Install G-vTAP Agents

You must have sudo/root access to edit the G-vTAP Agent configuration file.

You can install the G-vTAP Agents either from Debian or RPM packages as follows:

Install G-vTAP from Debian Package

To install from a Debian package:

  1. Download the G-vTAP Agent Debian (.deb) package from the Gigamon Customer Portal. For assistance contact Contact Technical Support. For more detailed information refer GigaVUE‑FM Version Compatibility Matrix.
  2. Copy this package to your VM. Install the package with root privileges, for example:

    $ ls gvtap-agent_1.8-4_amd64.deb

    $ sudo dpkg -i gvtap-agent_1.8-4_amd64.deb

  3. Once the G-vTAP package is installed, modify the file /etc/gvtap-agent/gvtap-agent.conf to configure and register the source leader in a bidirectional clock relationship (formerly master) and destination interfaces.

    Note:  Any changes to the GvTAP agent config file made after the initial setup require an agent restart and an inventory refresh or sync from GigaVUE-FM to pick up the new changes and re-initiate the traffic mirroring. When you have an active, successful monitoring session deployed, modifying the GvTAP config file results in traffic loss until GigaVUE-FM does a periodic sync on its own every 15 minutes.

    Example 1—Configuration example to monitor ingress and egress traffic at interface eth0 and use the same interface to send out the mirrored packets

    eth0 mirror-src-ingress mirror-src-egress mirror-dst

    Example 2—Configuration example to monitor ingress and egress traffic at interface eth0 and use the interface eth1 to send out the mirrored packets

    eth0 mirror-src-ingress mirror-src-egress eth1 mirror-dst

  4. Save the file.
  5. Reboot the VM.

The G-vTAP Agent status will be displayed as running. Check the status using the following command:

$ sudo /etc/init.d/gvtap-agent status

G-vTAP Agent is running

Install G-vTAP from RPM package

To install from an RPM (.rpm) package on a Redhat, CentOS, or other RPM-based system:

  1. Download the G-vTAP Agent Debian (.deb) package from the Gigamon Customer Portal. For assistance contact Contact Technical Support. For more detailed information refer GigaVUE‑FM Version Compatibility Matrix.
  2. Copy this package to your VM. Install the package with root privileges, for example:

    $ ls gvtap-agent_1.8-4_x86_64.rpm

    $ sudo rpm -i gvtap-agent_1.8-4_x86_64.rpm

  3. Modify the file /etc/gvtap-agent/gvtap-agent.conf to configure and register the source and destination interfaces.

    Note:  Any changes to the GvTAP agent config file made after the initial setup require an agent restart and an inventory refresh or sync from GigaVUE-FM to pick up the new changes and re-initiate the traffic mirroring. When you have an active, successful monitoring session deployed, modifying the GvTAP config file results in traffic loss until GigaVUE-FM does a periodic sync on its own every 15 minutes.

    Example 1—Configuration example to monitor ingress and egress traffic at interface eth0 and use the same interface to send out the mirrored packets

    eth0   mirror-src-ingress mirror-src-egress mirror-dst

    Example 2—Configuration example to monitor ingress and egress traffic at interface eth0 and use the interface eth1 to send out the mirrored packets

    eth0 mirror-src-ingress mirror-src-egress

    eth1  mirror-dst

  4. Save the file.
  5. Reboot the VM.

Check the status with the following command:

$ sudo /etc/init.d/gvtap-agent status

G-vTAP Agent is running

Install G-vTAP from Red Hat Enterprise Linux and CentOS with Selinux Enabled

  1. Launch the RHEL/CentOS agent AMI image.
  2. Download the following packages from the Gigamon Customer Portal. For assistance contact Contact Technical Support.
    • strongSwan TAR files
    • gvtap-agent_1.8-4_x86_64.rpm
    • gvtap.te files (type enforcement files)
  3. Copy the downloaded G-vTAP package files and strongSwan TAR file to G-vTAP Agent.
  4. Checkmodule -M -m -o gvtap.mod gvtap.te
    semodule_package -o gvtap.pp -m gvtap.mod
    sudo semodule -i gvtap.pp
  5. Install G-vTAP Agent package:
    sudo rpm -ivh gvtap-agent_1.8-4_x86_64.rpm
  6. Edit gvtap-agent.conf file to configure the required interface as source/destination for mirror:

    Note:  Any changes to the GvTAP agent config file made after the initial setup require an agent restart and an inventory refresh or sync from GigaVUE-FM to pick up the new changes and re-initiate the traffic mirroring. When you have an active, successful monitoring session deployed, modifying the GvTAP config file results in traffic loss until GigaVUE-FM does a periodic sync on its own every 15 minutes.

    # eth0 mirror-src-ingress mirror-src-egress mirror-dst
    # sudo /etc/init.d/gvtap-agent restart
  7. Install strongSwan: 
    tar -xvf strongswan-5.7.1-1.el7.x86_64.tar.gz
    cd strongswan-5.7.1-1.el7.x86_64
    sudo sh ./swan-install.sh

  8. Reboot the instance.