Network Critical SmartNA-X User manual

SmartNA™ 10G Network Access
(SmartNA-X)
User Guide 1.0

i
DRAFT
SMARTNA-X
CONTENTS
Preface...............................................................................................................................1
Symbols used in the documentation .......................................................................................... 1
Safety information ................................................................................................................... 1
Grounding..............................................................................................................................................1
Power supply ..........................................................................................................................................1
Servicing .................................................................................................................................................1
Command line notation ...........................................................................................................2
Chapter 1 – Overview ...........................................................................................................3
SmartNA-X features ................................................................................................................. 3
Hardware overview .................................................................................................................. 3
Managing SmartNA-X..............................................................................................................5
Managing SmartNA-X through the web UI............................................................................................5
Managing SmartNA-X through the CLI .................................................................................................8
Chapter 2 – Introduction to network TAPs .......................................................................... 10
What is a network TAP? ......................................................................................................... 10
Suitable locations for placing TAPs ......................................................................................... 11
Placing TAPs on individual servers .......................................................................................................11
Placing TAPs on multiple servers ..........................................................................................................12
Placing TAPs on multiple locations ......................................................................................................12
Chapter 3 – Setting up SmartNA-X ..................................................................................... 14
Check items included............................................................................................................. 14
Installing the SmartNA-X chassis and TAP modules ................................................................. 14
Powering up the system ..........................................................................................................15
Connecting to the Management/Network port......................................................................... 16
Logging in to SmartNA-X ...................................................................................................... 16
Chapter 4 – Administering SmartNA-X ............................................................................... 21
Logging in............................................................................................................................. 21
Configuring SmartNA-X for the first time............................................................................... 23
Configuring network settings ................................................................................................. 24

ii
SMARTNA™ 10G NETWORK ACCESS (SMARTNA-X)
CONTENTS |
DRAFT
Enabling NTP ....................................................................................................................... 25
Managing user accounts and authentication............................................................................. 26
Authenticating users.............................................................................................................................. 26
Enabling RADIUS and TACACS+ authentication servers .................................................................... 27
Enabling transaction logging .................................................................................................. 29
Saving and restoring SmartNA-X configurations ...................................................................... 30
Restoring default settings and custom configurations............................................................................31
Downloading and uploading a configuration ........................................................................................31
Rebooting the system ............................................................................................................. 32
Updating system firmware ...................................................................................................... 32
Uploading a user-defined SSL certificate ................................................................................. 33
Changing your password ........................................................................................................ 33
Monitoring system health....................................................................................................... 34
Chapter 5 – Using the Web User Interface ........................................................................... 35
Accessing the web UI ............................................................................................................. 35
Selecting options in the system diagram .................................................................................. 36
Port speed indicator ............................................................................................................... 36
Further information..............................................................................................................................37
Chapter 6 – Configuring ports ............................................................................................ 38
Configuring port communication settings ............................................................................... 38
Avoiding duplex mismatching...............................................................................................................38
Configuring port failsafe and LFP (TAP mode)........................................................................ 40
Testing failsafe ......................................................................................................................................41
Configuring ports roles .......................................................................................................... 42
Configuring port traffic thresholds ......................................................................................... 43
Configuring port locking ....................................................................................................... 44
Saving port settings................................................................................................................ 45
Chapter 7 – Creating Port Maps ......................................................................................... 47
About port maps.................................................................................................................... 47
Creating port maps ................................................................................................................ 49
Creating maps in the web UI ................................................................................................................50
Creating port maps in the CLI..............................................................................................................52
Typical map configurations .................................................................................................... 52
Breakout TAP.......................................................................................................................................52
Aggregation TAPs.................................................................................................................................52
Regeneration TAPs ...............................................................................................................................52
Chapter 8 – Using Packet Filters ......................................................................................... 54
About packet filters................................................................................................................ 54
How packet filters work ........................................................................................................................54
Creating packet filters ............................................................................................................ 55

iii
SMARTNA™ 10G NETWORK ACCESS (SMARTNA-X)
CONTENTS |
DRAFT
Adding filters to maps ............................................................................................................ 56
Chapter 9 – Using SNMP ................................................................................................... 58
About SNMP and SmartNA-X................................................................................................ 58
About VACM ........................................................................................................................ 60
Configuring SNMP ............................................................................................................... 61
SNMP default configuration.................................................................................................................61
Enabling SNMP ...................................................................................................................................61
SNMP engine ID..................................................................................................................................62
Configuring SNMP notifications..........................................................................................................62
Configuring SNMPv1/v2c communities...............................................................................................63
Configuring trap managers (notification hosts) ..................................................................................... 64
Configuring SNMPv3 users with VACM .............................................................................................65
Adding a member or security name to a group......................................................................................66
Configuring views.................................................................................................................................67
Configuring the access control list.........................................................................................................68
Appendix A Command Line Interface Reference............................................................................... 69
Basic commands ..........................................................................................................................................70
Commands for managing contact and location details .................................................................................79
Commands for managing network configuration.........................................................................................83
Commands for managing users....................................................................................................................94
Commands for managing authentication and accounting ..........................................................................100
Commands for managing TAP modules ....................................................................................................113
Commands for managing TAP ports .........................................................................................................114
Commands for managing port maps and packet filters ..............................................................................133
Commands for managing SNMP ..............................................................................................................152
Appendix B Web User-Interface Reference ..................................................................................... 189
System identity tab ...............................................................................................................190
Mapping tab.........................................................................................................................191
Filters tab.............................................................................................................................192
SNMP tab ............................................................................................................................195
Security tab ..........................................................................................................................199
Health tab ............................................................................................................................200
Management tab ...................................................................................................................202
TAP module health tab .........................................................................................................203
Port tab................................................................................................................................204
Port Traffic tab .....................................................................................................................206
Port Errors tab......................................................................................................................206
Port health tab......................................................................................................................207
Appendix C Specifications.............................................................................................................. 209

iv
SMARTNA™ 10G NETWORK ACCESS (SMARTNA-X)
CONTENTS |
DRAFT
SmartNA-X chassis ...............................................................................................................209
10 Gbit/s TAP module (SFP+ & SFP) ....................................................................................210
1 Gbit/s TAP module (RJ45 & RJ45).....................................................................................211
1 Gbit/s TAP module (LC & RJ45) .......................................................................................212
1 Gbit/s TAP module (RJ45 & SFP) ......................................................................................212
1 Gbit/s TAP module (LC & SFP) .........................................................................................213
Appendix D Troubleshooting......................................................................................................... 214
Troubleshooting connections to SmartNA-X...........................................................................214
Problems with slow data throughput on copper (RJ) ports..................................................................214
Connecting with IPv6.........................................................................................................................214
Troubleshooting the web UI ..................................................................................................216
Resolving web UI issues on Mac OSX.................................................................................................216
Troubleshooting the CLI .......................................................................................................217
Troubleshooting SNMP.........................................................................................................218
Resetting the system to the default configuration ....................................................................218
Appendix E Glossary ...................................................................................................................... 219
Appendix F Hardware Warranty..................................................................................................... 222
Appendix G Supported MIBs ......................................................................................................... 223
Obtaining SmartNA MIB Files ..............................................................................................224
Appendix H IP Protocols ............................................................................................................... 225
Appendix I Contact & Support ...................................................................................................... 228

1
DRAFT
PREFACE
Symbols used in the documentation
Means reader beware of the following hazard that can endanger your life or damage
equipment. Do not proceed beyond CAUTION notices until the hazardous conditions
are understood and appropriate steps have been taken.
Means reader take particular note of the following information.
Means reader the following information may help you solve a problem.
Safety information
Grounding
There must be an interruptible safety earth ground from the main power source to the product’s input wiring
terminals, power cord, or supplied power cord set. Whenever it is likely that protection has been impaired,
disconnect the power cord until the ground has been restored.
Power supply
Removable power supplies are to be used in the SmartNA-X system only. For pluggable equipment the socket
outlet shall be installed near the equipment and shall be easily accessible.
Servicing
There are no user-serviceable parts inside this product. Any servicing, adjustment, maintenance or repair must be
performed only by service-trained personnel.
CAUTION
NOTE
TIP

2
SMARTNA™ 10G NETWORK ACCESS (SMARTNA-X)
PREFACE | COMMAND LINE NOTATION
DRAFT
Command line notation
The following notation is used to describe command line syntax in this manual:
Bold text Command keywords. Type exactly as shown.
Modifier Command modifiers. Type exactly as shown.
Italic text Placeholder for which you must supply a value. Angle brackets “< >” are used to
differentiate placeholders if several appear in sequence.
{text in braces} Set of required items. You must choose one from the list to complete the command.
[text in brackets] Optional items, separated by ‘|’ where there are several items to choose from (choose one
item from the list).
argument ... Argument is repeatable.
[expression] ... Expression is repeatable.
Vertica l bar (|) Separator for items which cannot be used together; choose one item from the list.
Format Description

3
DRAFT
CHAPTER 1
1 –OVERVIEW
SmartNA™ 10G Network Access (SmartNA-X) provides a flexible and customizable Test Access Point (TAP)
solution. This chapter covers the following major topics:
•SmartNA-X features, page 3
•Hardware overview, page 3
•Managing SmartNA-X, page 5
SmartNA-X features
SmartNA-X 10G Network Access is a fully configurable filtering 10G TAP device that provides the following
advanced TAP features:
• Fail-safe ports
• Traffic replication and aggregation capabilities
• Flexible port maps
• Advanced packet filtering capabilities, including ability to filter 10G traffic to continue using 1G tools
• Ability to aggregate 1G links to a 10G port
• SSL secured management interfaces
• Easy to use web UI with support for click-n-drag port mappings.
• SNMP remote status monitoring and alert notifications
• Local or external authentication and authorization via RADIUS and TACACS+
• Hot-swappable TAP modules
• Optional dual independent PSUs for redundancy protection against single point power failure
• Three user access levels: Administrator, Operator and Auditor
Hardware overview
The SmartNA-X chassis (Figure 1-1 and Figure 1-2) supports four independently operating TAP modules that are
hot-swappable, fully configurable and available in various configurations of copper, single mode fiber, multi-mode
fiber, and SFP/SFP+ ports. Slot 1 supports 10 Gbit/s TAP modules (colored red), slots 2, 3 and 4 support 1 Gbit/
s TAP modules (colored blue). Four ports on each module are used to TAP live traffic and direct it to output ports

4
SMARTNA™ 10G NETWORK ACCESS (SMARTNA-X)
OVERVIEW | HARDWARE OVERVIEW
DRAFT
where network tools can be used to capture and monitor your network data. The Management/Network port
provides access to the web UI and CLI, from where system and module settings can be managed.
TAP modules – Hot-swappable and fully configurable TAP modules available with Copper, Single mode Fiber,
Multi-mode Fiber, or SFP/SFP+ cage ports.
10G /1G/100M/10M Ports – 10 Gbit/s (two front, two rear), 1 Gbit/s, 100 Mbit/s and 10 Mbit/s interfaces to
access data flowing across a computer network and to connect network tools running packet analysis software or a
dedicated capturing appliance. These ports do not have IP or MAC addresses and are transparent to other network
appliances1. Copper port pairs support ‘TAP’ mode for integrated failsafe and Link Failure Propagation (LFP)
mode.
Management/Network Port – Provides network access to the web UI and CLI management interfaces. Default IP
address is 192.168.254.100.
Console/Serial Port – Provides local access to the commnad line interface via a serial cable.
Port status LEDs – Indicates link state and activity.
Power LEDs – Indicate operational PSUs.
Power supply units (PSUs) – Optional dual independent PSUs (AC 100V–240V or DC -48V). PSU-1 only
present if a single PSU is installed in the chassis. Removable power supplies are to be used in the SmartNA-X
system only.
Figure 1-1 SmartNA-X front view
1.Flow control and error packets are dropped by the TAP ports.
Figure 1-2 SmartNA-X rear view
MANAGEMENT/NETWORK T PORT10 GBIT/S PORTS 1 GBIT/S PORTS
1G TAP MODULESPORT STATUS LEDS POWER LEDS10G/1G TAP MODULE
CONSOLE/SERIAL PORT
10 GBIT/S PORTSPSU-2 PSU-1

5
SMARTNA™ 10G NETWORK ACCESS (SMARTNA-X)
OVERVIEW | MANAGING SMARTNA-X
DRAFT
Managing SmartNA-X
You can manage SmartNA-X from a web browser over HTTPS or a terminal client supporting SSH. SmartNA-X
includes an SNMPv1/v2c/v3 agent for integration with your network management system (NMS). By default,
user authentication is performed locally, but can be managed by RADIUS or TACACS+ authentication servers if
required. For auditing purposes, RADIUS or TACACS+ accounting servers can be configured to capture log
information relating to SmartNA-X user transactions (local logging is not supported).
Managing SmartNA-X through the web UI
The SmartNA-X web UI provides access to administrator, user and audit level options in a secure web browser
environment. To access the web UI (Figure 1-3), open a Java 1.5+ enabled web browser and enter the IP address
for SmartNA-X. If this is the first time of logging on from a host, you’ll need to accept the SSL certificate before
you can continue—this will not compromise your network security. Once you are at the login screen, enter your
SmartNA-X username and password to access the web UI.
The chassis graphic that is displayed when you login (Figure 1-4) provides an accurate representation of the
SmartNA-X hardware configuration. It shows which slots are populated, type of ports in each module, port link
up/down status, and on/off state of the PSUs. If the hardware changes, such as another module is inserted, the web
UI will reflect the change in real-time.
Figure 1-3 SmartNA-X web UI
Figure 1-4 SmartNA-X chassis graphic
CHASSIS
PORTS
TAP MO DULES REAR PORTS
PORT MAPS
PACKET FILTERS