Adding And Deleting Network Sensors

As your network changes, you may add or delete sensors.

  • If you add additional remote locations you can add Network Sensor Appliances to the sites.
  • To monitor additional broadcast domains with an existing sensor, you may use multiple wired interfaces on that appliance if supported.
  • For an Appliance with a single wired interface, you can monitor multiple VLANS over a 802.1Q trunk port by configuring sub interfaces.

Add Network Sensor Hardware

If you have added a new remote location, here are the steps to adding an additional Network Sensor hardware to your Policy Server.

  1. Go to Installing Genian NAC. (During the Installation, you will be prompted to link the Sensor with a Policy server IP or FQDN)
  2. After Installation, you should see Network Sensor in the UI Management pane under System > System > Sensor.

Delete Network Sensor Hardware

(This deletes Node information for all associated networks.)

  1. Disconnect Network Sensor hardware from the network and power down.
  2. Access Policy Server UI to delete Network Sensor.
  3. Go to System in the top panel.
  4. Go to System > System in the System Management panel.
  5. Find and click on the Checkbox of desired Network Sensor.
  6. Go to Tasks > Delete System.
  7. Click OK to confirm.

Add Interfaces on an Existing Sensor

This option allows you to monitor separate LANs or VLANs on a single sensor appliance without the use of a trunk port. One wired interface is required for each network.

(Network Sensors cannot be added through UI, they must be configured through CLI by adding sub-interfaces to the existing eth0 or eth1 interface.)

  1. Connect through SSH client to Network Sensor. See: Command Line Interface.
  2. Enter the following commands below for each Network Sensor to be added:

For this example, interface eth0 is already configured. The interface eth1 will be configured to monitor a separate LAN:

genian> enable
genian# configure terminal
genian(config)# interface eth1 address X.X.X.X X.X.X.X
genian(config)# interface eth1 gateway X.X.X.X
genian(config)# exit

Or setup the interface as a DHCP client:

genian> enable
genian# configure terminal
genian(config)# interface eth1 dhcp enable
genian(config)# exit

Delete A Specific Network Sensor Interface

(This deletes a single Network Sensor and all Nodes and Node information.)

  1. Connect through SSH client to Network Sensor: Command Line Interface.
  2. Enter the following commands below for each Network Sensor interface to be removed:
genian> enable
genian# configure terminal
genian(config)# no interface eth1 address X.X.X.X X.X.X.X
genian(config)# no interface eth1 gateway X.X.X.X
genian(config)# exit

If the interface is configured as a dhcp client , use the following method:

genian> enable
genian# configure terminal
genian(config)# no interface eth1 dhcp enable
genian(config)# exit
  1. Go to System in the top panel
  2. Go to System > Sensor in the System Management panel.
  3. Find and click on the IP Address of desired Network Sensor.
  4. Find and click Delete in General tab.
  5. Click OK to confirm.

Add VLANs (Sub-Interfaces) to an Existing Interface

This option is used when the Network Sensor is installed in trunk port mode. By configuring sub interfaces off of the main physical interface,up to 128 VLANs configured on that trunk port may be monitored through a single physical interface. When added, a sub interface will show up in the Genians Web Console as a separate sensor/node. This is because for every VLAN that is monitored, an IP address will be assigned to the sensor within that VLAN.

  • Ensure the Genians Network Sensor is connected to a properly configured .1q trunk port. See "VLANs" in Preparing Network
  • Connect through SSH client to Network Sensor. See: Command Line Interface.
  • Enter ALL VLANs you wish to monitor using commas to separate values and hyphens to denote ranges. Note that each Vlan ID will determine the suffix after eth0. in the sub interface name.
genian> enable
genian# configure terminal
genian(config)# interface eth0 vlan 10,20,30-50
  • Enter the following commands below for each Network Sensor to be added:
genian> enable
genian# configure terminal
genian(config)# interface eth0.30 address X.X.X.X X.X.X.X
genian(config)# interface eth0.30 gateway X.X.X.X
genian(config)# exit
  • Or configure the interface as a DHCP client.
genian> enable
genian# configure terminal
genian(config)# interface eth0.30 dhcp enable
genian(config)# exit

Note

If you want to monitor an untagged vlan, including the Native VLAN on a trunk/dot1q port, this can only be done on interface eth0. Specific VLAN interfaces (eth0.x) only monitor tagged traffic.

Delete A Specific VLAN Network Sensor

(This deletes a single VLAN Network Sensor and all Nodes and Node information.)

  • Connect through SSH client to Network Sensor. See: Command Line Interface.
  • Enter ALL VLANs you wish to monitor, and exclude the Vlan to be deleted.
genian> enable
genian# configure terminal
genian(config)# interface eth0 vlan 10,20,40-50
  • Enter the following commands below for the Vlan Sensor Interface to be removed:
genian> enable
genian# configure terminal
genian(config)# no interface eth0.30 address X.X.X.X X.X.X.X
genian(config)# no interface eth0.30 gateway X.X.X.X
genian(config)# exit
  • If the interface is configured as a DHCP client , use the following method:
genian> enable
genian# configure terminal
genian(config)# no interface eth1 dhcp enable
genian(config)# exit
  1. Go to System in the top panel.
  2. Go to System > Sensor in the System Management panel.
  3. Find and click on the IP Address of desired Network Sensor.
  4. Find and click Delete in General tab.
  5. Click OK to confirm.