IP-Tube CEP RS530 HS

IP•Tube CEP RS530 HS

Overview & Applications

Leverage Existing Bulk Data Encryption for Data over IP

The IP•Tube CEP RS530 HS, whose synchronous serial interface is configurable as DCE or DTE, provides for the leveraging of existing synchronous serial bulk rate encryptors such as; KIV-7, KIV-19, OMNI and KG-84. The IP•Tube CEP RS530 HS encapsulates synchronous serial data from Data Terminal or Communication Equipment into IP packets. These IP packets are sent to a remote IP•Tube CEP RS530 HS where the serial data is de-encapsulated and synchronously clocked into the remote Data Equipment. The IP connection provides for the transparent interconnection of Synchronous Serial Data Equipment via LANs, WANs, MANs, Satellite and Wireless Ethernet. Configured Data rates from 2.4 Kilobits per second to 16 million bits per second.

IP•Tube CEP RS530 HS Features

Clocking and Bandwidth
The IP•Tube CEP RS530 HS are used to interconnect Synchronous Serial Data connections across Ethernet, which does not provide a common clock, an application appropriate method needs to be used to ensure that the clocking of the data out of one DTE and into the other DTE is not overrun or underrun. Additionally latency and overhead for the connection of data networks needs to be taken into account along with the bandwidth constraints.

The Engage IP•Tube CEP RS530 HS DCE provides the clocking to their attached Data Terminal Equipment. SCTCLOCK is used to clock Send Data from the DTE into IP packets that are sent to the interface S1’s TUBE ADDRESS. SCRCLOCK is used to clock the IP payload packet data from the buffer memory into the DTE. The IP•Tube CEP RS530 HS DCE has a sophisticated adaptive clocking circuitry that supports the smooth synchronous clocking required by Video Codecs and configurations that minimize latency and overhead such as those required for operation over Satellite.

Service Quality Packet Prioritizing
The IP•Tube CEP RS530 HS uses the Type of Service byte in the IP packets to prioritize the encapsulated data. The setting of the TOS byte can be used to ensure that the data from the IP•Tube CEP RS530 HS is ensured high priority.

Dual LAN Interfaces
All IP•Tube CEP RS530 HS models ship with dual 10/100BaseT Ethernet LAN ports. The dual Ethernet interfaces provide for:
. Management interface on LAN port 2 when LAN port 1 is connected to a VPN tunnel
. The LAN ports can be configured to support connections over 2 opposite ADSL links
. Alternator Option for load balanced SDSL interconnects
. Protector Option for Redundant Packet Path connections with Constant or Switch Over Criteria

VPN Network Management
The IP•Tube CEP RS530 HS's second 10/100BaseT Ethernet interface provides a management port when interconnecting the IP•Tube CEP RS530 HS through a Virtual Private Network. Each LAN interface of the IP•Tube CEP RS530 HS features independent IP network configurations.

HDLC over IP
IPTubes with HDLCoIP connect to the RS530HS leased line interface of an Enterprise’s WAN Router and encapsulate the HDLC frames into an IP Packet that is sent to the remote site IPTube where it is presented to the remote WAN router as the original HDLC frame. Enterprises are able to connect to broadband IP services through their existing proven WAN infrastructure. Internal Ethernet networks remain isolated and security services such as Firewalling are maintained.

IP•Tube CEP Management

IP•Tube CEPs isolate management and data plane functionality with the use of two separate processor modules. Management processor access is limited to SSH or SNMPv3 encrypted sessions that employ AES 256 bit keys and sophisticated NIST passwords. These sessions may be established after authentication via TACACS+ or Radius.

The independent Linux based management plane of the IP•Tube CEP ensures Critical Infrastructure Data is isolated from management network access. The Management Module uses internal serial ports to connect to the Data Plane processor.

Administration and User Logs are available with Syslog.

CEP management security features include:

• Administrative policies for adding, removing, disabling and
renaming authorized users; limiting user access to assigned commands; and enabling
only desired port numbers.

• User authentication directly or in conjunction with TACACS+ or RADIUS servers
including RSA SecureID support for two factor trusted compliance.

• An SSH command interface encrypting management traffic with powerful 256 bit
symmetric keys and NIST based passwords.

IP•Tube CEP RS530 HSOptional Features

Protector Option
The protector option utilizes the second LAN interface as a redundant path for the interconnection of the IP encapsulated Synchronous Serial data. The extension of the RS530 circuit has a fault tolerant link that is configured to always on, or with switch over criteria.

Protector Pro Redundancy

Rack Mount Kit
The IP-Tube family is ready for your most demanding central office or data center environments. With the Rack Mount Kit IP•Tube products are easily installed in 19" and 23" racks. Easy access to both front and rear sides facilitates technician maintenance procedures.

Angle Single Unit Rack Mount Kit

IP•Tube RS530 HS Power Options

AC or DC powering available with and withour redundancy

Applications

RS530 Fig3

Leverage Existing Bulk Data Encryption for Data over IP
Defense and other Government agencies and Contractors face an ever-increasing need to establish Type 1 secure data communications links. These organizations often have access to flexible IP services such as Intranets, LANs, Metropolitan-Area Networks, WANs, or Wireless Ethernet. The Engage IP•Tube CEP RS530 HS allows users to leverage existing Bulk Data Encryption Modules for use over IP/Ethernet connections. Encrypted Data over IP with the IP•Tube CEP RS530 HS is a very economical solution that leverages a proven installed base. Encrypted Bulk Data-over-IP utilizing the IP•Tube CEP RS530 HS is an economical "Purpose Built" proven solution that leverages an installed base of high-performance INFOSEC devices. Approved Data Encryptors for use with the IP•Tube CEP RS530 HS include:

■ KIV-7 ■ KIV-19 ■ OMNI ■ KG-84

IP•Tube CEP RS530 HS for Encrypted Data Over IP/Ethernet Connections
The "Purpose Built" Engage IP•Tube CEP RS530 HS encapsulates synchronous serial data from Data Terminal Equipment such as Encryptors, Terminal Servers, Video Codecs, WAN Routers into IP packets. The IP connection provides for the transparent interconnection of Data Terminal Equipment via LANs, WANs, MANs, Satellite and Wireless Ethernet. The size and frequency of the IP packets can be set to bit rates from 2.4 Kilobits per second to 16 million bits per second with N times 2.4K, 56K and 64K clocking.

Flexible Synchronous Serial Data Extension Over IP
The IP•Tube CEP RS530 HS, which is available with a DCE or a DTE interface, facilitates the transport of bulk data across a combination of IP and WAN infrastructures. The IP•Tube CEP RS530 HS DCE and IP-Tube RS530HS DTE are flexibly deployed to support internetworking across varied LAN/WAN/MAN networks. The size and frequency of the IP packets can be set with data bit rates from 2.4 Kilobits per second to 16 million bits per second. Latency minimization is accomplished with multidimensional adaptive clock configurations.

Typical Applications
• Secure LAN to LAN interconnect
• Secure Video TeleConferencing
• Field Command Centers
• Secure Wireless Bridge connections
• SIPRNet or NIPRNet access

RS530 Fig4

WAN Data Over IP
The IP•Tube CEP RS530 HS provides a transparent bandwidth regulated IP Tunnel for interconnecting remote Networks. With the IP•Tube CEP RS530 HS WAN security provisioning, such as firewalling, is maintained. WAN Protocols, such as PPP and Frame Relay, that utilize HDLC framing are encapsulated with HDLC Over IP. Broadband Service providers are able to transport Enterprise Wide Area Network connections with inband management of the Committed Information Rates. The IP•Tube CEP RS530 HS IP Tunnel can also be utilized as a secondary path for fault tolerant mission critical applications.

How to Order

ORDERING INFORMATION

Chassis Slot Card: IP•Tube RS530 HS

Part No.	Description	Notes
NU1-1530-0x	IP•Tube RS530 HS-DCE/DTE 1-2 port	Configurable DCE or DTE Interface 2.4Kilobits to 16Mbits 1 or 2 ports enabled
CH-NU1-1530-02	Chassis Slot Card: IP•Tube RS530 HS 2port
Base Options		Specify as Suffix
-ROHS	ROHS compliant materials and processes	Restriction of Hazardous Substances no Pb
-PRO	Protector Option	Fault Tolerant Network Interconnect
Power Options		Specify as Suffix
Add -R for Redundancy -DCMOD	Power Supply 10/30 VDC	Universal Adapter 100/240 50/60
-WIREDC	Power Supply Module 12/26 VDC	TermScrew Terminals
-N48VDC	Power Supply Module Negative 48V DC	Isolated Negative 48V Power
Rack Mount Option
-RACKMNT	19" Wide Rack Mount Brackets	Enclosure Nut Serts Installed

Overview & Applications

Leverage Existing Bulk Data Encryption for Data over IP

Technical Specifications

Data Sheet Download

User Manual Download

How to Order