IP•Tube RS530 CEP HS

The IP•Tube CEP RS530 HS, whose synchronous serial interfaces are configurable as DCE or DTE, provides for the leveraging of existing synchronous serial bulk rate encryptors such as; KIV-7, KIV-7M, KIV-19, OMNI, and KG-84. The IP•Tube CEP RS530 HS encapsulates synchronous serial data from Data Terminal or Communication Equipment into IP packets. These IP packets are sent to a remote IP•Tube CEP RS530 HS where the serial data is de-encapsulated and synchronously clocked into the remote Data Equipment. The IP connection provides for the transparent interconnection of Synchronous Serial Data Equipment via LANs, WANs, MANs, Satellite and Wireless Ethernet. Configured Data rates from 2.4 Kilobits per second to 16 Megabits per second.

The IP•Tube CEP RS530 HS are used to interconnect Synchronous Serial Data connections across Ethernet, which does not provide a common clock, an application appropriate method needs to be used to ensure that the clocking of the data out of one DTE and into the other DTE is not overrun or underrun. Additionally latency and overhead for the connection of data networks needs to be taken into account along with the bandwidth constraints.

The Engage IP•Tube CEP RS530 HS DCE provides the clocking to their attached Data Terminal Equipment. SCTCLOCK is used to clock Send Data from the DTE into IP packets that are sent to the interface S1’s TUBE ADDRESS. SCRCLOCK is used to clock the IP payload packet data from the buffer memory into the DTE. The IP•Tube CEP RS530 HS DCE has a sophisticated adaptive clocking circuitry that supports the smooth synchronous clocking required by Video Codecs and configurations that minimize latency and overhead such as those required for operation over Satellite.

The IP•Tube CEP RS530 HS uses the Type of Service byte in the IP packets to prioritize the encapsulated data. The setting of the TOS byte can be used to ensure that the data from the IP•Tube CEP RS530 HS is ensured high priority.

All IP•Tube CEP RS530 HS models ship with dual 10/100BaseT Ethernet LAN ports. The dual Ethernet interfaces provide for: 

• Management interface on LAN port 2 when LAN port 1 is connected to a VPN tunnel 
  
• The LAN ports can be configured to support connections over 2 opposite ADSL links 
  
• Alternator Option for load balanced SDSL interconnects 
  
• Protector Option for Redundant Packet Path connections with Constant or Switch Over Criteria

The IP•Tube CEP RS530 HS's second 10/100BaseT Ethernet interface provides a management port when interconnecting the IP•Tube CEP RS530 HS through a Virtual Private Network. Each LAN interface of the IP•Tube CEP RS530 HS features independent IP network configurations.

IPTubes with HDLCoIP connect to the RS530HS leased line interface of an Enterprise’s WAN Router and encapsulate the HDLC frames into an IP Packet that is sent to the remote site IPTube where it is presented to the remote WAN router as the original HDLC frame. Enterprises are able to connect to broadband IP services through their existing proven WAN infrastructure. Internal Ethernet networks remain isolated and security services such as Firewalling are maintained.

IP•Tube CEPs isolate management and data plane functionality with the use of two separate processor modules. Management processor access is limited to SSH or SNMPv3 encrypted sessions that employ AES 256 bit keys and sophisticated NIST passwords. These sessions may be established after authentication via TACACS+ or Radius.

The independent Linux based management plane of the IP•Tube CEP ensures Critical Infrastructure Data is isolated from management network access. The Management Module uses internal serial ports to connect to the Data Plane processor.

Administration and User Logs are available with Syslog.

CEP management security features include:

• Administrative policies for adding, removing, disabling and renaming authorized users; limiting user access to assigned commands; and enabling only desired port numbers.
• User authentication directly or in conjunction with TACACS+ or RADIUS servers including RSA SecureID support for two factor trusted compliance.
• An SSH command interface encrypting management traffic with powerful 256 bit symmetric keys and NIST based passwords.

The protector option utilizes the second LAN interface as a redundant path for the interconnection of the IP encapsulated Synchronous Serial data. The extension of the RS530 circuit has a fault tolerant link that is configured to always on, or with switch over criteria.

The IP-Tube family is ready for your most demanding central office or data center environments. With the Rack Mount Kit IP•Tube products are easily installed in 19" and 23" racks. Easy access to both front and rear sides facilitates technician maintenance procedures.