Start Demo

Deploy the ExtraHop Discover 3000, 6000, or 8000 Appliances

This guide explains how to install the rack-mounted ExtraHop EH3000, EH6000, and EH8000 Discover appliances.

System requirements

The ExtraHop system uses the rack-mounted ExtraHop Discover appliance in conjunction with a browser-based graphical user interface. Installation of the Discover appliance has the following requirements:

EH3000
Appliance
1U of rack space and 495W of power
Network Access
Four 10/100/1000 BASE-T network ports
EH6000
Appliance
1U of rack space and 495W of power
Network Access
Four 10/100/1000 BASE-T network ports and two 10G BASE-SR ports
EH8000
Appliance
2U of rack space and 750W of power
Network Access
Four 10/100/1000 BASE-T network ports and two 10G BASE-SR ports

Install the Discover appliance

To install the Discover appliance, complete the following steps.

  1. Rack Mount the Discover appliance
    Install the Discover appliance in your data center using the included rack-mounting kit, which supports most four-post racks with either round or square holes.
  2. Connect Port 1
    The Discover appliance contains four 10/100/1000 BASE-T network ports and uses the Gb1 port to administer the system. Use a network patch cable to connect the Gb1 port on the Discover appliance to the management network.

Configure an IP address

DHCP is enabled by default on the ExtraHop appliance. When you power on the appliance, interface 1 attempts to acquire an IP address through DHCP. If successful, the IP address appears on the home screen of the LCD. If an IP address has not been configured, the LCD displays No IP.

If your network does not support DHCP, you can configure a static IP address through the LCD menu on the front panel or through the command-line interface (CLI).

Configure an IP address (CLI)

  1. Establish a connection to the ExtraHop appliance.
  2. At the login prompt, type shell and then press ENTER.
  3. At the password prompt, type the service tag number found on the pullout tab on the front of the appliance, and then press ENTER.
  4. Enable the privilege commands. 
    extrahop>enable
Password:
extrahop#
  5. Enter the configuration section. 
    extrahop#config
extrahop(config)#
  6. Enter the interface section. 
    extrahop(config)#interface
extrahop(config-if)#
  7. Set the IP address and DNS using this syntax: ip ipaddr IP_ADDRESS NETMASK GATEWAY DNS_SERVER 
    extrahop(config-if)#ip ipaddr 10.10.2.14 255.255.0.0 10.10.1.253 10.10.1.254
extrahop(config-if)#ip dnsservers 10.10.1.254 10.10.2.254
  8. Save the running config. 
    extrahop(config-if)#exit
extrahop(config) * #running_config save
Would you like to write configuration changes to default config [Y/n]?: y
extrahop(config)#

    After you assign a static IP address, the IP address appears on the LCD at the front of the appliance.

Configure a static IP address through the front panel

Complete the following steps to manually configure an IP address through the front panel LCD controls.

  1. Make sure that the default management interface is connected to the network and the link status is active.
  2. Press the select button (✓) to begin.
  3. Press the right arrow (>) button to select Net and then press the select button.
  4. Press the right arrow button twice to highlight DHCP and then press the select button.
  5. Press the right arrow button to select Static and then press the select button.
  6. Press the right arrow button to select IP and then press the select button. The currently configured IP address appears.
  7. Press the right arrow button until the first digit you want to change is highlighted.
  8. Press the select button. The digit blinks when selected. While the digit is blinking, press the left arrow (<) or right arrow (>) button to change the digit value.
  9. After you have chosen the correct digit, press the select button.
  10. Repeat steps 7-9 for each remaining digit you want to change.
  11. Press the left arrow button to navigate to the up arrow on the display and press the select button.
  12. On the Save screen, select Yes and then press the select button.
  13. Wait a moment to be redirected to the Net screen. Repeat the actions above to set the mask, gateway, and up to two DNS servers.
  14. (Optional): Configure the iDRAC DHCP, IP, mask, gateway, and DNS in the same manner as the IP address.

Configure the system time

By default, ExtraHop appliances synchronize the system time through the *.extrahop.pool.ntp.org network time protocol (NTP) servers. If your network environment prevents the ExtraHop appliance from communicating with these time servers, you must configure an alternate time server source.

  1. Log into the Admin UI on the ExtraHop appliance.
  2. In the Appliance Settings section, click System Time.
  3. Click Configure Time.
  4. Select your time zone from the drop-down list then click Save and Continue.
  5. On the Time Setup page, select one of the following options:
    • Set time manually
      Note:You cannot manually set the time for Discover appliances that are managed by a Command appliance.
    • Set time with NTP server
  6. Select Set time with NTP server and then click Select.
    The ExtraHop time servers, 0.extrahop.pool.ntp.org, 1.extrahop.pool.ntp.org, 2.extrahop.pool.ntp.org, and 3.extrahop.pool.ntp.org appear in the first four Time Server fields by default.
  7. Type the IP address or fully qualified domain name (FQDN) for the time servers in the Time Server fields. You can have up to nine time servers.
    Tip:After adding the fifth time server, click Add Server to display up to four additional timer server fields.
  8. Click Done.

The NTP Status table displays a list of NTP servers that keep the system clock in sync. To sync the current system time a remote server, click the Sync Now button.

Connect the monitoring port

Use a network patch cable to connect the monitoring port on the ExtraHop appliance to a network tap or mirror port on the switch.
Refer to the following diagrams.
EH3000
EH6000
EH8000

Start using the Discover appliance

After logging in, you can navigate the ExtraHop browser-based graphical user interface to configure alerts, monitor and troubleshoot your networks, view metrics for your devices, examine relative performance within device groups, and adjust settings.

  1. Open a browser window and navigate to https://<extrahop_ip>, where <extrahop_ip> is the IP address displayed on the LCD at the front of the Discover appliance.

    The default login is setup and password is the service tag number on the pullout tab on the front of the appliance.

  2. (Optional): You can modify user names and passwords in the ExtraHop Admin UI at https://<extrahop_ip>/admin.

Enable the 10/100/1000 BASE-T ports (EH6000/8000 only)

On the EH6000/8000, the 10GbE ports support SFP+ SR-fiber modules. In certain circumstances, you might want to configure the additional 10/100/1000 BASE-T ports (labeled Gb2, Gb3, and Gb4 on the Discover appliance) for monitoring instead of the 10G BASE-SR ports.

The Gb1 port is a dedicated management interface and cannot be configured for monitoring.

Depending on your license, the Gb3 and Gb4 ports might be disabled on the ExtraHop system. Contact ExtraHop sales at sales@extrahop.com for information about licensing these additional ports.

  1. In your browser, navigate to the Web UI on the ExtraHop appliance at https://<extrahop_ip>/admin, where <extrahop_ip> is the IP address displayed on the LCD at the front of the Discover appliance. Log into the system with the assigned user name and password.
  2. Go to the Network Settings section and click Connectivity.
  3. In the Interface Status section, a diagram of the back of the Discover appliance is displayed.
    Blue Ethernet Port
    Identifies the management port.
    Black Ethernet Port
    Specifies that the port is licensed and enabled but down.
    Green Ethernet Port
    Specifies that the licensed port has an active Ethernet cable connected.
    Gray Ethernet Port
    Identifies a disabled or unlicensed port.
  4. Configure interface 1 for management:
    • To configure interface 1 in the Admin UI:
      1. In the Interface 1 section, click the Change button.
      2. Click the Interface Mode drop-down list, select Management Port, change the other settings as needed, and click Save.

      For more information about throughput, refer to the Connectivity section in the Admin UI Guide.

    • To configure interface 1 in the Admin UI, enter the following commands:
      extrahop#configure
extrahop(config)#interface
extrahop(config-if)#ip ipaddr <extrahop_management_ip> <netmask> <gateway>

      For more information about entering commands in the CLI, refer to the Shell Commands section of the Admin UI Guide.

Published 2020-12-04 17:02