 This document provides a detailed guide on deploying and configuring the Packet Broker on WEB.

Preface

Applicable Hardware Models

 Packet Broker is a containerized network packet broker application built on top of Sonic NOS (AsterNOS).  web for visual triage scenarios, targeted abstraction on the web, the user can clearly according to the input, rules, output logic to complete the entire configuration of the issuance of the acl rules for the creation of the corresponding business groups, the ability to annotate the entire business group and adjust the priority for the convenience of the user to carry out the management.

Packet Broker Overview

 By default, both serial console-based login and SSH-based login are supported on AsterNOS appliances.  The first time you log in to the switch, you need to log in from the Console port (hereinafter referred to as the serial port), and you can log in to the switch via SSH after configuring the management port IP.

Device Initialization Configuration

 Packet Broker is deployed on Sonic NOS (AsterNOS).  Before installing, please check with the appropriate personnel to make sure that the Packet Broker version is compatible with the Sonic NOS (AsterNOS) Version Matching.

Packet Broker Installation

 To complete a traffic forwarding, the overall is divided into three segments, respectively, the input port, the intermediate filtered traffic, the output port.  The configuration here is mainly in the Forwarding Policy page, through the chapter content, you can specify the traffic input and output ports, with the intermediate filtered traffic.

Overall Traffic Configuration Logic

 Use the browser to visit https //device\\ ip , you can jump to the WEB login page, the default username admin , password asteros 

Login Configuration

 This page mainly displays some device status, which is mainly categorized into link status, system information, system status, temperature, fan, power supply The link status page displays the port distribution of the device and distinguishes whether the current interface is UP or not by different colors.  Hovering over a port displays detailed information about the port, such as module information, interface statistics, and threshold information for module-related parameters for reference.

WebUI Overview

 This screen allows you to make settings related to the panel port.  Figure Ports Conifg Speed Different speeds can be configured according to the panel port form factor.

Interface Configuration

 Policies are the main part of data aggregation and triage, and are used to configure the flow of traffic from input, to filtering, and to output in a completed process.  To complete the forwarding you need to create a set of policies, click the Create Policy button, you can configure the policy name, inbound interface, outbound interface, mirroring direction, and optionally add a specified VLAN.

Forwarding Policy

 LLDP Global Enable Display the LLDP status of the port, when both ends of the port have LLDP enabled at the same time, you can display the information of both ends, including the device ID, local port, local port IP, and its corresponding peer device ID, peer device port, and peer port IP.

Advanced Features

 Enter the server IP to upload syslog logs to the specified remote server This interface allows you to manage the logs and download or delete them.  The current system time can be adjusted by NTP/manual configuration.

System Configuration

 There are two main types of SNMP services, one is to provide service information to other devices, and the other is to send alarms to specified devices.  As shown in the figure to open the SNMP service to provide services to the outside world, the default IP for the management port IP, if there is no management port IP, you need to manually specify the IP to provide services, the default port is 161, the default group name for the public.

SNMP Configuration

 Click New to add a new user, configure the user's role, set a password, and add other notes to the description.  Ticked users can be deleted, admin users cannot be deleted Click Password Lockout Management to change the number of lockouts and lockout time for logged-in users.

WebUI Configuration Guide