Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revision | |||
en:dpi:dpi_options:dpi_divert_spec:start [2023/08/28 15:01] – edrudichgmailcom | en:dpi:dpi_options:dpi_divert_spec:start [Unknown date] (current) – removed - external edit (Unknown date) 127.0.0.1 | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== Traffic Mirroring to External Platforms ====== | ||
- | {{indexmenu_n> | ||
- | A part of the traffic can be mirror from the common channel and transmitted for analysis and processing to external platforms. | ||
- | |||
- | {{ : | ||
- | |||
- | ===== TAP Interfaces Configuration ===== | ||
- | * TAP0 - is used for traffic diversion | ||
- | * TAP1 - server side port that receives traffic | ||
- | * Tunnel is created between TAP0 and TAP1 to transmit traffic to an external platform | ||
- | * mac learning is disabled on the TAP0 interface | ||
- | |||
- | Run the following commands from the console: | ||
- | <code bash> | ||
- | ip tuntap add tap0 mode tap | ||
- | ip tuntap add tap1 mode tap | ||
- | |||
- | ip link set dev tap0 up | ||
- | ip link set dev tap1 up | ||
- | |||
- | ip link add br0 type tunnel | ||
- | |||
- | ip link set tap0 master br0 | ||
- | bridge link set dev tap0 learning off | ||
- | ip link set tap1 master br0 | ||
- | |||
- | ifconfig tap0 192.168.4.20 up | ||
- | ifconfig tap1 192.168.4.21 up | ||
- | ifconfig br0 up | ||
- | </ | ||
- | <note warning> | ||
- | |||
- | ===== Traffic Diversion Configuration ===== | ||
- | Set up traffic diversion (the variant with the named profile): | ||
- | <code bash> | ||
- | fdpi_ctrl load profile --service 14 --profile.name radius_accounting | ||
- | fdpi_ctrl load --service 14 --profile.name radius_accounting --ip 10.16.252.11 | ||
- | </ | ||
- | here " | ||
- | " | ||
- | " | ||
- | | ||
- | An example of use can be found in the section [[en: | ||
- | < | ||
- | |||
- | ===== Autorun Setup ===== | ||
- | To configure the traffic diversion interfaces at system startup, you have to: | ||
- | - Add to the file **/ | ||
- | ip tuntap add tap1 mode tap | ||
- | |||
- | ip link set dev tap0 up | ||
- | ip link set dev tap1 up | ||
- | |||
- | ip link add br0 type tunnel | ||
- | |||
- | ip link set tap0 master br0 | ||
- | bridge link set dev tap0 learning off | ||
- | ip link set tap1 master br0 | ||
- | |||
- | ifconfig tap0 192.168.4.20 up | ||
- | ifconfig tap1 192.168.4.21 up | ||
- | ifconfig br0 up </ | ||
- | - Add **rc.local** processing permission: <code bash> chmod +x / | ||
- | - Change the file **/ | ||
- | Description=/ | ||
- | Documentation=man: | ||
- | ConditionFileIsExecutable=/ | ||
- | After=network.target network-online.target | ||
- | |||
- | [Service] | ||
- | Type=forking | ||
- | ExecStart=/ | ||
- | TimeoutSec=0 | ||
- | RemainAfterExit=yes | ||
- | GuessMainPID=no | ||
- | |||
- | [Install] | ||
- | WantedBy=multi-user.target </ | ||
- | - Enable **rc.local**, |