2804 Hybrid Packet Broker
Multi-functional Bypass Packet Broker

Product Highlights

The Niagara 2804 hybrid packet broker uniquely combines multipurpose bypass functionality with a fully featured network packet
broker. The 2804 hybrid packet broker supports up to 16 ports of
1/10Gb, plus additional eight fixed-configuration monitoring/Tapports. The 16 ports of 1/10Gb come in configuration-segments of four
ports each. This flexibility lets you configure the 2804 with up to four
1/10Gb multi-purpose bypass segments, or with up to sixteen 1/10Gb
I/O packet broker ports, or any combination of bypass segments andpacket broker ports.

High Density:
Up to sixteen 1/10Gb ports configured in four,4-port segments

10 GE

10 GE

10 GE

Multi-functional Segments
Network ports support SX/SR and LX/LR• Bypass for inline deployments• Active Tap split mode
• Active Tap aggregate mode

Mgmt

10 GE

12

NIAGARA 2804

ConsoleFigure 1: 2804 front panel with sixteen 1/10Gb ports configured in 4-port segments(2*multimode, 2*single mode). Additional eight fixed configuration active monitoring/Tap ports (on RHS)

Multifunctional Network Packet
Brokers Segments
Each 4-port segment comprises two network and two appliance ports.
The network ports offer direct single mode (SM) or multimode (MM)connectivity. The appliance ports utilize SFP+, giving the flexibility
to connect appliances (tools) using 1Gb or 10Gb, whether SM, MM orcopper.
Each of the segments’ four ports can be configured as fully featured I/Opacket broker ports. Dual rate, integrated 1/10Gb transceivers on thenetwork ports connect the network traffic to a common, non-blockingbackpanel switching fabric layer. Because all of the 2804 ports connect
to this common non-blocking switch fabric backplane, inputs from anyport can be used as outputs in any other port.

Switching FabricIntegrated Transceiver

Optical Switch
N1

N2

A1

A2

Figure 2: multi-purpose 4-port segment. Appliance ports can serve the hybrid
functionality of fully-featured I/O packet broker ports.

Management:• Robust command line interface (CLI)• User-friendly, web-based user interface• REST API for third-party integration andsupport• Managed by Niagara Visibility Controller (NVC)
Integrated Monitoring/Tap Ports:• Up to 8 additional fixed-configuration active
Tap ports
Form Factor:• 1U Rackmount• Dual field-replaceable power supply
Fabric Flow: FabricFlow technology
exposes network packet broker features
enabling the user to map traffic from onesegment to any other segment (or from one port
to any other port).
The fully featured network packet broker
functionality includes:
� Aggregate traffic to single port
� Replicate traffic to multiple ports
� Sophisticated filtering—L2-L4, User
Defined Byte (UDB)• Tunnel and VLAN support• Flexible multi-load balancing schemes• User-configurable packet heartbeat (msresolution)• Ingress and egress filters

Network Bypass TechnologyNetworkThe two network ports in each 4-port segment haveadditional special capabilities. They can be used toconfigure the network ports to function as an active Tap or
as a bypass.
When configured as a bypass our signature BypassP2
Technology offer double-protection. A fail-safe opticalrelay on network ports, and user-configurable heartbeatgenerated packets on appliance ports.

N1

A1

N2A2Appliance

Figure 3: Inline deployment

In Bypass/Inline deployment, traffic from one side of the network is forwarded to the inline appliance, and through the inline
appliance to the other side of the network. This is the common network deployment for inline security devices such as firewalls
and intrusion detection systems. Any two appliance ports from the network’s port segment or from any other 4-port segments canparticipate in this configuration since all ports are connected to a common non-blocking switch fabric backplane.

Failsafe protection - protecting network traffic flow in theevent of Network Packet Broker (NPB) failure. When power
fails, as depicted in figure 4, the optical-relays ensure that thenetwork flow continues uninterrupted. The optical relays can beconfigured fail open or fail close to meet specific deployment
needs. An optical switch mechanism is the most reliable method
for connecting inline devices to your network, while ensuring
uninterrupted network services under all conditions.

Switching FabricIntegrated Transceiver

Optical Switch
N1

N2

RouterRouter

A1

A2

Appliance

Figure 4: Power Failure ModeHeartbeat protection - protecting network traffic flow in case of appliance failures. The NPB transmits a user-configurable
heartbeat on the appliance ports as depicted in figure 5. In the event of an appliance malfunction (such as a software crash,system failure or loss of power depicted in figure 6), the failure is detected, and the NPB bypasses the traffic intended for the inline
appliance to the network ports, allowing it to continue to flow through the network link. This feature also enables the network
appliances to be removed and replaced without network downtime. Once the system is back up, or the power is restored to theappliance, it is detected by the NPB’s heartbeat mechanism, and network traffic is seamlessly diverted back to the inline device,
allowing it to resume its critical functions.

niagaranetworks.com

2

Niagara’s heartbeat mechanism is an integrated configurable sub-second-rate mechanism that is available independently foreach segment. The number of missed heartbeat packets before entering bypass mode is configurable, so too is the number ofreceived heartbeats to determine that the appliance is back on-line. NPB heartbeat does not require additional drivers to beinstalled on connected appliances.

Switching
Switching
FabricFabric

Switching
Switching
FabricFabricIntegrated
TransceiverIntegrated
TransceiverIntegrated
TransceiverIntegrated
Transceiver

Optical Optical
Switch Switch

Optical Optical
Switch Switch

N1

N1 N2

N2

A1

Note: In the figures, theappliance ports (A1, A2)
depicted belong to thesame 4-port segment
as the network ports(N1,N2). However, any two
appliance ports from anyother 4-port segments
can participate in thisconfiguration, since all
ports are connected to acommon non-blocking
switch fabric backplane.

A1A2

A2

N1N1 N2

N2

Conﬁgurable
Conﬁgurable
heartbeatheartbeat
raterate

A1

A1A2

A2

missing missing
heartbeats
heartbeats

Router Router
Router Router

Router Router
Router Router

Appliance
Appliance

5: 2cNormalinlineOperation
ModeMode
FigFigure2c - Fig
Normal- NormalinlineOperation
inlineOperation
ModeApplianceAppliance

Fig 2dFigure-Fig
Appliance
2d6:- ApplianceAppliance
FailureFailure
FailureMode Mode
Mode

Active Tap (aggregation)

NetworkIn Active Tap, traffic on the network side is always
maintained. Each appliance port receives a copy of the Rx
from both sides of the network. This mode economizes
on monitoring tool ports, if the total traffic throughput
from both network sides is below that of the single
appliance port. Any appliance port from any of the other
4-port segments can participate in this configuration,
since all ports are connected to a common non-blocking
switch fabric backplane.

N1

A1

N2

A2Appliance

Figure 7: Active Tap (aggregation)

Active Tap (split)
Network

N1

A1

N2

A2

Figure 8: Active Tap (split)

niagaranetworks.com

Appliance

In this Active Tap mode, traffic on the network sideis always maintained. Each appliance port receives
a copy of the Rx from one of the network ports. Any
appliance port from any of the other 4-port segments
can participate in this configuration since all ports areconnected to a common non-blocking switch fabricbackplane.

3Configuration Flexibility
The 2804 offers maximum flexibility with four hybrid segments per chassis. In addition to these four hybrid segments, the 2804 is
configured with eight fixed-conflagration active monitoring/Tap ports

Figure 9: 2804 front panel depicting four segments, and eight additional, integrated fixed-configuration monitoring/Tap options

Integrated Active Monitoring/TapThe eight monitoring/Tap ports provide an additional, fixed Tap configuration on top of those available as part of the bypass
segment. The user can configure which traffic from N1(Rx), N2(Rx) etc, or aggregation of traffic is output to each one of the eight
integrated active monitoring/tap ports (T1 through T8), as depicted in Figure 10. This provides the flexibility to have an additional
integrated Tap for more tools. If the power fails, the network traffic flow is maintained, however the integrated active Tap point
losses its visibility.

Switching FabricIntegrated TransceiverRx(A8)Tx(A8)

Rx(A2)

Tx(A2)

Rx(A1)

Tx(A1)

Rx(N8)

Tx(N8)

Rx(N2)

Tx(N2)

Rx(N1)

Tx(N1)

Fixed
conﬁguration
active Taps

Optical Switch

N1

N2

N8

A1

A2

output depends on
segment conﬁguration

RouterRouter

A8

T1

T2

T8

output depends onmonitoring/tap port conﬁguration

RouterFigure 10: Integrated active monitoring/Tap functionality

niagaranetworks.com

4Specifications
Height1.74 inches (44.20 mm)

Max Raw Power173.75 Watts

Length

19.98 inches (507.49 mm)

Max Power Consumption

139 Watts

Width

17.25 inches (438.15 mm)

Airflow

Front to backWeight19 lbs (8.62 kg)

AC

100-240V, 50/60 Hz., 5.29-2.2 A

Operating Temp

32 to 113 ºF (0 to 45 ºC)

DC36-72V, 5A

Operating Humidity

5 to 95%

Emissions

Immunity

FCC Part 15B, ICES 003, EN55032

EN55024

SafetyCertifications

UL/CSA 60950-1, EN 60950-1, IEC 60950-1
CB Scheme with all country differences

North America (NRTL)
European Union (EU)VCCI (Japan)

2014/35/EU Low Voltage Directive
2014/30/EU EMC Directive
2011/65/EU RoHS Directive
2012/19/EU WEEE Directive

Part Number

Description

Ordering Details

2804-MN-8ATP-yy

2804 Hybrid packet broker main chassis withintegrated monitoring/Tap ports. Supports four
4-port segments (selected separately). Two
redundant power supply units and four fan units.

yy – user should specify preferred power supply option

4-port segment for 2804.

xx - users should specify network side fiber type:
SR – multimode 50/125
SR5 – multimode 62.5/125
LR – singlemodeTransceivers for appliance ports ordered separately

2800-SG-xx

niagaranetworks.com

AC – Dual AC redundant power supply
DC – Dual DC redundant power supply

52804 2018 Version 3

About Niagara
Niagara Networks provides high performance network visibility solutions for seamless administrationof security solutions, performance management and network monitoring. Niagara Networks products
provide advantages in terms of network operation expenses, downtime, and total cost of ownership.
A former division of Interface Masters, Niagara Networks provides all the building blocks for an advanced
Visibility Adaptation Layer at all data rates up to 100Gb, including Taps, bypass elements, packet
brokers and a unified management layer. Thanks to its integrated in-house capabilities and tailor-madedevelopment cycle, Niagara Networks are agile in responding to market trends and in meeting thecustomized needs of service providers, enterprise, data centers, and government agencies.

150 E Brokaw Road, San Jose, CA 95112, USA
Tel: +1 408 622 0354 | Fax: +1 408 213 7529
sales@niagaranetworks.com www.niagaranetworks.com