Extreme Extremeware 6.X; Configure Extremeware To Generate The Required Data - Cisco CS-MARS-20-K9 - Security MARS 20 User Manual

Chapter 3 Configuring Router and Switch Devices
Result: MARS monitors the module for anomalous consumption of resources, such as memory and CPU.
If anomalies are detected, MARS generates an incident. Resource utilization statistics are also used to
generate reports. For more information, see
(Optional) If you defined an access IP and selected and configured an access type, click Discover to
Step 9
determine the module settings.
Result: If the username and password are correct and the MARS Appliance is configured as an
administrative host for the module, the "Discovery is done." dialog box appears when the discovery
operation completes. Otherwise, an error message appears. After the initial pull, the MARS Appliance
pulls based on the schedule that you define. For more information, see
page
To add this module to the device in the MARS database, click Submit.
Step 10
Result: The submit operation records the changes in the database tables. However, it does not load the
changes into working memory of the MARS Appliance. The activate operation loads submitted changes
into working memory.

Extreme ExtremeWare 6.x

MARS can use Extreme ExtremeWare switches to enforce L2 mitigation. To configure MARS to
communicate with an ExtremeWare switch, you must configure the switch to publish SNMP
notifications to the MARS Appliance. In addition, you must add and configure the switch in the web
interface.
This section contains the following topics:
•
•

Configure ExtremeWare to Generate the Required Data

To bootstrap an ExtremeWare switch, you must configure two features. First, you must configure the
switch to send syslog messages to the MARS Appliance. Next, you must configure the SNMP RO
community for MARS to access available L2 information.
To prepare the ExtremeWare device to generate the data required by MARS, follow these steps:
For syslog configuration, add this command:
Step 1
For SNMP configuration add these commands:
Step 2
78-17020-01
2-39.
Configure ExtremeWare to Generate the Required Data, page 3-17
Add and Configure an ExtremeWare Switch in MARS, page 3-18
configure syslog add <MARS's IP address> local7 debug
enable syslog
enable snmp dot1dTpFdbTable
configure snmp delete community readonly all
configure snmp delete community readwrite all
configure snmp add community readonly encrypted <encrypted community string>
configure snmp add community readwrite encrypted <encrypted community string>
Configuring Resource Usage Data, page
User Guide for Cisco Security MARS Local Controller
Extreme ExtremeWare 6.x
2-41.
Scheduling Topology Updates,
3-17