Académique Documents
Professionnel Documents
Culture Documents
INSTALLATION AND
MAINTENANCE GUIDE
Important Notices
The following important notices are presented in English, French, and German.
Important Notices
This guide is delivered subject to the following conditions and restrictions:
Copyright Radware Ltd. 2022. All rights reserved.
The copyright and all other intellectual property rights and trade secrets included in this guide are
owned by Radware Ltd.
The guide is provided to Radware customers for the sole purpose of obtaining information with
respect to the installation and use of the Radware products described in this document, and may not
be used for any other purpose.
The information contained in this guide is proprietary to Radware and must be kept in strict
confidence.
It is strictly forbidden to copy, duplicate, reproduce or disclose this guide or any part thereof without
the prior written consent of Radware.
Notice importante
Ce guide est sujet aux conditions et restrictions suivantes:
Copyright Radware Ltd. 2022. Tous droits réservés.
Le copyright ainsi que tout autre droit lié à la propriété intellectuelle et aux secrets industriels
contenus dans ce guide sont la propriété de Radware Ltd.
Ce guide d’informations est fourni à nos clients dans le cadre de l’installation et de l’usage des
produits de Radware décrits dans ce document et ne pourra être utilisé dans un but autre que celui
pour lequel il a été conçu.
Les informations répertoriées dans ce document restent la propriété de Radware et doivent être
conservées de manière confidentielle.
Il est strictement interdit de copier, reproduire ou divulguer des informations contenues dans ce
manuel sans avoir obtenu le consentement préalable écrit de Radware.
Wichtige Anmerkung
Dieses Handbuch wird vorbehaltlich folgender Bedingungen und Einschränkungen ausgeliefert:
Copyright Radware Ltd. 2022. Alle Rechte vorbehalten.
Das Urheberrecht und alle anderen in diesem Handbuch enthaltenen Eigentumsrechte und
Geschäftsgeheimnisse sind Eigentum von Radware Ltd.
Dieses Handbuch wird Kunden von Radware mit dem ausschließlichen Zweck ausgehändigt,
Informationen zu Montage und Benutzung der in diesem Dokument beschriebene Produkte von
Radware bereitzustellen. Es darf für keinen anderen Zweck verwendet werden.
Die in diesem Handbuch enthaltenen Informationen sind Eigentum von Radware und müssen streng
vertraulich behandelt werden.
Es ist streng verboten, dieses Handbuch oder Teile daraus ohne vorherige schriftliche Zustimmung
von Radware zu kopieren, vervielfältigen, reproduzieren oder offen zu legen.
Copyright Notices
The following copyright notices are presented in English, French, and German.
Copyright Notices
The programs included in this product are subject to a restricted use license and can only be used in
conjunction with this application.
This product contains the Rijndael cipher
The Rijndael implementation by Vincent Rijmen, Antoon Bosselaers and Paulo Barreto is in the public
domain and distributed with the following license:
@version 3.0 (December 2000)
Optimized ANSI C code for the Rijndael cipher (now AES)
@author Vincent Rijmen <vincent.rijmen@esat.kuleuven.ac.be>
@author Antoon Bosselaers <antoon.bosselaers@esat.kuleuven.ac.be>
@author Paulo Barreto <paulo.barreto@terra.com.br>
The OnDemand Switch may use software components licensed under the GNU General Public
License Agreement Version 2 (GPL v.2) including LinuxBios and Filo open source projects. The
source code of the LinuxBios and Filo is available from Radware upon request. A copy of the license
can be viewed at: http://www.gnu.org/licenses/old-licenses/gpl-2.0.html.
This code is hereby placed in the public domain.
This product contains code developed by the OpenBSD Project
Copyright ©1983, 1990, 1992, 1993, 1995
The Regents of the University of California. All rights reserved.
Redistribution and use in source and binary forms, with or without modification, are permitted
provided that the following conditions are met:
1. Redistributions of source code must retain the above copyright notice, this list of conditions and
the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions
and the following disclaimer in the documentation and/or other materials provided with the
distribution.
3. Neither the name of the University nor the names of its contributors may be used to endorse or
promote products derived from this software without specific prior written permission.
This product includes software developed by Markus Friedl
This product includes software developed by Theo de Raadt
This product includes software developed by Niels Provos
This product includes software developed by Dug Song
This product includes software developed by Aaron Campbell
This product includes software developed by Damien Miller
This product includes software developed by Kevin Steves
This product includes software developed by Daniel Kouril
This product includes software developed by Wesley Griffin
This product includes software developed by Per Allansson
This product includes software developed by Nils Nordman
This product includes software developed by Simon Wilkinson
Redistribution and use in source and binary forms, with or without modification, are permitted
provided that the following conditions are met:
1. Redistributions of source code must retain the above copyright notice, this list of conditions and
the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions
and the following disclaimer in the documentation and/or other materials provided with the
distribution.
This product contains work derived from the RSA Data Security, Inc. MD5 Message-Digest
Algorithm. RSA Data Security, Inc. makes no representations concerning either the merchantability
of the MD5 Message - Digest Algorithm or the suitability of the MD5 Message - Digest Algorithm for
any particular purpose. It is provided “as is” without express or implied warranty of any kind.
Copyrightvermerke
Die in diesem Produkt enthalten Programme unterliegen einer eingeschränkten Nutzungslizenz und
können nur in Verbindung mit dieser Anwendung benutzt werden.
Dieses Produkt enthält einen vom OpenSSL-Projekt entwickelten Code.
Dieses Produkt enthält vom OpenSSL-Projekt entwickelte Software. Zur Verwendung im OpenSSL
Toolkit (http://www.openssl.org/).
Copyright ©1998-2005 The OpenSSL Project. Alle Rechte vorbehalten. Dieses Produkt enthält die
Rijndael cipher
Die Rijndael-Implementierung von Vincent Rijndael, Anton Bosselaers und Paulo Barreto ist
öffentlich zugänglich und wird unter folgender Lizenz vertrieben:
@version 3.0 (December 2000)
Optimierter ANSI C Code für den Rijndael cipher (jetzt AES)
@author Vincent Rijmen <vincent.rijmen@esat.kuleuven.ac.be>
@author Antoon Bosselaers <antoon.bosselaers@esat.kuleuven.ac.be>
@author Paulo Barreto <paulo.barreto@terra.com.br>
Der OnDemand Switch verwendet möglicherweise Software, die im Rahmen der DNU Allgemeine
Öffentliche Lizenzvereinbarung Version 2 (GPL v.2) lizensiert sind, einschließlich LinuxBios und Filo
Open Source-Projekte. Der Quellcode von LinuxBios und Filo ist bei Radware auf Anfrage erhältlich.
Eine Kopie dieser Lizenz kann eingesehen werden unter:
http://www.gnu.org/licenses/old-licenses/gpl-2.0.html
Dieser Code wird hiermit allgemein zugänglich gemacht.
Dieses Produkt enthält einen vom OpenBSD-Projekt entwickelten Code
Standard Warranty
The following standard warranty is presented in English, French, and German.
Standard Warranty
Radware offers a limited warranty for all its products (“Products”). Radware hardware products are
warranted against defects in material and workmanship for a period of one year from date of
shipment. Radware software carries a standard warranty that provides bug fixes for up to 90 days
after date of purchase. Should a Product unit fail anytime during the said period(s), Radware will, at
its discretion, repair or replace the Product.
For hardware warranty service or repair, the product must be returned to a service facility
designated by Radware. Customer shall pay the shipping charges to Radware and Radware shall pay
the shipping charges in returning the product to the customer. Please see specific details outlined in
the Standard Warranty section of the customer's purchase order.
Radware shall be released from all obligations under its Standard Warranty in the event that the
Product and/or the defective component has been subjected to misuse, neglect, accident or
improper installation, or if repairs or modifications were made by persons other than Radware
authorized service personnel, unless such repairs by others were made with the written consent of
Radware.
EXCEPT AS SET FORTH ABOVE, ALL RADWARE PRODUCTS (HARDWARE AND SOFTWARE) ARE
PROVIDED BY “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE ARE DISCLAIMED.
Garantie standard
Radware octroie une garantie limitée pour l'ensemble de ses produits (" Produits "). Le matériel
informatique (hardware) Radware est garanti contre tout défaut matériel et de fabrication pendant
une durée d'un an à compter de la date d'expédition. Les logiciels (software) Radware sont fournis
avec une garantie standard consistant en la fourniture de correctifs des dysfonctionnements du
logiciels (bugs) pendant une durée maximum de 90 jours à compter de la date d'achat. Dans
l'hypothèse où un Produit présenterait un défaut pendant ladite(lesdites) période(s), Radware
procédera, à sa discrétion, à la réparation ou à l'échange du Produit.
S'agissant de la garantie d'échange ou de réparation du matériel informatique, le Produit doit être
retourné chez un réparateur désigné par Radware. Le Client aura à sa charge les frais d'envoi du
Produit à Radware et Radware supportera les frais de retour du Produit au client. Veuillez consulter
les conditions spécifiques décrites dans la partie " Garantie Standard " du bon de commande client.
Radware est libérée de toutes obligations liées à la Garantie Standard dans l'hypothèse où le Produit
et/ou le composant défectueux a fait l'objet d'un mauvais usage, d'une négligence, d'un accident ou
d'une installation non conforme, ou si les réparations ou les modifications qu'il a subi ont été
effectuées par d'autres personnes que le personnel de maintenance autorisé par Radware, sauf si
Radware a donné son consentement écrit à ce que de telles réparations soient effectuées par ces
personnes.
SAUF DANS LES CAS PREVUS CI-DESSUS, L'ENSEMBLE DES PRODUITS RADWARE (MATERIELS ET
LOGICIELS) SONT FOURNIS " TELS QUELS " ET TOUTES GARANTIES EXPRESSES OU IMPLICITES
SONT EXCLUES, EN CE COMPRIS, MAIS SANS S'Y RESTREINDRE, LES GARANTIES IMPLICITES DE
QUALITE MARCHANDE ET D'ADEQUATION A UNE UTILISATION PARTICULIERE.
Standard Garantie
Radware bietet eine begrenzte Garantie für alle seine Produkte ("Produkte") an. Hardware Produkte
von Radware haben eine Garantie gegen Material- und Verarbeitungsfehler für einen Zeitraum von
einem Jahr ab Lieferdatum. Radware Software verfügt über eine Standard Garantie zur
Fehlerbereinigung für einen Zeitraum von bis zu 90 Tagen nach Erwerbsdatum. Sollte ein Produkt
innerhalb des angegebenen Garantiezeitraumes einen Defekt aufweisen, wird Radware das Produkt
nach eigenem Ermessen entweder reparieren oder ersetzen.
Für den Hardware Garantieservice oder die Reparatur ist das Produkt an eine von Radware
bezeichnete Serviceeinrichtung zurückzugeben. Der Kunde hat die Versandkosten für den Transport
des Produktes zu Radware zu tragen, Radware übernimmt die Kosten der Rückversendung des
Produktes an den Kunden. Genauere Angaben entnehmen Sie bitte dem Abschnitt zur Standard
Garantie im Bestellformular für Kunden.
Radware ist von sämtlichen Verpflichtungen unter seiner Standard Garantie befreit, sofern das
Produkt oder der fehlerhafte Teil zweckentfremdet genutzt, in der Pflege vernachlässigt, einem
Unfall ausgesetzt oder unsachgemäß installiert wurde oder sofern Reparaturen oder Modifikationen
von anderen Personen als durch Radware autorisierten Kundendienstmitarbeitern vorgenommen
wurden, es sei denn, diese Reparatur durch besagte andere Personen wurden mit schriftlicher
Genehmigung seitens Radware durchgeführt.
MIT AUSNAHME DES OBEN DARGESTELLTEN, SIND ALLE RADWARE PRODUKTE (HARDWARE UND
SOFTWARE) GELIEFERT "WIE GESEHEN" UND JEGLICHE AUSDRÜCKLICHEN ODER
STILLSCHWEIGENDEN GARANTIEN, EINSCHLIESSLICH ABER NICHT BEGRENZT AUF
STILLSCHWEIGENDE GEWÄHRLEISTUNG DER MARKTFÄHIGKEIT UND EIGNUNG FÜR EINEN
BESTIMMTEN ZWECK AUSGESCHLOSSEN.
Safety Instructions
The following safety instructions are presented in English, French, and German.
Safety Instructions
CAUTION
A readily accessible disconnect device shall be incorporated in the building installation wiring.
Due to the risks of electrical shock, and energy, mechanical, and fire hazards, any procedures that
involve opening panels or changing components must be performed by qualified service personnel
only.
To reduce the risk of fire and electrical shock, disconnect the device from the power line before
removing cover or panels.
The following figure shows the caution label that is attached to Radware platforms with dual power
supplies.
Note: This equipment has been tested and found to comply with the limits for a Class A digital
device pursuant to Part 15B of the FCC Rules and EN55022 Class A, EN 55024; EN 61000-3-2; EN
61000-3-3; IEC 61000 4-2 to 4-6, IEC 61000 4-8 and IEC 61000-4-11For CE MARK Compliance.
These limits are designed to provide reasonable protection against harmful interference when the
equipment is operated in a commercial environment. This equipment generates, uses and can
radiate radio frequency energy and, if not installed and used in accordance with the instruction
manual, may cause harmful interference to radio communications. Operation of this equipment in a
residential area is likely to cause harmful interference in which case the user is required to correct
the interference at his own expense.
Instructions de sécurité
AVERTISSEMENT
Un dispositif de déconnexion facilement accessible sera incorporé au câblage du bâtiment.
En raison des risques de chocs électriques et des dangers énergétiques, mécaniques et d’incendie,
chaque procédure impliquant l’ouverture des panneaux ou le remplacement de composants sera
exécutée par du personnel qualifié.
Pour réduire les risques d’incendie et de chocs électriques, déconnectez le dispositif du bloc
d’alimentation avant de retirer le couvercle ou les panneaux.
La figure suivante montre l’étiquette d’avertissement apposée sur les plateformes Radware dotées
de plus d’une source d’alimentation électrique.
Figure 4: Avertissement de sécurité pour les systèmes dotes de deux sources d’alimentation
électrique (en chinois)
Traduction de la Avertissement de sécurité pour les systèmes dotes de deux sources d’alimentation
électrique (en chinois):
Cette unité est dotée de plus d’une source d’alimentation électrique. Déconnectez toutes les sources
d’alimentation électrique avant d’entretenir l’appareil ceci pour éviter tout choc électrique.
ENTRETIEN
N’effectuez aucun entretien autre que ceux répertoriés dans le manuel d’instructions, à moins d’être
qualifié en la matière. Aucune pièce à l’intérieur de l’unité ne peut être remplacée ou réparée.
HAUTE TENSION
Tout réglage, opération d’entretien et réparation de l’instrument ouvert sous tension doit être évité.
Si cela s’avère indispensable, confiez cette opération à une personne qualifiée et consciente des
dangers impliqués.
Les condensateurs au sein de l’unité risquent d’être chargés même si l’unité a été déconnectée de la
source d’alimentation électrique.
MISE A LA TERRE
Avant de connecter ce dispositif à la ligne électrique, les vis de protection de la borne de terre de
cette unité doivent être reliées au système de mise à la terre du bâtiment.
LASER
Cet équipement est un produit laser de classe 1, conforme à la norme IEC60825 - 1: 1993 + A1:
1997 + A2: 2001.
FUSIBLES
Assurez-vous que, seuls les fusibles à courant nominal requis et de type spécifié sont utilisés en
remplacement. L’usage de fusibles réparés et le court-circuitage des porte-fusibles doivent être
évités. Lorsqu’il est pratiquement certain que la protection offerte par les fusibles a été détériorée,
l’instrument doit être désactivé et sécurisé contre toute opération involontaire.
TENSION DE LIGNE
Avant de connecter cet instrument à la ligne électrique, vérifiez que la tension de la source
d’alimentation correspond aux exigences de l’instrument. Consultez les spécifications propres à
l’alimentation nominale correcte du dispositif.
Les plateformes alimentées en 48 CC ont une tolérance d’entrée comprise entre 36 et 72 V CC.
MODIFICATIONS DES SPÉCIFICATIONS
Les spécifications sont sujettes à changement sans notice préalable.
Remarque: Cet équipement a été testé et déclaré conforme aux limites définies pour un appareil
numérique de classe A, conformément au paragraphe 15B de la réglementation FCC et EN55022
Classe A, EN 55024, EN 61000-3-2; EN 61000-3-3; IEC 61000 4-2 to 4-6, IEC 61000 4-8, et IEC
61000-4-11, pour la marque de conformité de la CE. Ces limites sont fixées pour fournir une
protection raisonnable contre les interférences nuisibles, lorsque l’équipement est utilisé dans un
environnement commercial. Cet équipement génère, utilise et peut émettre des fréquences radio et,
s’il n’est pas installé et utilisé conformément au manuel d’instructions, peut entraîner des
interférences nuisibles aux communications radio. Le fonctionnement de cet équipement dans une
zone résidentielle est susceptible de provoquer des interférences nuisibles, auquel cas l’utilisateur
devra corriger le problème à ses propres frais.
Sicherheitsanweisungen
VORSICHT
Die Elektroinstallation des Gebäudes muss ein unverzüglich zugängliches Stromunterbrechungsgerät
integrieren.
Aufgrund des Stromschlagrisikos und der Energie-, mechanische und Feuergefahr dürfen Vorgänge,
in deren Verlauf Abdeckungen entfernt oder Elemente ausgetauscht werden, ausschließlich von
qualifiziertem Servicepersonal durchgeführt werden.
Zur Reduzierung der Feuer- und Stromschlaggefahr muss das Gerät vor der Entfernung der
Abdeckung oder der Paneele von der Stromversorgung getrennt werden.
Folgende Abbildung zeigt das VORSICHT-Etikett, das auf die Radware-Plattformen mit
Doppelspeisung angebracht ist.
Electromagnetic-Interference Statements
The following statements are presented in English, French, and German.
Electromagnetic-Interference Statements
SPECIFICATION CHANGES
Specifications are subject to change without notice.
Note: This equipment has been tested and found to comply with the limits for a Class A digital
device pursuant to Part 15B of the FCC Rules and EN55022 Class A, EN 55024; EN 61000-3-2; EN
61000-3-3; IEC 61000 4-2 to 4-6, IEC 61000 4-8 and IEC 61000-4-11For CE MARK Compliance.
These limits are designed to provide reasonable protection against harmful interference when the
equipment is operated in a commercial environment. This equipment generates, uses and can
radiate radio frequency energy and, if not installed and used in accordance with the instruction
manual, may cause harmful interference to radio communications. Operation of this equipment in a
residential area is likely to cause harmful interference in which case the user is required to correct
the interference at his own expense.
Figure 12: KCC—Certificat de la commission des communications de Corée pour les equipements de
radiodiffusion et communication.
Figure 13: Déclaration pour l’équipement de classe A certifié KCC en langue coréenne
关于在非热带气候地区使用的设备,必须在随时可见的位置处粘贴包含如下内容的警告标记:
“ 只可在非热带气候地区使用。”
附件 DD:有关新安全警告标记的说明。
DD.1 海拔警告标记
标记含义:设备的评估仅基于温带气候条件,因此设备只适用于该运行条件。如果在热带气候地区使用设备,可能
会存在某些安全隐患。
Document Conventions
The following describes the conventions and symbols that this guide uses:
Example
Possible damage to Endommagement Mögliche Schäden an
equipment, software, or possible de l’équipement, Gerät, Software oder
Caution: data des données ou du Daten
logiciel
Additional information Informations Zusätzliche
complémentaires Informationen
Note:
A statement and Références et Eine Erklärung und
instructions instructions Anweisungen
To
A suggestion or Une suggestion ou Ein Vorschlag oder eine
workaround solution Umgehung
Tip:
Possible physical harm to Blessure possible de Verletzungsgefahr des
the operator l’opérateur Bedieners
Warning:
Can use IPv6 (128-bit Peut utiliser IPv6 Kann sowohl IPv6 (128-
addresses) as well as (adresses 128-bit,) ainsi Bit Adressen) als auch
IPv4 (32-bit addresses) que IPv4 (adresses 32- IPv4 (32-Bit Adressen)
IPv6 Ready bit) verwenden
CHAPTER 2 – PRE-INSTALLATION....................................................................... 41
Unpacking Instructions ................................................................................................ 41
Unpacking the Platform ....................................................................................................... 41
Checking the Contents ........................................................................................................ 42
NEBS Requirements ................................................................................................... 42
Rack and Platform ............................................................................................................... 42
Grounding Prerequisites ...................................................................................................... 43
Site and Installation Planning .............................................................................................. 43
Environmental Requirements .............................................................................................. 44
Power Requirements ........................................................................................................... 44
Mounting the Platform ................................................................................................. 47
Connecting Cables to a Platform ................................................................................. 48
Boot Commands (optional) .......................................................................................... 49
APPENDIX A – SPECIFICATIONS.......................................................................... 69
DefensePro Specifications ......................................................................................... 69
Airflow Requirements ................................................................................................. 71
AC Power Factor ........................................................................................................ 72
Serial Cable Pin Assignment ...................................................................................... 72
DefensePro Platforms
The following DefensePro devices are supported:
• DefensePro 6
• DefensePro 20/60
• DefensePro 20/60 NEBS
• DefensePro 110/220
• DefensePro 200/400
• DefensePro 400/800
DefensePro 6
DefensePro 6 runs on the OnDemand Switch VL2 platform.
Feature Label/Description
Two 10 Gigabit Ethernet SFP+ ports for traffic or in-band management.
LEDs:
• ACT—flashing indicates activity.
• LINK—green indicates 10GbE.
Feature Label/Description
Power button. Turns power on and off. Pressing the button for 1 to 4 seconds
causes a graceful shutdown of the system, thus preserving system integrity.
Pressing the button for more than four seconds causes the hardware to power
down.Power button color indicator:
• Blue—Standby mode (at least one module connected to a power source)
• Amber—Device is in operation mode.
Reset button. Resets the platform.
MNG 1 and MNG 2 ports are RJ-45 10/100/1000 Ethernet ports for
management only.
LEDs:
• ACT—flashing indicates activity.
• LINK—green indicates 1000 Mbit/s. Yellow indicates 10 or 100 Mbit/s.
Status LEDs:
• FAN—Green indicates normal operation. Red indicates that one or more fans
are not operating.
• SYS OK—Green indicates normal operation. Red indicates that the platform
is booting. Red or alternating red and green indicates a warning.
• PWR 1 and PWR 2—Green indicates proper power supply operation. Red
indicates a failure in power supply 1 or 2 (respectively) or a failure in the
power supply cable or power source.
Feature Description
Power supply sockets to connect the AC power cables.
Some versions contain a DC power connector in its place.
Feature Description
Ground screws to ground the platform chassis to the rack.
DefensePro 20/60
DefensePro 20/60 runs on the OnDemand Switch MR platform.
Feature Label/Description
Twenty-four 10 Gigabit Ethernet SFP+ ports for traffic or in-band management.
LEDs:
• ACT—flashing indicates activity.
• LINK—green indicates 10GbE.
Feature Label/Description
Serial RJ-45 console port for out-of-band management.
Radware supplies a RJ-45–to–DE-9 adapter cable to connect the console port of
the platform to a console PC.
MNG 1 and MNG 2 ports are RJ-45 10/100/1000 Ethernet ports for
management only.
LEDs:
• ACT—flashing indicates activity.
• LINK—green indicates 1000 Mbit/s. Yellow indicates 10 or 100 Mbit/s.
Status LEDs:
• FAN—Green indicates normal operation. Red indicates that one or more fans
are not operating.
• SYS OK—Green indicates normal operation. Red indicates that the platform
is booting. Red or alternating red and green indicates a warning.
• PWR 1 and PWR 2—Green indicates proper power supply operation. Red
indicates a failure in power supply 1 or 2 (respectively) or a failure in the
power supply cable or power source.
Feature Description
Dual power supply sockets to connect the AC power cables.
Some versions contain a DC power connector in its place.
Table 5: DefensePro 20/60 NEBS Series Front Panel Indicators and Connectors
Feature Label/Description
Twenty-four 10 Gigabit Ethernet SFP+ ports for traffic or in-band management.
LEDs:
• ACT—flashing indicates activity.
• LINK—green indicates 10GbE.
MNG 1 and MNG 2 ports are RJ-45 10/100/1000 Ethernet ports for
management only.
LEDs:
• ACT—flashing indicates activity.
• LINK—green indicates 1000 Mbit/s. Yellow indicates 10 or 100 Mbit/s.
Table 5: DefensePro 20/60 NEBS Series Front Panel Indicators and Connectors
Feature Label/Description
Serial RJ-45 console port for out-of-band management.
Radware supplies a RJ-45–to–DE-9 adapter cable to connect the console port of
the platform to a console PC.
Status LEDs:
• FAN—Green indicates normal operation. Red indicates that one or more fans
are not operating.
• SYS OK—Green indicates normal operation. Red indicates that the platform
is booting. Red or alternating red and green indicates a warning.
• PWR 1 and PWR 2—Green indicates proper power supply operation. Red
indicates a failure in power supply 1 or 2 (respectively) or a failure in the
power supply cable or power source.
Feature Description
Dual DC power connectors to connect the power cables.
DefensePro 110/220
DefensePro 110/220 runs on the OnDemand Switch MRQ platform.
Feature Label/Description
Up to Four 100 Gigabit Ethernet QSFP28 ports for traffic or in-band
management.
LEDs:
• ACT—flashing indicates activity.
• LINK—green indicates 100GbE.
From four to eight 40 Gigabit Ethernet QSFP+ ports for traffic or in-band
management.
LEDs:
• ACT—flashing indicates activity.
• LINK—green indicates 40GbE.
Feature Label/Description
Serial RJ-45 console port for out-of-band management.
Radware supplies a RJ-45–to–DE-9 adapter cable to connect the console port of
the platform to a console PC.
MNG 1 and MNG 2 ports are RJ-45 10/100/1000 Ethernet ports for
management only.
LEDs:
• ACT—flashing indicates activity.
• LINK—green indicates 1000 Mbit/s. Yellow indicates 10 or 100 Mbit/s.
Status LEDs:
• FAN—Green indicates normal operation. Red indicates that one or more fans
are not operating.
• SYS OK—Green indicates normal operation. Red indicates that the platform
is booting. Red or alternating red and green indicates a warning.
• PWR 1 and PWR 2—Green indicates proper power supply operation. Red
indicates a failure in power supply 1 or 2 (respectively) or a failure in the
power supply cable or power source.
Feature Description
Dual power supply sockets to connect the AC power cables.
Some versions contain a DC power connector in its place.
DefensePro 200/400
DefensePro 200/400 runs on the OnDemand Switch HTQe platform.
Feature Label/Description
Four 100 Gigabit Ethernet QSFP28 ports for traffic or in-band management.
LEDs:
• ACT—flashing indicates activity.
• LINK—green indicates 100 GbE.
Four 40 Gigabit Ethernet QSFP+ ports for traffic or in-band management.
LEDs:
• ACT—flashing indicates activity.
• LINK—green indicates 40 GbE.
MNG 1 and MNG 2 ports are RJ-45 10/100/1000 Ethernet ports for
management only.
LEDs:
• ACT—flashing indicates activity.
• LINK—green indicates 1000 Mbit/s. Yellow indicates 10 or 100 Mbit/s.
Feature Label/Description
Serial RJ-45 console port for out-of-band management.
Radware supplies a RJ-45–to–DE-9 adapter cable to connect the console port of
the platform to a console PC.
Status LEDs:
• FAN—Green indicates normal operation. Red indicates that one or more fans
are not operating.
• SYS OK—Green indicates normal operation. Red indicates that the platform
is booting. Red or alternating red and green indicates a warning.
• PWR_1 and PWR_2—Green indicates proper power supply operation. Red
indicates a failure in power supply 1 or 2 (respectively) or a failure in the
power supply cable or power source.
Feature Description
Dual power supply sockets to connect the AC power cables.
Some versions contain a DC power connector in its place.
DefensePro 400/800
DefensePro 400/800 runs on the OnDemand Switch UHT platform.
Feature Label/Description
Four 400 Gigabit Ethernet QSFP-DD ports for traffic or in-band management.
LEDs:
• ACT—flashing indicates activity.
• LINK—green indicates 400 GbE.
Eighteen 100 Gigabit Ethernet QSFP28 ports for traffic or in-band management.
LEDs:
• ACT—flashing indicates activity.
• LINK—green indicates 100 GbE.
MNG 1 and MNG 2 ports are RJ-45 10/100/1000 Ethernet ports for
management only.
LEDs:
• ACT—flashing indicates activity.
• LINK—green indicates 1000 Mbit/s. Yellow indicates 10 or 100 Mbit/s.
Feature Label/Description
Power button. Turns power on and off.
Pressing the button for 1 to 4 seconds causes a graceful shutdown of the system,
thus preserving system integrity. Pressing the button for more than four seconds
causes the hardware to power down.
Status LEDs:
• FAN—Green indicates normal operation. Red indicates that one or more fans
are not operating.
• SYS OK—Green indicates normal operation. Red indicates that the platform
is booting. Red or alternating red and green indicates a warning.
• PWR_1 and PWR_2—Green indicates proper power supply operation. Red
indicates a failure in power supply 1 or 2 (respectively) or a failure in the
power supply cable or power source.
Feature Description
Dual power supply to connect the AC power cables.
Some versions contain a DC power connector in its place.
Note: The DC connection cable should have a ring terminal (lug) type RV5-6 or equivalent (for M6
or 1/4” stud size) at one end and a ring terminal (lug) type RVS5-4 or equivalent (for M4 or #8 stud
size) at the other end.
The following diagrams show the DC connector for the DefensePro 6 single and dual DC power
supply platform.
The following diagram shows the DC connector for the DefensePro 20/60, 110/220, 200/400 and
400/800 platforms.
Figure 33: DC Power Supply Connector for the DefensePro 20/60, 110/220, 200/400, 400/800 Platforms
Note: For information on integrating the platform into your network topology, refer to the product’s
User Guide.
Unpacking Instructions
The shipping package is engineered to reduce potential product damage caused by handling during
shipment. To avoid potential damage to the platform, transport it in its provided packaging. Failure
to use the provided packaging may damage the platform or degrade its performance.
Do not remove the platform from its shipping container until you are ready to install it.
Caution: When handling the platform, always wear an ESD-preventive strap and it is
recommended to use an antistatic mat to avoid possible ESD damage.
Note: Care should be used when cutting the tape not to insert the knife too deep into the box
where it could damage the platform.
Notes
— The accessories box contains all cables, power cords, mounting kits, a product CD with a
user guide, and all other accessories required for the particular platform model and version.
— Verify that the AC power cord (if relevant) matches your country’s electric outlets.
4. Carefully lift the platform from the shipping container and remove the foam braces.
5. Slide the ESD plastic bag off the platform and place it on an antistatic mat.
Note: Save the braces with the plastic bag and other packaging material. You will need these if
you need to repackage the platform later.
NEBS Requirements
Note: The DefensePro 20 and DefensePro 60 platforms are also available with NEBS certification.
This section describes the NEBS requirements for installation of the NEBS-certified platform and rack
in which the platform is mounted.
NEBS (Network Equipment-Building System) describes the environment of a typical United States
Regional Bell Operating Company (RBOC) central office (CO). NEBS is the most common set of
safety, spatial and environmental design guidelines applied to telecommunications equipment in the
United States. It is an industry requirement, but not a legal requirement. Telcordia now manages the
NEBS specifications. There are three NEBS levels:
• NEBS Level 1 means a very low threshold of equipment hazards and network degradation.
NEBS Level 1 addresses the personnel and equipment safety requirements of GR-63-CORE and
GR-1089-CORE. Operability requirements are not enforced for NEBS Level 1 certification. It is
primarily used for getting prototypes into lab trials. RBOCs require all equipment deployed by
CLECs to be NEBS Level 1 certified.
• NEBS Level 2 addresses equipment operability in a controlled environment (usually data
centers) that will not be subjected to environmental stress. Because of ambiguity, this level of
certification is rarely (if ever) used.
• NEBS Level 3 is a term from a Bellcore special report, SR-3580, and means the equipment
meets all of the requirements of GR-63-CORE and GR-1089-CORE. NEBS Level 3 has strict
specifications for fire suppression, thermal margin testing, vibration resistance (earthquakes),
air flow patterns, acoustic limits, failover and partial operational requirements (such as chassis
fan failures), failure severity levels, RF emissions and tolerances, and testing/certification
requirements.
Warning: The intrabuilding ports of the equipment or subassembly is suitable for connection to
intrabuilding or unexposed wiring or cabling only. The intra-building ports of the equipment or
subassembly MUST NOT be metallically connected to interfaces that connect to the OSP or its wiring.
These interfaces are designed for use as intra-building interfaces only (Type 2 or Type 4 ports as
described in GR-1089-CORE, Issue 6) and require isolation from the exposed OSP cabling. The
addition of Primary Protectors is not sufficient protection to connect these interfaces metallically to
OSP wiring.
Grounding Prerequisites
• This unit can be configured to DC-I only
• Only copper cables, 6 AWG or larger, must be used for grounding purposes.
• When mounting a platform with a DC power supply, battery return terminals must be in the
configuration of an Isolated DC Return (DC-I).
• The platform must be connected to the grounding wire by means of the grounding screw using a
listed two-hole copper compression lug (Panduit LCD6-10A-L).
• Bare conductors must be coated with antioxidant before making crimp connections.
• The primary ground screws are M6 and should be installed with a torque of 4.30Nm, +/-
0.43Nm.
• A star washer (tooth washer) must be used next to opposite sides of the grounding lug or
terminal (see Figure 34 - Proper Grounding, page 43). This provides the proper locking
mechanism. The internal tooth washer removes paint from the chassis to establish a metal-to-
metal contact to the unplated surface.
The following diagram shows the proper grounding connection to a platform.
Lug or
Chasis
terminal
Screw
Toothed washer
Environmental Requirements
To ensure proper function of the platform, ensure that the environment in which it is to be used
fulfills the environmental requirements.
The environmental values must be tested and proven in the planned platform configuration, that is,
the delivered platform and other third-party products you want to integrate.
Notes:
• Operating temperatures refer to the temperature of the air circulating at the air intake of the
platform and not to component temperatures.
• Some of the climatic values may exceed the specification of some components (for example,
hard disks). Radware cannot guarantee the functionality of third party products that are handled
or operated out of their specifications, the environmental conditions may be limited to the
specifications of these components.
See Appendix A - Specifications, page 69 for the environmental requirements.
Power Requirements
For DC, ensure that a suitable -48.0 VDC to -60 VDC rated power source is within reach of the
system.
Warning: The DC system is supplied by a TNV-2 voltage. This voltage is considered hazardous.
Ensure that the external power supply meets the relevant safety standards. Ensure that TNV-2 is
separated from dangerous voltages (mains) through double or reinforced insulation.
Caution: Do not obstruct the ventilation openings at the top, sides and back of the platform.
Warning: To avoid personal injury or damage to the equipment, plan your installation so that
(within the limitations of equipment and cabling):
• The weight of the equipment is evenly distributed in the rack.
• The heaviest units are mounted nearer the bottom of the rack.
Uneven mechanical loading of the rack may cause toppling.
Caution: Unstable platform installation in a rack can cause the rack to topple over. Therefore, if
your platform is the only one in the rack, make sure to mount it in the lowest part of the rack. If
other platforms are installed in one rack, start with the heaviest component at the bottom. If the
rack is equipped with stabilizing devices, make sure that they are installed and extended so that the
rack is secure. Then proceed to mount or service the platform. Do not tilt the platform forward or
backward when removing it from the package as components at the bottom could be damaged.
Radware strongly recommends that you use an anti-static wrist strap and a conductive foam pad
when installing or upgrading a platform. Electronic components, such as disk drives, computer
boards, and memory modules, can be extremely sensitive to electrostatic discharge (ESD). After
removing the component from its protective wrapper or from the platform, place the component flat
on a grounded, static-free surface (and, in the case of a blade, component side up). Do not slide the
component over any surface if an ESD station is not available, you can avoid damage resulting from
ESD by wearing an anti-static wrist strap (available at electronics stores) that is attached to an
active electrical ground. Note that a platform may not be grounded if it is unplugged.
Notes
• There is one earth ground located at the back of the platform.
• There are three ESD bonding points, two on the front and one on the back of the platform.
Warning: Do not mount a single platform at the top of the rack. A top-heavy rack can tip, causing
damage to equipment and injury to personnel.
Warning: Do not use the power module handles for lifting the platform. Ensure that you have the
appropriate equipment to safely lift and mount the platform securely. To avoid personal injury or
damage to the equipment, use two persons for the installation procedure.
Caution: Failure to observe proper grounding practices may cause a variety of noise, electrostatic
discharge, and RFI problems.
The following are example bracket screw head assemblies with washers for the 23” rack mount:
Note: The primary ground screws are M6 and should be installed with a torque of 4.30Nm, +/-
0.43Nm.
Warning: Reliable grounding of rack-mounted equipment should be maintained. The rack must be
properly grounded. Connect at least one ground wire from the platform chassis to the rack. Typically,
the platform has one or two special ground screws on the back panel near the screws that secure
the power supply.
DC Power Cable
Power is introduced to the platform at the DC inlet located in the rear of the platform. The
recommended power cable is a 6 AWG gauge that meets the specifications for this platform. There
are two lugs for each DC feed.
Caution: Always check with your local building authorities for wire sizing requirements for your
environment. The installation must comply with the 1993 National Electric Code (NEC) and other
applicable codes. The DC power inputs must only be attached to approved Telephone Network
Voltage (TNV) or SELV (Safety Extra Low Voltage) branch circuits. Branch circuits must comply with
all requirements called for in these safety standards: IEC 60950, EN 60950, CAN/CSA-C22.2 No.
60950. Attaching inputs to non-TNV/SELV approved power sources will cause the system to fail
compliance with safety regulations. The ground wire must be connected to a reliable earth ground
connection to comply with Class 1 Equipment requirements.
Warning: Multiple power sources are present. Service only by qualified service personnel.
Note: After you mount the platform, ensure that there is adequate airflow surrounding it.
Warning: Installation of the equipment in a rack should be such that the amount of air flow
required for safe operation of the equipment is not compromised.
Warning: Mounting of the equipment in the rack should be such that a hazardous condition is not
achieved due to uneven mechanical loading.
Warning: Consideration should be given to the connection of the equipment to the supply circuit
and the effect that overloading of the circuits might have on overcurrent protection and supply
wiring. Appropriate consideration of equipment nameplate ratings should be used when addressing
this concern.
Caution: If installed in a closed or multi-unit rack assembly, the operating ambient temperature of
the rack environment may be greater than room ambient. Therefore, consideration should be given
to installing the equipment in an environment compatible with the maximum ambient temperature
(Tma) specified in Specifications, page 69.
Notes
• If the platform is equipped with an AC power supply, connecting a ground wire is not required,
but is recommended.
• If the power is disconnected and reconnected (for example, after the power cord is removed and
replaced, or after a power failure), the platform returns to its previous state. If the platform was
running before disconnecting the power cord, when you reconnect the power cord, the platform
automatically switches on. Likewise, if the platform was not running before disconnecting and
reconnecting the power cord, the platform stays powered off until you press the power button.
Note: For information on the configuration of the inspection ports, see the DefensePro User Guide.
Consider the following when connecting to copper (RJ-45) ports for traffic inspection:
• When turned off, the ports are set as switch ports (MDIX).
• Connect the platform with the power off as you would connect a switch.
• Use a straight-through cable to connect a server or a router.
• Use a crossover cable to connect a switch.
• Make sure your link is active (internal bypass is working).
• Turn on the platform and make sure your link is active.
Caution: Other boot commands are intended only for use by Radware Technical Support.
Command Description
? Print this list.
@ Boot (load and go).
a Print installed applications list.
e Print fatal exception.
q1 Remove configuration file.
Notes
• To allow maintenance and support, Radware recommends that you connect the device to a serial
console.
• Radware management interfaces communicate with various UDP/TCP ports using HTTPS, HTTP,
Telnet, and SSH. If you intend to use these interfaces, ensure they are accessible and not
blocked by your firewall.
• For information on the configuration of the inspection ports, see the DefensePro User Guide.
2. Physical Port
3. Default Gateway IP address
4. Default Syslog IP address
5. User Name
6. User Password
7. Enable Web Access (y/n) [n]
8. Enable Secure Web Access (y/n) [n]
9. Enable Telnet Access (y/n) [n]
10. Enable SSH Access (y/n) [n]
11. SNMP Configuration
6. In the Startup Configuration window, provide the required information for the IP address, IP
subnet mask, Port Number, for the management port, and Default router IP address
parameters, and press Enter for each of the remaining settings. The platform reboots after the
last parameter is defined. Press Enter to accept default values.
Note: For version 8.17 and later, the system waits for your input.
For versions 8.16 and earlier, if no configuration is entered within 30 seconds, the platform
applies the following default configuration:
• IP Address: 192.168.1.1
• IP subnet mask: 255.255.255.0
• Port number for management. The port number depends on the platform. The default is
MNG-1.
7. If the start-up configuration screen does not appear, do the following:
a. Wait for the prompt <ProductName>>.
b. Type login and press Enter.
Note: When logging in to DefensePro for the first time after software installation, you
are prompted to set the password (for username radware).
The requirements of the new password are:
• Minimum eight characters, maximum 20 characters.
• The password must contain at least one English ASCII letter character (A-Z, a-z) and at
least one digit character (0-9).
• A character cannot be repeated more than two consecutive times.
c. To view the current IP interface setting, enter the following:
net ip-interface get
d. To add/modify/delete the existing IP Interface, enter the following:
net ip-interface add/modify/delete
or enter: net ip-interface help to see the command options.
Note: Contact Radware Technical Support for the user name and password.
e. Use an SSH client to open an SSH session to the management IP address of the platform.
Caution: Unless specifically stated otherwise, downgrading Radware platforms is not supported.
Downgrading a platform may cause loss of configuration and unexpected behavior.
Note: The platform validates the signature only when you upload the complete configuration to the
platform using replace mode (see Uploading Configuration Files, page 57).
Note: You can display the existing configuration using CLI using the command
system config immediate.
Then, you can copy the configuration file text to a text editor and save it as you require.
Note: The configuration file of a platform that contains SNMPv3 users with authentication can only
be used by the specific platform that the users configured. When you upload a configuration file to
another platform, passwords need to be re-entered, since passwords (of SNMPv3 users) cannot be
exported from one platform to another. Therefore, there must be at least one user in the user table
(to be able to change the password) in order to upload a configuration to another platform.
Upload Mode
You can upload a configuration file to a platform using one of the following methods:
• Append Commands to Configuration File
• Append Commands to Configuration File with Reboot
• Replace Configuration File
To log the command outputs in the terminal, you need to run the command system config
upload append with the -v option, whereby the output to the terminal displays each command
and its result—that is, whether the action succeeded or not.
Log Files
The log file includes a printout of all errors that occurred when uploading text files. The log file is
cyclic and, once full, deletes old messages in order to store new ones.
In addition to the log file, each event can also be issued to syslog, SNMP, and the console.
You can manage the log file using the following management options:
• APSolute Vision—In the Monitoring perspective navigation pane System tab, right-click the
platform name, select Export Log File, configure the download parameters, and click OK.
• CLI—Use the following command:
system config logfile <get|reset>
To upgrade versions 8.17.3.0 and above using the Command Line Interface (CLI)
1. Use SFTP to upload the upgrade file to the DefensePro device to the following location:
/mnt/cf/downloads
2. To upgrade the software:
system sw-upgrade set <filename.tgz>
3. To set a new password:
system sw-upgrade set <filename.tgz> -pw <new password>
4. As default, installing the new software file also activates the software.
To install a new software file without activating:
system sw-upgrade set <filename.tgz> -a false
5. To activate a software version previously installed:
system file-system software set <sw_version_name> -a true
6. To delete a software version from the DP repository
system file-system software del <sw_version_name>
To upgrade versions 8.17.2.0 and below using the Command Line Interface (CLI)
1. Use SFTP to upload the upgrade file to the DefensePro device to the following location:
/mnt/cf/downloads
2. To upgrade the software (fro example, for version 8.17):
system sw-upgrade set <filename.tgz> -v 8.17
3. To set a new password:
system sw-upgrade set <filename.tgz> -v 8.17 -pw (new password)
Note: Before upgrading to a newer software version, save the existing configuration file.
Upgrading Licenses
Depending on the specific platform type and the licenses bought, you can upgrade the software
capabilities and/or throughput license of Radware platforms using the licensing mechanism.
When you purchase a license upgrade, you will receive a new license code.
Licensing Mechanism
To change the license, you need to insert a new license code. The license provided to you, is a one-
time license, meaning that once this license is changed, the old license code cannot be re-used. For
example, if a license was given to you on a trial basis and not purchased, Radware provides you with
another license. The old license cannot be reused without APSolute OS support.
The license is based on the MAC address of the platform and on a license ID that is changed every
time a new license is inserted. To get a license upgrade, you need to send the MAC address and the
current license ID of the platform.
To perform a license downgrade, send the MAC address and the current license ID of the platform.
Once you receive and insert this new license, a screen capture of the License Upgrade window, or
the output of system license get CLI command, must be sent to Radware to prove that you are
using the new license.
Software Recovery
Before starting the software recovery procedure, contact Radware Technical Support to validate that
this is the only rescue-measure option.
This section describes DefensePro platform recovery with a bootable USB mass storage device.
Prerequisites:
• A supported USB mass storage device.
• Ensure that the USB is first in the boot sequence, defined in the BIOS. (When you reboot, you
will get a menu for boot sequence.) The USB is, by default, first in the boot sequence.
• A valid recovery file for the relevant version of your product.
The filename of the recovery file is in the following format:
Recovery-DefensePro-<version>-<platform>.zip
Note: The trailing colon (:) is required (for example: mkusb.bat k:).
6. Follow the instructions displayed on the console. The batch file formats the USB device and
copies the required files into it. Confirm the steps of the batch job by pressing Enter. The new
volume label after formatting is not essential, so you may leave it empty by pressing Enter.
7. Unplug the USB device from your host computer.
8. Insert the USB device into the DefensePro platform.
9. Turn on the DefensePro platform. The DefensePro platform boots from the USB. When
successful, the application installation process runs automatically and displays progress
information on the console.
10. When the primary installation is completed, remove the USB device from the DefensePro
platform. The DefensePro will prompt and wait for this confirmation.
11. Press Enter to confirm the USB is out of the DefensePro platform.
12. When prompted, enter the license, which you obtain from Radware Technical Support.
13. Enter the password.
3. Extract the air filter holder, pull the filter from the holder and dispose of the old filter.
4. Insert the new air filter, aligning the direction of the airflow as marked on the filter side.
5. Replace the air filter holder onto the front panel of the platform and tighten the six captive
screws.
DefensePro Specifications
The following DefensePro devices are supported:
• DefensePro 6 runs on the OnDemand Switch VL2 platform.
• DefensePro 20/60 runs on the OnDemand Switch MR platform.
• DefensePro 110/220 runs on the OnDemand Switch MRQ platform.
• DefensePro 200/400 runs on the OnDemand Switch HTQe platform.
• DefensePro 400/800 runs on the OnDemand Switch UHT platform.
Note: The DefensePro 20 and DefensePro 60 platforms are also available with NEBS certification.
Performance
OnDemand Scalable DefensePro 6-02 DefensePro DefensePro DefensePro DefensePro DefensePro
Clean Throughput - 200 Mbps 20-2 - 2 Gbps 60-10 - 10 110-40 - 40 200-80 - 80 400-200 -
Licenses DefensePro 6-05 DefensePro Gbps Gbps Gbps 200Gbps
- 500 Mbps 20-4 - 4 Gbps DefensePro DefensePro DefensePro DefensePro
DefensePro 6-1 - DefensePro 60-20 - 20 220-120 - 120 400-160 - 160 800-380 -
1 Gbps 20-8 - 8 Gbps Gbps Gbps Gbps 380Gbps
DefensePro 6-2 - DefensePro DefensePro
2 Gbps 20-12 - 12 60-40 - 40
DefensePro 6-3 - Gbps Gbps
3 Gbps
DefensePro 6-5 -
5 Gbps
Max. Programmable 6 Gbps 20 Gbps 60 Gbps 110/220 Gbps 200/400 Gbps 400/800 Gbps
Mitigation
Throughput
Max. Attack Unlimited
Concurrent Sessions
DDoS Flood Attack 7.2 Mpps 27.5 Mpps 27.5 Mpps 50/142 Mpps 292 Mpps 1119 Mpps
Prevention Rate
Inspection Ports
10/100/1000 Copper 6 - - - - -
Ethernet
1/10 GE 2 (SFP+) 24 (SFP+) 24 (SFP+) - 20 (SFP+) -
10/25 GE - - - 24 (SFP+/ - -
SFP28)
400 GE 2 - - - - - 4 (QSFP-DD)
Management Ports
10/100/1000 Copper 2
Ethernet
Management RJ-45
Console
Operation Mode
Network Operation Transparent Transparent L2 Forwarding/ IP Forwarding
L2 Forwarding
Deployment Modes In-line; SPAN Port Monitoring; Copy Port Monitoring;
Out-of-path mitigation (scrubbing center solution)
Tunneling Protocol VLAN Tagging, L2TP, MPLS, GRE, GTP, IPinIP
IPv6 Yes
Jumbo Frame --- Supported
Block Actions Drop packet, reset (source, destination, both), suspend (source, src port, destination, dest port or any
combination), Challenge-Response for TCP, HTTP and DNS suspicious traffic
High Availability
Fail-open / fail-close1 Internal fail-open/fail-close for copper ports, Internal fail-close for fiber ports/optical transceivers
Dual Power Supply Yes, hot swappable
Physical
Dimensions 436 x 406 x 44 436 x 480 x 88 436 x 480 x 88 482 x 550 x 87 424 x 600 x 88 436 x 570 x 88
(W x D x H) mm (1U) mm (2U) mm (2U) mm (2U) mm (2U) mm (2U)
EIA Rack or EIA Rack or EIA Rack or EIA Rack or EIA Rack or EIA Rack or
Standalone: Standalone: Standalone: Standalone: Standalone: Standalone:
482 mm (19 in) 482 mm (19 in) 482 mm (19 in) 482 mm (19 in) 482 mm (19 in) 482 mm (19 in)
Weight Single PS: Dual PS: Dual PS: Dual PS: Dual PS:
6 kg (13.2 lbs.) 13.2 kg (29 lbs.) 14.5 kg 18.7 kg 27.5 kg
Dual PS: (31.9 lbs.) (41.2 lbs.) (60.6 lbs.)
6.5 kg (14 lbs.)
Safety/EMI/EMC and UL/TUV, FCC (USA), IC (Canada), CE (Europe), UKCA (UK), RCM (Australia/ NZ) , VCCI (Japan),
Certifications KCC (Korea), EAC (Russia), CCC (China), BSMI (Taiwan), Anatel (Brazil), NOM (Mexico)
For more information see:
https://www.radware.com/newsroom/certifications-hardware/
Warranty 1-year hardware and software maintenance
Support Certainty Support Program
1
External fiber fail-open switch with SFP ports is available at additional cost.
2
Requires 400G connectivity available at additional cost.
Airflow Requirements
The operating environment must provide airflow to the device. The required minimum airflow in
cubic feet per minute (CFM) at a temperature range of 32° to 104°F (0° to 40°C) per specific
platform, is shown in the following table:
Platform CFM
DefensePro 6 50
DefensePro 20/60 200
DefensePro 110/220 200
DefensePro 200/400 200
DefensePro 400/800 200
AC Power Factor
The power factor of an AC electric power system is defined as the ratio of the real power to the
apparent power, and is a number between 0 and 1.
Real power is the capacity of the circuit for performing work in a particular time. Apparent power is
the product of the current and voltage of the circuit.
The power factor for the DefensePro platform platforms is 0.95.
distributed to you together with code samples in source code format (the “Code Samples”) that
are meant to illustrate and teach you how to configure, monitor and/or control the Software
and/or any other Radware Products, the Commercial License above further includes a limited,
nonexclusive, nontransferable license to copy and modify the Code Samples and create
derivative works based thereon solely for the SDK Purpose and solely on computers within your
organization. The SDK shall be considered part of the term “Software” for all purposes of this
License Agreement. You agree that you will not sell, assign, license, sublicense, transfer, pledge,
lease, rent or share your rights under this License Agreement nor will you distribute copies of
the Software or any parts thereof. Rights not specifically granted herein, are specifically
prohibited.
2. Evaluation Use. Notwithstanding anything to the contrary in this License Agreement, if the
Software is provided to you for evaluation purposes, as indicated in your purchase order or sales
receipt, on the website from which you download the Software, as inferred from any time-
limited evaluation license keys that you are provided with to activate the Software, or otherwise,
then You may use the Software only for internal evaluation purposes (“Evaluation Use”) for a
maximum of 30 days or such other duration as may specified by Radware in writing at its sole
discretion (the “Evaluation Period”). The evaluation copy of the Software contains a feature that
will automatically disable it after expiration of the Evaluation Period. You agree not to disable,
destroy, or remove this feature of the Software, and any attempt to do so will be a material
breach of this License Agreement. During or at the end of the evaluation period, you may
contact Radware sales team to purchase a Commercial License to continue using the Software
pursuant to the terms of this License Agreement. If you elect not to purchase a Commercial
License, you agree to stop using the Software and to delete the evaluation copy received
hereunder from all computers under your possession or control at the end of the Evaluation
Period. In any event, your continued use of the Software beyond the Evaluation Period (if
possible) shall be deemed your acceptance of a Commercial License to the Software pursuant to
the terms of this License Agreement, and you agree to pay Radware any amounts due for any
applicable license fees at Radware's then-current list prices.
3. Lab/Development License. Notwithstanding anything to the contrary in this License
Agreement, if the Software is provided to you for use in your lab or for development
purposes, as indicated in your purchase order, sales receipt, the part number description for the
Software, the Web page from which you download the Software, or otherwise, then You may use
the Software only in your lab and only in connection with Radware Products that you purchased
or will purchase (in case of a lab license) or for internal testing and development purposes (in
case of a development license) but not for any production use purposes.
4. Subscription Software. If you licensed the Software on a subscription basis, your rights to use
the Software are limited to the subscription period. You have the option to extend your
subscription. If you extend your subscription, you may continue using the Software until the end
of your extended subscription period. If you do not extend your subscription, after the expiration
of your subscription, you are legally obligated to discontinue your use of the Software and
completely remove the Software from your system.
5. Feedback. Any feedback concerning the Software including, without limitation, identifying
potential errors and improvements, recommended changes or suggestions (“Feedback”),
provided by you to Radware will be owned exclusively by Radware and considered Radware's
confidential information. By providing Feedback to Radware, you hereby assign to Radware all of
your right, title and interest in any such Feedback, including all intellectual property rights
therein. With regard to any rights in such Feedback that cannot, under applicable law, be
assigned to Radware, you hereby irrevocably waives such rights in favor of Radware and grants
Radware under such rights in the Feedback, a worldwide, perpetual royalty-free, irrevocable,
sub-licensable and non-exclusive license, to use, reproduce, disclose, sublicense, modify, make,
have made, distribute, sell, offer for sale, display, perform, create derivative works of and
otherwise exploit the Feedback without restriction. The provisions of this Section 5 will survive
the termination or expiration of this Agreement.
6. Limitations on Use. You agree that you will not: (a) copy, modify, translate, adapt or create
any derivative works based on the Software; or (b) sublicense or transfer the Software, or
include the Software or any portion thereof in any product; or (b) reverse assemble,
disassemble, decompile, reverse engineer or otherwise attempt to derive source code (or the
underlying ideas, algorithms, structure or organization) from the Software, in whole or in part,
except and only to the extent: (i) applicable law expressly permits any such action despite this
limitation, in which case you agree to provide Radware at least ninety (90) days advance written
notice of your belief that such action is warranted and permitted and to provide Radware with an
opportunity to evaluate if the law's requirements necessitate such action, or (ii) required to
debug changes to any third party LGPL-libraries linked to by the Software; or (c) create,
develop, license, install, use, or deploy any software or services to circumvent, enable, modify
or provide access, permissions or rights which violate the technical restrictions of the Software;
(d) in the event the Software is provided as an embedded or bundled component of another
Radware Product, you shall not use the Software other than as part of the combined Product and
for the purposes for which the combined Product is intended; (e) remove any copyright notices,
identification or any other proprietary notices from the Software (including any notices of Third
Party Software (as defined below); or (f) copy the Software onto any public or distributed
network or use the Software to operate in or as a time-sharing, outsourcing, service bureau,
application service provider, or managed service provider environment. Notwithstanding the
foregoing, if you provide hosting or cloud computing services to your customers, you are entitled
to use and include the Software in your IT infrastructure on which you provide your services.
Lastly, if you acquire Software under Radware's Global Elastic License (GEL) model, you commit
to use any such Software only as an Alteon VA on COTS server or on GEL-dedicated hardware
platforms as indicated in the part description of such hardware (be it hardware originally
purchased as GEL-dedicated or later upgraded to be GEL-dedicated). Use of Software under a
GEL model on a non-GEL-dedicated hardware platform is prohibited. If you deploy GEL model
Software on a virtual platform, you can do so without the virtual platform being GEL-dedicated.
It is hereby clarified that the prohibitions on modifying, or creating derivative works based on,
any Software provided by Radware, apply whether the Software is provided in a machine or in a
human readable form. Human readable Software to which this prohibition applies includes
(without limitation) “Radware AppShape++ Script Files” that contain “Special License Terms”. It
is acknowledged that examples provided in a human readable form may be modified by a user.
7. Intellectual Property Rights. You acknowledge and agree that this License Agreement does
not convey to you any interest in the Software except for the limited right to use the Software,
and that all right, title, and interest in and to the Software, including any and all associated
intellectual property rights, are and shall remain with Radware or its third party licensors. You
further acknowledge and agree that the Software is a proprietary product of Radware and/or its
licensors and is protected under applicable copyright law.
8. No Warranty. The Software, and any and all accompanying software, files, libraries, data and
materials, are distributed and provided “AS IS” by Radware or by its third party licensors (as
applicable) and with no warranty of any kind, whether express or implied, including, without
limitation, any non-infringement warranty or warranty of merchantability or fitness for a
particular purpose. Neither Radware nor any of its affiliates or licensors warrants, guarantees, or
makes any representation regarding the title in the Software, the use of, or the results of the
use of the Software. Neither Radware nor any of its affiliates or licensors warrants that the
operation of the Software will be uninterrupted or error-free, or that the use of any passwords,
license keys and/or encryption features will be effective in preventing the unintentional
disclosure of information contained in any file. You acknowledge that good data processing
procedure dictates that any program, including the Software, must be thoroughly tested with
non-critical data before there is any reliance on it, and you hereby assume the entire risk of all
use of the copies of the Software covered by this License. Radware does not make any
representation or warranty, nor does Radware assume any responsibility or liability or provide
any license or technical maintenance and support for any operating systems, databases,
migration tools or any other software component provided by a third party supplier and with
which the Software is meant to interoperate.
This disclaimer of warranty constitutes an essential and material part of this License.
In the event that, notwithstanding the disclaimer of warranty above, Radware is held liable
under any warranty provision, Radware shall be released from all such obligations in the event
that the Software shall have been subject to misuse, neglect, accident or improper installation,
or if repairs or modifications were made by persons other than by Radware's authorized service
personnel.