.. _adding-deleting-network-sensors:
Adding And Deleting Network Sensors
===================================
.. note:: Many common issues can be resolved by rebooting the appliance, which
reloads your configurations, and purges outdated settings. After
verifying configurations, rebooting is a good next step in
troubleshooting.
As your network changes, you may add or delete sensors.
* If you add additional remote locations you can add Network Sensor Appliances
to the sites.
* To monitor additional broadcast domains with an existing sensor, you may use
multiple wired interfaces on that appliance if supported.
* For an Appliance with a single wired interface, you can monitor multiple
VLANS over a 802.1Q trunk port by configuring sub interfaces.
Add Network Sensor Hardware
---------------------------
If you have added a new remote location, here are the steps to adding an
additional Network Sensor hardware to your Policy Server.
#. Go to :ref:`installing-network-sensor`. (*During the Installation, you
will be prompted to link the Sensor with a Policy server IP or FQDN*)
#. After Installation, you should see **Network Sensor** in the UI Management
pane under **System > System > Sensor**.
Delete Network Sensor Hardware
------------------------------
.. note:: | If you delete the network sensor, the connected VLAN and all node information are deleted together.
#. Disconnect **Network Sensor** hardware from the network and power down.
#. Access **Policy Server Webconsole** to delete Network Sensor.
#. Go to **System** in the top panel.
#. Go to **System > System** in the System Management panel.
#. Find and click on the **Checkbox** of desired Network Sensor.
#. Go to **Tasks > Delete System**.
#. Click **OK** to confirm.
Add Interfaces on an Existing Sensor
------------------------------------
This option allows you to monitor separate LANs or VLANs on a single sensor
appliance without the use of a trunk port. **One wired interface is required
for each network.**
**Network Sensors cannot be added through Webconsole, Administrator must be configured through
CLI by adding sub-interfaces to the existing eth0 or eth1 interface.**
#. Connect through **SSH client** to Network Sensor. See: :ref:`console` .
#. Enter the following commands below for each Network Sensor to be added:
For this example, interface eth0 is already configured. The interface eth1 will
be configured to monitor a separate LAN:
.. code-block:: bash
genian> enable
genian# configure terminal
genian(config)# interface eth1 address X.X.X.X X.X.X.X
genian(config)# interface eth1 gateway X.X.X.X
genian(config)# exit
Or setup the interface as a DHCP client:
.. code:: bash
genian> enable
genian# configure terminal
genian(config)# interface eth1 dhcp enable
genian(config)# exit
Delete A Specific Network Sensor Interface
------------------------------------------
.. note:: | This deletes a single Network Sensor and all Nodes and Node information
#. Connect through **SSH client** to Network Sensor: :ref:`console`
#. Enter the following commands below for each Network Sensor interface to be
removed:
.. code:: bash
genian> enable
genian# configure terminal
genian(config)# no interface eth1 address X.X.X.X X.X.X.X
genian(config)# no interface eth1 gateway X.X.X.X
genian(config)# exit
If the interface is configured as a dhcp client , use the following method:
.. code:: bash
genian> enable
genian# configure terminal
genian(config)# no interface eth1 dhcp enable
genian(config)# exit
#. Go to **System** in the top panel
#. Go to **System > Sensor** in the System Management panel.
#. Find and click on the **IP Address** of desired Network Sensor.
#. Find and click **Delete** in General tab.
#. Click **OK** to confirm.
Add VLANs (Sub-Interfaces) to an Existing Interface
---------------------------------------------------
This option is used when the Network Sensor is installed in trunk port mode. By
configuring sub interfaces off of the main physical interface,up to 128 VLANs(Recommended 64 VLANs)configured on that trunk port may be monitored through a single physical
interface. When added, a sub interface will show up in the Genians Web Console
as a separate sensor/node. This is because for every VLAN that is monitored,
an IP address will be assigned to the sensor within that VLAN.
.. note:: | Up to 128 VLANs can be added to Genian NAC, and more than 128 VLANS cannot be set. Genians recommends to set 64 VLANs.
- Ensure the Genians Network Sensor is connected to a properly configured
.1q trunk port. See *"VLANs" in* :doc:`/deploying/preparing-network`
- Connect through **SSH client** to Network Sensor. See: :ref:`console`.
- Enter **ALL** VLANs you wish to monitor using commas to separate values and
hyphens to denote ranges. Note that each Vlan ID will determine the suffix
after ``eth0.`` in the sub interface name.
.. code:: bash
genian> enable
genian# configure terminal
genian(config)# interface eth0 vlan 10,20,30-50
- Enter the following commands below for each Network Sensor to be added:
.. code-block:: bash
genian> enable
genian# configure terminal
genian(config)# interface eth0.30 address X.X.X.X X.X.X.X
genian(config)# interface eth0.30 gateway X.X.X.X
genian(config)# exit
- Or configure the interface as a DHCP client.
.. code:: bash
genian> enable
genian# configure terminal
genian(config)# interface eth0.30 dhcp enable
genian(config)# exit
.. note:: If you want to monitor an untagged vlan, including the Native VLAN
on a trunk/dot1q port, this can only be done on interface eth0.
Specific VLAN interfaces (eth0.x) only monitor tagged traffic.
Delete A Specific VLAN Network Sensor
-------------------------------------
.. note:: | This deletes a single VLAN Network Sensor and all Nodes and Node information.
- Connect through **SSH client** to Network Sensor. :ref:`console`.
- Enter ALL VLANs you wish to monitor, and exclude the Vlan to be deleted.
.. code:: bash
genian> enable
genian# configure terminal
genian(config)# interface eth0 vlan 10,20,40-50
- Enter the following commands below for the Vlan Sensor Interface to be
removed:
.. code-block:: bash
genian> enable
genian# configure terminal
genian(config)# no interface eth0.30 address X.X.X.X X.X.X.X
genian(config)# no interface eth0.30 gateway X.X.X.X
genian(config)# exit
- If the interface is configured as a DHCP client , use the following method:
.. code:: bash
genian> enable
genian# configure terminal
genian(config)# no interface eth1 dhcp enable
genian(config)# exit
#. Go to **System** in the top panel.
#. Go to **System > Sensor** in the System Management panel.
#. Find and click on the **IP Address** of desired Network Sensor.
#. Find and click **Delete** in General tab.
#. Click **OK** to confirm.