Start Demo

Specify the locality for IP addresses

By adding a CIDR block to the Network Localities page, you can classify traffic from these IP addresses as internal or external to your network.

Here are some important considerations:

  • You must have full-write privileges to change the locality of IP addresses.
  • You must enter a unique range of IP addresses.
  • If you have an ExtraHop Command appliance, you must configure these settings in the Command appliance and in all connected Discover appliances.
  1. Log in to the ExtraHop system through https://<extrahop-hostname-or-IP-address>.
  2. Click the System Settings icon and then click Network Localities.
  3. Click Add a CIDR Block.
  4. In the Network field, type a single IP address or CIDR block.
  5. Select Internal or External, based on which classification you want to apply to the CIDR block.
  6. (Optional): In the Description field, type information about why you are configuring the locality of this CIDR block.
  7. Click Save.
  8. To add more entries, click Add CIDR.

Next steps

Verify that the ExtraHop system no longer classifies an IP address as an external or internal by completing the following steps:
  1. Click Assets at the top of the page and then click Protocols.
  2. Click the device count for TCP . A protocol page appears that displays metrics for every device on your network with TCP activity.
  3. In the TCP Connections section, look for changes in the number of External Accepted and External Connected metrics. For example, if you classified a large CIDR block for a remote office as Internal, then the number of external connections should be lower.

Filter IP addresses by locality

You can filter detail metric data by internal or external IP addresses.

  1. Log in to the ExtraHop system through https://<extrahop-hostname-or-IP-address>.
  2. Drill down on a metric from a dashboard or protocol page by client, server, or IP address.
    A detail metric page appears that displays metric data listed by IP address.
  3. In the trifield filter, click Any Field and then click Network Locality, as shown in the following figure.


  4. Click All Locations and then select Internal or External.
  5. Click Add Filter.
Detail metric data for internal or external devices is displayed.
Published 2021-01-20 16:46