Start Demo

Deploy the ExtraHop Discover EDA 3000, EDA 6000, or EDA 8000 Appliances

This guide explains how to install the rack-mounted ExtraHop EDA 3000, EDA 6000, and EDA 8000 Discover appliances.

System requirements

The ExtraHop system uses the rack-mounted ExtraHop Discover appliance in conjunction with a browser-based graphical user interface. Installation of the Discover appliance has the following requirements:

EDA 3000
Appliance
1U of rack space and 495W of power
Network Access
Four 10/100/1000 BASE-T network ports
EDA 6000
Appliance
1U of rack space and 495W of power
Network Access
Four 10/100/1000 BASE-T network ports and two 10G BASE-SR ports
EDA 8000
Appliance
2U of rack space and 750W of power
Network Access
Four 10/100/1000 BASE-T network ports and two 10G BASE-SR ports

Install the Discover appliance

To install the Discover appliance, complete the following steps.

  1. Rack Mount the Discover Appliance
    Install the Discover appliance in your datacenter using the included rack-mounting kit, which supports most four-post racks with either round or square holes.
  2. Connect Port 1
    The Discover appliance contains four 10/100/1000 BASE-T network ports and uses the Gb1 port to administer the system. Use a network patch cable to connect the Gb1 port on the Discover appliance to the management network.

Configure an IP address

You can configure the appliance with a dynamic IP address through DHCP IP or configure an IP address manually. The front panel of the appliance displays the assigned IP address.

Dynamically Acquired IP Address
DHCP is enabled by default. When you power on the system, interface 1 attempts to acquire an IP address through DHCP.
Static IP Address
If your network does not support DHCP, you can configure a static IP address either through the CLI or LCD.

Configure an IP address (CLI)

  1. Log in to the console with the shell user account.
    The password is the service tag number on the pullout tab on the front of the appliance.
  2. Enable the privilege commands. 
    extrahop>enable
Password:
extrahop#
  3. Enter the configuration section. 
    extrahop#config
extrahop(config)#
  4. Enter the interface section. 
    extrahop(config)#interface
extrahop(config-if)#
  5. Set the IP address and DNS using this syntax: ip ipaddr IP_ADDRESS NETMASK GATEWAY DNS_SERVER 
    extrahop(config-if)#ip ipaddr 10.10.2.14 255.255.0.0 10.10.1.253 10.10.1.254
extrahop(config-if)#ip dnsservers 10.10.1.254 10.10.2.254
  6. Save the running config. 
    extrahop(config-if)#exit
extrahop(config) * #running_config save
Would you like to write configuration changes to default config [Y/n]?: y
extrahop(config)#

    After you assign a static IP address, the IP address appears on the LCD at the front of the appliance.

Configure an IP Address (LCD)

If an IP address has not been configured, the LCD displays No IP. Complete the following steps to configure the IP address.
  1. Press the checkmark button.
  2. Press the arrow buttons to select Net.
  3. Select Host.
    The screen displays the host name. Return to the previous screen by scrolling to the up arrow on the screen and selecting it.
  4. Select DHCP to see how the IP address is configured. Press the left and right arrow buttons to select an option and then press the Select button.
  5. On the Net screen, select IP and press the left and right arrow buttons to move between the digits. On the selected digit, click the checkmark button. The digit blinks when selected. While the digit is blinking, press the left and right arrow buttons to change the digit value.
  6. After you have entered the number, click the checkmark button.
  7. Press the left arrow button to navigate to the up arrow on the screen and select it.
  8. On the Save screen, select Yes and then press the checkmark button.
  9. Wait a moment to be redirected to the Net screen. Repeat these steps to set the mask, gateway, and up to two DNS servers.
  10. Press the arrow keys to scroll back to the Home menu and select iDRAC.
  11. Configure the iDRAC DHCP, IP, mask, gateway, and DNS in the same manner as the IP.
  12. On the Net screen, select Errors to view system events such as CPU errors, undetected hard drives, or missing power supplies. When an error occurs, the LCD turns amber and displays the error immediately.
  13. If there are multiple errors, press the left and right arrow buttons to scroll between the error messages. Press the Select button to exit the error screen. The Clear option removes the list of messages from the error screen.
  14. When the system is not running, the LCD screen displays ExtraHop.

Configure the System Time

The default time server setting is pool.ntp.org. If you want to maintain the default setting, skip this procedure and go to the next section.

  1. In the System Settings section, click System Time.
  2. Click Configure Time.
  3. Click the Time Zone drop-down list and select a time zone.
  4. Click Save and Continue.
  5. Type the IP address or FQDN for the time servers in the Time Server fields.
  6. Click Save, and then click Done.

Connect the monitoring port

Use a network patch cable to connect the monitoring port on the ExtraHop appliance to a network tap or mirror port on the switch.
Refer to the following diagrams.
EDA 3000
EDA 6000
EDA 8000

Start using the Discover appliance

After logging in, you can navigate the ExtraHop browser-based graphical user interface to configure alerts, monitor and troubleshoot your networks, view metrics for your devices, examine relative performance within device groups, and adjust settings.

  1. Open a browser window and navigate to https://<extrahop_ip>, where <extrahop_ip> is the IP address displayed on the LCD at the front of the Discover appliance.

    The default login is setup and password is the service tag number on the pullout tab on the front of the appliance.

  2. Optional: You can modify user names and passwords in the ExtraHop Admin UI at https://<extrahop_ip>/admin.

Enable the 10/100/1000 BASE-T ports (EDA 6000/8000 only)

On the EDA 6000/8000, the 10GbE ports support SFP+ SR-fiber modules. In certain circumstances, you might want to configure the additional 10/100/1000 BASE-T ports (labeled Gb2, Gb3, and Gb4 on the Discover appliance) for monitoring instead of the 10G BASE-SR ports.

The Gb1 port is a dedicated management interface and cannot be configured for monitoring.

Depending on your license, the Gb3 and Gb4 ports might be disabled on the ExtraHop system. Contact ExtraHop sales at sales@extrahop.com for information about licensing these additional ports.

  1. In your browser, navigate to the Web UI on the ExtraHop appliance at https://<extrahop_ip>/admin, where <extrahop_ip> is the IP address displayed on the LCD at the front of the Discover appliance. Log into the system with the assigned user name and password.
  2. Go to the Network Settings section and click Connectivity.
  3. In the Interface Status section, a diagram of the back of the Discover appliance is displayed.
    Blue Ethernet Port
    Identifies the management port.
    Black Ethernet Port
    Specifies that the port is licensed and enabled but down.
    Green Ethernet Port
    Specifies that the licensed port has an active Ethernet cable connected.
    Gray Ethernet Port
    Identifies a disabled or unlicensed port.
  4. Configure interface 1 for management:
    • To configure interface 1 in the Admin UI:
      1. In the Interface 1 section, click the Change button.
      2. Click the Interface Mode drop-down list, select Management Port, change the other settings as needed, and click Save.

      For more information about throughput, refer to the Connectivity section in the Admin UI Guide.

    • To configure interface 1 in the Admin UI, enter the following commands:
      extrahop#configure
extrahop(config)#interface
extrahop(config-if)#ip ipaddr <extrahop_management_ip> <netmask> <gateway>

      For more information about entering commands in the CLI, refer to the Shell Commands section of the Admin UI Guide.

Published 2018-08-13 16:04