Connect an ExtraHop console to an ExtraHop sensor

You can manage multiple ExtraHop sensors from a console. After you connect the sensors, you can view and edit the sensor properties, assign a nickname, upgrade firmware, check the license status, and create a diagnostic support package.

The console connects directly to the sensor over HTTPS on port 443. If it is not possible to establish a direct connection because of firewall restrictions in your network environment, you can connect to the console through a tunneled connection from the ExtraHop sensor.

Before you begin

  • You can only establish a connection to a sensor that is licensed for the same system edition as the console. For example, a console on Reveal(x) Enterprise can only connect to sensors on Reveal(x) Enterprise.
  • We strongly recommend that you configure a unique hostname for each sensor. If the IP address on the sensor is changed, the console can re-establish connection easily to the sensor by hostname.

Generate a token on the sensor

Generate a token on the sensor before beginning the connection procedure on the console.
  1. Log in to the Administration settings on the sensor through https://<extrahop-hostname-or-IP-address>/admin.
  2. In the ExtraHop Command Settings section, click Generate Token.
  3. Click Generate Token.
  4. Copy the token and continue to the next procedure.

Connect the console and sensors

  1. Log in to the Administration settings on the console through https://<extrahop-hostname-or-IP-address>/admin.
  2. In the ExtraHop Sensor Settings section, click Manage Sensors.
  3. In the ExtraHop Sensor section, click Connect Appliance.
  4. Type the hostname or IP address of the sensor into the Host field.
  5. Click Connect.
  6. Configure the following fields:

    Token from ExtraHop Sensor: The token that you generated on the sensor.

    Sensor Nickname (Recommended): A friendly name for the ExtraHop system. If no nickname is entered, the system is identified by the hostname.

  7. (Optional): Select Reset configuration to remove existing system customizations such as device groups, alerts, and triggers from the ExtraHop system. Gathered metrics such as captures and devices will not be removed.
  8. Click Connect.

Connect to a console from a sensor

You can connect the ExtraHop sensor to the console through an SSH tunnel.

We recommend that you always connect sensors directly through the console; however, a tunneled connection might be required in network environments where a direct connection from the console is not possible because of firewalls or other network restrictions. After you connect the sensors, you can view and edit the sensor properties, assign a nickname, update firmware, check the license status, and create a diagnostic support package.

Before you begin

  • You can only establish a connection to a sensor that is licensed for the same system edition as the console. For example, a console on Reveal(x) Enterprise can only connect to sensors on Reveal(x) Enterprise.
  1. Log in to the Administration settings on the sensor.
  2. In the ExtraHop Console Settings section, click Connect Consoles.
  3. Click Connect Console and then and then configure the following fields:

    Host: The hostname or IP address of the console.

    Note:You cannot specify an IPv6 link-local address.

    Setup password: The password for the setup user on the console.

    Sensor nickname (Optional): A friendly name for the sensor that appears on the Manage Connected Appliances page. If no friendly name is configured, the hostname for the sensor appears instead.

    Reset configuration: If you select the Reset Configuration checkbox, existing sensor customizations such as device groups, alerts, and triggers will be removed from the sensor. Gathered metrics such as captures and devices will not be removed.

  4. Click Connect.
Published 2022-09-26