Arista DCA-NDR-S1 User manual

Quick Start Guide
Awake Security Appliance
DCA-NDR-S1
DCA-NDR-S5
DCA-NDR-NB10
DCA-NDR-A5
Arista Networks
www.arista.com
DOC-05228-01

ii
© Copyright 2021 Arista Networks, Inc. The information contained herein is subject to change without notice. Arista Networks
and the Arista logo are trademarks of Arista Networks, Inc in the United States and other countries. Other product or service
names may be trademarks or service marks of others.
Headquarters
5453 Great America Parkway
Santa Clara, CA 95054
USA
[phone]
www.arista.com
Support
[phone]
[phone]
[email protected]
Sales
[phone]
[phone]
[email protected]

Contents
Contents
Chapter 1: Overview................................................................................1
1.1 Scope......................................................................................................................................1
1.2 Receiving and Inspecting the Equipment...............................................................................1
1.3 Installation Process.................................................................................................................1
1.4 Safety Information...................................................................................................................2
1.5 Obtaining Technical Assistance............................................................................................. 2
1.6 Specifications..........................................................................................................................3
Chapter 2: Preparation............................................................................5
2.1 Site Selection..........................................................................................................................5
2.2 Tools and Parts Required for Installation...............................................................................5
2.3 Electrostatic Discharge (ESD) Precautions............................................................................6
Chapter 3: Rack Mounting an Awake Security Appliance...................7
3.1 Installing 1RU Awake Security appliances.............................................................................7
3.2 Installing 2RU Awake Security appliances.............................................................................9
Chapter 4: Cabling the Appliance....................................................... 13
Chapter 5: Configuring the Awake Security Platform....................... 15
5.1 Connecting to the Admin CLI...............................................................................................15
5.2 Configuring the Appliance.................................................................................................... 15
5.2.1 Configuring the Management Interface.................................................................. 15
5.2.2 Configuring DNS.....................................................................................................16
5.2.3 Configuring NTP..................................................................................................... 16
5.2.4 Configuring Proxy................................................................................................... 16
5.2.5 Configuring IPMI / DRAC Interface.........................................................................16
5.3 Verifying the Configuration...................................................................................................17
Appendix A: Status Indicators.............................................................19
A.1 Control Panel Indicators.......................................................................................................19
A.2 Front Panel Status Indicators.............................................................................................. 20
A.3 Rear Panel Status Indicators...............................................................................................20
Appendix B: Parts List..........................................................................23
B.1 Cables...................................................................................................................................23
Appendix C: Front Panel...................................................................... 25
Appendix D: Rear Panel....................................................................... 27
iii

Appendix E: Regulatory Model Numbers........................................... 29
iv

Chapter 1
Overview
This guide is focused on the installation and basic configuration for the Awake Network Detection and
Response (NDR) products. Arista offers the Awake Network Security Platform through its subsidiary,
Awake Security. The AI based software platform operates on a physical appliance or a set of physical
and/or virtual appliances. The hardware can be purchased with a Stock Keeping Unit (SKU) having
the Data Center Automation (DCA) prefix in the format of DCA-NDR-XY, where X is A (All-in-One), NB
(Nucleus), or S (Sensor); and Y is a number indicating a maximum Gb/s rate (currently 1, 5, or 10).
Each of the appliance types have unique characteristics, so be sure to identify the correct appliance
(All-in-one, Nucleus, or Sensor) for the function before beginning the installation tasks.
1.1 Scope
This guide is intended for properly trained service personnel and technicians who need to install and
configure the Awake Security appliances with the following SKU format:
• DCA-NDR-S1, 1RU Sensor Appliance
• DCA-NDR-S5, 2RU Sensor Appliance
• DCA-NDR-NB10, 2RU Nucleus Appliance
• DCA-NDR-A5, 2RU All-in-One Appliance
Note: Only qualified personnel should install, service, or replace this equipment.
Seul le personnel qualifié doit installer, service, ou remplacer cet équipement.
1.2 Receiving and Inspecting the Equipment
Upon receiving the Awake Security appliance(s), inspect the shipping boxes and record any external
damage. Retain packing materials if you suspect that part of the shipment is damaged; the carrier may
need to inspect them.
If the boxes were not damaged in transit, unpack them carefully. Ensure that you do not discard any
accessories that may be packaged in the same box as the main unit.
Inspect the packing list and confirm that you received all listed items. Compare the packing list with
your purchase order. Appendix B provides a list of components included with the Awake Security
appliance.
1.3 Installation Process
The following tasks are required to install and use the Awake Security appliance:
1. Select and prepare the installation site (Section 2.1).
2. Assemble the installation tools (Section 2.2).
3. Attach the mounting brackets and install the Awake Security appliance in an equipment rack
(Chapter 3).
4. Connect the Awake Security appliance to the power source and network devices (Chapter 4).
1

5. Configure the Awake Security appliance (Chapter 5).
Note:
Class 1 Laser Product: This product has provisions to install Class 1 laser transceivers
which provide optical coupling to the communication network. Once a Class 1 laser product
is installed, the equipment is a Class 1 Laser Product (Appareil à Laser de Classe 1). The
customer is responsible for selecting and installing the Class 1 laser transceiver and for
insuring that the Class 1 AEL (Allowable Emission Limit) per EN/IEC 60825, CSA E60825-1,
and Code of Federal Regulations 21 CFR 1040 is not exceeded after the laser transceiver
have been installed. Do not install laser products whose class rating is greater than 1. Refer
to all safety instructions that accompanied the transceiver prior to installation. Only Class 1
laser devices, certified for use in the country of installation by the cognizant agency are to be
utilized in this product.
Produit Laser de classe 1: Ce produit a des dispositions pour installer des émetteurs-
récepteurs de laser de classe 1 qui offre de couplage au réseau de communication
optique.Une fois un produit laser de classe 1 est installé, l'équipement est un produit Laser
de classe 1 (Appareil à Laser de Classe 1).Le client est responsable pour sélectionner et
installer l'émetteur/récepteur de laser de classe 1 et pour assurer que la classe 1 AEL (limite
d'émission admissible) par EN/IEC 6-825, CSA E60825-1, et Code des règlements fédéraux
21 CFR 1040 ne soit pas dépassée après avoir installé l'émetteur/récepteur de laser. Ne
pas installer des appareils à laser dont la cote de classe est supérieure à 1.Voir toutes
les consignes de sécurité qui ont accompagné l'émetteur-récepteur avant l'installation.
Seuls appareils laser de classe 1 certifiés pour une utilisation dans le pays d’installation
par l’organisme compétent doivent être utilisées dans ce produit.Ultimate disposal of this
product should be in accordance with all applicable laws and regulations.
Note:
Ultimate disposal of this product should be handled in accordance with all national laws and
regulations.
Aucune pièce réparable par l'utilisateur à l'intérieur. Confiez toute réparation à un technicien
qualifié.
1.4 Safety Information
Refer to the Arista Networks Compliance and Safety Guides document, translated into a number of
languages and available at the bottom of the page in the Hardware tab at:
https://www.arista.com/en/support/product-documentation
1.5 Obtaining Technical Assistance
Any customer, partner, reseller or distributor holding a valid Arista Service Contract can obtain
technical support in any of the following ways:
•Email: mailto:[email protected]. This is the easiest way to create a new service request. Include
a detailed description of the problem.
•Web: https://www.arista.com/en/support
A support case may be created through the support portal on our website. You may also download
the most current software and documentation, as well as view FAQs, Knowledge Base articles,
Security Advisories, and Field Notices.
•Phone: [phone] or [phone].
2

Overview
Note: No user serviceable parts inside. Refer all servicing to qualified service personnel.
Aucune pièce réparable par l'utilisateur à l'intérieur. Confiez toute réparation à un technicien
qualifié.
1.6 Specifications
Table 1: Awake Security appliance Specifications (RUs, Dimensions, and Weight)
Awake Security
appliance SKU Rack Units (RUs) Dimensions (W x H x D) Weight
DCA-NDR-S1 1 43.7 x 4.3 x 65.0 cm (17.2 x 1.7 x 25.6
in) 20.87 kg (46 lbs.)
DCA-NDR-S5 2 43.7 x 89.0 x 72.3 cm (17.2 x 3.5 x 28.5
in) 32.7 kg (72.0 lbs.)
DCA-NDR-NB10 2 43.7 x 89.0 x 72.3 cm (17.2 x 3.5 x 28.5
in) 32.7 kg (72.0 lbs.)
DCA-NDR-A5 2 43.7 x 89.0 x 72.3 cm (17.2 x 3.5 x 28.5
in) 32.7 kg (72.0 lbs.)
3

4

Chapter 2
Preparation
2.1 Site Selection
The following criteria should be considered when selecting a site to install the Awake Security
appliance(s):
•Temperature and Ventilation: For proper ventilation, install the Awake Security appliance
where there is ample airflow to the front and back of the Awake Security appliance. The ambient
temperature should not go below 0° or exceed 40°C.
Note:
To prevent the Awake Security appliance from overheating, do not operate it in an area
where the ambient temperature exceeds 40°C (104°F).
Pour éviter que l'appliance Awake Security ne surchauffe, ne l'utilisez pas dans une zone où
la température ambiante est supérieure à 40 °C (104 °F).
•Rack Space: Install the Awake Security appliance in a 19" rack or cabinet. The accessory kit
provides mounting brackets for a four-post rack.
When mounting the Awake Security appliance in a partially filled rack, load the rack from bottom to
top, with the heaviest equipment at the bottom. Load the Awake Security appliance at the bottom if
it is the only item in the rack.
•Other Requirements: Select a site where liquids or objects cannot fall onto the equipment and
foreign objects are not drawn into the ventilation holes. Verify these guidelines are met:
• Clearance areas should be maintained in the front and rear panels allow for unrestricted cabling
and access to the switches and controls..
• All front and rear panel indicators can be easily seen and read.
Note: The Status indicators and control functions are shown in Appendix A.
• Power cords can reach from the power outlet to the connector on the rear panel.
Note: All power connections must be removed to fully de-energize the unit after it is
powered off using the power switch.
Toutes les connexions électriques doivent être retirées pour mettre complètement l'unité
hors tension après sa mise hors tension à l'aide de l'interrupteur d'alimentation.
2.2 Tools and Parts Required for Installation
Each Awake Security appliance provides an accessory kit that contains parts that are required to install
it. In addition to the accessory kit, the following tools and equipment are required to install the Awake
Security appliance:
• Screws or rack mounting nuts and bolts
• Screwdriver
• Four post rails
5

Note: No additional equipment is required for installation into tool-less four post racks.
Accessory kit does not include screws for attaching the Awake Security appliance to the equipment
rack. When installing the appliance into an equipment rack with unthreaded post holes, nuts are also
required to secure the device to the rack posts.
2.3 Electrostatic Discharge (ESD) Precautions
Observe these guidelines to avoid ESD damage when installing or servicing Awake Security
appliances:
• Assemble or disassemble equipment only in a static-free work area.
• Use a conductive work surface (such as an anti-static mat) to dissipate any static charge
accumulation.
• Wear a conductive wrist strap to dissipate any static charge accumulation.
• Minimize handling of assemblies and components.
• Keep replacement parts in their original static-free packaging until they can be handled with anti-
static precautions.
• Remove all plastic, foam, vinyl, paper, and other static-generating materials from the work area.
• Use tools that do not generate ESD.
6

Chapter 3
Rack Mounting an Awake Security Appliance
This chapter describes the rack mounting procedure that is identical for all Awake Security appliances
covered by this guide. Illustrations in this chapter depict the mounting of Awake 1RU and 2RU
appliances.
Ce chapitre décrit la procédure de montage en rack qui est identique pour toutes les appliances Awake
Security couvertes par ce guide. Les illustrations de ce chapitre décrivent le montage des appliances
Awake 1RU et 2RU.
The following sections provide instructions for mounting Awake 1RU and 2RU appliances:
•Installing 1RU Awake Security appliances
•Installing 2RU Awake Security appliances
3.1 Installing 1RU Awake Security appliances
Perform the following steps to install a 1RU Awake Security appliance:
1. Identify the left and right outer rails by examining the ends, which bend outward. Slide the matching
inner rails into the corresponding outer rails to be sure they are ready for installation.
Note: The rail set fits a rack between 25.6" and 33" deep.
2. Position the alignment pins in the rear rail (2) with the hole at the end of the slot in the front rail (1),
and slide the front section into the rear section (3).
Figure 1: Installing Rails
Note: Each end of the assembled outer rail includes a bracket with alignment pins to fit into
your rack holes.
3. Position the alignment pins on the front end of the rail with the holes on the front of the rack (C).
Push the rail into the rack until the quick release bracket snaps into place, securing the rail to the
rack.
Note: Be sure to mount the rails horizontally by referencing the number labels on the
vertical bars of the rack.
4. Adjust the rail to reach just past the full depth of your rack.
7

5. Position the alignment pins on the rear end of the rail to the holes on the rack (D) and push the rail
into the rack until the quick release bracket snaps into place, securing the rail to the rack.
6. Repeat the procedure for the other outer rail assembly.
Figure 2: Rack Rails Installed
Note: Ensure that the appliance includes the inner rails and inner rail extensions; and the
outer rails are installed on the rack.
7. Align the appliance inner rails with the front of the outer rails on the rack.
8. Slide the appliance rails into the rack rails, keeping the pressure even on both sides.
8

Rack Mounting an Awake Security Appliance
Figure 3: Installing the Appliance into a Rack
Note: You may have to depress the bracket clips while inserting the appliance. When the
server has been pushed completely into the rack, you should hear the bracket clip locks with
an audible click.
9. Insert and tighten the thumbscrews that hold the front of the server to the rack.
3.2 Installing 2RU Awake Security appliances
Perform the following steps to install a 2RU Awake Security appliance:
1. Detach the inner rails from the outer rails.
Figure 4: Detaching Rails
2. Install the inner rails to the side of the appliance.
9

Figure 5: Install inner rails
3. Press the button to slide the rail in.
Figure 6: Slide the Rail in
4. Secure the rack to the rail with screws.
Figure 7: Screw in the rails
5. Repeat the previous step to mount four corners.
10

Rack Mounting an Awake Security Appliance
Figure 8: Mount all four corners
6. Insert the appliance rails into the rack rails and slide the appliance all the way in.
Figure 9: Positioning the appliance
7. Install screws into the handles to secure the appliance.
Figure 10: Securing the Appliance
11

12

Chapter 4
Cabling the Appliance
For all Awake Security appliances, connect the management port to your network. For Awake All-in-
One and Sensor appliances; connect the packet capture port to the span port of your switch.
Cable the Awake Nucleus appliance in one of the following ways as appropriate for your installation:
• For a single nucleus installation, interconnect ports are unused and should not be connected.
• For a dual nucleus installation, connect a network cable from the first nucleus interconnect port to
the second nucleus interconnect port.
• For a nucleus cluster with more than two nucleus appliances, attach a network cable from one of
the interconnect ports from each nucleus and connect it to the supplied Arista switch.
Refer to the Rear Panel section for the information on ports.
13

14

Chapter 5
Configuring the Awake Security Platform
Once the appliances are physically installed and cabled up, the next step is software configuration of
the individual Awake Security appliances which once configured will combine to become the Awake
Security Platform:
1. Connecting to the Admin CLI
2. Configuring the Appliance
3. Verifying the Configuration
5.1 Connecting to the Admin CLI
You can access the CLI by physically connecting a monitor and a keyboard to the Awake Security
appliance SKU. The following screen is displayed:
Figure 11: Command Prompt Window
Note: Enter the username as admin and the password provided by the Awake support.
5.2 Configuring the Appliance
Configure the following networking parameters in Awake Security appliances:
•Configuring the Management Interface
•Configuring DNS
•Configuring NTP
•Configuring Proxy
•Configuring IPMI / DRAC Interface
Note: If you are configuring all networking parameters simultaneously, you can run the
apply and reboot command at the end of all configurations instead of running them for each
configuration.
5.2.1 Configuring the Management Interface
Perform the following steps to configure the management interface:
1. Enter the set interface static <ip> <netmask> <default gateway> where specified
variables denotes the following values:
15

•<ip> - IP address of the management interface
•<netmask> - Netmask of the network (for example, 255.255.255.0)
•<default gateway> - Default gateway of the network
CLI displays the following prompt:
Applying network settings now might cause the network to disconnect.
If you do not apply network settings now, network settings will
take effect only after running "apply" and "reboot"
Do you want to apply network settings now? (y/n)
2. Enter y.
3. Enter the apply command to apply the changes.
4. If no further configuration changes are required, enter the reboot command to restart the device.
5.2.2 Configuring DNS
You must set up Domain Name Servers (DNS) in Awake appliances to use hostname instead of IP
addresses. Perform the following steps to configure DNS:
1. Enter the set dns nameservers command.
An interactive prompt will ask for primary and secondary servers.
2. Enter the primary and secondary DNS.
3. Enter the apply command to apply the changes.
4. If no further configuration changes are required, enter the reboot command to restart the device.
5.2.3 Configuring NTP
You must configure the Network Time Protocol (NTP) in all of your Awake appliances to ensure the
accuracy of the appliance clock. Perform the following steps to configure NTP:
1. Enter the set ntp servers command.
An interactive prompt will ask for primary and secondary servers.
2. Enter the primary and secondary servers.
3. Enter the apply command to apply the changes.
4. If no further configuration changes are required, enter the reboot command to restart the device.
5.2.4 Configuring Proxy
Awake appliances support outgoing connection using the customer's proxy (without SSL interception).
Perform the following steps to configure proxy for outgoing connections:
1. Enter the set proxy servers command.
2. Enter the required details when an interactive prompt asks for the following information:
•Host: The IP address of the proxy server.
Note: You may enter the hostname instead of the IP address if DNS already has been
configured, applied, and the system was rebooted.
•Port: The port of the proxy server
•Username / password: Enter the credentials if the proxy requires authentication.
3. Enter the apply command to apply the changes.
4. If no further configuration changes are required, enter the reboot command to restart the device.
5.2.5 Configuring IPMI / DRAC Interface
16