Purview HW Appliance with seperate Management Port, Mirror Port and a GRE Port

[Andre_Brits_Kan]

Hi Community

We are in the process of deploying a Purview Hardware appliance in a datacentre that utilizes two S8 chassis as the core. The appliance will be located in the same rack as the Chassis.

We have the two port 10Gbe Addiotional NIC installed in the Purview HW Applaince.

When running the purview setup wizard we have a few options to deploy Purview, but I am looking for a hybrid of the GRE and Mirror port.

I want to use direct port mirroring to the 10Gbe ports from the Chassis and then have another dedicated 1Gbe port for remote GRE mirroring from remote SSA switches.
And finally a dedicated 1Gbe out of band management.

My idea is to connect the Purview HW Appliance as follows:

• 1Gbe Port for out of band Management
• 10Gbe Port for direct Port mirror from first S8 Chassis
• 10Gbe Port for direct Port mirror from second S8 Chassis
• 1Gbe Port for remote GRE mirroring from remote SSA swicthes

From the wizard I select the option with will give me a dedicated Management port and the two Seperate dedicated 10Gbe mirror ports.
How do I add the seperate GRE 1Gbe port afterwards?
Whatdoes the config look like in the interface file:
etc/network/interface

Thx

[Dudley__Jeff]

Hi Andre

This is something to try. The appidconfig.xml may get over written on an enforce...

Run the dnetconfig script and do a gre installation for your remote site. Management would need to be in eth0.

Hand edit the /opt/appid/conf/appidconfig.xml to add two interfaces for mirror (eth4 and eth5 for ex.)
















Hand edit the /etc/network/interface file

# The monitor network interface: eth4

auto eth4

iface eth4 inet manual

ifaceup ifconfig $IFACE 0.0.0.0 up

up ip link set $IFACE promisc on

down ip link set $IFACE promisc off

down ifconfig $IFACE down



# The monitor network interface: eth5

auto eth5

iface eth5 inet manual

ifaceup ifconfig $IFACE 0.0.0.0 up

up ip link set $IFACE promisc on

down ip link set $IFACE promisc off

down ifconfig $IFACE down



I haven't tested this but it is something to contemplate.

-jeff

[Andre_Brits_Kan]

Thx Jeff

[Dudley__Jeff]

Hi Andre

This is interesting. My first guess is it would be easier to run the current option of dual interface with a tunnel then try to manipulate the two other interfaces to move into promiscuous mode and receive the mirrors. The dnetconfig script is used during the installation and reconfiguration but is the interface file that is read during start up. Please allow me some time to look into this a bit more.

-jeff