Configure UCT-C through GigaVUE-FM

The recent GigaVUE-FM image files can be downloaded from the Gigamon Customer Portal. After fetching the image, upload and launch GigaVUE-FM on your GigaVUE V Series Node supported cloud environment. For assistance,Contact Technical Support of Gigamon or refer to GigaVUE Cloud Suite for more information on GigaVUE V Series configuration on the supported cloud environments.

To create a monitoring domain in GigaVUE-FM:

1. In GigaVUE-FM, on the left navigation pane, select Inventory > CONTAINER > Universal Cloud Tap - Container > Monitoring Domains. The Monitoring Domain page appears.
2. In the Monitoring Domain page, click New. The New Monitoring Domain wizard appears.
   
3. Enter or select the required information as described in the following table.
   

   Fields	Description
   Monitoring Domain Name	Enter a name for the monitoring domain
   Connections
   Connection Name	Enter a name for the UCT-C connection
   Cluster Name	Enter a name for the cluster
   URL	Enter the URL of the API server

   Click to add another connection and click to remove an existing connection.

4. Click Save to create a monitoring domain.

Note:  If the connecting UCT-C Tap does not send 3 continuous heart beats, it is marked as disconnected and it is shown on the monitoring domain page as per the interval configured in the UCT-C Purge (the default purge interval is 30 days) before the GigaVUE-FM cleans them up.

When setting up a traffic flow, it is important to define the selection criteria for the sources of traffic. Use the Source Selectors page for configuring the sources of the traffic to be monitored.

To configure the Source Selectors:

1. Select Inventory > Resources> Source Selectors.
2. On the Source Selectors page, navigate to the Container tab and click Create. The New Source Selector wizard appears.
   
3. Enter or select the required information:

   Field	Action
   Name	Enter a name for the source
   Include Filters (Criteria 1) You can select any one of the following options ● All Sources - Select this option to acquire traffic from all names, all pods and containers within the selected cluster(s). Depending on the size of the cluster(s), volume of traffic may be larger. ● Criteria1- You must enter the following options:
   Object Property	Select an object property to filter the traffic source.
   Operator	Select the operator.
   Values	Enter the values for the filter. Values are case-sensitive.
   On the Criteria, click to add another Object and click to remove an existing Object. Exclude Filters (Criteria 1) On the Criteria, click to add another Object and click to remove an existing Object.
   Object Property	Select an object property to filter the traffic source.
   Operator	Select any one of the operators: ● equals ● contains ● startswith ● endwith
   Values	Enter the values for the filter. Values are case-sensitive.

   On the Include or Exclude filters, click to add another Criteria and click to remove an existing Criteria.

4. Click Save to save the filter.

A tunnel of type L2GRE, VXLAN, or TLS-PCAPNG can be created. The tunnel is an egress tunnel. For more information to create a tunnel of type TLS-PCAPNG, refer to Secure Tunnels . Secure Tunnels

To configure the tunnels:

1. Select Inventory > Resources > Tunnel Specifications.
2. On the Tunnel Specifications page, navigate to Container tab and click Create. The Create Tunnel Specification wizard appears.
   
   
3. Enter or select the following information:

Field	Description
Name	The name of the tunnel endpoint.
Tunnel Type	Select L2GRE, VXLAN, or TLS-PCAPNG tunnel type to create a tunnel.
Destination IP Address	Enter the IP address of the destination endpoint
Key	Enter a value for the tunnel key

4. Click Save to save the configuration.

To create a UCT-C Traffic Policy in GigaVUE-FM:

1. From the GigaVUE-FM left navigation pane, select Traffic > CONTAINER > Universal Cloud Tap - Container. The Policies page appears.
2. In the Policies page, click Create. You can create a maximum of eight policies per monitoring domain. The Create Policy wizard appears.
   
   
3. In the General tab, enter or select the required information as described in the following table:
   

   Fields	Description
   Policy Name	Enter a name for the Traffic Policy. The name must be unique.
   Monitoring Domain	Select an existing monitoring domain. To create a new monitoring domain, refer to Create Monitoring Domain section.
   Connections	Select one or more connections for the policy. Once traffic policy is created for monitoring domain, you cannot add or delete connections in a monitoring domain.

4. Switch to the Source Selectors tab, select an existing source selector or select Create New to create a new source selector, refer to Create Source Selectors section for detailed information. You can configure a maximum of eight source selectors per policy.
5. Switch to the Rules tab, enter or select the required information for the Ingress Rules and the Egress Rules as described in the following table. You must select CA in the Monitoring Domain page to use secure tunnel in rules:
   

   Fields	Description
   Rules On the Ingress or Egress rules, click to add another rule and click to remove an existing rule. You must select CA in the Monitoring Domain page to use secure tunnel in rules.
   Rule Name	Enter a name for the rule. Note:  Rule names ending with __I, __E, __RI, __RE are not recommended as the names are invalid in policy rules.
   Enable	Select On to enable the filter or select Off to disable the filter
   Action	Select Pass to allow the packets or select Drop to block the packets based on the filters.
   Direction	Select any one of the following directions: ● Bi-directional - Taps the traffic in both directions. The maximum number of rules supported per direction is 32. Also, each directional rule will add 2 ingress rules and 2 egress rules. ● Ingress- Taps the ingress traffic. ● Egress - Taps the egress traffic. ● Ingress Pass All - Taps all the ingress traffic. ● Egress Pass All - Taps all the egress traffic.
   Priority	Enter a priority value to specify the precedence.
   Tunnel Specifications	Select an existing tunnel or select Create New to create a new tunnel, refer to Create Tunnel Specifications section for detailed information.
   Filters On the rule section, click to add another filter and click to remove an existing filter.
   Filter Type	Select a filter type
   Filter Name	Enter a name for the filter
   Value	Enter a value for the filter

6. Switch to the Deploy tab, click Deploy and the selected traffic policy rules get deployed to the required UCT-C taps present on the nodes corresponding to the source pods selected for monitoring.

The Traffic Policy processes the customer workload traffic and UCT-C forwards the traffic to the tunnel destination IP address.

Note:  When there are two or more policies configured within the same tunnel, you cannot edit the tunnel specifications that are shared in the policies. In such cases, delete all the policies sharing the same tunnel specifications, modify the existing tunnel specifications, and create new policies for the policies that are deleted using the modified tunnel specifications.