NSE-12 and NSE-22 quick start guide

Introduction

Network Service Element come in two varieties: SPAN and TAP.  

The SPAN model has two independent monitor interfaces labeled LAN 3 and LAN 4.  In a typical configuration, both ports will be connected to two SPAN output ports: one port representing all packets from the network to the site and the other port representing all packets in the opposite direction. The NSE offers great WAN visibility, including a more precise traffic measurements method than possible with flow based analysis or snmp.  Other applications of NSE are possible, for example the monitoring of server bound traffic in a relatively small remote datacenter.

The fail-safe TAP model has been designed to be installed inline between the CPE and the local switch.  No specific configuration of those devices is required.

 

Solution

Connect to the appliance

 

 

The appliance is accessible through ssh using a terminal emulator program and via a serial console located on the back of the appliance.  It ships with two local user accounts, Administrator and comcert. User Administrator has been created to be used by the end-user to safely shut-down and reboot the appliance.  User comcert is reserved for COMCERT Support (C-TAC). 

To connect to NSE from another computer running a terminal session, run the following command:

ssh -l Administrator <IPaddressPMA>

Using the serial console:

Use a serial cable to connect to the RS-232/RJ45 serial port on the backside of the NSE. Set the serial port on your computer to match the settings of the appliance: 9600, 8N1, no flow control.

 

Shutdown and reboot the appliance

 

 

Connect to NSE and login as Administrator.

Once authenticated, run one of the following commands:

To shut-down the appliance:

$ sudo systemctl halt

To reboot the appliance:

$ sudo systemctl reboot

In case and only in case the above commands fail (risk of data loss):

To power-off the appliance (equivalent of removing the power source).  

$ sudo systemctl poweroff