ExtraHop Hardware FAQ

What are the physical specifications of ExtraHop appliances?

Which appliances support self-encrypting disks (SEDs)?

What is the appliance voltage?

The power supply is auto-switching and will take 100-240V.

What kind of power cord is required?

We ship our appliances with a power cable that has a C13 connector at the device end and a C14 cable at the outlet end. You can substitute any similarly rated power cable that meets your requirements.

Do appliances contain batteries?

Yes. Rack-mounted appliances contain a single CR2032 lithium battery for the CMOS and a Li-Ion battery attached to the RAID controller card(s).

What kind of connection does the iDRAC interface require?

RJ45 Ethernet.

What is the iDRAC interface for?

Lights-out management (LOM), which enables remote management of the ExtraHop system.

Does this interface require an IP address?

Yes. A static IP is recommended for remote management.

Should that IP address be on the same subnet as the appliance management and capture interfaces?

The iDRAC IP address can be on the same subnet as the management interface.

What switch do I connect the iDRAC interface to?

Connect iDRAC to your management network and VLANs and make sure that your ExtraHop administrators can access the iDRAC IP address.

Can I update the iDRAC controller firmware?

Yes. The iDRAC controller firmware is not updated with the firmware for the ExtraHop system. If you want to take advantage of iDRAC firmware enhancements, follow the instructions on the Dell Technologies website to upgrade the firmware.

Which port is the primary management interface?

For the EDA 1100, EDA 6200, EDA 8200, EDA 8320, EDA 9300, EDA 10300, ETA 9350, IDS 8280, and IDS 9380, interface 1 is the primary management port.

For the EXA 5200, ETA 6150, ETA 8250, EDA 9200, and EDA 10200, interface 3 is the primary management port.

What kind of connection does the primary management interface require?

RJ45 Ethernet.

What is this interface for?

The primary management interface is the interface that attempts to acquire an IP address over DHCP when the appliance first boots after arrival from the factory.

This interface provides both management access to the appliance and can be configured for management plus NetFlow or management plus RPCAP, ERSPAN, and VXLAN. Access is available through a web browser to the ExtraHop system or to the ExtraHop REST API.

Does this interface require an IP address?

Yes.

What switch do I connect this interface to?

Connect this interface to your management network and VLANs. Note that the primary management interface can also send data out of your ExtraHop system to other systems, such as Open Data Stream and syslog.

What kind of connection do these interfaces require?

Depending on the appliance, RJ45 Ethernet or fiber (SFP+ LC).

What are these interfaces for?

On the EDA appliance, these interfaces can be configured as follows:

• As additional dedicated management interfaces
• As management interfaces with auxiliary capture capabilities for the following IP-based data sources
  • RPCAP
  • ERSPAN
  • VXLAN
  • GENEVE
• As capture interfaces for raw packet feeds such as SPAN (1 GbE interfaces only)

While 10 GbE management + capture interfaces on the EDA 9200, EDA 10200, and ETA 8250 appliances can conduct management functions at 10 Gbps speeds, processing traffic such as ERSPAN, VXLAN, and GENEVE is limited to 1 Gbps.

On the EDA 9300, EDA 10300, ETA 9350, and IDS 9380 appliances, processing RPCAP, ERSPAN, VXLAN, and GENEVE traffic is limited to 1 Gbps per interface in "Management + RPCAP/ERSPAN/VXLAN/GENEVE" modes, but the ports support up to 10 Gbps per interface in Monitoring and High-Performance ERSPAN/VXLAN/GENEVE target modes.

Do these interfaces require an IP address?

Yes, if configured as a management port or if processing NetFlow, ERSPAN, RPCAP, or VXLAN target.

Can the primary management IP address be on the same subnet as these management + capture interfaces?

Yes, but only on EDA 9300, EDA 10300, ETA 9350, and IDS 9380 appliances while in High-Performance ERSPAN/VXLAN/GENEVE Target mode. For other appliances, all management-capable interfaces having an IP address must be configured with distinct subnets.

What switch do I connect these interfaces to?

Connect these interfaces to your traffic sources:

• The links where your ERSPAN or RPCAP forwarders are installed
• The links where your SPAN sessions are configured
• A SPAN or packet forwarder aggregation switch

On EDA 9300, EDA 10300, ETA 9350, and IDS 9380 appliances, management interfaces that are not the primary interface are in monitoring mode by default. On other appliances, these management interfaces are disabled by default.

Can multiple ERSPAN sessions be sent to a single ERSPAN port on the appliance?

Yes.

Can multiple interfaces be bonded together?

Yes. Bond interfaces cannot be set to monitoring or High-Performance ERSPAN/VXLAN/GENEVE Target mode.

Can multiple interfaces be configured with a gateway IP address?

No. Only one interface should be configured with a default gateway. Configure static routes if your network requires routing through multiple gateways.

Which interfaces are available for high-performance capture on ExtraHop appliances?

On the EDA 6200, EDA 8200, IDS 8280, ETA 6150, and ETA 8250, interfaces 5-6 are available.

On the EDA 9200 and EDA 10200, interfaces 5-8 are available.

On the EDA 9300, EDA 10300, ETA 9350, and IDS 9380, interfaces 5-8 are available. On these appliances, interfaces 3-4 support both high performance capture or management modes.

What are these interfaces for?

What kind of connection do these interfaces require?

The EDA 6200 and ETA 6150 interfaces are equipped with 10GBASE-SR transceivers. These appliances connect to your equipment through fiber cables to 10GBASE-SR transceivers or through customer-supplied SFP+ DAC (Twinax) cables.

The EDA 8200, EDA 8320, EDA 9200, EDA 9300, ETA 8250, ETA 9350, IDS 8280, and IDS 9380 interfaces are equipped with 25GBASE-SR transceivers. These appliances connect to your equipment through fiber cables to 25GBASE-SR or 10GBASE-SR transceivers or through SFP28 DAC cables that you supply.

The EDA 10200 and EDA 10300 interfaces are equipped with 100GBASE-SR4 transceivers in their factory default configuration. These appliances connect to your equipment through fiber cables and 40GBASE-SR4 or 100GBASE-SR4 transceivers or through QSFP28 DAC cables that you supply. The EDA 10200 can be ordered with 25GBASE-SR transceivers for connection to your equipment similar to the ETA 8250.

What kind of fiber optic cable is required?

Appliances with 10GBASE-SR and 25GBASE-SR transceivers require 850nm multimode fiber cables with LC connectors.

The EDA 10200 and EDA 10300 with 100GBASE-SR4 transceivers require 850nm multimode fiber cables with MPO connectors.

Who provides the transceivers?

On all appliances except for the EDA 10200 and EDA 10300, ExtraHop provides one SFP transceiver for each appliance interface.

The EDA 10200 and EDA10300 have a total of four ports. The factory default appliance configuration has two ports with 100GBASE-SR4 transceivers and two open ports. You can order two or four 25GBASE-SR transceivers for the four available ports.

You must provide an SFP transceiver that is compatible with your switch

What switch do I connect these interfaces to?

Connect these interfaces to your traffic sources:

• The links where your ERSPAN and RPCAP forwarders are installed
• The links where your SPAN sessions are configured
• A SPAN or packet forwarder aggregation switch