Deploy the ExtraHop Discover EH3000, EH6000, or EH8000 Appliances

This guide explains how to install the rack-mounted ExtraHop EH3000, EH6000, and EH8000 Discover appliances.

System Requirements

The ExtraHop system uses the rack-mounted ExtraHop Discover appliance in conjunction with a browser-based graphical user interface. Installation of the Discover appliance has the following requirements:

EH3000

  • Appliance: 1U of rack space and 495W of power
  • Network Access: Four 10/100/1000 BASE-T network ports

EH6000

  • Appliance: 1U of rack space and 495W of power
  • Network Access: Four 10/100/1000 BASE-T network ports and two 10G BASE-SR ports

EH8000

  • Appliance: 2U of rack space and 750W of power
  • Network Access: Four 10/100/1000 BASE-T network ports and two 10G BASE-SR ports

Install the Discover Appliance

To install the Discover appliance, complete the following steps.

  1. Rack Mount the Discover Appliance: Install the Discover appliance in your datacenter using the included rack-mounting kit, which supports most four-post racks with either round or square holes.

  2. Connect Port 1: The Discover appliance contains four 10/100/1000 BASE-T network ports and uses the Gb1 port to administer the system. Use a network patch cable to connect the Gb1 port on the Discover appliance to the management network.

Configure an IP Address

You can configure the Discover appliancewith a dynamic IP address through DHCP IP or configure an IP address manually. The front panel of the Explore appliance displays the assigned IP address.

Dynamically Acquired IP Address: DHCP is enabled by default on the . When you power on the system, interface 1 attempts to acquire an IP address through DHCP.

Static IP Address (CLI):If your network does not support DHCP, you can configure a static IP address.

At the CLI, complete the following steps to set the IP address.

  1. Log in to the console with the shell user account. The password is the service tag number on the pullout tab on the front of the appliance.

  2. Enable the privilege commands.

    extrahop>enable

    Password:

    extrahop#

  3. Enter the configuration section.

    extrahop#config

    extrahop(config)#

  4. Enter the interface section.

    extrahop(config)#interface

    extrahop(config-if)#

  5. Set the IP address and DNS using this syntax: ip ipaddr IP_ADDRESS NETMASK GATEWAY DNS_SERVER

    extrahop(config-if)#ip ipaddr 10.10.2.14 255.255.0.0 10.10.1.253 10.10.1.254

    extrahop(config-if)#ip dnsservers 10.10.1.254 10.10.2.254

  6. Save the running config.

    extrahop(config-if)#exit

    extrahop(config) * #running_config save

    Would you like to write configuration changes to default config [Y/n]?: y

    extrahop(config)#

    After you assign a static IP address, the IP address appears on the LCD at the front of the appliance.

Static IP Address (LCD): When the appliance is running, the LCD displays the existing IP.

If an IP address hasn’t been configured, the LCD displays No IP. Complete the following steps to configure the IP address.

  1. Press the Select (checkmark) button. Navigate using the left and right arrow buttons. Select Net.

  2. Select Host.

    The screen displays the host name. Return to the previous screen by scrolling to the up arrow on the screen and selecting it.

  3. Select DHCP to see how the IP address is configured. Use left and right arrow buttons to select an option and press the Select button.

  4. On the Net screen, select IP and use the left and right arrow buttons to move between the digits. On the selected digit, click the Select button. The digit blinks when selected. While the digit is blinking, use the left and right arrow buttons to change the digit value.

  5. Once you have entered the number, click Select to once again use the left arrow button to navigate to the up arrow on the screen and select it. On the Save screen, select Yes.

  6. Wait a moment to be redirected to the Net screen. Repeat these steps to set the mask, gateway, and up to two DNS servers.

  7. Use the arrow keys to scroll back to the Home menu and select iDRAC. Configure the iDRAC DHCP, IP, mask, gateway, and DNS in the same manner as the IP.

  8. On the Net screen, select Errors to view system events such as CPU errors, undetected hard drives, or missing power supplies. When an error occurs, the LCD turns amber and displays the error immediately.

  9. If there are multiple errors, use the left and right arrow buttons to scroll between the error messages. Press the Select button to exit the error screen. The Clear option removes the list of messages from the error screen.

  10. When the system is not running, the LCD screen displays ExtraHop.

Configure the System Time

The default time server setting is pool.ntp.org. If you want to use the default setting, go to the next section.

You can configure the system time manually in the CLI. The login is shell and the password is the service tag number on the pullout tab on the front of the appliance. Type enable and enter the same password when prompted.

extrahop>enable

extrahop#configure

extrahop(config)#time Jan 1 2009 00:00:00

extrahop(config)#exit

extrahop#exit

Connect the Monitoring Port

Use a network patch cable to connect the monitoring port on the ExtraHop appliance to a network tap or mirror port on the switch. Refer to the following diagrams.

EH3000

EH6000

EH8000

Start Using the Discover Appliance

Open a browser window and navigate to https://<extrahop_ip>, where <extrahop_ip> is the IP address displayed on the LCD at the front of the Discover appliance.

The default login is setup and password is the service tag number on the pullout tab on the front of the appliance. You can modify user names and passwords in the ExtraHop Admin UI at https://<extrahop_ip>/admin.

After logging in, you can navigate the ExtraHop browser-based graphical user interface to configure alerts, monitor and troubleshoot your networks, view metrics for your devices, examine relative performance within device groups, and adjust settings.

Enable the 10/100/1000 BASE-T Ports (EH6000/8000 Only)

On the EH6000/8000, the 10GbE ports support SFP+ SR-fiber modules. In certain circumstances, you might want to use the additional 10/100/1000 BASE-T ports (labeled Gb2, Gb3, and Gb4 on the Discover appliance) for monitoring instead of the 10G BASE-SR ports.

The Gb1 port is a dedicated management interface and cannot be used for monitoring.
Depending on your license, the Gb3 and Gb4 ports may be disabled on the ExtraHop system. Contact ExtraHop sales at sales@extrahop.com for information about licensing these additional ports.

Complete the following steps to enable the 10/100/1000 BASE-T ports.

  1. In your browser, navigate to the ExtraHop web administration utility at https://<extrahop_ip>/admin, where <extrahop_ip> is the IP address displayed on the LCD at the front of the Discover appliance. Log in to the system with the assigned user name and password.

  2. Go to the Network Settings section and click Connectivity.

  3. In the Interface Status section, a diagram of the back of the Discover appliance is displayed.

    • Blue Ethernet Port: Identifies the management port.

    • Black Ethernet Port: Specifies that the port is licensed and enabled but down.

    • Green Ethernet Port: Specifies that the licensed port has an active Ethernet cable connected.

    • Gray Ethernet Port: Identifies a disabled or unlicensed port.

  4. Configure interface 1 for management:

    • Admin UI: In the Interface 1 section, click the Change button.

      Click the Interface Mode drop-down list, select Management Port, change the other settings as needed, and click Save.

      For more information about throughput, refer to the Connectivity section in the Admin UI Guide.

    • CLI: Enter the following commands:

      extrahop#configure

      extrahop(config)#interface

      extrahop(config-if)#ip ipaddr <extrahop_management_ip> <netmask> <gateway>

      For more information about entering commands in the CLI, refer to the Shell Commands section of the Admin UI Users Guide.

Published 2017-07-17 18:27