Deploy the ExtraHop ECA VM console with Hyper-V

The following procedures explain how to deploy an ExtraHop virtual on the Microsoft Hyper-V platform. You must have experience administering your hypervisor product to complete these procedures.

If you need either the installation package files or a license key for the virtual appliance, contact support@extrahop.com.

Virtual machine requirements

You must have an existing installation of Hyper-V on Windows Server 2012 (or later) capable of hosting the ECA VM console. In addition, you need Hyper-V Manager to manage the virtual machine.

The following server hardware is required for the virtual console:
CPU
2 CPUs with hyper-threading support, VT-x or AMD-V technology, 64-bit architecture, and Supplemental Streaming SIMD Extensions 3 (SSSE3) support.
RAM
4 GB RAM
Disk
44 GB or higher disk (thick-provisioned)
Important:If you want to deploy more than one ExtraHop virtual sensor, create the new instance with the original deployment package or clone an existing instance that has never been started.

Performance guidelines

The performance of the ECA VM console depends on the number of sensors you are deploying in combination with the number of devices you expect the system to discover in your environment. To determine the appropriate sizing, see the ECA VM Console Performance Guidelines.

Install the files for Hyper-V

Before you begin

If you have not already done so, download the ExtraHop ECA VM virtual console file for Hyper-V from the ExtraHop Customer Portal and extract the contents from the .zip file to your Windows Server machine.
  1. Go to the Start menu and open the Hyper-V Manager.
  2. In the right pane of the Hyper-V Manager, click New and select Import Virtual Machine….
  3. If the Before You Begin screen appears, click Next. Otherwise, continue to the next step.
  4. Browse to the folder with the extracted files and click Next.
  5. Select the virtual machine to import and click Next.
  6. Select Copy the virtual machine and click Next.
  7. On Choose Folders for Virtual Machine Files, select the location to store the configuration of the VM and click Next.
  8. On Choose Storage Folders to Store Virtual Hard Disks, select a location to store the virtual hard disks and click Next.
  9. On the summary screen review your choices and then click Finish.
  10. Wait several minutes for the files to copy.
  11. In the Virtual Machines list, right-click the virtual machine and select Start.
  12. Right-click the virtual machine again and select Connect.
  13. Click the green start button at the top of the screen and wait for the login prompt.
  14. At the login prompt, type shell and then press ENTER.
  15. At the password prompt, type default, and then press ENTER.
  16. Run the show ipaddr command to display the IP address of the console. You need the IP address to apply the ExtraHop license in the next procedure.
    Note:If your network does not support DHCP, see Configure a Static IP Address to set a static IP address.

Configure a static IP address through the CLI

The ExtraHop system is configured by default with DHCP enabled. If your network does not support DHCP, no IP address is acquired, and you must configure a static address manually.

Important:For deployments that include a sensor that is connected to an ECA VM console, we strongly recommend configuring a unique hostname. If the IP address on the sensor is changed, the console can re-establish connection easily to the sensor by hostname.
  1. Access the CLI through an SSH connection, by connecting a USB keyboard and SVGA monitor to the physical ExtraHop appliance, or through an RS-232 serial (null modem) cable and a terminal emulator program. Set the terminal emulator to 115200 baud with 8 data bits, no parity, 1 stop bit (8N1), and hardware flow control disabled.
  2. At the login prompt, type shell and then press ENTER.
  3. At the password prompt, type default, and then press ENTER.
  4. To configure the static IP address, run the following commands:
    1. Enable privileged commands:
      enable
    2. At the password prompt, type default, and then press ENTER.
    3. Enter configuration mode:
      configure
    4. Enter the interface configuration mode:
      interface
    5. Run the ip command and specify the IP address and DNS settings in the following format: ip ipaddr <ip_address> <netmask> <gateway> <dns_server>
      For example:
      ip ipaddr 10.10.2.14 255.255.0.0 10.10.1.253 10.10.1.254
    6. Leave the interface configuration section:
      exit
    7. Save the running config file:
      running_config save
    8. Type y and then press ENTER.

Post-deployment actions

Open a web browser and type the IP address of the ExtraHop system in the address bar and then press ENTER. Accept the EULA and enter the product key to license the console.

Log in to the ExtraHop system with the setup user account and type default for the password.

Published 2022-08-08