress)
& 3rd (egress) stages of a three stage Clos switch fabric.
The hot-swappable Input/Output (I/O) cards provide in-service expansion capabilities in sets of 16 ports
per I/O card, thus allowing re-configuration without interrupting signal processing.
Each I/O card consists of one Transmit (T) and one Receive (R) optic per port. I/O Cards are available
with CATX or LC-type fiber connectors and can be assembled with Single-mode or Multi-mode
optics (SFP+). Each individual I/O Card lists the ports as 1 through 16 on the TLX48. A blue LED located
on each I/O card indicates when power is applied to that card.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
13
The TLX48 can have a minimum of one I/O Card (16 x 16) and a maximum of 3 I/O Cards (48 x 48).
Each TLX48 I/O card contains 16 ports, so that when fully configured, the TLX48 will provide a total of 48
Optical Input/Output connections (SFP+ T/R) described as Ports 1-48. The TLX48 switching matrix
connects any port’s optical output (SFP+ T) to any port’s optical input (SFP+ R).
Port numbers begin at the right and start with the bottom I/O Card
THE DIGITAL CROSSPOINT SWITCH
The Digital Crosspoint Switch is a non-blocking asynchronous switch that can connect any input to any
output of Thinklogical’s TLX, VX and MX Matrix Switches. Video and Data signals are routed in both
directions and the data stream is de-multiplexed at the receiver to deliver uncompressed, high resolution
video, audio and peripheral data at the end-user’s workstation.
The Digital Crosspoint Switch
Note: The TLX48 supports the existing MX48’s I/O Cards in order to support the legacy
Velocity extenders.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
Maximum DC: 1A at 30VDC
Maximum AC: 0.3A at 125VAC
Contact resistance maximum: 100 mΩ
Touchscreen
Resistive, for use with stylus pen (included)
Operating Temp
and Humidity
0° to 50°C (32° to 122 °F), 5% to 95% RH, non-condensing
Power
Requirements
AC Input: 100-240VAC, 4A max., 47-63 Hz
Universal AC Power Supply
Full Power
Consumption
~150 Watts, fully loaded
Per Supply Power
Consumption
+12.0V: 25A max, +3.3V: 0.7A max
Compliance
Approvals for US, Canada, and European Union
Warranty
1 Year from date of shipment. Extended warranties available.
TECHNICAL SPECIFICATIONS
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
15
Section 2: Set-Up & Installation
BEFORE STARTING ANY PROCEDURE, IT IS RECOMMENDED
THAT YOU READ THE INSTRUCTIONS THOROUGHLY!
Contents
When you receive your Thinklogical® TLX48 KVM Matrix Switch, you should find the following
items in the quantities specified in your order:
TLX48 Chassis (includes up to 2 Power Modules, 1 Fan Tray, up to 3 Input/Output Cards and one
or two Control Cards)
Power Cord – Qty. 1 per power supply – PWR-000006-R (International connections may differ)
Product Manual CD
Product Quick Start Guide
Chassis Options (Spares):
Secondary Control Card
Spare Fan Tray
Spare Power Module
Data Input/Output Cards, 16 Ports
The TLX48 KVM Matrix Switch ships configured to customer specifications.
Unpacking the TLX48
The TLX48 is designed to be mounted in a standard EIA 19” rack. All physical connections to the
product use industry-standard connectors. Non-supplied cables that may be needed are commercially
available. All connections are found on the rear of the unit.
Step 1 Carefully remove the TLX48 from its shipping container. Carefully inspect the entire unit to
make certain that no damage occurred during shipment.
Step 2 All of the I/O cards are installed at the factory to meet your specific configuration. Ensure that
the I/O cards are properly seated in the unit and that all the SFP modules are sealed with a removable
dust plug. All of the I/O cards are held in place by thumb screw retainers.
Note: Ensure that all thumb screws are finger tight so that all the modules are properly
held in the chassis.
Step 3Verify that the power supply(s) is fully seated in the chassis and that the retaining screw
is secure.
Step 4Verify that the fan tray is fully seated in the chassis and that the thumb screws are secure.
Note: If mounting the chassis in a rack, insure that air flow to the fans is not restricted
(minimum 2” of free space on all sides).
Note: If any of the sensors detect an over temperature condition, power will be removed
from all sensitive components and the system will shut down.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
16
Fan Tray DIP Switch
ON=0
Example: 192.168.13.21
Note: All failure conditions send out notifications prior to shut down. For a detailed list of
the alarm functions, see page 12: Alarm Descriptions for the TLX48.
Step 5When the TLX48 has been inspected and found to be in suitable condition, the installation
process can begin.
Connecting to the TLX48
Thinklogical’s line of TLX Extenders come in both fiber-optic cable and CATx cable versions.
Thinklogical’s proprietary multiplexing technology combines video, audio and peripheral data on a single
data stream for up to 80km over a single fiber or up to 100m over a single CATx cable.
The TLX48 is compatible with the following Thinklogical® products:
Compatible with Single & Multi-Mode TLX 10G KVM and Video Extenders (10G to 10G only)
Compatible with Single & Multi-Mode Velocity 6G KVM and Video Extenders (6G to 6G only)
Compatible with SDI Xtreme 3G+ Extenders
Compatible with the Configurator / Hot-Key Manager / System Management Interface
Compatible with the standard VX Router ASCII Interface (via RS-232 port or via Network port)
Compatible with the standard VX Router IP Address Configuration Procedure
Compatible with the standard VX Router SNMP Traps
Compatible with VX and MX Matrix Switch 6G I/O cards (6G to 6G only)
Ethernet Control
If the TLX48 KVM Matrix Switch is to be controlled via Ethernet, it will require a static IP address. This
value can be set via the DIP switch located on the front of the Fan Tray Module. Factory default setting is:
192.168.13.15 (00000000).
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
17
TLX48 DIP Switch Settings
The simplest network connection is an isolated network with only the TLX48, the control server, and any
control clients using static IP addresses. The TLX48 can be set to any of the above settings. The control
server must be at 192.168.13.9, and the control clients could then be set to any other addresses in the
192.168.13.X family.
If static IP addresses for the control server and its clients are not possible, then the control server will
require two (2) network interfaces with one interface set to the static address 192.168.13.9 and dedicated
to the TLX48 KVM Matrix Switch(s) while the other network interface can be configured as required by the
facility's network administrator.
Redundancy and Network Requirements
A Secondary Control Card (sometimes called a Back-Up or Fail-Over Control Card) is optional and
ensures uninterrupted functionality if the Primary Control Card ever fails or needs to be replaced. Two
network requirements need to be in place in order for a switchover to occur:
The Secondary Control Card must have a LAN connection to the server with the IP address as specified
in the “TLX48 DIP Switch Settings” section above. Without this connection, the Secondary Control Card
will NOT take control of the Switch under any circumstances.
The Secondary Control Card must also have a LAN connection that allows it to communicate with the
Primary Control Card.
Note: It is important that the Network connections are tested. The user should log into the
Secondary Control Card via SSH or Console port and ping the server as well as the
Primary Control Card to verify the connections.
External Control CPU Minimum Requirements
The External Control CPU must meet the following minimum requirements (including requirements for using Thinklogical’s System Management Portfolio):
System Management Interface package requires Debian or Ubuntu 32 or 64 bit.
Configurator and Hot Key Manager run on Linux (RedHat 32 & 64 bit, Debian 32 & 64 bit or
Windows XP, 7, and 8).
RAM (minimum): Linux: 1GB Windows: 4GB OSX: 4GB
VIDEO: Works with all video adapters. (Not required if the computer is used as a headless server.)
KEYBOARD/MOUSE: Works with any keyboard/mouse/touchpad. (Not required if the computer is
used as a headless server.)
NETWORK: One port minimum, although two ports are recommended for security considerations.
DISK SPACE: Thinklogical programs typically use less than 40 MB.
SERIAL PORT: 1 optional RS-232 serial port (Crestron/AMX serial access)
Pluggable SFP+ Modules
Each Input and Output card contains rows of SFP+ modules that serve
as the fiber-optic couplers for the fiber cables to and from the Thinklogical
transmitter and receiver extenders. Individual cards can be removed for
easy access to the SFP+ modules.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
18
OPTICAL OUTPUT PORT (Transmit)
OPTICAL INPUT PORT (Receive)
T RT R
LCLC
◄Transmit◄Receive
3"
The SFP+ Optical Module is a 10Gbs Short-Wavelength Transceiver designed for use in bi-directional
Fiber Optic Channel links. The modules are hot-pluggable and operate on 3.3VDC.
Always use dust caps to protect against dust and damage when a fiber optic connector is not
attached to its coupling device (fiber optic equipment, bulkheads, etc.). All Thinklogical Matrix
Switch SFPs are fully populated with dust plugs upon shipment.
Note: It is good practice to immediately install dust plugs in unused SFP modules and on
the ferrules of unconnected fiber-optic cables.
Each TLX48 I/O card has 16 SFP+ Modules,
each mounted within a grounded metal
enclosure. Each SFP is locked into its enclosure
with a built-in latch handle that can be opened for
removal or locked for installation (right).
The latch handle spans the two LC ports. Arrows
printed on the handle indicate which port is an
INPUT () and which is an OUTPUT ().
SFP+ Latch Closed SFP+ Latch Open
Fiber Optic Cable
Installing Fiber Optic Cable: The TLX48
switching matrix connects any SFP’s optical
output port (Transmit) to any other SFP’s optical
input port (Receive).
Requirements:Thinklogical recommends SX+ Laser Enhanced (50µm) fiber for your TLX48 KVM
Matrix Switch and Velocity Extension System. OM4 Multi-mode fiber can extend up to a maximum of
400m and Single-mode fiber can extend up to 80km.
Handling Fiber Optic Cable:Unlike copper cabling, fiber optic cable requires special handling.
A small speck of dust or a scratch to the ferrule tip (the end of the connector) can attenuate the
optical signal, rendering the cable inoperable.
Warning!The ends of the connectors (the ferrule) should
never come in contact with any foreign object, including
fingertips. Always install a dust cap immediately on the
ferrule of any unused fiber to protect the tip.
Warning!Minimum bend diameter must be no less than 3”. Be
careful not to kink or pinch the fiber when using ties.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
19
TLX Extender Fiber-Optic Cable Configurations
SINGLE VIDEO MODULES
DUAL VIDEOMODULES
Note: On Dual Video models, SFPs 1 & 2 are Video 1 and SFPs 3 & 4 are Video 2.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
20
TLX Extender CATx Cable Configurations
There are currently several versions of CATx (category 5/5a/6/6a/etc.) cables on the market. Thinklogical
recommends using a minimum of CAT6 for your TLX48 KVM Matrix Switch and Extension System.
All cables CAT6 or higher can extend up to a maximum of 100m.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
21
Routing Thinklogical Extenders through the TLX48
Comprised of a fiber-in, fiber-out matrix switch and fiber-optic KVM Transmitter and Receiver Extenders,
this complete system provides transparent and secure routing, switching and extension of video and highspeed data peripherals to remote destinations with ease.
TLX48 Transmit / Receive Concept
Connecting to the Receiver
The Velocity Receiver serves as the Destination (desktops, theaters, conference rooms, editing suites,
control consoles, video walls, etc.). Depending on your configuration, your KMASS devices (audio,
keyboard, mouse, etc.) are connected to the Receiver first, using standard cables. Power can then be
applied to the unit. The Receiver then connects to the TLX48 Receiver ports using fiber (Multi-mode fiber
for distances up to 400m; Single-mode fiber for distances beyond 400m).
Connecting to the Transmitter
The Transmitter serves as the Source (computer and video entities). If the source includes a
workstation, depending on your configuration, your local KMASS devices (audio, keyboard, mouse, etc.)
should be connected first. The video sources (e.g. computers, tape decks, etc.) are connected next,
followed by any local video devices. Power can then be applied to the unit. The Transmitter connects to
the TLX48 Transmitter ports using fiber-optic cables (Multi-mode fiber for distances up to 400m; Singlemode fiber for distances beyond 400m).
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
22
Routing Thinklogical® TLX Extenders through the TLX48
Connecting to a Control CPU
The TLX48 is controlled via a dedicated external Control CPU. This allows for customization as well as
ease of control and administration. Access is provided via a network connection or serial RS-232.
Note: The Control CPU (Computer) is supplied separately.
The network and serial RS-232 connection both use the same low level ASCII API syntax. This command
syntax is defined in the document: Router_ASCII_API.pdf. Each line contains only one command and
must end with a carriage return (CR) and line feed (LF), or just a line feed (LF). The characters are not
echoed.
The serial port is configured for 9600 baud, 1 stop bit, no parity, and no flow control. The network interface
listens on TCP (Transmission Control Protocol) port 17567. It accepts the same commands as the serial
interface. You may use telnet to manually open a connection and control the TLX48 using port 17567.
Third-party controllers will control the Switch by connecting to either the serial or network port. Using the
network is the only means to take advantage of our automatic fail over facility.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
23
Thinklogical offers a web-based control program called 'Configurator'. This program is described in greater
detail in the document: Manual_Sytem_Management_Portfolio.pdf, available on the Thinklogical web
site.
» A straight (NOT a null-modem) cable is needed to connect to a PC
Firmware
On Screen Display (OSD) - Firmware Option
The Configurator can be accessed and controlled via an OSD (On-Screen Display) technology. The
Configurator software can be installed on a designated OOB (Out-Of-Band) PC which users can access
from a workstation. A preconfigured hot-key sequence delivers the Configurator GUI straight to the user’s
desktop monitor. The user then selects the defined sources and destinations to connect. While making the
connections, users have exclusive use of the OOB PC. Once connections are completed, the OOB PC
becomes available for the next user. The OOB PC loaded with the Configurator has a built in timeout
function and should not be taken out of service for an extended period of time. The timeouts can be set in
increments of one second. Typical timeouts are in the order of 10 seconds.
Upgrades
Firmware upgrades are available through Thinklogical®. For technical assistance, please call us at
1-203-647-8700.
Order of Installation Events
Please refer to the Quick Start Guide included with your products for detailed instructions. The TLX48
Quick Start Guide is also available in Appendix A, page 32.
Safely Remove an Active Control Card or Shut Down the System
During normal, non-maintenance operation, the Primary Control Card should always be the Active
controller for the system. However, there may be times when other conditions temporarily exist, such as
during maintenance, updates, repairs, etc.
Although the system will run normally on the Secondary (or Back-up) Control Card, not having a second
card eliminates the fail-over protection afforded by a redundant, two-card system.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
24
BEFORE STARTING ANY PROCEDURE, IT IS RECOMMENDED
THAT YOU READ THE INSTRUCTIONS THOROUGHLY!
The following commands allow the safe removal of a Control Card and the switch of activity from one
Control Card to the other without interruption of connections
Note: During normal operation, the Primary Control Card should always be the active
controller for the system.
During normal operation the Primary or Secondary Controller can be managed via the console port or over
an SSH connection.
The HALT Command
Typing halt at the command line will perform an orderly shut-down of the active Control
Card.
Once the Control Card is inactive, it will stop signaling the other Control Card. This prompts
the other card to become active. This will take only a few seconds.
Remove any cables (LAN, RS-232, Console, etc.) from the inactive card. It can now be
safely removed from the chassis.
At this point, the system is now running on the Secondary Control Card.
Note: Re-inserting the Primary Control Card restores the system back to running on the
Primary Control Card. Insure that the LAN connection to the card is restored promptly.
The PWROFF Command
Typing pwroff at the command line prompt, from either the Primary or the Secondary
Control Card, will halt BOTH Control Cards and turn off the power to all the I/O card slots
in the system except the controllers.
Note: I/O card slot power cannot be turned off on the TLX48.
Remove the AC power cord(s) from the Matrix Switch or from the AC source for a complete
system shut-down.
Remove any cables (LAN, RS-232, Console, etc.) from the Control Cards.
The Control Cards can now be removed, swapped or replaced as needed.
Upon turn-on, the Control Card in the top or the left slot will become Primary and the Card in either the
bottom or the right slot will be the Secondary back-up.
How to Install and Replace Modules
How to Install or Replace an Input / Output Card
Note: No shutdown is required prior to installing/replacing Input/Output Cards.
Step 1Turn the card’s two thumbscrews counterclockwise until they disengage from the chassis. Pull
the card straight out using both handles.
Warning! Do not pull on the thumbscrews when removing the module – damage may
occur!Use the handles!
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
25
Step 2 Grasp the replacement module by the handles and place it into the slot horizontally so
that the POWER LED is on the left. The card should slide freely until it reaches the backplane
connector. At this point, use just enough force to firmly engage the card with the mating connector.
Warning! If the module does not slide into the connector, do not force it! Damage may
occur. Remove the card and start over.
Step 3Hand-tighten the thumbscrews.
Warning! Do not tighten the thumbscrews with a screwdriver.
How to Install or Replace a Control Card
Note: When using a single Controller, the left Controller slot is always Primary.
Replacing the Primary Control Card will interrupt service if a Secondary Control Card
is not installed.
Step 1Turn the thumbscrews counterclockwise until they disengage from the chassis. Pull the Control
Card straight out using both blue handles.
Step 2 Grasp the replacement module by the handles and place it into the slot horizontally so
that the PGM Port is to the left. The card should slide freely until it reaches the backplane
connector. At this point, use just enough force to firmly engage the card with the mating connector.
Warning! If the module does not slide into the connector, do not force it! Damage may
occur. Remove the card and start over.
Step 3Hand-tighten the thumbscrews.
Warning! Do not tighten the thumbscrews with a screwdriver.
How to Replace a Fan Tray
The TLX48 uses three DC fans to move air horizontally through the enclosure. Be sure to not block the air
vents on the sides of the unit and leave at least 2” of space on both sides.
Note: Leave adequate ventilation space on both sides of the units (2” minimum), especially if
devices are being stacked above or below the TLX48 KVM Matrix Switch.
Note: No shutdown is required prior to replacing the Fan Tray.
Step 1Turn the two thumbscrews counter-clockwise until they
disengage from the chassis.
Step 2Pull the Fan Tray module straight out using the handle.
Step 3Place the new module so that the alarm is toward the
bottom. Hold the Fan Tray by the handle and slide the aluminum
housing into the card guides until it reaches the backplane
connector. At this point, use just enough force to firmly engage the
tray with the mating connector.
Warning! If the tray does not slide into the connector, do
not force it! Damage may occur. Remove the tray, reseat
it and start over.
Warning!Do not operate the unit without a Fan Tray
installed.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
26
Step 4Hand-tighten the thumbscrews.
Warning!Do not tighten the thumbscrews with a screwdriver.
How to Replace a Power Supply
Warning!Disconnect the power cord before proceeding!
Note: If only ONE power supply is installed, shutdown IS required. If TWO power supplies
are installed, shutdown IS NOT required.
The Power Modules are universal input 120-240VAC 5060Hz. Use the proper power cords for your region (PWR000006-R, supplied with the unit). Although the Switch
functions properly with one Power Module, it is recommended that the Primary and Secondary Control Cards be
connected to two independent power sources for redundancy.
Step 1Loosen the mounting screw.
Step 2Pull the Power Module straight out of the chassis
by the handle.
Step 3 Insert the new Power Module into the chassis and slide it in until it reaches the backplane
connector. At this point, use just enough force to firmly engage the module with the mating connector.
Warning! If the module does not slide easily into the connector, do not force it! Damage
may occur. Remove the module and start over.
Ordering Information
Part numbers or the various components of the TLX48 Matrix Switch are as follows:
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
27
Section 3: Regulatory & Safety Requirements
Regulatory & Safety Compliance
Safety Requirements
Symbols found on the product
Markings and labels on the product follow industry-standard conventions. Regulatory markings found on
the products comply with domestic and many international requirements.
Regulatory Compliance
Thinklogical’s® products are designed and made in the U.S.A. These products have been tested by a
certified testing laboratory and found to be compliant with the following standards (both domestic USA and
many international locations):
This is a Class A product. In a domestic environment this product may cause radio interference, in
which case the user may be required to take adequate measures.
European Union
Declaration of Conformity
Manufacturer’s Name & Address:Thinklogical, LLC®
100 Washington Street
Milford, Connecticut 06460 USA
These products comply with the requirements of the Low Voltage Directive 72/23/EEC and the EMC
Directive 89/336/EEC.
Standards with Which Our Products Comply
Safety
CENELEC
Electromagnetic Emissions
EN55022: 1994 (IEC/CSPIR22: 1993)
EN61000-3-2/A14: 2000
EN61000-3-3: 1994
IEC 60950-1 2nd Ed. 2005
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
28
Electromagnetic Immunity
EN55024: 1998 Information Technology Equipment-Immunity Characteristics
EN61000-4-2: 1995 Electro-Static Discharge Test
EN61000-4-3: 1996 Radiated Immunity Field Test
EN61000-4-4: 1995 Electrical Fast Transient Test
EN61000-4-5: 1995 Power Supply Surge Test
EN61000-4-6: 1996 Conducted Immunity Test
EN61000-4-8: 1993 Magnetic Field Test
EN61000-4-11: 1994 Voltage Dips & Interrupts Test
Supplementary Information
The following statements may be appropriate for certain geographical regions and might not apply to your
location.
This Class A digital apparatus meets all requirements of the Canadian Interference-Causing
Equipment Regulations.
Cet appareil numérique de la classe A respecte toutes les exigencies du Règlement sur le matérial
brouilleur du Canada.
Warning!This is a Class A product. In a domestic environment, this product may cause
radio interference, in which case the user may be required to take corrective measures.
Note: This equipment has been tested and found to comply with the limits for a Class A
digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference when the equipment is operated in a
commercial environment. This equipment generates, uses and can radiate radio frequency
energy and, if not installed and used in accordance with the instruction manual, may cause
harmful interference to radio communications in which case the user may be required to
take adequate corrective measures at their own expense.
Note: This Class A digital apparatus complies with Canadian ICES-003 and has been
verified as being compliant within the Class A limits of the FCC Radio Frequency Device
Rules (FCC Title 47, Part 15, Subpart B CLASS A), measured to CISPR 22: 1993 limits and
methods of measurement of Radio Disturbance Characteristics of Information Technology
Equipment.
Note:
magnetic fields
The user may notice degraded audio performance in the presence of electro-
.
Product Serial Number
Thinklogical products have a unique serial number, which includes a date-code, printed on an adhesive
label that is affixed to the unit. The format for the date-code is 2 digits for the month, dash, 2 digits for the year, plus at least four digits for a unique unit number. For example:
04-160127 indicates the unit was built in the 4th month of 2016, and is unit number 127.
Connection to the Product
Connections and installation hardware for our products use industry-standard devices and
methods. All wiring connections to the customer equipment are designed to minimize proprietary or
customized connectors and cabling. Power connections are made with regionally appropriate power cords
and approved methods.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
29
Section 4: Thinklogical Support
Thank you for choosing Thinklogical® products for your application.
We appreciate your business and are dedicated to helping you successfully use our products.
is always here to help you.
To contact us, please use the following telephone numbers and internet-based methods:
®
How to Contact Us
Customer Support
Thinklogical® is an engineering company and you will receive the information you require directly
from our most knowledgeable engineers.
We believe that the first line of support comes from the design
engineers that developed each particular product.
Therefore, your questions or issues will be handled promptly by our in-house engineers who are most
familiar with your products.
Website
Check out our website for current product offerings, support information and general information about all
of the products we offer.
Our internet website offers product information on all current systems, including technical specification
sheets and installation guides (for viewing online or for download), product diagrams showing physical
connections and other useful information.
Internet: www.thinklogical.com
Note: Most online documents are stored as Adobe Acrobat “PDF” files. If you do not have
the Adobe Acrobat reader needed to view PDF files, visit www.adobe.com for a download.
Email
Thinklogical® is staffed Monday through Friday from 8:30am to 5:00pm, Eastern Time Zone. We will
do our best to respond to your email inquiries promptly. Please use the following email addresses:
info@thinklogical.com – Information on Thinklogical® and our products.
sales@thinklogical.com – Sales Department - orders, questions or issues.
support@thinklogical.com – Product support, technical issues or questions, product
repairs and request for Return Authorization.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
30
Telephone
Thinklogical Operator 1-203-647-8700
Product & Customer Support: 1-203-647-8798
US Commercial & Canada Sales: 1-203-647-8715
US Federal Government Sales: 1-203-647-8716
Toll Free in the Continental US: 1-800-291-3211
International Sales (Europe, Middle East, Africa): 1-203-647-8704
International Sales (Asia Pacific, Central & Latin America): 1-203-647-8734
Please contact our expert sales staff in Milford, CT. We are here Monday through Friday from 8:30am to
5:00pm, Eastern Time Zone. We’ll provide a representative’s direct dial phone number when you call.
If leaving a voice message, please provide a preferred time to call back so we may reach you at your
convenience.
Our switchboard attendant will direct your call during regular business hours. We have an automated
attendant answering our main telephone switchboard after regular business hours and holidays. Please
leave voice messages for individuals at any time.
Fax
Our company facsimile number is 1-203-783-9949. Please indicate the nature of the fax on your cover
sheet and provide return contact information.
Product Support
Thinklogical’s® support personnel are available Monday through Friday from 8:30am to 5:00pm,
Eastern Time Zone. If your application requires assistance at some time outside of our normal business
hours, please contact us beforehand and we will do our best to make arrangements to help you with your
Thinklogical® products.
Warranty
Thinklogical, LLC® warrants this product against defects in materials and workmanship for a period of one
year from the date of delivery. Thinklogical, LLC® and its suppliers disclaim any and all other warranties.
Note: Thinklogical, LLC® products carry a one year warranty, with longer term available at
time of purchase on most products. Please refer to your product invoice for your products
Warranty Terms & Conditions.
Defect remedy shall be the repair or replacement of the product, provided that the defective product is
returned to the authorized dealer within a year from the date of delivery.
If you wish to return your device, contact the Thinklogical, LLC® authorized dealer where you purchased
the device, or if you purchased directly, call Thinklogical, LLC® at 1-800-291-3211 (USA).
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
31
If you need to return your Thinklogical® product to us for any reason, please get a
Return Merchandise Authorization Number (RMA#)
from Thinklogical’s Product Support Department (1-203-647-8798) before sending the unit in.
Return Authorization
In the event you must return a product to Thinklogical® directly, please contact Customer Support at 1800-291-3211 or 1-203-647-8700. Customer Support will ask you to describe the problem and will issue
you a Return Merchandise Authorization number (RMA#). Pack the device in its original box, if possible,
and return it with the RMA# printed on the outside of the box.
Note: DO NOT return a product to Thinklogical® without a Return Merchandise Authorization.
Our Addresses
If you have any product issues or questions or need technical assistance with your Thinklogical® system,
please call us at 1-800-291-3211 (USA only) or 1-203-647-8700 and let us help. If you need to write us
or return a product, please use the following address: Return address for products with Return Material
Authorization: Thinklogical, LLC®
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
32
APPENDIX A: TLX48 Quick Start Guide
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
33
APPENDIX B: Secure Applications
TLX Matrix Switch Control
When used in a secure application, the Matrix Switch and External Computer (server) used to manage the
system must be located in a physically secure environment to which only trusted administrators have
access. Similarly, the server used to manage the Matrix Switch must be physically protected and have
suitable identification/authentication mechanisms to ensure that only trusted administrators have access.
Thinklogical’s TLX, VX and MX Matrix Switches use two methods for secure routing. One is known as
Restricted Switching and the other is known as Partitioning. These methods can be deployed singularly
or jointly, depending on security requirements.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
34
Restricted Switching
Restricted Switching provides multiple levels of security classification domains on the same Matrix
Switch. Each destination must ensure that no unauthorized content is displayed or accessed, therefore,
every input and output needs to be prioritized. Priorities can range from 1 to the total number of ports in
the Matrix Switch. An output can connect to an input with a priority greater than, or equal to, its own. Thus,
a priority level of 1 on an output can connect to any input (priority 1, 2, 3…).
The user must provide a table defining the priorities for each input and output of the switch matrix. This
table is in the form of a comma separated value (csv) file. This file contains the values in three columns:
Port Direction (i=input, o=output), Port Number and Port Priority. For example:
Note that Port Direction (i or o) is in quotes and that the table must use only the following ASCII printable
characters:
Double quotes (or speech marks) character code = 34 (")
Lower case i character code = 105 (i)
Lower case o character code = 111 (o)
Comma character code = 44 (,)
Carriage Return character code = 13 (CR)
Line Feed character code = 10 (LF)
The Restricted Switching Table files for the TLX48 Switch are stored on the control card at:
/var/local/router/restrict/upstream.csv
Output 1 can connect to ports 1-5.
Output 2 can connect to ports 3 and 5.
Output 3 can connect to ports 2, 3, and 5.
Output 4 cannot connect to any ports.
Output 5 can connect to ports 1-5.
At system power up, after initial boot-up, the Primary Control Card will only evaluate its Restricted Switching
Table (upstream.csv file) once upon becoming active. The Secondary Control Card will NOT evaluate its
Restricted Switching Table (upstream.csv file) at initial boot-up but rather when a switchover occurs from
Primary to Secondary Active. If an upstream.csv file is found, a log entry to the deamon.log file will be made
indicating “Restricted Switching ENABLED”. If no file is found, then a log entry of “Restricted Switching
DISABLED” is made.
Note: The inactive Secondary Control Card will not verify its Restricted Switching Table (csv
file) and, as a result, will not log error messages with current time stamp entries until it becomes
active.
Also, any errors that occur during the Restricted Switching Table evaluation process will be logged as “error”
with a field and line invalid identifier. The daemon.log file will be at the following location on the control card:
/var/log/daemon.log.
Note: For access to the daemon.logfile via SSH, refer to “THE NETWORK INTERFACES”
section of this manual (page 10) for correct IP addresses of control cards when in Primary
Active or Secondary Active mode.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
35
To verify the system restrict policy, Thinklogical recommends the following:
1) Review the daemon.log file on the active Control Card and correct any errors in the Restricted Switching
Table before implementing multiple levels of security classification domains on the same Matrix Switch.
2) Fully test the Restricted Switching on the active Primary Control Card before implementing multiple
levels of security classification domains on the same Matrix Switch.
3) In a redundant system, make the Secondary Control Card active by disconnecting the LAN cable from
the Primary Control Card’s LAN port. The Secondary Control Card, upon becoming active, will evaluate
its Restricted Switching Table. Check the daemon.log file on the Secondary Control Card for any errors
in the Restricted Switching Table and correct them before implementing multiple levels of security
classification domains on the same Matrix Switch using the Secondary Control Card.
4) Fully test the Secondary Control Card’s Restricted Switching before implementing multiple levels of
security classification domains on the same Matrix Switch.
There are cases where updates to the Restricted Switching Table must be made in an active system.
When an update is made to the table, the Controller will not evaluate the updated table until the following
procedures are followed:
When updates are made to the Restricted Switching Table in a non-redundant system, Thinklogical
recommends the following (This procedure will be disruptive to system connections):
1) Update the Restricted Switching Table of the Primary Control Card.
2) Take the Primary Control Card out of service by following guidelines in the “Safely Remove an Active
Control Card” section of this document (page 23).
When updates are made to the Restricted Switching Table in a redundant system, Thinklogical recommends
the following (This procedure will NOT be disruptive to system connections):
1) Update the Restricted Switching Table of the inactive Secondary Control Card.
2) Take the Primary Control Card out of service by following guidelines in the “Safely Remove an Active Control Card” section of this document (page 23). This will cause the Secondary Control Card to become
active and evaluate its Restricted Switching Table.
3) Update the Restricted Switching Table of the inactive Primary Control Card with the same table used for
the Secondary Control Card.
4) Extract and re-insert the Primary Control Card back into the chassis to cause the system to make the
Primary Control Card the active controller and begin using the updated Restrict Switching Table. Insure
that the LAN connection to the Primary Control Card is restored promptly.
Note: When using a Back-up Controller configuration, both controllers must have the same
Restricted Switching Table file(s) to maintain the security of the system.
Restricted switching is disabled when Restricted Switching Table files are removed. By default, when
there are no Restricted Switching Table files, all input and output ports will have a priority of 1. All Switches are
shipped without Restricted Switching Table files stored on the Control Card and therefore do not restrict any
connection.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
36
Restricted Switching with TLX, VX and MX Matrix Switches
Restricted Switching Priority Scheme
The following example shows a priority scheme for four levels of security managed by one TLX Matrix Switch:
Restricted switching is configured via firmware loaded into the
Matrix Switch. The configuration file for this scenario will appear
like the table at right.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
37
Partitioning
Partitions allow TLX, VX and MX Matrix Switch sources and destinations to be segregated. Therefore,
destination work stations will only receive signals that are transmitted from source computers in the same
partition. In addition, it is impossible for a source computer to be inadvertently routed outside of its designated
partition as the signals will not be transmitted.
The user must provide a table defining the partitions. This table is in the form of a Comma Separated Value
(CSV) file located in /var/local/router/partition on the Switch. This file contains the port number and the
partitions to which it belongs.
Example: VX80 Switch with four distinct partitions:
Four partitions set up for secure routing and extension applications. Signals are only capable of
transmitting and receiving within a single partition and not across partitions
The maximum number of partitions is the number of ports that make up the Switch (80, 160, 320, 640). A VX80
can be configured with up to 80 partitions, a VX160 with up to 160, and so forth. There are also overlapping
partition configurations.
A VX80 with four partitions: Ports 5-10 are accessible to both partitions 2 and 3.
The following example shows a VX80 Switch with an overlapping partition:
The Partition Table files are stored on the control card at:
/var/local/router/partition/upstream.csv
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
38
At system power up, upon becoming active after the initial boot-up, the Primary Control Card will only evaluate
its Partition Table (upstream.csv file) once. The Secondary Control Card will NOT evaluate its Partition Table
(upstream.csv file) at initial boot-up, but rather when a switchover occurs from Primary to Secondary Active. If
an upstream.csv file is found, a log entry to the deamon.log file is made indicating “Partition ENABLED”. If
no file is found, then a log entry of “Partition DISABLED” is made,
Note: The inactive Secondary Control Card will not verify its Partition Table (csv file), and as a
result, not log error messages with current time-stamp entries until it becomes active.
Also, any errors that occur during the Partition Table evaluation process will be logged as “error” with a field
and line invalid identifier. The daemon.log file will be at the following location on the control card:
/var/log/daemon.log
Note: For access to the daemon.logfile via SSH, refer to “THE NETWORK INTERFACES”
section of this manual (page 10) for correct IP addresses of control cards when in Primary
Active or Secondary Active mode.
To verify the system partition policy, Thinklogical recommends the following:
1) Review the daemon.log file on the active control card and correct any errors in the Partition Table before
implementing multiple levels of security classification domains on the same Matrix Switch.
2) Fully test the Partitioning on the active Primary Control Card before implementing multiple levels of
security classification domains on the same Matrix Switch.
3) In a redundant system, make the Secondary Control Card active by disconnecting the LAN cable from
the Primary Control Card’s LAN port. Check the daemon.log file on the Secondary Control Card for any
errors in the Partition Table and correct them before implementing multiple levels of security classification
domains on the same Matrix Switch using the Secondary Control Card.
4) Fully test the Secondary Control Card’s Partitioning Domains before implementing multiple levels of
security classification domains on the same Matrix Switch.
There are cases where updates to the Partition Table need to be made in an active system. When an
update is made to the table, the Controller will not evaluate the updated table until the procedures outlined
below are followed.
When updates are made to the Partition Table in a non-redundant system, Thinklogical recommends the
following (This procedure will be disruptive to system connections):
1) Update the Partition Table of the Primary Control Card.
2) Take the Primary Control Card out of service by following guidelines in the “Safely Remove an Active
Control Card” section of this document (page 23).
When updates are made to the Partition Table in a redundant system, Thinklogical recommends the following
(This procedure will NOT be disruptive to system connections):
1) Update the Partition Table of the inactive Secondary Control Card.
2) Take the Primary Control Card out of service by following guidelines in the “Safely Remove an Active Control Card” section of this document (page 23). This will cause the Secondary Control Card to become
active and evaluate its Partition Table.
3) Update the Partition Table of the inactive Primary Control Card with the same table used for the
Secondary Control Card.
4) Extract and re-inserted the Primary Control Card back into the chassis to cause the system to make the
Primary Control Card the active controller and begin using the updated Partition Table. Insure that the
LAN connection to the Primary Control Card is restored promptly.
Note: When using a Back-up Controller configuration, both controllers must have the same
Restricted Switching Table file(s) to maintain the security of the system.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
39
Partition switching is disabled when Partition Table files are removed. By default, when there are no Partition
Table files, all ports not listed will default to partition 1. All Switches are shipped without Partition Table files
stored on the Control Card and therefore do not restrict any connection.
Administration Access
There are only two methods by which the administrator can access the Switch Controller Configurations:
1. Using the serial console directly connected to the Switch. (It should be noted that while no
administrator password is required to use the serial console, physical access to the Switch is required,
therefore the Switch should be stored in a physically secure location to avoid unauthorized access.)
2. Using SSH access
The Switch allows SSH connections to the Switch for management purposes. SSH sessions are
authenticated using an encrypted password file.
Password Security
For security purposes, the Switch defaults to using the Message-Digest Algorithm (MD5) and shadow
passwords. It is highly recommended that you do not alter these settings. If you select the older
Data Encryption Standard (DES) format, passwords will be limited to eight alphanumeric characters
(disallowing punctuation and other special characters) with a modest 56-bit level of encryption. The
single most important thing you can do to protect the Switch is create a strong password.
Creating Strong Passwords:
The password can contain up to 127 characters and cannot contain a space.
MAKE THE PASSWORD AT LEAST EIGHT CHARACTERS LONG. The longer the password, the more
effective it will be. If you are using an MD5 password, it should be approximately 15 characters long.
With DES passwords, use the maximum eight character length.
MIX UPper AnD LowER CASE LETTERS. Passwords are case sensitive, so mixing will multiply the
number of possible combinations.
MIX LETTER5 AND NUM8ERS within the password to enhance its strength.
INCLUDE NON-ALPHANUMERIC CH@RACTER$. Special characters (& $ % >) and punctuation
marks (? “- !) increase the strength of a password.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
40
The configuration of the TLX Matrix Switch should be reviewed regularly to ensure that it
continues to meet organizational security policies concerning:
Changes in the TLX Matrix Switch configuration
Changes in the organizational security policy
Changes in the threats presented from non-trusted network interfaces
Changes in the administration, operation staff or the physical environment of the TLX Matrix Switch
Secure Application Examples
The Diagram on page 41 shows the TLX48 Matrix Switch in a secure application. The highly secure
components are described as the Red Network and the other, lower security components are described
as the Black Network. The Red Network, containing the computers (sources), is shown in a physically secure
environment along with the TLX Matrix Switch, the computer server used to manage the Switch, and the
Network Hub. The Network Hub is a dedicated network used only to connect the TLX Switch to the computer
server. This dedicated network does not connect to any other components and does not extend beyond the
physically secure environment. The dedicated network connection may be replaced by a direct serial
connection (RS-232) between the TLX Switch and the computer server.
The TLX Matrix Switch can be configured to prevent accidental connection from the Red Network to
the Black Network using the Restricted Switching feature. For example, the TLX Matrix Switch Network
Diagram should be configured with the following csv file:
Direction Number Priority
I 1 2
I 2 2
O 2 2
I 42 2
O 41 2
O 42 2
I 5 1
O 5 1
I 45 1
O 45 1
The following connection rules apply: SOURCE 2 can be connected only to DESTINATION 2 and
SOURCE 1 can be connected to both DESTINATION 1 and DESTINATION 2.
Note: The TLX Matrix Switchand the computer server used to manage the Switch must be
protected according to the highest security classification of any component in the entire
network application.
Note: The optical connections and DESTINATION receiver designated as Red Network must be
physically secure.
Note: When using a Back-up Controller configuration, both controllers must have the same
Partition Table file(s) to maintain the security of the system.
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
41
TLX48 10G Matrix Switch Secure Application
TLX48 Matrix Switch Product Manual thinklogicalRev. B, April, 2016
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.