{"id":1819,"date":"2023-01-14T20:22:09","date_gmt":"2023-01-14T20:22:09","guid":{"rendered":"https:\/\/www.balajibandi.com\/?p=1819"},"modified":"2023-01-14T20:38:09","modified_gmt":"2023-01-14T20:38:09","slug":"installing-and-configuration-of-stealthwatch-7-1-1-smc-and-flow-collector","status":"publish","type":"post","link":"https:\/\/www.balajibandi.com\/?p=1819","title":{"rendered":"Installing and configuration of Stealthwatch 7.1.1 – SMC and Flow Collector."},"content":{"rendered":"\n

The basic concept of how Stealthwatch<\/strong> works and their roles – This BLOG<\/a> going to explain.<\/p>\n\n\n\n

high-level architecture :<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Management Console (SMC) – installation.<\/p>\n\n\n\n

I am installing OVA on ESXi – Refer requirements of Compute on the cisco website.<\/p>\n\n\n\n

I use 16GB ram \/ 2CPU \/ 50GB SSD to testing Lab environment and using VE edition to install.<\/p>\n\n\n\n

Import OVA template using Esxi management console. – just boot it – after 30min or so you will see Login prompt on the ESXi console as below :<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Login using the default username and password (sysadmin\/lan1cope<\/strong>)<\/p>\n\n\n\n

you will see the below menu to setup management IP<\/p>\n\n\n\n

\"\"
Make sure you have the IP Plan ready before installation. Once you set up the IP, it will regenerate the certificate and it will reboot to take effect.<\/figcaption><\/figure>\n\n\n\n

Once it reboots the GUI is ready to configure the initial setup. (admin\/lan1cope)<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

you will get step by step menu to configure (like changing the password).<\/p>\n\n\n\n

Once that is completed you will get dashboard like below :<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Since I do not have FC now, we will not see any data here.<\/p>\n\n\n\n

Now we move to Install FLowCollector 7.1.1 and connect to Management Console<\/p>\n\n\n\n

Installing FC 7.1.1 on Esxis – the Compute requirement refer to Cisco documentation<\/p>\n\n\n\n

I am using 2 vCPU \/ 16GB \/ 150GB SSD for Lab testing.<\/p>\n\n\n\n

Note – Some reason OVA having an issue (may be me, not seen any one reported this issue, it got stuck showing GRUB and not going further)<\/p>\n\n\n\n

So I Moved to install using ISO image, which works as expected (make sure you use Ubunutu 64 bit as OS)<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

we do basic config like SMC we did before using console – setup Management IPso we can access GUI.<\/p>\n\n\n\n

username\/password (sysadmin\/lan1cope)<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Once it reboots the GUI is ready to configure the initial setup. (admin\/lan411cope<\/strong>)<\/p>\n\n\n\n

Once GUI Login success :<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

Before going further make sure you do not log on console -(if you logged in exit to go further step)<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

You need to change 3 passwords ( admin – root – sysadmin) default password for admin – is lan411cope<\/p>\n\n\n\n

root and sysadmin lan1cope<\/p>\n\n\n\n

it will take you to the IP address menu since we have already done this setup using the console – I do not need to change it again, if you intend to change it now to a different one you need to reload to take effect.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"
DNS config<\/figcaption><\/figure>\n\n\n\n
\"\"
NTP config<\/figcaption><\/figure>\n\n\n\n
\"\"
Final confirmation for the changes to take effect.<\/figcaption><\/figure>\n\n\n\n
\"\"
FC will reboot now for the changes to be effective. (it will take 10-15in to get GUI back- be patient)<\/figcaption><\/figure>\n\n\n\n

Once reboot and come back – Once logged in to GUI with new password – the setup menu continue to progress to enter SMC IP address<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

trust the certificate <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

now you need to provide MC admin\/password to join to MC<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

if that success you get the below screen for the domain and port for Netflow :<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

if all is good you have a success message and go to MC<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Since it says License pending :<\/p>\n\n\n\n

get a 90day trial from the cisco site :<\/p>\n\n\n\n

\"\"
You will get the below page (if you have an internet-connected this VM – just click activate trail License)<\/figcaption><\/figure>\n\n\n\n

it processes automatically (by showing processing) – then you can observe 90 days License on MC.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

This show is all good for now :<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Configuring FC basic config – using SMC:<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

adding my Local Lab network and SSH enable :<\/p>\n\n\n\n

\"\"
apply changes to effect ( and FC reboot) – when it reboots you see the message Channel Down (don’t worry – be patient)<\/figcaption><\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

I will come with some basic config and hosts adding my LAN and Netflow config to the device.<\/p>\n\n\n\n

Happy Labbbingggggggggggggggggggggggggggg<\/p>\n","protected":false},"excerpt":{"rendered":"

The basic concept of how Stealthwatch works and their roles – This BLOG going to explain. high-level architecture : Management Console (SMC) – installation. I am installing OVA on ESXi – Refer requirements of Compute on the cisco website. I use 16GB ram \/ 2CPU \/ 50GB SSD to testing Lab environment and using VE […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,2,6],"tags":[],"class_list":["post-1819","post","type-post","status-publish","format-standard","hentry","category-ccie-sec","category-cisco","category-security"],"_links":{"self":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/1819","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1819"}],"version-history":[{"count":5,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/1819\/revisions"}],"predecessor-version":[{"id":1853,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/1819\/revisions\/1853"}],"wp:attachment":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1819"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1819"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1819"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}