Supported Devices: GigaVUE-HC1 Gen 2, GigaVUE-HC1 Gen 3, GigaVUE-HC3 Gen 2, GigaVUE-HC3 Gen 3, GigaVUE-HC1-Plus.
Example
De-duplicate traffic from multiple SPAN ports and send the result to an Intrusion Detection System (IDS) tool.
Applicable Map Components
The following table lists the map components you must configure for this example.
Map Components
Sample Configuration
Source
Network (SPAN) ports - 1/1/x6, 1/1/x7
Source Ruleset
By Rule
●
Condition - Port Source, Min - 0 and Max - 443.
Application Ruleset
N/A
Applications
My GSOP - De-duplication
Destination
IDS Tool port - 1/1/x3
Configure Traffic Policy
To configure a Traffic Policy to drop duplicate packets using the GigaSMART De-duplication:
1.
Access Traffic Policy.
a.
In GigaVUE-FM, go to Traffic > Traffic Policy. The Traffic Policy landing page appears.
b.
Click New Map in the top right corner of the landing page. The New Map dialog appears.
c.
In the New Map dialog, do the following:
•
Alias - Enter map1.
•
(Optional) Description - Enter the description for the Traffic Policy.
•
(Optional) Enabled - Clear this option, if you want to disable the map. By default, this option is selected.
•
(Optional) Tags - Select a tag key and value for the Traffic Policy, to support policy-level analytics.
d.
Click Save. The Traffic Policy canvas appears.
2.
Select Source.
a.
Click Sources. The Source 1 page appears.
b.
Select the network ports 1/1/x6 and 1/1/x7.
Note: To configure or modify the port type, use the Quick Port Editor.
c.
Click Add. The Source block appears on the canvas with the selected network port.
3.
Select Source Ruleset.
a.
Expand the Source Ruleset component and then drag and drop By Rule. The Source Ruleset page appears.
b.
Click Add Rules. The Add Ruleset pane appears.
c.
Turn on Pass toggle to pass the traffic from the selected source ports.
d.
Select the Bi-directional checkbox.
e.
Select Port Source from the Condition list, and then set the Min to 0 and Max to 443.
f.
Click Save. The added rule appears in the Source Ruleset page.
g.
Click Close. The By Rule block appears on the canvas with the configured rule.
4.
Select Application.
a.
Expand the Applications component and then drag and drop My GSOP. The GSOP page appears.
b.
Select either a standalone node or a cluster from the Select Node list.
c.
You can either select an existing GSOP or create a new GSOP by clicking New from the GSOP field. The New GSOP pane appears with the selected node.
d.
Enter a name for the GigaSMART operation in the GSOP Alias field. For example, gsop-dedup.
e.
You can either select an existing GigaSMART group or create a new group by clicking New in the GigaSMART Group field and the Create GigaSMART Group pane appears.
f.
Enter a name for the GigaSMART group in the Alias field. For example, gs2port1.
g.
Select a GigaSMART engine port from the Port List.
h.
Expand the GigaSMART Parameters, and go to the Dedup section.
i.
Configure the following parameters:
•
Action: Drop
•
IP Tclass: Include
•
IP TOS: Ignore
•
TCP Sequence: Ignore
•
VLAN: Ignore
•
Timer (µs): 500000
j.
Click Save. The New GSOP pane appears.
k.
Select the created GigaSMART group from the GigaSMART Group list.
Note: Enter the GigaSMART operation name in the GSOP Alias field, only after creating the GigaSMART group, if you are creating a new group.
l.
Select De-duplication from the Applications list. By default, the application you select is enabled.
m.
Click Save. The My GSOP block appears on the canvas with the configured GigaSMART operation.
5.
Select Destination.
a.
Click Destinations. The Destination 1 page appears with the list of available ports.
b.
Select the tool port 1/1/x3 port.
Note: To configure or modify the port type, use the Quick Port Editor.
c.
Click Add. The Destination block appears on the canvas with the selected tool port.
6.
Deploy Traffic Policy.
a.
On the Traffic Policy canvas, click Deploy to deploy the Traffic Policy in the device.
7.
Verify deployment.
a.
Status: In the Traffic Policy landing page, verify that the Traffic Policy shows Deployment Status as Success and Health Status as Healthy.
b.
(Optional) Implemented Device: View the generated map and confirm that the traffic statistics is incrementing as expected.
