Configuring the appliance

By default, IBM® QRadar® Network Packet Capture uses the IP address of 192.168.100.100. You can use either DHCP or you can manually configure the network settings.

Before you begin

If your QRadar Network Packet Capture appliance is a member of a group, do not change the network configuration settings. In this case, unregister from the group, change the network configuration, and reregister with the group. Use a full DHCP infrastructure, which assigns QRadar Network Packet Capture devices an IP address and hostname from DHCP.

About this task

New This process applies to the following versions of QRadar Network Packet Capture:
  • QRadar Network Packet Capture 7.4.3 (Build 1301).
  • QRadar Network Packet Capture 7.4.2 Fix Pack 1 (Build 1203).
  • QRadar Network Packet Capture 7.3.3 Fix Pack 6 (Build 16)

Before you can set the IP address of the server, you must use the Network Manager Text User Interface (nmtui) tool to authenticate. Unlike older versions of QRadar Network Packet Capture, you cannot configure the appliance until you authenticate.

If you are using older versions of QRadar Network Packet Capture and you want to configure the appliance without authenticating, see Configuring older versions of QRadar Network Packet Capture.

Procedure

  1. Log in to the PCAP server as the root user.
    The default password is napatech10.
  2. On the command line, run the Network Manager Text User Interface Tool by typing nmtui.
  3. Select Edit a connection.
  4. Select the management interface connection for your PCAP server, and click Edit.
  5. In the IPv4 Configuration field, select Manual.
  6. Edit the configuration settings.

    You must use CIDR notation to specify the IP address.

    You can leave the DNS field blank. A DNS infrastructure is not required for QRadar Network Packet Capture.

    Tip: Use the following keystrokes to navigate the fields:
    • To move forward, use the arrow keys or press the Tab key.
    • To move backwards, press Shift-Tab.
    • To select an option, press Enter.
    • To toggle the status of a checkbox, press the space bar.
  7. When you finish editing the configuration, select OK, and press Enter.
  8. On the Ethernet screen, select Back, and press Enter.
  9. On the NetworkManager TUI screen, select OK to save the configuration changes.
  10. To apply the changes, you must deactivate and then reactivate the management interface.
    1. On the NetworkManager TUI screen, select Activate a connection.
    2. Select the interface that you updated the IP address, and select Deactivate.
    3. Select the interface again, and select Activate.
  11. If the USB Ethernet interface is active, select the interface and press Enter to deactivate it.
    An active interface is indicated by a * next to the interface name.
  12. Select Back and then select Quit to exit.

What to do next

To improve the security of the QRadar Network Packet Capture server, consider changing the root password. You can also set the terms and conditions for using the software.

Configuring older versions of QRadar Network Packet Capture

You can configure your IBM QRadar Network Packet Capture appliance by making changes directly on the appliance or you can use the web interface.

About this task

This procedure is applicable to older versions of QRadar Network Packet Capture. Newer versions of QRadar Network Packet Capture require authentication before you can configure the appliance.
If you are using the following versions of QRadar Network Packet Capture, you must use the nmtui tool to authenticate before you can configure the appliance.
  • QRadar Network Packet Capture 7.4.3 (Build 1301).
  • QRadar Network Packet Capture 7.4.2 Fix Pack 1 (Build 1203).
  • QRadar Network Packet Capture 7.3.3 Fix Pack 6 (Build 16)

For more information about using the nmtui tool, see Configuring the appliance.

Procedure

  1. To make the changes directly on the appliance, follow these steps:
    1. Click Configure network and press Enter.
    2. At the QRadar Network Packet Capture IP Settings prompt, configure the network settings, and then press Enter to apply the settings.
    3. If you are using DHCP, press the Tab key until Use DHCP is highlighted, then press Enter.
  2. To make the changes by using the web UI, follow these steps:
    1. On the Admin tab, go to the Configure network section.
    2. Configure your IP address or DHCP options.
    3. Select Apply to save your changes.