ERSPAN Session Negotiation via Automated Capability Discovery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
ERSPAN remote traffic monitoring sessions require manual configuration, which can be cumbersome due to differences in hardware and software platforms, and determining optimal configurations and connectivity issues is complex, potentially leading to misconfigurations and security risks like Denial of Service attacks.
Innovation Solution
An automated method using the EDySN protocol to discover and configure L3 source and destination devices, verify connectivity, and negotiate relevant parameters for establishing and maintaining ERSPAN sessions, ensuring compatibility and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If manual configuration is used for ERSPAN sessions, then flexibility in configuration is maintained, but user burden and complexity increase significantly
Solution Approach 1:
The system performs self-configuration by automatically discovering ERSPAN capabilities on source and destination devices, negotiating parameters, and establishing sessions without manual user input. The automated ERSPAN session manager discovers devices, determines capabilities, negotiates parameters, and configures sessions autonomously, eliminating the burden of manual configuration while managing complexity internally.
Solution Approach 2:
The system performs preliminary discovery and capability assessment before actual ERSPAN session establishment. The automated manager discovers source and destination devices, determines their ERSPAN capabilities in advance, and pre-negotiates parameters before traffic monitoring begins, simplifying the user experience by handling complex setup procedures beforehand.
2Productivity
If manual configuration is used for ERSPAN sessions, then configuration control is maintained, but determination of optimal configurations becomes complex
Solution Approach 1:
The automated ERSPAN session manager independently determines optimal configurations by discovering device capabilities, assessing network conditions, and negotiating parameters without user intervention. The system self-evaluates source and destination device capabilities, selects appropriate ERSPAN types, and optimizes session parameters automatically, improving establishment efficiency while managing complexity internally.
Solution Approach 2:
The system uses feedback from capability discovery and connectivity verification to dynamically adjust configuration decisions. The automated manager receives feedback about device ERSPAN support, network connectivity status, and capability mismatches, using this information to determine optimal configurations and negotiate compatible parameters between source and destination devices.
3Reliability
If manual configuration is used for ERSPAN sessions, then configuration flexibility is maintained, but connectivity issues and misconfigurations increase
Solution Approach 1:
The automated ERSPAN session manager performs self-verification of configurations by checking connectivity between source and destination devices, validating capability compatibility, and confirming session parameters. The system automatically detects and corrects configuration errors, ensuring accurate session establishment without relying on user expertise, thereby improving reliability while managing complexity internally.
Solution Approach 2:
The system performs preliminary connectivity verification and capability validation before finalizing ERSPAN session configuration. The automated manager checks network connectivity, verifies ERSPAN capability compatibility, and validates parameter negotiations in advance, preventing misconfigurations and ensuring reliable session establishment before traffic monitoring begins.
4Object-affected harmful factors
If manual configuration is used for ERSPAN sessions, then security control is maintained, but security risks from misconfiguration increase
Solution Approach 1:
The automated ERSPAN session manager performs self-security verification by checking that ERSPAN traffic replication is not directed to attacked IP addresses and validating that session configurations do not create security vulnerabilities. The system automatically assesses security risks and prevents harmful configurations without requiring manual security audits, reducing security risks while maintaining ease of operation.
Solution Approach 2:
The system uses feedback from capability discovery and configuration validation to prevent security risks. The automated manager receives feedback about network conditions and device capabilities, using this information to make secure configuration decisions and avoid directing ERSPAN traffic to potentially compromised destinations, thereby reducing security risks automatically.
Data Source
AI summary
A method and network device to generate a remote traffic monitoring session using an automated technique to configure the source and destination devices of the monitoring system is disclosed. The method includes discovering a Layer 3 (L3) source device and an L3 destination device and automatically configuring the devices. The L3 source device passes target traffic that will be monitored via the L3 destination device in a remote traffic monitoring session. The method verifies configurations of the L3 source device and the L3 destination device, and determines remote monitoring capabilities common to the L3 source device and the L3 destination device. The method negotiates relevant parameters for the remote traffic monitoring session and establishes the remote traffic monitoring session between the L3 source device and the L3 destination device.