Configure GigaSMART IP Encapsulation/Decapsulation

This section contains the following topics:

  • Configure Both Ends of GigaSMART Tunnel

  • Configure Sending End of Tunnel: GigaVUE‑HC1 in Reno

  • Configure Receiving End of Tunnel: GigaVUE‑HC3 with GigaSMART in San Francisco

Creating a GigaSMART tunnel requires configuration on both the sending and receiving ends:

Sending End of Tunnel

Receiving End of Tunnel

The sending end of a GigaSMART tunnel can be either a GigaVUE-VM deployment or a GigaSMART-enabled GigaVUE H Series node.

Sending Data from a GigaSMART-Enabled GigaVUE H Series Node

o Configure an IP interface with an IP address, subnet mask, default gateway, MTU setting and assign it to a GigaSMART group.
o Create a GigaSMART operation with a tunnel-encap component. The encapsulation settings include the IP address and listening UDP port of the P interface that is associated with a network port on the destination GigaVUE H Series.
o Bind the GigaSMART operation to one or more network ports as part of a map. The network ports must be mapped to the IP interface associated with a tool port.

Sending Data from GigaVUE-VM/GigaVUE‑FM

When you provision a vMap for a GigaVUE-VM node in GigaVUE‑FM, in addition to selecting the virtual traffic to be forwarded, you also specify the destination to which traffic should be tunneled with the following settings:

o UDP IP – The IP address of the P interface that is associated with a network port on the receiving end of the tunnel.
o UDP Source Port – The source port from which traffic will be sent to the receiving end of the GigaSMART tunnel.
o UDP Destination Port – The listening UDP port at the destination end of the GigaSMART tunnel.

Sending Data from GigaVUE-2404/GigaSMART-6X

o Configure an IP interface with an IP address, subnet mask, default gateway, and MTU setting. Associate the IP interface with a tool port.
o Create a GigaSMART operation with an encapsulation component. The encapsulation settings include the IP address and listening UDP port of the IP interface thst is associated with network port on the destination device.
o Bind the GigaSMART operation to one or more network ports as part of a map rule with at least one regular map rule criterion. The network ports must be mapped to the IP interface associated with a tool port.
o Configure an IP interface with an IP address, subnet mask, and default gateway. The IP address must match the destination IP address specified at the sending end of the tunnel.
o Create a GigaSMART operation with a decapsulation component. The decapsulation settings include the same listening UDP port you specified as the destination port at the sending end of the tunnel.
o Bind the GigaSMART operation to the IP interface that is associated with a network port as part of a map that distributes arriving traffic to local tool ports for analysis with local tools.

Keep in mind the following when configuring GigaSMART operations with encapsulation/decapsulation components:

Feature

Description

Viewing Statistics

Use the show tunneled-port commands to see statistics related to ongoing tunnel operations. Refer to View GigaSMART Statistics for more information.

Packet Order

Packer sequence is not preserved if the packets are reordered while traversing the Internet. The receiving GigaSMART delivers them in the same order received.

GMIP Header

The GMIP header is 46 bytes consisting of 14 Ethernet + 20 IP + 8 UDP + 4 tunnel version.

Tunnel Decap Type GMIP portdst

Use the GigaSMART Operations page to specify the UDP port on which the P interface that is associated with a network port on the receiving GigaVUE HC Series is listening. Use this option when decapsulating traffic from a either GigaSMART-enabled node or a GigaVUE-VM deployment. The setting must match the configuration of the portdst configured on the sending end of the tunnel.

GigaSMART Engine Ports

GigaSMART operations with a tunnel component can be assigned to GigaSMART groups consisting of multiple GigaSMART engine ports. Refer to Groups of GigaSMART Engine Ports

for more information.

The following figures demonstrate how to create a sample IP tunnel between a sending GigaVUE‑HC1 in Reno and a receiving GigaVUE H Series cluster in San Francisco. First, the overall tunnel is summarized, followed by configuration descriptions for the sending and receiving ends.

The GigaVUE‑HC1 in this location has an IP interface configured on tool port 1/1/g1 with an IP address of 11.1.9.75. Maps to this port that use a tunnel encapsulation GigaSMART operation can send data over the Internet. The following table summarizes the commands necessary to configure the sending end of the tunnel in the GigaVUE-FM:

Task

UI Steps

Start by designating port 1/1/g1 as a tool port.
1. Select Ports > Ports > All Ports.
2. Click Quick Port Editor.
3. In the Quick View Editor find port 1/1/g1.
4. Set Type to Tool.
5. Select Enable
6. Click OK.
7. Close the Quick Port Editor.

Use the IP Interfaces page to set up the network parameters for 1/1/g1. This page sets the IP address, subnet mask, default gateway, and MTU for the IP interface associated with a tool port on port 1/1/g1. Notice that the GigaSMART group in this example has the alias gsport1.
1. Select Ports > IP Interfaces.
2. Click New.
3. Configure the IP interface:
■   Alias: 1_1_g1
■   Port: 1/1/g1
■   IP Address: 11.1.9.75
■   IP Mask: 255.255.255.0
■   Gateway: 11.1.9.1
■   MTU: 9400
■   GigaSMART Group: gsport1
4. Click OK.

Now, create a tunnel encapsulation GigaSMART operation (tunnelencap) that will send traffic to IP address 21.2.9.75 on destination UDP port 10000 from source port 5000. The operation has the alias tunnelenc.
1. From the device view, select GigaSMART > GigaSMART Operations (GSOP) > GigaSMART Operation.
2. Click New.
3. Configure the GigaSMART Operation:
■   Alias: tunnelenc
■   GigaSMART Groups: gsport1
■   GigaSMART Operations (GSOP): Tunnel Encapsulation
4. Configure Tunnel Encapsulation:
■   GMIP
■   Destination: IPv4
■   Port Source: 5000
■   Port Destination: 10000
■   Destination IP: 21.2.9.75
■   DSCP: 0
■   Precision: 1
■   TTL: 64
5. Click Save.

Once you have the tunnel encapsulation operation, you can include it as part of a map rule. This map rule matches IPv4 packets and sends them to 21.2.9.75:10000 (the socket specified by the GigaSMART operation named tunnelencap that you created in the previous step).
1. Select Maps > Maps > Maps
2. Click New.
3. Configure the map.
■   Alias: tunnelencap
■   Type: Regular
■   Subtype: By Rule
■   Source: 1/1/x3
■   Destination; 1/1/x1
■   GigaSMART Operations (GSOP): tunnelencap (gsport1)
4. Click Add Rule.
5. Select Pass.
6. Select IP Version for Rule 1.
7. Select v4 Version.
8. Save.

Now we need to configure the receiving end of the tunnel with an IP interface associated with network port. The GigaVUE‑HC3 in this location will have an IP interface associated with network port configured on network port 5/1/x2 with an IP address of 21.2.9.75 and a GigaSMART decapsulation operation that listens on UDP port 10000.

The following table summarizes the steps necessary to configure the receiving end of the tunnel using the UI:

Task

UI Steps

Start by designating port 5/1/x2 as a network port.
1. Select Ports > Ports > All Ports.
2. Click Quick Port Editor.
3. In the Quick View Editor find port 5/1/x2.
4. Set Type to Network.
5. Select Enable
6. OK.
7. Close the Quick Port Editor.

Use the IP Interfaces page to set up the network parameters for 5/1/x2. This command sets the IP address, subnet mask, default gateway, and MTU for the IP interface associated with network port on port 5/1/x2. Note that this port uses the same IP address to which the GSOP in Reno is configured to send data (21.2.9.75).
1. Select Ports > IP Interfaces.
2. Click New.
3. Configure the IP Interface:
■   Alias: 1_1_x2
■   Port: 1/1/x2
■   IP Address: 21.2.9.75
■   IP Mask: 255.255.255.0
■   Gateway: 21.2.9.1
■   MTU: 9400
■   GigaSMART Group: gsport5
4. Save.

Now, create a tunnel decapsulation GigaSMART operation (tunnel-decap) that will decapsulate traffic received on UDP port 10000. Recall that we configured the sending end of the tunnel to send to that UDP port. The operation has the alias hd-decap1.
1. From the device view, select GigaSMART > GigaSMART Operations (GSOP).
2. Click New.
3. Configure the GigaSMART Operation:
■   Alias: hd-decap1
■   GigaSMART Groups: gsport5
■   GigaSMART Operations (GSOP): Tunnel Decapsulation
4. Configure the Tunnel Decapsulation.
■   GMIP
■   GMIP Port: 10000
5. Save.

Once you have your tunnel decapsulation operation, you can include it as part of a map rule. This map decapsulates all traffic arriving at 5/1/x2 from IP address 21.2.9.25 (the start of the tunnel) and sends it to port 1/1/x5. This is a tool port on the chassis with box ID 1 in this cluster.
1. Select Maps > Maps > Maps
2. Click New.
3. Configure the map.
■   Alias: decapper
■   Type: Regular
■   Subtype: By Rule
■   Source: 5/1/x2
■   Destination: 1/1/x5
■   GigaSMART Operations (GSOP): hd-decap1 (gsport5)
4. Click Add Rule.
5. Select Pass.
6. Select IPv4 Source for Rule 1.
7. Set the IPv4 Address to 11.1.9.75
8. Set the Net Mask to 255.255.255.0
9. Save.