Example: Gigamon Resiliency for Inline Protection

Example is an Inline Bypass solution for GRIP using TAP-HC1-G10040 modules on the GigaVUE‑HC1, with copper ports.

First, configure the GigaVUE‑HC1 with the primary role, then configure the GigaVUE‑HC1 with the secondary role. The configuration is the same (is synchronized) on both nodes, except for step 3, in which the protection role (primary or secondary) is specified.

Note that in this example, link fail propagation (LFP) is disabled to reduce inline network recovery time after failover. When a primary to secondary failover occurs and LFP is enabled for copper Inline Bypass links, network service recovery may take several seconds because of Ethernet link renegotiation. Optical links failover faster and typically recover service much faster. For inline networks where only one path is available, this is a consideration. When GRIP is deployed with high availability networks where a second path is present, it is a best practice to leave LFP enabled.

You can use the Chassis page to view the chassis and modules.

Configure Primary Role GigaVUE‑HC1

Task

Description

UI Steps
1.    

Configure ports on the TAP-HC0-G100C0 module as passive (in passive mode, relays are closed). Also configure ports, port type (inline-network).
1. From the left navigation pane, go to System > Ports > Ports > All Ports.
2. Select a port of the TAP-HC1-G10040 module.
3. Click to open the Ports page.
4. Select Passive for TapTX
5. Click Save.
6. Repeat steps 2 through 6 for each port on the TAP-HC1-G10040 module
7. Configure Inline Network ports

a. Select the port.

b. Click Quick Port Editor.

c. Select Inline Network for Type.

Note:  You can use the Chassis page to locate the position of the module in the chassis and identify port IDs.
2.  

Configure stack port (for signaling port/link) and enable it.
1. Select the port and click Edit.
2. Select Enable for Admin.
3. Select Stack for Type.
4. Click OK.
3.  

Create the redundancy profile by giving it a name and configuring parameters for the redundancy profile such as the signaling port and protection role (primary).
1. Select Physical > Orchestrated Flows > Inline Flows > Configuration Canvas > Redundancy.
2. Click ‘+’ icon.
3. Enter a name for the profile in the Alias field. For example, RP_001.
4. Click in the Signaling Port field and select the stack port configured in Task 2.
5. Select Primary for Protection Role.
6. Click OK.
4.  

Configure inline network.

This step associates the redundancy profile to the inline network and also disables link fail propagation on the inline network.

Refer to the Configure Inline Network Ports and Inline Networksection for configuration details.

5.  

Configure inline tool ports, port type (inline-tool), and administratively enable them.
1. Select Physical > Orchestrated Flows > Inline Flows > Configuration Canvas > Inline Tool.
2. Select the first port (for example, 1/4/x1) to configure as an inline-tool port.
3. Select Inline Network for Type and select Enable for Admin.
4. Select the second port (for example, 1/4/x2) and repeat steps 3 through 5.
6.  

Configure inline tool and failover action. then enable inline tool.

Refer to the Configure Inline Tool Ports and Inline Toolssection for configuration details.
7.  

Configure map passall, from inline network to inline tool.

Note:  When you delete a map on the primary node, irrespective of the inline-network traffic-path, the traffic is switched to the secondary node. The port utilization must be 0% on the primary node and active on the secondary node.

Refer to the Configure Inline Network Bundle section for configuration details.

Configure Secondary Role GigaVUE‑HC1

Task

Description

UI Steps

1

Configure ports on the TAP-HC0-G100C0 module as passive (in passive mode, relays are closed). Also configure ports, port type (inline-network).
1. From the left navigation pane, go to System > Ports > Ports> All Ports.
2. Select a port of the TAP-HC1-G10040 module.
3. Click to open the Ports page.
4. Select Passive for TapTX
5. Click Save.
6. Repeat steps 2 through 6 for each port on the TAP-HC1-G10040 module
7. Configure Inline Network ports
a. Select the port.
b. Click Quick Port Editor.
c. Select Inline Network for Type.

Note:  You can use the Chassis page to locate the position of the module in the chassis and identify port IDs.

2

Configure stack port (for signaling port/link) and enable it.
1. Select the port and click Edit.
2. Select Enable for Admin.
3. Select Stack for Type.
4. Click OK.

3

Create the redundancy profile by giving it a name and configuring parameters for the redundancy profile such as the signaling port and protection role (secondary).
1. Select Physical > Orchestrated Flows > Inline Flows > Configuration Canvas > Redundancy.
2. Click ‘+’ icon.
3. Enter a name for the profile in the Alias field. For example, RP_001.
4. Click in the Signaling Port field and select the stack port configured in Task 2.
5. Select Secondary for Protection Role.
6. Click OK.

4

Configure inline network.

This step associates the redundancy profile to the inline network and also disables link fail propagation on the inline network.

Refer to the Configure Inline Network Ports and Inline Networksection for configuration details.

5

Configure inline tool ports, port type (inline-tool), and administratively enable them.
1. Select Physical > Orchestrated Flows > Inline Flows > Configuration Canvas > Inline Tool.
2. Select the first port (for example, 1/4/x1) to configure as an inline-tool port.
3. Select Inline Network for Type and select Enable for Admin.
4. Select the second port (for example, 1/4/x2) and repeat steps 3 through 5.

6

Configure inline tool and failover action. then enable inline tool.

Refer to the Configure Inline Tool Ports and Inline Tools section for configuration details.

7

Configure map passall, from inline network to inline tool.

Refer to the Configure Inline Network Bundlesection for configuration details.

8

Configure the path of the traffic to the inline tool, disabling physical bypass on the inline network to open the relay on the node with the primary role.

Refer to the Configure Inline Network Ports and Inline Networksection for configuration details.