Net Optics none manual Network Port 11 XFP Port

Page 36

Director

Network Port 1

Network Port 2 +

Network Port 3 Network Port 4

XFP Port 1

Network Port 11 XFP Port 2

lter add in_ports=n1.1-n1.4 action=redir redir_ports=t.1 lter add in_ports=n1.11 action=redir redir_ports=t.2

Figure 32: Configurable 10 Gigabit XFP ports used as Monitor ports (with aggregation)

To use one XFP port as a Span port and the other XFP port as a Monitor port:

1.Enter filter add in_ports=t.1 ip_proto=6 action=redir redir_ports=m.1. A filter has been defined to select all IPv4 TCP packets from 10 Gigabit Port 1 and copy them to Monitor Port 1. 10 Gigabit XFP Port 1 is configured as a Span port.

2.Enter filter add in_ports=n1.11 action=redir redir_ports=t.2. A filter has been defined to copy all the traffic from 1 Gigabit Network Port 11 to 10 Gigabit Port 2. 10 Gigabit XFP Port 2 is configured as a Monitor port.

3.Enter filter commit. The filters are activated.

XFP Port 1		Protocol =		Monitor Port 1
XFP Port 1		TCP		Monitor Port 1
		TCP

Network Port 11 XFP Port 2

lter add in_ports=t.1 ip_proto=6 action=redir redir_ports=m.1 lter add in_ports=n1.11 action=redir redir_ports=t.2

Figure 33: Configurable 10 Gigabit XFP ports used one Span port and one Monitor port

32

*** Confidential - DO NOT Distribute ***

Image 36

Contents Smart Filtering Appliance Trademarks and Copyrights Contents Appendix a Appendix BAppendix C Filter parametersChapter Introduction Key Features Ease of UseMonitor port Filtering Passive, Secure TechnologyAbout this Guide DescriptionDirector Architecture Director internal architectureUSB port Director ManagementTypical Application Network LinksMonitoring Tools IBypass Switch Method In-line Monitoring of 10 Gigabit LinksExternal Network Tap method Power LEDs Director Front PanelMonitor Port LEDs DNM / Network Port LEDsDirector Rear Panel XFPChapter Installing Director Plan the Installation Unpack and Inspect the Director deviceInstall Director Network Modules Install SFP and XFP Monitor port ModulesRack Mount the Director device Connect Power to Director Connect the local CLI InterfaceConnect the remote CLI Interface Baud Data bits No parity 1 stop bit No flow controlTip To connect the CLI for remote use over the Management portLog into the CLI To log into the CLIConfigure Director using the CLI Change Director User Name and PasswordTo change the user name and password To change the port mode Assign a New Manager IP AddressTo assign a new Manager IP address to Director Change Port ModesSave and Load Director Configurations Set the Current Date and TimeUsing the CLI Help Command To view CLI help informationUsing the CLI Command History Buffer Current config fileConnect Span Ports to Director To connect a Span portConnect Director With In-line Network Links To connect an in-line network linkConfigure a Matrix Switch connection in Director Check the InstallationConnect Monitoring Tools to Director Chapter Configuring Filters Using the CLI SyntaxEnter filter commit. The switch connection is activated Copy Traffic From Any Network Port to Any Monitor PortRegenerate Traffic to Any Set of Monitor Ports Lter add inports=n1.1 action=redir redirports=m.3-m.5Create Filters To create a filter that selects IPv4 packets by protocolCreate Complex Filters Logical and filter connectionView filters UDPWork with configurable 10 Gigabit ports Configurable 10 Gigabit XFP ports used as Network portsNetwork Port 11 XFP Port Understand filter interactions CAMFlow diagram now looks as follows Exclusive filters N1.1 ipproto=UDP action=drop N1.1 m.1To change the Director filter configuration Understand pending and active filtersEnter filter list to view the pending filter list User interactions Filter capacityDaisy-chaining Multiple Director Chassis Appendix a Director Specifications Specifications, chassisSpecifications, DNM EnvironmentalCertifications Available ModelsAppendix B Command Line Interface Command Sub-Command Parameters Example and descriptionCommand may include Filter add and filter ins commandsFilter add ipv6=n inports=n1.1-n1.3 ip Src=10.1.1.1 action=dropLoad myconfiguration-1 Filter listFilter running Filter syncSave myconfiguration-1 Show myconfiguration-1Passwd PingSysip commit Sysip ipaddr=192.168.1.2 netmask=255.255.0.0Sysip show TimeThis This command is only available at root level Command User showUser add name=bob pw=bob-pw priv=3 Is onlyFilter parameters Director Filter Parameters Qual Value Example DescriptionAppendix C Protocol Numbers Num Keyword ProtocolMobile L2TP Limitations on Warranty and Liability By Net Optics, Inc. All Rights Reserved