742 Amintaccen Binciken Yanar Gizo
Bayanin samfur
Ƙayyadaddun bayanai
- Sunan samfur: Cisco Secure Network Analytics Virtual Edition
Kayan aiki - Shafin: 7.4.2
Gabatarwa
Sisik Secure Network Analytics Virtual Edition Appliance shine
mafita na nazarin hanyar sadarwa na tushen software. Yana bayar da ci-gaba
saka idanu da fasali na bincike don zirga-zirgar hanyar sadarwa. Wannan
Jagorar shigarwa zai taimake ka ka shigar da kuma saita
na'urar don tabbatar da ingantaccen aiki da aiki.
Umarnin Amfani da samfur
Hanyoyin Shigarwa
Sisiko Secure Network Analytics Virtual Edition Appliance na iya
a shigar da su ta amfani da VMware ko KVM dandamali na zahiri. Zabi
hanyar shigarwa da ta dace dangane da yanayin ku.
Daidaituwa
Tabbatar cewa tsarin ku ya cika buƙatun dacewa don
yana gudanar da Siffar Sadarwar Sadarwar Sadarwar Cisco Secure Virtual Edition
Kayan aiki. Bincika buƙatun tsarin da Cisco ke bayarwa zuwa
tabbatar da tsarin shigarwa mai santsi.
Sauke Software
Kafin fara shigarwa, tabbatar da zazzage shi
software da ake bukata files daga Cisco Software Central. Shiga cikin
portal kuma zazzage shigarwa files don Virtual Edition
Kayan aiki.
Bukatun Kanfigareshan
Yayin aiwatar da shigarwa, kuna buƙatar saitawa
saituna daban-daban don tabbatar da ingantaccen sadarwa da aiki
na kayan aiki. Waɗannan saitunan sun haɗa da:
- Tsarin Firewall
- Bude tashoshin jiragen ruwa da ka'idoji
- Saitunan hanyar sadarwa don sadarwar Node na bayanai
- Saitunan sa ido don nazarin zirga-zirga
Shigar da Virtual Appliance
Don shigar Cisco Secure Network Analytics Virtual Edition
Kayan aiki, bi waɗannan matakan:
- Shiga cikin dandali na haɓakawa (VMware vCenter ko
KVM). - Sanya saitunan cibiyar sadarwar da ake buƙata, kamar keɓaɓɓen LAN
don sadarwar Node na Inter-Data. - Zazzage shigarwar Virtual Edition files daga Cisco
Software Central. - Bi umarnin shigarwa wanda Cisco ya bayar don naka
ƙayyadaddun dandamali na haɓakawa (VMware ko KVM). - Sanya saitunan kayan aiki yayin shigarwa
tsari, gami da sunan mai masauki, sunan yanki, uwar garken NTP, da lokaci
yankin. - Kammala shigarwa kuma tabbatar da aikin na
Kayan Aikin Buga Na Farko.
FAQ
Tambaya: Menene buƙatun tsarin don gudanar da Cisco
Amintaccen Kayan Aikin Buga Na Farko?
A: Abubuwan buƙatun tsarin sun bambanta dangane da ƙa'ida
dandalin amfani. Da fatan za a koma zuwa jagorar daidaitawa da aka bayar
Cisco don cikakkun buƙatun tsarin.
Tambaya: Ta yaya zan iya sauke shigarwar files don Virtual
Kayan Aikin Buga?
A: Don saukar da shigarwa files, shiga zuwa Cisco Software
Tsakiya ta amfani da bayanan shaidar asusun Cisco. Kewaya zuwa
Sashen samfurin da ya dace kuma zazzage Ɗabi'ar Farko
shigarwa files.
Tambaya: Waɗanne saiti na cibiyar sadarwa ake buƙata don Node-Bayani
sadarwa?
A: Ya danganta da dandamalin haɓaka aikin ku, kuna buƙatar
saita ko dai vSphere Standard Switch ko vSphere Rarraba
Canja don kunna sadarwa tsakanin Nodes Data. Da fatan za a koma zuwa
jagorar shigarwa don cikakken umarnin.
Cisco Secure Network Analytics
Jagoran Shigar Kayan Kayan Kayan Kaya 7.4.2
Teburin Abubuwan Ciki
Gabatarwa
6
Ƙarsheview
6
Masu sauraro
6
Shigar da Kayan Aiki da Ƙaddamar da Tsarin ku
6
Bayanai masu alaƙa
6
Kalmomi
7
Taqaitaccen bayani
7
Amintaccen Binciken Yanar Gizo ba tare da Store ɗin Bayanai ba
9
Amintaccen Binciken Yanar Gizo tare da Shagon Bayanai
10
Tambayoyi
11
Adana Ma'ajiyar Bayanai da Haƙuri Laifi
11
Ma'ajiyar Telemetry Example
12
Gabaɗaya Bukatun Aiki
13
Hanyoyin Shigarwa
13
Daidaituwa
14
Gabaɗaya Abubuwan Bukatu don Duk Kayan Aiki
14
VMware
14
KVM
15
Sauke Software
15
TLS
15
Aikace-aikace na .angare na uku
16
Masu bincike
16
Sunan Mai watsa shiri
16
Sunan yanki
16
NTP Server
16
Yankin Lokaci
16
Daidaitaccen Bukatun Kayan Aiki (ba tare da Ma'ajiyar Bayanai ba)
17
Bukatun Aiwatar da Mai Sarrafa Mai Gudanarwa da Mai Tara
17
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
-2-
Bukatun Aiwatar da Ma'ajiyar Bayanai
18
Abubuwan Bukatun Kayan Aiki (tare da Shagon Bayanai)
18
Bukatun Aiwatar da Mai Sarrafa Mai Gudanarwa da Mai Tara
18
Bukatun Aiwatar da Node Data
18
Ƙaddamar da Ƙididdigar Ƙididdigar Ƙira
19
Ma'auni na Hardware masu goyan baya (tare da kunna Analytics)
20
Ma'auni na Hardware masu goyan baya (ba tare da an kunna Nazari ba)
20
Aiwatar da Node Data Guda
20
Bukatun Kanfigareshan Bayanan Bayanai
21
Sadarwar Sadarwar Sadarwar Sadarwar da Canjawar La'akari
21
Virtual Canjin Example
23
La'akarin Sanya Ma'ajiyar Bayanai
23
Abubuwan Bukatun Aiwatar da Ayyuka
24
Abubuwan Bukatun Albarkatu
25
Lissafin Saitunan CPU
26
Manajan Virtual Edition
27
Manager
27
Ɗabi'ar Ƙwararren Mai Tafiya
28
Mai Tarin Yawo ba tare da Ma'ajiyar Bayanai ba
28
Mai Tarin Yaɗawa tare da Ma'ajiyar Bayanai
29
Data Node Virtual Edition
30
Ma'ajiyar Bayanai tare da Node Data Virtual Single
30
Store Data tare da 3 Virtual Data Nodes
31
Fitowar Sensor Virtual Edition
32
Yanar Gizo na Yanar Gizo Mai Haɓaka Yanar Gizo
34
Fitar Sensor Virtual Edition Traffic
34
Babban Daraktan UDP
35
Ana ƙididdige Gudun Gudun Hijira ta Biyu (Na zaɓi)
36
Ana ƙididdige Gudun Gudun Hijira a cikin Dakika don Ma'ajiya Mai Tara (Tsarin aiki ba tare da
Store Data)
36
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
-3-
Ana ƙididdige Gudun Gudun Hijira a cikin Dakika don Ma'ajiya na Node Data
36
1. Saita Firewall ɗinka don Sadarwa
38
Buɗe Tashoshi (All Appliances)
38
Ƙarin Buɗaɗɗen Mashigai don Nodes Data
38
Tashoshin Sadarwa da Ka'idoji
39
Ƙarin Buɗaɗɗen Tashoshi don Ma'ajiyar Bayanai
41
Tashar Jiragen Sadarwa Na Zabi
42
Tabbataccen Tattaunawar Yanar Gizo Example
43
Amintaccen Aiwatar da Nazari na hanyar sadarwa tare da Shagon Bayanai Example
44
2. Zazzagewa Mai Haɓakawa Mai Kyau Files
45
Shigarwa Files
45
1. Shiga Cisco Software Central
45
2. Zazzagewa Files
46
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
47
Ƙarsheview
47
Kafin Ka Fara
47
Shigar da Kayan Aikin Kaya ta Amfani da vCenter (ISO)
48
Bayanan Bayanai
48
Sensors masu gudana
48
Duk Sauran Kayan Aiki
48
1. Ƙaddamar da keɓantaccen LAN don Sadarwar Node na Tsakanin Bayanai
49
Ana saita vSphere Standard Switch
49
Haɓaka Sauyawa Rarraba vSphere
49
2. Haɓaka Sensor na Guda don Kula da zirga-zirga
49
Kula da Traffic na Waje tare da Fassara ta PCI
50
Kula da vSwitch tare da Runduna da yawa
51
Bukatun Kanfigareshan
51
Kula da vSwitch tare da Mai watsa shiri Guda
54
Bukatun Kanfigareshan
54
Sanya Rukunin Tashar Ruwa zuwa Yanayin Fasikanci
54
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
-4-
3. Shigar da Kayan Aiki na Virtual
57
4. Ƙayyadaddun Ƙarin Tashoshin Kulawa (Na'urori masu Tafiya kawai)
64
3 b. Shigar da Kayan Aikin Kaya akan ESXi Stand-Alone Server (ISO)
67
Ƙarsheview
67
Kafin Ka Fara
67
Shigar da Kayan Aikin Kaya akan ESXi Stand-Alone Server (ISO)
68
Tsari Yayiview
68
Bayanan Bayanai
68
1. Shiga cikin VMware Web Abokin ciniki
68
2. Booting daga ISO
71
3c ku. Shigar da Kayan aikin Virtual akan Mai watsa shiri KVM (ISO)
73
Ƙarsheview
73
Kafin Ka Fara
73
Shigar da Kayan aikin Virtual akan Mai watsa shiri KVM (ISO)
74
Tsari Yayiview
74
Ƙirƙirar LAN keɓe don Nodes na Bayanai
74
1. Shigar da Kayan Aiki na Farko akan Mai watsa shiri na KVM
74
Kula da zirga-zirga
74
Bukatun Kanfigareshan
74
Shigar da Kayan Aikin Kaya akan Mai watsa shiri na KVM
75
2. Ƙara NIC (Node Data, Flow Sensor) da Kula da Tashar Tashar Al'aura akan wani
Buɗe vSwitch (Fitowar Sensors kawai)
81
4. Haɓaka Tsarin Binciken Yanar Sadarwarka Mai Amintacce
84
Bukatun Kanfigareshan Tsari
84
Tallafin Tuntuɓar SNA
87
Canja Tarihi
89
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
-5-
Gabatarwa
Gabatarwa
Ƙarsheview
Yi amfani da wannan jagorar don shigar da waɗannan na'urorin Binciken Sirri na Tsaro na Cisco Secure (tsohon Stealthwatch) Na'urar Bugawa:
l Cisco Secure Network Analytics Manager (tsohon Stealthwatch Management Console) Ɗabi'ar Kaya
l Cisco Secure Network Analytics Data Store Virtual Edition l Cisco Secure Network Analytics Flow Collector Virtual Edition l Cisco Secure Network Analytics Flow Sensor Virtual Edition l Cisco Secure Network Analytics UDP Director Virtual Edition
Masu sauraro
Masu sauraro da aka yi niyya don wannan jagorar sun haɗa da masu gudanar da hanyar sadarwa da sauran ma'aikatan da ke da alhakin shigarwa da daidaita samfuran Tattaunawar Sadarwar Sadarwar Amintattun. Idan kuna daidaita kayan aikin kama-da-wane, muna ɗauka cewa kuna da masaniya ta asali tare da VMware ko KVM. Idan kun fi son yin aiki tare da ƙwararrun mai sakawa, da fatan za a tuntuɓi Abokin haɗin gwiwar Cisco na gida ko Tallafin Cisco.
Shigar da Kayan Aiki da Ƙaddamar da Tsarin ku
Da fatan za a lura da aikin gabaɗayan aiki don shigarwa da daidaita Secure Network Analytics.
1. Shigar da Kayan Aiki: Shigar da na'urorin Ɗabi'ar Ƙwararren Ƙwararren Ƙwararrun Sadarwar ku ta amfani da wannan jagorar shigarwa. Don shigar da kayan aikin hardware (na zahiri), bi umarni a cikin x2xx Series Hardware Installation Appliance Appliance ko x3xx Jagoran Shigar Kayan Kayan Aikin Hardware.
2. Sanya Secure Network Analytics: Bayan ka shigar da kayan masarufi da na'urori masu kama-da-wane, kun shirya don saita Secure Network Analytics a cikin tsarin sarrafawa. Bi umarnin da ke cikin Jagoran Kanfigareshan Tsarin Tsare-tsare Tsare Tsare Tsare Tsare Tsare Tsare Tsare Tsare Tsare Tsare Tsare Tsare Tsare Tsare Tsare Tsare Tsare Tsare Tsare Tsare Tsare Tsare Tsarም።
Bayanai masu alaƙa
Don ƙarin bayani game da Secure Network Analytics, koma zuwa albarkatu masu zuwa:
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
-6-
Gabatarwa
l Samaviewhttps://www.cisco.com/c/en/us/products/security/stealthwatch/index.html
l Jagorar Tsare-tsaren Tsare-Tsare: https://www.cisco.com/c/dam/en/us/products/collateral/security/stealthwatch/st ealthwatch-data-store-guide.pdf
Kalmomi
Wannan jagorar tana amfani da kalmar “na’ura” don kowane Samfuran Binciken Yanar Gizo mai aminci, gami da samfuran kama-da-wane kamar Fitar Sensor Virtual Edition (VE).
“Tari” ƙungiyar ku ce ta amintattun kayan aikin binciken hanyar sadarwa waɗanda Manajan ke sarrafa su.
Taqaitaccen bayani
Ana iya bayyana gajarce masu zuwa a cikin wannan jagorar:
Gajerun Ma'anar
DNS
Tsarin Sunan Yanki (Sabis ko Sabar)
dvPort
Rarraba Virtual Port
ESX
Sabar Kasuwancin X
GB
Gigabyte
IDS
Tsarin Gano Kutse
IPS
Tsarin Kariyar Kutse
ISO
Ƙungiyar Ƙididdiga ta Duniya
IT
Fasahar Sadarwa
KVM
Injin Virtual na tushen Kernel
MTU
Matsakaicin Sashin watsawa
NTP
Ka'idar Lokacin Sadarwar Sadarwa
TB
Terabyte
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
-7-
Gajerun Ma'anar
UUID
Mai Gano Na Musamman Na Duniya
VDS
Sauyawa Rarraba vNetwork
VLAN
Cibiyar Sadarwar Yanki Mai Kyau
VM
Injin Kaya
Gabatarwa
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
-8-
Amintaccen Binciken Yanar Gizo ba tare da Store ɗin Bayanai ba
Amintaccen Binciken Yanar Gizo ba tare da Store ɗin Bayanai ba
A cikin Ƙararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwararren Ƙwaƙwalwa na Ƙaƙwalwa na Ƙaƙwalwa na Ƙaƙwalwa na Ƙaƙwalwa na Ƙaƙwalwa na Ƙaƙwalwa na Ƙaƙwalwa ) yana ƙaddamar da ƙaddamar da bayanai, yana yin bincike, da ba da rahoton bayanai da sakamako kai tsaye ga Manajan. Don warware tambayoyin da mai amfani ya gabatar, gami da jadawalai da jadawali, Manajan yana tambayar duk masu tattara kwarara da aka sarrafa. Kowane Mai Tarar Yaɗawa yana mayar da sakamakon da ya dace ga Manajan. Manajan yana tattara bayanan daga saitin sakamako daban-daban, sannan ya haifar da jadawali ko ginshiƙi mai nuna sakamakon. A cikin wannan turawa, kowane Mai Tara Mai Tafiya yana adana bayanai akan rumbun adana bayanai na gida. Dubi zane mai zuwa don tsohonample.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
-9-
Amintaccen Binciken Yanar Gizo tare da Shagon Bayanai
Amintaccen Binciken Yanar Gizo tare da Shagon Bayanai
A cikin Tabbataccen Tattalin Arzikin Yanar Gizo tare da Ma'ajiyar Bayanai, Rukunin Rukunin Bayanai yana zaune tsakanin Manajan ku da Masu Tara Gudun Hijira. Ɗayan ko fiye da Masu Tara Gudun Gudun Hijira suna shigar da keɓancewa suna gudana, suna yin bincike, kuma suna ba da rahoton bayanai da sakamako kai tsaye zuwa Ma'ajin Bayanai, suna rarraba shi daidai daidai ga duk Nodes ɗin Bayanai. Shagon Bayanai yana sauƙaƙe ajiyar bayanai, yana kiyaye duk zirga-zirgar ku a cikin wannan wurin da aka keɓe sabanin yaɗuwa cikin Masu Tarar Yawo da yawa, kuma yana ba da mafi girman ƙarfin ajiya fiye da masu tattara kwarara da yawa. Dubi zane mai zuwa don tsohonample.
Ma'ajiyar Bayanai tana ba da babban ma'ajiyar ajiya don adana na'urorin sadarwar cibiyar sadarwar ku, waɗanda Masu Tarar Yawo naku suka tattara. Ma'ajiyar Bayanai ta ƙunshi gungu na Nodes na Data, kowanne yana ɗauke da wani yanki na bayananku, da maajiyar bayanan Node na daban. Saboda duk bayananku suna cikin rumbun adana bayanai guda ɗaya, sabanin yaɗuwa a ko'ina cikin Masu Tarar Gudun Hijira da yawa, Manajan ku na iya dawo da sakamakon tambaya daga Ma'ajin Bayanai da sauri fiye da idan ya nemi duk masu Tarar Gudun ku daban. Rukunin Store ɗin Data yana samarwa
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 10 -
Amintaccen Binciken Yanar Gizo tare da Shagon Bayanai
ingantacciyar haƙurin kuskure, ingantaccen amsa tambaya, da saurin jadawali da yawan ginshiƙi.
Tambayoyi
Don warware tambayoyin da mai amfani ya gabatar, gami da zane-zane da sigogi, Manajan yana tambayar Store ɗin Bayanai. Shagon Bayanai yana samun sakamako masu dacewa a cikin ginshiƙan da suka dace da tambayar, sannan ya dawo da layuka da suka dace kuma ya mayar da sakamakon tambaya ga Manajan. Manajan yana haifar da jadawali ko ginshiƙi ba tare da buƙatar tattara saitin sakamako da yawa daga Masu Tarar Yawo da yawa ba. Wannan yana rage farashin tambaya, idan aka kwatanta da tambayar masu tattara kwarara da yawa, kuma yana haɓaka aikin tambaya.
Adana Ma'ajiyar Bayanai da Haƙuri Laifi
Shagon Bayanai yana tattara bayanai daga Masu Tarar Yaɗawa kuma suna rarraba shi daidai-wa-daida a cikin Ƙungiyoyin Bayanai a cikin tari. Kowane Node Data, ban da adana wani yanki na gabaɗayan telemetry ɗin ku, kuma yana adana ajiyar wani na'urar wayar salula na Data Node. Ajiye bayanai ta wannan salon:
l yana taimakawa tare da daidaita nauyi l yana rarraba aiki a kowane kumburi l yana tabbatar da duk bayanan da aka shigar a cikin Store ɗin Data yana da ajiyar ajiya don haƙurin kuskure l yana ba da damar haɓaka adadin Nodes ɗin bayanai don haɓaka ajiya gabaɗaya kuma
aikin tambaya
Idan Shagon Data naka yana da Nodes 3 ko sama da haka, kuma Node na Data ya ragu, muddin Data Node dake dauke da maajiyar ta tana nan, kuma akalla rabin adadin ku na Data Nodes yana nan sama, gaba daya Store Store yana nan. ya rage. Wannan yana ba ku lokaci don gyara haɗin da aka rushe ko kayan aikin da ba daidai ba. Bayan kun maye gurbin Node ɗin Data mara kuskure, Store ɗin Data yana dawo da bayanan kumburin daga majiyar da aka adana akan Node Data kusa, kuma yana ƙirƙirar madadin bayanai akan wannan Node ɗin Data.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 11 -
Amintaccen Binciken Yanar Gizo tare da Shagon Bayanai
Ma'ajiyar Telemetry Example
Dubi zane mai zuwa don tsohonampyadda 3 Data Nodes ke adana telemetry:
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 12 -
Gabaɗaya Bukatun Aiki
Gabaɗaya Bukatun Aiki
Kafin ka fara, sakeview wannan jagorar don fahimtar tsarin da kuma shirye-shirye, lokaci, da albarkatun da kuke buƙatar shirya don shigarwa.
Hanyoyin Shigarwa
Kuna iya amfani da mahallin VMware ko KVM (Ma'auni na tushen Kernel) don shigar da kayan aikin kama-da-wane.
Kafin ka fara shigarwa, sakeview Bayanin Daidaitawa da Abubuwan Bukatun Albarkatun da aka nuna a cikin sassan masu zuwa.
Hanya
Umarnin shigarwa (don tunani)
Shigarwa File
Cikakkun bayanai
VMware vCenter
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
Shigar da kama-da-wane na ku
ISO
na'urorin amfani da VMware
vCenter.
VMware ESXi Tsayayyen Sabar
3 b. Shigar da Kayan Aikin Kaya akan ESXi StandAlone Server (ISO)
Shigar da kama-da-wane na ku
ISO
kayan aiki akan ESXi
uwar garken uwar garke kadai.
KVM da Virtual Machine Manager
3c ku. Shigar da Kayan aikin Virtual akan Mai watsa shiri KVM (ISO)
Shigar da kama-da-wane na ku
ISO
na'urorin amfani da KVM da
Manajan Injin Kaya.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 13 -
Gabaɗaya Bukatun Aiki
Daidaituwa
Ko kuna shirin shigar da kayan aikin ku na zahiri a cikin yanayin VMware ko KVM (Na'urar Virtual na tushen Kernel), tabbatar kun sake kunnawa.view bayanin dacewa mai zuwa:
Gabaɗaya Abubuwan Bukatu don Duk Kayan Aiki
Bayanin Bukatu
Abubuwan sadaukarwa
Duk kayan aikin suna buƙatar keɓance kayan aikin sadaukarwa kuma ba za a iya raba su da wasu na'urori ko runduna ba.
Babu Hijira Kai tsaye
Kayan aiki ba sa goyan bayan vMotion saboda yuwuwar cin hanci da rashawa.
Adaftar hanyar sadarwa
Duk na'urori suna buƙatar aƙalla adaftar cibiyar sadarwa 1.
Ana iya saita firikwensin yawo tare da ƙarin adaftan don tallafawa ƙarin kayan aiki.
Nodes na bayanai yana buƙatar adaftar hanyar sadarwa ta biyu don sadarwa tare da wasu Nodes ɗin Bayanai azaman ɓangare na Store ɗin Bayanai.
Mai Adana Ma'aji
Lokacin saita ISO a cikin VMware, zaɓi nau'in LSI Logic SAS SCSI Controller.
Samar da Ajiya
Sanya tanadin ma'ajiya mai kauri mai kauri lokacin tura kayan aikin kama-da-wane.
VMware
l Daidaitawa: VMware 7.0 ko 8.0.
l Tsarin aiki: Debian 11 64-bit
l Adaftar hanyar sadarwa: Nau'in Adaftar VMXNET3 ana ba da shawarar don mafi kyawun aiki.
l ISO Aiwatar da: Amintaccen Binciken hanyar sadarwa v7.4.2 ya dace da VMware 7.0 da 8.0. Ba mu goyan bayan VMware 6.0, 6.5, ko 6.7 tare da Secure Network Analytics v7.4.x. Don ƙarin bayani, koma zuwa takaddun VMware don vSphere 6.0, 6.5, da 6.7 Ƙarshen Tallafin Gabaɗaya.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 14 -
Gabaɗaya Bukatun Aiki
l Hijira kai tsaye: Ba ma goyan bayan mai masaukin baki don ɗaukar ƙaura kai tsaye (misaliample, tare da vMotion).
l Snapshots: Ba a goyan bayan hotunan na'ura mai kyan gani.
Kar a shigar da Kayan aikin VMware akan na'urar bincike mai aminci ta hanyar sadarwa saboda zai ƙetare sigar al'ada da aka riga aka shigar. Yin hakan zai sa na'urar ba ta aiki kuma tana buƙatar sake shigarwa.
KVM
l Daidaitawa: Kuna iya amfani da kowane rarraba Linux mai jituwa. l Tsarin Mai watsa shiri na KVM: Akwai hanyoyi da yawa da ake amfani da su don shigar da injin kama-da-wane akan
Mai watsa shiri KVM. Mun gwada KVM da ingantaccen aiki ta amfani da abubuwa masu zuwa:
l libvirt 2.10 – 7.1.0 l qemu-KVM 2.6.1 – 5.2.0 l Buɗe vSwitch 2.6.x – 2.15.x**** l Linux Kernel 4.4.x, da wasu 5.10.xl Tsarukan aiki: Debian 11 64 -bit. l Mai watsa shiri Haɓaka: Don mafi ƙarancin buƙatu da mafi kyawun aiki, sakeview sashin Abubuwan Bukatun Albarkatun kuma duba takaddar ƙayyadaddun kayan aikin don kayan aikin ku a Cisco.com.
Ayyukan tsarin yana ƙaddara ta wurin mahalli. Ayyukanku na iya bambanta.
Sauke Software
Yi amfani da Cisco Software Central don zazzage kayan aikin kama-da-wane (VE). files, faci, da sabunta software files. Shiga zuwa asusunka na Cisco Smart a https://software.cisco.com ko tuntuɓi mai gudanarwa na ku. Koma zuwa 2. Zazzagewar Shigar Maɓalli Mai Kyau Files don umarni.
TLS
Amintaccen Binciken hanyar sadarwa yana buƙatar v1.2.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 15 -
Gabaɗaya Bukatun Aiki
Aikace-aikace na .angare na uku
Secure Network Analytics baya goyan bayan shigar da aikace-aikacen ɓangare na uku akan na'urori.
Masu bincike
Browser masu jituwa: Amintaccen Binciken hanyar sadarwa yana goyan bayan sabuwar sigar Chrome, Firefox, da Edge.
l Microsoft Edge: Ana iya samun a file iyakance girman tare da Microsoft Edge. Ba mu ba da shawarar amfani da Microsoft Edge don shigar da Virtual Edition ISO ba files.
Sunan Mai watsa shiri
Ana buƙatar sunan mai masauki na musamman don kowace na'ura. Ba za mu iya saita na'ura tare da sunan mai gida ɗaya da wani na'ura ba. Har ila yau, tabbatar da kowane sunan mai masaukin na'ura ya cika ka'idojin Intanet don ma'aikatan Intanet.
Sunan yanki
Ana buƙatar cikakken sunan yankin da ya cancanta ga kowace na'ura. Ba za mu iya shigar da na'ura mai yanki mara komai ba.
NTP Server
l Kanfigareshan: Ana buƙatar aƙalla sabar NTP 1 don kowace na'ura. NTP mai Matsala: Cire uwar garken NTP 130.126.24.53 idan yana cikin jerin ku
sabobin. An san wannan uwar garken yana da matsala kuma ba a samun tallafi a cikin tsoffin sabar NTP ɗin mu.
Yankin Lokaci
Duk na'urorin Binciken Yanar Gizo masu aminci suna amfani da Coordinated Universal Time (UTC).
l Sabar Mai Runduna Mai Kyau: Tabbatar an saita uwar garken gidan yanar gizon ku zuwa daidai lokacin.
Tabbatar cewa saitin lokaci akan uwar garken gidan yanar gizo mai kama-da-wane (inda zaku shigar da kayan aikin kama-da-wane) an saita zuwa daidai lokacin. In ba haka ba, na'urorin ba za su iya tashi ba.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 16 -
Gabaɗaya Bukatun Aiki
Daidaitaccen Bukatun Kayan Aiki (ba tare da Ma'ajiyar Bayanai ba)
Idan kana shigar da Secure Network Analytics ba tare da Shagon Bayanai ba, shigar da na'urori masu zuwa:
Manajan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kayan Kawa na UDP
Bukatu l Mafi ƙarancin Manajan 1 l Mafi ƙarancin Mai tara kwarara 1
Zabin Zabi
Da review Bukatun shigarwa na kayan aiki don Tabbataccen Binciken Cibiyar Sadarwar Yanar Gizo tare da Ma'ajiyar Bayanai, koma zuwa Buƙatun Aiwatar da Shagon Bayanai.
Bukatun Aiwatar da Mai Sarrafa Mai Gudanarwa da Mai Tara
Ga kowane Manaja da Mai Tara Gudun Hijira da kuka tura, sanya adireshin IP mai iya tafiya zuwa tashar sarrafa eth0.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 17 -
Bukatun Aiwatar da Ma'ajiyar Bayanai
Bukatun Aiwatar da Ma'ajiyar Bayanai
Don tura Secure Network Analytics tare da Shagon Bayanai, sakeview buƙatu masu zuwa da shawarwari don tura ku.
Abubuwan Bukatun Kayan Aiki (tare da Shagon Bayanai)
Teburin da ke gaba yana ba da ƙarewaview don na'urorin da ake buƙata don tura Secure Network Analytics tare da Store ɗin Bayanai.
Bukatun Kayan Aiki
Manager
l Mafi ƙarancin Manajan 1
Shagon Bayanai
l Mafi ƙarancin 1 ko 3 Data Nodes
l Ƙarin saiti na Nodes na Bayanai 3 don faɗaɗa Ma'ajiyar Bayanai, matsakaicin 36 Data Nodes
l Ba a tallafawa ƙaddamar da nodes ɗin bayanai guda 2 kawai a cikin tari.
Mai tattara kwarara
l Mafi ƙarancin Mai Tarin Gudun Guda 1
Fitar Sensor Zabin
Bukatun Aiwatar da Mai Sarrafa Mai Gudanarwa da Mai Tara
Ga kowane Manaja da Mai Tara Gudun Hijira da kuka tura, sanya adireshin IP mai iya tafiya zuwa tashar sarrafa eth0.
Bukatun Aiwatar da Node Data
Kowane Shagon Bayanai yana kunshe da Nodes na Data.
l Buga Mai Kyau: Lokacin da kuka zazzage ma'ajin Bayanai na kama-da-wane, zaku iya tura 1, 3, ko sama da bugu na Haruffa na Bayanai (a cikin saiti na 3).
l Hardware: Hakanan zaka iya shigar da Nodes Data na hardware. A DN 6300 Data Store yana ba da chassis na kayan aikin Node na Data guda ɗaya.
Tabbatar cewa Nodes ɗin bayanan ku duk kayan aiki ne ko duk Ɗabi'ar Virtual. Haɗin kayan masarufi da nodes ɗin bayanai na kama-da-wane ba a tallafawa kuma kayan aikin dole ne su kasance daga tsarar kayan masarufi iri ɗaya (duk DS 6200 ko duk DN 6300).
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 18 -
Bukatun Aiwatar da Ma'ajiyar Bayanai
Ƙaddamar da Ƙididdigar Ƙididdigar Ƙira
Aiwatar da Node-Bayanai da yawa yana ba da mafi girman sakamakon aiki. Ka lura da waɗannan abubuwa:
l Saiti na Uku: Za a iya tattara nodes ɗin bayanai a matsayin wani ɓangare na Store ɗin Data ɗinku a cikin saiti 3, daga mafi ƙarancin 3 zuwa matsakaicin 36. Ba a tallafawa ƙaddamar da nodes ɗin bayanai guda 2 kawai a cikin gungu.
l Duk Hardware ko Duk Mai Mahimmanci: Tabbatar cewa Nodes ɗin bayanan ku duk kayan masarufi ne (na ƙarni ɗaya) ko duk Ɗabi'ar Virtual. Haɗa kayan aikin haɗe-haɗe da kuɗaɗɗen bayanai na kama-da-wane ko haɗewar Store ɗin Data 6200 da Node 6300 Data Nodes ba su da tallafi.
l Data Node Profile Girman: Idan kun tura Nodes Data Edition na Farko, tabbatar cewa dukkansu iri ɗaya nefile girman don haka suna da RAM, CPU, da sararin diski iri ɗaya. Don cikakkun bayanai, koma zuwa Node Virtual Edition a cikin sashin Abubuwan Bukatun Albarkatu.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 19 -
Bukatun Aiwatar da Ma'ajiyar Bayanai
Ma'auni na Hardware masu goyan baya (tare da kunna Analytics)
Yawan Gudun Nodes na Biyu na Musamman Mai Runduna na ciki
1
600,000
miliyan 1.3
3 da sama
600,000
miliyan 1.3
3 da sama
850,000
700,000
Waɗannan shawarwarin suna la'akari da na'urorin sadarwa kawai. Ayyukan ku na iya bambanta dangane da ƙarin dalilai, gami da ƙidayar runduna, Amfani da firikwensin yawo, hanyoyin zirga-zirgafiles, da sauran halayen cibiyar sadarwa. Tuntuɓi Taimakon Cisco don taimako tare da ƙima.
Ma'auni na Hardware masu goyan baya (ba tare da an kunna Nazari ba)
Adadin Nodes 1 3 da sama
Yawo a cikin Dakika Har zuwa miliyan 1 Har zuwa miliyan 3
Mai Runduna Na Musamman Na Cikin Gida Har zuwa miliyan 33 Har zuwa miliyan 33
Ana samar da waɗannan lambobin a cikin wuraren gwajin mu ta amfani da matsakaicin bayanan abokin ciniki tare da runduna miliyan 1.3 na musamman. Akwai dalilai da yawa waɗanda zasu iya shafar takamaiman aikinku, kamar adadin runduna, matsakaicin girman kwarara, da ƙari. Tuntuɓi Taimakon Cisco don taimako tare da ƙima.
Aiwatar da Node Data Guda
Idan ka zaɓi tura Node Data guda ɗaya (1):
l Masu Tattara Ruwa: Matsakaicin Masu Tarar Gudun Guda 4 ana tallafawa. l Ƙara Nodes ɗin Bayanai: Idan kun tura Node Data ɗaya kawai, zaku iya ƙara Nodes ɗin Data zuwa
tura ku nan gaba. Koma zuwa Ƙaddamarwar Node-Bayanai da yawa don cikakkun bayanai.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 20 -
Bukatun Aiwatar da Ma'ajiyar Bayanai
Waɗannan shawarwarin suna la'akari da na'urorin sadarwa kawai. Ayyukan ku na iya bambanta dangane da ƙarin dalilai, gami da ƙidayar runduna, Amfani da firikwensin yawo, hanyoyin zirga-zirgafiles, da sauran halayen cibiyar sadarwa. Tuntuɓi Taimakon Cisco don taimako tare da ƙima.
A halin yanzu, Store ɗin Data baya goyan bayan tura bayanan bayanan da aka keɓe azaman masu maye gurbin atomatik idan Node na farko ya faɗi. Tuntuɓi Taimakon Cisco don jagora.
Bukatun Kanfigareshan Bayanan Bayanai
Don tura Ma'ajiyar Bayanai, sanya waɗannan zuwa kowane Node Data. Bayanan da kuka shirya za a saita su a cikin Saita Lokacin Farko ta amfani da Jagoran Kanfigareshan Tsari.
Adireshin IP na yau da kullun (eth0): Don gudanarwa, ingest, da sadarwar tambaya tare da Amintattun na'urorin Binciken Yanar Gizon ku.
l Sadarwar Node-Data Node: Sanya adireshin IP mara amfani da shi daga 169.254.42.0/24 CIDR block a cikin LAN ko VLAN mai zaman kansa don amfani da shi don sadarwar Node na interData.
Don ingantattun kayan aiki, haɗa tashar tashar jiragen ruwa mai ɗauke da eth2 da eth3 Tabbatar cewa kowane Node Data zai iya isa ga kowane Node Data ta hanyar canji mai kama-da-wane ko keɓe cibiyar sadarwa. A matsayin wani ɓangare na Store ɗin Bayanai, Nodes ɗin bayanan ku suna sadarwa tsakanin juna da juna.
l Haɗin Yanar Gizo: Kuna buƙatar haɗin yanar gizo guda biyu, ɗaya don gudanarwa, ingest, da sadarwar tambaya, ɗayan kuma don sadarwar Node na Inter-Data.
Sadarwar Sadarwar Sadarwar Sadarwar da Canjawar La'akari
Teburin da ke gaba yana ba da ƙarewaview don hanyar sadarwar da canza la'akari don tura Secure Network Analytics tare da Shagon Bayanai.
La'akarin hanyar sadarwa
Sadarwar Node Data Inter-Data Communications
Bayani
l Sanya keɓaɓɓen LAN tare da maɓalli mai kama-da-wane don Nodes ɗin Bayanai su iya sadarwa tare da juna.
* Ƙaddamar da shawarar da aka ba da shawarar lokacin tafiya (RTT) na ƙasa da 200 microsecond tsakanin da tsakanin Nodes Data
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 21 -
Bukatun Aiwatar da Ma'ajiyar Bayanai
Canjawar Node Data
Amintaccen Sadarwar Kayan Aikin Sadarwar Yanar Gizo
l Tsaya karkatar da agogo a daƙiƙa 1 ko ƙasa tsakanin da tsakanin nodes ɗin bayanan ku.
* Ƙaddamar da abin da aka ba da shawarar na 6.4Gbps ko mafi girma (10 Gbps cikakken haɗin haɗin duplex) tsakanin da tsakanin nodes ɗin bayanan ku.
l Data Nodes suna buƙatar VLAN Layer 2 nasu don ba da damar sadarwar Node na interData. Za'a iya haɗa Nodes ɗin Bayanai na Virtual zuwa keɓaɓɓen hanyar sadarwa, ya danganta da yadda kuke tura Nodes ɗin Bayanan ku VE.
l Manajan da Masu Tarar Yadawa dole ne su sami damar isa ga duk Nodes ɗin Bayanai
l Data Nodes dole ne su iya isa ga Manager, duk Gudun Tari, da kowane Data Node
A halin yanzu, Store ɗin Data baya goyan bayan tura bayanan bayanan da aka keɓe azaman masu maye gurbin atomatik idan Node na farko ya faɗi. Da fatan za a tuntuɓi Cisco Support don jagora.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 22 -
Bukatun Aiwatar da Ma'ajiyar Bayanai
Virtual Canjin Example
Don ba da damar sadarwar Node na Inter-Data akan eth1, saita canjin kama-da-wane tare da keɓantaccen LAN ko VLAN don sadarwar Node na bayanai. Ƙaddamar da canjin kama-da-wane zuwa sadarwar Node na Data. Hakanan saita LAN na jama'a ko VLAN don sadarwar Data Nodes eth0 tare da Manajan da Masu Tarar Yawo. Dubi zane mai zuwa don tsohonampda:
Rukunin Store ɗin Bayanai yana buƙatar ci gaba da bugun zuciya tsakanin nodes a cikin keɓewar VLAN. Idan ba tare da wannan bugun zuciya ba, Data Nodes na iya yuwuwar tafiya ta layi, wanda ke ƙara haɗarin Rukunin Bayanai.
Tuntuɓi Sabis na Kwararru na Cisco don taimako tare da tsara tura ku.
La'akarin Sanya Ma'ajiyar Bayanai
Sanya kowane Node Data domin ya iya sadarwa tare da duk Masu Tarar Gudunku, Manajan ku, da kowane Node Data. Don mafi kyawun aiki, haɗa Nodes ɗin Bayanan ku da Masu Tarar Yaɗawa don rage jinkirin sadarwa, da haɗa Nodes ɗin Bayanai da Manajan don ingantaccen aikin tambaya.
l Firewall: Muna ba da shawarar sosai sanya Nodes ɗin Bayanai a cikin Tacewar zaɓinku, kamar a cikin NOC.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 23 -
Bukatun Aiwatar da Ma'ajiyar Bayanai
l Mai watsa shiri na Jiki/Hypervisor: Don sauƙin daidaitawa, tura duk Nodes Virtual Edition ɗin ku zuwa mai masaukin baki/mai hawan jini iri ɗaya, don sauƙaƙe daidaitawar saitin node na bayanai tsakanin keɓaɓɓen LAN.
l Power: Idan Data Store ya ragu saboda asarar wuta ko gazawar hardware, kuna gudanar da haɗarin ɓarna bayanai da asarar bayanai. Shigar da nodes ɗin bayanan ku tare da ci gaba da ɗaukar lokaci a hankali.
Idan Node Data ya rasa iko ba zato ba tsammani, kuma kuka sake kunna na'urar, misalin bayanan bayanai akan wannan Node ɗin ƙila bazai sake farawa ta atomatik ba. Koma zuwa Jagoran Kanfigareshan Tsari don magance matsala da sake kunna bayanai da hannu.
Abubuwan Bukatun Aiwatar da Ayyuka
Amintaccen Binciken Yanar Gizo yana amfani da ƙirar mahalli mai ƙarfi don bin yanayin hanyar sadarwar ku. A cikin mahallin Binciken Yanar Gizo mai aminci, mahaluƙi wani abu ne wanda za'a iya sa ido akan lokaci, kamar mai watsa shiri ko ƙarshen ƙarshen hanyar sadarwar ku. Tsarin ƙirar mahaɗan mai ƙarfi yana tattara bayanai game da ƙungiyoyi dangane da zirga-zirgar da suke aikawa da ayyukan da suke yi akan hanyar sadarwar ku. Don ƙarin bayani, koma zuwa Nazarin: Ganowa, Faɗakarwa, da Jagorar Dubawa. Domin ba da damar Bincike, dole ne a saita tura aikinku
l a kan Kayan aiki na Virtual ko Hardware Data Store tare da kowane adadin masu tara kwarara.
l tare da 1 Secure Network Analytics Data domain kawai.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 24 -
Abubuwan Bukatun Albarkatu
Abubuwan Bukatun Albarkatu
Wannan sashe yana ba da buƙatun albarkatun don kayan aikin kama-da-wane. Yi amfani da allunan da aka tanadar a wannan sashe don yin rikodin saitunan da za ku buƙaci shigar da saita na'urorin Ɗabi'ar Ƙwararren Ƙwararren Ƙwararrun Sadarwar Sadarwar Sadarwar.
l Manager Virtual Edition l Flow Collector Virtual Edition
Tabbatar cewa kun tanadi albarkatun da ake buƙata don tsarin ku. Wannan mataki yana da mahimmanci don aikin tsarin.
Idan ka zaɓi ƙaddamar da na'urorin Binciken Yanar Gizo na Sisiko Secure ba tare da albarkatun da ake buƙata ba, ka ɗauki alhakin sa ido sosai kan yadda ake amfani da albarkatun kayan aikin da ƙara albarkatu kamar yadda ake buƙata don tabbatar da ingantaccen lafiya da aikin turawa.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 25 -
Abubuwan Bukatun Albarkatu
An ayyana ma'anar gigabyte ko GB a cikin tebur masu zuwa kamar haka: Raka'ar bayanai daidai da 2 da aka ɗaga zuwa ƙarfin 30th, ko tsananin 1,073,741,824 bytes.
Lissafin Saitunan CPU
Don matsakaicin aiki lokacin ajiyar CPUs akan rundunonin EXSi, tabbatar da cewa a cikin Saitunan CPU ɗinku, saitin ajiya don mitar CPU yana amfani da lissafin mai zuwa:
* = Kuna iya nemo ainihin mitar (Nau'in Processor) na CPU ɗinku a ƙarƙashin sashin "Bayanan Mai watsa shiri" na hypervisor ɗin ku. A cikin exampA ƙasa, zaku ninka 8 CPUs ta ainihin mitar, wanda a wannan yanayin shine 2,400MHz (ko 2.4 GHz). Wannan yana ba ku adadin 19200 MHz, waɗanda za ku yi amfani da su don ajiyar mitar ku.
Don ƙarin bayani, koma zuwa 3b. Shigar da Kayan Aikin Kaya akan ESXi StandAlone Server (ISO).
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 26 -
Abubuwan Bukatun Albarkatu
Manajan Virtual Edition
Don ƙayyadadden ƙayyadaddun ƙayyadaddun albarkatu don Ɗabi'ar Kayataccen Manajan, ƙayyade adadin masu amfani na lokaci ɗaya da ake tsammanin shiga cikin Manajan. Koma zuwa cikakkun bayanai masu zuwa don ƙayyade rabon albarkatun ku:
Manager
Masu amfani na lokaci ɗaya*
CPUs da ake buƙata
har zuwa 9
6
sama da 10
12
Ƙwaƙwalwar ajiya da ake buƙata
40 GB
70 GB
Ajiye Mafi ƙarancin buƙata
200 GB
480 GB
Yawo ta Ciki
na biyu
Runduna
Har zuwa 100,000
Fiye da 100,000
100,000 250,000
* Masu amfani na lokaci ɗaya sun haɗa da rahotannin da aka tsara da kuma mutanen da ke amfani da abokin ciniki Manager a lokaci guda.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 27 -
Abubuwan Bukatun Albarkatu
Ɗabi'ar Ƙwararren Mai Tafiya
Don tantance abubuwan buƙatun ku don Ɗabi'ar Faɗakarwa ta Flow Collector, tabbatar cewa kun ƙididdige magudanar ruwa a cikin daƙiƙa guda da ake tsammanin kan hanyar sadarwa da adadin masu fitar da kayayyaki da masu masaukin baki da ake sa ran za su saka idanu. Koma zuwa sashin Kididdigar Yawo a cikin na biyu don cikakkun bayanai.
Hakanan, mafi ƙarancin sararin ajiya na iya ƙaruwa dangane da lissafin FPS ɗinku da buƙatun riƙewa.
Saboda Nodes ɗin Bayanai a cikin Ma'ajin Bayanai za su adana kwararar ruwa a maimakon Masu Tara, ka tabbata ka koma kan ƙayyadaddun ƙayyadaddun aikin da aka yi niyya (ba tare da Ma'ajiyar Bayanai ba ko tare da Shagon Bayanai).
Mai Tarin Yawo ba tare da Ma'ajiyar Bayanai ba
Yawo a cikin dakika daya
CPUs da ake buƙata
Ƙwaƙwalwar ajiya da ake buƙata
Ajiye Mafi ƙanƙanta da ake buƙata na Kwanaki 30
Hanyoyin sadarwa
Masu fitar da kaya
Masu Runduna Na Cikin Gida
Har zuwa 10,000
2
24 GB
600 GB
Har zuwa 65535
Har zuwa 1024
Har zuwa 30,000
6
32 GB
900 GB
Har zuwa 65535
Har zuwa 1024
Har zuwa 60,000
8
64 GB
1.8 TB
Har zuwa 65535
Har zuwa 2048
Har zuwa 120,000
12
128 GB
3.6 TB
Har zuwa 65535
Har zuwa 4096
sama da 250,000
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 28 -
Abubuwan Bukatun Albarkatu
Mai Tarin Yaɗawa tare da Ma'ajiyar Bayanai
Yawo a cikin dakika daya
CPUs da ake buƙata
Ƙwaƙwalwar ajiya da ake buƙata
Ajiye Mafi ƙarancin buƙata
Hanyoyin sadarwa
Masu fitar da kaya
Masu Runduna Na Cikin Gida
Har zuwa 10,000
2
24 GB
200 GB
Har zuwa 65535
Har zuwa 1024
Har zuwa 30,000
6
32 GB
200 GB
Har zuwa 65535
Har zuwa 1024
Har zuwa 60,000
8
64 GB
200 GB
Har zuwa 65535
Har zuwa 2048
Har zuwa 120,000
12
128 GB
200 GB
Har zuwa 65535
Har zuwa 4096
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 29 -
Abubuwan Bukatun Albarkatu
Data Node Virtual Edition
Review bayanin da ke biyowa don ƙididdige buƙatun albarkatu don Ɗabi'ar Node Virtual Edition.
l Ƙirƙirar Gudun Gudun Hijira ta Biyu: Ƙayyade kwararar ruwa a sakan daya da ake sa ran akan hanyar sadarwa. Koma zuwa sashin Kididdigar Yawo a cikin na biyu don cikakkun bayanai.
l Adadin Nodes: Za ka iya tura 1 Data Node ko 3 ko fiye Data Nodes (a cikin sets na 3). Don cikakkun bayanai, koma zuwa Abubuwan Buƙatun Kayan Aiki (tare da Shagon Bayanai).
Dangane da lissafin ku na gudana a cikin na biyu, koma zuwa cikakkun bayanai masu zuwa don tantance buƙatun ku:
Ma'ajiyar Bayanai tare da Node Data Virtual Single
Yawo a cikin dakika daya
CPUs da ake buƙata
Har zuwa 30,000
Har zuwa 60,000
Har zuwa 120,000
12
Har zuwa 225,000
18
Ƙwaƙwalwar ajiya da ake buƙata 32 GB 32 GB
32 GB
64 GB
Ajiye Mafi ƙanƙanta da ake buƙata don Kullin Bayanai guda ɗaya na Kwanaki 30 na Riƙewa 2.25 TB 4.5 TB
9 TB
18 TB
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 30 -
Abubuwan Bukatun Albarkatu
Store Data tare da 3 Virtual Data Nodes
Yawo a cikin dakika daya
CPUs da ake buƙata
Ƙwaƙwalwar ajiya da ake buƙata
Ajiye Mafi ƙanƙanta da ake buƙata don kowane Node Data na Kwanaki 30 na Riƙewa
Ajiye Mafi ƙanƙanta da ake buƙata don Ma'ajin Bayanai na Node 3 don Tsawon Kwanaki 30
Har zuwa 30,000
6
32 GB
1.5 TB a kowace Node Data
4.5 TB jimlar don Store Store
Har zuwa 60,000
6
32 GB
3 TB a kowace Node Data jimlar 9 TB don Store Data
Har zuwa 120,000
12
32 GB
6 TB a kowace Node Data
18 TB jimlar don Store Store
Har zuwa 220,000
18
64 GB
10 TB a kowace Node Data*
Jimlar TB 30 don Shagon Data*
Har zuwa 500,000
18
64 GB
15 TB a kowace Node Data*
Jimlar TB 45 don Shagon Data*
* A sikelin Haɓaka Ma'ajin Bayanai Ana amfani da ingantawa don rage girman ci gaban na'urorin sadarwa
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 31 -
Abubuwan Bukatun Albarkatu
Fitowar Sensor Virtual Edition
Wannan sashe yana siffanta Fitar Sensor Virtual Edition.
l Cache: Rukunin Girman Cache na Flow yana nuna matsakaicin adadin yawan gudanawar da Maɓalli na Flow zai iya aiwatarwa a lokaci guda. Cache ɗin yana daidaitawa tare da adadin ajiyar ƙwaƙwalwar ajiya, kuma ana watsar da kwararar kowane sakan 60. Yi amfani da Girman Cache Flow don lissafta adadin ƙwaƙwalwar da ake buƙata don adadin zirga-zirgar da ake sa ido.
l Bukatun: Yanayin ku na iya buƙatar ƙarin albarkatu dangane da adadin masu canji, kamar matsakaicin girman fakiti, fashe ƙima, da sauran hanyoyin sadarwa da yanayin masauki.
NICs saka idanu tashoshin jiragen ruwa
CPUs da ake buƙata
Ƙwaƙwalwar ajiya mafi ƙarancin buƙata
Ajiye Mafi ƙanƙanta da ake buƙata
1 x1 Gbps 2
4 GB
75 GB
Kiyasin Kayan Wuta
Cache mai gudana
Girman (mafi girman adadin kwararar lokaci)
850 Mbps
32,766
1,850 Mbps
2 x1 Gbps 4
8 GB
75 GB
Abubuwan da aka saita azaman hanyar wucewa ta PCI (mai yarda igb/ixgbe ko e1000e mai yarda)
65,537
3,700 Mbps
4 x1 Gbps 8
16 GB
75 GB
Abubuwan da aka saita azaman hanyar wucewa ta PCI
131,073
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 32 -
Abubuwan Bukatun Albarkatu
NICs saka idanu tashoshin jiragen ruwa
CPUs da ake buƙata
Ƙwaƙwalwar ajiya mafi ƙarancin buƙata
Ajiye Mafi ƙanƙanta da ake buƙata
Kiyasin Kayan Wuta
Cache mai gudana
Girman (mafi girman adadin kwararar lokaci)
(mai yarda igb/ixgbe ko e1000e mai yarda)
8 Gbps
1 x 10 Gbps* 12
24 GB
75 GB
Abubuwan da aka saita su azaman hanyar wucewa ta PCI (Intel ixgbe/i40e mai yarda)
~512,000
16 Gbps
2 x 10 Gbps* 22
40 GB
75 GB
Abubuwan da aka saita su azaman hanyar wucewa ta PCI (Intel ixgbe/i40e mai yarda)
~1,000,000
* Domin 10 Gbps kayan aiki, saita duk CPUs a cikin soket 1. Ga kowane ƙarin 10 Gbps NIC, ƙara 10 vCPUs da 16 GB na RAM.
Na zaɓi: Ɗaya ko fiye na 10G NIC na iya amfani da shi akan mai masaukin VM na zahiri.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 33 -
Abubuwan Bukatun Albarkatu
Yanar Gizo na Yanar Gizo Mai Haɓaka Yanar Gizo
Kafin shigar da Fitar Sensor Virtual Edition, tabbatar cewa kun san nau'in mahallin cibiyar sadarwa da kuke da shi. Wannan jagorar ya ƙunshi kowane nau'in mahallin cibiyar sadarwa wanda Ɗabi'ar Fitowar Fitowar Fitowa zai iya saka idanu.
Daidaituwa: Amintaccen Binciken Yanar Gizo yana goyan bayan yanayin VDS, amma baya goyan bayan VMware Distributed Resource Scheduler (VM-DRS).
Muhallin hanyar sadarwa ta Virtual: The Flow Sensor Virtual Edition yana lura da nau'ikan mahallin cibiyar sadarwa mai zuwa:
l Cibiyar sadarwa mai kama-da-wane na cibiyar sadarwa ta gida (VLAN) tarwatsa VLANs masu hankali inda aka hana ɗaya ko fiye VLANs daga haɗa fakiti
na'urorin sa ido (ga misaliample, saboda manufofin gida) l Masu zaman kansu VLANs l Hypervisor runduna maimakon VLANs
Fitar Sensor Virtual Edition Traffic
Sensor Flow zai sarrafa zirga-zirga tare da Ethertypes masu zuwa:
Ethertype 0x8000 0x86dd 0x8909 0x8100 0x88a8 0x9100 0x9200 0x9300 0x8847 0x8848
Protocol Al'ada IPV4 Na al'ada IPv6 SXP VLAN
VLAN QnQ
MLPS unicast MLPS multicast
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 34 -
Abubuwan Bukatun Albarkatu
Sensor Flow yana adana babban matakin MPLS ko ID na VLAN kuma yana fitar dashi. Yana ƙetare sauran alamun lokacin da ake sarrafa fakiti.
Babban Daraktan UDP
Babban Daraktan UDP na buƙatun injin kama-da-wane ya dace da ƙayyadaddun bayanai masu zuwa. Hakanan, mafi ƙarancin sararin ajiya na iya ƙaruwa dangane da lissafin FPS ɗinku da buƙatun riƙewa.
CPU da ake buƙata
Ƙwaƙwalwar ajiya da ake buƙata
Mafi ƙarancin Ma'ajiyar Bayanai
Matsakaicin ƙimar FPS
2
4 GB
75 GB
10,000
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 35 -
Abubuwan Bukatun Albarkatu
Ana ƙididdige Gudun Gudun Hijira ta Biyu (Na zaɓi)
Idan kuna son ƙididdige buƙatun albarkatun ku dangane da adadin ma'auni daban-daban fiye da yadda muka tanadar a cikin sassan da suka gabata, zaku iya amfani da lissafin Flows per second (FPS) da aka nuna anan.
Ana ƙididdige Gudun Gudun Hijira a cikin daƙiƙa don Ma'ajiya Mai Tara (Tsarin aiki ba tare da Ma'ajiyar Bayanai ba)
Idan kun tura Mai tattara Flow (NetFlow) ba tare da Store ɗin Data ba, ƙididdige rabon ajiya kamar haka: [(matsakaicin FPS/1,000 na yau da kullun) x 1.6 x kwanaki] l Ƙayyade matsakaicin FPS na yau da kullun l Raba wannan lambar da 1,000 FPS lamba da 1.6 GB na ajiya na darajar kwana ɗaya l Ƙirƙirar wannan lambar ta adadin kwanakin da kuke son adana kwararar ruwa gaba ɗaya.
ajiya akan Mai Tara Gudun Hijira
Don misaliample, idan tsarin ku:
l yana da matsakaicin FPS 50,000 na yau da kullun zan adana kwararar ruwa na tsawon kwanaki 30, lissafta kowane Mai Tara kamar haka:
[(50,000/1,000) x 1.6 x 30] = 7200 GB (7.2 TB)
l Matsakaicin FPS na yau da kullun = 50,000 l 50,000 matsakaita FPS / 1,000 = 50 l 50 x 1.6 GB = 80 GB don ƙimar ajiyar rana ɗaya l 80 GB x 30 kwanakin kowace Mai Tara Gudun ruwa = 7200 GB a kowane Mai Tara Ruwa.
Ana ƙididdige Gudun Gudun Hijira a cikin Dakika don Ma'ajiya na Node Data
Idan kun tura Ɗabi'ar Farko Mai Kyau tare da 3 Data Nodes Virtual Edition, muna ba da shawarar cewa ga kowane Node Data, kirga rabon ajiya kamar haka:
[((matsakaicin FPS/1,000 na yau da kullun) x 1.6 x kwanaki] / adadin Nodes Data
l Ƙayyade matsakaicin FPS ɗin ku na yau da kullun l Raba wannan lambar da FPS 1,000
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 36 -
Abubuwan Bukatun Albarkatu
l Ƙirƙirar wannan lambar ta adadin kwanakin da kuke son adana abubuwan da ke gudana don jimillar ma'ajin Data Store
l Raba wannan lambar da adadin Nodes Data a cikin Data Store don ajiya kowace Node Data
Don misaliample, idan tsarin ku: Ina da matsakaicin FPS 50,000 na yau da kullun zan adana kwararar ruwa na kwanaki 90, kuma l kuna da 3 Data Nodes
lissafta kowane Node Data kamar haka: [(50,000/1,000) x 1.6 x 90] / 3 = 2400 GB (2.4 TB) kowane Node Data
l Matsakaicin FPS na yau da kullun = 50,000 l 50,000 matsakaita FPS / 1,000 = 50 l 50 x 1.6 GB = 80 GB don darajar ajiyar rana ɗaya Nodes = 80 GB (90 TB) a kowace Node Data
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 37 -
1. Saita Firewall ɗinka don Sadarwa
1. Saita Firewall ɗinka don Sadarwa
Domin na'urorin su yi sadarwa yadda ya kamata, ya kamata ka saita hanyar sadarwa ta yadda tawul ɗin wuta ko jerin abubuwan sarrafawa kar su toshe haɗin da ake buƙata. Yi amfani da bayanin da aka bayar a wannan sashe don saita hanyar sadarwar ku ta yadda na'urorin zasu iya sadarwa ta hanyar sadarwar.
Buɗe Tashoshi (All Appliances)
Tuntuɓi mai kula da hanyar sadarwar ku don tabbatar da cewa tashoshin jiragen ruwa masu zuwa suna buɗe kuma suna da damar shiga mara iyaka akan na'urorinku (Manajan, Masu Tara Gudun Hijira, Nodes Data, Sensors Flow, da Direktocin UDP):
l TCP 22 l TCP 25 l TCP 389 l TCP 443 l TCP 2393 l TCP 8910 l UDP 53 l UDP 123 l UDP 161 l UDP 162 l UDP 389 l UDP 514 l UDP 2055 l UDP 6343
Ƙarin Buɗaɗɗen Mashigai don Nodes Data
Bugu da kari, idan ka tura Data Nodes zuwa cibiyar sadarwarka, tabbatar da cewa tashoshin jiragen ruwa masu zuwa a bude suke kuma suna da shiga mara iyaka:
TCP 5433 l TCP 5444 l TCP 9450
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 38 -
1. Saita Firewall ɗinka don Sadarwa
Tashoshin Sadarwa da Ka'idoji
Tebu mai zuwa yana nuna yadda ake amfani da tashoshin jiragen ruwa a cikin Tsararren Binciken Yanar Gizo:
Daga (Client) Mai amfani PC Duk kayan aikin
Zuwa (Server) Duk na'urori Mafarin lokacin hanyar sadarwa
Active Directory Manager
Cisco ISE
Manager
Cisco ISE
Manager
Tushen log na waje
Manager
Mai tattara kwarara
Manager
Daraktan UDP
Manager
Daraktan UDP
Mai Tarin Yawo (sFlow)
Daraktan UDP
Mai Tarin Yawo (NetFlow)
Daraktan UDP
Tsarukan gudanar da taron jam'iyyar 3rd
Gudun Sensor
Manager
Gudun Sensor
Mai Tarin Yawo (NetFlow)
NetFlow Exporters Flow Collecter (NetFlow)
sFlow Exporters Flow Collector (sFlow)
Manager
Daraktan UDP
Manager
Cisco ISE
Port TCP/443 UDP/123 TCP/389, UDP/389 TCP/443 TCP/8910
UDP/514
TCP/443 TCP/443 UDP/6343* UDP/2055*
UDP/514
TCP/443 UDP/2055 UDP/2055* UDP/6343* TCP/443 TCP/443
Protocol HTTPS NTP
LDAP
HTTPS XMPP
SYSLOG
HTTPS HTTPS sFlow NetFlow
SYSLOG
HTTPS NetFlow NetFlow sFlow HTTPS HTTPS
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 39 -
1. Saita Firewall ɗinka don Sadarwa
Daga (Client) Manager Manager Manager Manager Manager Manager Manager Manager Manager Manager User PC
Zuwa (Server) Cisco ISE DNS Mai Tarar Gudun Gudun Rarraba Sensor Gudun Fitar da Masu Fitar da Kayan Rarraba LDAP CRL Manajan masu amsawa OCSP
Port TCP/8910 UDP/53 TCP/443 TCP/443 UDP/161 TCP/636 TCP/80 TCP/80 TCP/443
Protocol XMPP DNS HTTPS HTTPS SNMP TLS HTTP OCSP HTTPS
*Wannan ita ce tsohuwar tashar jiragen ruwa, amma kowane tashar tashar UDP ana iya saita shi akan mai fitarwa.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 40 -
1. Saita Firewall ɗinka don Sadarwa
Ƙarin Buɗaɗɗen Tashoshi don Ma'ajiyar Bayanai
Masu biyowa suna lissafin tashoshin sadarwa don buɗewa akan Tacewar zaɓi don tura Ma'ajiyar Bayanai.
# Daga (Abokin ciniki) Zuwa (Server)
Port
Protocol ko Manufar
1 Mai gudanarwa
Masu Tara Gudun Hijira da Bayanan Bayanai
22 / TCP
SSH, ana buƙatar farawa Data Store database
1 Data Nodes
duk sauran Data Nodes
22 / TCP
SSH, ana buƙatar farawa Data Store database kuma don ayyukan sarrafa bayanai
Manager, Flow 2 Collectors, da NTP uwar garken
Bayanan Bayanai
123/UDP
NTP, ana buƙata don aiki tare lokaci
2 NTP uwar garken
Manajan, Masu Tattara Guda, da Nodes na Bayanai
123/UDP
NTP, ana buƙata don aiki tare lokaci
3 Mai gudanarwa
Masu Tara Gudun Hijira da Bayanan Bayanai
443 / TCP
HTTPS, da ake buƙata don amintaccen sadarwa tsakanin na'urori
3 Manajan Masu Tara Gudun Hijira
443 / TCP
HTTPS, da ake buƙata don amintaccen sadarwa tsakanin na'urori
3 Data Nodes
Manager
443 / TCP
HTTPS, da ake buƙata don amintaccen sadarwa tsakanin na'urori
4
NetFlow Exporters
Masu Tarar Yawo - NetFlow
2055/UDP
NetFlow ci
5 Data Nodes
duk sauran Data Nodes
4803 / TCP
Inter-Data Node saƙon sabis
6 Node Data
duk sauran Data
4803/UDP inter-Data Node saƙon
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 41 -
1. Saita Firewall ɗinka don Sadarwa
Nodes
hidima
7 Data Nodes
duk sauran Data Nodes
4804/UDP
Inter-Data Node saƙon sabis
Manajan, Masu Tara 8 masu gudana, da Nodes na Bayanai
Bayanan Bayanai
5433/TCP Vertica haɗin abokin ciniki
9 Node Data
duk sauran Node Data
5433/UDP
Kula da sabis na saƙon Vertica
10
sFlow Exporters
Mai Tarin Yawo (sFlow)
11 Data Nodes
duk sauran Data Nodes
6343/UDP sFlow ciki
6543/UDP
Inter-Data Node saƙon sabis
Tashar Jiragen Sadarwa Na Zabi
Teburi mai zuwa don saitunan zaɓi ne wanda buƙatun cibiyar sadarwar ku ya ƙaddara:
Daga (Client) Zuwa (Server)
Port
Yarjejeniya
Duk kayan aikin Mai amfani PC
TCP/22 SSH
Manager
3rd Party taron management tsarin UDP/162 SNMP-tarkon
Manager
Tsarin Gudanar da taron Jam'iyya na 3 UDP/514 SYSLOG
Manager
Ƙofar imel
TCP/25 SMTP
Manager
Ciyarwar Barazana
TCP/443 SSL
PC mai amfani
Duk kayan aikin
TCP/22 SSH
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 42 -
1. Saita Firewall ɗinka don Sadarwa
Tabbataccen Tattaunawar Yanar Gizo Example
Zane mai zuwa yana nuna nau'ikan haɗin gwiwa da Secure Network Analytics ke amfani dashi. Wasu daga cikin waɗannan tashoshin jiragen ruwa na zaɓi ne.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 43 -
1. Saita Firewall ɗinka don Sadarwa
Amintaccen Aiwatar da Nazari na hanyar sadarwa tare da Shagon Bayanai Example
Kamar yadda aka nuna a cikin hoton da ke ƙasa, zaku iya tura na'urorin Binciken Yanar Gizo mai aminci don samar da ingantacciyar ɗaukar hoto na sassan cibiyar sadarwa a cikin cibiyar sadarwar, ko a cikin hanyar sadarwar ciki, a kewaye, ko a cikin DMZ.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 44 -
2. Zazzagewa Mai Haɓakawa Mai Kyau Files
2. Zazzagewa Mai Haɓakawa Mai Kyau Files
Yi amfani da waɗannan umarnin don saukar da ISO files don shigar da kayan aikin kama-da-wane.
Shigarwa Files
Injin Virtual 3a. VMware vCenter
Shigar da Kayan Aiki File
Cikakkun bayanai
ISO
Shigar da kayan aikin ku ta amfani da VMware vCenter.
3 b. VMware ESXi Tsayayyen Sabar
ISO
3c ku. KVM da Virtual Machine Manager
ISO
Shigar da na'urorin ku na kama-da-wane akan uwar garken mai masaukin baki na ESXi.
Shigar da na'urorin ku ta amfani da KVM da Manajan Injin Virtual.
1. Shiga Cisco Software Central
1. Shiga Cisco Software Central a https://software.cisco.com. 2. A cikin Zazzagewa da sarrafa > Zazzagewa da haɓakawa, zaɓi Shiga
saukewa. 3. Gungura ƙasa har sai kun ga Zaɓi filin samfur. 4. Za ka iya samun damar Secure Network Analytics files ta hanyoyi biyu:
l Bincika da Suna: Nau'in Tasirin Cibiyar Sadarwar Sadarwa a cikin Zaɓi filin Samfur. Danna Shigar.
l Bincika ta Menu: Danna Bincika Duk. Zaɓi Tsaro > Ganuwa na hanyar sadarwa da rarrabuwa > Amintaccen Bincike (Agogon Stealth).
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 45 -
2. Zazzagewa Mai Haɓakawa Mai Kyau Files
2. Zazzagewa Files
1. Zaɓi nau'in kayan aiki. l Secure Network Analytics Manajan Kayayyakin Yanar Gizo l Amintaccen Mai Tarin Yanar Gizo Mai Tsare-tsare l Tsararren Yanar Gizon Yanar Gizo Mai Rarraba Sensor Mai Gudanar da Yanar Gizo mai Tsaftace Cibiyar Kula da Yanar Gizo Mai Kyau mai Kula da UDP mai Tsare-tsare
2. Zaɓi Software na Tsare-tsare Tsare-tsare na Yanar Gizo. 3. A cikin Sabbin Sakin Sakin, zaɓi 7.4.2 (ko sigar 7.4.x wanda kuke
installing). 4. Zazzagewa: Gano wurin shigarwa na ISO file. Danna alamar Zazzagewa ko Ƙara zuwa Cart
ikon. 5. Maimaita waɗannan umarnin don saukewa files ga kowane nau'in kayan aiki.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 46 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
Ƙarsheview
Yi amfani da waɗannan umarnin don shigar da kayan aikin ku ta amfani da VMware vCenter. Don amfani da madadin hanyar, koma zuwa mai zuwa:
l VMware ESXi Tsayayyen Sabar: Yi amfani da 3b. Shigar da Kayan Aikin Gaggawa akan Sabar ESXi Tsayayyen Alone (ISO).
l KVM: Yi amfani da 3c. Shigar da Kayan aikin Virtual akan Mai watsa shiri KVM (ISO).
Secure Network Analytics v7.4.2 ya dace da VMware 7.0 ko 8.0. Ba mu goyan bayan VMware 6.0, 6.5, ko 6.7 tare da Secure Network Analytics v7.4.x. Don ƙarin bayani, koma zuwa takaddun VMware don vSphere 6.0, 6.5, da 6.7 Ƙarshen Tallafin Gabaɗaya.
Kafin Ka Fara
Kafin ka fara shigarwa, kammala waɗannan hanyoyin shirye-shiryen:
1. Daidaitawa: Review buƙatun dacewa a cikin Daidaitawa. 2. Abubuwan Bukatun: Review da Resource Bukatun sashe to
ƙayyade rabon da ake buƙata don na'urar. Kuna iya amfani da tafkin albarkatu ko madadin hanya don rarraba albarkatu. 3. Firewall: Ka saita Tacewar zaɓi don sadarwa. Koma zuwa 1. Haɓaka Firewall ɗinka don Sadarwa. 4. Files: Zazzage kayan aikin ISO files. Koma zuwa 2. Zazzagewar Shigar Maɓalli Mai Kyau Files don umarni. 5. Lokaci: Tabbatar da lokacin da aka saita akan mahaɗan hypervisor a cikin mahallin VMware (inda zaku shigar da kayan aikin kama-da-wane) yana nuna daidai lokacin. In ba haka ba, na'urorin kama-da-wane ba za su iya tashiwa ba.
Kar a shigar da na'ura maras amana na zahiri ko kama-da-wane a kan gungu/tsarin jiki iri ɗaya kamar na'urorin Binciken Yanar Gizon ku na Tsaro.
Kar a shigar da Kayan aikin VMware akan na'urar bincike mai aminci ta hanyar sadarwa saboda zai ƙetare sigar al'ada da aka riga aka shigar. Yin hakan zai sa na'urar ba ta aiki kuma tana buƙatar sake shigarwa.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 47 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
Shigar da Kayan Aikin Kaya ta Amfani da vCenter (ISO)
Idan kana da VMware vCenter (ko makamancin haka), yi amfani da umarni masu zuwa don shigar da na'urar kama-da-wane ta amfani da ISO. Idan kana tura Bayanan Bayanai ko na'urori masu motsi, ka tabbata ka kammala duk hanyoyin da ake buƙata.
Bayanan Bayanai
Cika waɗannan hanyoyin:
1. Ƙaddamar da keɓantaccen LAN don Sadarwar Node na Tsakanin Bayanai. 3. Shigar da Kayan Aiki na Virtual. Lokacin da ka shigar da na'urar kama-da-wane na Data Node, kana buƙatar shigar da adaftan cibiyar sadarwa guda biyu.
Sensors masu gudana
Cika waɗannan hanyoyin:
2. Haɓaka Sensor na Flow don Kula da zirga-zirga 3. Shigar da Kayan Aiki na Farko 4. Ƙayyadaddun Ƙarin Tashoshin Kulawa (Flow Sensors kawai)
Duk Sauran Kayan Aiki
Idan na'urar ba Node Data bane ko Fitar da Fitowa ba, kammala hanya mai zuwa:
3. Shigar da Kayan Aiki na Virtual
Wasu daga cikin menus da zane-zane na iya bambanta daga bayanin da aka nuna anan. Da fatan za a koma zuwa jagorar VMware don cikakkun bayanai masu alaƙa da software.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 48 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
1. Ƙaddamar da keɓantaccen LAN don Sadarwar Node na Tsakanin Bayanai
Idan kuna tura Data Nodes Virtual Edition zuwa cibiyar sadarwar ku, saita keɓaɓɓen LAN tare da maɓalli mai kama-da-wane ta yadda Nodes ɗin bayanai zasu iya sadarwa tare da juna akan eth1 don sadarwar Node-Data. Akwai zaɓuɓɓuka guda biyu don daidaita maɓalli:
l Yana daidaita madaidaicin vSphere
l Yana daidaita Sauyawa Rarraba vSphere
Ana saita vSphere Standard Switch
1. Shiga cikin mahallin VMware ɗin ku. 2. Bi VMware Ƙirƙiri vSphere Standard Canja takardun don
daidaita vSphere Standard Switch. Lura cewa a mataki na 4, za ku so ku zaɓi Ƙungiyar Tashar Tashar Jirgin Ruwa ta Virtual Machine don zaɓin Daidaitaccen Canjawa. 3. Je zuwa 3. Shigar da Kayan Aiki na Virtual.
Haɓaka Sauyawa Rarraba vSphere
1. Shiga cikin mahallin VMware ɗin ku. 2. Bi VMware Ƙirƙiri vSphere Rarraba Canja takarda don
saita vSphere Distributed Switch. Lura cewa don adadin uplinks a mataki na 5a, akwai buƙatu na akalla 1 uplink, duk da haka ba lallai ba ne don saita haɗin kai sai dai idan kuna rarraba nodes a fadin runduna da yawa. Idan kana buƙatar rarraba nodes a fadin runduna da yawa, tuntuɓi Taimakon Cisco don taimako. 3. Je zuwa 3. Shigar da Kayan Aiki na Virtual.
2. Haɓaka Sensor na Guda don Kula da zirga-zirga
Fitowar Sensor Virtual Edition yana da ikon samar da ganuwa a cikin mahallin VMware, yana samar da bayanan kwarara don wuraren da ba a kunna kwarara ba. A matsayin kayan aikin kama-da-wane da aka shigar a cikin kowane mai watsa shiri na hypervisor, Flow Sensor Virtual Edition yana ɗaukar firam ɗin Ethernet daga mai masaukin vSwitch, kuma yana lura da ƙirƙira bayanan kwarara waɗanda ke ɗauke da ƙididdiga masu mahimmanci na zama waɗanda suka shafi nau'ikan tattaunawa, ƙimar bit, da ƙimar fakiti.
Kuna buƙatar shigar da Sensor Flow akan kowane mai masaukin baki a cikin yanayin da kuke son saka idanu.
Yi amfani da waɗannan umarni masu zuwa don saita Flow Sensor Virtual Edition don saka idanu kan zirga-zirga akan vSwitch kamar haka:
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 49 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
l Kula da vSwitch tare da Runduna da yawa l Kula da vSwitch tare da Mai watsa shiri Guda
Kula da Traffic na Waje tare da Fassara ta PCI
Hakanan zaka iya saita Ɗabi'ar Sensor Virtual Edition ɗinku don sa ido kan hanyar sadarwa kai tsaye ta amfani da hanyar wucewa ta PCI.
l Bukatun: igb/ixgbe mai yarda ko e1000e mai yarda PCI wucewa. l Bayanan albarkatu: Koma zuwa Fitowar Sensor Virtual Edition. l Haɗin kai: Koma zuwa 1. Haɓaka Firewall ɗinku don Sadarwa. l Umarni: Don ƙara mu'amalar hanyar sadarwa ta PCI zuwa Fitar Sensor Virtual Edition, koma
zuwa takaddun ku na VMware.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 50 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
Kula da vSwitch tare da Runduna da yawa
Yi amfani da umarnin da ke cikin wannan sashe don amfani da Fitar Sensor Virtual Edition don saka idanu kan zirga-zirga a kan vSwitch Rarraba wanda ya mamaye runduna VM da yawa ko tari. Wannan sashe yana aiki ne kawai ga cibiyoyin sadarwar VDS. Idan cibiyar sadarwar ku tana cikin yanayin da ba na VDS ba, je zuwa Kula da vSwitch tare da Mai watsa shiri Guda.
Bukatun Kanfigareshan
Kuna buƙatar shigar da Sensor Flow akan kowane mai masaukin baki a cikin yanayin da kuke son saka idanu. Wannan saitin yana da buƙatu masu zuwa: l Distributed Virtual Port (dvPort): Ƙara ƙungiyar dvPort tare da saitunan VLAN daidai ga kowane VDS wanda Flow Sensor Virtual Edition zai saka idanu. Idan Flow Sensor Virtual Edition yana lura da zirga-zirgar VLAN da maras VLAN akan hanyar sadarwar, kuna buƙatar ƙirƙirar ƙungiyoyin dvPort guda biyu, ɗaya don kowane nau'in. l VLAN Identifier: Idan mahallin ku yana amfani da VLAN (banda VLAN trunking ko VLAN mai zaman kansa), kuna buƙatar mai gano VLAN don kammala wannan hanya. l Yanayin lalata: An kunna. l Port Promiscuous: An saita zuwa vSwitch. Cika waɗannan matakai don saita hanyar sadarwar ta amfani da VDS: 1. Danna alamar Sadarwar.
2. A cikin bishiyar Sadarwar, danna-dama akan VDS. 3. Zaɓi Ƙungiyar Tashar Tashar Rarraba > Sabuwar Rukunin Tashar Tashar Rarraba.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 51 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
4. Yi amfani da akwatin maganganu na Sabon Rarraba Port Group don daidaita rukunin tashar jiragen ruwa, gami da ƙayyadaddun bayanai a cikin matakai masu zuwa.
5. Zaɓi Suna da Wuri: A cikin filin Suna, shigar da suna don gane wannan rukunin dvPort.
6. Tsaya Saituna: A cikin adadin tashar tashar jiragen ruwa, shigar da lambar Flow Sensor Virtual Editions a cikin gungun runduna.
7. Danna VLAN type drop-down list.
l Idan mahallin ku baya amfani da VLAN, zaɓi Babu. l Idan mahallin ku yana amfani da VLAN, zaɓi nau'in VLAN. Sanya shi azaman
kamar haka:
VLAN
Nau'in VLAN
Cikakkun bayanai A cikin filin ID na VLAN, shigar da lambar
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 52 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
VLAN Trunking Private VLAN
(tsakanin 1 da 4094) wanda yayi daidai da mai ganowa.
A cikin filin kewayon gangar jikin VLAN, shigar da 0-4094 don saka idanu akan duk zirga-zirgar VLAN.
Zaɓi Maɗaukaki daga jerin zaɓuka.
8. Shirye don Kammala: Review saitunan saitunan. Danna Gama. 9. A cikin bishiyar Networking, danna dama ga sabon rukunin dvPort. Zaɓi Shirya Saituna. 10. Zaɓi Tsaro. 11. Click da Promiscuous Mode drop-saukar list. Zaɓi Karɓa.
12. Danna Ok don rufe akwatin maganganu. 13. Shin Flow Sensor Virtual Edition yana kula da hanyar sadarwa ta VLAN da wacce ba ta VLAN ba
zirga-zirga?
l Idan eh, maimaita matakan da ke cikin wannan sashe Kula da vSwitch tare da Runduna da yawa.
l Idan babu, ci gaba zuwa mataki na gaba.
14. Shin akwai wani VDS a cikin VMware muhallin da Flow Sensor Virtual Edition zai saka idanu?
l Idan eh, maimaita matakan da ke cikin wannan sashe Kula da vSwitch tare da Runduna da yawa don VDS na gaba.
15. Je zuwa 3. Shigar da Kayan Aiki na Farko.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 53 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
Kula da vSwitch tare da Mai watsa shiri Guda
Yi amfani da umarnin da ke cikin wannan sashe don amfani da Fitar Sensor Virtual Edition don saka idanu kan zirga-zirga akan vSwitch tare da runduna ɗaya.
Wannan sashe yana aiki ne kawai ga cibiyoyin sadarwa marasa VDS. Idan cibiyar sadarwar ku tana amfani da VDS, je zuwa Kulawa da vSwitch tare da Runduna da yawa.
Bukatun Kanfigareshan
Wannan saitin yana da buƙatu masu zuwa: l Ƙungiya ta tashar jiragen ruwa: Ƙara rukunin tashar jiragen ruwa na karuwanci ga kowane maɓalli na kama-da-wane wanda Ɗabi'ar Fitowar Fitowa za a sa ido. l Yanayin lalata: An kunna. l Port Promiscuous: An saita zuwa vSwitch.
Sanya Rukunin Tashar Ruwa zuwa Yanayin Fasikanci
Yi amfani da waɗannan umarni masu zuwa don ƙara ƙungiyar tashar jiragen ruwa, ko shirya ƙungiyar tashar jiragen ruwa, da saita ta zuwa Promiscuous.
1. Shiga cikin mahallin masaukin ku na VMware ESXi. 2. Danna Networking.
3. Zaɓi shafin ƙungiyoyin tashar jiragen ruwa. 4. Kuna iya ƙirƙirar sabon rukunin tashar jiragen ruwa ko shirya rukunin tashar jiragen ruwa.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 54 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
l Ƙirƙirar Ƙungiya ta tashar jiragen ruwa: Danna Ƙara tashar tashar jiragen ruwa. l Shirya Ƙungiya ta tashar jiragen ruwa: Zaɓi ƙungiyar tashar jiragen ruwa. Danna Shirya Saituna.
5. Yi amfani da akwatin maganganu don saita ƙungiyar tashar jiragen ruwa. Sanya VLAN ID ko VLAN Trunking:
Nau'in VLAN VLAN ID VLAN Trunking
Daki-daki
Yi amfani da VLAN ID don ƙayyade VLAN guda ɗaya. A cikin filin ID na VLAN, shigar da lamba (tsakanin 1 da 4094) wanda yayi daidai da mai ganowa.
Yi amfani da Trunking VLAN don saka idanu duk zirga-zirgar VLAN. Matsakaicin kewayon ya ɓace zuwa 0-4095.
6. Danna Kibiya Tsaro.
7. Yanayin lalata: Zaɓi Karɓa.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 55 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
8. Shin Fitar Sensor Virtual Edition za ta kasance tana sa ido kan wani canji mai kama-da-wane a cikin wannan mahallin VMware?
Idan eh, koma zuwa 2. Haɓaka Sensor Flow don Sa ido kan Traffic, kuma maimaita duk matakai don sauya kama-da-wane na gaba.
9. Je zuwa 3. Shigar da Kayan Aiki na Virtual
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 56 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
3. Shigar da Kayan Aiki na Virtual
Yi amfani da waɗannan umarni masu zuwa don shigar da kayan aikin kama-da-wane akan mai masaukin ku na hypervisor da ayyana sarrafa kayan aikin kama-da-wane da tashoshin sa ido.
Wasu daga cikin menus da zane-zane na iya bambanta daga bayanin da aka nuna anan. Da fatan za a koma zuwa jagorar VMware don cikakkun bayanai masu alaƙa da software.
1. Shiga cikin VMware naka Web Abokin ciniki. 2. Nemo software na kayan aikin kama-da-wane file (ISO) wanda kuka zazzage daga Cisco
Software Central. 3. Yi ISO samuwa a vCenter. Kuna da zaɓuɓɓuka masu zuwa:
l Loda ISO zuwa ma'ajiyar bayanai vCenter. l Ƙara ISO zuwa ɗakin karatu na abun ciki. l Ci gaba da ISO akan wurin aiki na gida, kuma saita tura zuwa
nuni da cewa file. Duba takaddun VMware don ƙarin bayani. 4. Daga vCenter UI, zaɓi Menu > Runduna da Tari. 5. A cikin maɓallin kewayawa, danna dama a gungu ko mai watsa shiri kuma zaɓi Sabon Injin Maɗaukaki… don samun damar sabon mayen injin Virtual. 6. Daga cikin Zaɓi nau'in halitta, zaɓi Ƙirƙirar sabon injin kama-da-wane, sannan danna Next.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 57 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
7. Daga cikin Zaɓi suna da taga babban fayil, shigar da sunan na'ura mai ba da hanya tsakanin hanyoyin sadarwa, zaɓi wuri don injin kama-da-wane, sannan danna Next.
8. Daga cikin Select a compute resource taga, zaɓi wani cluster, host, resource pool, ko vApp inda za ka tura na'urar, sa'an nan danna Next.
9. Daga cikin Select ajiya taga, zaɓi VM Storage Policy daga drop-saukar, sa'an nan zaɓi wurin ajiya, sa'an nan danna Next.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 58 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
10. Daga Select karfinsu taga, zaži kama-da-wane inji version daga Mai jituwa tare da drop-saukar, dangane da halin yanzu tura version ESXi. Don misaliample, hoton da ke gaba yana nuna ESXi 7.0 kuma daga baya saboda an tura ESXi 7.0. Danna Gaba.
11. Daga cikin Zaɓi allo OS, zaɓi Linux Guest OS Family da Debian GNU/Linux 11 (64-bit) Guest OS Version. Danna Gaba.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 59 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
12. Daga cikin Customize hardware taga, saita kama-da-wane hardware. Koma zuwa Abubuwan Abubuwan Bukatun don takamaiman shawarwari don nau'in kayan aikin ku. Wannan mataki yana da mahimmanci don aikin tsarin. Idan ka zaɓi ƙaddamar da na'urorin Binciken Yanar Gizo na Sisiko Secure ba tare da albarkatun da ake buƙata ba, ka ɗauki alhakin sa ido sosai kan yadda ake amfani da albarkatun kayan aikin da ƙara albarkatu kamar yadda ake buƙata don tabbatar da ingantaccen lafiya da aikin turawa.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 60 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
Baya ga buƙatun albarkatun, tabbatar an zaɓi saitunan masu zuwa:
l Danna Sabon Hard faifai don faɗaɗa zaɓuɓɓukan sanyi. Zaɓi Ƙaƙƙarfan Samar da Lazy Zeroed daga Zaɓuɓɓukan Samar da Disk.
l Danna Sabon mai sarrafa SCSI don faɗaɗa zaɓuɓɓukan sanyi. Zaɓi LSI Logic SAS daga Nau'in Canji mai saukewa. Idan baku zaɓi LSI Logic SAS ba, kayan aikin ku na kama-da-wane na iya gaza yin aiki da kyau.
l A cikin Sabon CD/DVD Driver, zaɓi wurin ISO dangane da inda kuka adana ISO. Danna Sabon CD/DVD Drive don fadada zaɓuɓɓukan sanyi. Duba Haɗa A Kunna Wuta.
l Idan na'urar ta kasance Sensor Flow, kuma kuna saita kayan aikin 10 Gbps don NIC, danna CPU don faɗaɗa zaɓuɓɓukan sanyi. Sanya duk Cores akan Socket don haka duk CPUs suna cikin soket ɗaya.
13. Data Nodes: Idan kana tura wani Data Node Virtual appliance, kuma ƙara na biyu cibiyar sadarwa adaftan.
Danna Ƙara Sabuwar Na'ura, sannan zaɓi Network Adapter kuma tabbatar da Nau'in Adafta shine VMXNET3.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 61 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
l Don adaftar hanyar sadarwa ta farko, zaɓi maɓalli wanda zai ba da damar Node Virtual Edition na Data don sadarwa akan hanyar sadarwar jama'a tare da wasu na'urori.
l Don adaftar hanyar sadarwa ta biyu, zaɓi maɓalli da kuka ƙirƙira a cikin 1. Haɓaka LAN mai keɓance don Sadarwar Node Node wanda zai ba da damar Node Virtual Edition don sadarwa akan hanyar sadarwa mai zaman kanta tare da sauran Nodes Data.
Tabbatar cewa kun sanya adaftar cibiyar sadarwa da kyaututtukan kama-da-wane don kowane Node Data a cikin aikin aikin ku yayin da kuke tura kowane Node Data.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 62 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
14. Daga Shirye don kammala taga, sakeview saitunan ku, sannan danna Gama.
15. A turawa yana farawa lokacin da ka danna gunkin Power On. Kula da ci gaban turawa a cikin sashin Ayyuka na Kwanan nan. Tabbatar cewa an kammala aikin kuma an nuna shi a cikin bishiyar Inventory kafin ku tafi matakai na gaba.
16. Matakai na gaba:
l Sensors Flow: Idan na'urar firikwensin Flow ne kuma za a saka idanu fiye da ɗaya mai sauyawa a cikin yanayin VMware, ko fiye da VDS guda ɗaya a cikin tari, ci gaba da sashe na gaba 4. Ƙayyade Ƙarin Tashoshin Kulawa (Flow Sensors kawai) .
l Duk Sauran Kayan Aiki: Maimaita duk hanyoyin da ke cikin wannan sashe 3. Shigar da Kayan Aikin Kaya don tura wani kayan aikin kama-da-wane.
17. Idan ka gama installing duk kama-da-wane kayan aiki a cikin tsarin, je zuwa 4. Configuring Your Secure Network Analytics System.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 63 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
4. Ƙayyadaddun Ƙarin Tashoshin Kulawa (Na'urori masu Tafiya kawai)
Ana buƙatar wannan hanya idan Fitar Sensor Virtual Edition za ta sa ido fiye da sau ɗaya a cikin mahallin VMware ko fiye da VDS ɗaya a cikin tari.
Idan wannan ba shine saitin sa ido don Sensor Flow ɗinku ba, ba kwa buƙatar kammala wannan hanya. Don ƙara tashoshin sa ido na Fito Sensor Virtual Edition, kammala matakai masu zuwa: 1. A cikin bishiyar Inventory, danna-dama na Fitar Sensor Virtual Edition. Zaɓi Shirya Saituna.
2. Yi amfani da akwatin maganganu na Shirya Saituna don saita ƙayyadaddun saituna masu zuwa. 3. Danna Ƙara Sabuwar Na'ura. Zaɓi Adaftar hanyar sadarwa.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 64 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
4. Nemo sabon adaftar cibiyar sadarwa. Danna kibiya don faɗaɗa menu, kuma saita mai zuwa: l Sabuwar hanyar sadarwa: Zaɓi ƙungiyar tashar jiragen ruwa da ba'a sanyawa ba. l Nau'in Adafta: Zaɓi VMXNET 3. l Matsayi: Duba Haɗa a Akwatin Wuta.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 65 -
3 a ba. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO)
5. Bayan sakeviewa cikin saitunan, danna Ok. 6. Maimaita wannan hanya don ƙara wani adaftar Ethernet kamar yadda ake buƙata. 7. Matakai na gaba:
l Sensors Flow: Don saita wani Sensor Flow, je zuwa 2. Haɓaka Sensor Flow don Kula da zirga-zirga.
l Duk Sauran Kayan Aiki: Maimaita duk hanyoyin da ke cikin wannan sashe 3. Shigar da Kayan Aikin Kaya don tura wani kayan aikin kama-da-wane.
l Idan ka gama installing duk kama-da-wane kayan aiki a cikin tsarin, je zuwa 4. Harhada Your Secure Network Analytics System.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 66 -
3 b. Shigar da Kayan Aikin Kaya akan ESXi Stand-Alone Server (ISO)
3 b. Shigar da Kayan Aikin Kaya akan ESXi Stand-Alone Server (ISO)
Ƙarsheview
Yi amfani da waɗannan umarni masu zuwa don shigar da kayan aikin ku ta amfani da yanayin VMware tare da uwar garken ESXi Tsaya kaɗai.
Secure Network Analytics v7.4.2 ya dace da VMware v7.0 ko 8.0. Ba mu goyan bayan VMware v6.0, v6.5, ko v6.7 tare da Secure Network Analytics v7.4.x. Don ƙarin bayani, koma zuwa takaddun VMware don vSphere 6.0, 6.5, da 6.7 Ƙarshen Tallafin Gabaɗaya.
Don amfani da madadin hanyar, koma zuwa mai zuwa:
l VMware vCenter: Yi amfani da 3a. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO) .
l KVM: Yi amfani da 3c. Shigar da Kayan aikin Virtual akan Mai watsa shiri KVM (ISO).
Kafin Ka Fara
Kafin ka fara shigarwa, kammala waɗannan hanyoyin shirye-shiryen:
1. Daidaitawa: Review buƙatun dacewa a cikin Daidaitawa. 2. Abubuwan Bukatun: Review da Resource Bukatun sashe to
ƙayyade rabon da ake buƙata don na'urar. Kuna iya amfani da tafkin albarkatu ko madadin hanya don rarraba albarkatu. 3. Firewall: Ka saita Tacewar zaɓi don sadarwa. Koma zuwa 1. Haɓaka Firewall ɗinka don Sadarwa. 4. Files: Zazzage kayan aikin ISO files. Koma zuwa 2. Zazzagewar Shigar Maɓalli Mai Kyau Files don umarni. 5. Lokaci: Tabbatar da lokacin da aka saita akan mahaɗan hypervisor a cikin mahallin VMware (inda zaku shigar da kayan aikin kama-da-wane) yana nuna daidai lokacin. In ba haka ba, na'urorin kama-da-wane ba za su iya tashiwa ba.
Kar a shigar da na'ura maras amana na zahiri ko kama-da-wane a kan gungu/tsarin jiki iri ɗaya kamar na'urorin Binciken Yanar Gizon ku na Tsaro.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 67 -
3 b. Shigar da Kayan Aikin Kaya akan ESXi Stand-Alone Server (ISO)
Kar a shigar da Kayan aikin VMware akan na'urar bincike mai aminci ta hanyar sadarwa saboda zai ƙetare sigar al'ada da aka riga aka shigar. Yin hakan zai sa na'urar ba ta aiki kuma tana buƙatar sake shigarwa.
Shigar da Kayan Aikin Kaya akan ESXi Stand-Alone Server (ISO)
Yi amfani da waɗannan umarni masu zuwa don shigar da kayan aikin ku ta amfani da yanayin VMware tare da uwar garken ESXi Tsaya kaɗai.
Tsari Yayiview
Shigar da na'urar kama-da-wane ya haɗa da kammala matakai masu zuwa, waɗanda ke cikin wannan babi:
1. Shiga cikin VMware Web Abokin ciniki
2. Booting daga ISO
Bayanan Bayanai
Idan kuna tura Nodes na Data, bi umarnin da ke cikin sashin da ya gabata 1. Haɓaka LAN mai ware don Sadarwar Node na Data kafin ku kammala hanyoyin cikin wannan sashe.
1. Shiga cikin VMware Web Abokin ciniki
Wasu daga cikin menus da zane-zane na iya bambanta daga bayanin da aka nuna anan. Da fatan za a koma zuwa jagorar VMware don cikakkun bayanai masu alaƙa da software.
1. Shiga cikin VMware Web Abokin ciniki. 2. Danna Ƙirƙiri/ Yi rijistar Injin Ƙirƙira. 3. Yi amfani da akwatin maganganu na Sabon Injin Kaya don saita kayan aikin kamar yadda aka ƙayyade a ciki
matakai masu zuwa. 4. Zaɓi Nau'in Ƙirƙirar: Zaɓi Ƙirƙirar Sabuwar Na'ura Mai Kyau.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 68 -
3 b. Shigar da Kayan Aikin Kaya akan ESXi Stand-Alone Server (ISO)
5. Zaɓi Suna da Baƙi OS: Shigar ko zaɓi mai zuwa: l Suna: Shigar da suna don na'urar don gane shi cikin sauƙi. l Daidaitawa: Zaɓi nau'in da kuke amfani da shi (v7.0 ko 8.0). l Iyali OS: Linux. l Sigar OS baƙo: Zaɓi Debian GNU/Linux 11 64-bit.
6. Zaɓi Adana: Zaɓi ma'ajiyar bayanai mai isa. Review Bukatun albarkatun don tabbatar da cewa kuna da isasshen sarari.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 69 -
3 b. Shigar da Kayan Aikin Kaya akan ESXi Stand-Alone Server (ISO)
Review Bukatun albarkatun don ware isassun albarkatu. Wannan mataki yana da mahimmanci don aikin tsarin.
Idan ka zaɓi ƙaddamar da na'urorin Binciken Yanar Gizo na Sisiko Secure ba tare da albarkatun da ake buƙata ba, ka ɗauki alhakin sa ido sosai kan yadda ake amfani da albarkatun kayan aikin da ƙara albarkatu kamar yadda ake buƙata don tabbatar da ingantaccen lafiya da aikin turawa.
7. Keɓance Saituna: Shigar ko zaɓi buƙatun kayan aikin ku (duba Abubuwan Buƙatun albarkatun don cikakkun bayanai).
Tabbatar kun zaɓi waɗannan masu zuwa:
l Mai Kula da SCSI: LSI Logic SAS l Adaftar hanyar sadarwa: Tabbatar da adireshin gudanarwa na na'urar. l Hard Disk: Kaurin Samar da Lazy Zeroed
Idan na'urar firikwensin Flow ne, za ka iya danna Ƙara Adaftar Sadarwar Sadarwar don ƙara wani tsarin gudanarwa ko ji na gani. Idan na'urar firikwensin Flow ne, kuma kuna saita kayan aikin 10 Gbps don NIC, danna CPU don faɗaɗa zaɓuɓɓukan sanyi. Saita duk CPUs a soket ɗaya. Idan na'urar Node ce ta Data, ƙara wata hanyar sadarwa don ba da damar sadarwar Node na interData. Danna Add Network Adapter.
l Don adaftar hanyar sadarwa ta farko, zaɓi maɓalli wanda zai ba da damar Node Virtual Edition na Data don sadarwa akan hanyar sadarwar jama'a tare da wasu na'urori.
l Don adaftar hanyar sadarwa ta biyu, zaɓi maɓalli da kuka ƙirƙira a cikin 1. Haɓaka LAN mai keɓance don Sadarwar Node Node wanda zai ba da damar Node Virtual Edition don sadarwa akan hanyar sadarwa mai zaman kanta tare da sauran Nodes Data.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 70 -
3 b. Shigar da Kayan Aikin Kaya akan ESXi Stand-Alone Server (ISO)
8. Danna kibiya kusa da Network Adapter. 9. Don Nau'in Adafta, zaɓi VMXnet3.
Yayin da Cisco ke goyan bayan amfani da E1000 (1G dvSwitch), 1G PCI-passthrough, da VMXNET 3 musaya, Cisco yana ba da shawarar yin amfani da ƙirar VMXNET3 kamar yadda aka tabbatar don samar da mafi kyawun aikin cibiyar sadarwa don kayan aikin Cisco.
10. Review saitunan saitunan ku kuma tabbatar da su daidai.
11. Danna Gama. An ƙirƙiri kwandon injin kama-da-wane.
2. Booting daga ISO
1. Bude VMware console. 2. Haɗa ISO zuwa sabon injin kama-da-wane. Koma zuwa jagorar VMware don cikakkun bayanai. 3. Boot da kama-da-wane inji daga ISO. Yana gudanar da mai sakawa kuma yana sake yi ta atomatik. 4. Da zarar an kammala shigarwa da sake yi, za ku ga alamar shiga.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 71 -
3 b. Shigar da Kayan Aikin Kaya akan ESXi Stand-Alone Server (ISO)
5. Cire haɗin ISO daga na'ura mai mahimmanci. 6. Maimaita duk hanyoyin a cikin 3b. Shigar da Kayan aikin Virtual akan ESXi
Tsaya-Alone Server (ISO) don kayan aikin kama-da-wane na gaba. 7. Flow Sensors: Idan na'urar ta zama Sensor Flow, gama saitin ta amfani da na baya
sassan wannan littafin:
l 2. Haɓaka Sensor na Guda don Kula da zirga-zirga (amfani da Kula da vSwitch tare da Mai watsa shiri Guda)
l Idan Sensor na Flow zai kasance mai sa ido fiye da sau ɗaya a cikin yanayin VMware, ko fiye da VDS guda ɗaya a cikin tari, je zuwa 4. Ƙayyadaddun Ƙarin Tashoshin Kulawa (Flow Sensors kawai).
8. Idan ka gama installing duk kama-da-wane kayan aiki a cikin tsarin, je zuwa 4. Configuring Your Secure Network Analytics System.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 72 -
3c ku. Shigar da Kayan aikin Virtual akan Mai watsa shiri KVM (ISO)
3c ku. Shigar da Kayan aikin Virtual akan Mai watsa shiri KVM (ISO)
Ƙarsheview
Yi amfani da waɗannan umarnin don shigar da kayan aikin ku ta amfani da KVM da Manajan Injin Kaya. Don amfani da madadin hanyar, koma zuwa mai zuwa:
l VMware vCenter: Yi amfani da 3a. Shigar da Kayan aikin Virtual ta amfani da VMware vCenter (ISO) .
l VMware ESXi Tsayayyen Sabar: Yi amfani da 3b. Shigar da Kayan Aikin Gaggawa akan Sabar ESXi Tsayayyen Alone (ISO).
An gwada Linux KVM kuma an inganta shi akan yawancin nau'ikan masu watsa shirye-shiryen KVM. Koma zuwa KVM don cikakken jerin abubuwan abubuwan KVM waɗanda muka gwada kuma muka inganta don sigar Binciken Yanar Gizo mai aminci 7.3.1 da sama.
Kafin Ka Fara
Kafin ka fara shigarwa, tabbatar cewa kun kammala waɗannan hanyoyin:
1. Daidaitawa: Review buƙatun dacewa a cikin Daidaitawa. 2. Abubuwan Bukatun: Review da Resource Bukatun sashe to
ƙayyade rabon da ake buƙata don na'urar. Kuna iya amfani da tafkin albarkatu ko madadin hanya don rarraba albarkatu. 3. Firewall: Ka saita Tacewar zaɓi don sadarwa. Koma zuwa 1. Haɓaka Firewall ɗinka don Sadarwa. 4. Files: Zazzage kayan aikin ISO files kuma kwafa su zuwa babban fayil akan mai masaukin KVM. Muna amfani da babban fayil mai zuwa a cikin exampwanda aka bayar a cikin wannan sashe: var/lib/libvirt/image. Koma zuwa 2. Zazzagewar Shigar Maɓalli Mai Kyau Files don umarni. 5. Lokaci: Tabbatar da lokacin da aka saita akan mahaɗan hypervisor a cikin mahallin VMware (inda zaku shigar da kayan aikin kama-da-wane) yana nuna daidai lokacin. In ba haka ba, na'urorin kama-da-wane ba za su iya tashiwa ba.
Kar a shigar da na'ura maras amana na zahiri ko kama-da-wane a kan gungu/tsarin jiki iri ɗaya kamar na'urorin Binciken Yanar Gizon ku na Tsaro.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 73 -
3c ku. Shigar da Kayan aikin Virtual akan Mai watsa shiri KVM (ISO)
Shigar da Kayan aikin Virtual akan Mai watsa shiri KVM (ISO)
Idan kuna da mai watsa shiri na KVM, yi amfani da umarni masu zuwa don shigar da na'ura mai mahimmanci ta amfani da ISO.
Tsari Yayiview
Shigar da na'urar kama-da-wane ya haɗa da kammala matakai masu zuwa, waɗanda ke cikin wannan babi:
Ƙirƙirar LAN keɓe don Nodes na Bayanai
1. Shigar da Kayan Aiki na Farko akan Mai watsa shiri na KVM
2. Ƙara NIC (Node Data, Flow Sensor) da Kulawa na Ƙarƙashin Ƙarƙashin Ƙaƙwalwa akan Buɗaɗɗen vSwitch (Flow Sensors Only)
Ƙirƙirar LAN keɓe don Nodes na Bayanai
Idan kuna tura Data Nodes Virtual Edition zuwa cibiyar sadarwar ku, saita keɓaɓɓen LAN tare da maɓalli mai kama-da-wane ta yadda Nodes ɗin bayanai zasu iya sadarwa tare da juna akan eth1 don sadarwar Node-Data. Dubi takaddun canza canjin ku don ƙarin bayani kan ƙirƙirar keɓaɓɓen LAN.
1. Shigar da Kayan Aiki na Farko akan Mai watsa shiri na KVM
Akwai hanyoyi da yawa don shigar da injin kama-da-wane akan mai masaukin KVM ta amfani da ISO file. Matakan da ke gaba suna ba da tsohonample don shigar da Manajan kama-da-wane ta kayan aikin GUI da ake kira Virtual Machine Manager wanda ke gudana akan akwatin Ubuntu. Kuna iya amfani da kowane rarraba Linux mai jituwa. Don cikakkun bayanai masu dacewa, koma zuwa Daidaituwa.
Kula da zirga-zirga
Fitowar Sensor Virtual Edition yana da ikon samar da ganuwa a cikin mahallin KVM, yana samar da bayanan kwarara don wuraren da ba a kunna kwarara ba. A matsayin kayan aikin kama-da-wane da aka shigar a cikin kowane mai masaukin KVM, Flow Sensor Virtual Edition yana ɗaukar firam ɗin Ethernet daga zirga-zirgar zirga-zirgar da yake lura da shi kuma yana ƙirƙira bayanan kwarara da ke ɗauke da ƙididdiga masu mahimmanci na zama waɗanda suka shafi nau'i-nau'i na tattaunawa, ƙimar bit, da ƙimar fakiti.
Bukatun Kanfigareshan
Wannan tsarin yana da buƙatu masu zuwa:
l Yanayin lalata: An kunna. l Port Promiscuous: An saita zuwa buɗe vSwitch.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 74 -
3c ku. Shigar da Kayan aikin Virtual akan Mai watsa shiri KVM (ISO)
Muna ba da shawarar ku yi amfani da virt-manager 2.2.1 don shigar da na'ura mai ƙima akan mai masaukin KVM.
Shigar da Kayan Aikin Kaya akan Mai watsa shiri na KVM
Don shigar da kayan aikin kama-da-wane, kuma ba da damar Flow Sensor Virtual Edition don saka idanu kan zirga-zirga, kammala matakai masu zuwa:
1. Yi amfani da Virtual Machine Manager don haɗawa da Mai watsa shiri na KVM kuma saita na'urar kamar yadda aka ƙayyade a cikin matakai masu zuwa.
2. Danna File > Sabuwar Na'ura mai Ma'ana.
3. Zaɓi QEMU/KVM don haɗin yanar gizon ku, sannan zaɓi Local install media (hoton ISO ko CDROM). Danna Gaba.
4. Danna Browse don zaɓar hoton kayan aikin.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 75 -
3c ku. Shigar da Kayan aikin Virtual akan Mai watsa shiri KVM (ISO)
5. Zaɓi ISO file. Danna Zaɓi Ƙarar. Tabbatar da ISO file Mai watsa shiri na KVM yana iya samun dama.
6. Cire akwatin rajistan "Gano ta atomatik daga kafofin watsa labarai / tushen shigarwa". A ƙarƙashin Zaɓi nau'in tsarin aiki da sigar, fara buga "Debian" kuma zaɓi zaɓi na Debian 11 (debian 11) wanda ya bayyana. Danna Gaba.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 76 -
3c ku. Shigar da Kayan aikin Virtual akan Mai watsa shiri KVM (ISO)
7. Ƙara Memori (RAM) da CPUs zuwa adadin da aka nuna a sashin Buƙatun albarkatun. Review Bukatun albarkatun don ware isassun albarkatu. Wannan mataki yana da mahimmanci don aikin tsarin. Idan ka zaɓi ƙaddamar da na'urorin Binciken Yanar Gizo na Sisiko Secure ba tare da albarkatun da ake buƙata ba, ka ɗauki alhakin sa ido sosai kan yadda ake amfani da albarkatun kayan aikin da ƙara albarkatu kamar yadda ake buƙata don tabbatar da ingantaccen lafiya da aikin turawa.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 77 -
3c ku. Shigar da Kayan aikin Virtual akan Mai watsa shiri KVM (ISO)
8. Zaɓi Ƙirƙirar hoton faifai don injin kama-da-wane. 9. Shigar da adadin ajiyar bayanai da aka nuna don na'urar a cikin Resource
Sashen bukatu. Danna Gaba.
Review Bukatun albarkatun don ware isassun albarkatu. Wannan mataki yana da mahimmanci don aikin tsarin.
Idan ka zaɓi ƙaddamar da na'urorin Binciken Yanar Gizo na Sisiko Secure ba tare da albarkatun da ake buƙata ba, ka ɗauki alhakin sa ido sosai kan yadda ake amfani da albarkatun kayan aikin da ƙara albarkatu kamar yadda ake buƙata don tabbatar da ingantaccen lafiya da aikin turawa.
10. Sanya Sunan na'ura mai mahimmanci. Wannan shine sunan nuni, don haka yi amfani da sunan da zai taimaka maka samunsa daga baya.
11. Bincika daidaitawa na musamman kafin shigar da akwati. 12. A cikin akwatin zazzage zaɓi na hanyar sadarwa, zaɓi cibiyar sadarwar da ta dace
rukuni don shigarwa.
Nodes Data: Idan wannan Node Data ne, zaɓi hanyar sadarwa da ƙungiyar tashar jiragen ruwa waɗanda zasu ba da damar Node ɗin Data don sadarwa akan hanyar sadarwar jama'a tare da wasu na'urori.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 78 -
3c ku. Shigar da Kayan aikin Virtual akan Mai watsa shiri KVM (ISO)
13. Danna Gama. Menu na daidaitawa yana buɗewa.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 79 -
3c ku. Shigar da Kayan aikin Virtual akan Mai watsa shiri KVM (ISO)
14. A cikin maɓallin kewayawa, zaɓi NIC. 15. A ƙarƙashin Virtual Network Interface, zaɓi e1000 a cikin akwatin saukar da samfurin Na'ura.
Danna Aiwatar.
16. Danna VirtIO Disk 1. 17. A cikin Advanced Options drop-down list, zaži SCSI a cikin Disk bus drop-down.
akwati. Danna Aiwatar. 18. Kuna buƙatar ƙara ƙarin NICS don saka idanu akan tashoshin jiragen ruwa akan Fitar da Fitar da Matsala
Buga, ko don ba da damar sadarwar Node na Tsakanin Bayanai akan Node VE?
l Idan eh, je zuwa 2. Ƙara NIC (Data Node, Flow Sensor) da Promiscuous Port Monitoring akan Buɗe vSwitch (Flow Sensors Only).
l Idan babu, je zuwa mataki na gaba.
19. Danna Fara Shigarwa. 20. Je zuwa 4. Haɓaka Tsarin Binciken Yanar Gizon ku mai aminci.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 80 -
3c ku. Shigar da Kayan aikin Virtual akan Mai watsa shiri KVM (ISO)
2. Ƙara NIC (Node Data, Flow Sensor) da Kulawa na Ƙarƙashin Ƙarƙashin Ƙaƙwalwa akan Buɗaɗɗen vSwitch (Flow Sensors Only)
Don ƙara ƙarin NICs don tashoshin sa ido na Fitowar Sensor Virtual Edition ko Node Virtual Edition kuma don kammala shigarwa, kammala matakan masu zuwa:
1. A cikin Kanfigareshan Menu, danna Ƙara Hardware. Akwatin maganganu na Ƙara Sabon Hardware Virtual.
2. A cikin sashin kewayawa na hagu, danna Network.
Idan wannan Node Data ne, zaɓi cibiyar sadarwa da ƙungiyar tashar jiragen ruwa waɗanda zasu ba da damar Node ɗin Data don sadarwa akan hanyar sadarwar jama'a tare da wasu na'urori.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 81 -
3c ku. Shigar da Kayan aikin Virtual akan Mai watsa shiri KVM (ISO)
3. Flow Sensors: Idan wannan shine Flow Sensor, danna maballin saukarwa na Portgroup don zaɓar rukunin tashar jiragen ruwa da ba'a sanya hannu ba wanda kake son saka idanu. Danna jerin abubuwan da aka saukar da Model na Na'ura don zaɓar e1000. Data Nodes: Idan wannan Node Data ne, zaɓi tushen hanyar sadarwa wanda zai ba da izinin sadarwar Node na interData akan LAN keɓe, ta amfani da tsarin da kuka ƙirƙira a cikin Haɓaka LAN keɓe don Nodes ɗin Data.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 82 -
3c ku. Shigar da Kayan aikin Virtual akan Mai watsa shiri KVM (ISO)
4. Danna Gama. 5. Idan kana buƙatar ƙara wani tashar sa ido, maimaita waɗannan umarnin. 6. Bayan kun ƙara duk tashoshin saka idanu, danna Fara shigarwa.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 83 -
4. Haɓaka Tsarin Binciken Yanar Sadarwarka Mai Amintacce
4. Haɓaka Tsarin Binciken Yanar Sadarwarka Mai Amintacce
Idan kun gama shigar da kayan aikin Ɗabi'ar Virtual ɗin ku da/ko kayan aikin hardware, kuna shirye don saita Secure Network Analytics cikin tsarin sarrafawa.
Don saita Tabbataccen Binciken Yanar Gizo, bi umarni a cikin Jagoran Kanfigareshan Tsare-tsaren Tsare-tsare Tsare-tsare na Yanar Gizo v7.4.2. Wannan matakin yana da mahimmanci don ingantaccen tsari da sadarwar tsarin ku.
Tabbatar kun daidaita kayan aikin ku a cikin tsari da aka kayyade a Jagoran Kanfigareshan Tsari.
Bukatun Kanfigareshan Tsari
Tabbatar cewa kuna da damar yin amfani da na'ura mai ba da hanya tsakanin hanyoyin sadarwa ta hanyar hypervisor host (mai masaukin na'ura mai kama-da-wane). Yi amfani da tebur mai zuwa don shirya bayanin da ake buƙata don kowace na'ura.
Bukatun Kanfigareshan
Cikakkun bayanai
Kayan aiki
Adireshin IP
Sanya adireshin IP mai iya aiki da shi zuwa tashar sarrafa eth0.
Netmask
Gateway
Sunan Mai watsa shiri
Ana buƙatar sunan mai masauki na musamman don kowace na'ura. Ba za mu iya saita na'ura tare da sunan mai gida ɗaya da wani na'ura ba. Har ila yau, tabbatar da kowane sunan mai masaukin na'ura ya cika ka'idojin Intanet don ma'aikatan Intanet.
Sunan yanki
Ana buƙatar cikakken sunan yankin da ya cancanta ga kowace na'ura. Ba za mu iya shigar da na'ura mai yanki mara komai ba.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 84 -
4. Haɓaka Tsarin Binciken Yanar Sadarwarka Mai Amintacce
Sabar DNS
Sabar DNS ta ciki don ƙudurin suna
NTP Servers
Sabar Lokaci na ciki don aiki tare tsakanin sabobin. Aƙalla ana buƙatar uwar garken NTP 1 don kowace na'ura.
Cire uwar garken NTP 130.126.24.53 idan yana cikin jerin sabobin ku. An san wannan uwar garken yana da matsala kuma ba a samun tallafi a cikin tsoffin sabar NTP ɗin mu.
Sabar Relay
Sabar Mail ta SMTP don aika faɗakarwa da sanarwa
Tashar Tashar Fitar da Mai Tara
Ana buƙatu don Masu Tarar Yaɗawa kawai. NetFlow Default: 2055
Adireshin IP ɗin da ba mai bi da bi ba a cikin LAN ko VLAN mai zaman kansa (don sadarwar Node na bayanai)
Ana buƙata don Nodes Data kawai.
l Hardware eth2 ko bond na eth2 da eth3. Ƙirƙirar tashar tashar tashar tashar LACP eth2/eth3 mai haɗin gwiwa har zuwa kayan aiki na 20G yana ba da damar sadarwa cikin sauri tsakanin da tsakanin Nodes ɗin Bayanai, da ƙari ko maye gurbin Data Node cikin sauri. Lura cewa haɗin tashar tashar LACP shine kawai zaɓin haɗin kai da ke akwai don Nodes Data Data.
l Virtual eth1
Adireshin IP: Kuna iya amfani da adireshin IP ɗin da aka bayar ko shigar da ƙimar da ta dace da waɗannan buƙatun don sadarwar Node na bayanai.
l Adireshin IP mara amfani da shi daga 169.254.42.0/24 CIDR block,
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 85 -
4. Haɓaka Tsarin Binciken Yanar Sadarwarka Mai Amintacce
tsakanin 169.254.42.2 da 169.254.42.254.
l Octets Uku na Farko: 169.254.42
l Tashar yanar gizo: /24
l Sequential: Don sauƙin kulawa, zaɓi adiresoshin IP na jeri (kamar 169.254.42.10, 169.254.42.11, da 169.254.42.12).
eth0 Hardware Connection Port
Netmask: Netmask yana da wuyar lamba zuwa 255.255.255.0 kuma ba za a iya gyara shi ba.
Da ake buƙata don Tabbataccen Binciken hanyar sadarwa tare da na'urorin kayan masarufi na Store Store kawai:
l Manajan l Mai Tarar Yaɗawa l Data Nodes
Zaɓuɓɓukan Haɗin Hardware na eth0:
l SFP+:
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 86 -
Tallafin Tuntuɓar SNA
Tallafin Tuntuɓar SNA
Idan kana buƙatar goyon bayan fasaha, da fatan za a yi ɗaya daga cikin masu zuwa: l Tuntuɓi Abokin Abokin Ciniki na gida. web: http://www.cisco.com/c/en/us/support/index.html l Don buɗe akwati ta imel: tac@cisco.com l Don tallafin waya: 1-800-553-2447 (US) l Don lambobin tallafi na duniya: https://www.cisco.com/c/en/us/support/web/tsd-cisco-duniya-lambobin sadarwa.html
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
- 87 -
Bayanin Haƙƙin mallaka
Cisco da tambarin Cisco alamun kasuwanci ne ko alamun kasuwanci masu rijista na Cisco da/ko masu haɗin gwiwa a Amurka da wasu ƙasashe. Zuwa view jerin alamun kasuwanci na Cisco, je zuwa wannan URLhttps://www.cisco.com/go/trademarks. Alamomin kasuwanci na ɓangare na uku da aka ambata mallakin masu su ne. Amfani da kalmar abokin tarayya baya nufin alaƙar haɗin gwiwa tsakanin Cisco da kowane kamfani. (1721R)
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
Canja Tarihi
Sigar Takardu
Kwanan Watan Buga
Bayani
1_0
Fabrairu 27, 2023
Farkon sigar.
1_1
Maris 27, 2023
An sabunta tebirin Sadarwar Tashoshin Jiragen Ruwa da Ka'idoji.
1_2
Maris 27, 2023
An gyara typo.
Ingantattun bayanan tallafin VMware. An cire
1_3
Afrilu 20, 2023
Teburin "Tallafin Hardware Metrics" kamar yadda wannan jagorar kama-da-wane. Ingantattun bayanin sigar mai masaukin baki KVM
goyon baya.
1_4
15 ga Agusta, 2023
Canza bayanin kula na albarkatun ƙwaƙwalwar ajiya daga GB zuwa GiB.
1_5
Afrilu 27, 2023
Ƙara tallafi don VMware 8.0. Shawarwarin turawa da aka sabunta.
© 2023 Cisco Systems, Inc. da/ko masu haɗin gwiwa. An kiyaye duk haƙƙoƙi.
Takardu / Albarkatu
![]() |
CISCO 742 Amintaccen Binciken Yanar Gizo [pdf] Jagoran Shigarwa 742 Secure Network Analytics, 742, Secure Network Analytics, Network Analytics, Analytics |