I have been working with VSS packet brokers and feel there is not enough documentation available online so, thought creating a blog to help readers to understand the technology and details this device offer.
1. Basic information on packet brokers and how they are different with normal TAP devices can be read through below link.
http://www.brookcourtsolutions.com/documents/2014/06/vss-network-packet-brokers-for-dummies.pdf
2. Like any TAP device it can SPAN traffic to remote port for passive analysis to IDS or active analysis of the traffic using IPS.
3. We worked primarily using 2 main devices - VSS 420 and VSS 120. Below are the hardware specifications.
4. TAP is a very simple device and have 1x1 port mapping using below policy.
5. Complexity happen if there is port aggregation.
6. To solve above problem at 5, VSS PB offer two solutions :
1. Using Vlan tags
In this solution PB add a VLAN tag which help them to trace packets transferred and received over a single port.
2. AIA ( Aggregation to Inline Applications)
In this solution PB try to remember the traffic send and received by learning MAC address. With AIA it also offer 2 other options - use a Common VLAN ID and Network Trailer.
Details of the same I will cover in my upcoming blog.
1. Basic information on packet brokers and how they are different with normal TAP devices can be read through below link.
http://www.brookcourtsolutions.com/documents/2014/06/vss-network-packet-brokers-for-dummies.pdf
2. Like any TAP device it can SPAN traffic to remote port for passive analysis to IDS or active analysis of the traffic using IPS.
3. We worked primarily using 2 main devices - VSS 420 and VSS 120. Below are the hardware specifications.
4. TAP is a very simple device and have 1x1 port mapping using below policy.
5. Complexity happen if there is port aggregation.
6. To solve above problem at 5, VSS PB offer two solutions :
1. Using Vlan tags
In this solution PB add a VLAN tag which help them to trace packets transferred and received over a single port.
2. AIA ( Aggregation to Inline Applications)
In this solution PB try to remember the traffic send and received by learning MAC address. With AIA it also offer 2 other options - use a Common VLAN ID and Network Trailer.
Details of the same I will cover in my upcoming blog.
