Quantum 1U Manuel utilisateur

[Classification: Protected]

24 April 2023

QUANTUM MAESTRO

Getting Started Guide

Table of Contents

Quantum Maestro Getting Started Guide|2

Table of Contents

Introduction

Overview

Shipping Carton Contents

Features

Speed and Throughput

Ports, Power Supply Units, and Fan Units

Getting Started with MHO-140 - Single Site with Two Orchestrators

Part 1 - Installing the Hardware and Connecting Cables

Part 2 - Initial Configuration on each Orchestrator

Part 3 - Configuration of Security Groups

Part 1 - Creating a New Security Group

Part 2 - Configuring Gaia Settings on the New Security Group

Part 3 - Configuring a Security Gateway Object in SmartConsole

Part 4 - Monitoring the Security Group Members

Hardware Components

MHO-140 Front Panel

MHO-140 Rear Panel

Ports

Mounting the Quantum Maestro Orchestrator MHO-140 and MHO-170 in a Rack

Connecting Cables to Quantum Maestro Orchestrators

Splitting the Ports with Breakout Cables

Breakout Cables

MHO-175 Splitting Options

MHO-170 Splitting Options

MHO-140 Splitting Options

Single Site

Connecting Two Quantum Maestro Orchestrators for Redundancy

Diagram

Workflow

Connecting Cables to MHO-140

Connecting to the Management Ports with DAC or Fiber Cables

Connecting to the Uplink Ports with DAC or Fiber Cables

Connecting to the Uplink Ports with Breakout Cables

Table of Contents

Quantum Maestro Getting Started Guide|3

Connecting to the Downlink Ports with DAC or Fiber Cables

Quantum Maestro Orchestrator Ports and Gaia OS Interfaces

Introduction

Quantum Maestro Getting Started Guide|4

Introduction

In This Section:

Overview

Shipping Carton Contents

Features

Speed and Throughput

Ports, Power Supply Units, and Fan Units

Quantum Maestro Orchestrator is a scalable Network Security System built to secure the largest networks in

the world by orchestrating multiple Check Point Security Appliances into a unified system.

The Quantum Maestro Orchestrator provides:

nSecurity of infinite scale

nRedundancy - Quantum Maestro Orchestrator automatically distributes traffic between the Security

Appliances assigned to Security Groups

nAbility to connect more Security Appliances and use their resources easily in the existing Security

Groups

Overview

Quantum Maestro Orchestrator 1U systems are ideal for leaf and spine data center network solutions that

provide maximum flexibility, with port speeds from 1 Gbit/sec to 100 Gbit/sec per port, and port density that

enables full rack connectivity to any server at any speed. The ports allow a variety of blocking ratios that suit

all application requirements.

Quantum Maestro Orchestrator 1U systems enable the use of 1, 10, 40 and 100 GbE port speeds in a large

scale without the need to change power infrastructure facilities.

Introduction

Quantum Maestro Getting Started Guide|5

Shipping Carton Contents

This section describes the contents of the shipping carton.

Item Description

Appliance Quantum Maestro Orchestrator

Rack Mounting Accessories n2 static (fixed) rack mount rails

n2 rack mount blades

n2 rack mount ears

n8 M6 standard cage nuts

n8 M6 standard pan-head Phillips screws

n4 flat head Phillips screws with a round patch

(6-32x1/4", 100-Deg, Patch 360)

Cables and Adapters n2 power cables (Type C13-C14)

n2 cable retainers

n1 DB9 to RJ45 serial console cable

n1 DAC cable, 3m

Documentation nQuick Start Guide

nPort Mapping

nUser license agreement

Table: Shipping Carton Contents

Notes:

nDB9 connectors are also known as DE9 connectors.

nBefore installing your new Quantum Maestro Orchestrator, unpack it and check the parts list to make

sure that all the parts are in the package.

Check the parts for visible damage that may have occurred during shipping.

Introduction

Quantum Maestro Getting Started Guide|6

Features

nThroughput and processing capacity:

lMHO-175 - Throughput of up to 3200 Gbit/sec and processing capacity up to 4.76 Bpps

lMHO-170 - Throughput of up to 3200 Gbit/sec and processing capacity up to 4.76 Bpps

lMHO-140 - Throughput of up to 1280 Gbit/sec and processing capacity up to 2.97 Bpps

nFlat latency in the cut-through mode:

lMHO-175 - 425 ns

lMHO-170 - 300 ns

lMHO-140 - 300 ns

nSpeeds of 1, 10, 40, and 100 GbE

nDynamically-shared, flexible packet buffering:

lMHO-175 - 42 MB

lMHO-170 - 16 MB

lMHO-140 - 16 MB

nLowest power, under 5 W per 100 GbE port

nEnhanced scalability

n1+1 hot-swappable power supplies

n4 N+1 hot-swap fans

nColor coded PSUs and fans

Introduction

Quantum Maestro Getting Started Guide|7

Speed and Throughput

The table below lists maximum throughput and interface speed for each Quantum Maestro Orchestrator

model:

Orchestrator

Model

10 GbE

SFP28 Interfaces

40 / 100 GbE

QSFP28 Interfaces

Maximal

Throughput

MHO-175 128

(use QSFP to SFP

breakout cables)

32 3.2 Tbit/sec

MHO-170 64

(use QSFP to SFP

breakout cables)

32 3.2 Tbit/sec

MHO-140 Total 64

48 SFP+ 8 QSFP28

(use QSFP to SFP

breakout cables)

8 1.28 Tbit/sec

Quantum Maestro Orchestrator supports different interfaces and speed rates when you use QSFP to SFP

adapters, or hybrid cables. For more information, see

"Splitting the Ports with Breakout Cables" on page41

Ports, Power Supply Units, and Fan Units

Orchestrator

Model MGMT Ports USB Ports Console Ports PSUs Fans

MHO-175 1 on the front

panel

1 on the front

panel

1 on the front

panel

2 units 4 units

MHO-170 1 on the front

panel

1 on the front

panel

1 on the front

panel

2 units 4 units

MHO-140 2 on the rear

panel

1 on the rear

panel

1 on the rear

panel

2 units 4 units

Getting Started with MHO-140 - Single Site with Two Orchestrators

Quantum Maestro Getting Started Guide|8

Getting Started with MHO-140 -

Single Site with Two Orchestrators

Part 1 - Installing the Hardware and Connecting

Cables

1. Mount the two Quantum Maestro Orchestrators MHO-140 in the racks on the site.

See

"Mounting the Quantum Maestro Orchestrator MHO-140 and MHO-170 in a Rack" on page29

2. Install the Security Appliances for your Security Groups.

Procedure

a. Install the applicable Expansion Line Cards (if required) in the appliances.

See

Installing and Removing Line Cards

Maestro configuration supports only ports 10 Gbps or faster.

b. Mount appliances in their racks.

See the

Getting Started Guide

for your appliances in sk96246.

c. Power on the Security Appliances.

3. Connect a DAC cable between the dedicated Synchronization ports 48 on the two Orchestrators.

For more information, see

"Port Mapping for the Quantum Maestro Orchestrator MHO-140" on

page20

Getting Started with MHO-140 - Single Site with Two Orchestrators

Quantum Maestro Getting Started Guide|9

4. Connect the required cables between the Security Appliances and the applicable 10 Gbps Downlink

ports 27 -47 on each Orchestrator.

More information

Important:

nMaestro configuration supports only ports 10 Gbps or faster on Security

Appliances.

nTo connect Security Appliances to these 10 Gbps Downlink ports, use a

Fiber cable or a DAC cable.

nTo connect Fiber cables, you must use only the supported transceivers.

See sk92755 - Compatibility of transceivers for Check Point appliances.

See:

"Port Mapping for the Quantum Maestro Orchestrator MHO-140" on page20

"Connecting Two Quantum Maestro Orchestrators for Redundancy" on page48

Diagrams:

Connecting cables between Downlink ports on each Orchestrator and 2 ports on the

Dual Port Card on each Security Appliance

Illustration Instructions

On each Security Appliance (C) in

the Security Group:

a. Connect a cable from Port 1

on the Dual Port Card to a

Downlink port on the first

Orchestrator (A).

b. Connect a cable from Port 2

on the Dual Port Card to a

Downlink port on the second

Orchestrator (B).

Getting Started with MHO-140 - Single Site with Two Orchestrators

Quantum Maestro Getting Started Guide|10

Connecting cables between Downlink ports on each Orchestrator and 1 out of 4 ports on

the Quad Port Card on each Security Appliance

Illustration Instructions

On each Security Appliance (C) in

the Security Group:

a. Connect a cable from Port 1

on the Quad Port Card to a

Downlink port on the first

Orchestrator (A).

b. Connect a cable from Port 2

on the Quad Port Card to a

Downlink port on the second

Orchestrator (B).

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Quantum Matériel réseau

Quantum

Quantum SMART-1 6000-L Manuel utilisateur

Quantum

Quantum Lattus S20 Manuel utilisateur

Quantum

Quantum DXi4800 Manuel utilisateur

Quantum

Quantum CHECK POINT 16000 Manuel utilisateur

Quantum

Quantum CHECK POINT SPARK 1500 Series Mode d’emploi

Quantum

Quantum Scalar 50 Guide de démarrage rapide

Quantum

Quantum FC420 Manuel utilisateur

Quantum

Quantum FC310 Manuel utilisateur

Quantum

Quantum DX Series Manuel utilisateur

Quantum

Quantum B DLTSAGE SELLSHEET Manuel utilisateur

Quantum

Quantum LightSpeed Appliance QLS250 Manuel utilisateur

Quantum

Quantum VS2112-NVR Manuel utilisateur

Quantum

Quantum MC300 Prism Manuel utilisateur

Quantum

Quantum TC2201E Manuel utilisateur

Quantum

Quantum QWCM Manuel utilisateur

Quantum

Quantum Prism FC470 Manuel utilisateur

Manuels Matériel réseau populaires d'autres marques

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Manuel utilisateur

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Manuel utilisateur

Yudor

Yudor YDS-16 Manuel utilisateur

D-Link

D-Link ShareCenter DNS-320L Manuel utilisateur

Samsung

Samsung ES1642dc Instructions d'utilisation

Honeywell Home

Honeywell Home LTEM-PV Instructions de montage

evertz

evertz 7700 Series Manuel utilisateur

D-Link

D-Link ShareCenter DNS-343 Manuel utilisateur

Asante

Asante AsanteBridge 1012 Manuel utilisateur

FireBrick

FireBrick FB2700 Manuel utilisateur

Audiovox Electronics

Audiovox Electronics ARWH2T Manuel utilisateur

ADC

ADC DSX-1 Manuel

NetComm

NetComm NF2 Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 5620 Manuel utilisateur

Dell EMC

Dell EMC XC6420 Series Manuel utilisateur

Lanner

Lanner NCA-1020A Manuel utilisateur

Allied Telesis

Allied Telesis AT-TN121-A Manuel utilisateur

Arista

Arista CCA-ETM-Q12 Manuel utilisateur