8.11. Procedure to manage the `monx` capture interface settings

A - Introduction

This procedure describes:

  • Viewing the network settings

  • Modifying these parameters

For...

Use the command

carry out the procedures successively

obtain an overview of the information on all network interfaces

show network-config

display the MTU value of the interfaces

show interfaces

modify the MTU value of the interfaces

set advanced-configuration mtu

Display the available capture interfaces

show interfaces

manage the available capture interfaces

set interfaces


B - Prerequisites


C - Preliminary operations

  1. Connect to the GCap (refer to Procedure to remote connection to GCap via an SSH tunnel)

  2. Stop the Sigflow detection engine (refer to monitoring-engine)


D - Procedure to display the network configuration

The command prompt is displayed.

(gcap-cli)
  1. Enter the command

    show interfaces
    
  2. Validate
    The system displays the information of all network interfaces

    image0

    Note

    The `mon0`, `mon1`, `mon2` interface is enabled ( field: role, value : capture )
    The `enp27s0` interface is disabled ( field: role, value : inactive)

E - Procedure to display or change the MTU value

The command prompt is displayed.

(gcap-cli)
  1. To display the current configuration of enabled interfaces:

    1. Enter the command

      show interfaces
      
    2. Validate
      The system displays the result

      image0

      The values are displayed for all enabled network interfaces (MTU field )
  2. In our example, to change the current configuration of enabled interfaces: e.g. to change the MTU value of the `mon0` interface
    The command prompt is displayed
    (gcap-cli)
    
    1. Enter the command

      set advanced-configuration mtu mon1 2000
      
    2. Validate
      The system displays the result
      Updating Network MTU configuration to:
              - enp4s0: 2000
      

F - Procedure to display, activate or deactivate the capture interfaces

The command prompt is displayed.

(gcap-cli)
  1. To display the information on the capture interfaces:

    1. Enter the command

      show interfaces
      
    2. Validate
      The system displays the available capture interfaces

      image0

      The information displayed is:

      • `Label`: the label name of the interface

      • `Name`: the system name of the interface

      • `Role`: the role assigned to the interface

      • `Capture capability`: if the interface can capture traffic

      • `MTU`: the MTU of the interface

      • `Physical Address`: the MAC address of the interface

      • `Speed`: the interface speed

      • `Type`: the type of cable/sfp connected to the physical port

      • `Vendor ID`: the Vendor ID of the network card

      • `Device ID`: the ID of the network card

      • `PCI bus`: PCI bus number used by the network card

      • In our example, `mon0`, `mon1` et `mon2` are enabled ( field: role, value : capture).

  2. To activate an interface (here enp27s0 for example):

    1. Enter the command

      set interfaces assign-role enp27s0 capture
      
    2. Validate

    3. then to check the new configuration

      show interfaces
      
    4. Validate
      The system displays the available capture interfaces

      image2

  3. To deactivate an interface (here `mon0` for example):

    1. Enter the command

      set interfaces assign-role enp27s0 inactive
      
    2. Validate

  4. To change the interface startup delay by five seconds for example

    1. Enter the command

      set interfaces delay 5
      
    2. Validate