H3C Technologies H3C Intelligent Management Center - Manual (Page 77)

68
11.UBA configuration example
The following information provides an example for using IMC UBA and H3C NetStream to monitor and
audit private network user behaviors in accessing a public network.
Network requirements
As shown in Figure 9 :
• Users on segments 192.168.10.255, 192.168.20.255, and 192.168.30.255 access the Internet
through two S7503E core switches. This example uses the active core switch.
• A NetStream card is installed in the active core switch. Ten-GigabitEthernet 0/1 on the NetStream
card is connected to Ten-GigabitEthernet 2/0/1 on the switch.
To audit user behaviors in UBA, perform the following tasks:
• Configure port mirroring on GigabitEthernet 2/0/2 on the switch.
Port mirroring copies the traffic to the NetStream card.
• Enable NetStream on the NetStream card, and make sure the NetStream card and the UBA server
can reach each other.
• Configure the NetStream card to send NetStream logs to the UBA server for user behavior audit.
Figure 9 Network diagram