Net-optics Director User Manual

User GuideData Monitoring SwitchDoc. PUBDIRU Rev. 3, 11/08www.netoptics.com12BAA BIDSAnalyzer 2Analyzer 1RMON 1 RMON 2Forensic

Director6Typical ApplicationThe following diagram shows a typical application using Director to implement a comprehensive, consolidated monitoring inf

Director7In this installation, Director has ten additional Span ports and one in-line link that are available for expansion, when more links need to b

Director8In-line Monitoring of 10 Gigabit Links To create an in-line link on a 10 Gigabit network segment, use an external network Tap. Figure 4 shows

Director9Director Front PanelThe features of the Director front panel are shown in the following diagram.www.netoptics.com™Director12BA16273851049A BI

Director10Director Rear PanelThe features of the Director rear panel are shown in the following diagram.ManagementPortRS232 INPUT OUTPUTSERIALNUMBERXX

Director11Chapter 2 Installing DirectorThis chapter describes how to install and connect Director devices. The procedure for installing Director follo

Director12Plan the InstallationBefore you begin the installation of your Director device, determine the following:IP address of the Director device, o

Director13Install Director Network ModulesIf the Director Network Modules (DNMs) are not already installed when you receive the unit, install them by

Director14Connect Power to DirectorFor power fault protection, Director is equipped with redundant power connections. If one power source becomes unav

Director15Launch terminal emulation software and set communication parameters to:2. 115200 baud8 data bits No parity1 stop bitNoowcontrolThe Net Op

PLEASE READ THESE LEGAL NOTICES CAREFULLY.By using a Net Optics Director device you agree to the terms and conditions of usage set forth by Net Optics

Director16Enter 3. customer to log into the shell. The shell asks for the password.login as: [email protected]'s password:Shell login

Director17Congure Director using the CLIYou should be logged into the Director CLI. The factory-set default values for Director are:Username: • admi

Director18Assign a New Director IP Address, Netmask, and Gateway IP AddressIf you are using the local RS-232 serial interface to access the CLI, then

Director19Set the Current Date and TimeDirector maintains a time-of-day clock which is used to record the time of trafc peak utilization events. Time

Director20Using the CLI Help CommandTo view CLI help information:Enter 1. Help at the "Net Optics:" prompt. The list of help topics is disp

Director21Using the CLI Command History BufferYou can save a lot of typing by using the command history buffer maintained by the CLI. The up- and down

Director22Connect Span Ports to DirectorTo connect Director to the network using Span ports, be sure that at least one of your DNMs is a Span model. U

Director23Connect Director With In-line Network LinksTo connect Director to the network using an in-line installation, be sure that at least one of yo

Director24www.netoptics.com™Director12BA16273851049A BIn-Line10/100/1000101001000LINKACTIn-LineGigaBit1 2 3 4 5 6 7 8 9 10 11 12A B A B A BIn-line Net

Director25Chapter 3 Conguring Filters Using the CLIThis chapter describes how to use the CLI to determine which monitoring tools are connected to whi

DirectorContentsChapter 1 IntroductionKey Features ...2About this Guide ...

Director26Copy Trafc From Any Network Port to Any Monitor PortDirector can be used like a Matrix Switch to direct trafc from any Network port to any

Director27Network Port 1Network Port 2Monitor Port 3+lter add in_ports=n1.1,n1.2 action=redir redir_ports=m.3Trafc aggregationFigure 23: Regenerate

Director28Create FiltersFilters process a trafc stream by selecting packets based on criteria in the packet header. A lter is dened using a ltera

Director29ip_src, ip_src_mask IPv4 source address and mask• ip_dst, ip_dst_mask IPv4 destination address and mask• ip6_src, ip6_src_mask IPv6 sourc

Director30Monitor Port 1Network Port 5lter add in_ports=n1.5 ip_proto=6 action=redir redir_ports=m.1lter add in_ports=n1.5 ip_proto=17 action=redir

Director31Work with congurable 10 Gigabit portsThe two congurable 10 Gigabit XFP ports on the front panel are designated t1.1 (on the left) and t1.2

Director32lter add in_ports=n1.11 action=redir redir_ports=t1.2lter add in_ports=n1.1-n1.4 action=redir redir_ports=t1.1XFP Port 1.2XFP Port 1.1Netw

Director33Understand lter interactionsIt is important to understand that Director uses Content Addressable Memory (CAM) technology to implement lter

Director34Have we achieved our goal of sending all the TCP trafc to Monitor Port 2? Not quite. What happens when an TCP packet arrives from 192.186.1

Director35Note: __________________________________________________________________________________________________Instead of lteradd, you can use a

DirectorChapter 3 Conguring Filters Using the CLISyntax ... 25Copy Traf

Director36Understand pending and active ltersTo understand the actions of lter commands such as ltercommit,lterdiscard,andlterdelete, it is

Director37Enter 1. lterrunningto view the currently active lters in the CAM. Net Optics> lter runningFilter #1src_mac=00:00:00:00:00:00 dst_m

Director38Enter 4. lterlistto view the pending lter list. Net Optics> lter listFilter #1src_mac=00:00:00:00:00:00 dst_mac=00:00:00:00:00:00

Director39Be aware of these similar pairs of commands:lterdiscard• clears the pending lter list, while lterclear clears the CAMlterlist• sh

Director40Chapter 4 Daisy-chaining Multiple Director ChassisThis chapter describes how to expand the capacity of Director by daisy-chaining multiple D

Director41Appendix A Director SpecicationsSpecications, chassisMechanicalDimensions: 1.6” high x 15.65” deep x 17” wideMounting: Surface or 19” rack

Director42Specications, DNMCopper Interface(12) RJ45 Network Ports 10/100/1000Mbps(6) In-line links or (12) Span ports depending on model22-24 AWG un

Director43Appendix B Command Line InterfaceTip! ___________________________________________________________________________________________________The

Director44Command Sub-Command Arguments Example and description! [#] (a number) !3Executes a command from the CLI command history buffer (see history

Director45Command Sub-Command Arguments Example and descriptionlter (continued)commit lter commitActivates pending lters previously dened using l

Director1Chapter 1 IntroductionNet Optics Director is a key component for building a comprehensive, consolidated monitoring infrastructure for both ne

Director46Command Sub-Command Arguments Example and descriptionimage < 1 | 2 > image 2Arguments: Valid values are 1 and 2Chooses which system im

Director47Command Sub-Command Arguments Example and descriptionquit quitExits the CLI shell (same as exit and logout)Note: To maintain system security

Director48Command Sub-Command Arguments Example and descriptiontime <time> time 13:02:00Arguments: <time> is hh:mm:ssSets the system tim

Director49Filter parametersSwitches and lters are dened using the lteraddandlterinscommands. The lteradd command syntax is:lter ipv6=y add

Director50 Director Filter Parameters <qual> <value> Example Descriptionip_proto Number* ip_proto=6 Layer 4 IP protocolip_src IPv4 address

Director51Appendix C Protocol NumbersThe ofcial Assigned Internet Protocol Numbers list is maintained by the Internet Assigned Numbers Authority and

Director52Num Keyword Protocol55 MOBILE IP Mobility56 TLSP Transport Layer Security Protocol using Kryptonet key management57 SKIP SKIP58 IPv6-ICMPICM

Director53Num Keyword Protocol115 L2TP Layer Two Tunneling Protocol116 DDX D-II Data Exchange (DDX)117 IATP Interactive Agent Transfer Protocol118 STP

Director54Limitations on Warranty and LiabilityNet Optics offers a limited warranty for all its products. IN NO EVENT SHALL NET OPTICS, INC. BE LIABLE

© 2008 by Net Optics, Inc. All Rights Reserved.www.netoptics.com

Director2Key FeaturesEase of UseTap, aggregation, regeneration, matrix switch, and lter functions in a single device• 19-inch rack frame, 1U high• Fr

Director3About this GuidePlease read this entire guide before installing Director. This guide applies to the following part numbers:Chassis Part Numbe

Director4Director ArchitectureThe following diagram shows a schematic view of the architecture of the Director device shown as a Matrix Switch with l

Director5The inputs are divided into three groups: two DNMs plus the 10GbE ports. In-line DNM models support 6 in-line links, while Span DNM models su