Configuration

Configuration is required on both the Plixer FlowPro and the ERSPAN/GRE device.

Prerequisites

The configuration of each device requires information from the other device (Plixer FlowPro and ERSPAN device).

The following information should be determined prior to starting the configuration:

ERSPAN device configuration

  • ERSPAN Source IP: The IP address on the device (switch or router) or the ESXi host IP address (VDS).

  • Destination IP: The Plixer FlowPro monitor port IP address (not the Plixer FlowPro management IP).

  • ERSPAN Type/Version: Legacy ERSPAN = Type 1/Ver 0, Type II = Ver 1, Type III = Ver 2

Note

ERSPAN Versions 1 and 2 will prompt to set up the ERSPAN destination interface. Plixer FlowPro also provides support for GRE type 2.

Plixer FlowPro ERSPAN configuration

  1. Run the following command: sudo ./setup.sh --erspan-config

  2. Confirm whether you need to IP a monitoring interface to receive ERSPAN.

    Do you need to IP a monitor interface to receive ERSPAN? (yes/no): yes
    
  3. Enter the monitoring interface name to IP as the ERSPAN destination.

    Monitor Interfaces Available:
    mon1
    mon2
    mon3
    #############################
    Enter the interface name to IP for ERSPAN Destination: mon1
    
  4. Then, enter the IP address of the monitoring interface.

    Enter the IP address (with CIDR notation, e.g., x.x.x.x/yy) for mon1: 192.168.1.24/24
    
  5. Verify the ERSPAN version.

    Do you need to set up a Virtual Type II/III ERSPAN destination? (yes/no):
    
  6. If yes, enter a name for the ERSPAN mon port. If no, the ERSPAN traffic will go directly to the configured interface, completing the ERSPAN setup.

    Enter a name for this ERSPAN MON port [fp_erspan_x]:
    

    Important

    Take note of this interface name as it will need to be added to an observation interface pair after setup.

  7. Re-enter the ERSPAN source for the virtual interface peer.

    Enter your Local ERSPAN destination IP (Not MGMT IP):
    
  8. Enter the ERSPAN version.

    ###########################################################
    ERSPAN Version Map: ERSPAN Type II = 1, ERSPAN Type III = 2
    ###########################################################
    Enter your ERSPAN Version:
    
  9. Enter the ERSPAN ID.

  10. Once you complete the setup, run the following command for either the virtual or physical interface configured to receive ERSPAN: sudo ./setup.sh --create-observation-point

The following pages detail how to configure Plixer FlowPro, a Cisco switch, and a VMware VDS.

Note

Specific commands and configuration options may vary between devices and versions. Command syntax should be verified with vendor documentation for the specific device being configured.