Adding and connecting the Sensor component automatically over the network

To connect the Sensor component automatically over the network:

1. Select the Sensor servers section in the window of the application web interface.
2. Click Add sensor.

   This opens the Adding a new sensor window.

3. Go to the Automatically over the network tab.
4. In the Sensor name field, enter a name for the Sensor component that you want to connect.

   After the connection to the Central Node is established, the title of the browser tab with the web interface page of the component displays the name that you configure at this step.

5. In the Server address field, enter the IP address of the Central Node server to which you want to connect the Sensor component.

   If the Central Node is deployed as a cluster, you need to enter the IP address of the processing server in the cluster that is configured to receive mirrored traffic from SPAN ports.

   You can enable the receipt of mirrored traffic when installing the component. If you disabled the receipt of traffic at the installation stage:

   1. Enter the management console of any processing server of the server over SSH or using a terminal.
   2. Run the following command:

      kata-enable-span

   The receipt of mirrored traffic from SPAN ports is enabled.

6. In the Sensor IP address field, enter the IP address of the server with the Sensor component that you want to connect to the Central Node component.

   The application establishes a connection with the server on which the Sensor component is installed, and a prompt is displayed in the web interface of the application asking you to confirm the fingerprint of the received certificate signing request.

7. On any computer on which access to the Sensor server is allowed, start the command line interpreter.
8. Run the following command:

   ssh -4 -L 9444:localhost:9444 admin@<IP address of the server with the Sensor component>

   If after running the command, you get the Corrupted MAC on input. ssh_dispatch_run_fatal: Connection to <IP address of the Sensor server> port 22: message authentication code incorrect error, run the following command:

   ssh -4 -L 9444:localhost:9444 admin@<IP address of the server with the Sensor component> -o "MACs hmac-sha2-256"

9. In the address bar of the browser, enter: https://localhost:9444.

   The web interface of the Sensor component is displayed in the browser. The web interface displays a message with information about the fingerprint of the certificate signing request that was sent to the Central Node component.

10. Make sure that the character sequences representing the fingerprint of the certificate request are identical in the web interfaces of the Sensor and Central Node components.
11. In the application web interface, click the button to confirm the received fingerprint of the certificate signing request.

The Sensor component is connected to the Central Node component, after which the connection information in the web interfaces of the Sensor and Central Node components.

Page top