Reset Search
 

 

Article

Basic Layer 2 only GRE setup for PV-FC-180 to talk to Analytics Appliance

« Go Back

Information

 
TitleBasic Layer 2 only GRE setup for PV-FC-180 to talk to Analytics Appliance
Objective
To setup a PV-FC-180 to talk to an analytics appliance using GRE, where the PV-FC-180 and Analytics appliance as are on the same subnet
Environment
  • GRE
  • Analytics
  • Purview
  • Extreme Management Center
  • PV-FC-180
Procedure
For the PV-FC-180,  we have to setup a few basics.
The netflow, mirror and policy configurations prior  to tunnel setup.
For the mirror, we use tbp.0.10 as assumed mirror port.
 
# mirror
set mirror create 1
set mirror 1 mirrorN 15
set mirror ports tbp.0.10 1

Netflow captures off one port from a core switch that is mirroring bidirectionally to it.

# netflow
set netflow export-interval 1
set netflow export-destination 10.0.0.12 2055
set netflow export-version 9
set netflow port tg.1.4 enable both
set netflow template refresh-rate 30 timeout 1
set netflow cache enable
!
We add in some basic policy to capture the mirror data and send in to the mirror destination, which ends up being the GRE tunnel. The prohibit mirror keeps us from mirroring our own traffic as it crosses the core network on Layer 2 from being repeatedly mirrored.
 
set policy profile 1 name Analytics pvid-status enable pvid 0 mirror-destination 1
set policy rule admin-profile port tg.1.4 mask 16 port-string tg.1.4 admin-pid 1
set policy rule 1 ipproto 47 mask 8 drop prohibit-mirror

We them setup the interface of the PV-FC-180 for its IP address, 10.0.0.11
 interface vlan.0.1
  ip address 10.0.0.11 255.255.255.0 primary
  no shutdown
  exit
Then we setup the tunnel interface to use the same source IP (11) to talk the default IP of the Analytics Appliance (.12)

 interface tun.0.1
  tunnel destination 10.0.0.12
  tunnel mode gre l2 tbp.0.10
  tunnel mirror enable
  tunnel source 10.0.0.11
  no shutdown
  exit
!
# Static routes configured on routed interfaces
 ip route 0.0.0.0/0 10.0.0.1 interface vlan.0.1 1

!

Next, SSH into the Analytics Appliance, we want to setup the dnetconfig to use the Source of itself, and a destination of the PV-FC-180.
This has been configured previously, but you will need to add in the something akin to the following.

================================================================================
Application Analytics Engine GRE Configuration
================================================================================

Remote mirroring can be configured in CoreFlow Switches using GRE tunnels.
This requires a specific mirroring configuration enabled on the switches.
Import the GRE tunnel information (y/n) [n]?
Enter the Purview Appliance interface address [10.0.0.12]: 
Enter the address of the CoreFlow2 capable device [10.0.0.11]: 

Follow the rest of the setup---

This should produce a configuration setup that looks like the following.

cat /usr/postinstall/dnetconfig.properties

# Description: This file defines the default settings for the
# dnetconfig script
####################################################################
HOSTNM=analytics1
PVHOSTNAME=analytics1
USE_DHCP=
IPADDR=10.0.0.12
NETMASK=255.255.255.0
GATEWAY=10.0.0.1
NAMESERVER=10.0.0.200
ALT_NAME_SERVER=10.0.0.100
HOST_DOMAIN=extremenetworks.local
NIS_SERVER=
NIS_DOMAIN=
NAMESERVER1=
ALT_NAME_SERVER1=
HOST_DOMAIN1=
MGMT_IF_NAME=eth0
MONITOR_MODE=1
GRE_SRC=10.0.0.12
GRE_DST=10.0.0.11


Now, one should follow with the command,
ifconfig, make sure that traffic is going is being received on gre1.
Additional notes
Layer 2 only configurations often set the default vlan ip address with the 'set ip address' command.
I recommend against this, as it will leave behind two commands that will stop the configuration from working. This is meant to be used if the device and vlan are used as a layer 2 switch only.

no ip proxy arp
no ip forwarding


So, if you see these applied to the management interface, please remove the above two commands.

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255