Purview appliance with more interfaces on different subnets

[Antonio_Opromol]

Hi, is possible to deploy the Pureview appliance with more interfaces on different subnets or under a NAT device respect the Pureview Sensor? In my scenario I've got a NAT device between my internal lan where I've got the ExtremeControl and the ExtremeAnalytics appliance (virtual) and the coreflow2 switch is on another subnet and I reach this throught the nat device. As test, I've natted 1-1 the Extreme Analytics Appliance and I've used the NAT IP address as the remote gre endpoint on the coreflow2 switch. In this test I see in the external interface of the nat\router the GRE packets, but nothing reach my internal Pureview appliance. How is possible to use Pureview in a deployment like that? Thanks

[Antonio_Opromol]

Hi Matthew, I've removed the wrong default gateway entry in the SSA configuration: ip route 0.0.0.0/0 interface vlan.0.100 1 and now the netflow packets udp port 2055 arrive to the purview engine also on the external interface of the Purview VMs.. Regards, Antonio

[Antonio_Opromol]

Hi Matthew, yes, my mirror port is ge.1.2, on the schema is writted an old interface...
Yes, the exported packets increase...

Then I've disabled and re-enabled the netflow cache, but seems that netflow udp packets on port destination 2055 don't reach the purview appliance....

[Matthew_Hum1]

if you do successive show netflow statistics do you see the exported packets increase?
you can also try disabling the cache and re-enabling it.

Also your diagram says tg.1.2 is your mirror port but the config has ge.1.2...?

[Antonio_Opromol]

In my case the gre tunnel is between SSA ip address 192.168.1.227 and the ip 172.29.151.102 that is the value assigned to the secondary NIC of my Purview appliance attached outside the NAT device, instead eth0 ip address is 192.168.10.102 and this interface is attached to a virtualswitch "inside" under the nat device. So now the gre tunnes is the red line in the picture below of the new schema