Cluster A 5.9.00
wins-gigamon [1717: master] (config) # show running-config
##
## Running database "20210428_backup"
## Generated at 2021/04/28 16:51:51 +0900
## Software version on which this output was taken: GigaVUE-OS 5.9.00 172922 2020-04-01 08:04:52
## Hostname: wins-gigamon
##
## Note: If you are not an admin user some command invocations may be omitted
## because you do not have permissions to see them.
##
##
## Network interface configuration
##
interface eth1
create
exit
interface inband
create
exit
interface eth0
no dhcp
ip address 10.11.11.220 /24
exit
interface eth1
comment ""
dhcp
display
duplex auto
mtu 1500
no shutdown
speed auto
no zeroconf
exit
interface eth2
no zeroconf
exit
interface inband
comment ""
no dhcp
display
duplex auto
mtu 1500
no shutdown
speed auto
zeroconf
exit
##
## Network interface IPv6 configuration
##
interface eth0
no ipv6 dhcp client enable
exit
interface eth1
no ipv6 address autoconfig
ipv6 address autoconfig default
no ipv6 address autoconfig privacy
no ipv6 dhcp client enable
ipv6 enable
exit
interface inband
no ipv6 address autoconfig
ipv6 address autoconfig default
no ipv6 address autoconfig privacy
no ipv6 dhcp client enable
ipv6 enable
exit
##
## Routing configuration
##
ip default-gateway 10.11.11.254 eth0
##
## Other IP configuration
##
hostname wins-gigamon
##
## Other IPv6 configuration
##
no ipv6 enable
##
## Local user account configuration
##
username admin password 7 $1$h1kkZTiM$YG/C.yQme.xM/aIT/4MvB/
no username sbbaek disable
username sbbaek full-name ""
username sbbaek password 7 $1$/WFiHiD1$YDm2QkykG1hRcZFawhx6h1
username sbbaek roles replace admin
no username wins disable
username wins full-name "System Administrator"
username wins password 7 $1$Yo9pcPYJ$3LljDLRnhZ1wSlST6Sp8U1
username wins roles replace admin
##
## AAA remote server configuration
##
# ldap bind-password ********
# radius-server key ********
# tacacs-server key ********
##
## AAA configuration
##
aaa authentication login default tacacs+ local
##
## Chassis level configurations
##
chassis box-id 1 serial-num C1399 type hc2 gdp disable
chassis box-id 2 serial-num D0388 type ta10 gdp disable
##
## Card level configurations
##
card slot 1/1 product-code 132-00BQ
card slot 1/3 product-code 132-00BK
card slot 1/cc1 product-code 132-00AN
card slot 2/1 product-code 132-00CC mode 48x noconfirm
##
## Port level configurations
##
port 1/1/x1 type network
port 1/1/x2 type network
port 1/1/x3 type network
port 1/1/x4 type network
port 1/1/x5 type network
port 1/1/x6 type network
port 1/1/x7 type network
port 1/1/x8 type network
port 1/1/x9 type network
port 1/1/x10 type network
port 1/1/x11 type network
port 1/1/x12 type network
port 1/1/x13 type network
port 1/1/x14 type network
port 1/1/x15 type tool
port 1/1/x15 params admin enable
port 1/1/x16 type network
port 1/1/x17 type inline-net
port 1/1/x17 params speed 1000
port 1/1/x18 type inline-net
port 1/1/x18 params speed 1000
port 1/1/x19 type inline-net
port 1/1/x19 params admin enable speed 1000
port 1/1/x20 type inline-net
port 1/1/x20 params admin enable speed 1000
port 1/1/x21 type inline-net
port 1/1/x21 params speed 1000
port 1/1/x22 type inline-net
port 1/1/x22 params speed 1000
port 1/1/x23 type inline-net
port 1/1/x23 params admin enable speed 1000
port 1/1/x24 type inline-net
port 1/1/x24 params admin enable speed 1000
port 1/3/x1 type network
port 1/3/x2 type network
port 1/3/x3 type network
port 1/3/x4 type network
port 1/3/x4 params admin enable
port 1/3/x5 type stack
port 1/3/x5 params admin enable
port 1/3/x6 type stack
port 1/3/x6 params admin enable
port 1/3/x7 type stack
port 1/3/x7 params admin enable
port 1/3/x8 type stack
port 1/3/x8 params admin enable
port 1/3/x9 type network
port 1/3/x9 params admin enable
port 1/3/x10 type network
port 1/3/x11 type network
port 1/3/x12 type network
port 1/3/x13 type network
port 1/3/x13 params admin enable
port 1/3/x14 type network
port 1/3/x14 params admin enable
port 1/3/x15 type network
port 1/3/x15 params admin enable autoneg enable
port 1/3/x16 type network
port 1/3/x16 params admin enable autoneg enable
port 2/1/q1 type network
port 2/1/q2 type network
port 2/1/q3 type network
port 2/1/q4 type network
port 2/1/x1 type network
port 2/1/x2 type network
port 2/1/x3 type network
port 2/1/x4 type network
port 2/1/x5 type network
port 2/1/x6 type network
port 2/1/x7 type network
port 2/1/x8 type network
port 2/1/x9 type network
port 2/1/x10 type network
port 2/1/x11 type network
port 2/1/x12 type network
port 2/1/x13 type network
port 2/1/x14 type network
port 2/1/x15 type network
port 2/1/x16 type network
port 2/1/x17 type network
port 2/1/x18 type network
port 2/1/x19 type network
port 2/1/x20 type network
port 2/1/x21 type network
port 2/1/x22 type network
port 2/1/x23 type network
port 2/1/x24 type network
port 2/1/x25 type network
port 2/1/x25 params admin enable
port 2/1/x26 type network
port 2/1/x27 type network
port 2/1/x28 type network
port 2/1/x29 type network
port 2/1/x30 type network
port 2/1/x31 type network
port 2/1/x32 type network
port 2/1/x33 type network
port 2/1/x34 type network
port 2/1/x35 type network
port 2/1/x36 type network
port 2/1/x37 type tool
port 2/1/x37 params admin enable autoneg enable
port 2/1/x38 type tool
port 2/1/x38 params admin enable autoneg enable
port 2/1/x39 type network
port 2/1/x40 type network
port 2/1/x41 type network
port 2/1/x42 type network
port 2/1/x43 type network
port 2/1/x44 type network
port 2/1/x45 type stack
port 2/1/x45 params admin enable
port 2/1/x46 type stack
port 2/1/x46 params admin enable
port 2/1/x47 type stack
port 2/1/x47 params admin enable
port 2/1/x48 type stack
port 2/1/x48 params admin enable
##
## Gigastream hash configurations
##
gigastream advanced-hash slot 1/cc1 default
gigastream advanced-hash slot 2/1 default
##
## Gigastream configurations
##
gigastream alias GigaStream1
port-list 1/3/x5,1/3/x6,1/3/x7,1/3/x8 params hash advanced
exit
gigastream alias GigaStream2
port-list 2/1/x45,2/1/x46,2/1/x47,2/1/x48 params hash advanced
exit
##
## Stack Link configurations
##
stack-link alias st1 between gigastreams GigaStream1 and GigaStream2
##
## Gsgroup configurations
##
gsgroup alias GS1 port-list 1/3/e1
##
## Gs params configurations
##
gsparams gsgroup GS1
3gpp-node-role disable
5g-flow timeout 48
cpu utilization type total rising 80
dedup-action drop
dedup-ip-tclass include
dedup-ip-tos include
dedup-tcp-seq include
dedup-timer 50000
dedup-vlan ignore
diameter-packet timeout 2
diameter-s6a-session limit 10000
diameter-s6a-session timeout 30
eng-watchdog-timer 60
erspan3-timestamp format none
flow-mask disable
flow-sampling-rate 5
flow-sampling-timeout 1
flow-sampling-type device-ip
generic-session-timeout 5
gtp-control-sample enable
gtp-flow timeout 48
gtp-persistence disable
gtp-persistence file-age-timeout 30
gtp-persistence interval 10
gtp-persistence restart-age-time 30
gtp-randomsample disable
gtp-randomsample interval 12
ip-frag forward enable
ip-frag frag-timeout 10
ip-frag head-session-timeout 30
lb failover disable
lb failover-thres lt-bw 80
lb failover-thres lt-pkt-rate 1000
lb replicate-gtp-c disable
lb use-link-spd-wt disable
resource buffer-asf disable
resource cpu overload-threshold 90
resource hsm-ssl buffer disable
resource hsm-ssl packet-buffer 1000
resource inline-ssl standalone enable
resource metadata disable
resource packet-buffer overload-threshold 80
resource xpkt-pmatch num-flows 0
session logging level none
sip-media timeout 30
sip-nat disable
sip-session timeout 30
sip-tcp-idle-timeout 20
ssl-decrypt decrypt-fail-action drop
ssl-decrypt enable
ssl-decrypt hsm-pkcs11 dynamic-object enable
ssl-decrypt hsm-pkcs11 load-sharing enable
ssl-decrypt hsm-timeout 1000
ssl-decrypt key-cache-timeout 10800
ssl-decrypt non-ssl-traffic drop
ssl-decrypt pending-session-timeout 60
ssl-decrypt session-timeout 300
ssl-decrypt tcp-syn-timeout 20
ssl-decrypt ticket-cache-timeout 10800
tunnel-health-check action pass
tunnel-health-check disable
tunnel-health-check dstport 54321
tunnel-health-check interval 600
tunnel-health-check protocol icmp
tunnel-health-check rcvport 54321
tunnel-health-check retries 5
tunnel-health-check roundtriptime 1
tunnel-health-check srcport 54321
xpkt-pmatch disable
exit
##
## Gsop configurations
##
gsop alias Dedup dedup set port-list GS1
##
## Vport configurations
##
vport alias VP1 gsgroup GS1
vport alias VP1 failover-action vport-bypass
vport alias VP1 outer-traffic-path to-inline-tool
vport alias VP1 inner-traffic-path to-inline-tool
vport alias VP1 deferred-binding disable
vport alias VP1 mmon disable
##
## Inline-network configurations
##
inline-network alias default_inline_net_1_1_1
pair net-a 1/1/x17 and net-b 1/1/x18
physical-bypass enable
traffic-path bypass
exit
inline-network alias default_inline_net_1_1_2
pair net-a 1/1/x19 and net-b 1/1/x20
physical-bypass disable
traffic-path bypass
exit
inline-network alias default_inline_net_1_1_3
pair net-a 1/1/x21 and net-b 1/1/x22
physical-bypass enable
traffic-path bypass
exit
inline-network alias default_inline_net_1_1_4
pair net-a 1/1/x23 and net-b 1/1/x24
physical-bypass enable
traffic-path bypass
exit
##
## Port-pair connection configurations
##
port-pair alias Pair1 between 1/3/x13 and 1/3/x15 lfp enable
port-pair alias Pair2 between 1/3/x14 and 1/3/x16 lfp enable
##
## Traffic map connection configurations
##
map alias dedup
type regular byRule
roles replace admin to owner_roles
use gsop Dedup
rule add pass macdst 0000.0000.0000 0000.0000.0000 bidir
to 2/1/x37
from 2/1/x25
exit
map-passall alias intooob
roles replace admin to owner_roles
to 1/1/x15
from 1/1/x19,1/1/x20
exit
##
## SNMP configuration
##
snmp-server community 9fa97e11de17
no snmp-server host 10.10.10.164 disable
snmp-server host 10.10.10.164 traps port 162 version 2c 9fa97e11de17
snmp-server throttle event linkspeedstatuschange interval 60 report-threshold 1
snmp-server throttle event packetdrop interval 60 report-threshold 1
snmp-server throttle event rxtxerror interval 60 report-threshold 1
no snmp-server traps event inlinetoolrecovery
no snmp-server traps event process-cpu-threshold
no snmp-server traps event process-mem-threshold
no snmp-server traps event system-cpu-threshold
no snmp-server traps event system-mem-threshold
##
## Cluster configuration
##
cluster id 1717
cluster interface eth0
cluster master address primary ip 10.11.11.220 port 60102
cluster master address secondary ip 10.11.11.221 port 60102
cluster master address vip 10.11.11.222 /24
cluster master preference 90
cluster name 1717
cluster shared-secret qwertyuiopasdfghjkl
cluster enable
##
## X.509 certificates configuration
##
#
# Certificate name system-self-signed, ID 641af2864a5f06088b57a3bc49d4762dbcb108bb
# (public-cert config omitted since private-key config is hidden)
##
## Web configuration
##
# web proxy auth basic password ********
##
## Time/NTP configuration
##
clock timezone Asia Southeast Seoul
##
## E-mail configuration
##
# email auth password ********
# email autosupport auth password ********
wins-gigamon [1717: master] (config) #
'업무이야기 > 패킷전달플랫폼' 카테고리의 다른 글
Gigamon Basics: Setting up your HC appliance for the first time upon power-on (0) | 2022.06.13 |
---|---|
Gigamon Clustering #2 (0) | 2021.06.11 |
GigaSALES Certification Test (0) | 2021.03.29 |
Could you please share us the below listed information to proceed further on this case. (0) | 2021.01.25 |
To set up GRIP successfully, it is advised that you check the inline functions of each HC2 separately. (0) | 2021.01.25 |