Quick and dirty copy/paste of the different steps used for this installation on the VSM card.
First, it's important to remind that the system does not operate in stand-alone mode, you need to pair it with a Peakflow SP (the netflow collector + attack detector + controller of the entire solution) and you need to use the proper licenses.
Before you install TMS-VSM software on the VSM blade, do the following:
0. Configure "allow TFTP" in the CoPP:
control-plane
management-plane
inband
interface all
allow TFTP
1. Insert the VSM blade in the ASR 9000 router backplane
2. Connect a serial console or laptop to the ASR 9000 router
3. Use telnet or ssh to log on to the CLI of the ASR 9000 router that has the VSM blade
4. Use the ASR 9000 CLI to perform the following tasks:
virtual-service enable
commit
- Verify that virtual services are initialized with:
show virtual-service list
- Enter the following commands to uninstall any existing services on the VSM blade:
config
no virtual-service tmsX
commit
exit
virtual-service uninstall name tmsX
To install the TMS-VSM software on the VSM blade:
1. Log on to the CLI of the ASR 9000 router that has the VSM blade.
2. To copy the .ova file to the router:
copy tftp:/Peakflow-TMS-7.0-EKU0.ova disk0:
Use the correct path/filename for your build.
- At the prompt Address or name of remote host[]?, type the IP address for the remote host (for example, 10.8.22.116)
- At the prompt Destination filename, press enter.
3. To verify that the .ova file was copied:
dir disk0:
The file should appear at the end of the directory file list.
4. To find the node name for your VSM blade:
show inventory all | include "Virtualized Services Module"
The node name will be of the form 0/slot/CPU0.
Note: To verify the node name:
show virtual-service list
5. To install the virtual service:
virtual-service install name tms3 package /disk0:/Peakflow-TMS-7.0-EKU0.ova node 0/n/CPU0
where:
n = the slot number for the VSM blade.
Allow approximately 10 to 12 minutes for installation to complete.
6. To verify that the virtual service is installed:
show virtual-service list
Note: If the installation is initializing, this show command does not show any data. If installation is in process, this command shows the message Installing. When installation is complete, you can rerun this show command to verify that the virtual service is listed as installed.
To map VNIC interfaces on the router to TMS interfaces on the VSM blade:
1. To map the interfaces, enter the following commands, replacing n with the slot number for the VSM blade:
virtual-service enable
virtual-service tmsn
vnic interface TenGigE0/n/1/0
vnic interface TenGigE0/n/1/1
vnic interface TenGigE0/n/1/2
vnic interface TenGigE0/n/1/3
vnic interface TenGigE0/n/1/4
vnic interface TenGigE0/n/1/5
vnic interface TenGigE0/n/1/6
vnic interface TenGigE0/n/1/7
vnic interface TenGigE0/n/1/8
vnic interface TenGigE0/n/1/9
vnic interface TenGigE0/n/1/10
vnic interface TenGigE0/n/1/11
commit
activate
commit
To verify that all interfaces are activated:
show virtual-service list
2. Create the interface bundle for mitigation interfaces tmsx0-3 and tmsx7-10 and to bundle the subinterfaces
3. Set up the management interfaces, tmsx5-6
4. Set up the unused interfaces, tmsx4 and tmsx11
Configuration will finally look like this:
vrf onRamp
address-family ipv4 unicast
!
address-family ipv6 unicast
!
!
vrf offRamp
address-family ipv4 unicast
!
address-family ipv6 unicast
!
!
snmp-server host 25.2.1.10 traps arbor
snmp-server community arbor
virtual-service enable
virtual-service TMS1
vnic interface TenGigE0/1/1/0
vnic interface TenGigE0/1/1/1
vnic interface TenGigE0/1/1/2
vnic interface TenGigE0/1/1/3
vnic interface TenGigE0/1/1/4
vnic interface TenGigE0/1/1/5
vnic interface TenGigE0/1/1/6
vnic interface TenGigE0/1/1/7
vnic interface TenGigE0/1/1/8
vnic interface TenGigE0/1/1/9
vnic interface TenGigE0/1/1/10
vnic interface TenGigE0/1/1/11
activate
!
control-plane
management-plane
inband
interface TenGigE0/2/0/6
allow TFTP
allow SNMP
allow SNMP peer
address ipv4 25.2.1.10
!
!
interface Bundle-Ether2
description bundle to-from vsm1
load-interval 30
!
interface Bundle-Ether2.100
description offramp subinterface
ipv4 address 13.37.13.37 255.255.255.252
bundle load-balancing hash src-ip
load-interval 30
encapsulation dot1q 100
!
interface Bundle-Ether2.101
description onramp subinterface
vrf onramp
ipv4 address 13.37.13.41 255.255.255.252
load-interval 30
encapsulation dot1q 101
!
interface Loopback0
ipv4 address 4.4.4.4 255.255.255.255
!
interface MgmtEth0/RSP0/CPU0/0
ipv4 address 1.2.3.4 255.255.255.0
!
interface TenGigE0/1/1/0
bundle id 2 mode on
load-interval 30
!
interface TenGigE0/1/1/1
bundle id 2 mode on
load-interval 30
!
interface TenGigE0/1/1/2
bundle id 2 mode on
load-interval 30
!
interface TenGigE0/1/1/3
bundle id 2 mode on
load-interval 30
!
interface TenGigE0/1/1/4
load-interval 30
!
interface TenGigE0/1/1/5
description mgt0 on TMS1
ipv4 address 25.3.1.1 255.255.255.0
load-interval 30
!
interface TenGigE0/1/1/6
description mgt1 on TMS1
load-interval 30
!
interface TenGigE0/1/1/7
bundle id 2 mode on
load-interval 30
!
interface TenGigE0/1/1/8
bundle id 2 mode on
load-interval 30
!
interface TenGigE0/1/1/9
bundle id 2 mode on
load-interval 30
!
interface TenGigE0/1/1/10
bundle id 2 mode on
load-interval 30
!
interface TenGigE0/1/1/11
shutdown
!
Last step will consist in configuring the BGP peers and BGP flowspec peers according to the divertion (offRamp/onRamp) strategy.
—————
Sun Dec 7 17:31:13.867 UTC
Trying 192.0.131.3...
Connected to 192.0.131.3.
Escape sequence is '^^e'.
010: Using CD-ROM
018: No system configuration found
020: Configuring CD-ROM
Do you want to begin the install process?
This will remove all current data and configuration [n/y] y
Initializing filesystem "boot"..........................done.
Writing boot blocks....done.
Initializing filesystem "system"..........................done.
Initializing filesystem "data"..........................done.
Initializing swap partition......done.
system: clean, 11/512064 files, 53444/2048000 blocks
data: clean, 11/407360 files, 53327/3107840 blocks
boot: clean, 28/128016 files, 26963/510976 blocks
Installing software package "cdrom:arbos-6.1-ELDN-x86_64"
Extracting package...done.
Changes to ArbOS will take effect after the next reload.
Installing software package "cdrom:Peakflow-TMS-7.0-ELDN-vm"
Extracting package...done.
Collecting inventory information..done
Building databases.......................................................................done.
virtual-service connect name TMS1 console node 0/1/CPU0
Sun Dec 7 17:31:13.867 UTC
Trying 192.0.131.3...
Connected to 192.0.131.3.
Escape sequence is '^^e'.
010: Using CD-ROM
018: No system configuration found
020: Configuring CD-ROM
Do you want to begin the install process?
This will remove all current data and configuration [n/y] y
Initializing filesystem "boot"..........................done.
Writing boot blocks....done.
Initializing filesystem "system"..........................done.
Initializing filesystem "data"..........................done.
Initializing swap partition......done.
system: clean, 11/512064 files, 53444/2048000 blocks
data: clean, 11/407360 files, 53327/3107840 blocks
boot: clean, 28/128016 files, 26963/510976 blocks
Installing software package "cdrom:arbos-6.1-ELDN-x86_64"
Extracting package...done.
Changes to ArbOS will take effect after the next reload.
Installing software package "cdrom:Peakflow-TMS-7.0-ELDN-vm"
Extracting package...done.
Collecting inventory information..done
Building databases.......................................................................done.
Do you want to begin the install process?
This will remove all current data and configuration [n/y] y
Initializing filesystem "boot"..........................done.
Writing boot blocks....done.
Initializing filesystem "system"..........................done.
Initializing filesystem "data"..........................done.
Initializing swap partition......done.
.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................*****..*************boot: …
system: clean, 24175/512064 files, 171499/2048000 blocks
data: clean, 419/407360 files, 61114/3107840 blocks
boot: clean, 64/128016 files, 129079/510976 blocks
005: Configuring swap devices
006: Configuring software packages
Collecting inventory information..done
007: Restoring system configuration
020: Configuring CD-ROM
021: Done rc.sysinit
ArbOS/6.1 (arbos)
arbos login: admin
Password:
Peakflow TMS v7.0
Copyright (c) 2000-2014 Arbor Networks, Inc. All Rights Reserved.
Welcome to ArbOS
———————————————————————————————————
