mopdf.com

Figure 2 Cluster parameters pageDeploy collectorsHardware requirementsCollectors need to be installed on physical servers. They support standalone deployment and donot support cluster deployment in the current solution. The hardware configuration requirements areshown in Table 2.Table 2 Hardware requirements of the serverAttributeMinimum configurationRecommended latinum or Gold series are recommended)with no less than 20 CPU coresIntel(R)Xeon(R)scalableprocessor(Platinum or Gold series are recommended)with no less than 24 CPU coresMemory64 GB128 GB and aboveDiskNetworkcardSystem disk: 2*500G, RAID1System disk: 2*500G, RAID1Data disk: 1 TB capacityData disk: 2TB capacityTwo 10G network cardsTwo 10G network cardsThe functions of the network cards on the server are as follows: A collection network card receives mirrored packets sent by network devices. The network cardmust support DPDK binding. An Intel or Broadcom network card is recommended. The networkcard is used to deploy collector agents and will become invisible to the kernel upon configurationdeployment. The recommended network card models are intel xl710, intel 82599, BroadcomBCM57412, and Broadcom BCM57302. A service network card is used for the data interaction between the functional components withinthe analyzer. DPDK binding is prohibited for the service network card.Operating system requirementsRedHat 7.6 or later operating systems are required for the servers.NOTE:

If the operating system used by any server is earlier than RedHat 7.6, please reinstall it to avoidfailure in the configuration of the collection service.Other requirements Disable the firewall from starting automatically and disable the firewall service on collectors.a. Use the systemctl disable firewalld command to disable the firewall service.b. Use the systemctl status firewalld command to view the firewall state. If the state isActive: inactive (dead), the firewall service has been disabled.[[email protected] ]# systemctl status firewalldfirewalld.service - firewalld - dynamic firewall daemonLoaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendorpreset: enabled)Active: inactive (dead)Docs: man:firewalld(1) A Layer 2 interconnection must be implemented between the traffic collection network card ofthe collector and the service network of the data center. If the switch connected to the collectoris Device A, a Layer 2 VLAN needs to be created on Device A as the collection VLAN. Then,the collection network card needs to be connected to the member interfaces of the collectionVLAN. The configuration procedures on the switch are as follows:a. Create a VLAN interface for the collection VLAN on Device A, and add the port connectedto the server to the VLAN. Assign an IP address to the VLAN interface, which must be inthe same network segment as that of the collector.[DeviceA]vlan 47[DeviceA-vlan47]port HundredGigE 1/0/27[DeviceA]interface Vlan-interface47[DeviceA-Vlan-interface47]ip address 47.1.1.1 24b. Configure a static ARP entry on DeviceA. In the ARP entry: The IP address is that of the collector. The VLAN ID is that of the collection VLAN. The MAC address is that of the collector's DPDK network card. The port is the physical port connected to the collector.[DeviceA]arp static 47.1.1.2 0000-0000-0001 47 HundredGigE1/0/27c. Issue the route for the network segment of the collection VLAN interface. The data centernetwork uses the OSPF routing protocol.[DeviceA]ospf[DeviceA -ospf-1]area 0[DeviceA -ospf-1-area-0.0.0.0]network 47.1.1.0 0.0.0.255Deploy IMC clusters and install the Analyzer moduleInstall the Analyzer module according to "Deploy Analyzer" in HPE Analyzer Deployment inaddresshttp://IMC ip address:30000/central, where IMC ip address is the northbound service virtualIP address of the IMC. The default username is admin and the default password [email protected] to the System Deployment Management page. For initial deployment, thecomponent deployment wizard page will be opened directly. For non-initial deployment, clickInstall to enter the component deployment wizard page.

Configure network servicesConfigure network health-related devicesFor both Spine and leaf devices, you need to deploy the following configurations.# Configure the static route from the network device to the Analyzer southbound collection network.#ip route-static 172.30.129.0 24 192.168.10.1## Configure the pod cluster virtual IP address for southbound collection as the log host IP address.#info-center loghost 172.30.129.100 facility local5## Configure SNMP, and configure the target host address as the pod cluster IP address for jointsouthbound collection.16#snmp-agentsnmp-agent local-engineid 800063A280F47488D34A0800000001snmp-agent community write privatesnmp-agent community read publicsnmp-agent sys-info version v2c v3snmp-agent target-host trap address udp-domain 172.30.129.100 params securityname public v2csnmp-agent trap enable arpsnmp-agent trap enable l2vpnsnmp-agent trap enable radiussnmp-agent trap enable stpsnmp-agent trap source M-GigabitEthernet0/0/0 #NOTE:In this example, 172.30.129.100 is the virtual IP address of the southbound collection pod cluster.# Configure NETCONF.#netconf soap http enablenetconf soap https enablenetconf ssh server enablerestful https enable## Configure SSH.#ssh server enable## Configure a local user.#

local-user hpe class managepassword hash h 6 GCV93TMddhOZCMCI x4qEZfvtQxwudXd I7rHVM/PC4 SFI9eG74A service-type ftpservice-type telnet http https sshauthorization-attribute user-role network-adminauthorization-attributeuser-role network-operatorline vty 0 63authentication-mode schemeuser-role network-adminuser-role network-operator#NOTE:In the absence of automated underlay, all of the above configurations need to be deployedmanually.# Configure gRPC.The controller supports gRPC configuration. However, it supports deploying only 11 sensor paths,and the rest need to be configured manually. Add a collectora. Navigate to the Assurance Telemetry Collectors page.b. Add collectors with the following IP addresses and port numbers: Analyzer southbound IP address: 50051. Analyzer southbound IP address: 50052. Collection network card address: 5555

Add collection configurationa. Navigate to the Assurance Telemetry Collection Configuration page, and select thecorresponding sensor path. In the current solution, DC supports the configuration of 11sensor paths only, and the rest need to be manually configured on the devices.b. Navigate to the Assurance Telemetry Collection Configuration page, and add thecollection devices. Upon application, the relevant gRPC configuration will be issued to thecorresponding devices.

#Grpc enable //telemetrysensor-group s1 //Create sensor group s1 (gRPC)sensor path device/basesensor pathdevice/boardssensor pathdevice/extphysicalentitiessensor pathdevice/physicalentitiessensor pathdevice/transceiverssensor pathifmgr/interfacessensor path ifmgr/statisticssensor-group s2//Create sensor group s2 (gRPC-new)sensor path buffermonitor/bufferusagessensor path buffermonitor/commbufferusagessensor path buffermonitor/commheadroomusagessensor path buffermonitor/ecnandwredstatisticssensor path buffermonitor/egressdropssensor path buffermonitor/ingressdropssensor path buffermonitor/pfcspeedssensor path buffermonitor/pfcstatistics//The above eight paths are used for buffermonitordata collection.sensor path ifmgr/ethportstatistics//CRC packet error statistics sensor pathsensor path resourcemonitor/monitors

sensor path resourcemonitor/resources//The above two paths are used for table entryresource collection, instead of NETCONF collection.sensor path route/ipv4routessensor path route/ipv6routessensor path lldp/lldpneighborssensor path mac/macunicasttablesensor path arp/arptable //The above five paths are used for the collection of changeanalysis-related table entries.sensor path sensor path inqa/statisticses/statistics/losses/loss//The above two paths are used foriNQA traffic collection.sensor-group s3//Create sensor group s3 (event-triggered sensor paths)sensor path buffermonitor/portquedropeventsensor path buffermonitor/portqueoverruneventsensor path resourcemonitor/resourceeventsensor path tcb/tcbpacketinfoeventsensor path tcb/tcbrawpacketinfoevent //The above two paths are used for TCB collection.sensor path telemetryftrace/genevent //This path is used for MOD data collection.destination-group d1 // Create the destination group, and configure the collector address andportipv4-address 172. 30.129.100 port 50051ipv4-address 172.30.129.100 port 50052subscription grp UUTBRWYFGYAXPZ2CBV6WIVCHXI // Create a subscription, and associate it withthe sensor group and destination groupsensor-group s1 sample-interval 60sensor-group s2 sample-interval 60sensor-group s3source-address 192.168.10.3destination-group d1grpc enable#CAUTION: When configuring the destination group, set the IP address to the virtual IP address of thesouthbound pod cluster. The port number 50051 corresponds to the gRPC collection-newcollection, while 50052 corresponds to the gRPC collection. If the device's interface to Analyzeris bound to a VPN instance, you need to append the VPN-instance parameter to the collectoraddress of the destination group. The interval of non-event-triggered collection is recommended as one minute. If there arespecific requirements for display accuracy, the collection interval can be adjusted dynamically. In the current solution, only the 15 sensor paths in sensor group S1 support controllerdeployment. The rest need to be configured manually.Add network assetsImport assets from controller1.Navigate to the Analysis Analysis Options Network Settings Assets Managementpage.

2.Click Third-Party System, and add the controller’s connection information as follows. Then,select Device from Import Import from Controller.NOTE:If the DC’s closed-loop issues function is required, you must select Import from Controller toadd devices for Analyzer. IP: northbound IP address of DC Scenario: DC Username/Password to log in to the DC: admin/[email protected] Port number: 30000 (https needs to be disabled)

Manually import devicesNote: If the DC’s closed-loop issues function is not needed, this import method can be used.1.Navigate to the Analysis Analysis Options Network Settings Assets Managementpage.2.Click Add Asset. On the page that opens, perform the following tasks:a. Select the asset type and device type.b. Enter the asset name, which is required.c. Enter the IP address, which is required.3.Click Save.The asset name and IP address are required, while the rest are optional. Upon asset addition,the other information of the device will be automatically obtained.Configure collection templatesEdit an SNMP template1.Navigate to the Analysis Options Collection Configuration Templates page.

2.Click Edit Network Protocol Access Parameter Template, select SNMP, and click AddTemplate.3.Specify the parameters, including the template name, read-only community name, andwrite-only community name according to the device SNMP configuration, select the parametertype, and click OK.Edit a NETCONF template1.Select NETCONF, and click Add Template.2.Specify the parameters, including the template name, username, and password according tothe device NETCONF configuration. Click OK and then click Back.

CAUTION:The username and password in the template must be consistent with the local user usernameand password configured on the device.Add a collection template1.Click Collection Configuration, select SNMP, and click Add Collection Template.2.Specify the template name.3.Select the services (you can select all).

4.Switch to NETCONF, and edit the polling intervals of the collection items.

For example, the polling intervals of the table entries are 60 minutes by default, and you canset them to other values.Edit a device access parameter template1.Select all the devices, and click Bulk Edit Device Access Parameter Template.2.Perform the following tasks on the page that opens:a.Select Do Not Change the Existing SNMP Template Settings and select the newlyadded SNMP template.b.Select Do Not Change the Existing NETCONF Template Settings and select the newlyadded NETCONF template.c.Select Do Not Change the Template Settings and select the newly added collectiontemplate. Click OK.d.Select Whether to Use GRPC Collection and switch it to Yes.Obtain and save topologyAfter the network health configuration is completed and the device comes online, navigate to theHealth Analysis Health Overview Area Health page, and click the topo icon to obtain thetopology in the global topology. After the topology is generated, adjust the device location and clickthe save icon to save the topology.

Configure agents1.Navigate to the Analysis Options Collection Configuration Agent page, and add a hostagent, which is to act as a collector.

2.Enter the host IP address, username, password and host description, and then click OK. (Theusername and password are generally root/123456 for login to the Linux back end.)3.Verify that the

Analyzer is the core component of the HPE IMC Orch estrator, It can visualize the network operation, perceive potential risks actively, and warn automatically by collecting real-time data of and sensing the state of device performance, user access, and service traffic, as well as implementing big data analysis and AI algorithm.