Configure, Monitor and Manage Fiber Networks

Remote Network Configuration

iConverter management provides the ability to remotely configure all hardware functionality, including the ability to override physical DIP-switch settings. Network administrators can remotely configure duplex modes, auto or manual negotiation, data rates, link fault detection modes and a variety of other parameters. A Soft-switch Reload setting allows a module to maintain its remotely configured DIP-switch overrides after a module has lost power. Other configurable parameters on select iConverter modules include VLAN membership assignments, QoS prioritization, Port Access Control and Bandwidth Control.

Performance Monitoring

iConverter management provides the ability to monitor the status and view information on a wide variety of module and chassis parameters. On iConverter modules equipped with the ability to collect individual Port MIB statistics, real-time packet statistics are available to provide performance and operational monitoring.

These features give the network administrator the ability to monitor, control and be alerted when unusual events occur, ensuring reliable network functionality and reducing the cost of ownership

Trap Notifications

Traps provide notification of network events such as module insertion or removal, link-up or down, and power and temperature range violations. Network administrators can specify which network events will generate trap notifications, and initiate a pop-up window upon receipt of a trap. Traps can be sent to eight different trap host locations.

Some of the trap events that can be enabled include:

• Module Link-up / down
• Module switch change
• Software Configuration change
• Hardware Configuration change
• Power Loss / Dying Gasp notification
• Power Application / Removal (of individual power supply)
• Power Supply Temperature or Voltage out-of-range
• Module Insertion / Removal
• Chassis Insertion / Removal
• FTP or Telnet Session start / stop

NetOutlook® Graphical User Interface

The iConverter fiber access system can be managed via Omnitron's NetOutlook management software, or be integrated with any other third-party SNMP management software. NetOutlook supports IP-Based and Secure IP-Less Management channels.

• Using NetOutlook, network administrators can control the monitoring and reporting of network status, remotely configure modules, and receive notification of network events through the reporting of user-selected traps.
• NetOutlook accesses SNMP functions in an iConverter chassis via a Network Management Module (NMM2) or a self-managed media converter, such as an iConverter 10/100M installed in the chassis.
• NetOutlook reduces operating costs by eliminating unnecessary "truck rolls" and increases productivity by providing notification and isolation of network problems.

The intuitive user interface enables configuration of modules by double-clicking the image of the module, and easy navigation between iConverter equipment in different locations with the click of a button.

View NetOutlook Web Page
Download NetOutlook Data Sheet(PDF)

All iConverter modules and chassis can be used in a managed or unmanaged fashion. Management is achieved by adding an iConverter Network Management Module (NMM2) or a Network Interface Device (NID) with built-in management to the chassis. An iConverter NID can manage an iConverter chassis of modules, or manage itself as a standalone unit.

iConverter Network Interface Devices

iConverter Network Management Module

iConverter Network Interface Devices with built-in management:

GX/TM2 10/100/1000 Tx UTP to 1000X Fiber Ethernet Media Converter and Network Interface Device

10/100M2 10/100Tx UTP to 100Fx Fiber Ethernet Media Converter and Network Interface Device

2GXM2 1000X to 1000X Fiber Switch, Ethernet Fiber Converter and Network Interface Device

2FXM2 100Base-Fx to 100Base-Fx Fiber Switch, Ethernet Fiber Converter and Network Interface Device

iConverter NIDs support Secure IP-less management, port access controls, VLAN technology, bandwidth control and QoS prioritization for real-time voice and video over Ethernet.

Secure IP-Less Management

iConverter Network Interface Devices support an IP-less management channel that provides two benefits. First, it allows management of a large number of individual media converters and chassis through one IP address, and second, it provides an added level of security for the management channel that is not affected by end-user actions or traffic on the system. The IP address is isolated to a physically secure management station at the network core, and does not exist on the fiber link or on the Network Interface Device at the network edge. Secure IP-less management reduces the risk of unauthorized access to the IP address, and prevents malicious attacks on the network.

Secure IP-Less Management Application

In this illustration, the Management Station controls the 19-Module chassis at the network core by accessing the iConverter Network Management Module (NMM2) installed in the chassis. The Management Station can monitor the iConverter 10/100M2 located at the network edge via the secure, IP-less management channel established between the 10/100M installed in the 19-Module chassis and the standalone 10/100M at the network edge.

When a Secure management channel is established between the two 10/100M "bookends", the management data is IP-less and encrypted. The 10/100M at the edge is a securely managed demarcation point because management IP traffic and end user traffic never share the same physical link, and the IP address of the Management Station is not accessible from the edge device. In addition to monitoring capabilities, the Management Station can configure parameter settings and receive traps generated by the 10/100M2 at the edge.

Secure IP-Based Management

Another technique to increase network security is to assign a separate VLAN tag to the management data to isolate it from the user data on the network. Since IP management traffic shares the same link as the end user traffic at the core, a management VLAN can be assigned to separate the traffic types and to prevent management traffic from reaching the end user edge equipment.