Network Critical SmartNA-X User manual

Smart Network Access Modular System X
SmartNA-X™ 1G/10G Network Tapping Device
User Guide v1.4

2 | Contents | SmartNA-X 1G/10G Modular
SmartNA-X™ 1G/10G User Guide 1.4 © 2015 Network Critical Solutions Limited
Contents
About this guide.................................................................................................................................... 9
Audience.......................................................................................................................................................................9
Conventions..................................................................................................................................................................9
Safety information....................................................................................................................................................... 9
Grounding.........................................................................................................................................................9
Power supply....................................................................................................................................................9
Servicing...........................................................................................................................................................9
Electrostatic discharge (ESD)..........................................................................................................................9
Chapter 1: Introduction..............................................................................................10
About SmartNA-X..................................................................................................................................................... 10
System features.......................................................................................................................................................... 10
SmartNA-X chassis....................................................................................................................................................11
Default settings.......................................................................................................................................................... 11
System Management..................................................................................................................................................13
Configuration options................................................................................................................................................ 13
About network TAPs.................................................................................................................................................13
Suitable locations for tapping a network.................................................................................................................. 13
TAP on individual servers.........................................................................................................................................14
TAP before a load balancer...................................................................................................................................... 14
TAP after a load balancer......................................................................................................................................... 15
TAP between internet router and firewall................................................................................................................ 16
How to set up a TAP................................................................................................................................................ 16
Chapter 2: Getting Started.........................................................................................19
List of supplied components..................................................................................................................................... 19
Installing the chassis..................................................................................................................................................19
Installing the TAP modules.......................................................................................................................................20
Cabling for administrative connections.....................................................................................................................20
Management port cabling for serial access...............................................................................................................21
Management port cabling for network access.......................................................................................................... 22
Accessing the management interfaces.......................................................................................................................22
Connecting locally using the supplied serial cable...................................................................................................22
Connecting to the system.......................................................................................................................................... 23
Connecting from a web browser...............................................................................................................................23
Connecting from a terminal client............................................................................................................................ 25
Configuring network settings.................................................................................................................................... 25
Manual network configuration.................................................................................................................................. 26
Dynamic network configuration................................................................................................................................26
Chapter 3: SmartNA-X Administration....................................................................28
Managing local users................................................................................................................................................. 28
Adding local users......................................................................................................................................... 28
Managing user accounts................................................................................................................................ 29
Managing the system time........................................................................................................................................ 30
Adding an NTP server...................................................................................................................................30
Saving the current configuration...............................................................................................................................30
Loading a configuration............................................................................................................................................ 31

SmartNA-X 1G/10G Modular | Contents | 3
SmartNA-X™ 1G/10G User Guide 1.4 © 2015 Network Critical Solutions Limited
Using the CLI to restore a configuration......................................................................................................31
Downloading the system configuration.....................................................................................................................31
Uploading a system configuration.............................................................................................................................32
Upgrade system firmware..........................................................................................................................................32
To upgrade the system firmware...................................................................................................................32
Installing Feature Packs.............................................................................................................................................33
Installing a Feature Pack............................................................................................................................... 33
Configuring system security......................................................................................................................................34
Managing public host keys............................................................................................................................34
Configuring management access................................................................................................................... 35
Configuring TACACS+ authentication servers.............................................................................................36
Configuring RADIUS authentication servers................................................................................................38
Managing transaction logging....................................................................................................................... 39
Rebooting the system................................................................................................................................................ 41
Reboot the system..........................................................................................................................................41
Chapter 4: Configuring Ports.................................................................................... 42
Configuring Ports.......................................................................................................................................................42
Working with copper ports............................................................................................................................42
Configuring port settings...............................................................................................................................44
Viewing port statistics................................................................................................................................... 46
Chapter 5: Moving Traffic With Maps.....................................................................48
Creating maps in the web UI....................................................................................................................................48
Chapter 6: Restricting Traffic with Filters...............................................................50
Using filters................................................................................................................................................................50
Defining filters........................................................................................................................................................... 50
Packet header filtering criteria.................................................................................................................................. 51
Defining custom fields.............................................................................................................................................. 55
Applying filtering...................................................................................................................................................... 56
Chapter 7: Load Balancing........................................................................................ 57
Load balancing...........................................................................................................................................................57
Load balancing on SmartNA-X.....................................................................................................................57
Load balancing – Best practices and limitations.......................................................................................... 58
Setting up load balancing.......................................................................................................................................... 58
Chapter 8: Working with the V-Line Module..........................................................61
About V-Line modules.............................................................................................................................................. 61
V-Line module functionality..................................................................................................................................... 61
V-Line mode.................................................................................................................................................. 61
Breakout mode............................................................................................................................................... 62
Aggregation mode..........................................................................................................................................63
Egress mode................................................................................................................................................... 63
Configuring the V-Line operational mode................................................................................................................64
Configure V-Line mode................................................................................................................................ 64
Configure Breakout mode............................................................................................................................. 65
Configure Aggregation mode........................................................................................................................ 66
Configure Egress mode................................................................................................................................. 67

4 | Contents | SmartNA-X 1G/10G Modular
SmartNA-X™ 1G/10G User Guide 1.4 © 2015 Network Critical Solutions Limited
Chapter 9: Working with the Intelligent Packet Processor (IPP) Module.............69
Physical...................................................................................................................................................................... 69
Overview of the IPP operation..................................................................................................................................69
Detailed operation of the IPP module.......................................................................................................................69
Matches.......................................................................................................................................................... 69
Actions........................................................................................................................................................... 70
Transforms..................................................................................................................................................... 70
Packet slicing................................................................................................................................................. 71
Committing changes after configuring the IPP module................................................................................71
Configuring the IPP module......................................................................................................................................72
Example Transforms..................................................................................................................................................74
Chapter 10: SNMP...................................................................................................... 76
Enabling SNMP......................................................................................................................................................... 76
SNMP versions and workflow.................................................................................................................................. 76
SNMP v1 and v2...........................................................................................................................................76
SNMP v3........................................................................................................................................................76
SNMP workflow............................................................................................................................................ 77
SNMP Engine ID.......................................................................................................................................................77
Defining notification (trap) settings.......................................................................................................................... 78
Specifying send notifications.........................................................................................................................78
Configuring notification hosts....................................................................................................................... 79
Defining SNMPv1/v2 communities.......................................................................................................................... 79
Define SNMPv1/v2 communities..................................................................................................................80
Configuring SNMP v3...............................................................................................................................................80
Defining SNMP users....................................................................................................................................81
Mapping SNMPv1/v2 users to SecurityNames.............................................................................................82
Creating SNMP groups..................................................................................................................................83
Defining SNMP views...................................................................................................................................84
Defining the group access policy..................................................................................................................85
Chapter 11: Command Line Reference.................................................................... 87
CLI notation............................................................................................................................................................... 87
CLI editing and command completion..................................................................................................................... 87
General CLI commands.............................................................................................................................................88
Help................................................................................................................................................................ 88
commit............................................................................................................................................................89
create settings.................................................................................................................................................90
restore............................................................................................................................................................. 90
delete settings.................................................................................................................................................90
reboot..............................................................................................................................................................91
set timeout......................................................................................................................................................91
exit..................................................................................................................................................................92
System name, contact and location........................................................................................................................... 93
show system................................................................................................................................................... 93
show name..................................................................................................................................................... 93
set name......................................................................................................................................................... 94
show location................................................................................................................................................. 94
set location..................................................................................................................................................... 94
show contact.................................................................................................................................................. 95
set contact...................................................................................................................................................... 95
set banner....................................................................................................................................................... 95

SmartNA-X 1G/10G Modular | Contents | 5
SmartNA-X™ 1G/10G User Guide 1.4 © 2015 Network Critical Solutions Limited
show banner................................................................................................................................................... 96
Network configuration commands............................................................................................................................ 97
show ntp.........................................................................................................................................................97
create ntp........................................................................................................................................................97
delete ntp........................................................................................................................................................97
show ipv4....................................................................................................................................................... 98
set ipv4 static................................................................................................................................................. 98
set ipv4 gateway............................................................................................................................................ 98
set ipv4 dns....................................................................................................................................................99
set ipv4 dhcp..................................................................................................................................................99
show ipv6..................................................................................................................................................... 100
set ipv6 static............................................................................................................................................... 100
set ipv6 gateway.......................................................................................................................................... 101
Local users commands............................................................................................................................................ 102
show users....................................................................................................................................................102
create user.................................................................................................................................................... 102
delete user.................................................................................................................................................... 103
set user level................................................................................................................................................ 103
set user password.........................................................................................................................................103
Authentication and accounting services commands................................................................................................105
set authentication......................................................................................................................................... 105
show radius.................................................................................................................................................. 105
create radius authserver............................................................................................................................... 105
delete radius authserver............................................................................................................................... 106
create radius accserver.................................................................................................................................106
delete radius accserver.................................................................................................................................107
show tacacs.................................................................................................................................................. 107
create tacacs authserver............................................................................................................................... 107
delete tacacs authserver............................................................................................................................... 108
create tacacs accserver.................................................................................................................................108
delete tacacs accserver.................................................................................................................................109
set log...........................................................................................................................................................109
Module commands...................................................................................................................................................110
select.............................................................................................................................................................110
show status................................................................................................................................................... 110
show counters.............................................................................................................................................. 111
clear counters............................................................................................................................................... 111
show temperaturehigh..................................................................................................................................111
set temperaturehigh......................................................................................................................................112
show rates.................................................................................................................................................... 112
show errors...................................................................................................................................................112
Port settings commands...........................................................................................................................................114
show port......................................................................................................................................................114
set port autolock.......................................................................................................................................... 115
set port autoneg........................................................................................................................................... 115
set port name/description.............................................................................................................................116
set port duplex............................................................................................................................................. 117
set port lock................................................................................................................................................. 117
set port mastering........................................................................................................................................ 118
set port mdi..................................................................................................................................................118
set port name............................................................................................................................................... 119
set port speed............................................................................................................................................... 120
set port tap................................................................................................................................................... 120
set port traffichigh....................................................................................................................................... 121
set port trafficlow........................................................................................................................................ 121
set port usage............................................................................................................................................... 122

6 | Contents | SmartNA-X 1G/10G Modular
SmartNA-X™ 1G/10G User Guide 1.4 © 2015 Network Critical Solutions Limited
Port mapping commands......................................................................................................................................... 123
show maps....................................................................................................................................................123
set map......................................................................................................................................................... 123
delete map.................................................................................................................................................... 125
clear maps.................................................................................................................................................... 126
Filtering and load balancing commands................................................................................................................. 127
set filter any................................................................................................................................................. 127
set filter anyip..............................................................................................................................................128
set filter ipv4................................................................................................................................................130
set filter ipv6................................................................................................................................................133
set filter arp..................................................................................................................................................136
set filter mpls............................................................................................................................................... 137
set customfield............................................................................................................................................. 138
set lbheaders.................................................................................................................................................139
delete filter................................................................................................................................................... 140
delete customfield........................................................................................................................................ 141
show filters...................................................................................................................................................141
show customfields........................................................................................................................................141
show lbheaders.............................................................................................................................................142
SNMP commands.................................................................................................................................................... 143
snmp show agent......................................................................................................................................... 143
snmp enable agent....................................................................................................................................... 143
snmp disable agent...................................................................................................................................... 143
snmp show all..............................................................................................................................................144
snmp show engineid.................................................................................................................................... 145
snmp apply................................................................................................................................................... 145
snmp show notify........................................................................................................................................ 145
snmp enable notify...................................................................................................................................... 146
snmp disable notify......................................................................................................................................146
snmp show host........................................................................................................................................... 147
snmp create host.......................................................................................................................................... 148
snmp delete host.......................................................................................................................................... 148
snmp show community................................................................................................................................149
snmp create community...............................................................................................................................149
snmp delete community...............................................................................................................................150
snmp show user........................................................................................................................................... 150
snmp create user.......................................................................................................................................... 151
snmp delete user.......................................................................................................................................... 152
snmp show sectogroup................................................................................................................................ 152
snmp create sectogroup............................................................................................................................... 153
snmp delete sectogroup............................................................................................................................... 154
snmp show view.......................................................................................................................................... 154
snmp create view......................................................................................................................................... 155
snmp delete view......................................................................................................................................... 156
snmp show access........................................................................................................................................156
snmp create access.......................................................................................................................................157
snmp delete access.......................................................................................................................................157
snmp show comtosec...................................................................................................................................158
snmp create comtosec..................................................................................................................................158
snmp delete comtosec..................................................................................................................................159
V-Line module commands...................................................................................................................................... 160
show vline.................................................................................................................................................... 160
set vline mode..............................................................................................................................................160
set vline bypass............................................................................................................................................161
set vline heartbeat rate.................................................................................................................................162
set vline heartbeat timeout.......................................................................................................................... 162

SmartNA-X 1G/10G Modular | Contents | 7
SmartNA-X™ 1G/10G User Guide 1.4 © 2015 Network Critical Solutions Limited
set vline heartbeat packet............................................................................................................................ 163
set vline slicing............................................................................................................................................163
set vline breakout.........................................................................................................................................164
set vline aggregate....................................................................................................................................... 165
set vline inject..............................................................................................................................................165
Intelligent Packet Processor (IPP) Card Module Commands................................................................................. 167
create packetprocessor transform................................................................................................................ 167
delete packetprocessor transform................................................................................................................ 167
show packetprocessor transform................................................................................................................. 167
show packetprocessor transforms................................................................................................................168
show packetprocessor matches....................................................................................................................169
set packetprocessor transform match.......................................................................................................... 171
set packetprocessor transform named-match...............................................................................................172
set packetprocessor transform clear match................................................................................................. 173
set packetprocessor transform clear named-match......................................................................................173
set packetprocessor transform action.......................................................................................................... 174
set packetprocessor speed............................................................................................................................175
show packetprocessor speed........................................................................................................................175
set port packetprocessor transform..............................................................................................................176
set port packetprocessor clear transform.....................................................................................................176
set port packetprocessor slicing...................................................................................................................177
cancel packetprocessor.................................................................................................................................177
Chapter 12: Troubleshooting................................................................................... 178
Troubleshooting network issues.............................................................................................................................. 178
Connecting to the IPv6 link local address.................................................................................................. 178
Troubleshooting slow transmission rates (copper ports)........................................................................................ 179
Troubleshooting Java plugins..................................................................................................................................179
Troubleshooting the CLI......................................................................................................................................... 180
Troubleshooting SNMP........................................................................................................................................... 181
Troubleshooting the web UI....................................................................................................................................182
Appendix A: Physical and electrical specifications................................................ 183
Appendix B: V-Line Module Specifications............................................................185
V-Line module operating specifications................................................................................................................. 185
V-Line module data interfaces................................................................................................................................ 185
Live ports (A & B)......................................................................................................................................186
TAP ports (C & D)..................................................................................................................................... 186
V-Line Module LED Indicators.............................................................................................................................. 187
Port LED Status Indicators..........................................................................................................................187
Bypass LED status indicators......................................................................................................................187
Appendix C: Intelligent Packet Processor (IPP) Module Specifications.............. 189
IPP module operating specifications....................................................................................................................... 189
IPP module data interfaces......................................................................................................................................189
IPP Module front panel........................................................................................................................................... 190
Appendix D: IPP Module Preset Matches and Transforms..................................191
Preset Ethertype Matches........................................................................................................................................ 191
IP header matches....................................................................................................................................................192

8 | Contents | SmartNA-X 1G/10G Modular
SmartNA-X™ 1G/10G User Guide 1.4 © 2015 Network Critical Solutions Limited
Transport header Matches....................................................................................................................................... 193
GRE header matches............................................................................................................................................... 194
Layer above TCP/UDP............................................................................................................................................195
IPP module preset Transforms................................................................................................................................ 196
Appendix E: Supported MIBs..................................................................................198
Hardware warranty.......................................................................................................................... 199
Contacting Network Critical............................................................................................................200

SmartNA-X™ 1G/10G User Guide 1.4 © 2015 Network Critical Solutions Limited
About this guide
Audience
The guide is intended for use by network administrators who are responsible for operating and maintaining network
equipment. Consequently, this manual assumes a basic working knowledge of general switch functions, the Internet
Protocol (IP), and Simple Network Management Protocol (SNMP).
Conventions
The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related features or instructions.
Caution: Alerts you to a potential hazard that could cause loss of data, or damage the system or equipment.
Safety information
Grounding
There must be an interruptible safety earth ground from the main power source to the product’s input wiring terminals,
power cord, or supplied power cord set. Whenever it is likely that protection has been impaired, disconnect the power cord
until the ground has been restored.
Power supply
Removable power supplies are to be used in the SmartNA-Xsystem only. For pluggable equipment the socket outlet shall
be installed near the equipment and shall be easily accessible.
Servicing
There are no user-serviceable parts inside this product. Any servicing, adjustment, maintenance or repair must be
performed only by service-trained personnel.
Electrostatic discharge (ESD)
Electrostatic discharge can damage electrical components. SmartNA-X components are wrapped in antistatic bags to
prevent this damage. Before handling SmartNA-X components, attach an antistatic wrist strap to a grounded metal surface
to prevent electrostatic discharge from damaging your hardware. If you do not have a wrist strap, just prior to removing
the product from ESD packaging and installing or replacing hardware, touch an unpainted metal surface for a minimum of
5 seconds.

10 | Introduction | SmartNA-X 1G/10G Modular
SmartNA-X™ 1G/10G User Guide 1.4 © 2015 Network Critical Solutions Limited
Chapter 1
Introduction
About SmartNA-X
SmartNA-X provides a modular, scalable and customizable 1/10G packet broker and TAP solution for network
monitoring and security tools.
The SmartNA-X system is designed to work as an enterprise solution custom fit for any data centre, no matter the size. It
has advanced packet filtering capabilities and flexible port maps and is able to filter 10G traffic to 1G tools, or aggregate
1G links to a 10G tool.
System features include:
• Independently operating, hot-swappable TAP modules available in a range of port media configurations.
• Failsafe copper ports that continue to operate when the system loses power.
• Flexible port maps for aggregation and replication of traffic to any port.
• Advanced packet filtering capabilities based on packet EtherType.
• Integrated web and CLI agents for browser and command line management access.
• Patented Drag-n-Vu™ technology for easy set up of port mapping, filtering and port monitoring.
• Optional V-Line (Bypass) TAP modules for inline integration of network tools.
• Packet slicing options.
• Support for RADIUS/TACAS+ authentication and accounting servers.
• Integrated SNMPv3 management agent.
• Optional chassis dual power units.
System features
SmartNA-X provides a modular, scalable and customizable 1/10G packet broker and TAP solution for network
monitoring and security tools. It is designed to work as an enterprise solution custom fit for any data center, no matter
the size. It has advanced packet filtering capabilities and flexible port maps, and is able to filter 10G traffic to 1G tools or
aggregate 1G links to a 10G port.
Key features of the system include:
• Support for both command line and web browser management interfaces. The web interface provides the patented
Drag-n-Vu™ user interface for fully configurable, filtering, port mapping and improved monitoring flexibility
• Load Balancing, 9-tuple
• V-Line (Bypass) TAP Modules
• Packet Slicing
• VLAN Tagging
• Local or external authentication and authorization via RADIUS and TACAS+
• Hot-swappable TAP modules that allow continuous monitoring even while they are being switched
• Fail-safe ports that will permit data traffic to flow even after a TAP failure
• Dual independent power connectors
• Advanced packet filtering
• Three user access levels: Administrator user, Standard user, Audit user