GigaVUE-420. User s Guide. Software Version 4.0

Transcription

1 GigaVUE-420 User s Guide Software Version 4.0

2 COPYRIGHT Gigamon Systems LLC. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of Gigamon Systems, LLC. TRADEMARK ATTRIBUTIONS Gigamon, Gigamon Systems, GigaVUE-420, and GigaVUE-MP are registered trademarks or trademarks of Gigamon Systems, LLC. All other registered and unregistered trademarks herein are the sole property of their respective owners.

3 Contents About This Guide Audience of this Guide How To Use This Guide Conventions Used in this Guide Product Naming Conventions GigaVUE-420 Models Other Sources of Information Contacting Customer Support Contacting Sales Chapter 1 Introducing GigaVUE GigaVUE-420 Overview GigaVUE-420 Features and Benefits GigaVUE-420 Chassis GigaVUE-420 Chassis Front View (Copper and Optical) GigaVUE-420 Chassis Rear View (AC and DC) GigaVUE-420 vs. the GigaVUE-MP Differences in Hardware Features GigaVUE-420 Front View GigaVUE-MP Front View GigaVUE-420 Rear View

4 GigaVUE-MP Rear View Differences in Software Features Differences in Maps and Filters Differences in Restrictions on Legacy Commands Differences in Stacking Commands for 10 Gb Ports Differences in Port-Stat Counters Differences in Mgmt Port New Features in GigaVUE-420 v System Management Features Filter and Map-Rule Features Traffic Distribution Features GigaVUE-420 Specifications GigaVUE-420 Physical Dimensions and Weight Power Requirements Environmental Specifications Chapter 2 Updating the GigaVUE Chapter 3 Getting Started with GigaVUE-420: A Roadmap. 47 First Steps Getting Connected and into the CLI Next Steps Chapter 4 Rack-Mounting the GigaVUE Unpacking GigaVUE Rack-Mounting the GigaVUE Safety Precautions Rack Mounting Hardware Four-Point Mounting in Four-Post Racks Center-Mounting in Two-Post Racks Chapter 5 Connecting the GigaVUE Basic GigaVUE-420 Connections Connecting -48 V DC Power Supplies GigaVUE-420 Modules GigaMGMT Four-Port Base Module GigaPORT Module GigaPORT Port Numbering Contents

5 GigaTAP-Sx/GigaTAP-Lx/GigaTAP-Zx Modules GigaTAP-Tx Module Passive Mode vs. Active Mode Configuring Tap Connections GigaLINK Modules (CU and XR) Using Modules Best Practices Traffic Distribution and Replacing Modules Chapter 6 Getting Started in the Command Line Interface.. 79 Establishing a Configuration Session with GigaVUE Local Connections to the Console Port using the Console Cable Remote Connections to the Mgmt Port Configuring the Mgmt Port s Network Settings SSH2 vs. Telnet Command Line Basics The CLI Prompt Getting Help in the Command Line Interface Command Line Syntax Entering Commands Command Structure The Basic Commands Completing the Initial GigaVUE-420 Setup Initial User Account Configuration (Optional) Configuring the GigaVUE-420 Name and Date Configuring GigaVUE-420 Time Options Setting Time Manually Setting Time from an SNTP Server Using Automatic Daylight Savings Time Adjustments Using a Custom Login Banner Saving Changes Chapter 7 Stacking GigaVUE-420 Boxes About Cross-Box Configurations About GigaVUE Gb Stacking Ports Creating Cross-Box Stacks: A Roadmap Stacking Rules Planning the Stack Identifying Requirements Contents 5

6 Create the Stack Map Create the Configuration Plans Configuring a Box s Stacking Information Assigning Box IDs: config system bid Designating Stacking Ports: config port-type Specifying Neighbor Boxes: config system x1_bid/x2_bid Sample Commands Configuring Cable Lengths (GigaLINK-CU Stacking Ports) Activating Stacking Ports: config system active_link Stack Examples: CLI Commands Example: Two-Box Cross-Box Stack Example: Cross-Box Stack with Four Systems Making Physical Connections Verifying a Cross-Box Stack s Connectivity Check the show diag Output Set Up Cross-Box Connections Configuring Cross-Box Packet Distribution Troubleshooting Cross-Box Stacks Making Changes to an Existing Cross-Box Stack Adding a Box to the Edge of a Stack Remove a Box from the Edge of a Stack Adding a Box to the Middle of a Stack Disconnect a Box in the Middle of a Stack Power Loss Considerations for Cross-Box Stacks Power Loss on Box in the Middle of a Stack Power Loss and Power Restore to the Entire Stack Chapter 8 Configuring GigaVUE-420 Security Options About GigaVUE-420 Security Configuring Users and Passwords Examples Changing Passwords Maximum Simultaneous Sessions Configuring Lock Levels and Port Ownership Syntax for the config system lock-level Command Syntax for the config port-owner Command Examples Contents

7 Configuring Authentication (AAA) Authentication Options Syntax for the config system aaa Command Examples Using GigaVUE-420 with an External Authentication Server Specifying TACACS+ Servers in GigaVUE Specifying RADIUS Servers in GigaVUE Setting up GigaVUE-420 Users in an External Authentication Server Differences in Commands for External and Local Users Chapter 9 Using SNMP Configuring SNMP Traps Adding a Destination for SNMP Traps Example Adding SNMP Trap Destinations Enabling GigaVUE-420 Events for SNMP Traps Example All Trap Events Enabled Receiving Traps Enabling GigaVUE-420 s SNMP Server Chapter 10 Using Configuration Files What s Saved In a Configuration File Saving a Configuration File Viewing the Contents of a Configuration File Storing Configuration Files on a TFTP Server Uploading a Configuration File to a TFP Server Downloading a Configuration File from a TFTP Server Applying Configuration Files Applying a Configuration File from Flash Setting a Configuration File to Boot Next Restoring Configuration Files in a Cross-Box Stack Chapter 11 Configuring Logging Configuring Logging A Roadmap Specifying Which Events Are Logged About syslog.log Contents 7

8 Specifying an External Syslog Server Packet Format for Syslog Output Viewing Log Files Uploading Log Files for Troubleshooting Example Saving a Log File to a Spreadsheet Chapter 12 Introducing Packet Distribution About Packet Distribution About Network and Tool Ports Designating a Port s port-type Packet Distribution Illustrated About Single-Box and Cross-Box Distribution Cross-Box Commands: Enter All Commands on All Boxes Getting Started with Packet Distribution Example Designating and Connecting Tool Ports Connecting vs. Mapping The Differences About Connections Connection Examples About Maps Map Example Combining Pass-All with Connections and Maps Sharing Network and Tool Ports Chapter 13 Connections, Filters, and Pass-Alls Cross-Box Config: Enter Commands on All Boxes Connecting Network Ports to Tool Ports Connection Syntax Showing Connections Deleting Connections Using Filters with Connections Using Filters Procedure Pre-Filters vs. Post-Filters Example: When to Use Pre-Filters and Post-Filters IPv4/IPv6 and Filters Config Filter Syntax Setting Filters for TCP Control Bits Using Bit Count Subnet Netmasks Contents

9 Combining Filters and Filter Logic Examples of Filter Logic Working with User-Defined Pattern Match Filters User-Defined Pattern Match Syntax User-Defined Pattern Match Rules User-Defined Pattern Match Examples Mixing Allow and Deny Filters Showing Filters Deleting Filters Filter Examples Filtering on RTP Traffic MAC Address Filter Examples Example 1 Deny Filter Example 2 Allow Filter Example 3 Deny Filter Example 4 Denying Odd-Numbered MAC Addresses Example 5 Allowing Odd-Numbered MAC Addresses Using the Pass-All Command Syntax for config pass-all Rules for config pass-all Maximum Number of Pass-All Destinations Pass-All Matrix Filters and the config pass-all Command Examples for config pass-all Illustration of Pass-Alls in the Show Connect Screen Chapter 14 Working with Maps (Single-Box and Cross-Box) Cross-Box Config: Enter Commands on All Boxes Mapping Network Ports to Tool Ports Creating Maps: config map/config xbmap Single-Tool Maps vs. Multi-Tool Maps Syntax for the config map / config xbmap Commands Creating Map-Rules: config map-rule How GigaVUE-420 Processes Map-Rules Syntax for the config map-rule Command Binding Maps to Ports: config mapping / config xbmapping Contents 9

10 Syntax for config mapping /config xbmapping Showing Maps Changing Maps Adding Map-Rules to Single-Box/Cross-Box Maps Deleting a Map-Rule from Single-Box/Cross-Box Maps Deleting a Single-Box Mapping Deleting a Single-Box/Cross-Box Map Combining Pass-All with Maps Map-Rule Priority and Guidelines Map Creation Guidelines Map Examples Map Example Selectively Forwarding VLAN Ranges What this Map Will Do Commands to Create this Map Showing the Map in the CLI Map Illustration Map Example Single-Tool vs. Multi-Tool Single-Tool Map Multi-Tool Map Command Line Reference config commands config connect config file config filter command config map command config map-rule config mapping command config pass-all command config password command config port-alias command config port-filter command config port-owner command config port-pair command config port-pair and GigaTAP-Tx config port-params commands config port-type command config rad_server command Contents

11 config restore command config save command config snmp_server commands config snmp_trap commands config sntp_server command config syslog_server config system commands config tac_server command config uda command config user command config xbconnect command config xbmap command config xbmapping command config xbport-filter command delete commands exit command help command history command install commands logout command reset commands show commands upload command CLI Parameter Limits Lock-Level Reference About Lock-Levels and Port Ownership Abbreviations in this Section Login Command Show Commands Delete Commands Config Commands Install Command Reset Commands Contents 11

12 Port Statistics Counters Console Cable Pinouts DB9 Pinouts Figure RJ45 Pinouts Figure DB9 to RJ45 Pinouts Table Index Contents

13 About This Guide This guide describes how to install, connect, configure, and operate the GigaVUE-420 data access switch. Audience of this Guide This guide assumes that you are familiar with basic networking concepts and are comfortable configuring network equipment such as switches and routers in a command-line interface. 13

14 How To Use This Guide This User s Guide is divided into several main sections. Each section corresponds to a different stage of GigaVUE-420 operations, as summarized below. Section Welcome to GigaVUE These chapters introduce you to the GigaVUE-420 and orient GigaVUE-MP customers to the new product. They also describe how to upgrade the system once new versions are available. Initial Configuration These chapters describe how to perform the initial system configuration of the GigaVUE After working through these chapters, your unit will be up and running. You will most likely only need to read these chapters once. Configuring Packet Distribution This chapter describes the core features of GigaVUE how to configure the distribution of traffic arriving at network ports to destination tool ports. You will likely return to these chapters frequently as you use the product. Chapter Chapter 1, Introducing GigaVUE Chapter 2, Updating the GigaVUE-420 Chapter 3, Getting Started with GigaVUE-420: A Roadmap Chapter 4, Rack-Mounting the GigaVUE-420 Chapter 5, Connecting the GigaVUE-420 Chapter 6, Getting Started in the Command Line Interface Chapter 7, Stacking GigaVUE-420 Boxes Chapter 8, Configuring GigaVUE-420 Security Options Chapter 9, Using SNMP Chapter 10, Using Configuration Files Chapter 11, Configuring Logging Chapter 12, Introducing Packet Distribution Chapter 13, Connections, Filters, and Pass-Alls Chapter 14, Working with Maps (Single-Box and Cross-Box) 14

15 Section Appendixes These chapters provide useful reference information. You will likely return to these chapters as you have specific questions about GigaVUE-420 features. Chapter Appendix A, Command Line Reference Appendix B, CLI Parameter Limits Appendix C, Lock-Level Reference Appendix D, Port Statistics Counters Appendix E, Console Cable Pinouts About This Guide 15

16 Conventions Used in this Guide The following notational conventions are used in this guide. Bold face Bold is used for GigaVUE-420 CLI commands within text. For example: Bold Sans-Serif Italic Use the config connect command to connect a network port to a tool port. Bold, sans-serif font is used for GigaVUE-420 CLI commands when standing by themselves (for example, where the only text on a line is a CLI command, or within a table cell). Italic font is used in two different ways: - the first time a new term or concept is introduced, - in cross references to headings or chapters. For example: Product Naming Conventions See About Tool Ports on page 44. This guide refers to GigaVUE-420 components by the names used in the command-line reference. Occasionally, these names may be slightly different than those used by Gigamon sales literature. The following table shows how the names used in this manual correspond to those used by sales literature. Engineering Product Name Sales Product Name Description GigaLINK-CU GigaLINK-CU Optional 10 Gb copper interface for stacking, network or tool port use. 16

17 Engineering Product Name GigaLINK-XR Sales Product Name GigaLINK-SR GigaLINK-LR GigaLINK-ER Description Optional 10 Gb optical Short Range interface for stacking, network or tool port use. Optional 10 Gb optical Long Range interface for stacking, network or tool port use. Optional 10 Gb optical Extended Range interface for stacking, network or tool port use. GigaTAP-Tx GigaTAP-Tx Dual Copper Tap Module GigaTAP-Sx GigaTAP-Sx Dual Multi Mode 850 nm Optical Tap Module GigaTAP-Lx GigaTAP-Lx Dual Single Mode 1310 nm Optical Tap Module GigaTAP-Zx GigaTAP-Zx Dual Single Mode 1550 Optical Tap Module GigaPORT GigaPORT 4 port Copper/Optical SFP Expansion Module GigaVUE-420 Models There are four basic GigaVUE-420 models available: Sales Product Name Description GVS-421 Copper GigaMGMT Module AC Power GVS-422 Optical GigaMGMT Module AC Power GVS-423 Copper GigaMGMT Module DC Power GVS-424 Optical GigaMGMT Module DC Power About This Guide 17

18 Other Sources of Information GigaVUE-420 provides other sources of information that can help you get up to speed with the equipment, including an online help system. There are several ways to use online help: Whenever you are working with the command-line interface, you can type either? or help to see basic description of GigaVUE-420 commands. Command Completion. If you have partially typed a command, you can press Tab and the CLI will attempt to complete the command for you based on what s been entered so far. If it is unable to complete the command, the CLI will simply redraw the line with the cursor at the end of the line. Word Help. When you are typing a command and are not sure how to spell the word you are working on, type a? mark immediately following the partially-typed word (for example, config x?). The CLI will show you a list of all possible words using the word entered so far. Command Help. When you are typing a command and have finished a word but are not sure what the rest of the syntax is, you can type a space after the word and then a?. The CLI will list all possible commands using the words you have entered so far. For example, if you type config system?, the CLI will return all possible config system commands. 18

19 Contacting Customer Support Contact Gigamon Systems LLC s Support department with product questions using the information in Table i. The Customer Service department s hours of operation are from 7:30 AM to 5:30 PM Pacific Time, Monday through Friday. Table i: Customer Support Contact Information Telephone (408) Fax (408) Web Mail support@gigamon.com South Hillview Drive Milpitas, CA About This Guide 19

20 Contacting Sales Table ii shows how to reach the Sales Department at Gigamon Systems. Table ii: Sales Contact Information Telephone (408) Sales 20

21 Chapter 1 Introducing GigaVUE This section introduces the GigaVUE data access switch, describes its features and functions, and provides an orientation to the physical layout of the box. It includes the following major sections: GigaVUE-420 Overview on page 21 GigaVUE-420 Chassis on page 25 GigaVUE-420 vs. the GigaVUE-MP on page 28 New Features in GigaVUE-420 v4.0 on page 37 GigaVUE-420 Specifications on page 42 GigaVUE-420 Overview GigaVUE-420 is an out-of-band data access switch for enterprise networks. It provides dynamic connectivity for 10 Gb and 1 Gb Ethernet network monitor, compliance, and archival tools, including: Intrusion Detection Systems Protocol Analyzers VoIP Analyzers 21

22 Application Performance Monitors Stream-to-Disk Data Recorders GigaVUE-420 Features and Benefits GigaVUE-420 unobtrusively acquires and maps relevant traffic from multiple data sources to multiple tools, including the following common scenarios: Filtering and Mapping (Any-to-Any) Aggregation (Many-to-Any) Multicasting (Any-to-Many) Direct traffic from any network port to any tool port. Use filters to focus on particular traffic types. Use map-rules to send different types of traffic to different tool ports. Aggregate traffic from multiple links to deliver a big pipe view to any tool. Merge Tx and Rx traffic into a single tool interface. Multiplex filtered or unfiltered, singular or aggregated traffic to multiple tools. Figure 1-1 summarizes these features: 22 Chapter 1

23 Figure 1-1: GigaVUE-420 Features Introducing GigaVUE

24 The table below lists GigaVUE-420 s major features and benefits. Benefit Share SPAN Ports Aggregate Links Filter Packets Remote Management Fault Tolerant Taps Descriptions Connect a SPAN port to a network port on the GigaVUE-420. Then, use GigaVUE-420 s command-line interface to multicast that traffic to multiple different tool ports, giving multiple different tools access to the same data. You can apply different filters to individual tool ports to ensure that each tool sees the data that best suits its individual strengths. Send the data from multiple different network ports to one or more tool ports, allowing you to combine traffic from multiple access points into a single stream for analysis. Set both pre-filters and post-filters, allowing or denying traffic that meets specified criteria, including IP address and port ranges, VLAN IDs, protocols, and so on. Pre-filters are filters applied on a network port. Post-filters are filters applied on a tool port. Configure GigaVUE-420 s operations from an intuitive command-line interface: Local access over the serial Console port. Remote network access using Telnet or SSH2 over the 10/100/1000 Ethernet Management port. Secure access to the CLI, either through local authentication or optional RADIUS/TACACS+ support. GigaTAP modules protect production links at all times (for copper, relay closes if power fails; for fiber, optical link maintains connection). Modularized Design Install once and never touch any links again. You can move, add, and reconfigure tools at will without affecting production networks. 10 Gb Support Support for up to four separate 10 Gb ports, allowing for a full tap of both sides of two full-duplex 10 Gb links. Aggregate multiple 1 Gb network ports to 10 Gb tool port. Split out 10 Gb network port to multiple 1 Gb tool ports. 10 Gb ports in x1/x2 slots can be used for stacking multiple GigaVUE-420 systems. 24 Chapter 1