8.3.1. Pairing a GCap with the GCenter

8.3.1.1. Introduction

The GCap probe must be associated to the GCenter in order to receive the network flow.
This procedure complements the procedure "Pairing a GCap with a GCenter" found in the GCap documentation.
This procedure describes the pairing between a GCap and a GCenter.
Pairing enables configuring the IPSec tunnel between the GCap and the GCenter.
The following operations must be performed:

8.3.1.2. Prerequisites

  • User : member of Administrator group


8.3.1.3. Preliminary operations

  • Know the Fully Qualified Domain Name FQDN (FQDN).
    For example: 'nomdugcap.domaine.com' of the GCap and its IP address.
  • Know the FQDN of the GCenter and its IP address.

  • Check whether the date and time of the GCenter and the GCap match.


8.3.1.4. Procedure to display the IP address of the GCenter

  • Connect to the GCap (see Procedure for connecting to the GCap via SSH).

  • Connect to the GCenter and view the GCenter's network settings (see using the `Network` command).

  • Obtain the IP address of the GCenter.


8.3.1.5. Procedure to set the GCenter IP on the GCap

  • Apply the "Procedure for setting up the GCenter IP on the GCap" in the "Pairing a GCap with a GCenter" section of the GCAP documentation.


8.3.1.6. Procedure to access the `GCaps pairing and status` window for an administrator account

  • The `Admin` button

  • The `GCaps pairing and status` command
    The `GCaps pairing and status` window is displayed.
    ../../_images/GCAPS_PAIRING-03.PNG

8.3.1.7. Procedure to set the compatibility mode on the GCap

  • To view the software version of the GCenter:

  • Log into the GCenter and view the GCenter version number.

  • View the GCenter version in the traditional UI web interface (see Overview of the traditional WEB UI (legacy WEB UI)).
    The information is located at the bottom left of the GCenter page (Example: GCenter v2.5.3.102-8370).
  • To view the current compatibility mode between the GCap and the GCenter, log on to the GCap (see the procedure "Pairing between a GCap and a GCenter" in the GCAP documentation).


8.3.1.8. Procedure to declare the GCap in the GCenter

The `GCaps pairing and status` window is displayed.

../../_images/GCAPS_PAIRING-03.PNG
  • On the GCap:

  • Obtain the FQDN (hostname.domain) of the GCap via the `show status` command.

  • On the GCenter:

  • Connect to the GCenter via a web browser in the `GCaps pairing and status` window.

  • Enter the FQDN in the field (3).

  • Select the profile to be applied to the GCap

Note

It is possible to apply a predefined profile in advance (see the presentation of the `Admin-GCaps pairing and status` screen of the legacy Web UI) as well as changing it afterwards or modifying this profile to customise it (see the procedure Change the default profile or customise the existing profile).

  • Press the `Start Pairing` button (4).
    The `SUCCESS` window is displayed showing the OTP (One Time Password).
    For example: pcmqsnf7iyo34ianzzi7gbgrr
  • Copy the OTP.

  • Click on the button `OK`.
    The GCap is now displayed in the GCap list (13).

8.3.1.9. Procedure to pair the GCap and the GCenter

  • On the GCap: perform the operations defined in the "Procedure for Pairing the GCap and GCenter" found in the GCAP documentation.
    After the message is displayed:
    Resetting any previous GCenter pairing...
    Generating IPSec certificates for the GCenter pairing...
    Probing for GCenter SSH fingerprint...
    
    Fingerprint for GCenter x is
    e655bc02553e2291a486a32bdce3943a315f830de70b2c627c39884e80
    1f08b2. Is it correct? (Y/N)
    
  • On the GCenter, compare the GCenter fingerprint retrieved by the GCap in the CLI with the one present in the section `GCaps pairing..` under the text `GcenterSSH fingerprint` in the GCenter web interface on the web browser.

  • If the fingerprints are not identical:

  • Check the GCenter IP address and the value entered in the GCap

  • Check the GCap FQDN and the name entered in the GCenter

  • If they are identical, answer Y on the GCap and validate.
    After the message is displayed:
    Pairing successful
    
  • On the GCenter Web UI, check that the GCap is now `Online (10) in the `GCaps pairing and status` menu page.

  • On the GCap, this information is visible using the `show status command (see the "Procedure for Pairing the GCap and GCenter" in the GCAP documentation.

Astuce

The field `Paired on GCenter` takes:

  • The value `Not paired` when the GCap is not paired with the GCenter

  • The IP value of the GCenter when the GCap is paired with the GCenter