Monitoring Tools | Net Optics none instruction

Director

In this installation, Director has ten additional Span ports and one in-line link that are available for expansion, when more links need to be monitored.

Monitoring Tools

Still referring to Figure 2, six monitoring tools are connected to Director. They include protocol and performance analyzers, RMON probes, and an intrusion detection system (IDS). Any of the monitoring tools can be used to observe any of the connected network links, and the connections can be switched easily, using the Director CLI, without ever moving a cable or touching the tools. A set of possible data flows is indicated by the colored circles on the links in the diagram.

One of the network monitoring tools is capable of handling more than 1 Gbps, so it is attached to a 10 Gigabit XFP port. Through this port, the tool can be sent aggregated traffic up to 10 Gbps. For example, the colored circles in the diagram indicate that traffic from four links is being aggregated and sent to this port.

Four streams of traffic are also being aggregated to the red monitoring tool on the upper left. Since this is a 1 Gbps Monitor port, aggregated data up to 1 Gbps can be sent to the red tool. If the aggregated traffic exceeds 1 Gbps, packets will be dropped. To avoid dropping packets, filters should be configured to reduce the aggregated traffic load to 1 Gbps or less.

The two green RMON monitoring tools at the bottom are the same type of tool. Two identical tools provide the capabil- ity of monitoring a greater amount of data than a single tool can handle. Another reason to use identical monitoring tools is to provide redundancy in case one of the tools fails. In addition, Director can be configured to send different types of traffic to each tool, for example, all the TCP traffic to one tool, and the UDP traffic to the other.

7

*** Confidential - DO NOT Distribute ***

Image 11

Net Optics none manual Monitoring Tools

Contents

Smart Filtering Appliance Trademarks and Copyrights Contents Filter parameters Appendix aAppendix B Appendix C Chapter Introduction Passive, Secure Technology Key FeaturesEase of Use Monitor port Filtering Description About this Guide Director internal architecture Director Architecture Director Management USB port Network Links Typical Application Monitoring Tools External Network Tap method IBypass Switch MethodIn-line Monitoring of 10 Gigabit Links DNM / Network Port LEDs Power LEDsDirector Front Panel Monitor Port LEDs XFP Director Rear Panel Chapter Installing Director Unpack and Inspect the Director device Plan the Installation Rack Mount the Director device Install Director Network ModulesInstall SFP and XFP Monitor port Modules Connect the local CLI Interface Connect Power to Director To connect the CLI for remote use over the Management port Connect the remote CLI InterfaceBaud Data bits No parity 1 stop bit No flow control Tip To log into the CLI Log into the CLI To change the user name and password Configure Director using the CLIChange Director User Name and Password Change Port Modes To change the port modeAssign a New Manager IP Address To assign a new Manager IP address to Director Set the Current Date and Time Save and Load Director Configurations To view CLI help information Using the CLI Help Command Current config file Using the CLI Command History Buffer To connect a Span port Connect Span Ports to Director To connect an in-line network link Connect Director With In-line Network Links Connect Monitoring Tools to Director Configure a Matrix Switch connection in DirectorCheck the Installation Syntax Chapter Configuring Filters Using the CLI Copy Traffic From Any Network Port to Any Monitor Port Enter filter commit. The switch connection is activated Lter add inports=n1.1 action=redir redirports=m.3-m.5 Regenerate Traffic to Any Set of Monitor Ports To create a filter that selects IPv4 packets by protocol Create Filters Logical and filter connection Create Complex Filters UDP View filters Configurable 10 Gigabit XFP ports used as Network ports Work with configurable 10 Gigabit ports Network Port 11 XFP Port CAM Understand filter interactions Flow diagram now looks as follows N1.1 ipproto=UDP action=drop N1.1 m.1 Exclusive filters Understand pending and active filters To change the Director filter configuration Enter filter list to view the pending filter list Filter capacity User interactions Daisy-chaining Multiple Director Chassis Specifications, chassis Appendix a Director Specifications Available Models Specifications, DNMEnvironmental Certifications Command Sub-Command Parameters Example and description Appendix B Command Line Interface Src=10.1.1.1 action=drop Command may includeFilter add and filter ins commands Filter add ipv6=n inports=n1.1-n1.3 ip Filter sync Load myconfiguration-1Filter list Filter running Ping Save myconfiguration-1Show myconfiguration-1 Passwd Time Sysip commitSysip ipaddr=192.168.1.2 netmask=255.255.0.0 Sysip show Is only This This command is only available at root level CommandUser show User add name=bob pw=bob-pw priv=3 Director Filter Parameters Qual Value Example Description Filter parameters Num Keyword Protocol Appendix C Protocol Numbers Mobile L2TP Limitations on Warranty and Liability By Net Optics, Inc. All Rights Reserved