Network Interface Device

Configuring, Monitoring and Securely Managing Enterprise Networks

» Management Capabilities
» Software Interface Options
» Hardware Requirements
» Secure Management

Large Enterprise and campus networks can pose challenges with distant locations connected via fiber. iConverter® management access is a comprehensive management solution that monitors, configures and reports on network status. Network administrators can remotely configure hardware parameters, override physical DIP-switch settings, receive a variety of user-defined traps and generate reports on port traffic statistics.

The iConverter network management system:

  • Reduces Operating Costs by saving time with remote configuration and eliminating unnecessary trips to edge equipment
  • Reduces network down time by monitoring network performance and quickly identifying and isolating network problems
Management Capabilities

Remote Network Configuration

iConverter management provides the ability to remotely configure all hardware functionality, including the ability to override physical DIP-switch settings. Network administrators can remotely configure duplex modes, auto or manual negotiation, data rates, link fault detection modes and a variety of other parameters. A Soft-switch Reload setting allows a module to maintain its remotely configured DIP-switch overrides after a module has lost power. Other configurable parameters on select iConverter modules include VLAN membership assignments, QoS prioritization, Port Access Control and Bandwidth Control.

Performance Monitoring

iConverter management provides the ability to monitor the status and view information on a wide variety of module and chassis parameters. On iConverter modules equipped with the ability to collect individual Port MIB statistics, real-time packet statistics are available to provide performance and operational monitoring. These features give the network administrator the ability to monitor, control and be alerted when unusual events occur, ensuring reliable network functionality and reducing the cost of ownership

Trap Notifications

Traps provide notification of network events such as module insertion or removal, link-up or down, and power and temperature range violations. Network administrators can specify which network events will generate trap notifications, and initiate a pop-up window upon receipt of a trap. Traps can be sent to eight different trap host locations.

Some of the trap events that can be enabled include:

  • Module Link-up / down
  • Module switch change
  • Software Configuration change
  • Hardware Configuration change
  • Power Loss / Dying Gasp notification
  • Power Application / Removal (of individual power supply)
  • Power Supply Temperature or Voltage out-of-range
  • Module Insertion / Removal
  • Chassis Insertion / Removal
  • FTP or Telnet Session start / stop
Software Interface Options

NetOutlook™ Graphical User Interface

The iConverter fiber access system can be managed via Omnitron's NetOutlook management software, or be integrated with any other third-party SNMP management software. NetOutlook supports IP-Based and Secure IP-Less Management channels.

Using NetOutlook, network administrators can control the monitoring and reporting of network status, remotely configure modules, and receive notification of network events through the reporting of user-selected traps.

NetOutlook accesses SNMP functions in an iConverter chassis via a Network Management Module (NMM) or a self-managed media converter, such as an iConverter 10/100M installed in the chassis.

NetOutlook reduces operating costs by eliminating unnecessary "truck rolls" and increases productivity by providing notification and isolation of network problems.

NetOutlook is compatible with Windows 98/NT/2K/XP.


Integration with 3rd Party Management Software

Using iConverter MIB statistics, iConverter management capabilities can be integrated with third-party network management software such as HP OpenView™. MIB RMON statistics are available for 38 variables per port.

Command Line Interface

The iConverter system can be managed with an easy to use, menu-driven Command Line Interface (CLI), supporting all of the management controls of an SNMP interface. The CLI can be accessed three ways:

1) Via Telnet: iConverter equipment can be managed via Telnet with an easy-to-use, menu-driven user interface.

2) Via out-of-band connection to a Serial Craft Port: iConverter management modules feature a Serial Console Port for management access that has the same user-friendly, menu-driven user interface as the Telnet management interface. The serial interface can be used for parameter configuration, diagnosis and firmware updates.

3) Via remote Serial Modem connection: The port can also be connected to a serial modem to provide an alternative remote management path. Access to the Serial Console Port is protected by password authentication.

Hardware Requirements

All iConverter modules and chassis can be used in a managed or unmanaged fashion. Management is achieved by adding an iConverter Network Management Module (NMM) or a Network Interface Device (NID) with built-in management to the chassis. An iConverter NID can manage an iConverter chassis of modules, or manage itself as a standalone unit.

iConverter Network Interface Devices


Secure IP-Less management requires a Network Management Module (NMM) in the iConverter chassis at the network core, with self-managed NIDs at each end of the Secure IP-less link.

iConverter Network Interface Devices with built-in management:

GX/TM2 10/100/1000 Tx UTP to 1000X Fiber Ethernet Media Converter and Network Interface Device

10/100M2 10/100Tx UTP to 100Fx Fiber Ethernet Media Converter and Network Interface Device

2GXM2 1000X to 1000X Fiber Switch, Ethernet Fiber Converter and Network Interface Device

2FXM2 100Base-Fx to 100Base-Fx Fiber Switch, Ethernet Fiber Converter and Network Interface Device

iConverter NIDs support Secure IP-less management, port access controls, VLAN technology, bandwidth control and QoS prioritization for real-time voice and video over Ethernet.

Secure Management

Secure IP-Less Management

iConverter Network Interface Devices support an IP-less management channel that provides two benefits. First, it allows management of a large number of individual media converters and chassis through one IP address, and second, it provides an added level of security for the management channel that is not affected by end-user actions or traffic on the system. The IP address is isolated to a physically secure management station at the network core, and does not exist on the fiber link or on the Network Interface Device at the network edge. Secure IP-less management reduces the risk of unauthorized access to the IP address, and prevents malicious attacks on the network.

Secure IP-Less Management Application

In this illustration, the Management Station controls the 19-Module chassis at the network core by accessing the iConverter Network Management Module (NMM) installed in the chassis. The Management Station can monitor the iConverter 10/100M2 located at the network edge via the secure, IP-less management channel established between the 10/100M installed in the 19-Module chassis and the standalone 10/100M at the network edge.

When a Secure management channel is established between the two 10/100M "bookends", the management data is IP-less and encrypted. The 10/100M at the edge is a securely managed demarcation point because management IP traffic and end user traffic never share the same physical link, and the IP address of the Management Station is not accessible from the edge device. In addition to monitoring capabilities, the Management Station can configure parameter settings and receive traps generated by the 10/100M at the edge.

Secure IP-Less Management


Secure IP-Based Management

Another technique to increase network security is to assign a separate VLAN tag to the management data to isolate it from the user data on the network. Since IP management traffic shares the same link as the end user traffic at the core, a management VLAN can be assigned to separate the traffic types and to prevent management traffic from reaching the end user edge equipment.