populatedlinuxcp

CiscoSystems,Inc.
www.
cisco.
comCiscohasmorethan200officesworldwide.
Addresses,phonenumbers,andfaxnumbersarelistedontheCiscowebsiteatwww.
cisco.
com/go/offices.
CiscoWAE6.
3PlatformConfigurationGuideFirstPublished:2015-12-10THESPECIFICATIONSANDINFORMATIONREGARDINGTHEPRODUCTSINTHISMANUALARESUBJECTTOCHANGEWITHOUTNOTICE.
ALLSTATEMENTS,INFORMATION,ANDRECOMMENDATIONSINTHISMANUALAREBELIEVEDTOBEACCURATEBUTAREPRESENTEDWITHOUTWARRANTYOFANYKIND,EXPRESSORIMPLIED.
USERSMUSTTAKEFULLRESPONSIBILITYFORTHEIRAPPLICATIONOFANYPRODUCTS.
THESOFTWARELICENSEANDLIMITEDWARRANTYFORTHEACCOMPANYINGPRODUCTARESETFORTHINTHEINFORMATIONPACKETTHATSHIPPEDWITHTHEPRODUCTANDAREINCORPORATEDHEREINBYTHISREFERENCE.
IFYOUAREUNABLETOLOCATETHESOFTWARELICENSEORLIMITEDWARRANTY,CONTACTYOURCISCOREPRESENTATIVEFORACOPY.
TheCiscoimplementationofTCPheadercompressionisanadaptationofaprogramdevelopedbytheUniversityofCalifornia,Berkeley(UCB)aspartofUCB'spublicdomainversionoftheUNIXoperatingsystem.
Allrightsreserved.
Copyright1981,RegentsoftheUniversityofCalifornia.
NOTWITHSTANDINGANYOTHERWARRANTYHEREIN,ALLDOCUMENTFILESANDSOFTWAREOFTHESESUPPLIERSAREPROVIDED"ASIS"WITHALLFAULTS.
CISCOANDTHEABOVE-NAMEDSUPPLIERSDISCLAIMALLWARRANTIES,EXPRESSEDORIMPLIED,INCLUDING,WITHOUTLIMITATION,THOSEOFMERCHANTABILITY,FITNESSFORAPARTICULARPURPOSEANDNONINFRINGEMENTORARISINGFROMACOURSEOFDEALING,USAGE,ORTRADEPRACTICE.
INNOEVENTSHALLCISCOORITSSUPPLIERSBELIABLEFORANYINDIRECT,SPECIAL,CONSEQUENTIAL,ORINCIDENTALDAMAGES,INCLUDING,WITHOUTLIMITATION,LOSTPROFITSORLOSSORDAMAGETODATAARISINGOUTOFTHEUSEORINABILITYTOUSETHISMANUAL,EVENIFCISCOORITSSUPPLIERSHAVEBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES.
CiscoandtheCiscologoaretrademarksorregisteredtrademarksofCiscoand/oritsaffiliatesintheU.
S.
andothercountries.
ToviewalistofCiscotrademarks,gotothisURL:www.
cisco.
com/go/trademarks.
Third-partytrademarksmentionedarethepropertyoftheirrespectiveowners.
TheuseofthewordpartnerdoesnotimplyapartnershiprelationshipbetweenCiscoandanyothercompany.
(1110R)AnyInternetProtocol(IP)addressesandphonenumbersusedinthisdocumentarenotintendedtobeactualaddressesandphonenumbers.
Anyexamples,commanddisplayoutput,networktopologydiagrams,andotherfiguresincludedinthedocumentareshownforillustrativepurposesonly.
AnyuseofactualIPaddressesorphonenumbersinillustrativecontentisunintentionalandcoincidental.
2015CiscoSystems,Inc.
Allrightsreserved.
3CiscoWAE6.
3ServerInstallationGuideCONTENTSCHAPTER1PlatformOverview1-1Modules1-2Configuration1-3EnvironmentVariables1-3CHAPTER2CollectingNetworkInformation2-1CollectionOverview2-1SnapshotFiles2-1IntervalCollectionsandContinuousPolling2-6CollectionMethods2-6PlanFiles2-8WAECollectorandArchives2-8UsingCollections2-9CollectingBasicInformationUsingtheWAECollectorUI2-10WorkflowforCollectingBasicInformationUsingtheWAECollectorUI2-10ConfigureNodeDiscovery2-11ConfigureNodeAccess2-13ConfigureAdditionalNodeAccessProfiles2-15ConfigureNodeInclusion2-16ViewandManagetheNodeList2-17ConfigureWhattoCollect2-20ConfigureContinuousPollingandCollectionintheWAECollectorUI2-23ScheduletheCollection2-26ViewCollectionandWAECollecterServerStatusDetails2-27ViewCollectorServerLogs2-28SaveorLoadConfigurations2-28CollectingInformationUsingAugmentedCollection2-29NotesandLimitations2-30EnvironmentVariables2-30WorkflowforCollectingInformationUsingAugmentedSnapshots(AugmentedCollection)2-31CollectionNetworkInformationUsingManualCollection2-35WorkflowforCollectingNetworkInformationUsingManualCollection2-35ConfigureContinousPollingandCollectionUsingManualCollection2-39Contents4CiscoWAE6.
3ServerInstallationGuideCollectingHardwareInventory2-49CustomizingandUnderstandingHardwareInventoryCollection2-50CollectedHardware2-51HardwareHierarchy2-51TablesforProcessingInventory2-52ConfigureHardwareTemplates2-53TroubleshootingCollection2-56CHAPTER3AdvancedCollectionConfigurations3-1Terminology3-1Multi-NetworkCollection3-2Prerequisites3-2Pre-SnapshotConfiguration3-2UsingExternalArchives3-3InsertingPlanFilesDirectly3-4FlowCollection3-7FlowCollectionWorkflow3-7FlowCollectionConfiguration3-9ManagingFlowCollection3-9GetTrafficMatricesintoaPlanFile3-10CollectFlows3-13SnapshotIntegration3-13OfflineDiscovery3-14ImportDatabases3-14ImportTrafficfromRRDTools3-19SAMCollection3-20SAMDiscovery3-20ConfigureSAMforUsewithWAECollector3-22SAMIntegration3-37NetworkAccessFile3-39FileFormat3-40TesttheNetworkAccessFile3-43ToolAccessParameters3-43NetworkAuthentication3-43OnlineDiscoveryAuthentication3-43CreateanAuthenticationFile3-44TablesintheAuthenticationFile3-45AddRouter-SpecificAuthenticationInformation3-47ViewAuthenticationInformation3-47Contents5CiscoWAE6.
3ServerInstallationGuideTesttheAuthenticationFile3-47ManageArchives3-48CreateorUpdateanArchive3-48InsertorExtractFilesfromanArchive3-49ManageArchivesforWAEDesignArchive3-50MakeBatchChangestoArchiveFiles3-50CHAPTER4DeployingNetworkChanges4-1WAECoreServer4-1WAECoreConfigurationFiles4-1Memory4-4Logging4-4DeployerModule4-4DeployingLSPsUsingOSC4-5DeployingLSPsUsingCiscoNSO4-5EnablingBPL-LSCollectionWithinOSC4-6VerifyingLSPDeployment4-7CHAPTERACollectingSegmentRoutingLSPsA-1InsertDataintoExternalArchiveA-2CollectingBGPLSA-3CollectingBGPPeersA-4CollecteBGPPeersbyMACAddressA-5CollectDataforWAELiveA-6ManuallyInsertWAELiveDataA-7InsertDataintoDatastoreA-7InsertDataintoMapArchiveA-7CollectLAGMembershipandTrafficA-8CollectQoSandTrafficA-9Contents6CiscoWAE6.
3ServerInstallationGuideCHAPTER1-1CiscoWAE6.
3PlatformConfigurationGuide1PlatformOverviewTheWANAutomationEngine(WAE)platformisanopen,programmableframeworkthatinterconnectssoftwaremodules,communicateswiththenetwork,andprovidesRESTandThriftAPIstointerfacewithexternalapplications.
WAEPlanningsoftwareprovidesthetoolstocreateandmaintainamodelofthecurrentnetworkthroughthecontinualmonitoringandanalysisofthenetworkandthetrafficdemandsbeingplacedonit.
Thisnetworkmodelcontainsallrelevantinformationaboutanetworkatagiventime,includingtopology,configuration,traffic,androutinginformation.
Youcanusethisinformationasabasisforanalyzingtheimpactonthenetworkduetochangesintrafficdemands,paths,nodeandlinkfailures,networkoptimizations,andotherpossiblechangestothenetwork.
WithWAEAutomationsoftware,youcanthendeploytheresultsoftheanalysesandoptimizationsintothenetworkforimprovednetworkperformanceor,forexample,fortemporarychangesduringnetworkmaintenance.
WAEAutomationusesopenAPIsandstandardizedprotocolstoprovideinteractionbetweenapplicationsandthenetwork.
TheWAEAPIsenableyoutodevelopapplicationsthatcommunicateusinganylanguagethatsupportsRESTorThriftAPIs.
RESTAPIsareHTTP-basedandareoftenusedinthedevelopmentofweb-basedservices.
Thriftisanopen-sourceinterfacedefinitionlanguagethatisusedtodefineandcreateservicesfornumerouslanguages.
TheWAEplatformhasnumeroususecases,includingthefollowing.
Trafficengineeringandnetworkoptimization—Add,modify,ordeletenetworkLSPconfigurationstoimprovenetworkperformance,orperformlocalorglobaloptimization.
Demandengineering—Examinetheimpactonnetworktrafficflowduetoadding,removing,ormodifyingtrafficdemandsonthenetwork.
Topologyandpredictiveanalysis—Observetheimpacttonetworkperformanceduetochangesinnetworktopologywhetherdrivenbydesignorbynetworkfailures.
Coordinatednetworkmaintenance—Exploreoptionsthatminimizetheimpactoftemporarychangestothenetwork,suchasforscheduledmaintenance.
TEtunnelprogramming—Examinetheimpactofmodifyingtunnelparameters,suchastunnelpathandreservedbandwidth.
CoS-aware(classofservice)bandwidthondemand—Examineexistingnetworktrafficanddemands,andadmitasetofservice-class-specificdemandsbetweenrouters.
NoteThisguideisforsingle-systemenvironmentsonlyanddoesnotcontainconfigurationsforallmodules.
Forfurtherconfigurations,suchasconfiguringdistributedenvironmentswherethereismorethanoneinstanceoftheWAEplatform,contactyoursupportrepresentative.
1-2CiscoWAE6.
3PlatformConfigurationGuideChapter1PlatformOverviewModulesModulesTheplatformworkflow(Figure1-1)consistsofongoingdatacollection,networkanalysisandoptimizations,anddeploymentoftheresultingrequirementsontothenetworkinfrastructure.
CollectorModule—Discoversthenetworktopology,routingandpeeringinformation,andpollsnetworkfortraffic,aswellasotherobjectproperties.
ThisinformationisexposedthroughAPIsandisavailableforusebyWAELive,WAEDesign,andotherapplications,aswellasbytheNetworkModelerModule.
NetworkModelerModule—Maintainsacurrentnetworkviewintheworkingplanarea.
Whilechangescanbemadetotheworkingplanarea,therecommendedpracticeistousestagingareas.
Usingstagingareas,multipleuserscanworkofflinesimultaneouslytomakeandtestmodificationsbeforemergingthemwiththeworkingnetworkmodelanddeployingthemtothenetwork.
CalendaringModule—Isadatabaseusedtoconstructaproposednetworkthatconsistsofthecurrentnetworkmodel,plusanychangesthatarescheduledtohappenbetweenthetimethenetworkmodelwascreatedandafuturedate.
Simulationsareruntovalidatewhethersuchchangesareadmissibletoanetwork.
AnapplicationcouldusetheoutputfromtheCalendaringModuletorunasinputtothesimulationsrunbytheOptimizationandPredictionModule.
OptimizationandPredictionModule—EnablesAPIstoexecuteglobalandtacticaloptimizations,modeltraffic-engineeredLSPs,andperformfailureanalysis.
Thesesimulationtoolsenableyoutomodelandpredicthowthenetworkwillreacttoaspecifiedlistofchanges,aswellassuggestadditionalchangesthatwouldproduceamoreoptimalnetwork.
Oncesatisfiedwiththeoptimizationsandchanges,youcanchoosetosendthisnewmodeltotheNetworkModelerModule.
DeployerModule—Comparesthecurrentnetworkmodelandthenew,updatednetworkmodeltocreateachangeplanofthedifferences,andthendeploysLSPchangestothenetworkviaanOSCorNSOcontroller.
Ifconfigured,theapplicationscanbesentdeploymentstatussotheycandeterminewhendeploymentsarecompleted.
NotethattheCollectorModuleusesaCollectorserverandaWAENetworkInterface(NI)server,whiletheremainingmodulesusetheWAECoreserver.
1-3CiscoWAE6.
3PlatformConfigurationGuideChapter1PlatformOverviewConfigurationFigure1-1WAEPlatformWorkflowConfigurationThisguidedescribesthefollowingconfigurations.
CollectingNetworkInformation—Describesthedifferencesbetweenthecollectionmethodsandhelpsyouidentifywhichoneisbestforyou.
DeployingNetworkChanges—DescribeshowtoconfigureWAECoreserverresources,aswellashowtoconfiguretheRESTandThriftAPIsbymodifyingconfigurationfiles.
ItalsodescribeshowtoconfigurethedeploymentofLSPs.
EnvironmentVariablesThisguideusesthefollowingenvironmentvariables:$CARIDEN_ROOTand$WAE_ROOT—Locationoftheinstallation.
Bydefault,thisis/opt/cariden.
Thesetermsareinterchangeable.
$CARIDEN_HOME—DirectoryinwhichtheWAEDesign,WAELive,andWAECollectorexecutablesandbinariesareinstalled.
Thedefaultis/opt/cariden/software/mate/current.
$WAE_HOME—Directoryinwhichthepackagesareinstalled.
Thedefaultis/opt/cariden/software.
353688WAEPlatformApplicationsNetworkModelerCalendaringModuleOptimizationandPredictionModulePCEPNETCONFCLISNMP/CLINetFlowSAMNSOOSCOSCSOAPXMLPCEPBGPLSCollectorModuleDeployerModuleNetworkAPIsInternalWorkflowNetworkDataOffline1-4CiscoWAE6.
3PlatformConfigurationGuideChapter1PlatformOverviewEnvironmentVariablesCHAPTER2-1CiscoWAE6.
3PlatformConfigurationGuide2CollectingNetworkInformationCollectionOverviewTheWAEcollectionprocessrunsthroughalistofsequentialtasksthatdiscovernetworktopology(includingIGP,node,interface,LSP[SNMP],andPCEPinformation)andgathertrafficstatistics(orpollfortraffic).
Therearevariousmethodsinwhichtocollectdata(seeCollectionMethods).
Regardlessofthemethodused,thebasicunitofdatastoragethatisproducedafterthecollectioniscalledaplanfile.
PlanfilescontainnetworkinformationataspecifictimeandareusedbyallWAEapplications.
Sincetypicalcollectionisdonethroughaseriesofsequentialtasks,youmightwanttohaveafewtasksperformedasynchronously.
YoucanconfigureWAEtoenablecontinuoustrafficpollingandPCEPcollectionaftertheinitialcollectionbyusingtheWAENIserver.
Configuringthisfeatureisdiscussedinmoredetailinthefollowingsections:ConfigureContinuousPollingandCollectionintheWAECollectorUIConfigureContinousPollingandCollectionUsingManualCollectionFormoreinformationoncollectioncomponents(WAECollector,WAENetworkInterface,andthedatatopologyworkflow,seeDataFlowAfterCollection.
SnapshotFilesNoteDonoteditsnapshotfilesifyouarecollectingnetworkinformationusingtheWAECollectorUI.
Forsnapshotfileexamples,seeAppendixA,"SnapshotExamples.
"Thecollectionprocessusesconfigurationsdefinedinsnasphotfiles.
Thesnapshotfilesconsistofa.
txtandanoptional.
incfile,andarelocatedinthe$CARIDEN_HOME/etcdirectory.
Together,thesefilesenableyoutocustomizetasksthatdefinehowyournetworkisdiscoveredandmodeled.
Thesnapshot.
txtfilecontainstasksthataredefinedinthesnapshot.
incfilethroughaseriesofCLItools.
Thesetasksandtheir.
incdefinitionsdeterminewhatnetworkinformationiscollectedandhowthenetworkismodeled.
Thesnapshot.
txtfilealsodefinesenvironmentvariablescalledbytheCLItoolsintheinthesnapshot.
incfile,thusremovingtheneedtomanuallyupdatethesevariablesmorethanonetimeifyoureconfigureyournetwork.
2-2CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionOverviewTasksinthesnapshot.
txtfilearedefinedinthesnapshot.
incfile.
Thesetasksareperformedintheorderinwhichtheyaresequentiallylistedinthesnapshot.
txtfile.
Variables$(variable_name)inthesnapshot.
incfilesaredefinedinthetableofthesnapshot.
txtfile.
Iftherearemultiplesnapshot.
incfiles,theyareexecutedintheorderinwhichtheyarelistedinthetable.
Iftherearenestedsnapshot.
incfiles,theyareexecutedintheorderinwhichtheyarelistedintheparentsnapshot.
incfile.
Typically,youneedonlytocustomizethesnapshot.
txtfile,whichcontainsallthestepsneededtoperformatypicalnetworkdiscovery.
Thedefaultsnapshot.
incfilecontainsdetailsofhoweachCLItooliscalledtoexecuteeachtask,andcanoftenbeleftasis.
snapshot.
txtNoteTherearedifferenttypesofsnapshot.
txtfiles;forexample,snapshot_augment_collector.
txtandsnapshot_hardware_inventory.
txtfile.
Theyallprovidethesametypeofinformationandaregenerallyreferredtoassnapshot.
txtfilesthroughoutthisdocument.
Thesnapshottoolreadsthesnapshot.
txtconfigurationfiletodeterminethefollowing:Thediscoveryenvironment,suchaswheretostorethedata,logfiles,anddebuginformation(seetheEnvironmentVariablessection).
Whichdiscoverytaskstoperform.
EnvironmentVariablesThetabledefinesnumerousvariablesthatarefrequentlycalledbytasksdefinedinthesnapshot.
incfile.
Bydefiningthemhere,youcanavoidtherepetitionofenteringthemmultipletimes.
Thesnapshot.
txtfileitselfcontainsadescriptionofeachofthesevariables.
Snapshotenvironmentvariablesapplytothesnapshotprocessonly,andareunrelatedtohostenvironmentvariables.
Example:Almostallthetaskscallawork_dirvariabletodefinethelocationinwhichtostorethesnapshotdata.
Inthesnapshot.
txttable,youcoulddefinethefollowing:home_dir/opt/caridenwork_dir/$(home_dir)/workInthesnapshot.
incfile,definethatalltasksputtheiroutputin$(work_dir).
EachparametermustbeseparatedfromitsvaluebyaTAB.
Atminimum,youmustdefinethefollowingvariablesinthistable:uniquehome_dircollector_url(ifgettingaplanfilefromtheCollectorserverorWAENetworkInterface(NI)server)2-3CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionOverviewseed_router(manualcollectiononly)igpEnsureisis_levelorospf_areaisproperlyconfigured,dependingontheigpsettingYoucandefineyourownenvironmentvariablesforsnapshottasksthatyoucreate.
However,ifusingtheaugmentedmethod,youcannotcreateenvironmentvariablesthatusethesamenameasthosethatareapplicableonlytothemanualcollectionmethod.
Toavoidthiserror,youcouldcomparesnapshot_augment_collector.
txttothesnapshot.
txtfiletodeterminenamesyoumustavoidusing.
snapshot.
txtTasksThesnapshottoolreadsthesnapshot.
txtconfigurationfiletodeterminewhichWAECollectortaskstoperform.
Thetasksareorganizedintofourhigh-leveltables,eachofwhichcontainsalistofavailabletasksforthediscoveryprocesstoperform.
Eachdefaulttaskiseitherenabled(nocommentsymbol[#])ordisabled(withacommentsymbol).
Toenableatask,removethecomment.
Conversely,todisableatask,addacommenttothebeginningofitsline.
Eachtaskiscustomizedanddefinedinthesnapshot.
incfilethroughaseriesofCLItools.
Forinformation,seethesnapshot.
incsection.
Thesnapshottoolexecutesthetasksintheorderinwhichtheyarelistedinthesnapshot.
txtfile.
Youcanremovetasks,andyoucanaddanytask(withanyname)providedyoualsoreferenceanddefineitinthesnapshot.
incfile.
snapshot.
incYoucanfurthercustomizethesnapshotdiscoveryprocessbyaddingoneormoreuniquelynamedsnapshot.
incfilestothetableinthesnapshot.
txtfile.
Thesesnapshot.
incfilesdefinethebehaviorofeachtaskthatiscalledbythesnapshot.
txtfile.
Figure2-1showsanexample.
Theorderofthetasksdefinedinthesnapshot.
txtfileistheorderinwhichtheyareexecuted.
Theorderofthetaskdefinitionsinthesnapshot.
incfiledoesnotmatter.
Thesnapshot.
incfilesareexecutedintheorderinwhichtheyarelistedinthetable.
Iftherearenestedsnapshot.
incfiles,theyareexecutedintheorderinwhichtheyarelistedintheparentsnapshot.
incfile.
snapshot.
txtTaskTypeDescriptionDefinewhattypeofinformationtocollect,suchasIGPdatabase,nodes,MPLSLSPpaths,andmore.
Definewhichtrafficstatisticspollingfunctionstoperform.
DefinewhethertocollectNetFlowdataandrelatedflowmeasurements.
Simplifyandarrangenodesandsitesinthenetworkplot.
Createandinitializeameshoftrafficdemands.
Insertthecompletedplanintoanexistingarchiverepository.
2-4CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionOverviewTheparametersusedtocallthesetasksarelistedinanindividualtasktable(Table2-1).
TheparametersusedfortheCLItoolswithinthetasksarelistedinanassociatedoptionstable(inTable2-2).
Withineachtable,referencesaremadetovariablesdefinedinthesnapshot.
txttableusingtheformat$(variable_name).
Sometaskscancopyintermediatefilestoadebugfolderbycallingapostcmdafterthemaintooliscalled.
Table2-1IndividualTaskTableNameValuecmdFully-qualifiednameandpathoftheCLIcommandtoexecute.
Youdonotneedtochangethiscommandduringcustomization.
cmd_optNameofthetablethatdefinesthecommandoptions.
Youdonotneedtochangethenameofthetabletochangethecommandoptions.
Instead,editthecontentsoftheoptionstablebythisname.
cmd_successDetermineswhatexitcodesconstituteasuccessforthecommand.
Thesnapshotprocessterminatesifthecommandisunsuccessful.
0=successful,and1=unsuccessfulprecmdFully-qualifiednameandpathofacommandtoexecutebeforetheCLIcommand.
Forinstance,itcanbeatasktopreparefortheCLIcommand.
precmd_optNameofthetablethatdefinesthepre-commandoptions.
Youcanuseanyname,butitsnamemustmatchthenameofthetablethatdefinestheoptions.
postcmdFully-qualifiednameandpathofacommandtoexecuteaftertheCLIcommand.
ThedefaultisaLinuxcpcommandthatcopiesintermediatefilestothedebugdirectory(debug_dir).
postcmd_optNameofthetablethatdefinesthepost-commandoptions.
Youcanuseanyname,butitsnamemustmatchthenameofthetablethatdefinestheoptions.
Table2-2TaskOptionsTableNameValueValueoftheoption.
Thesearename-valuepairs,andyoucanhaveasmanyentriesasneededforthecommand.
Youcanuseenvironmentvariablestoconstructfilenames.
Example:$(work_dir)/$(unique).
txt2-5CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionOverviewFigure2-1ExampleTaskDefinedinsnapshot.
incLaunchandValidatesnapshotThesnapshottoolislocatedinthe$CARIDEN_HOME/bindirectory.
Tolaunchthesnapshottool,enterthefollowingcommand:snapshot-config-file$WAE_HOME/etc/snapshot.
txtYoucanlaunchsnapshotmanuallyorscheduleitforperiodicoperationwithacronjob.
Theusualprocessistocreatea$CARIDEN_ROOT/archivesdirectoryandhavethenewlydiscoveredplanfilessavedtoit.
Ifyourunsnapshotmanually,theresultingplanisplacedinthe$CARIDEN_ROOT/workdirectory.
Ifyoumakechangestoeitherofthesnapshotfiles,werecommendthatyouinitiallyrunthesnapshotwiththe-dry-runand-verify-configoptions.
AmessageofSuccessafterrunningthetoolmeansthesnapshotprocesssuccessfullyexecutedthetasksidentifiedinsnapshot.
txt.
Ifthisisyourfirsttimerunningsnapshot,werecommendthatyoureviewfilesinthe$CARIDEN_ROOT/logsdirectoryforerrorsandwarnings.
Ifyoufindthem,checkthe$CARIDEN_ROOT/logs/debugsdirectorytoseeifyoucanresolvethem.
Youlikelyneedtotweaktheauthentication,networkaccess,orsnapshotconfigurationfile.
Commonerrorsincludethefollowing:Routersinaccessibleduetoauthenticationerrors,suchasincorrectcommunities.
Routersnotrespondingorreturningincompletedataduetotimeoutsorotheraccesserrors.
Whenschedulingthesnapshottooltorunrepeatedlyandstoringplanfilesintoanarchive,itisusefultocheckperiodicallythattheplanfilesarestillvalid.
Followingareafewwaystoverifyaplanfile:Lookforerrorsandwarningsinthetothe$CARIDEN_ROOT/logsdirectory;forexample,usinggrep.
Checkthe$CARIDEN_ROOT/workdirectorytoverifytheplanfilewascreated.
OpentheplanfileintheWAEDesignGUI.
2-6CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionOverviewIntervalCollectionsandContinuousPollingNoteForinformationonhowtoconfigurecontinuouscollectionandtrafficpolling,seethefollowingsections:ConfigureContinuousPollingandCollectionintheWAECollectorUIConfigureContinousPollingandCollectionUsingManualCollectionThroughtheWAECollectorUI,youhavetheoptiontoruncollectionbasedonintervalsortocombinethatwithcontinuouspolling.
Intervalcollections—Thismethodpollstraffictwiceduringthecollectionwindow.
Thetrafficstatisticsforthosetwotimeperiodsareaveragedandaddedtotheplanfileasmeasuredtraffic.
TheamountoftimeforeachpollingintervalissetusingtheCounterPollingPeriodfieldontheContinuousPollerpage.
Usecontinuouspolling—Thismethodpollsthetrafficcontinuously.
TheamountoftimeforeachpollingintervalissetusingtheCounterPollingPeriodfieldontheWhatToCollectpage.
ThetimewindowoverwhichthetrafficrateisaveragedissetintheDefaultTimeWindowfield.
Theamountoftrafficaddedistheaveragetrafficforthespecifiedtimewindowatthemomentwhentheplanfileisgenerated.
Example:CounterPollingPeriodis60seconds.
DefaultTimeWindowis15minutes.
Every60secondstrafficispolledandaddedtotheplanfile.
Theamountoftrafficaddedistheaveragetrafficforthelast15minutesatthemomentwhentheplanfileisgenerated.
CollectionMethodsTherearethreemaincollectionmethods:BasicCollection—ConfigurebasicnetworkcollectionusingtheWAECollectorUI.
Thereisnoneedtoeditthesnapshotfiles.
ThesnapshotfilesareautomaticallyconfiguredbasedontheentriesyoudefineintheWAEUI.
NoteIfyoueditthesnapshotfilesmanuallyandlaterdecidetousetheWAECollectorUI,anyconfigurationsmadewiththeWAECollectorUIwilloverwritethesnapshotfiles.
AugmentedCollection—ConfigurebasicnetworkcollectionusingtheWAECollectorUIandthenaddmoretasksandoptionsusingaugmentedsnapshotfiles(snapshot_augment_collector.
txtandsnapshot_augment_collector.
inc).
ThismethodretrievesaplanfilefromtheCollectorserverorWAENIserverforuseinWAEDesignandWAEDesignArchive.
Optionally,itenhancestheplanfilewithadditionalcollection,andenhancestheplanfilewithmodelinginformation,suchasdemands.
ExamplesincludeparsingconfigurationsforexplicitLSPpaths,collectingMulticasttraffic,andcollectingflowtraffic.
ManualCollection—ConfigurecollectionsusingonlytheCLI.
Thismethodisusedforadvancedconfigurationsthatarenotsupportedbytheothercollectionmethods.
Examplesincludecollectiondirectlyfromconfigurationfiles,multi-networkingcollection,andcollectionfromAlcatel-Lucent's5620ServiceAwareManager(SAM)server.
Seethefollowingtabletodeterminewhichcollectionmethodtouse.
Considerwhatitisyouaretryingtodiscoverandwhattheapplicationneedsare.
2-7CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionOverviewNoteTheAugmentedCollectioncolumnindicatesfeaturesthatarenotsupportedifyourunonlyBasicCollectionusingtheWAECollectorUI.
Toenablethesefeatures,youmustrunAugmentedCollectionafterBasicCollectioniscompleted(seeCollectingInformationUsingAugmentedCollection).
Table2-3CollectionbyConfigurationMethodBasicCollectionUsingWAEUI1AugmentedCollectionManualCollectionUsesSNMPv2cauthenticationxxUsesSNMPv3authenticationxxDirectlydiscoversnodesusingsystemIPv4addressesxCollectsOSPFandIS-ISIPv4topologiesxxCollectsOSPFandIS-ISIPv6topologiesxCollectsBGPLStopologiesxCollectsnodepropertiesxxCollectsinterfaceproperties,includingTEextensionsxxCollectsinterfacequeuesxxCollectsSegmentRoutingLSPsxCollectsinterfacetrafficbasedonegressshapingratexCollectsSRLGsxxDiscoversBGPpeeringxxContinuouslypollstrafficstatistics(requirestheWAENIserver)xxContinuouslycollectsLSPs(requirestheWAENIserver)xxCollectsbasicRSVPLSPpropertiesxxCollectsRSVPLSPswithmultiplepathsornamedpaths(EROs)xxCollectsLAG2portsxxCollectsRSVPLSPaffinitiesxCollectsMulticastxxCollectsVPNsx(Layer3only)xxCollectsLDPsxxCollectsflowtrafficxxCollectstopologyfromconfigfilesxCanbuildnetworkmodelsafterthecollectionprocess,includingthecreationofdemandsxxCollectshardwareinventoryxxCollectsmultiplenetworksxCollectsfromSAMserverx2-8CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionOverviewPlanFilesAllWAEapplicationsuseplanfilesproducedbyWAECollector.
Planfilescaptureallrelevantinformationaboutanetworkatagiventime,andcanincludetopology,traffic,routing,andrelatedinformation.
Howandwhereplanfilesarecreateddependsonthecollectionmethodandwhatisconfiguredinthesnapshotfiles.
FromtheWAELiveUI,youspecifywheretheapplicationistogetitsplanfiles:eitherfromaserverorfromanexternalplanfilearchivethatisusedbytheaugmentedandmanualdiscoverymethods.
TheWAEDesignArchiveUIusestheplanfilesthatarestoredintheexternalplanfilearchive.
TheWAEDesignGUIcanaccessplanfilesfromeithertheplanfilearchivethatisinternaltoWAELiveorfromtheexternalplanfilearchivesimplybytellingtheGUIwhichremoteservertoaccess.
Theprimaryuseforthisapplicationtoaccesstheplanfilearchivesisto(1)createandupdatetemplatesforuseinWAELiveandWAEDesignArchive,or(2)simulatetrafficbasedondiscovereddatawhendesigningandplanningnetworksusingWAEDesign.
TheWAEDesignGUIcanalsoaccessplanfilesresidingintheNetworkModelerModuleontheWAECoreserver,aswellassavetheplanfilebacktotheWAECoreserver.
YoucanadditionallydeploytheplanfiletothenetworkdirectlyfromWAEDesign.
(AcopyofitisalsosavedtotheworkingplanfileareaintheNetworkModelerModule.
)WAECollectorandArchivesThefirststepisforWAECollectortodiscoverthenetworkandcreateaplanfilethatrepresentsyournetwork.
TheCollectorserver,whichisconfiguredonlythroughtheWAECollectorUI,discoversthenetworkatuser-definedintervalstocreateandstoretheplanfilesonthatserver.
TheplanfilesresideononeoftheseserversuntileitherWAELiveorasnapshotprocessrequeststhem.
Ifusingtheaugmentedmethodofdiscovery,thesnapshotusesaplanfilegeneratedbytheCollectorserver,andthenaddsotheraspectsofthenetwork(suchasMulticast).
Acommonusecaseforaugmentedsnapshotsistoaddmodelingelements,suchasdemandmeshes,andtoperformdemanddeductionforuseinapplications.
Theresultingplanfileissenttoanexternalplanfilearchive.
Ifmanuallydiscoveringthenetwork,eitherthroughonlineorofflinemeans,snapshotsrunatuser-definedintervalsanddistributetheplanfilestoanexternalplanfilearchiverepository.
Optionally,youcanconfigurethecontinuouspollingoftrafficstatistics.
WAECollectorsendsupdatedplanfilestotheNetworkModelerModuleontheWAECoreserver.
NoteOptionally,youcanconfiguretheCollectorserverorasnapshottopushtheplanfile,aswellastheaccessandauthenticationfiles,totheWAENIserverforthecontinuouspollingoftrafficstatisticsorforthecontinuouscollectionofLSPs.
Fromasnapshot,youcanalsopullaplanfilefromtheWAENIserver.
1.
ThistabledoesnotincludetheadvancedconfigurationoptionsavailableintheCollectorUI.
Additionally,allcollectionsaredependentonlicensesandwhatyouhaveconfiguredforcollection.
2.
VendorshavedifferentnamesforLAGs.
Forinstance,CiscoIOSusesthetermEtherChannel(port-channelinterface),CiscoIOSXRusesthetermlinkbundling(bundle-etherinterface),andbothJuniperandAlcatel-LucentusethetermLAG.
2-9CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionOverviewTable2-3showshowdataflowsbetweenWAECollectorandthearchives,andhowdataflowsbetweenthearchivesandtheWAEapplications.
Thisdiagramdoesnotdepicttemplateflow,wheretemplateisaplanfilecontainingthevisualaspectsthatdisplaythenetworkintheapplicationinterfaces.
Forinformationontemplates,seetheCiscoWAENetworkVisualizationGuide.
Figure2-2DataFlowAfterCollectionUsingCollectionsYoucanusecollectionsinthefollowingways:IfusingWAELive,configureittocollectfromtheappropriatesourceandspecifytheMaparchivelocation.
Forinformation,seetheCiscoWAELiveAdministrationGuide.
UsetheWAEDesignGUItoupdateatemplateforusebytheapplications.
Forinformation,refertotheCiscoWAENetworkVisualizationGuide.
Time-SeriesDatastore353689OnlineOfflineWAECoreServerSnapshotsCollectorServerWAENIServerWAECollectorWAELiveExploreAnalyticsMapPlanFileArchivesPlanFileArchivesWAEDesignGUIWAEDesignArchiveWAEDesignWAEPlatformNetworkDataFlow2-10CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingBasicInformationUsingtheWAECollectorUIToverifytheplanfilecollectionhasbeensetupcorrectly,opentheplanfilefromtheapplicationyouareusing.
CollectingBasicInformationUsingtheWAECollectorUINoteSnapshotfilesareautomaticallyconfiguredusingtheWAECollectorUI.
Ifyouhavepreviouslyperformedamanualcollectionoreditedthesnapshotfiles,theconfigurationwillnotbeapplied.
YouwillneedtoredotheconfigurationthroughtheWAECollectorUI.
TheWAECollectorUIenablesyoutoconfigurethecollectionofbasicnetworkdata.
TheCollectorserverhandlesrouteraccessandauthentication,whileenablingyoutoconfigureandschedulecollection,andtroubleshootanyissues.
Inmanycases,theplanfileproducedcanbeuseddirectlybyWAELive.
TheWAECollectorUIpredominantlyusestheCollectorserver.
YoucanalsostarttheWAENIserverandthereafterconnecttoitthroughtheWAECollectorUI.
ThenyoucandelegatetrafficpollingforobjectsandthecontinuouscollectionofLSPstotheWAENIserver.
Oncethecollectionfinishes,WAECollectorcreatesaplanfile.
IfcontinuouspollingisnotrunningandifLSPsarenotbeingcontinuouslycollected,theplanfileisgeneratedbasedonthecompletionofacollectionasconfiguredfromtheSchedulepage.
Toretrievetheplanfile,accessitfromtheCollectorserver.
IfcontinuouspollingisrunningorifLSPsarebeingcontinuouslycollected,theplanfileisgeneratedondemand,suchaswhentheWAELiveapplicationrequestsit.
Additionally,theWAENIservercachestheplanfileatregularintervals.
Toretrievetheplanfile,accessitfromtheWAENIserver.
Newnodesareaddedwhentheyarediscovered.
Nodesthatareremovedfromthenetwork(manuallyorthroughfailure)aresettoinactive.
Thisinactivestateiskeptforauser-configurabletime,afterwhichthenodesareremovedfromthecollection.
WorkflowforCollectingBasicInformationUsingtheWAECollectorUITheinitialworkflowconsistsofthefollowingsteps.
Youcanreturntoanyofthesestepsatanytimetochangetheconfigurations.
IfyouhavenotyetconfiguredanodelistusedforcollectionorifyourestartedWAECollector,asetupwizardisavailabletoleadyoutotherequiredSetuppages.
NoteYouarenotifiedifanotheruserisaccessingtheWAECollectorUIwhenyoulogin.
Notethatanychangesyoumakewillaffecttheotheruser'sconfiguration,andviceversa.
2-11CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingBasicInformationUsingtheWAECollectorUITable2-4WAECollectorUICollectionConfigurationWorkflowConfigureNodeDiscoveryTheNodeDiscoverypageenablesyoutodefinehownodesarediscoveredbyreadingtheIGPdatabaseofaseedrouterorbyspecifyingalistofsystemIPaddresses.
Youcancombinethesemethodstopopulatethenodelist.
IGPDiscovery—WAECollectorcommunicateswithaseedrouterusingitsmanagementIPaddress.
ThenodelistispopulatedwithallnodesintheIGPdatabaseoftheseedrouter.
AllWAECollectorinteractionsappliedintheUIworkfromthisnodelist.
AccessoptionsincludeSSHandTelnet,andIGPoptionsincludeOSPForIS-IS.
NotethatunliketheIS-ISdatabase,theOSPFdatabasedoesnotcontainnodenames.
NodenameswillonlybeavailableinthenodelistafterSNMPaccesstoeachnodeisestablishedusingtheNodeAccesspage.
DirectNodeDiscovery—WAECollectorusesalistofuser-specifiedsystemIPv4IPaddressestodiscovernodesthatmayormaynotbeintheIGPdatabase.
SNMPisusedtofindandpollnodesandinterfaces.
Otherobjects,suchasLSPsandVPNs,cannotbefoundusingthismethod.
OneusecaseisfordiscoveringL2switchesthatresidewithinarouter'sdomain,butarenotlistedintheIGPdatabase.
NoteTheserulescanbeoverwrittenonaper-nodebasisusingtheNodeList.
ForNodeDiscoveryfielddescriptions,seeTable2-5.
StepTaskDescription1ConfigureNodeDiscoveryDefinehownodesarediscoveredandconfigureglobaldefaultdeviceSNMPcommunityandlogincredentials.
2ConfigureNodeAccessDefinethemanagementIPs.
3ConfigureAdditionalNodeAccessProfilesConfigureandapplyadditionalnodeaccessprofiles.
Forexample,applyanodeaccessprofilefornodesdependingonvendorormodel.
4ConfigureNodeInclusionSetglobalrulesforincludingandexcludingnodesfrombeingcollected.
5ViewandManagetheNodeListViewandcreateoverriderulesforspecificnodestowhichtheglobaldefaultcredentialsdonotapply.
Youcanalsoexcludenodesandapplyprofileshere.
6ConfigureWhattoCollectConfigurewhichobjectsandtraffictocollect,andsetthecounterpollingperiod.
7ConfigureContinuousPollingandCollectionintheWAECollectorUIConfigurecontinuoustrafficpollingandcollectionusingtheWAENetworkInterfaceserver.
8ScheduletheCollectionSchedulehowfrequentlyyouwanttocollectnetworkdata.
OtherTasks9ViewCollectionandWAECollecterServerStatusDetailsViewlocalCollectorserverinformation.
10ViewCollectorServerLogsViewcollectioneventsandmessages.
11SaveorLoadConfigurationsSaveorloadconfigurationsthatweremadeusingtheWAECollectorUI.
2-12CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingBasicInformationUsingtheWAECollectorUIStep1FromtheWAEUI,selectWAECollector>Setup>NodeDiscovery>DefaultCredentialstab.
Step2ConfigureglobaldefaultseedroutercredentialsandclickApply.
Step3SelecttheIGPDiscoverytabandconfigureIGPdiscoverysettingsandclickApply.
Step4SelecttheDirectNodeDiscoverytabandconfiguredirectnodediscoveryusingsystemIPv4addressesandclickApply.
NodeDiscoveryFieldDescriptionsTable2-5NodeDiscoveryFieldDescriptionsNodeDiscoveryTabDescriptionDefaultCredentialsSNMPv2cDefaultROcommunityThisfieldentryisrequired.
Enterthecommunitystringthatactsasapassword.
Itisusedtoauthenticatemessagessentbetweenthenodeandtheseedrouter.
YoucanspecifySNMPv3credentialsforspecificnodesbycreatingadditionalprofilesandapplyingtheprofiletospecificnodesonthenodelist.
Formoreinformation,seeConfigureAdditionalNodeAccessProfilesandViewandManagetheNodeList.
LoginIfyouwanttouseaspecificusernameandpasswordtologintodevices,selectSpecifyandentertheappropriatecredentials.
Ifnot,selectDisable.
SecurityThisfieldentryisrequired.
Enteramasterpasswordtoenableyoutode-encrypttheauthenticationfile.
Thepasswordmustcontainalowercaseandanuppercasecharacter,aspecialcharacter,andanumber.
IGPDiscoveryDiscoverusingIGPDatabaseClickthecheckboxtouseanIGPseedroutertodiscovernodes.
SeedRouterManagementIPManagementIPaddressoftheseedrouterusedforallcollections.
ThenodelistispopulatedwithallnodesintheIGPdatabaseoftheseedrouter.
SelectIGPOSPFv2—SelectifcollectinganOSPFdatabase.
IS-IS—SelectifcollectinganIntermediateSystem-to-IntermediateSystem(IS-IS)database.
NoteNodenamesareavailableifusingIS-IS.
YoumustlogintotheseedroutertodiscoverIS-IS.
2-13CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingBasicInformationUsingtheWAECollectorUIConfigureNodeAccessTheNodeAccesspageenablesyoutodefinethemanagementIPs,SNMPcommunities,andifnecessary,logincredentialsusedbyWAECollectortoreachthenodes.
TheoptionsonthispageenableyoutoreachnodesthatcouldnotbereachedusingstrictlytheseedrouterdefinedontheNodeDiscoverypage.
RegardlessofwhetheryouareusingloginorSNMPtoreachtheseedrouter,youcanuseanothermechanismtoreachtheotherrouters.
Forinstance,youcanconfigureSNMPtoreachtheseedrouteranduselogintoreachtheotherrouters.
IS-ISLevelThisoptionisonlyavailableifIS-ISwasselectedasthedatabase.
SelectwhethertouseLevel1,Level2,orboth.
IfasingleLevelisselected,theseedroutermustbelongtothatlevel.
Ifselectingboth,WAECollectorattemptstologintootherroutersasnecessary,usingthesamecredentialsastheseedrouter,toassemblethenodesfrombothlevels.
SelectOSPFAreaSpecify—SelectifcollectingfromasingleOSPFareaandenteranareaID.
Theseedroutermustbelongtotheareaspecified.
All—SelectifcollectingfromallOSPFareas.
Inthiscase,WAECollectorattemptstologintoallAreaBorderRouters(ABRs)usingthesamecredentialsastheseedroutertoassemblethenodesfromeacharea.
InitialAuthenticationSelectwhethertologintotheseedrouteroruseSNMPv2toaccessit.
IfdiscoveringIS-IS,youmustselectLogin.
LoginSessionTypeSelectwhichloginprotocoltouse:SSHorTelnet.
TheSSHprotocolismoresecureandisrecommended,ifavailable.
TheTelnetprotocoldoesnotencrypttheusernameandpassword.
UseBackupSeedRouterClickthecheckboxtoidentifywhethertouseabackuprouteriftheseedrouterbecomesunreachable.
BackupManagementIPManagementIPaddressofthebackuproutershouldtheseedrouternotbereachable.
Thisisrequiredif"Usebackupseedrouter"isenabled.
DirectNodeDiscoveryDiscoveryusingSystemIPv4AddressesClickthecheckboxtouseIPaddressestodiscovernodes.
EnteroneormoreIPv4addressesseparatedbycommas.
Youcannotspecifyasubnetrange.
Table2-5NodeDiscoveryFieldDescriptionsNodeDiscoveryTabDescription2-14CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingBasicInformationUsingtheWAECollectorUIThenodes'managementIPcanbesettooneoftworules:setthemanagementIPaddresstobethesameasthenodeID(routerID)orreplacethenodeIPaddressprefixwithauser-definedIPprefix.
Ifdiscoveringmulti-hopBGPorifaddinglogintasksthroughtheAdvancedConfigurationstabontheWhattoCollectpage,youmustenableloginthroughtheLoginAccessoption.
WAECollectorcollectsbasicBGPinformationfromSNMP,butmayneedtologintospecificroutersifmulti-hopBGPisconfigured.
Youcanoptionallysetthesetobethesamecredentialsasusedbytheseedrouter.
Whentheconfigurationisapplied,whetheranodeisreachableisindicatedintheSNMPandLogincolumnsoftheNodeListtable.
YoucanalsoconfigureadditionalcredentialprofilesusingtheAdditionalAccessProfilepage.
Step1FromtheWAEUI,selectWAECollector>Setup>NodeAccess.
Step2Selectandentertheappropriateinformation.
SeeTable2-6forfielddescriptions.
Step3ClickApply.
Step4(Optional)Configureadditionalnodeaccessprofiles.
Formoreinformation,seetheConfigureAdditionalNodeAccessProfilessection.
NoteYoucaneditthispageatanytime.
Doingsochangeshownodesarereachable.
Theglobalnodeaccessrulescanbeoverwrittenonaper-nodebasis.
Ifthisisthefirsttimeyouaresettingupthenodelist,continuetotheConfigureNodeInclusionsection.
NodeAccessFieldDescriptionsTable2-6FieldsinNodeAccessFieldDescriptionManagementIPSameasnodeIPSelectifthenodemanagementIPaddressisthesameasthenodeIPaddress.
ReplacenodeIPaddressprefixwithSelectthisoptionifthemanagementIPaddresscanbederivedbychangingtheIPprefix.
EnterthenodeIPaddressinthefirstfield,andenterthesubstitutionpatterninthesecond.
Example:ThenodeIPaddressesareintherange5.
6.
7.
8/24,andthemanagementIPaddressesareintherange5.
6.
77.
8/24.
Thus,5.
6.
7.
8.
1mapsto5.
6.
77.
8.
1.
Forexample,toapplythisrule,enterthefollowing:5.
6.
7.
8/24>5.
6.
77.
8/242-15CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingBasicInformationUsingtheWAECollectorUIConfigureAdditionalNodeAccessProfilesYoucanconfigureandapplyadditionalnodeaccessprofilestoseveralnodesusingtheAdditionalAccessProfilepage.
Thecreationofnodeaccessprofiles,forexample,allowsyoutoeasilyapplyspecificcredentialstoagroupofnodesthatbelongtoacertaindevicemodelorvendor.
Step1FromtheWAEUI,selectWAECollector>Setup>AdditionalAccessProfile.
Step2Enterappropriatecredentialinformation(seeTable2-7).
Step3ClickSave.
Step4Toapplythenewprofiletospecificnodes:a.
FromtheWAEUI,selectWAECollector>NodeList.
b.
Checkallnodesthatyouwanttoapplythenewprofileto.
NoteTosortnodes,clicktheappropriatecolumnheading.
c.
ClickEdit.
d.
Fromthedrop-downfields,selectthenewprofiletoapplytothenodes.
e.
ClickOK.
f.
Toverifythattheprofilehasbeenappliedcorrectly,clickTest.
Viewthenodelisttoseeifthecredentialstatusiconschangedfortheselectednodes.
AdditionalAccessProfileFieldDescriptionsTable2-7FieldsinAdditionalAccessProfileFieldDescriptionChooseProfileIfoneexists,chooseaprofiletoedit.
ProfileNameEnteranamefortheprofile.
SNMPSNMPaccessoptionsSelecteitherSNMPv2corSNMPv3.
SNMPv2cDefaultROcommunityEnterthecommunitystringthatactsasapassword.
Itisusedtoauthenticatemessagessentbetweenthenodeandtheseedrouter.
2-16CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingBasicInformationUsingtheWAECollectorUIConfigureNodeInclusionTheNodeInclusionpageenablesyoutosetglobalrulesforincludingandexcludingnodesfrombeingcollected.
Youcaneditthispageatanytime.
Doingsochangesglobalrulesforwhethernodesareincludedorexcludedfrombeingcollected.
Theexclusionrulealwaystakesprecedence.
Allrulesaresetusingregularexpressions.
Usetheinclusionorexclusionoptionsthatmakeiteasiestforyoutodefinethenecessaryhostnames.
Forinstance,inclusionrulescanbeusefulwhenyouarediscoveringmorenodesthanyouhaveavailablelicenses,orwhenyouareonlyinterestedincollectingasubsetofthenodes.
Example:Thesearethenodes.
core1-atl2.
acme.
comcore2-atl2.
east7.
comdist1-atl2.
acme.
comcore2-atl1.
acme.
comcore1-chg1.
acme.
comSNMPv3DefaultCredentialsSecurityLevelSelectoneofthefollowing:noAuthNoPriv—Noauthenticationorprivacyprotocolsareused.
authNoPriv—Authenticationprotocolisused.
authPriv—Bothauthenticationandprivacyprotocolsareused.
UsernameEntertheusernamethatisconfiguredfortheSNMPagent.
AuthenticationProtocolSelectMD5orSHAprotocolusedforauthentication.
AuthenticationPasswordEnterthepasswordusedforauthentication.
Thepasswordmustbeatleast8characterslong.
EncryptionProtocolSelectDESorAES-128encryption.
EncryptionPasswordEnterthepasswordusedforencryption.
Thepasswordmustbeatleast8characterslong.
LoginLoginaccessoptionsIfyouwanttouseaspecificusernameandpasswordtologintodevices,selectSpecifyandentertheappropriatecredentials.
Ifnot,selectDisable.
Table2-7FieldsinAdditionalAccessProfileFieldDescription2-17CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingBasicInformationUsingtheWAECollectorUIStep1FromtheWAEUI,selectWAECollector>Setup>NodeInclusion.
Step2Enterregularexpressionstofilterwhattonodestoincludeinthegivenarea.
Toexcludenodes,clicktheInaddition,excludeanynodeswithnamematchingregularexpressionboxandentertheregularexpressioninthegivenarea.
Step3ClickApply.
TheupdatesaredisplayedintheIncludecolumnintheNodesListtable.
Formoreinformation,seeViewandManagetheNodeList.
Theglobalnodeinclusionandexclusionrulescanbeoverwrittenonaper-nodebasis.
Thereafter,ifyoucontinuetoseeaneedtocreateper-nodeoverrides,usetheNodeListpage.
ViewandManagetheNodeListTheNodeListpageallowsyoutocreateoverriderulesforspecificnodestowhichtheglobaldefaultcredentialsdonotapply.
TheNodeListtabledisplaysallnodesavailabletobeusedinthecollectionprocess.
Usethistabletodeterminewhethernodesareincludedorexcluded,whethernodesareaccessiblethroughSNMPorlogin,andthepropertiesofeachnode.
TheNodeListpagealsoprovidesameansofcreatingper-noderulesthatoverridetheglobalones.
Afterconfiguringyourglobalrules,usethiseditingfeaturetofine-tunethelistofnodescollected.
Eachrowshowsthenodeattributes,accessstatus,andcollectionstatus.
ThisiswhereyoumanuallyoverridethemanagementIP,SNMPcommunity,orloginsettingsfornodeswhentheglobalrulesdonotsucceed.
Youhavetheoptionofspecifyingexplicitvalues,oryoucanscanasubnettryingdifferentSNMPcommunitiestofindthecorrectIPaddress.
Thisscanisusefulwhenyouenteranoverrideruleforoneormorenodes.
NoteNodesarebasedontwocriteriaonwhethertheyareincludedinthecollectionornot.
Oneisanexclusionbasedonglobalrules,andoneisanexclusionbasedonper-nodeoverriderules.
Ifthenumberofnodesdiscoveredismorethanthenumberoflicensesavailable,licensesareallocatedbasedonascendingorderofsystemIPaddresses,butallofthemareincludedinthecollection.
NodelicenseviolationsarelistedatthetopofNodeListpageandontheStatuspage.
EditNodeCredentials(OverrideRules)Whennewnodesappear,WAEtriestheglobalcommunitystringincombinationwiththeglobalmanagementIPthatwerespecifiedinthenodediscoverysetup.
IfSNMPaccessfails,youcangetinformationforthesefailuresontheStatuspage.
Formoreinformation,seetheViewCollectionandWAECollecterServerStatusDetailssection.
SectionRegExResultIncludeonlynodes.
*IncludeallfivenodesExcludeanynodes^dist.
*|.
+east.
*Excludeallnodeswithaprefixof"dist"orthatcontainthestring"east.
"Theexcludednodesarecore2-atl2.
east7.
comanddist1-atl2.
acme.
com.
2-18CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingBasicInformationUsingtheWAECollectorUIOncetheproblemisidentified,usetheNodeListpagetorunatesttoseewhichnodesarebeingcollected,whichonesarenot,andwhichnodeswerejustinstalled.
Thenodesthatarefailingaretheonesforwhichtheglobalrulesarelikelynotworking.
Foreachfailednode,ifyouknowthemanagementIP,theSNMPcommunitystring,and/ortheloginaccessinformationforthatnode,youcanoverridetheglobalcredentials.
Ifyoudonotknowthisinformation,youcanusethescanfeaturethatisavailableusingtheDiscoveroptionoftheEditfield.
Step1FromtheWAEUI,selectWAECollector>NodeList.
Step2Checkallnodesthatyouwanttoeditandapplythesamecredentialsto.
Step3ClickEdit.
Step4Dothefollowing:a.
Excludefromcollection—Selecttouseexistinginclusionruleconfiguredfromsetup,orchoosetoexcludeorincludethenode.
b.
Edit—Selectoneofthefollowing:–Specify—Selectwhethertouseglobalrulesoroverriderulesfortheselectednodes.
ThenspecifychangestomanagementIP,SNMPcommunity,andloginaccessasneeded.
TheSNMPstatusintheNodeListissetto"unknown"untilthenextcollectionruns.
–Discover—Enterthesubnettosearch.
ThenentermultipleSNMPcommunitiestotryinsuccession.
WAECollectorscansarangeofmanagementIPscombinedwiththedifferentcommunitiesenteredtofindanodewithanIDthatmatchesthediscoverednodeID.
WAEthenscanstheentiresubnetusingtheenteredcommunitiesstringsinsequence.
WAEthentriestofindacombinationofmanagementIPandcommunitystringthatallowsSNMPaccesstoarouter.
Ifsuchacombinationisfound,thenSNMPaccessisusedtoverifywhetherthefoundrouterisinthenodelist.
Example:Asubnetcontains256totaladdresses,andthereare2SNMPcommunitiestomatch.
Thisyieldsatotalof512attemptstofindanodethatmatchesthecombinationofthesubnetandeitheroftheSNMPcommunitystrings.
Step5ClickOK.
Step6Toverifythatthecredentialshavebeenappliedcorrectly,clickTest.
Viewthenodelisttoseeifthestatusiconschangedfortheselectednodes.
Delete,Test,andApplyUpdatestotheNodeListStep1FromtheWAEUI,selectWAECollector>NodeList.
Step2Checkallnodesthatyouwanttoperformanactionupon.
Step3Clickoneofthefollowing:Test—Beforeapplyingtheconfiguration,clickTesttodetermineiftheselectednodesarereachableandincluded.
Ifanodeisnotreachable,changeitsper-nodeoverriderulesasneeded.
Delete—RemovesanodefromtheNodeList.
2-19CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingBasicInformationUsingtheWAECollectorUINoteWAECollectorneverdynamicallyremovesnodesfromtheNodeList,eventhosethatarenolongerfoundduringthediscoveryprocess.
Thisavoidslosingnode-specificconfigurationsofnodesthatareremovedandthenlaterre-appearinthenetwork.
ToremoveanodefromtheNodeList,youmustmanuallydeleteitfromthelist.
Apply—Appliestheconfiguration,whichupdatestheNodeList.
NodeListTableColumnsTheNodeListtableidentifiesallnodesavailableforcollection,theirproperties,andstatus.
Ifvaluesareuser-configuredintheUI,theyarecolor-codedbasedonhowtheyareconfigured.
Ifthefieldisblue,theassociatednodewasderivedusingtheglobalrules.
Ifitisblack,thenodewasderivedfromtheoverriderulesTable2-8StatusColumnsTable2-9PropertyColumnsIconIncludeSNMPLoginMatchGreencheckIncludeinthecollectionprocessSuccessfulSNMPquerySuccessfulloginusingthemanagementIPaddressAmatchoccursifthenodeIPisoneoftheloopbacksconfiguredonthenodeorifthenodenameisidenticaltothenodenameinformedbySNMP.
RedcrossNolicenseorinvalidlicense,butthenodesarestillincludedinthecollectionUnsuccessfulSNMPqueryusingthemanagementIPaddressUnsuccessfulloginusingthemanagementIPaddressThereisnomatch.
ThenodeIPisnotoneoftheloopbacksconfiguredonthenodeandthenodenameisnotidenticaltothenodenameinformedbySNMP.
BluecrossExcludedfromcollectionbyglobalexclusionrulesNANANABlackcrossExcludedfromcollectionbyexplicitper-noderuleNANANAGraycircleNotdeterminedSNMPnotattemptedLoginnotattemptedNAPropertyDescriptionManagementIPNodemanagementIPaddressCommunityEncryptedSNMPv2ccommunitystring,whichisatextstringthatactsasapasswordUsernameNameusedbyWAECollectortoreachthenodePasswordPasswordusedinconjunctionwiththeusernamebyWAECollectortoreachthenode2-20CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingBasicInformationUsingtheWAECollectorUIConfigureWhattoCollectAfteryouhaveverifiedthenodelist,thenextstepistoidentifywhattocollectfromthesenodes.
TheWhattoCollectpageenablesyoutooptionallycollectproperties,traffic,BGPconnectivity,andVPNs.
TheinformationcollectedforeachobjectpopulatestheplanfiletablesforuseinWAEapplications.
Nodenamescollectedfromthenetworkoftenhavelongsuffixesthatarethesameforallnodes.
Thispageenablesyoutoremovethesesuffixes,actingonallnodesinthecollectionprocess,makingformorereadableplanfilesandWAELivedata.
Thepagealsoprovidesafeaturethatenablesyoutosethowlongtokeepinactiveinterfacesandcircuitsfromtheplanfile,thuskeepingplanfilesuptodate.
Step1FromtheWAEUI,selectWAECollector>Collection>WhatToCollect.
Step2SelecttheBasicorBGP/VPNtabandentertheapplicableinformation.
SeeTable2-10forfielddescriptions.
NoteWhileallfieldsareoptional,youmustselectInterfaces,LSPs,BGP,orVPNtocollectanydata.
Afterconfiguringthesefields,clickApply.
Step3(Optional)IfyouwanttoconfigurecontinuousLSPcollectionortrafficpolling,followthestepsdescribedinConfigureContinuousPollingandCollectionintheWAECollectorUI.
Step4(Optional)Ifyouwanttoaddoptionstoexistingcommandsoraddnewcommands,selecttheAdvancedtab.
Thisfeatureisonlyforadvancedusers.
Modifyingtheconfigurationcanbreakthecollectionprocess.
Newcommandsmustbeonlyforcollectionpurposes.
Thevalidationprocessdoesnotguaranteethatthemodifiedconfigurationwillwork.
Consultyoursupportrepresentativeforassistance.
NodeIPRouterIDHostnameNodeIDVendorRoutervendorModelRoutermodelnumberOSRouteroperatingsystemandversionLastIGPUpdateMostrecenttimestampofwhenthenodewasincludedinanIGPcollectionPropertyDescriptionBasicpropertiesandtraffic–Nodes–Interfaces–Interfacesqueues–RSVPTELSPs–LSPsBGPconnectivityLayer3VPNsandtraffic2-21CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingBasicInformationUsingtheWAECollectorUINoteAddinganoptiontoacommandthathasanoptionwiththesamenameoverwritestheexistingone.
Therefore,alwaysuseuniqueoptionnames.
Ifusingcontinuouspolling,optionsaddedtoSNMP_POLLareignored.
Ifaddinglogincommands,youmustenableloginthroughtheLoginAccessoptionontheNodeAccesspage(seeViewandManagetheNodeList).
Step5Schedulethecollection.
Formoreinformation,seeScheduletheCollection.
WhatToCollectBasicFieldDescriptionsTable2-10FieldDescriptionsforWhatToCollectWhatToCollectTabDescriptionBasicInterfacesClickthecheckboxtocollectivelyidentifyeachinterface.
Forexample,aninterface'spropertiescouldincludeitsinterfacename,capacity,IGPmetric,andTEmetric.
Interfaces:IncludeQueuesThelistofinterfacequeuesconfiguredontherouter,togetherwithper-queuetrafficmeasurements.
Interfaces:TrafficIncomingandoutgoingtrafficonaninterfaceinMbps.
Interfaces:CounterPollingPeriodTheintervals(inseconds)betweensuccessivetrafficcounterpolls.
LSPsClickthecheckboxtocollectivelyidentifyeachLSP.
Forexample,anLSP'spropertiescouldincludeitsdestination,setupbandwidth,andtheactualpathoftheLSP.
LSPs:Non-PCEPLSPsLSPsthatarediscoveredusingSNMP.
NoteIfyouwanttosetupcontinuouscollectionfortheseLSPs,thenclickthischeckbox.
FormoreinformationseeConfigureContinuousPollingandCollectionintheWAECollectorUI.
LSPs:PCEPLSPsLSPsthataremanagedbyWAEordelegatedtoWAE.
LSPdelegationiswhenanode(router)grantsWAEtherighttoupdatetheLSPattributesononeormoreLSPs.
NoteIfyouwanttosetupcontinuouscollectionfortheseLSPs,thenclickthischeckboxandenablePCEPcollectionusingthestepsdescribedinConfigureContinuousPollingandCollectionintheWAECollectorUI.
2-22CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingBasicInformationUsingtheWAECollectorUILSPs:TrafficOutgoingtrafficonanLSPinMbps.
Counterpollingperiod—Theintervals(inseconds)betweensuccessiveWAECollectortrafficcounterpolls.
ThisvaluemustbelowerthantheLSPcounterupdateperiod.
NoteIntervalcollectionpollstraffictwiceduringthecollectionwindow.
Thetrafficstatisticsforthosetwotimeperiodsareaveragedandaddedtotheplanfilsasthetraffic.
Theamountoftimeforeachpollingintervalissethere.
Numberofnodeswithdelayedcounterupdate—ThenumberofnodesthathavecountersasspecifiedintheSelectNodesfield.
CertainroutervendorsandmodelsdonotcontinuouslyupdateLSPpollingcounters.
ForaccurateLSPpolling,WAECollectorneedstoknowwhichnodeshavedelayedcountersandwhattheupdateperiodisinordertocorrectlycomputetheLSPtraffic.
UsetheLSPsectiontospecifythesubsetofrouterswithdelayedcounterupdates,andtospecifytheupdatedelay.
ThenodesaredefinedwithregularexpressionswrittentofindnodeIPs,nodenames,vendors,orOS's.
Ifnovalueisset,thedefaultis0andcountersareignored.
SelectNodes—Specifywhichnodeshavedelayedcounterupdates.
ThisisspecifiedusingaregularexpressionmatchonanLSPproperty.
Clearnodes—Clearsselectionofnodeswithdelayedcounters,andclearsallselectionsmadewithintheLSPsection.
Counterupdateperiod—Theamountoftime(inseconds)betweenupdatestotheSNMPpollingcounter.
NotethisvaluemustbehigherthantheLSPcounterpollingperiod.
RemoveNodeNameSuffixesCommaseparatedlistofsuffixestoremovefromnodenames.
Thiscanmaketheplanfilemucheasiertoreadintheapplications.
Example:Thesuffixesacme.
netandacme2.
netfromallnodesinthecollectionprocess.
acme.
net,acme2.
netDaystoExpireInactiveNodesandCircuitsThenumberofdaysaninactivenodeorcircuitremainsintheplanfilebeforebeingremoved.
WhatToCollectTabDescription2-23CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingBasicInformationUsingtheWAECollectorUIConfigureContinuousPollingandCollectionintheWAECollectorUIContinuouspollingisavailableforinterfaces,queues,VPNs,andLSPs.
QueuesandVPNsusethesamepollingperiodasinterfaces.
TheWAENetworkInterface(NI)server(seeDataFlowAfterCollection)usesSNMPtocontinuouslypolltrafficfordiscoveredobjects.
Thestatisticsgatheredareusedtocalculatefrequent,ongoingtrafficaverages.
Thiscanbeusefulforkeepingtrafficstatisticsuptodateduringtheentirecollectionprocess,whichgenerallytakesasignificantlylongertimetorunthanasinglepollingperiod.
TheWAENIserveralsocontinuouslycollectsLSPsthatarecanbedeployedbyWAEordelegatedtoWAE.
(LSPdelegationiswhenanode(router)grantsWAEtherighttoupdatetheLSPattributesononeormoreLSPs.
)WhenconfiguredthroughtheWAECollectorUI,theWAENIservergeneratesaplanfileeveryfiveminutesbydefault.
ContinousPollingandCollectionExample:CounterPollingPeriod=120seconds(thisisconfiguredintheBasictab)DefaultTimeWindow=8minutesBGP/VPNBGPClickthecheckboxtoconfigurediscoveryofeBGPpeersandneighboringexternalAS's.
Ifdiscoveringmulti-hopBGP,youmustenableloginthroughtheLoginAccessoptionontheNodeAccesspage(seeConfigureNodeAccess).
WAECollectorcollectsbasicBGPinformationfromSNMP,butmayneedtologintospecificroutersifmulti-hopBGPisconfigured.
Youcanoptionallysetthesetobethesamecredentialsasusedbytheseedrouter.
Ifadefaultloginisnotpossible,thenconfiguretheloginaccessonaper-nodebasisfromtheNodeListpage(seeViewandManagetheNodeList).
BGP:BGPPeerProtocolSelecttodiscovereBGPpeersandneighboringexternalAS's.
OptionsincludesearchingforBGPpeersbasedonIPv4addresses,IPv6addresses,orboth.
BGP:MinimumIPv4PrefixLengthMinimumprefixlengthtoperformanIPv4subnetmatchfrom0to32.
BGP:MinimumIPv6PrefixLengthMinimumprefixlengthtoperformanIPv4subnetmatchfrom0to128.
BGP:Multi-hopDiscoverybyLoginLogintotherouterstodiscoverthehopsbetweenthem.
ThisloginmustbespecifiedontheNodeListpage(seeViewandManagetheNodeList).
VPNClickthecheckboxtodiscoverVPNsandtheirtraffic.
VPN:VPNTypeSelecttodiscoverLayer3VPNnodesandtheirtraffic.
VPNtrafficispolledatthesamefrequencysetintheCounterPollingPeriodfieldintheBasicpage.
WhatToCollectTabDescription2-24CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingBasicInformationUsingtheWAECollectorUIMaxExpansionoftheWindow=25%Every120secondstrafficispolled.
Theamountoftrafficaddedtotheplanfileistheaveragetrafficforthelast8minutes.
Ifthereareinsufficientcounterstocalculatetheaverage,thewindowisextendedby2minutes(25%of8minutesis2minutes).
PrerequisitesNodediscoveryhasbeenconfigured.
NodeListisavailable.
TheWAENIservicemustberunning.
Ifitisnotrunning,enterthefollowingcommand:servicewae-nistartForContinuousCollectionfielddescriptions,seeTable2-11.
Step1FromtheWAEUI,selectWAECollector>Collection>WhatToCollect>ContinuousCollectiontab.
Step2Toenablecontinuoustrafficcollection,clicktheContinousPollingcheckboxandenteroracceptdefaultoptions.
Step3ToenablecontinuousLSPdiscovery,clicktheLSPCollectioncheckbox.
NoteThisoptionisavailableonlyifLSP(Non-PCEPand/orPCEP)collectionisenabledfromtheBasictab.
Whenthisoptionisenabled,continuoustrafficcollectionisautomaticallyenabled.
Step4ConnecttotheWAENIserverbyenteringServerAccessandServerConfigurationdetailsoracceptdefaultentries.
Step5IntheWAENetworkInterfaceServerAccessarea,clickApply.
Step6ClicktheRefreshicontoverifytheWAENIserverisrunningandreachable.
Ifitisnot,verifythatyoucorrectlyconfigureditspassword,startedtheserver,andcorrectlyenteredserverinformation.
NoteStatusoftheWAENIserverdoesnotautomaticallyrefresh.
Youmustclickthisrefreshicontoseethelateststatus.
Step7InthemainContinuousCollectiontab,clickApply.
Step8Schedulethecollection.
Formoreinformation,seeScheduletheCollection.
2-25CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingBasicInformationUsingtheWAECollectorUIContinuousCollectionFieldDescriptionsTable2-11ContinuousCollectionFieldDescriptionsFieldDescriptionContinuousPollingDefaultTimeWindowTheamountoftime,inminutes,overwhichtocalculate(average)thepolledtrafficstatistics.
Thiswindow(calculationperiod)startsatthetimetheplanfileisgeneratedandgoesbackwardstogetthestatistics.
Forinstance,iftheplanfileisgeneratedat8:00AMandtheDefaultTimeWindowis10minutes,theplanfilegeneratedusesstatisticsfrom7:50AMto8:00AM.
Example:Ifsetto5(300seconds),todeterminetheincomingpacketerrorrate,WAECollectortakestheaverageoftheseincomingpacketerrorsoverthelast5minutes(differenceinincomingpacketerrorsoverthe5-minuteinterval/differenceinthetimestampsofthecollectionsofthesereadings).
MaxExpansionoftheWindowTherearetimesinwhichaveragestatisticscannotbecalculated.
Forinstance,routerresponsetimemightbeslowenoughthattheWAENIservercannotgetsufficientdata.
ThisfieldcreatesasafetynetforsuchinstancesbygivingtheWAENIservermoretimefromwhichtocollectdata.
Thevalueisthepercentagebywhichtoexpand(addto)theamountoftimesetintheDefaultTimeWindowfieldifnostatisticsarecollected.
Thelapsesinstatisticscollectiondonothavetobesynchronousforthisparametertoapply.
Example:IftheDefaultTimeWindowis10minutesandtheMaxExpansionissetto50%,thewindowforcalculatingaveragescanbeexpandedupto5minutes(50%of10minutes)intheeventnostatisticsareavailableatanytimeduringthe10-minutewindow.
LSPCollectionCollectionIntervalTheamountoftimeforeachpollinginterval.
WAENetworkInterfaceServerAccessURLEnterthehostnameorIPaddressoftheserverthatisrunningcontinuouspolling.
IftheCollectorserverandWAENIserverareonthesamedevice,youcanuselocalhost.
PortEntertheportnumberoftheserverthatisrunningcontinuouspolling.
Thedefaultis61617.
Username/PasswordEntertheusernameandpasswordthatgivesyouaccesstotheserverthatisrunningcontinuouspolling.
Botharecasesensitive.
Thedefaultusernameis"admin,"andthedefaultpasswordis"cariden.
"Ifthepasswordhaschangedandyoudonotknowit,contactyouradministratororsupportrepresentative.
2-26CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingBasicInformationUsingtheWAECollectorUIScheduletheCollectionOnceyouhavethenodelistinplaceandhavedefinedwhatyouwanttocollectonthesenodes,thefinalstepintheconfigurationprocessistoschedulethecollectionandstartit.
Notethatacollectionisalsocalledasnapshot.
Onceacollectioninstance(snapshot)isstopped,anewcollectionautomaticallystartsatthenextscheduledcollectionintervalunlessyouarerunningasinglecollection.
IftheCollectorserverisstopped,thecollectionprocessautomaticallyresumesoncetheserverisrestarted.
IfcontinuouslypollingthetrafficorifcontinuouslycollectingPCEPLSPs,thatpollingorcollectionisnotaffectedbystoppingtheCollectorserver.
ThefirsttimeyourunacollectionorifyouhavemadesignificantchangestotheNodeListrunthecollectiononceandthenchecktheStatuspageforwarningsorerrorstodeterminewhereyoumightneedtofurtherimprovethecollection.
Oncethecollectionprocessisstarted,theStatusandLogspagesareupdatedwithwarningsanderrorsastheyoccur.
Thecurrentstateisdisplayedinthetop,rightofthescreen.
Step1FromtheWAEUI,selectWAECollector>Collection>Schedule.
Step2Configuretheschedulingoptionsorleavethedefaultvalues,andclickApply.
SeeTable2-12forfielddescriptons.
Step3Tostartorendcollection,clickoneofthefollowingbuttons:Start—Startsthecollectionprocessusingtheconfiguredschedulingoptions.
Stop—Terminatesascheduledcollection.
RunOnce—Startsthecollection,butitonlyrunsonetime.
ScheduleFieldDescriptionsTable2-12FieldDescriptionsforScheduleFieldDescriptionStartnewsnapshoteverySpecifyhowoftenyouwantthecollectionprocesstorun(inminutes).
Thedailycollectiontimesarecomputedas00:00UTConthehour.
Forexample,ifyousetthisto16,collectionwouldoccurat16minutesafterthetopofthehour,32,48,andthenagainatthetopofthenexthour.
CollectsnapshotsSpecifywhenyouwantthecollectionprocesstorun:throughoutthedayoruptothreespecifiedtimesperiods.
Forexample,ifyouknowthenetwork'speaktraffictimesandyouwanttorunsimulationsonthistrafficinWAEDesign,youcouldcollectonlyatthosepeak-trafficintervals.
Tospecifyatimeperiodselectarow,andthenmoveeithersideoftheslidingbartosetthestartandendtimes.
Overlappingtimeperiodsarenotpermitted.
2-27CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingBasicInformationUsingtheWAECollectorUIViewCollectionandWAECollecterServerStatusDetailsYoucanviewlocalCollectorserverinformationusingtheStatuspage.
ThispagedoesnotreportonthestatusoftheWAENetworkInterface(NI)server.
ForalleventlogsofallserversinanHAenvironment,gototheWAEStatistics>Eventspage.
Fordiagnosticandprocessstatusinformationforallservers,gototheWAEStatistics>DiagnosticsandWAEStatistics>Processespage,respectively.
Step1FromtheWAEUI,selectWAECollector>Collection>Status.
Step2Selectoneofthefollowingtabstoviewcollectionandstatusdetails:LastSnapshotStatus—Thistabgivesyouaquicksummaryofwhatwascollectedinthelastcollectionprocess(snapshot),aswellasthesnapshot'sdurationandwhethertherewereanylicenseviolations.
Ifyouarerunningscheduledcollections,itdisplaysthenexttimeacollectionwillrun.
ClickingtheDownloadDiagnosticbuttoncreatesa.
zipfilecontaininginformationtohelptroubleshootthelastcollectionbythelocalCollectorserver.
IfcallingCiscoforassistance,itisrecommendedthatyoue-mailthisfiletoyoursupportrepresentative.
CollectionMetrics—Thistabshowsmetricsforallcollectionsforthelast30days.
Dailymetricsarekeptforthetotalnumberofhoursdatawascollected,thenumberofcollections,andwhethertherewereanylicenseviolations.
Metricsalsoincludetheminimum,maximum,andaveragecollectionduration,whichcouldbeusefulfortroubleshootingpurposesorforadjustingfuturecollectionintervals.
SkippedsnapshotsbeforeterminatingCollectioninstancesmightrunlongerthanspecifiedintheStartNewSnapshotEveryfield.
Toensuredatacollectioncontinues,enteranumbertospecifyhowmanynewcollectioninstances(snapshots)toskipbeforeterminatingtheonethatisrunning.
ThisenablesyoutopreventmultiplecollectioninstanCollectverbosediagnosticsClickcheckboxtospecifywhethertoincludeSNMPrecordingfiles.
ThesefilesareincludedwhenusingtheDownloadingDiagnosticsfeature,whichisavailableontheStatuspage.
DefaultloglevelDeterminestheminimumlevelofseverityinthemessagesthatyoucollectinthelogtextfile.
Fatal—AnyerrorthatisforcingashutdownoftheCollectorserver.
Error—Anerrorthatisfataltothecollectionprocess,butnottotheCollectorserveritself,suchastheinabilitytocollectanIGPdatabasefromtheseedrouterorbackupseedrouter.
Warn—Anythingthatcouldpotentiallycauseodditiesintheresults,suchasaswitchoverfromtheseedroutertothebackuprouter.
Info—Generallyusefulinformationsuchaswhenthecollectionprocessstartsandstops.
Debug—Informationthatisdiagnosticallyhelpful.
Trace—Tracesthecodetofindproblems.
FieldDescription2-28CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingBasicInformationUsingtheWAECollectorUIIfusingtheFilterfeaturetofinddurations,theincrementsareh,m,andsforhours,minutes,andseconds,respectively.
Donotenteraspacebetweenthenumberandtheincrement.
Example:Tofindsnapshotsthatlastedlongerthan15minutes,selectandenterthefollowing.
AvgDurationGreaterthan15mStatusSummary—Aftereachcollectionprocessfinishes,theStatusSummarytabshowstheerrorsandwarningsforthemostrecentlycompletedcollection.
–NodeSummary—Thistableshowserrorsandwarningsthatareattributableonlytospecificnodes,suchasanSNMPaccessfailure.
Toreadanerrororawarning,clickthenumberintheErrorcountorWarningcountcell.
–NodeIndependentIssues—Thistableshowserrorsandwarningsthatarenottiedtothediscoveryofnodes,butratherwiththecollectionandpost-collectionprocessingsteps.
Ifyouseethereareproblems,reviewtheNodeListtoverifynodesarereachableandincluded.
Iftheyarenot,tryalteringeithertheper-nodeoverriderulesortheglobalrules.
Ifyouarestillnotabletotroubleshootandcorrecttheproblem,downloadthediagnosticsandsendthemtoyourCiscosupportrepresentative.
ViewCollectorServerLogsYoucanviewalistofallerrorsandwarningssincetheCollectorserverwaslaststarted.
Itisasuper-setoftheinformationthatislistedontheStatuspage,whichisrelevantonlyforthelastcollectionTTheinformationonthispagepertainsonlytothelocalCollectorserver.
ThispagedoesnotlistlogsforcontinuouspollingorforcontinuouscollectionofPCEPLSPs.
Foralleventlogsofallserversinalocalordistributedenvironment,gototheWAEStatistics>Eventspage.
Fordiagnosticandprocessstatusinformationforallservers,gototheWAEStatistics>DiagnosticsandWAEStatistics>Processespages,respectively.
Torefreshthelistoflogswithoutrefreshingthebrowserpage,clicktheRefreshbuttoninthetoprightoftheLogstable.
Toviewlogs,gototheWAEUIandselectWAECollector>Collection>Logs.
SaveorLoadConfigurationsAconfigurationfilecontainsthediscoveredobjectsandproperties,aswellastheconfigurationsusedtodiscoverthem.
Step1FromtheWAEUI,selectWAECollector>Settings>Configurationtab.
Step2Selectoneofthefollowingoptions:LoadConfiguration—Overwritestheexistingconfigurationfile,andsetstheUIsettingstothoseusedtoconfigurethesavedcollection.
Ifneeded,youcanusethisoptiontoloadconfigurationfilesfromthelastmajorrelease.
SaveConfiguration—Savesthecurrentconfigurationfileto/etc/collector/server/configs.
Thedefaultinstallationdirectoryis/opt/cariden.
2-29CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingInformationUsingAugmentedCollectionResetConfiguration—ResetsallUIsettingstotheirdefaults,whichincludesemptyingthenodelist.
Thesecapabilitiescanbehelpfulwhenperformingupgradesorwhenyouneedtorecoverpreviousconfigurations.
CollectingInformationUsingAugmentedCollectionTheaugmentedcollectionmethodextendstheplanfilethataservercreatestoincludeadditionalcollectionandmodelingforuseinWAEDesignandWAEDesignArchive.
IfparsingconfigurationsforexplicitLSPpathsorcollectingMulticast,LDP,orflowtraffic,usetheaugmentedmethodofcollection.
Todeterminethebestcollectionmethodforyourpurposes,refertoTable2-3.
Theprocessbeginsbyconfiguringandrunningbasiccollection(seeCollectingBasicInformationUsingtheWAECollectorUI)andthenrunninganaugmentedsnapshot.
Ifyouenablecontinuouscollection,thenboththeCollectorserverandWAENIservermustcontinuetorun.
SeeFigure2-3foragraphicalrepresentationoftheaugmentedcollectionprocesswithcontinuouscollectionandpollingenabled.
Thereafter,configurethesnapshotfilestogetthisplanfilefromoneofthesetwoservers,augmentitwithadditionalnetworkdata,modeltheresulttovisualizethenetwork,andsaveitinanarchive.
Oneinstanceofcollectionmustfirstcomplete,andthereafterboththeserverandtheaugmentedsnapshotcanrunsimultaneously.
NoteTheinstructionsinthissectionusethearchive_inserttooltoinsertplanfilesintoanexternalarchive.
ForinformationonmanuallyinsertingplanfilesintoWAELive,seeAppendixA,"SnapshotExamples.
"2-30CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingInformationUsingAugmentedCollectionFigure2-3NetworkCollectionProcessUsingAugmentedCollectionwithContinuousPollingandCollectionEnabledNotesandLimitationsTheaugmentedcollectionmethodhasthefollowinglimitationsandnotableattributes:Usingaugmentedsnapshots,youcannotcollecthardwareinventorydata,collectdatafromanAlcatel-LucentSAMserver,oruseformulti-networkcollection.
Usethemanualmethodinstead.
ThismethodusesSNMPv2candSNMPv3authentication.
However,youmustusethemate_auth_inittooltoinitiatetheauthenticationfile.
AugmentedsnapshotscangettheplanfilesfromeithertheCollectorserverortheWAENIserver.
Severaloftheconfigurationstepsrequirethatyouconfigureoneserverortheother.
Intheaugmentedsnapshotfile,donotexecuteanycollectiontasksthatareavailablethroughtheWAECollectorUI,includingthedefaultonesoranythatareconfiguredthroughtheAdvancedConfigoption.
DonotexecuteSNMP_POLLoninterfaces,RSVP-TELSPs,orVPNsifyouarecollectingtrafficstatisticsforthemthroughoneoftheservers.
EnvironmentVariables$CARIDEN_ROOT—Locationoftheinstallation.
Bydefault,thisis/opt/cariden.
Thesetermsareinterchangeable.
407047DiscoveryAnalysisAugmentedSnapshotNetworkCollectionUsingWAECollectorUI(CollectorServer)WAELiveWAEDesignContinuousPollerIGPDiscoveryDemandDeductionCopyfromTemplateNodeCollectionInterfaceCollectionLSPCollectionBGPCollectionPlanfileWAENIServer2-31CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingInformationUsingAugmentedCollection$CARIDEN_HOME—DirectoryinwhichtheWAEDesign,WAELive,andWAECollectorexecutablesandbinariesareinstalled.
Thedefaultis/opt/cariden/software/mate/current.
WorkflowforCollectingInformationUsingAugmentedSnapshots(AugmentedCollection)BeforeYouBeginWerecommendthatyoubackupallyourconfigurationfiles.
Table2-13AugmentedCollectionConfigurationWorkflowConfigureCredentialsYoumustsetcredentialssothatthecollector_getplantoolcantalktotheserverfromwhichthesnapshotisgettingtheplanfile.
Bydefault,thesnapshotauthenticatestheCollectorserver.
NoteYouneedtoauthenticatetheWAENetworkInterface(NI)serverifusingitforcontinuousLSPcollectionortrafficpolling.
ThecredentialsfileusedfortheCollectorserverandWAENIservermustbedifferent.
BeforeYouBeginConfigureandrunatleastonenetworkcollectionusingtheWAECollectorUI(seeCollectingBasicInformationUsingtheWAECollectorUI).
StepTaskDescription/Notes1ConfigureandrunnetworkcollectionusingtheWAECollectorUI.
SeeCollectingBasicInformationUsingtheWAECollectorUI.
AccesstheUI:https://:8443/#collectorIfwebserviceisnotrunning,enterthefollowingcommand:servicewae-web-serverstartLogintotheUI.
defaultusername:admindefaultpassword:cariden2ConfigureCredentialsSetcredentialssothatthecollector_getplantoolcantalktotheserverfromwhichthesnapshotisgettingtheplanfile.
3PerformPre-SnapshotConfigurationTasksCreateanauthenticationfileusingthemate_auth_inittool,optionallyeditthenetworkaccessfile,andcreatetwosetsofsnapshotfilesforlateruse.
4ConfigureAugmentedSnapshotFilesEditthesnapshot_augment_collector.
txtandsnapshot_augment_collector.
incfilestocustomizecollection.
5InitializeArchive,CreateTemplate,RunCollectionsPostsnapshotconfiguration.
2-32CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingInformationUsingAugmentedCollectionStep1Runthecollector_getplantooloncetosettheserver'scredentialsforlateruseinthesnapshotfiles.
Theonlyrequirementistouse-set-credentialstrue.
collector_getplan-set-credentialstrueThedefaultcredentialfilepath,whichisconfigurable,is$WAE_ROOT/etc/credentials.
enc.
Tochangeit,usethe-credentials-fileoption.
Example:Setthe-set-credentialstotrueandchangethenameofthecredentials.
encfile.
collector_getplan-set-credentialstrue-credentials-file/opt/cariden/etc/creds.
encPerformPre-SnapshotConfigurationTasksBeforeeditingandrunningtheaugmentedsnapshots,youmustdothefollowingtasks:Step1Runmate_auth_inittocreateanauthenticationfile(auth.
enc)usedbySNMPandlogintools.
mate_auth_initThisisaninteractivetoolthatfirstpromptsyoutochoosetheSNMPversionandtherelevantparameters.
Forinformation,seeNetworkAuthenticationinChapter3,"AdvancedCollectionConfigurations.
"Step2Optional:Customizenetworkaccess.
Forinformation,seetheNetworkAccessFile.
Step3Fornewinstallations,copythedefaultsnapshot_augment_collector.
txtandsnapshot_augment_collector.
incfilestoworkingconfigurationfiles.
cp/opt/cariden/software/mate/current/etc/snapshot_augment_collector.
txt/opt/cariden/etccp/opt/cariden/software/mate/current/etc/snapshot_augment_collector.
inc/opt/cariden/etcIfthisisnotanewinstallation,youcanuseexistingaugmentedsnapshotfilesin/opt/cariden/etcandmakemodificationsnotedinthischapterasneeded.
ConfigureAugmentedSnapshotFilesNoteForinformationonconfiguringsnapshot.
txtand.
incfiles,seeSnapshotFiles.
NoteAbestpracticeistoaddonlyafewtaskstothesnapshotfiles,runthesnapshot,andcorrecttheerrors.
Thenrepeatthisprocessuntilyouhavebuiltthemodelofthenetworkthatyouneed.
Step1Editthesnapshot_augment_collector.
txtfile,whichcontainsthecollection,polling,modeling,andinsertiontaskstoperform.
Thisfilecontrolsthesequenceofexecutionandalsocontainsenvironmentvariablesofcommonvaluesusedinthesnapshot_augment_collector.
incfile.
a.
Definetheenvironmentvariablesinthesection.
EachparametermustbeseparatedfromitsvaluebyaTAB.
–Atminimum,youmustdefineunique,seed_router,home_dir,andcollector_url,andpreferablythebackup_router.
2-33CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingInformationUsingAugmentedCollection–Thecollector_urlmustbesettothelocationoftheserverURL.
Thedefaultishttps://localhost:8443,whichistotheCollectorserver.
IfusingtheWAENIserver,theportonwhichitlistensforincomingplansis8086.
Example:collector_urlhttps://localhost:8086b.
Ifneeded,edittheincludeenvironmentvariabletoreadthesnapshot_augment_collector.
incfilefrom$(home_dir)/etc.
include$(home_dir)/etc/snapshot_augment_collector.
incc.
KeepCOLLECTOR_GETPLANuncommentedasthefirsttask.
Eitherremoveorcommentoutalltasksusedindiscoveringthetopology.
IfyouaregettingtheplanfromtheWAENIserverthatispollingtraffic,alsoremoveorcommentoutalltasksthatpollfortrafficorcollectflows.
NoteDonotexecuteanycollectiontasksthatareperformedbytheCollectorserver,includingthedefaultonesoranythatareconfiguredthroughtheAdvancedConfigoptionavailablethroughtheWAECollectorUI.
DonotexecuteSNMP_POLLoninterfaces,RSVP-TELSPs,orVPNsifyouarecollectingtrafficstatisticsforthemthroughoneoftheservers.
Example:#FLOW_GETCOLLECTOR_GETPLAN#GET_CONFIGS#PARSE_CONFIGS#SNMP_FIND_VPN#SNMP_POLL#POLL_LDPd.
Definewhethertoexecuteflowcollection,definewhichtaskstoexecutetomodeltheplanfile,anddefineaninserttasktospecifywheretoinsertthefinalplanfiles.
Usethecommentstoenableordisableexistingtasks,andaddnewtasksifneeded.
Atminimum,uncommentthefollowingtasks.
Forinstructionsspecifictocollectingflowdata,refertoFlowCollectioninChapter3,"AdvancedCollectionConfigurations.
"–COPY_FROM_TEMPLATE—Copiesselectedvaluesfromthetemplateplanfileintothenewlygeneratedplan,whilepreservingnetworkconfigurationinformation.
–ARCHIVE_INSERT—Storesthecompletedplanfileinanexternalplanfilearchive.
Thisarchivecanbeaccessedbyalltheapplications.
Example:#BUILD_MODELMATE_CONVERTCOPY_FROM_TEMPLATEDMD_MESH_CREATORDMD_DEDUCT#MATE_SIMARCHIVE_INSERT#ML_INSERTStep2Asneeded,editthesnapshot_augment_collector.
incfiletomodifyandaddtoolsthataretobecalledfromthesnapshot_augment_collector.
txtfile.
Forinformationonanytool,refertoits-helpoutput.
Forinformationonhowtoeditthesnapshot_augment_collector.
inc,seeSnapshotFiles.
2-34CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingInformationUsingAugmentedCollectionForcollector_getplan,keep-set-credentialstofalsesothatthesnapshotprocessdoesnotstoptoaskforcredentials.
Youonlyneedtosetthistotrueonce,whichyouhavealreadydone.
The-credentials-filemustmatchthenamethatyouspecifiedwhenyoufirstsetthecredentials(aspertheConfigureCredentialssection).
InitializeArchive,CreateTemplate,RunCollectionsNoteTextinreferstoenvironmentvariablesthatyousetinthesnapshot.
txtfile.
Step1Runarchive_inittoinitializethearchiverepositoryintowhichtheplanfileswillbeinserted.
archive_init-archive$WAE_ROOT/archives/-archiveStep2IfcollectingdataforWAEDesignArchive,usethearchive_configtooltoaddthearchiverepository.
Atthesametime,setupthetemplatedirectoryandtemplatename.
archive_config-actionadd-name-path$WAE_ROOT/archives/-archive-template-dir$WAE_ROOT/data-template-name-template.
plnStep3Createanemptytemplate.
Youcanignorethewarningsbecausetheresultingfileisanemptytemplatefile.
echo|mate_convert-plan-file--out-file$WAE_ROOT/data/-template.
plnNotethatWAELiveautomaticallycreatesthetemplate.
plnfromthemostrecentlycollectedplanfileifnotemplateexists.
Therefore,forWAELive,thisstepisnotarequirement.
Step4Testthesnapshotprocessbyrunningitasasingletooltocollectnetworkdata.
Checktheoutputforerrors,fixthemifneeded,andrerunthistestuntilitissuccessfulbeforeproceeding.
snapshot-config-file$WAE_ROOT/etc/snapshot_augment_collector.
txtStep5Createacronjobthatrepeatstheprocessofcreatingsnapshotsandinsertingthemintothearchiverepository.
NoteBothCARIDEN_ROOTandCARIDEN_HOMEvariablesmustbedefinedfromwithinthecrontab.
YoucannotuseCARIDEN_HOME=$CARIDEN_ROOT/software/mate/current.
Openthefileasfollows.
crontab-eAttheendofthefile,addthefollowinglines.
CARIDEN_ROOT=/opt/caridenCARIDEN_HOME=/opt/cariden/software/mate/current0,15,30,45CARIDEN_HOME/bin/snapshot-config-file$CARIDEN_ROOT/etc/snapshot_augment_collector.
txt2>&12-35CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionNetworkInformationUsingManualCollectionCollectionNetworkInformationUsingManualCollectionThemanualcollectionmethodusessnapshot.
txtandsnapshot.
incfilestodiscoverthenetwork,modeltheplanfiles,andinserttheplanfilesintoanarchiverepository.
WhilethismethodcancollecteverythingthatcanbecollectedthroughtheCollectorserveroraugmentedmethod,unlessoneofthefollowingconditionsapplies,itisrecommendedthatyouuseeithertheCollectorserveroranaugmentedcollectionmethodforeaseofmaintainability.
MultiplenetworksforuseintheWAELiveapplication.
SAMserver(SAM_GETPLAN)integration.
Otherhighlycustomized,advanced,ornon-standardcollectionmethodsthatrequireadditionalscriptingorcustomizedsetups;thisincludescollectionofdifferentdataatdifferentfrequencies.
Todeterminethebestcollectionmethodforyourpurposes,refertoCollectionbyConfigurationMethod.
Thischapterreferencesthefollowingterms.
$WAE_ROOT—Locationoftheinstallation.
Bydefault,thisis/opt/cariden.
$CARIDEN_HOME—DirectoryinwhichtheWAEDesign,WAELive,andWAECollectorexecutablesandbinariesareinstalled.
Thedefaultis/opt/cariden/software/mate/current.
NoteAllinstructionsandexamplesassumeyouused/opt/caridenasthedefaultinstallationdirectory.
Ifyoudidnot,thensubstituteyourinstallationdirectoryfor/opt/cariden.
WorkflowforCollectingNetworkInformationUsingManualCollectionBeforeYouBeginWerecommendthatyoubackupallyourconfigurationfiles.
Table2-14ManualCollectionConfigurationWorkflowPre-SnapshotConfigurationBeforeeditingandrunningthemanualsnapshots,youmustdothefollowingtasks:Step1Runmate_auth_inittocreateanauthenticationfile(auth.
enc)usedbySNMPandlogintools.
StepTaskDescription/Notes1PerformPre-SnapshotConfigurationTasksCreateanauthenticationfileusingthemate_auth_inittool,optionallyeditthenetworkaccessfile,andcreatetwosetsofsnapshotfilesforlateruse.
2ModifySnapshotFilesEditthesnapshotfilestocustomizecollection,polling,modeling,etc.
Forexamplesofsnapshotconfigurations,seeAppendixA,"SnapshotExamples.
"3InitializeArchive,CreateTemplate,RunCollectionsPostsnapshotconfiguration.
4ConfigureContinousPollingandCollectionUsingManualCollectionIfusingthedatainapplications,followthestepsdescribedinthistask.
2-36CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionNetworkInformationUsingManualCollectionmate_auth_initThisisaninteractivetoolthatfirstpromptsyoutochoosetheSNMPversionandtherelevantparameters.
Forinformation,seethe"NetworkAuthentication"sectioninChapter3,"AdvancedCollectionConfigurations.
"Step2Optional:Customizenetworkaccess.
Forinformation,seethe"NetworkAccess"sectioninChapter3,"AdvancedCollectionConfigurations.
"Step3Fornewinstallations,copythedefaultsnapshot.
txtandsnapshot.
incfilestoworkingconfigurationfiles.
cp/op.
t/cariden/software/mate/current/etc/snapshot.
txt/opt/cariden/etccp/opt/cariden/software/mate/current/etc/snapshot.
inc/opt/cariden/etcIfthisisnotanewinstallation,youcanuseexistingsnapshotfilesin/opt/cariden/etc,andmakemodificationsnotedinthischapterasneededModifySnapshotFilesFormoreinformationonhowtomodifysnapshotfiles,seeSnapshotFiles.
NoteAbestpracticeistoaddonlyafewtaskstothesnapshotfiles,runthesnapshot,andcorrecttheerrors.
Thenrepeatthisprocessuntilyouhavebuiltthemodelofthenetworkthatyouneed.
Step1Editthesnapshot.
txtfile,whichcontainsthecollection,polling,modeling,andinsertiontaskstoperform.
Thisfilecontrolsthesequenceofexecutionandalsocontainsenvironmentvariablesofcommonvaluesusedinthesnapshot.
incfile.
Atminimum,youmustdefineunique,seed_router,igp,andhome_dir,archive_dir,andpreferablythebackup_router.
Bydefault,thearchive_inserttoolusesthearchive_direnvironmentvariableswheninsertingplanfilesintoanexternalarchive.
Bestpracticeistousethedefault.
Example:archive_dir$(home_dir)/archivesTomanuallyinsertplanfilesintotheWAELiveMaparchive,createanewenvironmentvariabletospecifythearchive.
NotethatthelocationoftheexternalarchiveandtheMaparchivemustbedifferent.
Example:map_archive_dir$(home_dir)/data/mldataIfneeded,edittheincludeenvironmentvariabletoreadthesnapshot.
incfilefrom$(home_dir)/etc.
include$(home_dir)/etc/snapshot.
incStep2Definewhichtaskstoexecutetodiscoverthenetwork.
Usethecommentstoenableordisableexistingtasks,andaddnewtasksifneeded.
Forexamples,seeAppendixA,"SnapshotExamples.
"ForinstructionsspecifictocollectingflowdataorSAMdata,refertoChapter3,"AdvancedCollectionConfigurations.
"IfyouarediscoveringIS-IS,dothefollowing:UncommenttheLOGIN_FIND_IGP_DBtask,whichdiscoversabasicIGPtopologybyloggingintotheseedrouterandparsinganIS-ISdatabase.
(Touncommentatask,removethe#sign.
)2-37CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionNetworkInformationUsingManualCollectionAddacomment(#)tothebeginningoftheSNMP_FIND_OSPF_DBtask.
Example:#SAM_GETPLAN#SNMP_FIND_OSPF_DBLOGIN_FIND_IGP_DBSNMP_FIND_NODESSNMP_FIND_INTERFACES#GET_CONFIGS#PARSE_CONFIGS#FIND_BGPSNMP_FIND_RSVPSNMP_FIND_VPNStep3Definewhichtaskstouseforpollingtraffic.
Example:SNMP_POLL#POLL_LDPStep4Definewhichtaskstoexecutetomodeltheplanfile.
Usethecommentstoenableordisableexistingtasks,andaddnewtasksifneeded.
IfnotusingWAELive,atminimum,uncommentCOPY_FROM_TEMPLATE.
Example:#BUILD_MODELMATE_CONVERTCOPY_FROM_TEMPLATEDMD_MESH_CREATORDMD_DEDUCT#MATE_SIMStep5Definewhichtaskstoinsertplanfiles.
Usethecommentstoenableordisableexistingtasks,andaddnewtasksifneeded.
Forexamples,seeAppendixA,"SnapshotExamples.
"ARCHIVE_INSERT—Insertthecompletedplanfileintoanexternalplanfilearchivethatcanbeaccessedbyalltheapplications.
.
ML_INSERT—ManuallyinsertdataintotheWAELivedatastore.
MAP_ARCHIVE_INSERT—ManuallyinsertplanfilesintotheMaparchive.
UseonlyifusingML_INSERTandonlyifusingtheMapcomponent.
Youmustmanuallyaddthistothesnapshot.
incfile.
.
Example:ARCHIVE_INSERTML_INSERTMAP_ARCHIVE_INSERTStep6SometimestheIPmanagementaddressesthatarediscoveredfromthedevicesaredifferentthantheIPmanagementaddressesthatareneededtocommunicatewiththerouters.
Ifso,youneedtocreateatablethatliststheproperIPmanagementaddresses,andthenusethetab_mergertooltoinserttheIPmanagementaddressesduringthesnapshotprocess.
Forinformation,contactyourCiscorepresentative.
2-38CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionNetworkInformationUsingManualCollectionStep7Asneeded,editthesnapshot.
incfiletomodifyandaddtoolsthataretobecalledfromthesnapshot.
txtfile.
YoumustaddadefinitionforMAP_ARCHIVE_INSERTifyouaddedthattask.
InitializeArchive,CreateTemplate,RunCollectionsNoteTextinreferstoenvironmentvariablesthatyousetinthesnapshot.
txtfile.
Step1Runarchive_inittoinitializethearchiverepositoryintowhichtheplanfileswillbeinserted.
Ifyouareusingarchive_inserttomanuallyinsertplanfilesintotheWAELiveMaparchive,thisisnotarequiredstep.
archive_init-archive$WAE_ROOT/archives/-archiveStep2IfcollectingdataforWAEDesignArchive,usethearchive_configtooltoaddthearchiverepository.
Atthesametime,setupthetemplatedirectoryandtemplatename.
archive_config-actionadd-name-path$WAE_ROOT/archives/-archive-template-dir$WAE_ROOT/data-template-name-template.
plnStep3Createanemptytemplate.
Youcanignorethewarningsbecausetheresultingfileisanemptytemplatefile.
echo|mate_convert-plan-file--out-file$WAE_ROOT/data/-template.
plnNotethatWAELiveautomaticallycreatesthetemplate.
plnfromthemostrecentlycollectedplanfileifnotemplateexists.
Therefore,forWAELive,thisstepisnotarequirement.
Step4Testthesnapshotprocessbyrunningitasasingletooltocollectnetworkdata.
Checktheoutputforerrors,fixthemifneeded,andrerunthistestuntilitissuccessfulbeforeproceeding.
snapshot-config-file$WAE_ROOT/etc/snapshot.
txtStep5Createacronjobthatrepeatstheprocessofcreatingsnapshotsandinsertingthemintotheappropriatearchiverepository.
NoteBothCARIDEN_ROOTandCARIDEN_HOMEvariablesmustbedefinedfromwithinthecrontab.
YoucannotuseCARIDEN_HOME=$CARIDEN_ROOT/software/mate/current.
Openthefileasfollows.
crontab-eAttheendofthefile,addthefollowinglines.
CARIDEN_ROOT=/opt/caridenCARIDEN_HOME=/opt/cariden/software/mate/current0,15,30,45CARIDEN_HOME/bin/snapshot-config-file$CARIDEN_ROOT/etc/snapshot.
txt2>&12-39CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionNetworkInformationUsingManualCollectionConfigureContinousPollingandCollectionUsingManualCollectionThemanualcollectionmethodusessnapshot.
txtandsnapshot.
incfilestodiscoverthenetwork,modeltheplanfiles,andinserttheplanfilesintoanarchiverepository.
Optionally,itcanpushdiscoveredtopologytotheWAENetworkInterface(NI)server(usingcollector_pushplan),whichcanthencontinuouslypolltrafficstatisticsand/orcontinuouslydiscoverPCEPLSPs;thereafter,anaugmentedsnapshotcanretrievethatplanfilefromtheWAENIserverforfurtherprocessing(usingcollector_getplan).
Ifconfigured,WAECollectorcontinuouslycollectsLSPsmanagedbyWAE.
ItalsocontinuouslypollsLSPandinterfacestatisticsthataremadeavailableviaSNMP.
Thischapterreferencesthefollowingterms.
$CARIDEN_ROOT—Locationoftheinstallation.
Bydefault,thisis/opt/cariden.
$CARIDEN_HOME—DirectoryinwhichtheWAEDesign,WAELive,andWAECollectorexecutablesandbinariesareinstalled.
Thedefaultis/opt/cariden/software/mate/current.
NoteAllinstructionsandexamplesassumeyouused/opt/caridenasthedefaultinstallationdirectory.
Ifyoudidnot,thensubstituteyourinstallationdirectoryfor/opt/cariden.
NoteYoucannotusesam_getplanwhenusingtheWAENIserver.
NoteThischapterdescribesthefullprocessofbothpushingplanfilestoandretrievingthemfromtheWAENIserver.
Ifyouareusingcollector_getplaninanaugmentedsnapshotafterhavingconfiguredtheCollectorservertopushplanfilestotheWAENIserver,refertoCollectingInformationUsingAugmentedCollection.
WorkflowforConfiguringContinuousPollingandCollectionUsingManualCollectionStep1Bestpractice:Backupallconfigurationfilesbeforeyoubegin.
Step2SetuptheWAENIserver.
a.
ConfigureContinuousCollectionParametersontheWAENIServerb.
ConfigureAuthenticationandStartServerStep3ExecutePre-SnapshotConfigurationsteps,whichincludecreatinganauthenticationfile,optionallyeditingthenetworkaccessfile,andcreatingtwosetsofsnapshotfilesforlateruse.
Step4CreateSnapshottoPushPlanFiles.
a.
ConfigurePushCredentials.
b.
ModifyPushsnapshot.
txttorunonlydiscoverytasks.
c.
ModifyPushsnapshot.
inctoincludecollector_pushplan.
2-40CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionNetworkInformationUsingManualCollectionNoteIfyoudonotneedtorunfurthertasks,suchascreatingdemandmeshesandrunningDemandDeduction,skiptoStep7.
Step5CreateSnapshottoGetPlanFiles.
a.
ConfigureGetCredentials.
b.
ConfigureGetCredentialstorunpost-discoverytasks.
c.
ModifyGetsnapshot.
inctousecollector_getplan.
d.
InitializeArchiveandCreateTemplate.
Step6RunCollections.
Step7Ifusingthedatainapplications,executetheCollectingHardwareInventorysteps.
ConfigureContinuousCollectionParametersontheWAENIServerEditthe$WAE_HOME/wae-ni/etc/collection.
cfgfiletotelltheWAENIserverwhethertocontinuouslydiscoverLSPs,aswellaswhattopoll,howfrequentlytopoll,andtheamountoftimetousewhenaveragingthestatistics.
NoteDonoteditthisfileifyouarecollectingnetworkinformationusingtheWAECollecterUI.
ContinuouslyPollTrafficFieldDescriptionsNoteContinuouspollingappliestointerfacesandLSPstatisticsthataremadeavailableviaSNMP.
ParameterDescriptionenablePcepLspCollectionTrue=ContinuouslycollectPCEPLSPs.
False=DonotcontinuouslycollectPCEPLSPsParameterDescriptionenableInterfaceStatsCollectionTrue=Continuouslypollinterfacetraffic.
False=Donotpollinterfaces.
interfaceStatsCollectionPeriodInSecsTheintervals(inseconds)betweensuccessiveinterfacetrafficcounterpolls.
Theminimumvalueis60seconds.
enableLspStatsCollectionTrue=ContinuouslypollLSPtraffic.
False=DonotpollLSPs.
lspStatsCollectionPeriodInSecsTheintervals(inseconds)betweensuccessiveLSPtrafficcounterpolls.
Theminimumvalueis60seconds.
2-41CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionNetworkInformationUsingManualCollectionenableQosStatsCollectionTrue=Continuouslypollinterfacequeuetraffic.
False=Donotpollinterfacequeues.
enableVpnStatsCollectionTrue=ContinuouslypollVPNtraffic.
False=DonotpollVPNs.
statsComputingMinimumWindowLengthInSecsThisdefinestheminimumamountoftime,inseconds,overwhichtogenerateaveragesofthepolledtrafficstatistics.
Forexample,ifsetto300,todeterminetherateofincomingpacketerrors,theWAENIservertakestheaverageoftheseincomingpacketerrorsoverthelast300seconds.
Thesetrafficstatisticsareaddedtotheplanfileeachtimeitisgenerated.
Theminimumvalueis300seconds.
statsComputingMaximumWindowLengthInSecsTherearetimesinwhichaveragestatisticscannotbecalculated.
Forinstance,routerresponsemightbeslowenoughthattheWAENIservercannotgetsufficientdata.
ThisparametercreatesasafetynetforsuchinstancesbygivingtheWAENIservermoretimefromwhichtocollectdata.
Thevalueisthepercentagebywhichtoexpand(addto)theamountoftimesetinthestatsComputingMinimumWindowLengthInSecsparameterifnostatisticsarecollected.
Thelapsesinstatisticscollectiondonothavetobesynchronousforthisparametertoapply.
Example:IfthestatsComputingMinimumWindowLengthInSecsis400secondsandthestatsComputingMaximumWindowLengthInSecsparameterissetto25%,thewindowforcalculatingaveragescanbeexpandedupto100seconds(25%of400seconds)intheeventnostatisticsareavailableatanytimeduringthe10-minutewindow.
rawCounterTtlInMinsDefinestheamountoftimerawcountersarekeptinminutes.
Theminimumvalueis5minutes.
lspDiscoveryCollectionPeriodInSecsSetstheLSPcollectionperiodinseconds(minimumis60seconds).
ThissettingindicateshowoftenthecontinuouspollerwilltrytodoLSPdiscovery.
lspDiscoveryUseCalculatedHopsSpecifieswhethertostorecalculatedhopsoractualhopsintheplanfile.
Thecontinuouspollercollectsbothduringdiscovery.
True—Storescalculatedhops,ifavailable,intheplanfile.
False—Storesactualhopsintheplanfile.
lspDiscoveryUsePcepSignaledNameSpecifieswhethertousethePCEPsignalednamewhilestoringtheLSPintheplanfile.
True—PCEPsignalednameisusedastheLSPnameinplanfile.
False—TheLSPnamethatissetontherouterisusedasthenameintheplanfile.
NoteIfsettotrue,theCiscorouterLSPnameisstoredastunnel-te5.
2-42CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionNetworkInformationUsingManualCollectionCommonParametersConfigureAuthenticationandStartServerStep1ConfiguretheauthenticationfortheWAENIserver.
defaultusername:admindefaultpassword:caridenStep2Ifitisnotrunning,starttheWAENIserver.
Checkthestatus:servicewae-nistatusStart:servicewae-nistartPre-SnapshotConfigurationNoteFordemonstrationpurposes,thischapterreferencestwosetsoffiles:snapshot-pushplanandsnapshot-getplan.
txtand.
incfiles.
Youcannamethesefileswhateveryouchoose.
Therefore,wheretextstates,forexample,snapshot-pushplan.
txt,thismeansthesnapshot.
txtfilethatispushingtheplanfiletotheWAENIserver.
Additionally,allinstructionsandexamplesassumeyouused/opt/caridenasthedefaultinstallationdirectory.
Ifyoudidnot,thensubstituteyourinstallationdirectoryfor/opt/cariden.
lspDiscoveryUseAutobandwidthSpecifieswhetherornottostoretheautobandwidthintheplanfile.
True—Iftheautobandwidthrateisdiscovered,thenautobandwidthisstoredasthesetupbandwidthintheplanfile.
False—Thediscoveredsetupbandwidthisstoredinplanfile.
l1DiscoveryEnabledTrue—EnablesLayer1discoveryinWAENI.
False—DisablesLayer1discoveryinWAENI.
ParameterDescriptionlogVerbosityIntegerthatdefinestheverbosityoftheinformationreturnedbylogfiles.
Trace=60Debug=50Info=40Warn=30Error=20planFileGenerationIntervalInSecsDefineshowoftenapre-calculatedplanfileisgeneratedinseconds.
Theminimumvalueis300seconds.
ThisvalueisusedwhentheWAENIserverisconfiguredthroughtheWAECollectorUI.
Notethatbothcollector_getplanandWAELiveuseon-demandplanfilesratherthanpre-calculatedplanfiles.
2-43CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionNetworkInformationUsingManualCollectionStep1Runmate_auth_inittocreateanauthenticationfile(auth.
enc)usedbySNMPandlogintools.
mate_auth_initThisisaninteractivetoolthatfirstpromptsyoutochoosetheSNMPversionandtherelevantparameters.
Forinformation,seeNetworkAuthenticationintheChapter3,"AdvancedCollectionConfigurations.
"Step2Optional:Customizenetworkaccess.
seeNetworkAccessFileintheChapter3,"AdvancedCollectionConfigurations.
"Step3Sinceyouneedtoruntwosnapshots,createbothsetsoffilesnow.
Youwilllaterbeeditingbothsetsoffiles.
Copythedefaultsnapshot.
txt,snapshot.
inc,snapshot_augment_collector.
txtandsnapshot_augment_collector.
incfilestoworkingconfigurationfilesin$WAE_ROOT/etcandgivethemdifferentnames.
Notethatifyouhaveexistingsnapshotfilesin$WAE_ROOT/etc,youcancopythosefilestosnapshot-pushplanandsnapshot-getplanfiles,andthenmakechangestothosefilesalignedwiththeinstructionsinthischapter.
Examples:cp/opt/cariden/software/mate/current/etc/snapshot.
txt/opt/cariden/etc/snapshot-pushplan.
txtcp/opt/cariden/software/mate/current/etc/snapshot.
inc/opt/cariden/etc/snapshot-pushplan.
inccp/opt/cariden/software/mate/current/etc/snapshot_augment_collector.
txt/opt/cariden/etc/snapshot-getplan.
txtcp/opt/cariden/software/mate/current/etc/snapshot_augment_collector.
inc/opt/cariden/etc/snapshot-getplan.
incCreateSnapshottoPushPlanFilesNoteForinformationonconfiguringsnapshot.
txtandsnapshot.
incfiles,seeSnapshotFiles.
Thissectionassumesyouknowhowtomodifythesefilesandhowtheyworktogether.
ConfigurePushCredentialsRunthecollector_pushplantooloncetosettheWAENIserver'scredentialsforlateruseinthesnapshotfiles.
Youmustuse-set-credentialstrue.
Whenprompted,entertheusernameandpasswordfortheWAENIserver.
Thedefaultcredentialfileis$CARIDEN_ROOT/etc/collector/credentials.
enc.
Thecredentialsfileforthesnapshot-pushplanandthesnapshot-getplanfilesmustbethesame.
Tochangeit,usethe-credentials-fileoption.
Example:collector_pushplan-set-credentialstrue-credentials-file/opt/cariden/etc/collector/credentials-CP.
encNoteThecredentialsfileusedfortheCollectorserverandWAENIservermustbedifferent.
2-44CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionNetworkInformationUsingManualCollectionModifyPushsnapshot.
txtStep1Definetheenvironmentvariablesinthesection.
EachparametermustbeseparatedfromitsvaluebyaTAB.
Atminimum,defineunique,seed_router,igp,andhome_dir,andpreferablythebackup_router.
Ifneeded,edittheincludeenvironmentvariabletoreadthesnapshot-pushplan.
incfilefrom$(home_dir)/etc.
Example:include$(home_dir)/etc/snapshot-pushplan.
incStep2Inthesection,uncommentoraddtasksthatdiscoverthetopology.
(Seeexampleinstep3.
)Notethattheorderofthesetasksdeterminesthesequenceoftheirexecution.
Step3Immediatelyfollowingthediscoverytasks,addaCOLLECTOR_PUSHPLANtasktopushtheplanfiletotheWAENIserver.
Example:#SAM_GETPLANSNMP_FIND_OSPF_DB#LOGIN_FIND_IGP_DBSNMP_FIND_NODESSNMP_FIND_INTERFACES#GET_CONFIGS#PARSE_CONFIGS#FIND_BGPSNMP_FIND_RSVP#SNMP_FIND_VPNCOLLECTOR_PUSHPLANStep4Eitherremoveorcommentoutallothertasksinthesnapshot.
Step5SometimestheIPmanagementaddressesthatarediscoveredfromthedevicesaredifferentthantheIPmanagementaddressesthatareneededtocommunicatewiththerouters.
Ifso,youneedtocreateatablethatliststheproperIPmanagementaddresses,andthenusethetab_mergertooltoinserttheIPmanagementaddressesduringthesnapshotprocess.
Forinformation,contactyourCiscorepresentative.
ModifyPushsnapshot.
incStep1Asneeded,editandaddcollectiontoolsthataretobecalledfromthesnapshot-pushplan.
txtfile.
Step2Addthecollector_pushplanconfiguration.
Therequiredoptionsare-set-credentials,-credentials-file,-in-net-access-file,and-in-auth-file.
Setthe-set-credentialstofalsesothatthesnapshotprocessdoesnotstoptoaskforcredentials.
Youonlyneedtosetthistotrueonce,whichyouhavealreadydone(aspertheConfigurePushCredentialssection).
The-credentials-filemustmatchthenamethatyouspecifiedwhenyoufirstsetthecredentials(aspertheConfigurePushCredentialssection).
The-in-plan-filetellstheWAENIserverthepathandnameoftheplanfilethatisbeingsenttoit.
Bydefault,thenet_access.
txtfileisin$CARIDEN_HOME/etc.
Ifyoumodifythis,thenthatsamepathandnamemustbeconfiguredforcollector_pushplan,anditmustresideinoneoftheselocations.
~/.
cariden/etc2-45CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionNetworkInformationUsingManualCollection$CARIDEN_ROOT/etc$CARIDEN_HOME/etcTheauth.
encfilelocationmustmatchthelocationinwhichthemate_auth_initputit.
JMSistheprotocolthattheCollectorserverusestocommunicatewiththeWAENIserver.
Bydefault,theWAENIserverisusingthesamehost(localhost)astheCollectorserver.
Bydefault,theWAENIserverlistensonport61617toreceiveplanfilespushedtoit.
Youcanchangetheseusingthe-jms-server-addressand-jms-server-portoptions.
ExampleCOLLECTOR_PUSHPLANCreateSnapshottoGetPlanFilesNoteIfyoudonotneedtoaddfurthertaskstothesnapshots,skipthissectionandgototheRunCollectionssection.
NameValuecmd$(cariden_home)/bin/collector_pushplancmd_optCOLLECTOR_PUSHPLAN_CMD_OPTpostcmdcppostcmd_optCOLLECTOR_PUSHPLAN_CP_CMD_OPTcmd_success0NameValueset-credentialsfalsecredentials-file$(home_dir)/etc/collector/credentials-CP.
encin-plan-file$(work_dir)/$(unique).
txtin-net-access-file$(cariden_home)/etc/net_access.
txtin-auth-file$(home_dir)/etc/auth.
encjms-server-addresslocalhostjms-server-port61617NameValue$(work_dir)/$(unique).
txt$(debug_dir)/$(unique).
txt-post-collector_pushplan.
txt2-46CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionNetworkInformationUsingManualCollectionConfigureGetCredentialsRunthecollector_getplantooloncetosettheWAENIserver'scredentialsforlateruseinthesnapshotfiles.
Youmustuse-set-credentialstrue.
Thedefaultcredentialfileis$CARIDEN_ROOT/etc/collector/credentials.
enc.
Thecredentialsfileforthesnapshot-pushplanandthesnapshot-getplanfilesmustbethesame.
Tochangeit,usethe-credentials-fileoption.
Example:collector_getplan-set-credentialstrue-credentials-file/opt/cariden/etc/collector/credentials-CP.
encNoteThecredentialsfileusedfortheCollectorserverandWAENIservermustbedifferent.
ModifyGetsnapshot.
txtNoteTheinstructionsinthischapterusethearchive_inserttooltoinsertplanfilesintoanexternalarchive.
ForinformationonmanuallyinsertingplanfilesintoWAELive,seeAppendixA,"SnapshotExamples.
"Step1Definetheenvironmentvariablesinthesection.
EachparametermustbeseparatedfromitsvaluebyaTAB.
Atminimum,defineunique,seed_router,igp,andhome_dir,andpreferablythebackup_router.
Thesemustbethesameasinthesnapshot-pushplan.
txtfile.
Thearchive_dirmustalsobespecified,anditisnotrelevanttothesnapshot-pushplan.
txtfile.
Addoreditthecollector_urlvariabletosettothelocationoftheWAENIserver.
Thedefaultportonwhichitlistensforincomingplansis8086.
Example:collector_urlhttps://localhost:8086Ifneeded,edittheincludeenvironmentvariabletoreadthesnapshot-getplan.
incfilefrom$(home_dir)/etc.
Example:include$(home_dir)/etc/snapshot-getplan.
incStep2KeepCOLLECTOR_GETPLANuncommentedasthefirsttask.
Eitherremoveorcommentoutalltasksusedindiscoveringthetopologyorpollingfortraffic.
Example:COLLECTOR_GETPLAN#GET_CONFIGS#PARSE_CONFIGS#SNMP_FIND_VPN#SNMP_POLL#POLL_LDPStep3Definewhethertoexecuteflowcollection,definewhichtaskstoexecutetomodeltheplanfile,anddefineaninserttasktospecifywheretoinsertthefinalplanfiles.
Usethecommentstoenableordisableexistingtasks,andaddnewtasksifneeded.
Notethattheorderofthesetasksdeterminesthesequenceoftheirexecution.
Atminimum,uncommentthefollowingtasks.
COPY_FROM_TEMPLATE—Copiesselectedvaluesfromthetemplateplanfileintothenewlygeneratedplan,whilepreservingnetworkconfigurationinformation.
2-47CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionNetworkInformationUsingManualCollectionARCHIVE_INSERT—Storesthecompletedplanfileinanexternalplanfilearchiveforusebyalltheapplications.
Example:FLOW_GET#BUILD_MODELMATE_CONVERTCOPY_FROM_TEMPLATEDMD_MESH_CREATORDMD_DEDUCT#MATE_SIMARCHIVE_INSERT#ML_INSERTModifyGetsnapshot.
incStep1Asneeded,addoreditflow,modeling,andinsertiontoolsthataretobecalledfromthesnapshot-getplan.
txtfile.
Step2Keepthecollector_getplanconfiguration-urloptionsettothecollector_urlenvironmentvariable.
Keep-set-credentialstofalsesothatthesnapshotprocessdoesnotstoptoaskforcredentials.
Youonlyneedtosetthistotrueonce,whichyouhavealreadydone(aspertheConfigureGetCredentialssection).
The-credentials-filemustmatchthenamethatyouspecifiedwhenyoufirstsetthecredentials(aspertheConfigureGetCredentialssection),anditmustbethesameasusedinthesnapshot-pushplan.
incfile.
The-out-filetellstheWAENIserverwhere(pathandfilename)towritethelatestplanfile.
Thenet_access_session_file.
txtandauth_session_file.
encmustresideinoneofthefollowinglocations.
Bestpracticeistoputthemwhereveryouputthenet_access.
txtandauth.
encfileusedinthesnapshot-pushplan.
incfile.
~/.
cariden/etc$CARIDEN_ROOT/etc$CARIDEN_HOME/etcExampleCOLLECTOR_GETPLANCOLLECTOR_GETPLANNameValuecmd$(cariden_home)/bin/collector_getplancmd_optCOLLECTOR_GETPLAN_CMD_OPTpostcmdcppostcmd_optCOLLECTOR_GETPLAN_CP_CMD_OPTcmd_success02-48CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectionNetworkInformationUsingManualCollectionInitializeArchiveandCreateTemplateNoteTextinreferstoenvironmentvariablesthatyousetinthesnapshot-getplan.
txtfile.
Step1Runarchive_inittoinitializethearchiverepositoryintowhichtheplanfileswillbeinserted.
archive_init-archive$WAE_ROOT/archives/-archiveStep2IfcollectingdataforWAEDesignArchive,usethearchive_configtooltoaddthearchiverepository.
Atthesametime,setupthetemplatedirectoryandtemplatename.
archive_config-actionadd-name-path$WAE_ROOT/archives/-archive-template-dir$WAE_ROOT/data-template-name-template.
plnStep3Createanemptytemplate.
Youcanignorethewarningsbecausetheresultingfileisanemptytemplatefile.
echo|mate_convert-plan-file--out-file$WAE_ROOT/data/-template.
plnNotethatWAELiveautomaticallycreatesthetemplate.
plnfromthemostrecentlycollectedplanfileifnotemplateexists.
Therefore,forWAELive,thisstepisnotarequirement.
RunCollectionsStep1Testthesnapshotprocessbyrunningeachoneasasingletooltocollectnetworkdata.
Checktheoutputforerrors,fixthemifneeded,andrerunthistestuntilitissuccessfulbeforeproceeding.
snapshot-config-file$WAE_ROOT/etc/snapshot-pushplan.
txtsnapshot-config-file$WAE_ROOT/etc/snapshot-getplan.
txtNameValueset-credentialsfalsecredentials-file$(home_dir)/etc/collector/credentials-CP.
encgetfilesurl$(collector_url)if-later-than-timestamp-file$(timestamp_file)out-file$(work_dir)/$(unique).
txtout-net-access-file$(net_access_session_file)out-auth-file$(auth_session_file)NameValue$(work_dir)/$(unique).
txt$(debug_dir)/$(unique).
txt-post-collector_getplan.
txt2-49CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingHardwareInventoryStep2Createacronjobthatrepeatstheprocessofcreatingsnapshotsandinsertingthemintothearchiverepository.
NoteBothCARIDEN_ROOTandCARIDEN_HOMEvariablesmustbedefinedfromwithinthecrontab.
YoucannotuseCARIDEN_HOME=$CARIDEN_ROOT/software/mate/current.
Openthefileforeditingasfollows.
crontab-eAttheendofthefile,addthefollowinglines.
Ifyouusedonlythesnapshot-pushplanconfiguration,donotaddsnapshot-getplantothecronjob.
CARIDEN_ROOT=/opt/caridenCARIDEN_HOME=/opt/cariden/software/mate/currentSNAPSHOT="/opt/cariden/software/mate/current/bin/snapshot-log-to-screenfalse"*/30SNAPSHOT-config-file$CARIDEN_ROOT/etc/snapshot-pushplan.
txt*/30SNAPSHOT-config-file$CARIDEN_ROOT/etc/snapshot-getplan.
txtCollectingHardwareInventoryToeasilycollectandviewhardwareinventoryinformationonyournetwork,runthesnapshottoolusingthesnapshot_hardware_inventory.
txtfile,andthenviewtheinformationinWAELive.
FormoreinformationonWAELive,seetheWAELIVEUserGuide.
PrerequisiteRunthefollowingcommand:collector_getplan-set-credentialstrueAcollectionhasbeendoneusingoneofthecollectionmethodsandaplanfileexists.
Note$CARIDEN_ROOT—Locationoftheinstallation.
Bydefault,thisis/opt/cariden.
Allinstructionsandexamplesassume/opt/caridenasthedefaultinstallationdirectory.
Ifyoudidnotusethedefault,substituteyourinstallationdirectoryfor/opt/cariden$CARIDEN_HOME—DirectoryinwhichtheWAEDesign,WAELive,andWAECollectorexecutablesandbinariesareinstalled.
Thedefaultis/opt/cariden/software/mate/current.
Step1Copythesnapshot_inventory_incandsnapshot_inventory.
txtfilesfrom$CARIDEN_HOME/etcto$CARIDEN_ROOT/etc.
cp$CARIDEN_HOME/etc/snapshot_hardware_inventory*$CARIDEN_ROOT/etcStep2Tocollecthardwareinventory,enterthefollowingcommand:snapshot-config-file$CARIDEN_ROOT/etc/snapshot_hardware_inventory.
txt2-50CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingHardwareInventoryNoteYoumayseeerrorsbecauseofthird-partydevices.
Youcanignoretheseerrors.
Step3Checktheoutputforerrors,fixthemifneeded,andrerunthistestuntilitissuccessfulbeforeproceeding.
Step4CreateacronjobthatrepeatstheprocessofcreatingsnapshotstocollecthardwareinventoryandinsertingthemintotheWAELivedatastoreonceaday.
NoteBothCARIDEN_ROOTandCARIDEN_HOMEvariablesmustbedefinedfromwithinthecrontab.
Werecommendthatyouplacethesedefinitionsatthetopofthecrontabbecausetheyareusedgloballywithinmultiplecrontabcommands.
YoucannotuseCARIDEN_HOME=$CARIDEN_ROOT/software/mate/current.
Forexample,youcannotuse$CARIDEN_HOME/bin/snapshot-config-file$CARIDEN_ROOT/etc/snapshot_hardware_inventory.
txtunless$CARIDEN_HOMEand$CARIDEN_ROOThavebeenpreviouslydefinedwithincrontab.
Openthefileasfollows.
crontab-eAttheendofthefile,addthefollowinglines.
CARIDEN_ROOT=/opt/caridenCARIDEN_HOME=/opt/cariden/software/mate/current00***$CARIDEN_HOME/bin/snapshot-config-file$CARIDEN_ROOT/etc/snapshot_inventory.
txt2>&1CustomizingandUnderstandingHardwareInventoryCollectionInventorycollectioncollectsandprocessesnetworkhardwareinformationtocreatetheNetIntNodeInventorytableusedbyWAELivetoproduceinventoryreports.
Thefollowingtableliststhetasksthatareperformedinthesnapshot_hardware_inventory.
txtfileandsomeoftheoptionsthatcanbeeditedinthesnapshot_hardware_inventory.
incfile.
TaskDescription/NotesCOLLECTOR_GETPLANCallstheplanfile.
GET_INVENTORYCollectsthenetworkhardwareandcreatesNetIntHardwaretablesthatcontaineverydevicecollectedfromMIBwalkssegregatedbyobjecttype.
Theget_inventorytoolalsousesSSHandNETCONFtocollectdatathatisnotavailableinMIBs.
Toallowloggingintotheroutertocollectinventorydata,youcansettheget_inventory-login-allowedoptiontotrue.
Bydefault,itissettotrue.
2-51CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingHardwareInventoryCollectedHardwareTheget_inventorytoolcreatesaseriesofNetIntHardware*tablesthatstorethecollectedhardwareinformationbasedonhardwaretype.
WhilethesetablesarenotdirectlyusablebyWAELive,fourofthemareprocessedbybuild_inventoryforuseinWAELive.
EachofthefollowingobjectsaredefinedbynodeIPaddressandSNMPID.
NetIntHardwareChassis—RouterchassisobjectsidentifiedbynodeIPaddressandSNMPID.
NetIntHardwareContainer—Eachentryrepresentsaslotinarouter(anythingthatcanhaveafieldreplaceableunit(FRU)typedeviceinstalledintoit).
Examplesincludechassisslots,moduleslots,andportslots.
NetIntHardwareModule—Hardwaredevicesthatcanbeinstalledintootherhardwaredevices.
Generally,thesedevicesdirectlysupporttrafficsuchaslinecards,modules,androuteprocessors,anddonotfallintooneoftheotherfunction-specifichardwaretables.
NetIntHardwarePort—Physicalportsontherouter.
HardwareHierarchyThehardwarehasaparent-childrelationshipbasedonwheretheobjectresideswithintherouter.
Thechassishasnoparentandisconsideredtherootobject.
Otherthanthechassis,eachobjecthasoneparentandcanhaveoneormorechildobjects.
Objectswithnochildrenarecalledleafobjects,suchasportsandemptycontainers.
Thishierarchygenerallyreflectshowhardwareobjectsareinstalledwithinotherobjects.
Forinstance,amodulerepresentingalinecardmighthaveaparentobjectthatisacontainerrepresentingaslot.
TheparentisidentifiableintheNetIntHardware*tablesbytheParentTableandParentIdcolumns.
UsingthesetwocolumnsalongwiththeNode(nodeIPaddress)column,youcanfindtheparentobjectforanyhardwareobject.
Example:ThisNetIntHardwareContainerentryidentifiesthatcontainer172.
23.
123.
456hasachassisasaparent.
IntheNetIntHardwareChassis,thereisanSnmpIDentrythatmatchesthecontainer'sParentIdof2512347.
BUILD_INVENTORYProcessestherawhardwaredatainformationintheNetIntHardware*tables)tocategorizeandremoveunwantedobjectsinthefinalNetIntNodeInventorytable.
Tobroadenthesearchwhenprocessingrawinventorydata,youcansetthebuild_inventory-guess-template-if-nomatchoptiontotrue.
MATE_CONVERTConvertstheplan.
txtfiletoa.
plnfileML_INSERT_CTLInsertsandschedulestheinsertionofinventorydataintotheWAEInventorydatastore.
TaskDescription/NotesNetIntHardwareContainerNodeSnmpIDParentIDModelNameNumChildrenParentTableSlotNumber172.
23.
123.
45625037332512347slotmau0/0/0/50NetIntHardwareChassis02-52CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingHardwareInventoryTracingthehierarchyfromeachleafobjecttoitscorrespondingrootobjectbasedontheparent-childrelationshipsresultsinaseriesofobjecttypesthatformitshardwarehierarchy.
Itisthistracethatthebuild_inventorytoolusestodeterminehowtoprocessthehardwaredevices.
ThisisalsotheprocessyoumustuseifaddinganentrytotheHWInventoryTemplatestable.
Example:Chassis-Container-Module-Module-Container-PortTablesforProcessingInventoryThebuild_inventorytoolconstructstheNetIntNodeInventorytablebyprocessingtheNetIntHardware*tables.
Thetoolrequirestwoconfigurationfilesandcanadditionallyuseanoptionalone.
Ifnotspecified,thefilesincludedinthe$CARIDEN_HOME/etc/inventoryareused.
master_inventory_templates.
txt(required)—Thisfilecontainsthesetables.
–HWInventoryTemplatesentriescategorizethedevicesinthefinalNetIntNodeInventorytable,aswellasprunefrominclusion.
–HWNameFormatRulesentriesformathardwareobjectnamestomakethemmoreusable,aswellascorrectunexpectedSNMPresults.
master_exclude_list.
txt(required)—ContainstheExcludeHWListtablethatprevents(blacklists)hardwareobjectsfrombeingincludedinthefinalNetIntNodeInventorytable.
Thiscanbeusefulwhenforexcludinghardwarethatdoesnotforwardorcarrytraffic.
master_hw_spec.
txt(optional)—ContainstheHardwareSpectablethatcanbeusedtoadjustcollecteddataintermsofthenumberofslotsinaspecifieddevicewhentheslotsreturnedbySNMPisinaccurate.
Ifyoumodifythetemplateorchoosetoexcludefiles,youwillwantthesechangestopersistacrosssoftwareupgrades.
Todoso,youmustmovethesefilesfrom$CARIDEN_HOMEto$CARIDEN_ROOTandupdatethesnapshotfilesaccordingly.
1.
Copy$CARIDEN_HOME/etc/inventoryto$CARIDEN_ROOT/etc:cp-r$CARIDEN_HOME/etc/inventory$CARIDEN_ROOT/etc2.
Copy$CARIDEN_HOME/etc/snapshot_hardware_inventory.
txtand.
incto$CARIDEN_ROOT/etc/inventory:cp$CARIDEN_HOME/etc/snapshot_hardware_inventory.
*$CARIDEN_ROOT/etc/inventory/3.
Runthesnapshotmanually:$CARIDEN_HOME/bin/snapshot-config-file$CARIDEN_ROOT/etc/inventory/snapshot_hardware_inventory.
txt4.
Schedulethesnapshotincrontab:00***$CARIDEN_HOME/bin/snapshot-config-file$CARIDEN_ROOT/etc/inventory/snapshot_hardware_inventory.
txt2>$1t2-53CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingHardwareInventoryConfigureHardwareTemplatesThebuild_inventory-template-fileoptioncallsafilecontainingboththeHWInventoryTemplatesandtheHWNameFormatRulestables,whichbydefaultareinthe$CARIDEN_HOME/etc/inventory/master_inventory_templates.
txtfile.
HWInventoryTemplatesTableTheHWInventoryTemplatestabletellsthebuild_inventorytoolhowtointerprethardwarereferencedbytheNetIntHardware*tables.
Itenablesbuild_inventorytocategorizeobjectsintocommon,vendor-neutralhardwaretypes,suchaschassis,linecards,andslots,aswellastoremovehardwaretypesthatarenotofinterest.
Inventoryhardwareiscategorizedasachassis,slot,linecard,moduleslot,module,portslot,port,ortransceiver.
Acontaineriscategorizedaseitheraslot,moduleslot,orportslot.
Amoduleiscategorizedaseitheramoduleoralinecard.
Allotherhardwareobjectsarecategorizedbytheirsamename.
Forinstance,achassisiscategorizedasachassis.
ThesecategorizedhardwareobjectsareavailablethroughtheWAELiveapplicationforuseininventoryreports.
Thebuild_inventorytoollooksatthefollowingcolumnsoftheHWInventoryTemplatestableformatchesintheNetIntHardware*tablesinthisorder.
DiscoveredHWHierarchy,Vendor,ModelDiscoveredHWHierarchy,Vendor,*(where*meansallentriesintheModelcolumn)Youcanfurtherenhancethesearchusingthe-guess-template-if-nomatchtrueoption.
Inthisinstance,ifnomatchesarefoundusingthefirsttwocriteria,WAECollectorthenlooksformatchesonlyforDiscoveredHWHierarchyandVendor,anddoesnotconsiderModel.
Ifamatchisfound,thesubsequentcolumnsafterDiscoveredHWHierarchytellbuild_inventoryhowtocategorizethehardware.
Theselattercolumnsidentifyhardwareobjecttypes:chassis,slot,linecard,moduleslot,module,portslot,port,ortransceiver.
Eachcolumnentryhasthefollowingformat.
Foranexample,seeFigure2-4.
Type,Identifier,NameTypeisthediscoveredhardwaretype,suchas"container.
"Identifierspecifieswhichobject(ofoneormoreofthesametype)inthehierarchyisreferenced(0,1,.
.
.
).
NamespecifiesacolumnheadingintheNetIntHardware*table.
ThisisthenamethatappearsinforthatobjectintheNetIntNodeInventorytableandthus,inWAELiveinventoryreports.
Example:Module,0,Model(ModelisacolumnheadingintheNetIntHardwareModuletable)Multiplenamesourcecolumnscanbespecifiedwithacolon.
Example:Container,0,Model:NameIfahardwarecategorydoesnotexistorisempty,build_inventorydoesnotincludeitinthefinalNetIntNodeInventorytable.
2-54CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingHardwareInventoryExampleUsingthefirstrowofthedefaultmaster_inventory_templates.
txtfile,WAECollectorsearchestheNetIntHardware*tablesforonesthathaveentriesthatmatchtheVendor,Model,andDiscoveredHWHierarchycolumns,asfollows.
CiscoASR9KChassis-Container-Module-Port-Container-ModuleThereafter,itcategorizeseachentryinthehardwarehierarchy(DiscoveredHWHierarchycolumn),anddefinesitslocationinthehardwaretypescolumns.
ThefirstModuleentryisdefinedasalinecard,itisidentifiedas#0,andthenamethatappearsintheNetIntNodeInventorytableistheoneappearingintheModelcolumnoftheNetIntHardwareModuletable.
Thesecondmoduleisdefinedasatransceiverobjectandisidentifiedas#1.
Itusesthesamenameformat.
Noticethattherearetwocontainersinthehierarchy,butthereisonlyonedefinedasaType.
ThismeansthatthesecondcontainerwouldnotappearintheNetIntNodeInventorytable.
Figure2-4ExampleHWInventoryTemplatesEntryAddHWInventoryTemplatesEntriesIfWAECollectorencountersaninventorydevicethatisnotintheHWInventoryTemplatestable,itgeneratesawarningthatspecifiespiecesofthehardwarehierarchy,includingtheSNMPIDoftheleafobjectandtheIPaddressoftherouter.
YoucanusethisinformationtomanuallytracetheobjectsfromtheleaftotherootandderiveanappropriateentryintheHWInventoryTemplatestable.
Forinformationontracinghardwarehierarchies,seetheHardwareHierarchysection.
Step1Copythewarningmessageforreference,anduseitforstep2.
Step2Usingtherouter'sIPaddress,aswellastheSNMPID,name,andmodeloftheleafobject,findtheleafobjectreferencedinthewarningineithertheNetIntHardwarePortortheNetIntHardwareContainertable.
Step3Usetheleafobject'sParentTableandParentIdcolumnstotracetheleafbacktoitsparent.
Foreachsuccessiveparent,useitsParentTableandParentIdcolumnsuntilyoureachtherootobject(chassis)intheNetIntHardwareChassistable.
Step4Onceeachobjectinthehardwarehierarchyisfound,addittotheDiscoveredHWHierarchycolumnoftheHWInventoryTemplatestable.
AlsocompletetheVendorandModelcolumns.
2-55CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationCollectingHardwareInventoryStep5Foreachobjectinthehardwarehierarchy(DiscoveredHWHierarchycolumn),classifyitintooneofthestandardhardwaretypes,whicharethecolumnslistedaftertheDiscoveredHWHierarchycolumn.
HWNameFormatRulesTableTheHWNameFormatRulestablespecifieshowtoformatthenamesintheNetIntNodeInventorytable.
Thisisusefulforconvertinglongormeaninglessnamestoonesthatareeasiertoreadandclearerforuserstounderstand.
ForeachentryintheHWInventoryTemplatestable,theHWNameFormatRulestableissearchedforamatchingvendor,hardwaretype(HWType),name(PatternMatchExpression).
Then,ratherthanusingthenamespecifiedintheHWInventoryTemplatestable,theNetIntNodeInventorytableisupdatedwiththenameidentifiedintheReplacementExpressioncolumn.
Ifmultiplematchesapply,thefirstmatchfoundisused.
BoththePatternMatchExpressionandtheReplacementExpressioncanbedefinedasaliteralstringinsinglequotesorasaregularexpression.
Example:Theentriesinthetableworkasfollows.
ReplacesallCiscochassisnamewith7507ifthenamehasfourcharacterswhereAisthebeginningofthestringandZistheendofthestring.
ReplacesallCiscolinecardnamesthatmatch800-20017-.
*with1X10GE-LR-SC.
ReplacesallJuniperchassisnamed"Juniper(MX960)InternetBackboneRouter"withMX960.
NoteSNMPreturnsmanyslotnamesastext,ratherthanintegers.
ItisabestpracticetoremovealltextfromslotnumbersforoptimaluseinWAELiveinventoryreports.
ExcludeHardwarebyModelorNameThebuild_inventory-exclude-fileoptioncallsafilecontainingtheExcludeHWListtable,whichbydefaultisinthe$CARIDEN_HOME/etc/inventory/master_exclude_list.
txtfile.
ThistableenablesyoutoidentifyhardwareobjectstoexcludefromtheNetIntNodeInventorytablebasedonmodel,name,orboth.
Thisisuseful,forinstance,whenexcludingmanagementportsandrouteprocessors.
Themodelandnamescanbespecifiedusingregularexpressionsortheycanbeliterals.
Example:Theentriesinthetableworkasfollows.
ExcludeallobjectsintheNetIntHardwarePorttablewherethevendorisCiscoandthenameendswithCPU0/129.
ExcludeallobjectsintheNetIntHardwareModuletablewherethevendorisCiscoandthemodelis800-12308-02.
HWNameFormatRulesVendorHWTypePatternMatchExpressionReplacementExpressionCiscoChassis\A4\Z'7507'CiscoLinecard800-20017-.
*'1X10GE-LR-SC'JuniperChassisJuniper(MX960)InternetBackboneRouter$12-56CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationTroubleshootingCollectionExcludeallobjectsintheNetIntHardwarePorttablewherethevendorisCiscoandthenameisMgmt.
HardwareSpecThebuild_inventory-hardware-spec-fileoptioncallsafilecontainingtheHardwareSpectable,whichbydefaultisinthe$CARIDEN_HOME/etc/inventory/master_hw_spec.
txtfile.
ThistableenablesyoutoadjustdatareturnedfromSNMP.
Youcanadjustboththetotalnumberofslots(TotSlot)andtheslotnumberingrange(SlotNum).
Forinstance,SNMPmightreturn7slotsforachassiswhenthereareactually9,includingrouteprocessors.
Thistablelooksonlyforhardwarethatcontainsslots,moduleslots,orportslots,andthus,thehardwaretype(HWTypecolumn)mustbechassis,linecard,ormodule.
SlotNumindicatestheslotnumberrange.
Forinstance,someroutersstartwithslot0,whereasothersstartwithslot1.
Example:ThistableentrysetstheCisco7609chassistohaveatotalof9slotsandtostarttheslotnumberingwith9.
TroubleshootingCollectionWhencollectingnetworkinformationusingtheWAECollectorUI,youcanusetheWAECollectorUItocheckfornodeaccessfailures,nodesthatarenotresponding,orotherproblemswithcollectingdata.
Usingthisinformation,youcancorrecttheproblems,oftenbysettingoverriderulesforproblematicnodesorchangingtheglobalrulesforcollectingdata.
Forexample,ifnodeswithSNMPcommunitystringsdifferfromthemajorityofthediscoverednodes,youcanindividuallyconfigurethemtousespecificSNMPcommunitystrings.
Oncesuchchangesareapplied,theytakeeffectforthenextinstanceofdatacollection.
WAECollectorServerLoggingOntheSchedulepage,youcanconfiguretheCollectorservertogeneratedetailedlogfilesthatareviewableonboththeStatusandLogpages.
IfyouneedtocontactCiscosupport,werecommendthatyoufirstrunDownloadDiagnosticsormate_tech_support,andsendtheresultingfiletoyourrepresentative.
OntheStatuspage,usetheDownloadDiagnosticsfeaturetocreatea.
zipfilecontainingthestateofthelocalCollectorserverduringthelastcollection.
ExcludeHWListHWTableVendorModelNameNetIntHardwarePortCisco\/CPU0\/129$NetIntHardwareModuleCisco800-12308-02NetIntHardwarePortCiscoMgmtHardwareSpecVendorHWTypeModelTotSlotSlotNumCiscoChassis760991-92-57CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationTroubleshootingCollectionThemate_tech_supporttoolcreates.
tarfilecontaininginformationfortheCollectorserver,WAENIserver,WAECoreserver,andWAELive.
Notethistoolisapplicableonlyifallthreeserversareonthesamelocaldevice.
Forinformationonmate_tech_support,refertoits-helpoutput.
ForalleventlogsofallserversinanHAenvironment,gototheWAEStatistics>Eventspage.
Fordiagnosticandprocessstatusinformationforallservers,gototheWAEStatistics>DiagnosticsandWAEStatistics>Processespage,respectively.
WAENILoggingTheWAENIlogfileislocatedin$WAE_ROOT/logs/wae-ni/collector-core.
log.
Tochangetheloglevelatruntime,edit$WAE_HOME/wae-ni/etcorg.
ops4j.
pax.
loggin.
cfg.
Editthelog4j.
ogger.
com.
cisco=parameterwhereistheminimumseveritylevelyouwantdisplayed.
Forexample,iflog4j.
ogger.
com.
cisco=DEBUG,thenallseveritylevelssettoDEBUGorhigherwillbecapturedduringruntime.
Theloglevelseveritiesarelistedinthefollowingorder(fromhighesttolowest):FATAL,ERROR,WARN,INFO,andDEBUG.
2-58CiscoWAE6.
3PlatformConfigurationGuideChapter2CollectingNetworkInformationTroubleshootingCollectionCHAPTER3-1CiscoWAE6.
3PlatformConfigurationGuide3AdvancedCollectionConfigurationsAcomprehensivesetofonlineandofflinetoolsareavailabletodiscoverandretrieveinformationfromanoperationalnetworkforinputintoaplanfile.
Therearevariousmethodsavailable,dependingonsourcesofinformationandnetworkaccess,suchasSNMPaccessandrouterconfigurationfiles,andwhatinformationistobeimported.
Advancedcollectionconfigurationincludesthefollowingtopics:Multi-NetworkCollection—DescribeshowtocollectdatafrommultiplenetworksandinsertthemintoeitheranexternalarchiveordirectlyintotheWAELivedatastore.
FlowCollection—DescribesthetoolsusedtocollectandaggregateexportedNetFlowandrelatedflowmeasurements.
OfflineDiscovery—DescribesthetoolsusedtodiscoverandretrieveinformationfromrouterconfigurationsandfromRRDtools.
SAMCollection—DescribesintegrationtoolsfortheSAMapplication,aswellashowtoconfiguretheSAMserverforusewithWAECollectortools.
NetworkAccessFile—Describeshowtocustomizenetworkaccessfilesthatstorenetworkaccessparameters,suchastime-outandretrysettings.
NetworkAuthentication—Describeshowtoconfiguretheauthenticationfile.
ThefilekeepsSNMPcommunityandrouterloginauthenticationinformationforusebyWAECollector.
ManageArchives—DescribesthebasicarchivetoolsthatapplytoboththeWAELiveandWAEDesignArchiveapplicationswhenusinganaugmentedormanualdiscoverymethod.
TerminologyThischapterusesthefollowingterms.
$WAE_ROOT—Locationoftheinstallation.
Bydefault,thisis/opt/cariden.
Thesetermsareinterchangeable.
$WAE_HOME—DirectoryinwhichtheWAEDesign,WAELive,andWAECollectorexecutablesandbinariesareinstalled.
Thedefaultis/opt/cariden/software/mate/current.
3-2CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsMulti-NetworkCollectionMulti-NetworkCollectionNoteRunningmulti-networkcollectionsissupportedonlyforthemanualcollectionmethod,andisonlysupportedintheWAELiveapplication.
ThemannerinwhichyouconfiguremultiplenetworksforinclusioninWAELivedependsonwhetheryouareusinganexternalarchiveordirectlyinsertingplanfilesintoWAELive.
Thischapterdescribesbothmethods.
PrerequisitesPre-SnapshotConfigurationUsingExternalArchivesInsertingPlanFilesDirectlyThischapterreferencesthefollowingterms.
$CARIDEN_ROOT—Locationoftheinstallation.
Bydefault,thisis/opt/cariden.
$CARIDEN_HOME—DirectoryinwhichtheWAEDesign,WAELive,andWAECollectorexecutablesandbinariesareinstalled.
Thedefaultis/opt/cariden/software/mate/current.
NoteAllinstructionsandexamplesassumeyouused/opt/caridenasthedefaultinstallationdirectory.
Ifyoudidnot,thensubstituteyourinstallationdirectoryfor/opt/cariden.
PrerequisitesThischapterdoesnotdescribethedetailsofconfiguringsnapshots.
Rather,itdescribesonlythenuancesofconfiguringmanualsnapshotsforthepurposeofdiscoveringmultiplenetworks.
Usingthischapterhasseveral"knowledge"prerequisites,asfollows.
Howtoconfigurebothsnapshot.
txtand.
incfiles,andtheirrelationships.
Howtoconfiguremanualsnapshots,includingstepsnotcoveredhere,suchasconfiguringsnapshotstodiscoverandmodelthenetwork.
Planfileinsertiontools(archive_insertandml_insert_plan).
Forinformation,refertotheir-helpoutput.
Forinformationonconfiguringsnapshotfilesandconfiguringmanualsnapshots,seeSnapshotFilesandAdvancedCollectionConfigurations.
Bestpractice:Backupallconfigurationfilesbeforeyoubegin.
Pre-SnapshotConfigurationNoteThischapterusestworunningexamples.
Oneisthecollectionforan"east"networkwhereplanfilesareputintoanexternalarchive.
Theotheristhecollectionfora"north"networkwhereplanfilesaredirectlyinsertedinWAELive.
Suchnamesareforexamplepurposesonly.
3-3CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsMulti-NetworkCollectionNoteYoucanusethesameauthenticationandnetworkaccessfilesforallnetworks,oryoucancreateandmodifythemonaper-networkbasis.
Formoreinformationonthesefiles,seetheNetworkAccessFileandNetworkAuthenticationchapters.
Step1Runmate_auth_initoncetocreateanauthenticationfile(auth.
enc)usedbySNMPandlogintools.
mate_auth_initThisisaninteractivetoolthatfirstpromptsyoutochoosetheSNMPversionandtherelevantparameters.
Tocreateadifferentnetworkauthenticationfileforanetwork,usethe-auth-fileoption.
Therecommendationistouseoneofthedefaultconfigurationpaths:~/.
cariden/etc,$CARIDEN_HOME/etc,or$CARIDEN_ROOT/etc.
Step2Optional:Customizenetworkaccess.
Tocreateadifferentnetworkaccessfile,copythedefault$CARIDEN_HOME/etc/net_access.
txt,rename,andmodifyit.
Thisfilemustbelocatedinoneofthedefaultconfigurationpaths:~/.
cariden/etc,$CARIDEN_HOME/etc,or$CARIDEN_ROOT/etc.
Step3Fornewinstallations,copythedefaultsnapshot.
txtandsnapshot.
incfilestoworkingconfigurationfiles.
Uniquelynameeachsetof.
txtand.
incfilestorepresentthenetworktowhichitisapplicable.
Examples:cp/opt/cariden/software/mate/current/etc/snapshot.
txt/opt/cariden/etc/ss-east.
txtcp/opt/cariden/software/mate/current/etc/snapshot.
inc/opt/cariden/etc/ss-east.
inccp/opt/cariden/software/mate/current/etc/snapshot.
txt/opt/cariden/etc/ss-north.
txtcp/opt/cariden/software/mate/current/etc/snapshot.
inc/opt/cariden/etc/ss-north.
incIfthisisnotanewinstallation,youcanuseexistingsnapshotfilesin/opt/cariden/etcandmakemodificationsnotedinthischapterasneeded.
However,youneedonesetofsnapshotfiles(one.
txtfileandone.
incfile)pernetwork.
UsingExternalArchivesEachnetworkmusthaveitsownsetofsnapshotfilesthatindependentlycallarchive_inserttoinsertplanfilesintoauniquelynamedarchive.
Remember,youmustalsoconfigurethesnapshotstodiscover,poll,andbuildthenetworkmodel.
Step1Editthess-east.
txtfile,whichcontainsthecollection,polling,modeling,andinsertiontaskstoperform.
Thisfilecontrolsthesequenceofexecutionandalsocontainsenvironmentvariablesofcommonvaluesusedinthess-east.
incfile.
a.
Atminimum,youmustdefineunique,seed_router,igp,home_dir,andarchive_dir.
Bydefault,thearchive_inserttoolusesthearchive_direnvironmentvariableswheninsertingplanfilesintoanexternalarchive.
Bestpracticeistousethedefault.
Example:uniqueeastseed_router10.
10.
10.
11igpospfospf_area0.
0.
0home_dir/opt/caridenwork_dir$(home_dir)/workarchive_dir$(home_dir)/archives3-4CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsMulti-NetworkCollectionb.
Edittheincludeenvironmentvariabletoreadthess-east.
incfilefrom$(home_dir)/etc.
Example:include$(home_dir)/etc/ss-east.
incc.
UncommenttheARCHIVE_INSERTtask.
Step2Asneeded,editthess-east.
incfiletomodifyandaddtoolsthataretobecalledfromthess-east.
txtfile.
Configurethefiletousearchive_inserttoinsertplanfilesintothenamedexternalarchivedirectory.
Youcanusethedefaultarchive_insertconfigurationinthe.
incfileforthispurpose.
Step3Runarchive_inittoinitializethearchiverepositoryintowhichtheplanfilesaretobeinserted.
Textinreferstoenvironmentvariablesthatyousetinthess-east.
txtfile.
ThepathenteredfortheExternalArchiveontheWAELiveSettings>GeneralSettingspagemustmatchthiscase-sensitivepath.
archive_init-archive/opt/cariden/archives/-archiveExample:archive_init-archive/opt/cariden/archives/east-archiveStep4Createacronjobthatrepeatstheprocessofrunningthesnapshotfilesthatyoucreated,whichresultsintheinsertionofplanfilesgoingintotheirrespectivearchiverepositories.
NoteBothCARIDEN_ROOTandCARIDEN_HOMEvariablesmustbedefinedfromwithinthecrontab.
YoucannotuseCARIDEN_HOME=$CARIDEN_ROOT/software/mate/current.
a.
Openthefileforeditingasfollows.
crontab-eb.
Attheendofthefile,addthefollowinglines.
CARIDEN_ROOT=/opt/caridenCARIDEN_HOME=/opt/cariden/software/mate/currentc.
Attheendofthefile,addoneentrytocalltheuniquesnapshotpernetwork.
Example:*/30CARIDEN_HOME/bin/snapshot-config-file$CARIDEN_ROOT/etc/ss-east.
txt2>&1NoteBestpracticeistoverifythesnapshotsareworkingpriortocontinuingtoWAELiveconfigurations.
InsertingPlanFilesDirectlyEachnetworkmusthaveitsownsetofsnapshotfilesthatindependentlycallml_insert_plantoinsertdatadirectlyintotheWAELivedatastore.
Thesefilesmustalsocallarchive_inserttoinsertplanfilesdirectlyintotheMaparchive.
Remember,youmustconfigurethesnapshotstodiscover,poll,andbuildthenetworkmodel.
3-5CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsMulti-NetworkCollectionStep1Editthess-north.
txtfile,whichcontainsthecollection,polling,modeling,andinsertiontaskstoperform.
Thisfilecontrolsthesequenceofexecutionandalsocontainsenvironmentvariablesofcommonvaluesusedinthess-north.
incfile.
a.
Atminimum,youmustdefineunique,seed_router,igp,andhome_dir.
IfusingtheMapcomponent,createanenvironmentvariablethatuniquelyspecifiestheMaparchive.
Example:uniquenorthseed_router10.
10.
10.
11igpisisisis_level2home_dir/opt/caridenwork_dir$(home_dir)/workmap_archive_dir$(home_dir)/data/mldata/archiveb.
Edittheincludeenvironmentvariabletoreadthess-north.
incfilefrom$(home_dir)/etc.
Example:include$(home_dir)/etc/ss-north.
incc.
UncommenttheML_INSERTtask.
d.
IfusingtheMapcomponent,addanMAP_ARCHIVE_INSERTtask.
Example:#ARCHIVE_INSERTML_INSERTMAP_ARCHIVE_INSERTStep2Asneeded,editthess-north.
incfiletomodifyandaddtoolsthataretobecalledfromthess-north.
txtfile.
Configuretheassociatedss-north.
incfiletouseml_insert_planwiththe-networkoption.
The-networkoptionspecifiesthenetworkpartitionofthedatastoreintowhichyouareplacingdata.
Thismustmatchthecase-sensitivenetworknameaddedthroughtheWAELiveUI.
Inthisexample,youwouldalsohavetocreateandnameaWAELivenetworkcalled"north.
"Example:NameValuecmd$(cariden_home)/bin/ml_insert_plancmd_optML_INSERT_CMD_OPTNameValueplan-file$(work_dir)/$(unique).
plntime$(start_time_direct)log-file$(log_dir)/$(unique)-log-ml_insert.
lognetworknorth3-6CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsMulti-NetworkCollectionStep3IfusingtheMapcomponent,configuretheassociatedss-north.
incfiletousearchive_inserttospecifytheMaparchive.
Thismustmatchthecase-sensitivenamegiventheMaparchiveintheWAELiveSettings>GeneralSettingspage.
Inthisexample,theMaparchiveinWAELivewouldhavetobe/opt/cariden/data/mldata/archive/north.
Example:Step4Createacronjobthatrepeatstheprocessofrunningthesnapshotfilesthatyoucreated,whichresultsintheinsertionofplanfilesgoingintotheirrespectivenetworksegmentswithintheWAELivedatastore.
NoteBothCARIDEN_ROOTandCARIDEN_HOMEvariablesmustbedefinedfromwithinthecrontab.
YoucannotuseCARIDEN_HOME=$CARIDEN_ROOT/software/mate/current.
a.
Openthefileforeditingasfollows.
crontab-eb.
Addthefollowinglines.
CARIDEN_ROOT=/opt/caridenCARIDEN_HOME=/opt/cariden/software/mate/currentc.
Attheendofthefile,addoneentrytocalltheuniquesnapshotpernetwork.
Example:*/30CARIDEN_HOME/bin/snapshot-config-file$CARIDEN_ROOT/etc/ss-north.
txt2>&1NoteBestpracticeistoverifythesnapshotsareworkingpriortocontinuingtoWAELiveconfigurations.
NameValuecmd$(cariden_home)/bin/archive_insertcmd_optMAP_ARCHIVE_INSERT_CMD_OPTNameValueplan-file$(work_dir)/$(unique).
plnarchive$(map_archive_dir)/$(unique)time$(start_time)log-file$(log_dir)/$(unique)-log-map-archive_insert.
log3-7CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsFlowCollectionFlowCollectionNoteCollectingNetFlowandrelatedflowmeasurementsissupportedinboththeaugmentedandmanualconfigurationmethods.
Therecommendationistousetheaugmentedmethodifitsupportsthenetworkconfiguration.
WAECollectorcancollectandaggregateexportedNetFlowandrelatedflowmeasurements.
ThesemaybeusedtoconstructaccuratedemandtrafficdataforbothWAEDesignandWAELive.
Flowcollectionprovidesanalternativetotheestimationofdemandtrafficfrominterface,LSP,andotherstatisticsusingDemandDeduction.
Importingflowmeasurementsisparticularlyusefulwhenthereisfullornearlyfullflowcoverageofanetwork'sedgerouters.
Additionally,itisbeneficialwhenaccuracyofindividualdemandsbetweenexternalAS'sisofinterest,forexamplewhentrackingdemandsovertimeinWAELive.
NetworkdatacollectedseparatelybyWAECollector,includingtopology,BGPneighbors,andinterfacestatistics,arecombinedwiththeflowmeasurementstoscaleflowsandprovideacompletedemandmeshbetweenbothexternalAS'sandinternalnodes.
FlowsimportedintoWAECollectorarealsousedintheBusinessIntelligence(BI)solutions.
WAECollectorgathersthefollowingtypesofdatatobuildanetworkmodelwithflowsandtheirtrafficmeasurementsaggregatedovertimeandspace.
NetFlow,JFlow,CFlowd,andIPFIXflowsSNMPBGPpathattributesThischapterreferencesthefollowingterms.
$CARIDEN_ROOT—Locationoftheinstallation.
Bydefault,thisis/opt/cariden.
Thesetermsareinterchangeable.
$CARIDEN_HOME—DirectoryinwhichtheWAEDesign,WAELive,andWAECollectorexecutablesandbinariesareinstalled.
Thedefaultis/opt/cariden/software/mate/current.
FlowCollectionWorkflowFigure3-1showstheworkflowforcollectingflowdatafromtheexternalnetworkandflowcollectionserver.
TheWAECollectortools,flow_manageandflow_get,integratewithanexternalconfigurationtableandthesnapshotprocess,respectively.
Theendresultisaplanfilecontainingflow-baseddemands.
3-8CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsFlowCollectionFigure3-1FlowCollectionWorkflowtable—Thisuser-createdtablecontainsrouterinformationthatisusedasinputtoflow_manage.
Atminimum,itidentifiesnodenames,samplingrates,andthesourceIPoftheflows.
SeetheTablesection.
flow_manage—ThisCLItoolenablesnetworkconnectivityandmanagesthedatacollection,includingstartingandstoppingtheflowcollectionprocess.
Itusesinputfromthetabletogenerateconfigurationinformation,whichitthensendstotheflowcollectionserver.
ThisCLItoolalsostartsandstopstheflowcollectionserver.
Theflow_managetoolmustbeinvokedoutsidethesnapshotfiles.
Seetheflow_managesectionandflow_manage-helpoutput.
Flowcollectionserver—Thebackgroundprocessreceivingconfigurationinformationfromflow_manage,whichitusestoestablishnetworkconnectivityandreceiveflowdataandBGPattributes.
Theserverthencorrelatesthisdataandforwardsittotheflow_gettool.
PlanFile381422WAECollectorSnapshotProcessToAugmentedSnapshotsNetFlowConfigurationflow_managesnapshotflow_getConfigurationCollectorServerWAENIServerNodeConfigurationTablePlanFileArchivePlanFilewithFlow-BasedDemandsTopologyInterfaceStatistics(BGP)FlowDataFlowCollectionServer(BGPPeering)3-9CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsFlowCollectionflow_get—ThisCLItool,whichisenabledinsidethesnapshotfiles,getstheflowdatafromtheflowcollectionserverandputsitintotheplanfilethatwasgeneratedaspartofthesnapshotprocess.
Seetheflow_getsectionandflow_get-helpoutput.
FlowCollectionConfigurationTheflowcollectionprocesssupportsIPv4andIPv6flowscapturedandexportedbyroutersintheingressdirection.
ItalsosupportsIPv4andIPv6iBGPpeering.
RoutersmustbeconfiguredtoexportflowstoandestablishBGPpeeringwiththeflowcollectionserver.
Followingareafewrecommendations.
–NetFlowv5,v9,andIPFIXdatagramexporttotheUDPportnumberoftheflowcollectionserver,whichhasadefaultsettingof2100.
ExportofIPv6flowsrequiresNetFlowv9orIPFIX.
–ConfiguretheflowcollectionserverontheroutersasaniBGProutereflectorclientsothatitcansendBGProutestoedgeand/orborderrouters.
Ifthisisnotfeasible,thenconfigurearouterorrouteserverthathasacompleteviewofallrelevantroutingtables.
–ConfigurethesourceIPv4addressofflowexportdatagramstobethesameasthesourceIPv4addressofiBGPmessagesiftheyareinthesamenetworkaddressspace.
–ExplicitlyconfiguretheBGProuterID.
TheflowcollectionserverwaitsforthereceiptofaBGPOPENmessagefromaremoteAStoestablishaniBGPpeeringsession.
ItactsasapassiveBGPpeerthatonlyreceivesfullBGProutinginformation.
TheflowcollectionserveriscapableofformingauthenticatedBGPsessions,ifrequired.
–Theinstallationprocesssetsthefilecapabilitiesforallbinariesin$CARIDEN_HOME/lib/ext/pmacct/sbin,whichenablesyoutocollectflowdatausingflow_manageandflow_getwithouthavingtochangethefilecapabilitiesfortheflowcollectionserver.
Nofurtherconfigurationisneeded.
–IfreceivingBGProutes,themaximumlengthoftheBGPAS_pathattributeislimitedtothreehops.
Thereasonistopreventexcessiveservermemoryconsumption,consideringthatthetotallengthofBGPattributes,includingAS_path,attachedtoasingleIPprefixcanbeverylarge(upto64KB).
Foradditionalinformation,refertoconfigurationexamplesonhttp://wiki.
pmacct.
net.
ManagingFlowCollectionTableThetablecontainsbasicnodeconfigurationinformationusedbytheflow_managetoolwhengeneratingconfigurationinformationthatitpassestotheflowcollectionserver.
Thus,priortoexecutingflow_manage,youmustconstructthistableasfollows.
Useatab-delimitedformat.
Includeonerowpernode(router)fromwhichyouarecollectingflowdata.
EntercontentsdescribedinTable3-1foreachofthesenodes.
TheBGPcolumnsarerequiredonlyifcollectingBGPinformation.
Table3-2providesanexample.
3-10CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsFlowCollectionBydefault,theflowcollectionserverlooksforthisfileinthe$CARIDEN_HOME/lib/ext/pmacctdirectory.
Youcan,however,specifyanotherlocationandidentifythefullpathintheflow_managetool.
flow_manageTheflow_managetoolstartsandstopstheflowcollectionprocess,aswellasreloadstheconfigurationinformationstoredinthetablewhenyouchangeit.
Assuch,youmustrunitbeforeexecutingthesnapshotprocess.
Thefollowingtableliststheoptionsavailableforflow_manage.
Example:Thefollowingcommandreloadsthetableintheflowconfigs.
txtfiletoaflowcollectionserverwithanIPaddressof192.
168.
1.
3.
flow_manage-server-ip192.
168.
1.
3-actionreload-node-flow-configs-tableflowconfigs.
txtGetTrafficMatricesintoaPlanFileUnlikeothertraffic,thisflowcollectionprocesscreatesandputsdemandsanditstrafficdirectlyintotheplanfileusingflow_get,whichisexecutedwithinthesnapshotprocess.
Theresultingplanfileincludesatrafficmatrix,ortable,withasetofdemandsbetweenallnodes,betweennodesinaninternalASanditspeeringAS's,orbetweenexternalAS's,dependingontheflow_getoptionselected.
Table3-1TableColumnsColumnDescriptionNameNodename.
SamplingRateSamplingrateofthepacketsinexportedflowsfromthenode.
Forexample,ifthevalueis1,024,thenonepacketoutof1,024isselectedinadeterministicorrandommanner.
FlowSourceIPIPv4sourceaddressofflowexportpackets.
BGPSourceIPIPv4orIPv6sourceaddressofiBGPupdatemessages.
Thiscolumnisneedediftheflow_manage-bgpoptionistrue.
BGPPasswordBGPpeeringpasswordforMD5authentication.
Usethiscolumniftheflow_manage-bgpoptionistrueandifBGPSourceIPhasavalue.
Table3-2ExampleTableNameSamplingRateFlowSourceIPBGPSourceIPBGPPasswordparis-er1-fr1024192.
168.
75.
1069.
127.
75.
10ag5Xh0tGbd7chicago-cr2-us1024192.
168.
75.
1569.
127.
75.
15ag5Xh0tGbd7chicago-cr2-us1024192.
168.
75.
152001:db8:85a3::8a4e:370:7332ag5Xh0tGbd7tokyo-br1-jp1024192.
168.
75.
2569.
127.
75.
25ag5Xh0tGbd7brazilia-er1-bra1024192.
168.
75.
302001:db8:8:4::2ag5Xh0tGbd73-11CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsFlowCollectionDemandsWhentheflow_get-demandsoptionistrue,demandsareappendedtotheplanandnamedwiththeprefixflow.
Ifademandwiththesamenameandkeypropertiesalreadyexists,itisgivenadifferent,sequentially-numberednamestartingwith2(flow[2]).
IftheplanfilecontainsnoexternalAS's,thendemandsarecreatedbetweennodes.
IftheplanfilecontainsexternalAS's,thenthedemandsourcesanddestinationsareassignedtoexternalASnodesintheplanfile.
IftheexternalAS'scannotbeidentified,thesourcesanddestinationsaresettothenodecontainingtheexternalinterfacethatistheingressoregressinterfacefortheflow.
DemandsaresourcedfromanddestinedforeithernodesorAS'sviatheirnode.
Forinstance,ifademandoriginatesfromanodethatisinternaltotheplanfileorisinaneighboringASthatisnotintheplanfile,thenthesourceisthenodeatwhichthetrafficenterstheplanfile.
WhetherornottheresultingsourceordestinationisanodeorASdependsonwhethertheneighboringsourceASordestinationASisintheplanfile.
IftheneighboringsourceASisanexternalAS,thenthesourceofdemandsisthenodeintheASthroughwhichtrafficflows.
DemandTrafficThedemandtrafficisconstructedfromthecollectedflowinformationinputintothetable.
Additionally,flow_getpopulatesthreerelatedcolumnsinthetable,asfollows.
FlowTrafficEstimate—AT(true)orF(false)identifieswhethertheinterfacetrafficisestimatedbecausetherearemultipleAS'sconnectedbythisinterfaceorbecausetheneighboringAScannotberesolved.
FlowTraffic—Sumoftheflowsontheinterface.
FlowTrafficRatio—Multipleflowsandtheirtrafficenteringthenetworkoneachinterfacearecollected.
TheflowtrafficisscaledupwardstomatchtheSNMPtrafficmeasurementsofeachingressinterface.
Thecalculationisasfollows.
(SNMPMeasurementoftheInterface/SumofMeasuredFlowTrafficoverInterfaces)Example:IftheSNMPmeasurementforaninterfaceis500Mbps,andiftwoflowsareonthatinterface,eachmeasuring200Mbps,theFlowTrafficRatioforthatinterfacewouldbeasfollows.
(500/(200+200)=1.
25IfanodeinaninternalAShasmultipleconnections(ports)connectingtoapeerASandtomultipledestinationswithinthepeerAS,WAECollectoraggregatestheflowtraffic,aswellasdeterminesport-to-porttraffic.
flow_getTheflow_gettoolisexecutedwithinthesnapshotprocessasawaytogettheflowdatafromtheflowcollectionserverandaddittotheplanfile.
Toexecutetheflow_getCLItool,youmustdefinetheinputandoutputplanfilename.
Allotherparametersareoptional.
Example:Thefollowingcommandgetsthedatafromthe/acme/infile.
txtfile,addsademandtrafficmatrixtoit,andoutputsittothe/acme/outfile.
txtfile.
IfanyexternalBGPinterfacesaredetectedasmissingflowdata,thisinformationiswrittentothe/acme/ext_no.
txtfile.
Interfacesfromwhichflowdatawasreceivedarealsomarkedinthetable.
3-12CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsFlowCollectionflow_get-plan-file/acme/infile.
txt-out-file/acme/outfile.
txt-demandstrue-missing-flows/acme/ext_no.
txtExamples:CreatealistofdemandsforIPv4andIPv6.
Concurrent:flow_get-plan-file/acme/infile.
txt-out-file/acme/outfile.
txt-demandstrue-address-familyipv4,ipv6Aggregated:flow_get-plan-file/acme/infile.
txt-out-file/acme/outfile.
txt-demandstrue-address-familyipv4+ipv6Example:MatchegressIPaddresseswiththeexternaladdressesintheBGPpeers,thusenablingyoutocollectflowsfromborderroutersthatdonothaveBGPnext-hop-selfconfigured.
flow_get-plan-file/acme/infile.
txt-out-file/acme/outfile.
txt-match-on-bgp-external-infotrueFlowCollectionPerimeterWAECollectorclassifiesinterfacesaseitherinternalorexternal.
Internalinterfacesarebetweentwonodesthatarediscovered.
Externalinterfacesarethosethatconnectanodethatisdiscoveredtoonethatisnot.
Theseexternalinterfacestypicallysendtraffictoupstreamproviders,downstreamcustomers,andtopeers.
Theflowcollectionperimeteristhesetofinterfacesfromwhichflowmeasurementsareaccepted,andbydefault,thisincludesexternalinterfaces.
Thisdefaultdefinitionoftheflowcollectionperimetermightbetoorestrictiveandcouldleadtodiscardingflowmeasurementsoninterfacesthatareperceivedtobeinternal.
Followingaretwosuchexamples.
Edgedevicesthatarehostingexternalinterfacesthatarepartofthediscoveredtopology,butdonotexportflows.
Capacityplanningortrafficengineeringscenariosthatarelimitedtoasub-setofthediscoverednetwork,suchastojustthecorenetwork.
Youcanchangethisdefaultflowcollectionperimeterbyusingtagstocreateblacklistsorwhitelistsofnodesandthenpassingthesetagstoflow_get-ext-node-tags.
Interfacesconnectedtoanodematchingoneormoreofthetaggednodesaremarkedasexcluded,andmeasurementsreceivedbythesenodesarediscarded.
Step1Tagthenodesthatyouwanttobeconsideredexternaltotheflowcollectionperimeter.
Youcanusetable_edit,mate_sql,oranyotherCLItoolthatenablesyoutocreatenodetags.
Example:ThisexampletagsallCiscodevicesusinganIOS-XEoperatingsystemwitha"non_core"tag.
mate_sql-filenodelist.
txt-out-filecore_network.
txt-sql"UPDATENodesSETTags='non_core'WHEREVENDOR='Cisco'ANDOS='IOS-XE'"Step2Sendflow_getalistofthesetagsusingthe-ext-node-tagsoptiontoidentifyoneormorecommaseparatedtagstoexcludefromtheflowcollectionperimeter.
Example:Thisexampleexcludesallnodestaggedwith"non_core"fromthecollectionofflowmeasurements.
flow_get-plan-file/acme/infile.
txt-out-file/acme/outfile.
txt-ext-node-tagsnon_core3-13CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsFlowCollectionCollectFlowsStep1Ifusingtheaugmentedmethodofcollection,youmustberunningtheCollectorserverand/ortheWAENetworkInterface(NI)server.
Optional:ConfiguretheservertocollectBGPpeeringinformationifusingaugmentedsnapshots.
Step2Createthetable.
SeetheTablesection.
Step3Executeflow_managetostarttheflowcollectionserver.
Seetheflow_managesectionandflow_manage-helpoutput.
Step4Configurethesnapshotfilestoexecutetheappropriatesnapshottasks,includingflow_get.
Seetheflow_getsection,SnapshotIntegrationsection,andflow_get-helpoutput.
SnapshotIntegrationTheflow_managetoolisexecutedoutsideofsnapshotfiles.
Theflow_gettool,however,andothernecessaryCLItoolsareintegratedwithintheWAECollectorsnapshotprocess(Figure3-1).
Thesnapshotfilesincludetherequiredtasks,whichmustbeexecutedinthefollowingorder.
Toexecuteatask,uncommentit(removetheinitial#sign).
Notethatwhilemanytasksareoptional,thefollowingsequenceincludesFIND_BGPandTRIM_NODESsincetheyarecommonlyused.
NoteIfcombiningwithcollector_getplanwithflow_get,youmustexecuteflow_getaftercollector_getplan.
WhenyoucallFIND_BGP,thefollowinginformationiscollected.
IngresspeerASandassociatedinterfaceinformationforIPv4andIPv6eBGPmultihoppeerinterfaceinformationTasksnapshot_augment_collector.
txt(AugmentedCollection)snapshot.
txt(ManualCollection>SNMP_FIND_INTERFACESxFIND_BGP(optional)xSNMP_POLLxDMD_MESH_CREATOR(whenthereisincompleteNetFlowcoverageandthereisaneedtorunDemandDeduction)xxFLOW_GETxxTRIM_NODES(optional)xxDMD_DEDUCT(whenthereisincompleteNetFlowcoverageandthereisaneedtorunDemandDeduction)xx3-14CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsOfflineDiscoveryCollectionofbothingressandegresspeerASinformationmakesitpossibleforWAECollectortoaccuratelycharacterizeBGProutingasymmetry.
Thesnapshot_augment_collector.
incandsnapshot.
incfilesincludesallthenecessaryCLItoolsforcollectingflowdata.
Ifneeded,changethetools'definitionstomeetyourflowcollectionneeds.
OfflineDiscoveryNoteConfiguringget_configsissupportedinbothaugmentationandmanualcollectionmethods.
Usingparse_configstoaugmentaplanwithRSVPLSPand/orSRLGdataissupportedthroughtheaugmentationmethod.
Configuringparse_configstocreateaplanfileforoveralltopologyissupportedonlyinmanualcollection.
ThischapterdescribestheCLItoolsavailabletodiscoverandretrieveinformationfromrouterconfigurationtoolsandfromRRDtools,suchasCricket,Cacti,andMRTG.
ImportDatabasesThefollowingtoolsareusefulforcapturingandimportingnetworkinformation.
Forinstance,youcancapturetheconfigurationfilesorIGPdatabasesandimportthemintoWAECollector.
get_configs—Readstheconfigurationfilesfromalistofroutersandsavestheminthespecifieddirectory.
parse_configs—ReadsasetofCiscoand/orJuniperNetworksrouterconfigurationfiles,andcreatesaplanfileofthenetwork.
SeetheImportRouterConfigurationFilessection.
ForinformationonusingthistoolfromtheWAEDesignGUI,seetheCiscoWAEDesignIntegrationandDevelopmentGuide.
parse_igp—ConvertsIGPinformationfromroutershowcommandstoaplanfile.
SeetheImportIGPDatabasesection.
ForinformationonusingthistoolfromtheWAEDesignGUI,seetheCiscoWAEDesignIntegrationandDevelopmentGuide.
get_showandget_xml—ToolsforenteringroutershowcommandsandtheXMLequivalentsforfurtherprocessingbytheuseroranapplication.
ThesecommandsaretypicallyusedbecausetheWAECollectordoesnotincludetheoutputofthecommandsduringplanfilecreation.
Theget_xmltoolofferssimilarfunctionstoget_show.
ItisusedtogetstructureddatafromdevicesbyexecutingXMLcommandsonthem.
Thecommandformatisdevice-dependent.
NoteThissectioncontainsexamplesforCiscoandJuniperrouters.
Forinformationaboutnetworkdiscoveryofroutersforothervendors,pleasecontactyoursupportrepresentative.
ImportRouterConfigurationFilesTheparse_configstoolreadsCisco,Juniper,andHuaweirouterconfigurationfiles,andcreatesaplanfile.
Therouterconfigurationfilesfromthenetwork,orpartofthenetwork,needtobeavailableinaspecificdirectory.
Theparse_configstoolreadsfilesinthisdirectory(-data-diroption),determinestheroutertype/vendor,andparsestheconfiguration.
3-15CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsOfflineDiscoveryThefollowinginformationcanbereadfromarouterconfigurationfiletocreatetheplanfile.
Afterparsingthisinformation,thetoolmatchescorrespondinginterfacesintheIGPmeshtocreatethenetworktopology.
Withthe-igp-protocoloption,youcanselectwhichinterfacesarepartofthetopology:IS-ISand/orOSPFenabledinterfaces.
Thedefaultisisis.
ForIS-ISnetworks,thetoolcanreadIS-ISLevel1,Level2,orbothLevel1andLevel2metrics.
Ifbothareselected,parse_configscombinesbothlevelsintoasinglenetwork,andLevel2metricstakeprecedence.
The-isis-leveloptionspecifieswhichoptiontouse;thedefaultisLevel2.
ForOSPFnetworks,thetoolcanreadinformationforsingleormultipleareas.
The-ospf-areaoptionspecifiestheareaIDorall.
Thedefaultisarea0.
ASNisignoredbydefault.
However,fornetworksthatspanmultipleBGPASNs,usethe-asnoptiontoreadinformationfrommorethanoneIGPprocessIDorinstanceIDinanASN.
Sharedmediasegmentsinthenetwork(nonpoint-to-pointcircuits,suchasEthernet)areincludedinthetopologybydefaultunlessthe-shared-mediaoptionissettofalse.
Apseudonodeandinterfacerepresentingthemediumarethencreatedforeverysharedmediumwithmorethantwohosts,asusedbyOSPFandIS-ISroutingprotocols.
Withthe-plan-fileoption,youcanmergeanexistingplanfilewithrouterconfigurationstocreateanaugmentedplanfile.
Forexample,youcouldusetheparse_igpoutputastheinputintoparse_configs.
NoteAusefultoolformaintaininganarchiveofrouterconfigurationfilesisRANCID(http://www.
shrubbery.
net/rancid/).
ImportIGPDatabaseTheparse_igptoolreadsoneormoredatabasesthataregeneratedfromarouter'sCLI.
Withthe-igp-protocoloption,youcanselectanIGPprotocol.
IS-ISIPv4orIPv6usingtheisisorisisv6option,respectivelyOSPFIPv4orIPv6usingtheospforospfv3option,respectivelyRouternameVendorModelOSRouterIPaddress(loopback)ManagementinterfaceIPaddress(CiscoIOSXRandJuniperJunos)Interfacenames(insideIGPtopology)InterfaceIPaddressesInterfacecapacities(ifavailable)IGPtypeandmetrics(IS-ISorOSPF)–ProcessID(OSPF)–InstanceID(IS-IS)RSVPreservablebandwidth(MPLS)MPLSLSPs(includingbandwidthandFRRLSPs)LAG1portsandbundleportsSRLGs,includingwhichSRLGsareconfiguredonwhichnodes(CiscoandJuniper)VPNinterfacesVPNPEmembership1.
LAGisspecifictoEthernet.
Bundleisgenericandappliestodifferentlinktypes.
3-16CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsOfflineDiscoveryWiththe-plan-fileoption,youcanmergeanexistingplanfilewiththeIGPdatabasestocreateanaugmentedplanfile.
Forexample,youcouldusetheparse_configsoutputastheinputintoparse_igp.
IS-ISThistoolcangenerateatopologyoutofanIS-ISLevel1,Level2,orbothdatabasesusingthe-leveloption.
TocaptureanIS-ISdatabasefromtheCLI,logintoarouterwithintheIS-IStopology,displaytheIS-ISdatabase,andsavetheoutputofthatsessiontoafile,asfollows.
Step1Establishaterminalsessiononahostthathasdirectaccesstothenetworkrouters,forexample,usingtelnetorSSH.
Step2Initiateaprocesstocapturetheentiresession.
Step3Logontotheseedrouter,whichisarouterthatcontainsIGPinformationforthenetwork.
Step4Disablepagingofoutputbysettingtheterminallengthtoinfinite(0).
Step5CiscoOption:DisabledynamichostresolutioninIS-ISifhostnamesarelongerthan14charactersandtheuniquepartofthenameisafter14characters.
Ciscorouterstruncatenamesat14characters.
Todisabledynamichostresolution,entertherouterisiscommandmode,andthenrunthiscommand.
nohostnamedynamicStep6DisplaytheIS-ISlink-statedatabase(LSDB).
Step7Logoutoftherouter,thenetworkhost,andthescreencapture,eachtimeusingtheexitcommand.
Step8Saveyoursessioncapturethatwasinitiatedinstep#2(exitwhenusingscript).
RepeattheabovestepstocaptureIS-ISdatabasesfromadditionalrouters(Level1andLevel2),ifnecessary.
Theresultingfileordirectoryincludesloginandlogoutcommands,aswellasoutput.
Nowyoucanusetheparse_igptool.
Usethe-leveloptiontospecifywhetherdiscoveringLevel1orLevel2topologyorboth;thedefaultislevel2.
Passthefilecreatedintheabovestepsusingthe-database-fileoption.
Iftherearemultiplefiles(multi-leveltopologies),passthedirectorynamewherethefilesarelocatedusingthe-database-diroption.
Example:ThiscommandusesIS-ISLevel2topologyinformationstoredinthemobile_database.
txtfiletocreateaplanfilecalledmobile_model.
txt.
parse_igp-igp-protocolisis–database-filemobile_database.
txt–out-filemobile_model.
txtCisco:terminallength0Juniper:setcliscreen-length0Cisco:showisisdatabaseverboseJuniper:showisisdatabaseextensive3-17CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsOfflineDiscoveryIS-ISDatabaseInformationBydefault,theIS-ISprotocolusedinIPnetworks(nonMPLS)doesnotdistributetheIPaddressesoftheinterfacesinthenetwork,northecircuitcapacities.
WhentheIS-ISTE-extensions(forMPLS)havebeenenabledinthenetwork,thatinformationbecomesavailable,andwillalsobeusedbyparse_igp.
Cisco—YoumustspecificallyenabletheTEextensionsusingmplstraffic-englevel-2intherouterisisconfigurationsection,andmplstraffic-engtunnelsontheinterfaces.
DoingsomakesboththeIPaddressesandcircuitcapacitiesavailableinIS-IS(andparse_igp).
JuniperNetworks—IS-ISTEextensionsareenabledbydefault,andIPaddressesareavailableforallinterfacesinthoserouters.
IfRSVPisalsoenabledonaninterface,thecapacityofthatcircuitisavailableinIS-IS.
Enablethe-use-dnsoptionbysettingittotrueifDNS(domainnameserver)needstoresolveIPaddresses(routernames)intheIS-ISdatabasefile.
NoteParallelcircuits(non-TEenabled)betweentwoCiscorouters,showupintheIS-ISdatabaseasasinglecircuit.
OSPFTocaptureanOSPFdatabasefromtheCLI,logintoarouterwiththeOSPFtopology,displaytheOSPFdatabase,andsavetheoutputofthatsessiontoafile.
Step1Establishaterminalsessiononahostthathasdirectaccesstothenetworkrouters,forexample,usingtelnetorSSH.
Step2Initiateaprocesstocapturetheentiresession.
Step3Logontotheseedrouter.
ThisisarouterthatcontainsIGPinformationforthenetwork.
Step4Disablepagingofoutputbysettingtheterminallengthtoinfinite(0).
Cisco:terminallength0JuniperNetworks:setcliscreen-length0Step5FollowtheappropriateCiscoorJuniperNetworksstep.
3-18CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsOfflineDiscoveryStep6Logoutoftherouter,thenetworkhost,andthescreencapture,eachtimeusingtheexitcommand.
Step7Saveyoursessioncapturethatwasinitiatedinstep#2(exitwhenusingscript).
RepeattheabovestepstocaptureOSPFdatabasesfromadditionalareaborderrouters(ABRs),ifnecessary.
Theresultingfileordirectoryincludesloginandlogoutcommands,aswellasoutput.
Nowyoucanpassthefilecreatedintheabovestepstousingtheparse_igptoolusingthe-database-fileoption.
Iftherearemultiplefiles,thenpassthedirectorynamewherethefilesarelocatedusingthe-database-diroption.
Bydefault,parse_igpcollectstheOSPFarea0link-statedatabase(LSDB).
Togeneratetopologiesfromnon-zeroareaLSDBs,usethe-ospf-areaalloption.
ThetoolthenidentifiesallABRsandbuildsacompletemulti-areaOSPFnetworktopology.
Notethatthelogin_find_igp_dbtoolusesthis-ospf-areaalloptionaswell.
OSPFDatabaseInformationUnliketheIS-ISdatabase,theOSPFdatabasehasIPaddressinformationforallinterfacesinthenetwork.
IfthenetworkisTE-enabled,theOSPFdatabasealsocontainscircuitcapacities.
Enablethe-use-dnsoptionbysettingittotrueifDNSneedstoresolveIPaddresses(routernames)intheIS-ISdatabasefile.
CiscoJuniperNetworksIfthesystemsupportsDNS,enableitsothedatabaseincludeshostnames,ratherthanjustIPaddresses.
Entertheconfigurationcommandmode,andthenenterthiscommand.
IOS:ipospfname-lookupIOSXR:ospfname-lookupDisplaytheOSPFdatabase.
IOS:showipospfdatabaserouterIOSXR:showospfdatabaserouterDisplaytheOSPFTEdatabase.
IOS:showipospfdatabaseopaque-areaIOSXR:showospfdatabaseopaque-areaDisplayOSPFv3database(IOSonly)showipv6ospfdatabaseroutershowipv6ospfdatabaselinkshowipv6ospfdatabaseprefixDisplaytheOSPFdatabase.
IfthesystemsupportsDNS,pipetheoutputoftheshowcommandtotheresolversothedatabasehashostnames,ratherthanjustIPaddresses.
showospfdatabaseextensive|resolveOtherwise,justshowthedatabase,whichidentifiesroutersbyIPaddressonly.
showospfdatabaseextensiveDisplayOSPFv3database.
showospf3databaseextensive3-19CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsOfflineDiscoveryNoteParsingIGPwiththeOSPFprotocoloptiononlyprocessesarea0routersperdefault.
Usethe-areaoptiontoselectanotherarea,orallforallareas.
get_showandget_xmlTheget_showtoolisawrapperforenteringashowcommandononeormorerouters.
Forexample,theget_showtoolwitha-cmdargumentofshowconfigurationisequivalenttotheget_configstool.
The-command-tableoptionenablesyoutoentervendor-specificCLIcommands,suchasanICMPpinginmulti-vendornetworks.
YoucouldalsousethistooltogetanOSPForIS-ISdatabasefromtherouter.
Becauseshowcommandsarehighlydependentonroutertypes,thistoolcanonlyoperateonahomogeneoussetofrouterswhenmorethanoneisspecified.
TheIS-ISandOSPFshowcommandsarelistedintheIS-ISandOSPFsections,respectively.
Inthe-nodes-tableor-nodesarguments,ifanIPaddressisavailable,itisused.
Otherwise,anIPlookupthroughDNSistried.
Ifthatfails,anerrorisreturned.
Theget_xmltooloffersthesamefunctionasget_show.
ItisusedtogetstructureddatafromdevicesbyexecutingXMLcommandsonthem.
Thecommandformatisdevice-dependent.
ImportTrafficfromRRDToolsWAECollectorcanimportnetworkinformationfromthefollowingRRDtools.
CricketCactiMRTGCricketThecricket_poll_interfacestoolreadsarouterinterfacesfile,discoverswhichinterfacesthefilespecifies,andtheRRDfilesthatcontainthedataassociatedwitheachinterface.
ItthenreadsthetrafficmeasurementsfromtheRRDfileandimportsthemintototheandtablesinaplanfile.
CactiBecauseCactiiswritteninPHPandusesmysql,theimporterisalsoimplementedwithaPHPscript.
InstallthePHPscriptonthewebserverthatisrunningCacti,andtheninvokecacti_poll_interfacestoimportthetrafficmeasurementsintotheandtablesinaplanfile.
http://.
.
.
/cacti/graph_info.
phpget=tabToinstallthePHPscriptonawebserverrunningCacti,followthesesteps.
Step1CopythePHPscripttothewebserver.
YoumusthaveaguestaccountsetupforCacti.
Thescriptlocationisasfollows.
3-20CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsSAMCollection$CARIDEN_HOME/lib/php/cacti/graph_info.
phpStep2Add"graph_info.
php"=>7,toinclude/global_arrays.
php.
Thearraylocationisasfollows.
$user_auth_realm_filenamesToimporttrafficmeasurementsintoaplanfile,callcacti_poll_interfacesandprovidetheCactiURLasanargument.
http://.
.
.
/cacti/graph_info.
phpget=tabMRTGThemrtg_poll_interfacestoolimportstrafficmeasurementsintoaplanfilebyreadinganMRTGconfigurationfile.
Firstitdiscoverswhichinterfacestheconfigurationfilespecifies,alongwiththeRRDfilesthatcontainthedataassociatedwitheachinterface.
ThenitreadstheRRDfilesandimportsthetrafficmeasurementsintotheandtablesinaplanfile.
SAMCollectionNoteIntegratingSAMcollectionintothesnapshotprocessissupportedonlyforthemanualcollectionmethod.
Additionally,youcannotrunsam_getplanwiththeWAENetworkInterface(NI)server.
WAECollectorincludesanintegrationtoolforAlcatel-Lucent's5620ServiceAwareManager.
TheinformationcollectedfromaSAMservercanbeintegratedintotheWAECollectorsnapshotprocess.
Thischapterisdividedintothefollowingmainsections.
SAMDiscovery—ListstheinformationthatWAECollectorgathersfromSAM.
ConfigureSAMforUsewithWAECollector—DescribeshowtoconfiguretheSAMservertocollectstatisticsforusewithWAECollector.
SAMIntegration—DescribesoptionsforretrievingtopologyandtrafficmeasurementsfromanetworkmanagedbyaSAMserver.
SAMDiscoveryWAECollectorcollectstheobjects,routingandpeeringinformationandassociatedtrafficfromSAMtoolsasdefinedinTable3-3.
WAECollectordoesnotcollectthisinformationforpoint-to-multipoint(P2MP)LSPs,serviceclasses,Layer1topology,orthemappingofinterfacequeuestoserviceclasses.
TrafficdatacollectionispossibleonlythroughSAM.
3-21CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsSAMCollectionSDPsAlcatel-Lucent'sVPNservicetrafficistransportedbetweenprovideredge(PE)routersbycircuitsaggregatedinunidirectionalservicetunnelscalledSDPbindings.
TheseSDPsterminateatadestinationrouter,whichdirectspacketstothecorrectserviceegressinterfaceonthatdevice.
SDPsarenotusedforlocalservicesbecausethesamePErouteristhesourceandthedestination.
EachSDPencapsulatesthedatabetweenthetwoPEroutersandappearsasanL2pathtotheservicetraffic,althoughitisactuallytraversinganIPorIP/MPLScore.
WAECollectordoesnotmodelSDPs.
Table3-3WAECollectorDiscoverywithSAMIntegrationDiscoveredDescriptionObjectsNodesInterfacesInterfaceQueues(egressonlyorcombinedegressandingress)RSVP-TELSPsFRRLSPsShared-risklinkgroups(SRLGs)LAGportsLayer2(L2)VPNs(VLLandVPLS)Layer3(L3)VPRNsT1/E1bundleportsRoutingandPeeringInformationOSPFIS-ISRSVP-TETrafficInterfacesInterfaceQueuesRSVP-TELSPs1Servicedistributionpoints(SDPs)L2andL3VPNaccessinterfacesLAGsT1/E1bundles1.
YoucancollecteitherLSPorSDPtrafficstatistics,butnotboth.
PerformanceInterfaces–Droppedpacketsout–ErrorpacketsinNodes–Memoryutilization–RouteProcessor(CPU)utilization3-22CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsSAMCollectionWAECollectorretrievesandstoresSDPstatisticsinplaceofLSPstatisticsonlywhenLSPtrafficstatisticsarenotavailableinSAMduetoAlcatel-Lucenthardwarelimitations.
ConfigureSAMforUsewithWAECollectorBeforeusingWAECollectordiscoverytoolswithSAM,youmustconfigureSAMsothatWAECollectorcanimportthestatisticscollected.
Therearefourrequiredsteps.
Step1ConfigureSAMGroupandUserAccountwithOSSPermission(setuptheuseraccountontheSAMserver).
Step2ConfigureSAMtoCollectandStorePerformanceStatistics.
Step3ConfigureSAMtoCollectandStoreAccountingStatistics.
Step4VerifyAccountingStatisticsCollectionforspecificpolicies.
OnceyouhaveconfiguredSAM,waitforpollingtooccurtwice.
Bydefaultthepollingtimeis15min,inwhichcaseyouneedtowaitatleast30minutesbeforeloadingtheplanfile.
NoteTheseinstructionsareforSAMversion9.
0.
AlthoughthestepsareapplicabletoallSAMversions,theactualinterfaceoptions(forexample,menus)mightbedifferentforotherversions.
ConfigureSAMGroupandUserAccountwithOSSPermissionToconstrainaccesstothoseusingWAEandgivethatgrouppermissiontotheAPI,youmustcreatethegroupanditsusers,andassignthegroupanosspermission.
LogintotheSAMserver.
CreateanOSSPermissionforanewgroupthatwillbeusingWAE.
CreateaGroupforWAEUsersandassignthisgrouptheosspermission.
AddUserstotheWAEGroup.
CreateanOSSPermissionStep1CreateanosspermissionforanewgroupofuserswhowillbeusingWAE.
Step2SelecttheAdministration>Security>5620_SAMUserSecuritymenu.
Step3SelecttheScopeofCommandtab.
Step4ClickCreate,andselectProfile.
TheScopeofCommandProfiledialogboxappears(Figure3-2).
a.
IntheProfileNamefield,enteross.
b.
Optional:Enteradescription.
c.
SelecttheRolestabandclickAdd.
d.
SelectOSSManagementfromtheRoleNamelist.
e.
ClickOKtoadd,andthenagaintoconfirm.
f.
ClickOKtoacceptthechangesandclosetheScopeofCommandProfiledialogbox.
3-23CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsSAMCollectionStep5Ifcontinuing,leavethe5620_SAMUserSecuritydialogboxopen.
Otherwise,clickCanceltocloseit.
Figure3-2ExampleofCreatinganOSSPermissionCreateaGroupforWAEUsersCreateagroupforusingWAEandassignthisgrouptheossrole.
Step1SelecttheAdministration>Security>5620_SAMUserSecuritymenu.
Step2SelecttheUserGroupstab.
Step3ClickCreate.
TheUserGroupdialogboxappears.
a.
IntheUserGroupname,enter5ormorecharacterstoidentifythegroupthatwillbeusingWAE.
Forexample,wae-oss.
b.
Optional:Enteradescription.
c.
IntheScopeofCommandarea,clickSelect.
d.
Selecttheossprofilenamethatyoujustcreated(Figure3-3).
e.
ClickOK.
f.
IntheSpanofControlarea,clickSelect.
g.
Selectdefaultastheprofilename.
h.
ClickOK.
i.
ClickOKtoacceptthechangesandclosetheUserGroupdialogbox.
Step4Ifcontinuing,leavethe5620_SAMUserSecuritydialogboxopen.
Otherwise,clickCanceltocloseit.
3-24CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsSAMCollectionFigure3-3ExampleScopeofCommandEntryAddUserstotheWAEGroupAddoneormoreuserstotheWAEgroup.
Step1SelecttheAdministration>Security>5620_SAMUserSecuritymenu.
Step2SelecttheUserstab.
Step3ClickCreate.
TheUserdialogboxappears.
a.
IntheUserNamefield,entertheuser'sname.
b.
Optional:Enteradescription.
c.
NexttotheUserGroupfield,clickSelect.
d.
Selectthegroupyoujustcreated.
e.
ClickOK.
f.
InthePasswordarea,enteryouruserpasswordinthePasswordfield.
Re-enterthepasswordintheConfirmPasswordfield.
g.
ClickOKtoacceptthechangesandclosetheUserdialogbox.
Step4ClickCanceltoclosethe5620_SAMUserSecuritydialogbox.
ConfigureSAMtoCollectandStorePerformanceStatisticsStep1SelecttheTools>Statistics>MIBPoliciesmenu.
Step2ClickSearchtoviewalistofallMIBstatisticspolicies.
Step3SelectDefaultStatsPolicyfromthislist.
Step4ClickProperties.
TheNEMIBStatisticsPolicy(SNMP)dialogboxappears.
a.
SelecttheMIBEntryPoliciestab.
b.
Foreachtypeofperformancestatisticsyouarecollecting,enteritsMIBentrynameintheMIBEntrynamefield,andthenpressEnter(Return).
OnceyoupressEnter,thetableofallroutersthatcanbepolledappears.
3-25CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsSAMCollectionc.
Fromthetable,selectallroutersthataretobepolled.
d.
ClickProperties.
e.
ChangetheAdministrativeStatetoUp.
f.
SetthePollingIntervaltolessthantheintervalatwhichtheWAECollectorsnapshotisrun.
NoteSetthefilepolicyRolloverandtheaccountingstatisticCollectionIntervaltothesamevalues.
RefertoTable3-4forrecommendedsettings.
g.
ClickOK,andthenclickYestoconfirmyouwanttochangethestate.
WhenyoureturntotheMIBEntryPoliciestab,noticetheAdministrativeStatecolumndisplaysUpforeachroutertowhichyouappliedthechange.
h.
ClickCanceltoclosetheNEMIBStatisticsPolicydialogbox.
i.
ClosetheMIBStatisticsPolicydialogbox.
ConfigureSAMtoCollectandStoreAccountingStatisticsWAECollectorcanimportbothLSPandinterfacequeuestatisticsfromSAM.
AsanalternativetoLSPstatistics,WAECollectorcanimportSDPstatistics.
Alloftheseareatypeofaccountingstatistic.
Toimportthese,youmustfirstconfigureSAMbyloggingintotheSAMserverandcreatingtwopolicies.
CreateaFilePolicyforstoringthestatistics.
CreateanAccountingPolicythatcollectsthestatisticsandwritesthemtothefilepolicy.
Theremustbeaone-to-onemappingbetweeneachofthesetwopolicies.
Forexample,ifyoucreateanaccountingpolicyforcollectingLSPstatistics,thenyouwouldalsocreateafilepolicyforstoringthoseLSPstatistics.
ThesameistrueforinterfacequeueandSDPstatistics.
AfterconfiguringSAM,youmustthenapplytheaccountingpoliciestotheobjectsontherouters.
SeetheApplyAccountingPoliciessection.
NoteTherearecombinationsofAlcatel-Lucentrouterhardware,operatingsystem,andSAMversionthatdocollectLSPstatistics.
Contactyoursupportrepresentativeforthisinformation.
StatistictoCollectMIBEntryNameInterfaceperformanceifXEntryErrorpacketsinDroppedpacketsoutifEntryMemoryavailablesgiMemoryAvailableMemoryusedsgiMemoryUsedRouteProcessor(CPU)utilizationtmnxSysCpuMonEntry3-26CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsSAMCollectionCreateaFilePolicyCreateafilepolicyanddistributeittoallroutersforwhichthestatisticswillbecollected(Figure3-4).
Step1SelecttheTools>Statistics>FilePoliciesmenu.
TheFilePoliciesdialogboxappears.
Step2ClickCreate.
AFilePolicy,GlobalPolicydialogboxappears.
a.
IntheDisplayedNamefield,enterthefilepolicyname.
b.
Optional:Enteradescription.
c.
IntheFilearea,Rollover(minutes)field,entertheintervalatwhichthedatafilewillbewrittenover.
Bydefault,itis1440,whichmeansevery24hoursanewfileiscreated.
NoteSetthefilepolicyRolloverandtheaccountingstatisticCollectionIntervaltothesamevalues.
RefertoTable3-4forrecommendedsettings.
d.
IntheFilearea,Retention(hours)field,therecommendationistokeepthedefaultof12hours.
Thisvaluedependsontheamountofstoragecapacityavailable.
e.
IntheDrivelist(Locationarea),selecttheprimarylocationforstoringthestatistics.
f.
IntheStorageDriveBackuplist(BackupLocationarea),selectthesecondarylocationforstoringthestatisticsintheeventofafailureintheprimarystoragedevice.
g.
ClickApplytoacceptthechangesandclosetheFilePolicydialogbox.
h.
ChangetheconfigurationmodefromDrafttoReleased.
i.
InthePolicyConfigurationarea,clickSwitchModetochangetheconfigurationmodefromDrafttoReleased.
j.
ClickYestoconfirmyouwanttochangethemode.
k.
ClickCanceltoclosethedialogbox.
Step3IntheFilePoliciesdialogbox,selectthenewlycreatedfilepolicy.
Step4ClickDistributetodistributethefilepolicytoalltheroutersforwhichstatisticswillbecollected.
TheDistribute-Filedialogboxappears.
a.
Selecttherouterstowhichyouaredistributethispolicy.
UseCtrl-A(Cmd-AonMac)toselectallroutersinthetable.
b.
Clicktherightarrow.
Theentriesaremovedfromtheleft(AvailableNodes)totheright(SelectedNodes).
c.
ClickDistribute.
d.
ClickCanceltoexittheDistribute-Filedialogbox.
Step5ClosetheFilePoliciesdialogbox.
3-27CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsSAMCollectionFigure3-4ExampleofCreatingaFilePolicyforLSPsCreateanAccountingPolicyCreateanaccountingprofileanddistributeittotheroutersforwhichstatisticswillbecollected(Figure3-5).
Createonlyoneaccountingpolicypertypeoftrafficstatisticsyouarecollecting.
NoteL2/L3meanseitherL2orL3.
Step1SelecttheTools>Statistics>AccountingPoliciesmenu.
TheAccountingPoliciesdialogboxappears.
Step2ClickCreate.
AnAccountingPolicy,GlobalPolicydialogboxappears.
a.
IntheDisplayedNamefield,entertheaccountingpolicyname.
b.
Optional:Enteradescription.
c.
IntheTypelist,selectthetypeofstatisticstocollect.
RefertoTable3-4.
SincenotallAlcatel-LucentrouterssupportthedirectcollectionofLSPstatistics,WAECollectoralternativelycollectsSDPtrafficstatistics.
However,youcancollecteitherLSPorSDPtrafficstatistics,butnotboth.
WhileWAECollectorusesonlyegressstatistics,wesupportsettinguptheSAMservertocollectacombinationofnetworkegressandingressoctetsforinterfacequeues.
Table3-4AccountingStatisticsandCollectionIntervalToCollectSelectTypeSetCollectionInterval*MPLSRSVP-TELSPstatisticsCombinedMPLSLSPEgress5InterfacequeuestatisticsNetworkEgressOctet15CombinedNetworkIngEgrOctets15SDPstatisticsCompleteServiceSDPIngressEgress53-28CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsSAMCollectiond.
SettheCollectionInterval(m)fieldtotheintervalforcollectingstatistics.
Table3-4liststherecommendedcollectionintervals.
e.
FromtheFilearea,clickSelect.
f.
Selectthefilepolicythatyouwanttoassociatewiththisaccountingpolicy.
g.
ClickOK.
h.
ClickApplytoacceptthechanges.
i.
ChangetheconfigurationmodefromDrafttoReleased.
j.
InthePolicyConfigurationarea,clickSwitchModetochangetheconfigurationmodefromDrafttoReleased.
k.
ClickYestoconfirmyouwanttochangethemode.
l.
ClickCanceltoexitthedialogbox.
Step3IntheAccountingPoliciesdialogbox,selectthenewlycreatedaccountingpolicy.
Step4ClickDistributetodistributetheaccountingpolicytoalltheroutersforwhichstatisticswillbecollected.
TheDistribute-Accountingdialogboxappears.
a.
Selecttherouterstowhichyouaredistributingthispolicy.
UseCtrl-A(CmdonMac)toselectallroutersinthetable.
b.
Clicktherightarrow.
Theentriesaremovedfromtheleft(AvailableNodes)totheright(SelectedNodes).
c.
ClickDistribute.
d.
ClickCanceltoexittheDistribute-Accountingdialogbox.
Step5ClosetheAccountingPoliciesdialogbox.
Figure3-5ExampleofCreatinganLSPAccountingPolicyL2/L3VPNaccessinterfacestatisticsCompleteServiceIngressEgress5*SetthefilepolicyRolloverandtheaccountingstatisticCollectionIntervaltothesamevalues.
Thesam_getplantoolusesthemostrecentlygatheredperformanceandaccountinginformationgathered.
Table3-4AccountingStatisticsandCollectionInterval(continued)ToCollectSelectTypeSetCollectionInterval*3-29CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsSAMCollectionApplyAccountingPoliciesAfterthefileandaccountingpolicieshavebeencreatedanddistributedtotherouters,youmustapplytheaccountingpoliciestotheobjectsontherouters.
Forexample,ifyoucreatedafilepolicyandaccountingpolicytocollectandstoreLSPstatistics,youmustthenapplythataccountingpolicytoLSPsontherouters.
Notethatyoucanapplyonlyoneaccountingpolicyofthesametype.
Afterapplyingtheseaccountingpolicies,youcanverifythattheyhavebeenappliedusingtheSAMinterface.
SeetheVerifyAccountingStatisticsCollectionsection.
Followingthestepsinthissectionalleviatestheneedtomanuallyconfiguretherouters.
LSPStatisticsFollowthesestepstoassociateanaccountingpolicywithLSPsconfiguredontherouters.
Step1SelecttheManage>MPLS>DynamicLSPsmenu.
TheManageDynamicLSPsdialogboxappears.
Step2ClickSearchtopopulatethelistofdynamicLSPs.
Step3SelectallentriesinthelistbyclickingononeandpressingCtrl-A(Cmd-AonMac).
Step4ClickProperties.
TheDynamicLSP(MultipleInstances)dialogboxappears.
a.
SelecttheAccountingtab.
b.
ClickSelect.
TheSelectAccountingPolicydialogboxappears.
c.
SelectthenewlycreatedLSPaccountingpolicy.
d.
ClickOKtoapplytheaccountingpolicyandclosethedialogbox.
e.
IntheDynamicLSP(MultipleInstances)dialogbox,clickApplyandthenclickYestoconfirmthechanges.
Step5ClosetheManageDynamicLSPsdialogbox.
InterfaceQueueStatisticsFollowthesestepstoassociateanaccountingpolicywithinterfacequeuesconfiguredontherouters.
AQoSnetworkqueuepolicymustbeconfiguredontheserouterports.
Step1SelecttheManage>Equipment>Equipmentmenu.
TheManageEquipmentdialogboxappears.
Step2FromtheSelectObjectTypedrop-downlist,selectFornon-LAGmembers,selectPort(PhysicalEquipment)>PhysicalPort(PhysicalEquipment).
ForLAGmembers,selectPort(PhysicalEquipment)>LogicalPort(PhysicalEquipment).
Step3ClickSearchtopopulatethelistofports.
Step4Setthefilterto"ModeEQUALS(Network)ANDEquippedEQUALS(true).
"a.
Clickthefiltericon.
TheManageEquipment-Filterdialogboxappears.
b.
SettheModevaluetoNetwork.
3-30CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsSAMCollectionc.
FromtheAttributedrop-downlist,selectMode.
d.
FromtheValuedrop-downlist,selectNetwork.
e.
ClickAdd.
f.
SettheEquippedvaluetotrue.
g.
FromtheAttributedrop-downlist,selectStates:PhysicalPort(PhysicalEquipment)>Equipped.
h.
FromtheValuedrop-downlist,selecttrue.
i.
ClickAdd.
j.
ClickApply.
k.
ClickClosetoclosetheManageEquipment-Filterdialogbox.
Step5Selectoneoftheports,andthenpressCtrl-A(Cmd-AonMac)toselectallports.
Step6ClickProperties.
Adialogboxappears.
a.
SelectthePoliciestab.
b.
IntheNetworkQueuearea,clickSelect.
c.
Selecttheappropriatenetworkqueuepolicy,andclickOK.
d.
IntheAccountingarea,clickSelect.
e.
Selecttheaccountingpolicyyouwanttoapply,andclickOK.
f.
SelecttheCollectAccountingStatisticsoption.
g.
ClickApply,andclickYestoconfirmthatyouwanttoapplytheaccountingpolicy.
Step7ClickCanceltoclosethePhysicalPortdialogbox.
Step8ClosetheManageEquipmentdialogbox.
SDPStatisticsFollowthesestepstoassociateanaccountingpolicywithSDPconfiguredontherouters.
Step1SelecttheManage>ServiceTunnelsmenu.
TheManageServiceTunnelsdialogboxappears.
Step2ClickSearchtopopulatethelistwithSDPs(servicetunnels).
Step3SelectoneoftheSDPs,andthenpressCtrl-A(Cmd-AonMac)toselectallofthem.
Step4SelectProperties.
ATunnel(MultipleInstances)dialogboxappears.
a.
SelecttheAccountingtab.
b.
ClickSelect.
TheSelectAccountingPolicy-Tunneldialogboxappears.
c.
SelecttheaccountingpolicythatyoucreatedforSDPs.
d.
ClickOKtoclosethedialogbox.
Step5SelecttheCollectAccountingStatisticsoption.
Step6IntheTunnel(MultipleInstances)dialogbox,clickApplyandthenclickYestoconfirmyouwanttoapplytheaccountingpolicytotherouters.
Step7ClickCanceltoclosetheTunnel(MultipleInstances)dialogbox.
3-31CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsSAMCollectionStep8ClosetheManageTunnelServicesdialogbox.
L2orL3VPNAccessInterfaceStatisticsStep1SelecttheManage>Service>Servicesmenu.
Step2ClickSearchtopopulatethelistwithservices.
AManageServicesdialogboxappears.
Step3SelectoneoftheVPNservicesinthelist.
Forinstance,thesemightbelistedintheServiceNameorServiceIDcolumns.
TheservicemusthaveanassociatedL2/L3accessinterfacewithanoperationalstatusof"up.
"Step4SelectProperties.
AspecificServicedialogboxappears.
a.
SelecttheL2/L3AccessInterfacestab.
b.
Selectallportsinthelist.
c.
ClickProperties.
TheL2/L3AccessInterface-(MultipleInstances)dialogboxappears.
d.
SelecttheAccountingtab.
e.
ClickSelect.
TheSelectAccountingPolicydialogboxappears.
f.
Double-clickthenewlycreatedVPNaccessinterface.
g.
EnsuretheCollectAccountingStatisticscheckboxisselected.
h.
ClickOKtoclosethedialogbox.
Step5ClickOKintheServicesdialogbox,andclickYestoconfirm.
Step6ClosetheManageServicesdialogbox.
VerifyAccountingStatisticsCollectionThereareseveralwaystoverifythatyoucorrectlyconfiguredtheSAMservertocollectstatisticsandthattheaccountingpolicieswerepushedtotheobjectsontherouter.
SimpleVerificationusingtheToolsmenuPerObjectVerificationusingtheManagemenuRouterConfigurationVerificationSimpleVerificationThesimplestmeansofverifyingtheaccountingpoliciesistoselecttheTools>Statistics>AccountingRetrievalStatusmenu.
FindtheaccountingpolicyintheLastPolicyIDRetrievedfield,andcheckthat"Success"islistedintheassociatedStatsRetrievalStatecolumn.
3-32CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsSAMCollectionPerObjectVerificationStep1TheManagemenuyouselectdependsontheobjecttypeyouareverifying.
Step2ClickSearchtopopulatethelistarea.
Step3Selectallobjectsforwhichyouneedtoverifythattheaccountingpolicywasapplied.
Step4ClickProperties.
Step5Ifyouselectedaserviceinstep#3,followthesesteps.
Otherwise,gotostep#6.
a.
SelecttheL2/L3AccessInterfacetab.
b.
Selectallportsonwhichyouneedtoverifythestatisticsarecollected.
Step6SelecttheStatisticstab.
Step7SelecttheobjectfromtheSelectObjectTypedrop-downlist.
Step8VerifytheTimeCapturedcolumnispopulatedwiththetimethestatisticswerelastcaptured.
NoteforL2orL3accessinterfacestatistics,repeatthisverificationforbothingressandegressoptionsinStep7.
ToVerifyAccountingPoliciesFor.
.
.
Select.
.
.
MPLSRSVP-TELSPstatisticsManage>MPLS>DynamicLSPsmenuInterfacequeuestatisticsNon-LAGmembersLAGmembersManage>Equipment>EquipmentmenuFromtheSelectObjectTypedrop-downlist,selectPort(PhysicalEquipment)>PhysicalPort(PhysicalEquipment)FromtheSelectObjectTypedrop-downlist,selectPort(PhysicalEquipment)>LogicalPort(PhysicalEquipment)SDPstatisticsManage>ServiceTunnelsL2/L3VPNaccessinterfacestatisticsManage>Service>ServicesToVerifythisObjectType.
.
.
Select.
.
.
MPLSRSVP-TELSPCombinedMPLSLSPEgress(ServiceManagement)EgressinterfacequeueNetworkEgressOctets(ServiceManagement)CombinedingressandegressinterfacequeueCombinedNetworkEgressOctets(ServiceManagement)SDPCompleteSDPEgressPacketOctets(ServiceManagement)L2/L3VPNaccessinterfaceCompleteServiceIngressPacketOctets(ServiceManagement)CompleteServiceEgressPacketOctets(ServiceManagement)3-33CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsSAMCollectionRouterConfigurationVerificationVerifytheconfigurationontherouterusingtheadmindisplay-configcommand.
FirstverifythatthefilepolicyIDandaccountingpolicyIDvariablesmatchthosethatyouset.
Nextverifythatthestatisticsareenabled(noshutdown).
ThissectionshowsexpectedoutputforLSPs,interfacequeues,SDPs,andVPNs,asfollows.
Figure3-6ExampleVerificationthatLSPFilePolicyandAccountingPolicyAreontheRouterObjectTypeExampleVerificationFilePolicyandAccountingPoliciesWereSetExampleVerificationStatisticsAreEnabledMPLSRSVP-TELSPsFigure3-6Figure3-7EgressinterfacequeuesFigure3-8Figure3-9IngressandegressinterfacequeuesFigure3-10Figure3-11SDPsFigure3-12Figure3-13L2/L3VPNaccessinterfacesFigure3-14Figure3-153-34CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsSAMCollectionFigure3-7ExampleVerificationthatAccountingPolicyWasAppliedtoLSPsontheRouterFigure3-8ExampleVerificationthatEgressInterfaceQueueFilePolicyandAccountingPolicyAreontheRouter3-35CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsSAMCollectionFigure3-9ExampleVerificationthatAccountingPolicyWasAppliedtoEgressInterfaceQueuesontheRouterFigure3-10ExampleVerificationthatCombinedIngressandEgressInterfaceQueueFilePolicyandAccountingPolicyAreontheRouterFigure3-11ExampleVerificationthatAccountingPolicyWasAppliedtoCombinedIngressandEgressInterfaceQueuesontheRouter3-36CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsSAMCollectionFigure3-12ExampleVerificationthatSDPFilePolicyandAccountingPolicyAreontheRouterFigure3-13ExampleVerificationthatAccountingPolicyWasAppliedtoSDPsontheRouter3-37CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsSAMCollectionFigure3-14ExampleVerificationthatVPNFilePolicyandAccountingPolicyAreontheRouterFigure3-15ExampleVerificationthatAccountingPolicyWasAppliedtoVPNsontheRouterSAMIntegrationTheSAMGetPlan(sam_getplan)toolgeneratesplanfilesthroughinterfacingwith5620SAMservers.
Generatedplanfilesincludenetworktopologyandtrafficmeasurements.
SAMGetPlanimplementsoptionsneededtoretrievenetworktopologyandtrafficmeasurementsfromanetworkmanagedbyaSAMserver.
EstablishesasessionwiththeSAMserver.
DiscoversnetworktopologyfromOSPForIS-ISparameters.
DiscoversroutermodelandSROSversion.
Optional3-38CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsSAMCollection–DiscoversMPLSRSVP-TELSPs,interfacequeues,LAGports(members),SRLGmembers,andVLLEpipe,VPLS,andVPRNVPNs.
–Collectstrafficstatisticsforinterfaces,interfacequeues,LAGports,andeitherRSVP-TELSPsorSDPs.
Thesam_getplantoolcreatesaplanfile.
TheSAMGetPlanGUItoolopenstheplanfileautomatically,whichyoumustthensavetostoreit.
sam_getplanThesam_getplanintegrationtoolinterfaceswithSAMserverstoprovidesimulationandtrafficengineeringforSAM-managednetworks.
Asinglecalltosam_getplanretrievesthenetworktopology,aswellascurrentorhistoricalinterfacetrafficmeasurements,whichcanthenbeusedasinputtoDemandDeduction.
Thetoolquerieseachrouterinthediscoverednetworktoobtainadditionalinformation,suchasroutername,vendor,andmodel.
Italsocreatesaplanfile.
Formoreinformation,seethesam_getplanHelp.
ForinformationonusingthistoolfromtheWAEDesignGUI,seetheCiscoWAEDesignIntegrationandDevelopmentGuide.
Example:ThisisabasicexampleofcollectingOSPFtopologyandinterfacetraffic.
sam_getplan-out-file~/us-wan.
txt-serversam.
vendorisp.
com-usersamuser-pass2021385t121522519l1114a-util-statsloggedstatsExample:ThisisanexampleofgatheringLSPactualpathandtrafficmeasurements.
Afterexecutingit,runtheresolve_plantoolwithitsdefaultoptionsonthenewlygeneratedplanfiletoresolvedestinationnodesinunroutedLSPs.
sam_getplan-out-fileisp2.
txt-serversam.
isp2.
com-userisp2_user–passisp2_pass-util-statsloggedstats-include-lsp-measurementstrue-lsp-actual-pathactual-log-fileisp2-sam_getplan.
logExample:ThisisanexampleofVLLVPNtopologydiscovery.
sam_getplan-out-filevpn_test.
txt-server172.
16.
0.
219-userisp4_admin-passisp4_pass-server-protocolhttps-port8443-vpn-typeVLL:EpipeTheSAMversionusedbysam_getplanislistedintheCommentscolumnoftheNetIntHistorytable.
NoteThesam_getplanintervalsinteractwiththeSAMserverconfigurations.
ThefilepolicyRolloverandaccountingstatisticCollectionIntervalmustbesettothesamevalueontheSAMserver.
Ifneeded,makeadjustmentsusingthesam_getplan-num-logged-traff-leveloption,-logged-measwin-lengthoption,orboth.
The-logged-measwin-lengthoptionmustbelongerthanthemaximumCollectionInterval.
SnapshotIntegrationTheresultoftheSAMserverdiscoverycanbefedintothesnapshotprocessthatcollectsnetworkdatausingotherWAECollectorCLItools.
Theresultingplanfilecanbeinsertedintoanarchiveforusewiththeapplications.
ThisintegrationenablesyoutomoreeasilyuseWAECollectorinenvironmentscontainingbothAlcatelandnon-Alcatelnetworks.
Thesnapshot.
txtfileincludesatask,whichmustbeexecutedbeforeanyothersnapshottasks.
Thesnapshot.
txtfilealsocontainssamenvironmentvariablesthatareusedonlybythesam_getplantool.
Noothertoolsinthesnapshot.
incfileusetheseSAMvariables.
Thereisanaccompanyingdefaultsam_getplandefinedinthesnapshot.
incfile.
3-39CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsNetworkAccessFileThefollowingtableshowsthesequencethatsnapshot.
txttasksmustfollow.
Aswithothercollections,youcanenableothertasks.
Formoreinformationonconfiguringsnapshot.
txtandsnapshot.
incfiles,seeSnapshotFiles.
SAM_GETPLANLOGIN_FIND_IGP_DBSNMP_FIND_NODESSNMP_FIND_INTERFACESSNMP_FIND_RSVP(optional)SNMP_FIND_VPN(optional)SNMP_POLLDiscoveringMulti-VendorNetworkswithSAMIfyouarediscoveringanetworkcontainingbothAlcatelandnon-Alcatelnodes,youmustconfigurethenet_access.
txtfiletotelltheonlinetoolstoignoretheAlcatelnodesforspecificobjects.
Formoreinformationaboutconfiguringthisfile,seetheNetworkAccessFilechapter.
Example:Thisnet_access.
txtexampletellssnmp_find_rsvptoignoreAlcatelnodeswhendiscoveringLSPsandcollectingtheirstatistics,andtellsandsnmp_pollnottocollectanystatisticsfromAlcatelnodes.
NetworkAccessFileNoteEditingthenetworkaccessfileissupportedfortheWAECollectorUIcollectionandforthemanualcollectionmethods.
Anetworkaccessfilecanbeusedtostorenetworkaccessparameters.
Theseincludetimeoutandretrysettings,andsettingsformanagementofmultiplesimultaneousqueries.
Havingthesesettingsinafile,ratherthanasCLIparameters,removestheredundancyacrossmanycallsandallowsformorecomplexsettings(perroutersettings,forexample).
Thenetworkaccessfileprovidesdefaultsettingsforallaccessparameters.
Youcanuseeitherthedefaultnetworkaccessfile,oryoucanmodifyandputitinoneofthefollowinglocations.
Thefileislookedforinthissequence,andthefirstversionfoundisused.
~/.
cariden/etc$CARIDEN_ROOT/etc$CARIDEN_HOME/etc(default)WhentheCollectorserverusesthisfile,itsavesitasnet_access_session.
txtfile.
Augmentedsnapshotsthenusethenet_access_session.
txtfilethatwasuschapter.
NodeRegExpIPRegExpTaskRegExpRouterModeSQLFiltersnmp_find_rsvpIgnoreVendor='Alcatel'snmp_pollIgnoreVendor='Alcatel'3-40CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsNetworkAccessFileBestPracticesMakeacopyofthedefaultnet_access.
txtfilelocatedin$CARIDEN_HOME/etcbeforeeditingit,andedinthelastcollectionbytheCollectorserver.
ForinformationonconfiguringtheCollectorserver,seeCollectingBasicInformationUsingtheWAECollectorUIandputtheeditedversionin$CARIDEN_ROOT/etc.
Thissimplifiestheupgradeprocessandpreservesacopyoftheoriginalifneeded.
Whenupgrading,comparethenet_access.
txtfileinthenewreleasetotheoneintheexistingreleasetodetermineifyoureditsneedtobeincorporatedintothenewnet_access.
txtfile.
FileFormatThenetworkaccessfileconsistsoftwosections:onecontainingtablesthatsetvaluesgloballyandonecontainingtablesthatsetsvaluesonaper-routerbasis.
NoteInthenet_access.
txtfileanemptyfieldmeanseverythingelse,andthismeaningisincontextoftherowsdefinedbeforeit.
Ifitisinthefirstrow,itmeanseverything.
GlobalSettingsWAECollectornetworkcommunicationtoolstakeadvantageofthepollingabilitiesthatsimultaneouslyprocessalargenumberofnetworkrequests.
TheGlobalsectionofthenetworkaccessfiledefinesconstraintsthatareusedtolimittheimpacttoeithertheserverdoingthepollingortothenetworkelementsbetweentheserverandthenetworkbeingpolled.
Examplesofnetworkelementsthatcouldbeheavilyimpactedbypollingtrafficareafirewall,slowWANcircuits,oraNATdevice.
Thissectionconsistsoftwotablesthatworkintandem:and.
—Thistablegroupstogethersettingsthatareusedtoconstrainthespeedofthenetworkcommunications.
Thesesettingsaregroupedintonames(intheNamecolumn),andareactivatedbyreferencingthemintheGlobalModecolumnofthetable.
Thesenamesareuser-definable.
Thenetworkaccessfileincludescommenteddocumentationforeachproperty.
Table3-5providesanexampletable.
—ThistabledefinestheassociationbetweentheentriesinitsTaskRegExpcolumnandtheentriesintheNamecolumn.
–TaskRegExp—ThisistheWAECollectorCLItool.
Thedefaultisablank,whichmatchesallpossibletools.
–GlobalMode—ModetoassigntoallrouterswhenrunningthematchedCLItool.
Table3-6providesanexampletable.
Theemptyfieldatthebeginningofthelastrowmeanseverythingexceptsnmp_pollandsnmp_find_*.
Table3-5ExampleEntriesNamePropertyValueNormalSNMP_max_queries_total1000NormalSNMP_max_open_session200NormalSNMP_collection_interval1200003-41CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsNetworkAccessFilePerRouterSettingsIfyouhaveconcernsaboutspecificdevicetypesoroperatingsystems,youcanconstraintheWAECollectornetworkcommunicationtooltoexecuteonaper-routerbasis.
Forexample,somedevicesmightnotrespondwelltoshortSNMPtimeoutvalueswhentheyarebusy,whileothersmightneedspecialsettingsforloginaccess.
Together,theandtablesenableyoutoadjustthesetypesofsettings.
—Thistabledefinesgroupsofdevicestoeitherblockorconstraintheircommunications.
Foreachname(intheNamecolumn)thatyoucreate,youmustenteravalueforallSNMPproperties.
Thenetworkaccessfileincludescommenteddocumentationforeachproperty.
Table3-7providesanexampletable.
—Thistableassociatesnamedgroupsofparameterswithaspecificsetofdeviceswithinthenetwork.
EachNameentryinthetablehasacorrespondingentryintheRouterModecolumn.
EachRouterModeisdefinedbytheNodeRegExp,IPRegExp,andSQLFiltercolumns.
–NodeRegExpismatchedagainstdevicenames.
–IPRegExpismatchedagainstdeviceIPaddresses.
–SQLFilterisanSQLitesqlcommandthatcanreferenceanycolumnoftheNodestabletomatchdevices.
NormalLOGIN_max_open_sessions10NormalLOGIN_session_open_interval0SlowSNMP_max_queries_total500SlowSNMP_max_open_session50SlowSNMP_collection_interval240000SlowLOGIN_max_open_sessions2SlowLOGIN_session_open_interval1FastSNMP_max_queries_total2000FastSNMP_max_open_session400FastSNMP_collection_interval60000FastLOGIN_max_open_sessions20FastLOGIN_session_open_interval0Table3-6ExampleEntriesTaskRegExpGlobalModesnmp_pollFastsnmp_find_*SlowNormalTable3-5ExampleEntriesNamePropertyValue3-42CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsNetworkAccessFileTheTaskRegExpcolumnprovidesconstraintsforonespecifictoolintheeventthatuniqueparametersarerequiredforonediscoverytask.
Table3-8providesanexampletable.
Theemptyfieldsinthefirstrowmeaneverything.
TheemptyTaskRegExpfieldinthelastrowmeanseverythingexceptsnmp_find_multicastandsnmp_poll.
DiscoveringMulti-VendorNetworkswithSAMIfyouarediscoveringanetworkcontainingbothAlcatelandnon-Alcatelnodes,youmustconfigurethetabletotelltheonlinetoolstoignoretheAlcatelobjectsandtheirtraffic.
Thesimplestmethodistodothefollowing.
Step1Addacomment(#)tothislinetopreventthecollectionofAlcatelstatistics.
#snmp_pollALU_REALTIMEOSREGEXP'^TiMOS.
*'Step2UncommentthislinetoignorethediscoveryofAlcatelnodes,interfaces,andLSPs,andtoignorethecollectionofstatisticsfromthem.
(snmp_find_nodes|snmp_find_interfaces|snmp_find_rsvp|snmp_poll)IgnoreVendor='Alcatel-Lucent'Table3-7ExampleEntriesNamePropertyValueNormalSNMP_max_timeout3IgnoreSNMP_max_timeout0Limit_CRSSNMP_max_timeout3Multicast_LoginSNMP_max_timeout3Multicast_SNMPSNMP_max_timeout3Junos_oldSNMP_max_timeout3Junos_newSNMP_max_timeout3NormalSNMP_RSVP_stats_methodDefaultJunos_newSNMP_RSVP_stats_methodMethod1Junos_oldSNMP_RSVP_stats_methodMethod2Table3-8ExampleEntriesNodeRegExpIPRegExpTaskRegExpRouterModeSQLFilterIgnoreNameREGEXP'^sl-gw.
*'snmp_find_multicastIgnoreNameNOTREGEXP'sl-crs.
*'ANDNameNOTREGEXP'sl-bb.
*'snmp_pollLimit_CRSOSREGEXP'^IOSXR.
*'Normal3-43CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsNetworkAuthenticationTesttheNetworkAccessFileThemate_access_testtoolenablesyoutospecifyanode,nodeIP,andtask,oralternativelyspecifytheroutermodeandglobalmodesettingsdirectly.
Thetoolreturnstheglobalandper-routerparametersettingsthatareappliedifthenetworkaccessfilewereused.
Theoptionis-net-access-file.
Thedefaultvalueisnet_access.
txt.
Usemate_access_test-net-access-filetoseetheglobalandper-routerparametersettingsthatareappliedifanetworkaccessfileisspecified.
Thedefaultvaluefor-net-access-fileoptionreferstothenet_access.
txtfileintheconfigurationpath.
ToolAccessParametersEachWAECollectoronlinetool(forexample,snmp_find_interfaces)containsthreeparameterstocontrolnetworkaccesssettings.
-net_access_file—Overridesthedefaultnetworkaccessfile.
-net_access-router-mode—ThisnamespecifiestheRouterModethatoverridesthetable.
-net-access-global-mode—ThisnamespecifiestheGlobalModethatoverridesthetable.
NetworkAuthenticationNoteCreatingandeditingtheauthenticationfileissupportedforthemanualcollectionmethod.
Theauthenticationfileconsolidatesthelogin,authentication,encryption,communitystrings,andothercredentialsneededbytheWAECollectortoolstoaccessroutersandcollectnetworkdata.
Itisrequiredifthetoolsaretobecalledbyscripts,orifdifferentroutersinthenetworkrequiredifferentauthenticationinformation.
Thefilecanbeencryptedforsecurityandprotectedwithamasterpassword.
Manualsnapshots—Usetheauth.
encauthenticationfile.
Themate_auth_inittoolsimplifiestheprocessofcreatingadefaultauthenticationfile.
Augmentedsnapshots—Usetheauth_session.
encfilethatwasusedinthelastcollectionbytheCollectorserver.
Thepasswordforde-encryptingthisfileissetintheNodeAccesspageoftheWAECollectorUI.
OnlineDiscoveryAuthenticationWhenanonlinediscoverytoolneedsauthenticationinformationforarouter(forexample,snmp_find_interfacesneedsacommunitystringtoperformanSNMPv2cquery),itaccessestheauthenticationfileandlooksforamatchfortherouter.
Ifsuccessful,thetoolusesthecredentialsfromthefiletoaccessroutersandcollectnetworkdata.
Withoutamatchthetoolgeneratesapromptornotification.
SNMPv2c—Promptsforauthenticationcredentialsandproceeds.
SNMPv3—Notifiestheusertocreateanauthenticationfileandterminates.
3-44CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsNetworkAuthenticationYoucandisableuserinteractionbysettingthe-auth-promptoptiontofalse.
CreateanAuthenticationFileNoteUsethismethodofcreatinganetworkauthenticationfileonlyifusingthemanualsnapshotcollectionprocess.
Themate_auth_inittoolisaninteractivetoolthatsimplifiestheprocessofspecifyingadefaultsetofauthenticationcredentialsthatWAECollectortoolsusetoaccessallrouters.
Thefileiscreatedinthedirectoryfromwhichyouexecutethecommand.
Tochangethefilelocation,enterafullpathname.
ThefileitcreateshascredentialsforSNMPv2c,SNMPv3,orboth.
SNMPv2cusesalesssecuresecuritymodel,passingcommunitystringsincleartext.
SNMPv3providesastrongsecuritymodelthatsupportsauthentication,integrity,andconfidentiality.
Ifmate_auth_initdoesnotfindanauth.
encfileinoneofthedefaultlocations,thetoolpromptsyoutoselectonefromalist.
~/.
cariden/etc$CARIDEN_HOME/etc$CARIDEN_ROOT/etc(Linuxonly)Thetoolcreatesafilenamedauth.
encintheselecteddirectory.
However,youcanoverridethedefaultdirectoryandfilenamebyusingthe-auth-fileoption.
Therecommendationistouseoneoftheabovedefaultconfigurationpaths.
Ifyouputthisfileinadifferentdirectory,binariesmustbeexplicitlycalledusingthispath.
Example:mate_auth_init-auth-file/opt/cariden/etc/auth-acme.
encThemate_auth_inittoolpromptsyoutochooseSNMPv2c,SNMPv3,orboth.
Dependingonyourchoice,thetoolpromptsyouforauthenticationinformationthatispertinenttotheselectedSNMPversion.
NoteIfbothSNMPv2candSNMPv3areselected,thedefaultisfortheauth.
encfiletoputallnodesinbothSNMPv2candSNMPv3.
Whenanodeismappedtoboth,thenonlySNMPv3isused.
Tochangethisbehavior,decrypttheauth.
encfileusingmate_auth_export,edittheauthenticationtablesbasedontheIPRegExpvalues,andthenre-importthefileusingmate_auth_import.
Theauthorizationfilepasswordanddefaultseedrouterlogincredentialsconsistofthefollowing.
masterpassword—Passwordforviewingfilecontentsloginusername—Defaultusernameforloginaccesstotheroutersloginpassword—Defaultpasswordforloginaccesstotheroutersloginenablepassword—DefaultenablepasswordforloginaccessTheSNMPv2cinformationisdefinedusingasinglevalue.
community—DefaultcommunitystringTheSNMPv3informationdefinesauthenticationandencryptiondetails.
Securitylevel3-45CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsNetworkAuthentication–noAuthNoPriv—Authenticatesbyusername,butdoesnotvalidatetheuseranddoesnotencryptdata.
–authNoPriv—Authenticatesbyusername,validatestheuserusingMD5orSHA,butdoesnotencryptdata.
–authPriv—Authenticatesbyusername,validatestheuserusingMD5orSHA,andencryptsdatausingDESorAES.
SNMPv3username—UsernameforauthenticationAuthenticationprotocoltype—MD5orSHAAuthenticationpassword—PasswordforauthenticationEncryptionprotocoltype—DESorAESEncryptionpassword—PasswordforencryptionContextname—NameofacollectionofmanagementinformationaccessiblebyanSNMPentityAfteryouhavecreatedtheinitialencryptedauthenticationfile,youcanmanuallyeditthecontentstoaddmultipleprofilesorcommunitiesandmaprouterstothem.
EachprofilecontainsacompletesetofSNMPv3authenticationandencryptioninformation.
Multipleprofilesorcommunitiesarenecessarywhendifferentgroupsofroutersusedifferentauthenticationcredentials.
Forinformationabouteditinganencryptedauthenticationfile,seetheAddRouter-SpecificAuthenticationInformationsection.
TablesintheAuthenticationFileThecontentsoftheencryptionfileareorganizedintotables.
—Containsthemasterpasswordforviewingorchangingthefile(Table3-9).
—Containsusernamesandpasswordsforloginaccesstonodes(Table3-10).
—ContainsSNMPv2ccommunitystringsforaccesstonodes(Table3-11).
—ContainsSNMPv3profiles,whichdefineasetofauthentication,encryption,andcontextinformation(Table3-12).
—DefineshowtomatchrouterswiththeSNMPv3profiles(Table3-13).
NoteIfbothSNMPv2candSNMPv3areselected,thedefaultisfortheauth.
encfiletoputallnodesinbothSNMPv2candSNMPv3.
Whenanodeismappedtoboth,thenonlySNMPv3isused.
Tochangethisbehavior,decrypttheauth.
encfileusingmate_auth_export,edittheauthenticationtablesbasedontheIPRegExpvalues,andthenre-importthefileusingmate_auth_import.
Table3-9FormatColumnDescriptionPasswordOptional:Passwordforaccessingtheauthenticationfile.
Iftableorpasswordismissing,theauthenticationfileisunencryptedplaintextandnopasswordisrequiredtovieworchangethefilecontents.
3-46CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsNetworkAuthenticationTable3-10FormatColumnDescriptionIPRegExpRegularexpressiontomatchnodeIPaddresses;ifmissing,defaultstoacceptall.
UsernameUsernameforloginaccess.
PasswordPasswordforloginaccess.
EnablePasswordEnablepasswordforloginaccess.
Table3-11FormatColumnDescriptionIPRegExpRegularexpressiontomatchnodeIPaddresses;ifmissing,defaultstoacceptall.
CommunityCommunitystringforSNMPaccess.
Table3-12FormatColumnDescriptionProfileNameDescriptivenameoftherouterstowhichthisprofileapplies.
SecurityLevelLevelofSNMPsecurity.
ValueisnoAuthNoPriv,authNoPriv,orauthPriv.
UsernameUserforwhichSNMPservicesareprovided.
AuthProtocolProtocolforauthenticatingtheuser.
ValuesareMD5orSHA.
RequiredifusingauthNoPrivorauthPrivsecuritylevel.
AuthPasswordAuthenticationpassword.
RequiredifusingauthNoPrivorauthPrivsecuritylevel,andmustbeequaltoorgreaterthaneightcharacters.
EncryptionProtocolProtocolforencryptingdata.
ValuesareDESorAES.
RequiredisusingauthPrivsecuritylevel.
EncryptionPasswordEncryptionpassword.
RequiredifusingauthPrivsecuritylevel,andmustbeequaltoorgreaterthaneightcharacters.
ContextNameOptional:AcollectionofmanagementinformationaccessiblebyanSNMPentity.
Ifoneormorecontextnamesareconfiguredonarouter,thenavalueisrequired.
Youcanenteronecontextnameonly,anditisusedtoaccessallrouters.
Table3-13FormatColumnDescriptionIPRegExpRegularexpressiontomatchnodeIPaddresses;ifmissing,defaultstoacceptall.
ProfileNameNameofaprofileinthe.
3-47CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsNetworkAuthenticationAddRouter-SpecificAuthenticationInformationYoucanaddadditionalrouter-specificinformationtotheauthenticationfilebyaddingrowstotheauthenticationfiletables(seetheTablesintheAuthenticationFilesection).
Forrouterloginandauthentication,editthe.
ForSNMP,thefollowingtablesapply.
SNMPv2c—AddcommunitystringstotheandmaprouterstothesecommunitieswitharegularexpressionintheIPRegExpcolumn.
SNMPv3—AddsecurityprofilestotheandmaprouterstoprofilesinthewitharegularexpressionintheIPRegExpcolumn.
Iftheauthenticationfileisencryptedusingamasterpassword,youmustfirstexportthecontentstoplaintextusingthemate_auth_exporttool,editthetablesusingatexteditor,andthenencryptitusingmate_auth_import.
ForSNMPv2ccommunitiesonly,amoreconvenientmethodisprovidedbyauth_try_communities.
Firstprovidealistofnodes(routers),forexamplefromaplanfileobtainedthroughparsingtheIGPdatabase.
Youarethenpromptedforanumberofcommunitiestotry.
ThetoolattemptsSNMPaccesstoalltheroutersusingeachofthecommunities.
Ifanyroutersareaccessedsuccessfully,thesecommunitiesareenteredintheauthenticationfiletomatchtherouternames.
Youcanruntheauth_try_communitiestoolrepeatedlytoaddfurthercommunitiestotheauthenticationfile.
NoteThereisnoequivalenttoolforSNMPv3.
ViewAuthenticationInformationYoucanviewtheentirecontentsoftheauthenticationfileusingthemate_auth_exporttool,whichexportsadecryptedversionofanauthenticationfile.
Youcanalsoviewauthenticationinformationforaspecificrouterusingthemate_auth_testtool.
Eitherway,youneedthemasterpasswordtoviewthecontents.
TesttheAuthenticationFileTesttheauthenticationfileusingoneofthesetools.
mate_auth_test—Printsauthenticationcredentialsforaspecifiedauthenticationfile,foraspecifiednodeIPaddress.
Theoutputreturnswhetherthelookupissuccessfuloroptionally,showsallauthenticationdetailsinplaintext.
snmp_test—TestsaccesstoaspecifiedrouterbysendingapingandanSNMPqueryusingthecredentialsintheauthenticationfile.
IfbothSNMPv2candSNMPv3arepresent,thenSNMPv3isused.
login_test—Testsloginaccesstoaspecifiedrouter;indoingsoitteststhelogininformationprovidedbytheauthenticationfile.
3-48CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsManageArchivesManageArchivesNoteThetasksofconfiguringaplanfilearchiverepositoryandinsertingplanfilesintothearchivearesupportedinbothaugmentationandmanualcollectionmethods.
IfyouarecollectingdataonlybyconfiguringtheWAECollectorwebUI,thenthearchivesdescribedinthischapterarenotapplicable.
Anarchiveisarepositorycontainingnetworkplanfiles,specificdataitemsforplotting,andotherdatathatiscollectedthroughaugmentedormanualsnapshots.
Additionally,informationcanbeaddedtoarchivesusingCLItoolsoutsidethesnapshotprocess.
Thischapterdescribesthebasicarchivetools.
CreateorUpdateanArchiveUpdateSummaryofTime-SequencePlotDataInsertorExtractFilesfromanArchiveManageArchivesforWAEDesignArchiveMakeBatchChangestoArchiveFilesCreateorUpdateanArchiveUsearchive_inittoeithercreateanewarchiverepositoryortoupdatethefilestructureofanexistingarchive.
Tocreateanewarchive,setthearchive_init-archiveparametertothepathandnameofthedirectorythatwillholdthearchive.
Thiscreatesanew,emptyarchive.
Thestructureandsupportfilesforthearchivearenotcompleteuntilafterthefirstrecordedinsertion.
Toupdatethefilestructureofanexistingarchivetothatofthelatestrelease,setthearchive_init-archiveparametertothedirectoryofanexistingarchiveandset-upgradeoptiontotrue.
Thisupdatesthefilestructureoftheexistingarchivetothatofthelatestrelease.
FormanualconfigurationsofWAELive,youmustoverridethedefaultdatatypicallyextractedforanarchiveinordertocreatetheEventspanel.
archive_init-archive-timeplot-summary-format$CARIDEN_HOME/.
cariden/etc/matelive/default_timeplot_summary_format.
txtUpdateSummaryofTime-SequencePlotDataUsearchive_updatetoupdatethesummaryoftime-sequenceplotdatastoredinanarchive,forexampleafterchangingthesummaryformatfile.
Setthe-archiveparametertothelocationofanexistingarchive.
Setthe-timeplot-summariesparametertotrue.
Setthe-start-timeparametertothetimestampofthefirstrecordtoupdate.
Bydefault,thistoolupdatesallrecordsfromthestarttimestamptotheendofthearchive,however,youcanoptionallyspecifythe-end-time.
Forinformationonconfiguringthetime-sequenceplotdata,seetheCiscoWAEDesignArchiveUserandAdministrationGuide.
3-49CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsManageArchivesInsertorExtractFilesfromanArchiveEacharchiverecordcancontainoneormoreofthefollowingfiles.
Networkplanfile(.
pln)obtainedusingthesnapshottool.
Time-sequenceplotsummaryfile(.
sum),automaticallyconstructedusingdefaultsummaryformatsettings.
Thisfilecanalsobeconstructedandinsertedmanually.
(SeetheCiscoWAEDesignArchiveUserandAdministrationGuide.
)Optional:Userfileoranyotherfile.
ForWAEDesignArchive,thearchivecanalsocontainavisualformatfile,whichspecifieshowthetime-sequenceplotdatashouldbedisplayedinthewebbrowser.
InsertFilesYoucaninsertfilesallatonceusingonearchive_inserttool,orindividuallyusingmultipleCLItools.
Allfilesinthearchiverepositoryarestoredandaccessedusingatimestamp,sounlessyouwanttousethedefaultcurrenttimestampwhenaddingfilestothearchive,youincludethe-timeoption.
NoteIfthesnapshottoolisconfiguredtogenerate.
txtformatplanfiles,usethemate_converttoolbeforearchive_inserttoconvertthe.
txtformatplanfiletothe.
plnformatplanfile.
Insertingaplanfileintothearchiveautomaticallyupdatesthefilesneededforinteractingwiththearchiveinformationviathewebbrowser.
Forthisreason,donotcopyafileintothearchivedirectory.
YoucanalsoinsertWAEDesignArchiveplanfilesintothearchivebyselectingtheFile>Saveto>DesignArchivetomenuintheWAEDesignGUI.
Forinformation,seetheCiscoWAEDesignArchiveUserandAdministrationGuide.
ExtractandDeleteFilesAfterfileshavebeenarchived,youcanretrieveacopyusingthearchive_extracttool.
CLIoptionsspecifywhichfilestoretrieve,wheretocopythem,andwhattonamethem.
Youmustincludeatimestamp.
However,youcanalsospecifythatWAECollectorusetheclosesttimetothetimestampprovided,oryoucanspecifyarangeoftimetogetabatchoffiles.
Toretrieveuserfileswitharchive_extract,followoneoftheseoptions.
Specifythenameofthefiletoextract,orapartialnamewithwildcards(*),withthe-user-filesoption.
Specifyalistoffilenameswiththe-user-files-listoption.
Youcanalsousearchive_extracttoremoveitemsfromthearchive.
Theprocedureisthesameasforextractingfiles,exceptthatyouusethe-deleteparametertodeletethefileafterextraction.
Thisprocessensuresthatyoualwayshavealocalcopyoffilesthatyoudelete,incasethedeletionwasaccidentalorincorrect.
YoucanalsoretrieveplanfilesfromthearchivebyselectingtheFile>Openfrom>DesignArchiveorFile>Openfrom>WAELivemenuintheWAEDesignGUI.
Forinformation,seetheCiscoWAENetworkVisualizationGuide.
3-50CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsManageArchivesManageArchivesforWAEDesignArchiveThearchive_configtoolenablesyoutomanagethearchiverepositoriesavailabletotheWAEDesignArchiveapplicationonthewebserver.
Thistoolcreatesanarchivelist.
xmlfileinthe$CARIDEN_HOME/etc/archive/configdirectory.
-actionadd—Addthearchiverepositorytoaspecificlocation.
-name—Nameofthearchiverepository.
-path—Fullpathofthearchiverepository.
-template-dir—Fullpathofthetemplate.
-template-name—Nameofthetemplateusedbyallfilesinthisarchiverepository.
Example:ThisexampleaddsanarchivenamedSW_Regionthathasapathofacme/archives/acme_backbone.
Thetemplatedirectoryisacme/dataandthetemplatenameisacme_backbone-template.
pln.
archive_config-actionadd-nameSW_Region-pathacme/archives/acme_backbone-template-diracme/data-template-nameacme_backbone-template.
plnNoteThearchive_configCLItoolandtheWAEDesignGUIArchivefeaturearenotapplicabletoWAELive.
MakeBatchChangestoArchiveFilesMaintenanceofarchivessometimesrequiressimilarupdatestomultiplefilesinanarchive.
Herearetwoexamples:AchangeintopologyrequiresapplicationofanewtemplatefiletotheplanfilesbetweentwotimestampsAchangeinreportingrequirementsrequiresanupdatedsummaryfileforplansforallplansinthearchive.
YoucanperformthistaskwithindividualCLItools,orinmanycasesyoucanusethearchive_dotooltoconsolidatetheCLItools.
Thearchive_dotoolgetsalistoftimestampsbetween-timeand-time-to,usingarchive_extract,andthenperformsthefollowingforeachtimestamp.
Usesarchive_extracttoextractall%extract_*filesintoalocaldirectory.
ExecutesCLItoolsin-cmdargumentsequenceinthelocaldirectory.
Table3-14liststhevalidvariablesinthe-cmdargument.
Usesarchive_inserttoinsertall%insert_*filesintothearchive.
Thearchive_dotoolcreatesalistofCLIcallsforalltimestamps,fillsinthetemporaryfilesateachstep,andsurroundsthecallswiththerelevantarchive_extractandarchive_inserttools.
YoucanviewtheCLItoolswithoutapplyingthemtoanarchivebyspecifyingthe-dry-runoption.
Table3-14ValidVariablesforthe-cmdArgumentofarchive_doVariableDescription%extract_planPlanfiletoextractatagiventimestamp.
%extract_summarySummaryfiletoextractatagiventimestamp.
3-51CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsManageArchivesExample:Thisshowshowtoupdatethesummaryfileforeveryplaninanarchive.
archive_do-archive/opt/archives/my_archive-cmd"table_extract-plan-file%extract_plan-out-filetemp.
txt;table_extract-plan-file%extract_previous_plan-out-filetemp_previous.
txt;mate_summary-table-filetemp.
txt-old-table-filetemp_previous.
txt-summary-format-filenew_format_file.
txt-out-file%insert_summary"%extract_user{FILENAME}UserfileFILENAMEtoextractatagiventimestamp.
%insert_planPlanfiletoinsertatagiventimestamp.
%insert_summarySummaryfiletoinsertatagiventimestamp.
%insert_user{FILENAME}UserfileFILENAMEtoinsertatagiventimestamp.
%timestampCurrentUTCtimestamp,YYMMDD_HHMM.
%extract_previous_planPlanfileextractedatprevioustimestamp;ifthisisfirsttimestampinarchive,thentheentirecommandisskippedforthistimestamp.
%cariden_binLocationofthebinaryfiles;thisisusefulifthereisnopathset.
Example:%cariden_bin/table_extractTable3-14ValidVariablesforthe-cmdArgumentofarchive_doVariableDescription3-52CiscoWAE6.
3PlatformConfigurationGuideChapter3AdvancedCollectionConfigurationsManageArchivesCHAPTER4-1CiscoWAE6.
3PlatformConfigurationGuide4DeployingNetworkChangesThischapterreferences$WAE_HOME,whichisthedirectoryinwhichthepackagesareinstalled.
Thedefault$WAE_HOMEis/opt/cariden/software.
WhenWAEAutomationsoftwareisinstalled,thefollowingpackagesareinstalledin$WAE_HOME:wae-core—ContainsWAECoreserverfiles.
ItalsocontainsconfigurationfilesthatenabletheuseofWAECoreRESTandThriftAPIs.
wae-db—ContainsWAECoredatabasefiles.
wae-messaging—WAEmessagingsystemthatusesJavaMessageService(JMS).
wae-osc—ContainsconfigurationfilesforCiscoOpenSDNController(OSC).
wae-appenginecoreandwae-designapiserver—ServicesthatenabletheuseoftheWAEDesignRESTAPI,theDynamicSLAManagementAPI,andtheStageManagementRESTAPI.
WAECoreServerNoteTheconfigurationinstructionsinthischapterareforsingle-systemenvironmentsonly.
Forhigh-availabilitydeployments,contactyoursupportrepresentative.
WAECoreConfigurationFilesThe$WAE_HOME/wae-core/etcdirectorycontainsthefollowingconfigurationfileswithoptionsthatmaybeconfigured(seeTable4-1).
Mostoftheconfigurationsmentionedherearesettodefaultvaluesbutarecommentedout.
Forexample,ifyouwanttoenableauthentication,simplyuncommenttheentry#authenticationEnabled=trueintheappropriatefile.
NoteOnlythemostcommonconfigurationfilesarelistedinTable4-1.
4-2CiscoWAE6.
3PlatformConfigurationGuideChapter4DeployingNetworkChangesWAECoreServerTable4-1WAECoreConfigurationFilesConfigurationFileDescriptioncom.
cisco.
wano.
nsps.
demand.
persistimpl.
cql.
cfgContainsdemandpersistenceconfigurations.
Forexample,intervalsizeofevaluatedprojectedplansforbandwidthcalendering.
com.
cisco.
wano.
nsps.
deployer.
cfgContainsnon-PCEPdeployerconfigurations.
Forexample,typeofdeploymenttouseandtimeoutperiodforshuttingdownroutes.
com.
cisco.
wano.
nsps.
deployer.
ncs.
cfgContainsNetworkServicesOrchestrator(NSO)deployerconfigurations.
com.
cisco.
wano.
nsps.
nbrs.
cfgContainsnorthboundRESTfulAPIconfigurations.
TomanagethebehavioroftheRESTnorthboundAPI,settheseproperties:NoteSeveralofthemincreasesecurityforaccessingtheAPIsbyenablingauthentication,changingthecredentials,andSSLport.
Toenableauthentication,changetheauthenticationEnabledpropertytotrue.
authenticationEnabled=trueTochangetheusernameandpasswordcredentials,usetheseproperties.
username=password=Toconfiguretheprotocol,RESTserviceport,andSSLport,followtheseguidelines.
IfneitherHTTP,norHTTPSisset,HTTPSisthedefault.
Ifreceivingtimeouterrors,increasethetimeoutvalue.
nbQSendOptions=requestTimeout=com.
cisco.
wano.
nsps.
thrift.
cfgContainsnorthboundTHRIFTAPIconfigurations.
Itcontainsthefollowingconfigurableoptions:EnableordisabletheThriftnorthboundAPIbysettingthethriftEnabledproperty.
thriftEnabled=SettheportonwhichThriftlistens.
Thedefaultportis9898.
port=Ifreceivingtimeouterrors,increasethetimeoutvalue.
nbQSendOptions=requestTimeout=4-3CiscoWAE6.
3PlatformConfigurationGuideChapter4DeployingNetworkChangesWAECoreServercom.
cisco.
wano.
nsps.
deployer.
pcep.
cfgContainsPCEPdeployerconfigurations.
com.
cisco.
wano.
nsps.
engine.
cfgContainsNSPSengineconfigurations.
Youcanconfigurethefollowing:locationofplanfileschangingdefaultport,processingthreadsnumberofprojectedplansforbandwidthcalendaringprojectionreloadconfigurations.
TheWAEAPIstartsanewprocesswhenitinvokesaWAEtool.
ThenumberofconcurrentWAEtoolinvocationsiscontrolledbythenumberofWAEthreads.
Tuningtheseparametersisdependentnotonlyonthenumberofprocessors,butalsoonotherapplicationsthatmightberunningonthedevice.
Asabestpractice,setto4fordevicesthathave16GBofmemoryandto8fordevicesthathave32GBofmemory.
SettingtheprocThreadspropertydetermineshowmuchmultiprocessingoccursandcanimproveperformance.
Thedefaultissetto8.
com.
cisco.
nsps.
engine.
procThreads=Thefollowingisalistofotherparametersavailable:Tocontrolnumberofprojectedplansforbandwidthcalendaring:com.
cariden.
nac.
service.
projection.
projectionSize=20Toallowordenyadmissionofdemandsthatdonotfitintobandwidthcalendaringprojectionwindow,:com.
cariden.
nac.
service.
projection.
allowDemandSkew=falseToconfigurelocationtowhichplanfilescanbedropped(defaultis$WAE_HOME/plans):com.
cisco.
wano.
nsps.
engine.
plan.
dropFilesBase=Thedroppedplanfilewillbeautoloaded.
Toconfigurelocationtowhichuploadedplanfileswillbestoredtemporarilyuntilfinishedprocessing(defaultis${java.
io.
tmpdir}or/tmpiftheformerisnotdefined):com.
cisco.
wano.
nsps.
engine.
plan.
uploadFilesBase=ToconfigureportonwhichlocalSSHserverisacceptingconnections(defaultis22):com.
cisco.
wano.
nsps.
engine.
sshServicePort=22ThisisusedtouploadplanfilesoverSCP.
ConfigurationFileDescription4-4CiscoWAE6.
3PlatformConfigurationGuideChapter4DeployingNetworkChangesDeployerModuleMemoryConfigurationfile:$WAE_HOME/wae-core/bin/setenvIfyouencounteramemoryerror,increasetheWAEprocessmemory.
Inthisexample,thesearesettoaminimumof4Gandamaximumof10G.
if[-z$JAVA_MIN_MEM];thenexportJAVA_MIN_MEM=4Gfiif[-z$JAVA_MAX_MEM];thenexportJAVA_MAX_PERM_MEM=10GfiLoggingConfigurationfile:$WAE_HOME/wae-core/etc/org.
ops4j.
pax.
logging.
cfgBydefault,logfilesizelimitis10MB.
Eachtimealogfilereachesthatlimit,itiscopiedtoafilenamednspsmix.
log.
#.
Eachtimeanewlogfileiscreated,thenumberofeachexistinglogfileisincreasedbyone.
Thenewestlogfile,however,doesnotreceiveanumber.
Forexample,ifyouhadnspxmix.
log.
1throughnspxmix.
log.
5,theonewithoutanumberwouldbethemostrecent,theoneendingin1wouldbethesecondmostrecent,andtheoneendingin5wouldbetheoldest.
Bydefault,themaximumnumberofbackuplogfilesis10.
DeployerModuleTheWAEDeployerpushesRSVPorSRLSPcreate,modifyordeleterequeststoeithertheCiscoOpenSDNController(OSC)orCiscoNetworkServicesOrchestrator(NSO).
OSCandNSOthenperformtherequestedoperationsonthenetwork.
IfanLSPisPCEP,OSCisusedtomanagethePCEPinitiatedorPCEPdelegatedLSP.
IfanLSPisnotPCEP,NSOisusedtochangethedeviceconfiguration.
Forsuccessfuldeployment,thefollowingcriteriamustbemet:AnLSPintheWAEnetworkmodelmusthaveanLSPpath.
TheLSPmustbeexplicitlyroutedforRSVPortheLSPpathsegmentlistmustbedefinedforsegmentrouting.
ThedefaultsettingsareconfiguredsothateachLSPtype(PCEPandnon-PCEP)iscorrectlydeployedusingeitherOSCorNSO:$WAE_HOME/wae-core/etc/com.
cisco.
wano.
nsps.
deployer.
cfg—Fornon-PCEPdeployments.
$WAE_HOME/wae-core/etc/com.
cisco.
wano.
nsps.
deployer.
pcep.
cfg—ForPCEPdeployments.
PropertyDefaultDescriptionlog4j.
logger.
com.
cisco=Example:log4j.
logger.
com.
cisco=TRACEDEBUGThetypeoflogleveltousecanbeERROR,WARN,INFO,DEBUG,orTRACE.
log4j.
appender.
out.
maxFileSize=[MB|GB]10MBMaximumpermissiblelogfilesize.
log4j.
appender.
out.
maxBackupIndex=10Maximumpermissiblenumberofbackuplogfiles.
4-5CiscoWAE6.
3PlatformConfigurationGuideChapter4DeployingNetworkChangesDeployingLSPsUsingOSCNoteTheconfigurationinstructionsinthischapterareforsingle-systemenvironmentsonly.
Forhigh-availabilitydeployments,contactyoursupportrepresentative.
DeployingLSPsUsingOSCIn$WAE_HOME/wae-core/etc/com.
cisco.
wano.
nsps.
deployer.
pcep.
cfg,verifythatOSCwillbeusedforPCEPLSPssenttoWAE.
Thisisthedefaultsetting:pcepDeployerProxy=odlPcepDeployerProxyNoteFormoreoptionsthatyoucanset,seeTable4-2.
DeployingLSPsUsingCiscoNSOBeforeYouBeginObtaintheNetworkElementDrivers(NED)foreachdevicevendor.
Obtainthetrafficengineeringservice.
NSOmustbeinstalled.
ThedefaultsettingsassumeWAEandNSOareinstalledonthesamemachineusingtheNSOdefaultloginandport.
IfNSOisinstalledonadifferentmachineortheloginorporthavebeenchanged,updatetheWAEconfigurationfile/opt/cariden/software/wae-core/etc/com.
cisco.
wano.
nsps.
deployer.
ncs.
cfgwiththeappropriateinformation.
Table4-2com.
cisco.
wano.
nsps.
deployer.
pcep.
cfgOptionsOptionDescriptionHandlingofdeploymentfailuresdeployerFailurePolicy=BEST_EFFORTOncethefailureoccurs,continuestodeployasmuchaspossible.
Todeterminethedeploymentstate,usethefollowingAPI.
/wae/network/deployer/job/jobStatedeployerFailurePolicy=STOP_ON_FAILURESTOP_ON_FAILUREStopsthedeploymentimmediatelyuponfailure,andnothingisdeployed.
ConfiguringproxypcepDeployerProxy=testPcepDeployerProxyInvokesthePCEPDeployer,butdoesnotcommunicatewiththeOSCcontroller.
Thisisthedefaultvalue.
pcepDeployerProxy=odlPcepDeployerProxyInvokesthePCEPDeployerusingthisproxy.
YoumustsetthisparameterwiththisoptionifusingOSCtodiscoverPCEPtunnels.
4-6CiscoWAE6.
3PlatformConfigurationGuideChapter4DeployingNetworkChangesEnablingBPL-LSCollectionWithinOSCNoteNSOinstallationisoutsidethescopeofthisdocument.
PleasecontactasupportrepresentativeifyouneedtheNEDsandthetrafficengineeringservice.
Step1In$WAE_HOME/wae-core/etc/com.
cisco.
wano.
nsps.
deployer.
cfg,verifythatNSOwillbeusedfornon-PCEPLSPssenttoWAE.
Thisisthedefaultsetting:nonPcepDeployer=ncsStep2(OptionalandonlywithNSO3.
4)TopopulatetheNSOdevicelistfromtheplanfileandtheauth.
encauthenticationfile,issuetheadd_nodes_to_nsocommand.
ThisWAECLItoolonlyworkswithNSOversion3.
4.
add_nodes_to_nso-plan-file-nso-serverwhere—Inputplanfilename(.
pln/.
txt)—NSOserveraddressForexample,add_nodes_to_nso-plan-file/opt/cariden/work/pce-test.
pln-nso-serverlocalhostNoteIfdevicesuseTelnet,edittheauth.
encfile(encrypted)sothatitusesTelnetinsteadofSSH(default).
a.
AddanewcolumnnamedProtocolwiththevaluetelnet.
NoteEnsurethattheauth.
encfileremainstab-delimited.
Therecannotbeanyspaces,onlytabs,betweeneachentryinthefile.
Forexample,IPRegexpUsernamePasswordEnablePasswordProtocolciscociscociscotelnetEnablingBPL-LSCollectionWithinOSCStep1ToenableOSCtouseBGP-LS,youmustconfigureaBGP-LSsessionbetweenonerouterintheIGPandOSC.
Editthefollowinglineswiththeappropriatevaluesforyournetworkandserver:NoteSometimes,youneedtostart,thenstopOSCtoinitiallycreatetheconfigurationfilesiftheydon'texist.
a.
$WAE_HOME/wae-osc/etc/opendaylight/karaf/41-bgp-example.
xml1.
Uncommentthesectionbeginningatline68.
2.
Changetheappropriatevaluesforhost,local-as,bgp-id,andiana-linstate-attribute-type:10.
10.
14.
27—EntertheIPaddressoftheBGP-LSspeakingrouter4-7CiscoWAE6.
3PlatformConfigurationGuideChapter4DeployingNetworkChangesVerifyingLSPDeployment65000—SetASasthesameASontherouterthatOSCisiBPGpeerswith192.
172.
143.
8—EnterthelocalOSCserverinterfaceIPaddressthatwillbeusedasthesourcefortheBGPsessionb.
$WAE_HOME/wae-osc/etc/opendaylight/karaf/31-bgp-example.
xml1.
Changetheiana-listat-attributevaluetotrue:trueStep2RestarttheOSCservice.
servicewae-oscrestartVerifyingLSPDeploymentStep1ConfigureLSPnetworkchanges(forexample,createatunnel)usingAPIsorWAEDesign.
NoteTheLSPsmusthaveexplicitlyroutedpaths.
Step2Deploytheplanfile.
Step3ExecutethefollowingAPIsandcheckifthejobstatuswassuccessfulorfailed:/network/deployer/job/details/network/deployer/job/jobState4-8CiscoWAE6.
3PlatformConfigurationGuideChapter4DeployingNetworkChangesVerifyingLSPDeploymentA-1CiscoWAE6.
3PlatformConfigurationGuideAPPENDIXASnapshotExamplesThefollowingsectionsarepartialexamplesthatidentifytheoptionsrequiredorusefulwhendiscoveringspecificfeatures.
Theseexamplesfocusonrequirementsandanomalies.
TheydonotrepresentallthepossibletasksandCLIoptions.
Allexamplesassumeyouhavedefinedtheenvironmentvariablesandcalledothertasksinsnapshot.
txt,andthatyouhaveproperlyconfiguredthesnapshot.
incfileforallothertasks.
Thissectionincludesthefollowingexamples:CollectingSegmentRoutingLSPsInsertDataintoExternalArchiveCollectingBGPLSCollectingBGPPeersCollecteBGPPeersbyMACAddressCollectDataforWAELiveManuallyInsertWAELiveDataCollectLAGMembershipandTrafficCollectQoSandTrafficCollectingSegmentRoutingLSPsStep1Insnapshot.
txt,confirmthatthefollowingtasksareenabled(uncommented):LOGIN_FIND_IGP_DBSNMP_FIND_NODESSNMP_FIND_INTERFACESIMPORT_PCEP_LSPSGET_CONFIGSPARSE_CONFIGSSNMP_FIND_RSVPStep2Insnapshot.
inc,addorsetthefollowingoptions:A-2CiscoWAE6.
3PlatformConfigurationGuideAppendixASnapshotExamplesInsertDataintoExternalArchiveForexample,NameValueout-file$(work_dir)/$(unique).
txtseed-router$(seed_router)backup-router$(backup_router)igp-protocol$(igp)isis-level$(isis_level)ospf-area$(ospf_area)get-segmentstruesession-type$(session_type)database-file$(debug_dir)/$(unique)-$(igp)_db.
txtverbosity$(cmd_verbosity)log-file$(log_dir)/$(unique)-log-login_find_igp_db.
logNameValueout-file$(work_dir)/$(unique).
txtplan-file$(work_dir)/$(unique).
txtnet-recorder$(net_recorder)net-record-file$(data_dir)/$(unique)-record-snmp_find_rsvp.
txtverbosity$(cmd_verbosity)log-file$(log_dir)/$(unique)-log-snmp_find_rsvp.
loguse-signaled-nametrueget-backup-pathstruekeep-pcep-pathstrueget-pcep-pathsfalseNameValueigp-protocol$(igp)isis-level$(isis_level)include-objectBASE,RSVP,SR_LSPS,LAG,SRLG,RSVP,VPNout-file$(work_dir)/$(unique).
txtdata-dir$(cfg_dir)log-level$(log_level)log-file$(log_dir)/$(unique)-log-parse_configs.
logInsertDataintoExternalArchiveThisexampleshowshowtoinsertdataintoanexternalarchivewheretheinformationisavailableforallapplicationstouse.
NameRequiredValueget-segmentstruekeep-pcep-pathstrueget-pcep-pathsfalseinclude-objectBASE,RSVP,SR_LSPSA-3CiscoWAE6.
3PlatformConfigurationGuideAppendixASnapshotExamplesCollectingBGPLSStep1Inthesnapshot.
txt,pointthedefaultarchive_dirtopointtotheexternalarchive.
Bestpracticeistokeepthedefault.
Example:archive_dir$(home_dir)/archivesStep2Insnapshot.
txt,enabletheARCHIVE_INSERTtask(uncommentit).
Step3Insnapshot.
inc,usearchive_inserttoinsertWAELiveplanfilesintotheexternalarchiveduringthecollectionprocess.
CollectingBGPLSThisexampleprovidestheworkflowforenablingWAECollectortogetBGPLSfromtheOpenSDNController(OSC).
Prerequisites:BGPLSmustbeproperlyconfiguredontherouter.
Foranexampleofhowtodothis,refertothecommandreferenceguidefortheCiscoIOSXRrouter,whichyoucanfindhere:http://www.
cisco.
com/c/en/us/support/routers/carrier-routing-system/products-command-reference-list.
html.
ForBGPLStobecollected,theAutomationservermusthavethewae-osc,wae-core,andwae-dbservicesrunning.
Itisalsorecommendedtohavewae-messagingservicerunning.
Step1ConfigureOSCtocollectBGPLS.
Forinformation,seetheBGPLSPCEPUserGuide:https://wiki.
opendaylight.
org/view/BGP_LS_PCEP:User_GuideStep2Configurethesnapshot.
txtfiletospecifyanenvironmentvariablefortheBGPLSserverURLandtoturnontheBGLLSDiscoverytask.
a.
Specifythebgpls_urlenvironmentvariable.
ThedefaultBGPLSserverportonwhichitlistensis8181.
Example:bgpls_urlhttp://localhost:8181NameValuecmd$(cariden_home)/bin/archive_insertcmd_optARCHIVE_INSERT_CMD_OPTNameValueplan-file$(work_dir)/$(unique).
plnarchive$(archive_dir)/$(unique)-archivetime$(start_time)A-4CiscoWAE6.
3PlatformConfigurationGuideAppendixASnapshotExamplesCollectingBGPPeersb.
UncommenttheFIND_BGPLStaskinthesnapshot.
txtfile.
Example:#SAM_GETPLAN#SNMP_FIND_OSPF_DB#LOGIN_FIND_IGP_DBFIND_BGPLSSNMP_FIND_NODESSNMP_FIND_INTERFACESStep3Configurethesnapshot.
incfiletospecifyhowyouwanttocollecttheBGPLSdata.
ThedefaultistocollectOSPF,area0.
ThisexampledemonstrateshowtocollectusingbothIS-ISlevels.
Step4OntheAutomationserver,startorrestartthewae-oscservice.
servicewae-oscstartservicewae-oscrestartCollectingBGPPeersStep1Insnapshot.
txt,confirmthatthefollowingtasksareenabled(uncommented):LOGIN_FIND_IGP_DB(orSNMP_FIND_OSPF_DB)SNMP_FIND_NODESSNMP_FIND_INTERFACESFIND_BGPForexample,Task#SAM_GETPLANSNMP_FIND_OSPF_DBNameValuecmd$(cariden_home)/bin/find_bgplscmd_optFIND_BGPLS_CP_CMD_OPTNameValueurl$(bgpls_url)out-file$(work_dir)/$(unique).
txtigp-protocolisisisis-level2log-file$(log_dir)/$(unique)-log-find_bgpls.
logA-5CiscoWAE6.
3PlatformConfigurationGuideAppendixASnapshotExamplesCollecteBGPPeersbyMACAddress#LOGIN_FIND_IGP_DB#FIND_BGPLSSNMP_FIND_NODESSNMP_FIND_INTERFACES#IMPORT_PCEP_LSPS#GET_CONFIGS#PARSE_CONFIGSFIND_BGP#SNMP_FIND_RSVP#SNMP_FIND_VPNCollecteBGPPeersbyMACAddressThisexampleshowshowtodiscoverandpolleBGPpeersbyMACaddressusingmanualsnapshots.
ThisfeatureprovidesmoregranulartrafficcollectionfornetworksthatestablishBGPpeeringwithalargenumberofASNsthroughswitchinterfacesatpublicInternetexchangepoints(IXPs).
NoteMACaccountingmustbeenabledontherouters.
Step1Insnapshot.
inc,usefind-bgpwiththe-get-mac-addressoptionsettotrue.
ThisenablesdiscoveryofeBGPpeersbyMACaddresses.
Step2Insnapshot.
inc,usesnmp_pollwiththe-poll-functionoptionsettoavaluethatspecifiesbothinterfaceandmac.
ThiscollectsinterfacetrafficstatisticsbyMACaddresses.
NameValuecmd$(cariden_home)/bin/find_bgpcmd_optFIND_BGP_CMD_OPTNameValueget-mac-addresstrueNameValuecmd$(cariden_home)/bin/snmp_pollcmd_optSNMP_POLL_CMD_OPTNameValuepoll-functioninterfaces,macA-6CiscoWAE6.
3PlatformConfigurationGuideAppendixASnapshotExamplesCollectDataforWAELiveStep3Insnapshot.
txt,ensurethatandareenabled.
CollectDataforWAELiveForExploreandAnalyticscomponents,thisexampleshowshowtosetupthecollectionofthestatisticsthatareputintothedatastore.
Step1Insnapshot.
txt,ensurethefollowingareenabled.
Eitheror,dependingonwhichhasits-perf-dataoptionsettotrueinthesnapshot.
incfile.
Step2Insnapshot.
inc,setthe-perf-dataoptiontotrueforsnmp_find_nodes.
Step3Insnapshot.
inc,setthe-perf-dataoptiontotrueforeithersnmp_pollorsnmp_poll_interfaces.
polling-intervalinterfaces=60,mac=60number-of-samplesinterfaces=1,mac=1NameValuecmd$(cariden_home)/bin/snmp_find_nodescmd_optSNMP_FIND_NODES_CMD_OPTNameValueperf-datatrueEither.
.
.
Or.
.
.
.
NameValueValuecmd$(cariden_home)/bin/snmp_poll$(cariden_home)/bin/snmp_poll_interfacescmd_optSNMP_POLL_CMD_OPTSNMP_POLL_INTERFACESCMD_OPTNameValueValueperf-datatruetrueA-7CiscoWAE6.
3PlatformConfigurationGuideAppendixASnapshotExamplesManuallyInsertWAELiveDataStep4IfanalyzingLAGsinWAELive,setthesnmp_find_interfaces-lagoptiontotrue.
SeetheCollectLAGMembershipandTrafficsection.
ManuallyInsertWAELiveDataThisexampleshowshowtoinsertdatadirectlyintotheWAEdatastoreandMaparchive,ratherthanstoringonaserverorinanexternalarchive.
InsertDataintoDatastoreStep1Insnapshot.
txt,enabletheML_INSERTtask(uncommentit).
Step2Insnapshot.
inc,usetoinsertplanfilesintotheWAELivedatastoreduringthecollectionprocess.
InsertDataintoMapArchiveThisisonlyapplicableifusingml_insert_planandifusingtheWAELiveMapcomponent.
ThelocationspecifiedmustbethelocationoftheMaparchivedirectory.
Thisisnotthesameastheexternalarchive.
Step1Inthesnapshot.
txt,createanenvironmentvariablethatspecifiesthelocationoftheMaparchive.
Example:map_archive_dir$(home_dir)/data/mldata/archiveStep2Insnapshot.
txt,addanMAP_ARCHIVE_INSERTtask.
Step3Insnapshot.
inc,addtoinsertWAELiveplanfilesintotheinternalMaparchiveduringthecollectionprocess.
NameValuecmd$(cariden_home)/bin/ml_insert_plancmd_optML_INSERT_CMD_OPTNameValueplan-file$(work_dir)/$(unique).
plntime$(start_time_direct)A-8CiscoWAE6.
3PlatformConfigurationGuideAppendixASnapshotExamplesCollectLAGMembershipandTrafficCollectLAGMembershipandTrafficStep1Insnapshot.
txt,ensurebothandareenabled.
Step2Insnapshot.
inc,usesnmp_find_interfacestodiscoverLAGportswiththe-lagtrueoption.
Thispopulatestheandtables.
Thelatterisbasedonabest-matchruleaccordingtoascendingportnamesandnumbers.
Usethe-lag-port-matchoptiontospecifyhowportsarematchedinportcircuits.
Here,thecompletevalueisusedtotellWAECollectorthatifaportisup,matchitdeterministicallybasedonLACP,andifaportisdown,usetheguessmodetomatchasmanyportsaspossible.
Step3Insnapshot.
inc,usesnmp_polltopollallLAGandbundleportsfortrafficmeasurementswiththe-poll-functionportsoption.
Portsarepolledwiththesameparametersasinterfaces.
NameValuecmd$(cariden_home)/bin/archive_insertcmd_optMAP_ARCHIVE_INSERT_CMD_OPTNameValueplan-file$(work_dir)/$(unique).
plnarchive$(map_archive_dir)/archivetime$(start_time)NameValuecmd$(cariden_home)/bin/snmp_find_interfacescmd_optSNMP_FIND_INTERFACES_CMD_OPTNameValuelagtruelag-port-matchcompleteA-9CiscoWAE6.
3PlatformConfigurationGuideAppendixASnapshotExamplesCollectQoSandTrafficCollectQoSandTrafficStep1Insnapshot.
txt,ensurebothandareenabled.
Step2Insnapshot.
inc,usesnmp_find_nodestodiscoverinterfacequeueswiththe-read-qos-queuestrueoption.
Step3Insnapshot.
inc,usesnmp_polltopollallinterfacequeueswiththe-qos-queues'*'option.
NameValuecmd$(cariden_home)/bin/snmp_pollcmd_optSNMP_POLL_CMD_OPTNameValuepoll-functioninterfaces,portspolling-intervalinterfaces=60number-of-samplesinterfaces=1NameValuecmd$(cariden_home)/bin/snmp_find_nodescmd_optSNMP_FIND_NODES_CMD_OPTNameValueread-qos-queuestrueA-10CiscoWAE6.
3PlatformConfigurationGuideAppendixASnapshotExamplesCollectQoSandTrafficNameValuecmd$(cariden_home)/bin/snmp_pollcmd_optSNMP_POLL_CMD_OPTNameValuepoll-functioninterfacespolling-intervalinterfaces=60number-of-samplesinterfaces=1qos-queues'*'