NEOX PRP-OS2-SLL PacketRaven Portable SM Fiber Netzwerk TAPs User Guide

: June 10, 2024
: NEOX

Table of Contents

NEOX PacketRaven Portable SM Fiber Network TAPs
highlights
How does a split ratio work?
Advanced Features of SECURE Fiber TAPs
installation
- Single TAP Quad LC/Duplex LC Configuration:
- Dual TAP Quad LC/Duplex LC Configuration:
TechnicalSpecifications
Model variants
- Standard model:
- Secure Models:
Y Cable Advantages
Front Panel Options
Power failure redundancy
Instructions for Usage

PRP-OS2-SLL PacketRaven Portable SM Fiber Network TAPs

NEOX PacketRaven Portable SM Fiber Network TAPs

The NEOXPacketRaven Portable SM Fiber Network TAPs is a device
that allows access to network traffic for monitoring and analysis
purposes. It is equipped with advanced features such as the optical
isolator and filter, which enhance its functionality and
performance.

highlights

Advanced features such as the optical isolator and filter
Y cable advantages
Front panel options for mobile or mounting kit/equipment frame
version
Power failure redundancy

How does a split ratio work?

A Split Ratio is a feature that allows the division of network
traffic into two or more streams. This feature enables multiple
devices to monitor the same traffic without interfering with each
other.

Advanced Features of SECURE Fiber TAPs

Optical isolator: prevents interference from external
sources
Optical Filter: removes unwanted signals and noise

installation

The NEOXPacketRaven Portable SM Fiber Network TAPs can be
installed using the following configurations:

Single TAP Quad LC/Duplex LC Configuration:

Port A: LC network port
Port B: LC network port
Port A: LC monitoring port
Port B: LC monitoring port

Dual TAP Quad LC/Duplex LC Configuration:

Port A: LC network port
Port B: LC network port
Port C: LC network port
Port D: LC network port
Port A: LC monitoring port
Port B: LC monitoring port
Port C: LC monitoring port
Port D: LC monitoring port

TechnicalSpecifications

Dimensions: 10.50cm x 3.60cm x 16.40cm
Weight: Approximately 0.4 kg
Certifications: GR-1221-CORE, CE, FCC, RoHS, WEEE
Split ratio (others on request): Single mode OS1, OS2 50:50,
60:40, 70:30
Insertion Loss: 3.4dB / 3.4dB, 2.5dB / 4.5dB, 1.7dB /
5.8dB

Model variants

The NEOXPacketRaven Portable SM Fiber Network TAPs is available
in the following model variants:

Standard model:

ARTICLE NUMBER	NETWORK	FIBER WAVELENGTH	CONNECTOR TYPE	TAP TYPE
PRP-OS2-SLL-*	1/10/25/40/50/100/200/400G	OS2 1310 / 1550nm	LC single mode

Secure Models:

ARTICLE NUMBER	NETWORK	FIBER WAVELENGTH	CONNECTOR TYPE	TAP TYPE
PRP-OS2-SLL-*-1310S	1/10/25/40/50/100/200/400G	OS2 1310nm	LC single mode

Y Cable Advantages

The Y-cable allows for a single TAP port to be split into two,
enabling multiple monitoring devices to access the same network
traffic.

Front Panel Options

The NEOXPacketRaven Portable SM Fiber Network TAPs is available
in both mobile and mounting kit/equipment frame version front panel
options.

Power failure redundancy

The NEOXPacketRaven Portable SM Fiber Network TAPs has built-in
power failure redundancy to ensure continuous operation even in the
event of a power outage.

Instructions for Usage

Install the NEOXPacketRaven Portable SM Fiber Network TAPs
using the single or dual TAP Quad-LC/Duplex-LC configuration.
Connect the LC Network Ports and LC Monitoring Ports to the
appropriate devices.
If necessary, use a Y-cable to split a single TAP port into
two.
Power on the device and begin monitoring network traffic.

QUICK USER GUIDE // NEOXPacketRaven
NEOXPacketRaven Portable SM Fiber Network TAPs
QUICK USER GUIDE
Our single-mode fiber optic TAPs are decoupling elements for the safe and reliable tapping of network data in optical networks. These TAPs are looped into the network line to be monitored and divert the entire data traffic while maintaining data integrity, without interruption and without packet loss. By using conventional SPAN ports, also known as mirror ports, the result can be falsified, since this copying process works in store-and-forward mode and, for example, FCS/CRC discards error-prone packets on OSI layer 2 instead of sending these Ethernet frames to the security or provides a monitoring tool. Our network TAPs do not have a MAC or IP address, but work completely on OSI Layer 1 and cannot be traced in the network without special and expensive measuring equipment. Hackers and attackers therefore have no chance. Since the integrity of the extracted data remains unaltered due to this tapping method, our network TAPs are increasingly being used in the areas of network forensics, security and monitoring. Fiber TAPs do not require their own power supply and are 100% passive in the network. PacketRaven fiber network TAPs of this model series were designed as portable TAPs, but can also be installed in a 19″ mounting frame in data centers using a mounting kit and support network speeds from 1G to 400G. With PacketRaven network TAPs you get permanent network access without risk and supply e.g Your monitoring tools with 100% reliable network data – without introducing a single point of failure.

QUICK USER GUIDE
// NEOXPacketRaven
1. Highlights
Supported network speeds: 1G, 10G, 25G, 40G, 50G, 100G, 200G and 400G Alternative to SPAN ports mirror 100% of data traffic including FCS/CRC errored
packets that may be discarded by SPANs · Invisible on the network, no IP address, no MAC address, cannot be hacked · Guaranteed no packet loss · 100% passive without affecting the active network connection, no additional latency · Available in different split ratios: e.g. 50:50, 60 :40, 70:30, 80:20, 90:10 No power required, 100% passive Plug-n-Play, no configuration needed Support up to 16k jumbo frames Designed, assembled, certified and tested in Germany
2. How does a split ratio work?
In order to access data from an optical network connection, it is necessary to decouple or split off part of the available light signal.
The split ratio is the ratio of the amount of light that is still available for the fiber optic network connection in relation to the amount of light that is diverted or split to the monitoring ports of the fiber optic network TAP.
A split ratio of 70/30, for example, means that 70% of the light is still available for the network connection and 30% is split off for the monitoring ports.

3. Extended functions of the SECURE Fiber TAPS

Optical Isolator

Secure fiber TAPs have both an additional optical isolator (data diode functionality) and an optical filter that ensure that unwanted light signals arriving at the monitoring port are blocked in order to protect the network from compromise.

This protects your IT infrastructure from arbitrary or accidental manipulation and ensures full data integrity.

Optical filter

They thus offer an additional security layer that offers increased protection against attackers and incorrect configurations.

QUICK USER GUIDE
// NEOXPacketRaven
4. Advantages of Y-cables
A network TAP equipped with LC connectors has three duplex connectors, two of which are required for looping through the network traffic to be analyzed and one duplex connector for the passive tapping of the mirrored ones Data for forwarding to, for example, a network packet broker (NPB), an analysis system, an intrusion detection system (IDS), a network detection and response system (NDR) or an extended detection and response system (XDR).
This is the so-called monitoring port on which both the left and the right data traffic is present. These two outputs must be fed into two monitoring ports using two transceivers in order to fully receive the bi-directional traffic, as only the receiving (Rx) side of the transceivers can be used for recording.
This poses a challenge since the output of the TAP is a duplex port, yet two separate ports are required on the receive side for two individual transceivers. The best way to avoid this problem is to use one of our special Y-cables, which convert one duplex connector into two duplex connectors, aligned so that the light is fed exclusively into the receiving end of the transceivers.

5. Front panel – mobile or mounting kit/mounting frame version
Our TAPs are available with a front panel for mobile use – as well as with mounting frames (-ERW versions) for permanent installation in our server cabinet mounting frame PRP-1U3, space for three of our portable TAPs.
Server cabinet installation frame PRP-1U3 for portable TAPs

TAP with front panel for server cabinet installation frame PRP-1U3

TAP for mobile use

Of course, TAPs with mounting frames can also be used on the go!

6. Resilience in the event of power loss
All our fiber optic network TAPs are 100% passive and do not require a power supply. A power failure in a circuit does not affect the TAP in any way, as it is a physical process that disconnects the network signal. This means that the network and monitoring ports are not affected, but neighboring devices could be affected by the power failure.

QUICK USER GUIDE
// NEOXPacketRaven
7. Installation
NETWORK port A is a full-duplex fiber port that should be connected to either of the two network devices where network monitoring is desired. NETWORK port B is a full-duplex fiber port that should be connected to the other side or adjacent network device where network monitoring is desired. The MONITOR port is a directional dual simplex port (both sides are output only) to be connected to the input or receiving side of two interfaces of one or more monitoring devices intended to capture the traffic being tapped. These models of the PacketRaven network TAPs product family were designed as portable TAPs, but can also be installed in a 19″ mounting frame in data centers using a mounting kit.
Front view – connections and LEDs

A PRP-OS2-SLL B (A) LC network ports A and B (B) LC monitoring ports A and B
Single TAP Quad-LC/Duplex-LC:

PRP OS2 DLL

A

B

(A) LC network ports A, B, C and D (B) LC monitoring ports A, B, C and D

QUICK USER GUIDE // NEOXPacketRaven
Dual TAP Quad-LC/Duplex-LC:

8. Technical Specifications

Dimensions (WxHxD) Operating temperature Humidity

SPECIFICATIONS

10.50cm x 3.60cm x 16.40cm weight

-40°C +85°C

reliability

5% 85%

certifications

Split ratio (others on request) Singlemode OS1, OS2

MAXIMUM INSERTION LOSS

50:50

60:40

3.4dB / 3.4dB

2.5dB / 4.5dB

approx. 0.4 kg GR-1221-CORE CE, FCC, RoHS, WEEE
70:30 1.7 dB / 5.8 dB

9. Model variants

PRP-OS2-SLL-x

PRP-OS2-DLL-x

QUICK USER GUIDE // NEOXPacketRaven

STANDARD MODELS

All OS2 models are also OS1 compatible! The TAPs whose item number ends in “-ERW” have a special front panel so that they can be installed in our server cabinet mounting frames!

ITEM NUMBER

NETWORK

FIBER WAVE CONNECTOR TYPE CONNECTOR TYPE TAP

TYPE LENGTH NETWORK MONITOR. VERSION

PRP-OS2-SLL-*

1/10/25/40/50/100/200/400G

PRP-OS2-SLL-*-ERW 1/10/25/40/50/100/200/400G

OS2 1310 / 1550 nm LC Singlemode LC Singlemode Single-TAP OS2 1310 / 1550nm LC Singlemode LC Singlemode Single-TAP

PRP-OS2-DLL-*

1/10/25/40/50/100/200/400G

PRP-OS2-DLL-*-ERW 1/10/25/40/50/100/200/400G

OS2 1310 / 1550 nm LC single mode LC single mode OS2 1310 / 1550 nm LC single mode LC single mode

Dual TAP Dual TAP

respective split ratio- e.g. “70” for a split ratio of 70:30, “60” for 60:40, “50” for 50:50

SECURE MODELS

All OS2 models are also OS1 compatible! The TAPs whose item number ends in “-ERW” have a special front panel so that they can be installed in our server cabinet mounting frames!

ITEM NUMBER

NETWORK

FIBER WAVE CONNECTOR TYPE CONNECTOR TYPE TAP

TYPE LENGTH NETWORK MONITOR. VERSION

PRP-OS2-SLL-*-1310S

1/10/25/40/50/100/200/400G OS2 1310nm LC Singlemode LC Singlemode Single-TAP

PRP-OS2-SLL-*-1310S-ERW 1/10/25/40/50/100/200/400G OS2 1310 nm LC singlemode LC singlemode single-TAP

PRP-OS2-SLL-*-1550S

1/10/25/40/50/100/200/400G OS2

PRP-OS2-SLL-*-1550S-ERW 1/10/25/40/50/100/200/400G OS2

PRP-OS2-DLL-*-1310S

1/10/25/40/50/100/200/400G OS2