IP•Tube CEP RS530

Flexible Serial Data Extensions over Packet Switch Networks

Layer 1
In Layer 1 operating mode every bit is encapsulated into an IP packet. The size and frequency of the IP packets can be set with data bit rates from 2.4 Kilobits to 2.048 Megabits per second. Latency minimization is accomplished with multidimensional adaptive clock configurations. A configured number of incoming packets are buffered in order to compensate for the packet delivery jitter introduced by the network. The size of this buffer needs to accommodate the peak amount of jitter.

HDLC Over IP

In Layer 2 operating mode HDLC Data frames, such as those used by Wide Area Networking protocols PPP and Frame Relay or proprietary Data Links, are transported within IP packets as HDLC over IP. The latency introduced is dependent upon the clocking rate and the HDLC frame size. Minimum latency is obtained by maximizing the clock rate and minimizing the MTU. HDLC Over IP frames are directly sent out the Serial interface since Clock synchronization is not required. WAN security provisioning, such as firewalling, is maintained.

Asynchronous Over IP
Asynchronous characters from the RS530 interface with 5 to 8 data bits, baud rates from 1.2 to 38.4 kilobits, 1 or 2 stop bits that are with or without parity are efficiently encapsulated into IP packets. The encapsulation supports block mode transfers to minimize the bandwidth required. Additionally the latency is controlled by setting the Tube Bytes per packet.

• Management interface on MLAN 
• Dual Data Plane LAN ports can be configured to support:

   - Protector Option for Redundant Packet Path connections with 
     Constant or Switch Over Criteria 
    - Connections over 2 opposite ADSL links 
   - Alternator Option for load balanced SDSL interconnects 

IP•Tube CEPs isolate management and data plane functionality with the use of two separate processor modules. Management processor access is limited to SSH or SNMPv3 encrypted sessions that employ AES 256 bit keys and sophisticated NIST passwords. These sessions may be established after authentication via TACACS+ or Radius.

The independent Linux based management plane of the IP•Tube CEP ensures Critical Infrastructure Data is isolated from management network access. The Management Module uses internal serial ports to connect to the Data Plane processor.

Administration and User Logs are available with Syslog.

CEP management security features include:

• Administrative policies for adding, removing, disabling and 
   renaming authorized users; limiting user access to assigned commands; and enabling
   only desired port numbers.

• User authentication directly or in conjunction with TACACS+ or RADIUS servers 
   including RSA SecureID support for two factor trusted compliance.

• An SSH command interface encrypting management traffic with powerful 256 bit
  symmetric keys and NIST based passwords.

The IP•Tube CEP Management Plane LAN Ethernet interface is and independent management port when the Data Plane Ethernet interface is connected to a VPN. Each Ethernet LAN interface features independent IP network configurations.