1. Introduction, Setting

1-33

[Koban Sensor] We are operating multiple IP networks on a single Ethernet segment. In such an environment, is it possible to monitor each IP network independently?

Monitoring becomes possible by using the "Packet Filter" function of the Koban Sensor.

Prepare the same number of Koban sensors as the number of IP networks, and register the IP subnet information to be monitored by each sensor in its "Packet Filter" settings.

For more information on this topic, please also refer to the following Q&A.

"1-35. [Koban Sensor] We are operating multiple IP networks on a single Ethernet segment. After connecting a single 1‑I/F sensor to this network, it was able to detect devices from all IP subnets. Are there any operational issues with this setup?"

Example: When the following three IP networks exist on a single segment.

    IP-1: 172.16.0.0/255.255.0.0
    IP-2: 192.168.100.0/255.255.255.0
    IP-3: 192.168.200.0/255.255.255.0

  Prepare three sensors (Sensor1–3), and in each sensor's "Packet Filter" settings screen, register information as shown below.

   o "Filter (Detection)" field of Sensor1

      172.16.0.0/255.255.0.0

   o "Filter (Detection)" field of Sensor2

      192.168.100.0/255.255.255.0

   o "Filter (Ignore)" field of Sensor3

      172.16.0.0/255.255.0.0
      192.168.100.0/255.255.255.0

  With this configuration, Sensor1 will monitor devices using IP‑1, Sensor2 will monitor devices using IP‑2, and Sensor3 will monitor devices that use IP addresses other than IP‑1 and IP‑2.

  If Sensor1 and Sensor3 are Multi-VLAN Sensors, and the VLAN ID of this Ethernet segment is 410, then register the following information as the "Packet Filter" settings.

   o "Filter (Detection)" field of Sensor1(MVLAN)

      172.16.0.0/255.255.0.0,410

   o "Filter (Detection)" field of Sensor2

      192.168.100.0/255.255.255.0

   o "Filter (Ignore)" field of Sensor3(MVLAN)

      172.16.0.0/255.255.0.0,410
      192.168.100.0/255.255.255.0,410