Start Demo

Deploy the ETA 9350 packetstore

This guide explains how to install the rack-mounted ETA 9350 packetstore.

Installation prerequisites

Important:For maximum performance and compatibility, deploy sensors and packetstores in the same datacenter.
To install the ETA 9350, your environment must meet the following requirements:
Packetstore
1U of rack space and electrical connections for 2 x 800 W power supplies.
Management
One 10/100/1000BASE-T network port or one 10GBASE-SR port for packetstore management.
Monitoring (capture)
Traffic feeds must be compatible with the port options on the packetstore, such as two 25GBASE-SR connections. For more information about these ports, see Rear panel ports.
Network Access
TCP 443 must be open between the packetstore and any connected console or sensors, including any system that connects to the ExtraHop system for administration.

For more information about the interfaces on the ExtraHop system, see the ExtraHop Hardware FAQ.

To install the Extended Storage Unit (ESU) for this packetstore, your environment must meet the following requirements:

MD2412 ESU
2U of rack space and electrical connections for 2 x 800 W AC power supply units.
MD2460 ESU
4U of rack space and electrical connections for 2 x 1500 W AC power supply units; requires high line 200-240 VAC.

For more information about ESUs, see Hardware specifications and compatibility.

Rear panel ports

ETA 9350

  1. Power supply unit (PSU1) to connect the packetstore to an AC power source.
  2. Two 25 GbE-capable ports on one network adapter. Ports 5 and 6 are the high-performance monitoring (capture) interfaces.
  3. Four SAS ports to connect extended storage units (ESU).
    Note:You cannot connect older ESUs to this packetstore. For more information about ESU compatibility, see Hardware specifications and compatibility.
  4. One RS-232 serial port to connect a console device.
  5. Power supply unit (PSU2) to connect the packetstore to an AC power source.
  6. One VGA port to connect an external display.
  7. Two USB 3.0 ports to connect input devices such as a keyboard and mouse.
  8. One iDRAC interface port.
  9. Two 10 GbE ports. Ports 3 and 4 can be configured as a management port or as a management and RPCAP/ERSPAN/VXLAN/GENEVE target.
    Note:These ports also function as high-performance monitoring (capture) interfaces. Processing RPCAP, ERSPAN, VXLAN, and GENEVE traffic is limited to 1 Gbps per interface in "Management + RPCAP/ERSPAN/VXLAN/GENEVE" modes, but the ports support up to 10 Gbps per interface in Monitoring and High-Performance ERSPAN/VXLAN/GENEVE target modes.
  10. Two 10/100/1000BASE-T network ports. Port 1 is the primary management port. Both ports can be configured as a monitoring port, management port, or as a management and RPCAP/ERSPAN/VXLAN/GENEVE target.

For more information about the high-performance capture interfaces on the ExtraHop system, see the ExtraHop Hardware FAQ.

Supported packet source connectivity

The packetstore accepts packets through ports 2 to 6. Connect the ports according to the table below.
Connector Peer Connector for Packet Source Customer-Supplied Cabling Supported Operating Speeds
Transceiver-based Connectivity
25 GbE SFP28 SR transceiver 25 GbE SFP28 SR transceiver Multi-mode fiber

LC connectors

 25 Gbps, 10 Gbps
10 GbE SFP+ SR transceiver Multi-mode fiber

LC connectors

 10 Gbps
10 GbE SFP+ SR transceiver 10 GbE SFP+ SR transceiver Multi-mode fiber

LC connectors

 10 Gbps
10 GbE SFP+ SR transceiver 10 GbE SFP+ SR transceiver Multi-mode fiber

LC connectors

 10 Gbps
Direct Attach Connectivity
Customer-supplied SFP28 DAC cable, such as the Mellanox MCP2M00-Axxx series 25 Gbps
Customer-supplied RJ45 Ethernet cable 1 Gbps

Set up the packetstore

  1. Rack mount the packetstore.
    Install the packetstore in your data center with the included rack-mounting kit. The mounting kit supports most four-post racks with either round or square holes.

    Orient the hardware to ensure proper airflow. The cold air intake is through the front of the packetstore.

  2. Connect port 1 to your management network.
    This packetstore has two 10/100/1000BASE-T network ports. With a network patch cable, connect the management port on the packetstore to your management network. Port 1 is the primary management port.
  3. Connect the monitoring port.
    With the appropriate network cable, connect a monitoring port on the packetstore to a network tap or mirror port on the switch.
    Important:The ExtraHop packetstore requires a duplicate feed of the traffic that is sent to the ExtraHop sensor.
    Note:The link lights on the monitoring interface ports do not illuminate until you register the ETA 9350 with your product key and add an ESU.
  4. (Optional): Connect the iDRAC port.
    To enable remote management of the packetstore, connect your management network to the iDRAC port with a network patch cable.
  5. Install the front bezel.
    You must install the front bezel if you want to configure the packetstore through the LCD display.

    Insert the USB connector on the right side of the bezel into the USB port on the front of the packetstore. Press and hold the release button on the left end of the bezel and push the bezel flush with the packetstore until it snaps into place.

  6. Connect any extended storage units (ESUs) by following the procedures in Add storage capacity to an ExtraHop packetstore. For information about packetstore throughput for ETA 9350, see Packetstore throughput.
  7. Connect the two supplied power cords to the power supply units (PSUs) on the back of the packetstore and connect the two power cords to the PSUs on the back of the ESUs.
  8. Connect the power cords into an AC power receptacle.
    If the packetstore does not power on automatically, press the power button on the front-right of the packetstore.

Packetstore throughput

The ETA 9350 packetstore supports a maximum of four standard density (MD2412) ESUs or one high density (MD2460) ESU. You can increase the number of standard density ESUs connected to the ETA 9350 packetstore to increase the available throughput.

Number of ESUs ETA 9350 with MD2412 ETA 9350 with MD2460
1 10 Gbps 50 Gbps
2 25 Gbps x
4 50 Gbps x

Management IP address configuration

DHCP is enabled by default on the ExtraHop system. When you power on the system, the primary management interface attempts to acquire an IP address through DHCP. If successful, the IP address appears on the home screen of the LCD.

If your network does not support DHCP, you can configure a static IP address through the LCD menu on the front panel or through the command-line interface (CLI).

Important:We strongly recommend configuring a unique hostname. If the system IP address changes, the ExtraHop console can re-establish connection easily to the system by hostname.

Configure a static IP address through the LCD

Complete the following steps to manually configure an IP address through the front panel LCD controls.
  1. Make sure that the primary management interface is connected to the network and the link status is active.
  2. Press the select button (✓) to begin.
  3. Press the down arrow button to select Network, and then press the select button.
  4. Press the down arrow to select Set static IP, and then press the select button.
  5. Press the left or right arrows to select the first digit to change, and then press the up or down arrows to change the digit to the desired number.
    Repeat this step for each digit you need to change. After you configure the desired IP address, press the select button.
  6. On the Network mask screen, press the left or right arrows to select the first digit to change, and then press the up or down arrows to change the digit to the desired number.
    Repeat this step for each digit you need to change. After you configure the desired network mask, press the select button.
  7. On the Default gateway screen, press the left or right arrows to select the first digit to change, and then press the up or down arrows to change the digit to the desired number.
    Repeat this step for each digit you need to change. After you configure the desired default gateway, press the select button.
  8. Confirm your modified network settings on the Settings saved screen, and then press any button to return to the Network Menu.
    Note:Each address is preceded by a letter that identifies whether it is the system IP address (I), the gateway address (G), or the netmask (N).
  9. Press the down arrow and scroll to Set DNS servers, and then press the select button.
  10. Press the left or right arrows on the DNS1 screen to select the first digit to change, and then press the up or down arrows to change the digit to the desired number.
    Repeat this step for each digit you need to change, and then press the select button to continue to the DNS2 screen.
  11. Configure a second DNS server.
  12. Confirm the DNS settings on the Settings saved screen, and then press any button to return to the Network Menu.
  13. Press the down arrow twice until ← Back appears, and then press the select button.
  14. Press the down arrow twice to select iDRAC.
  15. Configure the iDRAC DHCP, IP, mask, gateway, and DNS in the same manner as the IP address.
  16. Press the X button to return to the main menu.

Configure an IP address through the CLI

Before you begin

You can access the CLI by connecting a USB keyboard and SVGA monitor to the appliance or through an RS-232 serial (null modem) cable and a terminal emulator program. Set the terminal emulator to 115200 baud with 8 data bits, no parity, 1 stop bit (8N1), and hardware flow control disabled.

You can manually configure an IP address from the CLI.

  1. Establish a connection to the ExtraHop system.
  2. At the login prompt, type shell and then press ENTER.
  3. At the password prompt, type the system serial number and then press ENTER.
    The serial number is printed on a label on the back of the unit. The serial number can also be found on the LCD display on the front of the unit in the Info section.
  4. Enable privileged commands: 
    enable
  5. At the password prompt, type the serial number, and then press ENTER.
  6. Enter configuration mode: 
    configure
  7. Enter interface configuration mode: 
    interface
  8. Run the ip command and specify the IP address and DNS settings in the following format:
    ip ipaddr <ip_address> <netmask> <gateway> <dns_server>
    For example:
    ip ipaddr 10.10.2.14 255.255.0.0 10.10.1.253 10.10.1.254
  9. Leave configuration mode: 
    exit
  10. Save the running configuration file: 
    running_config save
  11. Type y and then press ENTER.
    Note:The system updates the running configuration file and applies the new settings when a link is detected on the interface.

(Optional) Configure the 10 GbE management interface

You can configure a 10 GbE port (port 1 or port 2) to manage the system. The commands below move the settings from port 3 to port 1 and then disables port 3. Alternatively, you can configure the 10 GbE management interface in the Administration settings.

The commands below demonstrate moving the settings from port 3 to port 1, and then disabling port 3. Alternatively, you can configure the 10 GbE management interface in the Administration settings.
  1. Make sure that port 1 is connected to the 10 GbE network.
  2. Establish an SSH connection to the ExtraHop system.
  3. At the login prompt, type shell and then press ENTER.
  4. At the password prompt, type the system serial number and then press ENTER.
    The serial number is printed on a label on the back of the appliance. The serial number is also on the LCD display on the front of the appliance in the Info section.
  5. Enable privileged commands: 
    enable
  6. At the password prompt, type the serial number, and then press ENTER.
  7. Enter configuration mode: 
    configure
  8. Enter interface configuration mode: 
    interface 3
  9. Move the interface settings:
    Warning:This command overwrites the settings for Interface 1 with the settings from Interface 3. The current settings for Interface 1 will be lost and Interface 3 will be disabled.
    take_settings 1
  10. Type Y to proceed and then press ENTER.

Configure the packetstore

Open a web browser and log in to the Administration settings on the ExtraHop system through https://<extrahop-hostname-or-IP-address>/admin with the setup user account. The password is the system serial number that appears in the Info section of the LCD display and on the label on the back of the packetstore.

Verify the configuration

After you have deployed and configured the packetstore, verify that packets are being collected.

Before you begin

You must have a minimum user privilege of view and download packets to perform this procedure.
  1. Log in to the ExtraHop system through https://<extrahop-hostname-or-IP-address>.
  2. Make sure that the Packets menu appears in the top menu.


  3. Click Packets to start a new packet query.
    You should now see a list of the collected packets.
If the Packets menu item does not appear, revisit the Connect sensors and console to the packetstore section. If no results are returned when you perform a packet query, check your network settings. If either issue persists, contact ExtraHop Support.
Last modified 2024-10-07