Alcatel-Lucent 5620 SERVICE AWARE MANAGER NUAGE VIRTUALIZATION SOLUTIONS GUIDE. Release 12.0 R7 December HE AAAA TQZZA Edition 01

Transcription

1 NUAGE VIRTUALIZATION SOLUTIONS GUIDE Release 12.0 R7 December HE AAAA TQZZA Edition 01 Alcatel-Lucent 5620 SERVICE AWARE MANAGER NUAGE VIRTUALIZATION SOLUTIONS GUIDE Alcatel-Lucent Proprietary This document contains proprietary information of Alcatel-Lucent and is not to be disclosed or used except in accordance with applicable agreements. Copyright 2014 Alcatel-Lucent. All rights reserved.

2 Alcatel-Lucent assumes no responsibility for the accuracy of the information presented, which is subject to change without notice. Alcatel, Lucent, Alcatel-Lucent, the Alcatel-Lucent logo, lightradio, and TiMetra are registered trademarks of Alcatel-Lucent. All other trademarks are the property of their respective owners. Copyright 2014 Alcatel-Lucent. All rights reserved. Disclaimers Alcatel-Lucent products are intended for commercial uses. Without the appropriate network design engineering, they must not be sold, licensed or otherwise distributed for use in any hazardous environments requiring fail-safe performance, such as in the operation of nuclear facilities, aircraft navigation or communication systems, air traffic control, direct life-support machines, or weapons systems, in which the failure of products could lead directly to death, personal injury, or severe physical or environmental damage. The customer hereby agrees that the use, sale, license or other distribution of the products for any such application without the prior written consent of Alcatel-Lucent, shall be at the customer's sole risk. The customer hereby agrees to defend and hold Alcatel-Lucent harmless from any claims for loss, cost, damage, expense or liability that may arise out of or in connection with the use, sale, license or other distribution of the products in such applications. This document may contain information regarding the use and installation of non-alcatel-lucent products. Please note that this information is provided as a courtesy to assist you. While Alcatel-Lucent tries to ensure that this information accurately reflects information provided by the supplier, please refer to the materials provided with any non-alcatel-lucent product and contact the supplier for confirmation. Alcatel-Lucent assumes no responsibility or liability for incorrect or incomplete information provided about non-alcatel-lucent products. However, this does not constitute a representation or warranty. The warranties provided for Alcatel-Lucent products, if any, are set forth in contractual documentation entered into by Alcatel-Lucent and its customers. This document was originally written in English. If there is any conflict or inconsistency between the English version and any other version of a document, the English version shall prevail. When printed by Alcatel-Lucent, this document is printed on recycled paper.

3 Contents 1 Release overview Release 12.0 R7 NV overview Java GUI features QoS enhancements Network management enhancements DC application features DC Inventory application enhancements DC Service Navigator application enhancements Upcoming release targeted feature support Basic BGP topology and map SD VPN audit and support BGP and historical correlation enhancements Solution overview and 5650 CPAM for Nuage Virtualization Nuage Virtualization solution overview Nuage dvrs service solution overview Virtualized service management in the NV solution packaging EML layer Infrastructure layer Dynamic service layer OSS integration equipment management infrastructure management Virtualization control management DC Manager CPAM IGP topology maps Alcatel-Lucent 5620 Service Aware Manager iii

4 Contents 2.8 service management Historical event correlation and logging Map highlighting VRS redundancy Alarm management TCAs OAM support Statistics management DC applications Data Center Inventory application Data Center Service Navigator application Fault Management application Use cases About use cases Sample VM assessment VM monitoring Cause codes Event retrieval VM assessment procedures Procedure 3-1 To troubleshoot a down VM using the Procedure 3-2 To troubleshoot a down VM using the Data Center Service Navigator application Sample underlay test for a virtualized service Nuage OAM System script bundle Test results Workflow to perform an underlay test Underlay test procedures Procedure 3-3 To create the Nuage OAM System script bundle Procedure 3-4 To execute an underlay test from the Java GUI Procedure 3-5 To execute an underlay test from the Data Center Service Navigator Sample VM searching and monitoring Data Center Inventory application Data Center Manager Sample 5650 CPAM map troubleshooting Procedure 3-6 To troubleshoot a virtualized service using CPAM maps iv Alcatel-Lucent 5620 Service Aware Manager

5 1 Release overview 1.1 Release 12.0 R7 NV overview Java GUI features DC application features Upcoming release targeted feature support 1-5 Alcatel-Lucent 5620 Service Aware Manager 1-1

6 1 Release overview Release 12.0 R7 December HE AAAA TQZZA Edition Release 12.0 R7 NV overview The, Release 12.0 R7, introduced administrative QoS and network management features to the Java GUI. In addition, the release expanded on the monitoring and assurance capabilities of the DC Inventory and DC Service Navigator applications. See the Release Description for more information on new features not specific to the NV solution. 1.2 Java GUI features The, Release 12.0 R7, extends QoS and network management functionality to virtualization-specific network objects. QoS enhancements This release introduces support for DSCP mapping tables to define DSCP remarkings and QoS forwarding classes for V-Port traffic. You can also now view DSCP match criteria for egress and ingress ACLs. These DSCP tables and match criteria are defined in the VSP and discovered as read-only objects by the. The release also introduces discovery of VM multicast channel maps as read-only objects. These maps generate a list of multicast groups which are available to be joined. A multicast channel map can define multiple ranges of multicast groups, but the ranges will never overlap. A multicast channel map is distributed to each VM in an enterprise. Network management enhancements This release extends ageout constraint policies to virtual network objects. Ageout constraint policies define the period of time that a persisted object is retained in the database. When the age of an object reaches the ageout value, the deletes the object from the database. Figure 1-1 shows the newly introduced ageout constraint policies. Figure 1-1 Ageout constraint policies 1-2 Alcatel-Lucent 5620 Service Aware Manager

7 1 Release overview This release also introduces operational group support for physical ports and LAGS on the 7850 VSG and 7850 VSA. Operational groups associate multiple service endpoints (such as SAPs and SDPs) on the same or different service instances. The operational group can be used to monitor the status of its member components and perform actions based on operational state changes. The status of the operational group is derived from user-defined thresholds of the number of operational member components. A physical port can be assigned as a member or a monitor of an operational group. Lastly, this release introduces port profiles for software gateways. Port profiles define VLAN ranges that can be used locally for manually configured services. They also define provisioning modes that decide how VLANs within the range are processed. In this release, the only supported provisioning mode is push. You can assign port profiles to ports or LAGs. 1.3 DC application features The, Release 12.0 R7, enhances service assurance and monitoring capabilities in the two DC applications. DC Inventory application enhancements In this release, the virtualized service-to-underlay mapping is now exposed to the user in the Data Center Inventory application. The inventory search view allows you to select a virtualized service and see associated network components in a hierarchical view. The inventory represents of drill-down view of the component hierarchy. When you select a virtualized service from the Services tab, the Associated Components tab updates with a list of the associated V-Switches, V-Switch controllers, and upstream routers. When you select a Virtual Switch Controller, the Upstream Routers list updates to show routers for the selected controller. When you select a V-Switch, the panel shows a list of V-Ports for that service. Figure 1-2 shows the service mapping interface. Figure 1-2 Virtualized service mapping Alcatel-Lucent 5620 Service Aware Manager 1-3

8 1 Release overview Release 12.0 R7 December HE AAAA TQZZA Edition 01 DC Service Navigator application enhancements There are significant changes to the Data Center Service Navigator application in this release. A fault management window has been added to the interface. This window allows you to view all alarms on the selected domain or V-Port. It provides alarm monitoring, correlation, and troubleshooting for virtual network objects and virtualized services in the network. It allows you to filter, identify root causes, and determine the impact of alarms. It includes the new data center correlation framework to correlate faults unique to virtual network objects. You can perform alarm management functionality, such as alarm acknowledgment or severity configuration. You can also view alarm statistics and correlation trees from the fault management window. Figure 1-3 shows the fault management window. Figure 1-3 Alarms List tab This release also introduces support for 5650 CPAM root cause and historical impact analysis in the DC Service Navigator application. You can query the event log for a list of DC network events that occurred in a specified time window and then determine the causes or impacts of an event. Figure 1-4 shows the Historical Events tab. Figure 1-4 Historical Events tab 1-4 Alcatel-Lucent 5620 Service Aware Manager

9 1 Release overview Lastly, you can now use the DC Service Navigator application to perform an underlay test. You can use this test to troubleshoot a service-attached VM to assess the underlay health of the data center network. This functionality is useful if, for example, the statistics show a decline in performance statistics for a V-Port. You must create the Nuage OAM System script bundle before you can execute it in the Java GUI or Data Center Service Navigator web application. The Nuage OAM System script bundle includes the control script and CLI script use to execute the OAM ping test between two V-Ports. The script is included as an example script from which you can create an underlay test script bundle. Figure 1-5 shows the Underlay Test tab which allows you to select the service endpoints for the underlay test. Figure 1-5 Underlay Test tab Figure 1-6 shows the Test Results tab which displays the packet loss information and transfer speed between the source and destination service endpoints. Figure 1-6 Test Results tab 1.4 Upcoming release targeted feature support This section describes targeted feature support for upcoming releases. Note At this time, feature support for Releases 13.0 R1 and 13.0 R3 is not confirmed. The targeted features described in this section may change or be gated to a later release. Alcatel-Lucent 5620 Service Aware Manager 1-5

10 1 Release overview Release 12.0 R7 December HE AAAA TQZZA Edition 01 Basic BGP topology and map The 5650 CPAM IP topology map will be supported as a basic IP topology in the web applications. The primary functionality of this basic topology will be path/service highlighting and the ability to put virtual network components such as SWGWs or VMs on the map. This feature will make it easier to understand where services or components are located, and to quickly find related information such as UUIDs, operational states, and domain information. SD VPN audit and support The will support discovery of the software-defined VPN and the current baseline of data center features applied to the SD VPN application in the wide area. In addition, a new NUAGEMON agent will offer a highly consumable view of VNS CPE platforms in CLI/XML/JSON northbound via the VSC. The will use this agent to offer automated E2E and on-demand service audit for the SD VPN from VNS. BGP and historical correlation enhancements BGP correlation will be greatly enhanced to include BGP peering to identify a range of problems such as VSD-VSC RR route failures or inconsistent distribution as a result of peering. Software gateways will also have a significant number of use cases provided to enhance the quality of service correlation. 1-6 Alcatel-Lucent 5620 Service Aware Manager

11 2 Solution overview 2.1 and 5650 CPAM for Nuage Virtualization Nuage Virtualization solution overview Nuage dvrs service solution overview Virtualized service management in the NV solution packaging equipment management infrastructure management service management Alarm management OAM support Statistics management DC applications 2-13 Alcatel-Lucent 5620 Service Aware Manager 2-1

12 2 Solution overview Release 12.0 R7 December HE AAAA TQZZA Edition and 5650 CPAM for Nuage Virtualization The Nuage Virtualization (NV) solution expands the portfolio by packaging and 5650 CPAM products into a feature group for the Nuage data center solution. The NV solution is a unique content stream aligning with releases of the Nuage product. The product is a part of the content streams for the and 5650 CPAM. 2.2 Nuage Virtualization solution overview The NV solution introduces support for virtualized service delivery by discovering SDN controller-based services deployed on the 7850 VSG, 7850 VSA, and standalone VSC. In a Nuage environment, the VSD and VSC provision VM-based services across a virtual switch (V-Switch) and virtual switch GW (SWGW) that depend upon an IP underlay network (for example, PE NEs and RRs). This setup is achieved through OpenFlow and XMPP interfaces between the VSD/VSC infrastructure and the network. The NV solution complements the Nuage solution by discovering network and service objects from routers (7850 VSG) or controllers (standalone VSC) using SNMP while monitoring network state using control plane protocols like OSPF or IS-IS. Virtualized service assurance and visibility is enhanced with 5650 CPAM route analytics to provide an operational view of BGP VPN and WAN routes. The NV solution is collaborative by providing the mapping between networks and route analytics and the virtualized objects and policies in the network. It allows you to do the following. Discover and manage SROS-based NEs, such as the 7850 VSG, with full FCAPS EMS support. Provide IGP network infrastructure management in a multi-vendor IP transport network. In a typical deployment, one IGP family, global BGP, and related GNE features are provided as part of infrastructure management. Additionally, infrastructure management includes support for correlation across EMS and data center IGP domains. Manage VSC virtualization inventories and their V-Switch and VM attachments, providing visibility of virtualized service states in the network. Route analytics support mapping of services and control plane states to the IP underlay network or PE exit points for operational support of services. Provide operational interfaces to support the preceding functionality. The VSD, -O, and 5650 CPAM-O interfaces are separate because they are heavily supported in industry. Future versions of the interfaces will be RESTful to support VSD and new integration partners. 2-2 Alcatel-Lucent 5620 Service Aware Manager

13 2 Solution overview 2.3 Nuage dvrs service solution overview The Nuage distributed Virtual Routing and Switching (dvrs) service solution is implemented and monitored by the VSD. The NV solution provides a VRS service that is fully virtualization-aware, supporting VM mobility and service state changes. VMs can be moved, deleted, or suspended dynamically, and the dvrs solution adapts to monitor VM states as they change throughout the network. Route analytics from the 5650 CPAM interface with the local DC and WAN network through methods such as BGP option B and VLAN-VLAN interfaces. The service is a combined L2/L3 forwarding solution that consists of component services that are discovered and monitored by the. The dvrs solution includes a dvrs and EVPN service that can be discovered and monitored by the. The two components are associated using auto-bind tunnels. Underlying transport toward the VMs is encapsulated with VxLAN over UDP tunnels. Tunnels can be encapsulated with VxLAN at the V-Switch or at the 7850 VSG. Transport on the auto-bind tunnels is encapsulated using VPN over GRE tunnels. All VxLAN and GRE tunnels originate and terminate on the V-Switch. Therefore, the can deduce upstream routers and ports on the V-Switch. These associations can be used for correlation and service mapping for associated virtual components, such as the VSC. Figure 2-1 Nuage dvrs service solution 7850 VSG VM V-Port V-Switch evpn dvrs VM V-Port V-Switch evpn VM V-Port V-Switch evpn dvrs 7850 VSG VPRN VPRN PE Node PE Node The supports the discovery of a standalone EVPN service. The standalone EVPN serves as a virtualized VxLAN-based L2-only service. The standalone EVPN service operates for the following use cases: SWGW-to-VM remote site to DC connectivity SWGW-to-SWGW intra-dc connectivity VM-to-VM intra-dc connectivity Alcatel-Lucent 5620 Service Aware Manager 2-3

14 2 Solution overview Release 12.0 R7 December HE AAAA TQZZA Edition Virtualized service management in the The dynamic nature of virtualized services has significant implications for service management. The reason for this is that changes in the service may or may not represent a fault. The action of deleting services to follow compute actions for example, VM moves implies that service management must be nimble and analytic in nature. Similarly, fault correlation cannot rely on hierarchies or traditional approaches as they do not reflect the fundamentally changeable nature of a virtualized service. The NV solution introduces a dynamic lightweight service focused on the needs of virtualization. The NV solution accepts that service state and VM state are impermanent and that objects must be deleted to represent a true reflection of the network at the current time. However, the VM UUID is generally persistent and can be expected to reappear within the service infrastructure. Tracking the VM UUID helps to retain key alarm correlations, statistics, and other data during service deletion. Virtualized service topology is complex because VRS is distributed to the hypervisor and the association to IP transport and transport state is not easily made. The NV solution provides a lightweight service, VM soft persistence, and a route analytic approach. Figure 2-2 Lightweight service VSW VSC V-Site V-Port VM Service Tunnels vxlan + GRE V-Site V-Site V-Port V-Port VM VM ( navigation) dvrs Site SAP A lightweight service recognizes that the V-Node is a useful discovery mechanism but that the service should reflect the real network relationships for operational action. The defines a V-Site to correspond to all VM V-Port service associations on a particular V-Switch for that service. As such, the V-Site becomes the key object to relate to the V-Switch, upstream routers transporting encapsulation traffic from the V-Switch, related controllers, and ports. Likewise, any future OpenFlow table or tools functionality will exist on the V-Site because the site serves as a proxy for hypervisor V-Switch information that pertains to the customer service. On the network side facing the 7850 VSG, 7850 VSA, or 3rd party GNE, the V-Site allows us to interpret the route analytics needed to understand how the service and V-Switch infrastructure relates to the IP underlay network. 2-4 Alcatel-Lucent 5620 Service Aware Manager

15 2 Solution overview The VxLAN and GRE (auto-bind) tunnels within the data center originate and terminate on the V-Switch. Consequently, the information provided by the V-Node can be substantially improved by employing route analytics to deduce the associations of the V-Switch to upstream routers and ports. Such associations provide the mechanisms required to show the association of the V-Switch to the IP underlay network for a controller or services to IP networks. The associations are also important for problem solving and correlation because configurations and faults can change the state of the service transport. For example, a port problem or configuration problem could result in withdrawal of the prefix associated with a number of V-Switch failing VMs or reducing the routing to a single path. The IGP monitor feature maintains the VSC-to-edge prefix mapping for example, is in /24 and provides correlated alarms if IGP events render the V-Switch unreachable. Similarly, understanding paths, and path history, requires knowledge of V-Switch reachability for the tunnels. Therefore, the overall service transport state is augmented by a set of new functionality in the 5650 CPAM to manage the complexity of path management and history. Services are discovered through a combination of SNMP ( V-Node management), IGP/BGP (5650 CPAM route analytics), and deduction. Many features also rely on the 5650 CPAM BGP VPN features for analysis and discovery as well. 2.5 NV solution packaging The NV solution provides management for data center environments with the Nuage Virtualized Services Directory (VSD). The VSD, VSC, and collaborate for a complete solution from provisioning to assurance in the DC and WAN routes. The NV solution focuses on operations service intelligence in support of Nuage VSD service provisioning and assurance. The and 5650 CPAM portfolio for Nuage provides comprehensive FCAPS EMS feature sets for equipment management of the 7850 VSG, 7850 VSA, and standalone VSC. The solution inherits a route analytic base from the 5650 CPAM. However. the solution in a data center is very different from traditional installations due to a greater presence of multi-vendor and dynamic services. Therefore, the packaging and feature support matrix for the product differs from standard installations as a set of packaging options. Although features are derived from the and 5650 CPAM, the nature of a VSC-based service, greater dynamics, and route analytics result in a different set of capabilities. Some features are explicitly excluded. Contact the PLM for additional details beyond the following summary. The NV solution is closely aligned with the, although packaging is significantly different. In the case of EMS functions, management is handled with SNMP interfaces because the 7850 VSG and standalone VSC expose SROS-based SNMP stacks to the management plane along with new tables for the V-Node and other attributes. The NV solution is more extensive than equipment EMS for the VSC. The route analytics and alarm correlation is extended to the VM state, integrated BGP and VM state change correlation and reachability analysis, and web supervision. Packaging is more a la carte and will reflect the need to use dynamics fully in a DC environment. Alcatel-Lucent 5620 Service Aware Manager 2-5

16 2 Solution overview Release 12.0 R7 December HE AAAA TQZZA Edition 01 EML layer The EML layer provides basic equipment management, broadly equivalent to SAM-E. The EML layer provides FCAPS features for equipment via SNMP, sftp, FTP, and other interfaces for the 7850 VSG, 7850 VSA, and standalone VSC. Full equipment management is supported, including alarms and configuration, but protocols, correlation, and GNE features in the and 5650 CPAM are excluded. The EML layer is licensed by server instance containing standard SAM features such as the following: NE backup and restore equipment configuration and status monitoring statistics and TCAs for equipment objects policies for network ports Infrastructure layer The infrastructure layer provides infrastructure topology management and protocol management on the 7850 VSG, 7850 VSA, standalone VSC, and third-party GNE. The primary features are IGP topology maps and related 5650 CPAM features, protocol history, alarms, and GNE features on the 7850 VSG variants and third-party NEs. Discovery of the V-Node and related 5650 CPAM features are also included as part of the infrastructure layer. Infrastructure level statistics, maps, and related features are included along with fault correlation across equipment and infrastructure. Licensing is similar to the 5650 CPAM being charged as an equivalent NE by type and the infrastructure is needed for service management. Dynamic service layer The dynamic service layer provides persistence of VMs, discovery of the VM and V-Port in the service, and related mapping to the IP underlay network. Consequently, a current view of virtualized services and mapping is provided for operations. The IGP real-time view of the network is combined with BGP VPN route analytics from the 5650 CPAM to provide a full view of the VPN for troubleshooting. In addition to standard correlation, the dynamic service layer maintains a central repository of control and VM history and attachment relationships for analytics, troubleshooting, and correlation. An operator can see where a VM was attached at a particular time, correlate problems to historical events, and find the mappings of virtual objects to the IP underlay network. OSS integration OSS interfaces supported in the are the -O and 5650 CPAM-O interfaces and the interface provides operational alarm and route analytic flows in the infrastructure and service layers as appropriate. The OSS interface is charged on a per-server instance. More complex alarm applications, such as transformation to supply a virtualization platform like VMware or custom integrations, will be charged separately as they become available. 2-6 Alcatel-Lucent 5620 Service Aware Manager

17 2 Solution overview 2.6 equipment management The equipment layer provides management of the devices similar to that of the with the clear restriction that all protocol configuration, maps, and correlation are not supported. The equipment manager supports equipment lists and the basic view of the DC manager and all associated DC policies. Standard FCAPS support provided for network elements includes the following: network element backup and restore equipment configuration and status monitoring fault management SNMP performance statistics collection threshold crossing alarms user security 2.7 infrastructure management Infrastructure management includes the and 5650 CPAM components required to manage the DC infrastructure. Infrastructure in this context includes read/write access for protocols such as LLDP or BGP, physical and IP maps, and related features like statistics collection or network TCA. The infrastructure management component is equivalent to the management layers needed to assure and visualize the IP underlay network. The infrastructure layer includes the DC Manager and related V-Node information, but does not include VPN management, service-level correlation, or similar features in the operations setting. The DC Manager and V-Node cooperate in the to provide correlation, mapping, and assurance at the infrastructure and at the services layers of the product. Virtualization control management The Nuage 7850 VSG, 7850 VSA, and standalone VSC provide a controller view of the associations of the V-Switch and VMs. This controller view is represented in the as a virtual node (V-Node), which is a proxy view of the association between virtualized components and the network. The V-Node is created by the 7850 VSG to expose the virtual switch and related components to the VSC as a virtual line card. The VSC virtualization inventory as exposed by the V-Node is a management entity that encapsulates the virtual routing components from the associated VSC and maps them hierarchically to related virtual machines and virtual services. The purpose of the VSC virtualization inventory is to expose a simplified view of associations from the perspective of the VSC, resulting in easier mapping and correlation. The V-Node exposes service relationships to the, allowing a partial view of the data plane when combined with 5650 CPAM route analytics and NMS deduction. The V-Node displays the related V-Switch and VMs. deduction also helps the V-Node deduce upstream IP transport, mapping to the routers used to transport traffic for the V-Switch. Alcatel-Lucent 5620 Service Aware Manager 2-7

18 2 Solution overview Release 12.0 R7 December HE AAAA TQZZA Edition 01 DC Manager The Data Center Manager is a central display for all virtual objects in the data center network. The DC Manager provides an at-a-glance view of associations between the VSC, V-Node, V-Switch, V-Port and related underlay components in the IP network. A user can use the DC manager to view network status across controllers, V-Switches, and VMs. Additionally, the 5650 CPAM IGP map can be used to locate the underlay transport relationships for these objects. The filterable window allows you to search for specific VMs based on their VM UUID or associations to a specific V-Node. The DC Manager retains last known information for virtual objects that have moved in the network. For example, the VM properties include the previous VM state. The DC Manager also maintains redundancy associations such as the V-Switch relationships to primary/secondary controllers and associated states. The DC manager organizes these objects in a related DC POD filterable view. You can filter and search for objects based on controller ID, redundancy associations, current and previous state, and other attributes. You can use these filtered associations to find upstream routers from the V-Switch. You can also use the associations to determine associated primary and secondary controllers. These associations can be used for V-Switch path highlighting. You can navigate from the Data Center Manager to read-only and read/write properties forms for any managed virtual object. The properties forms include information to simplify the association of virtual objects to the IP underlay network. For example, the Virtual Switch properties includes a deduced list of upstream routers CPAM IGP topology maps You can use 5650 CPAM IGP topology features to map and monitor data center network infrastructure. Topology maps display real-time network topology information for a designated IGP administrative domain. The maps provide a color-coded interface from which you can see a visual representation of routers, paths, and virtual objects within the specified IGP administrative domain. The topology view provides quick navigation to properties forms, telnet sessions, and feature configuration from within the IGP administrative domain CPAM IP path monitors can be used to monitor the route between any two routers seen by the. When a network topology changes, such as a link metric or state change, the system evaluates whether the routes of any registered path are affected. If this is the case, new routes are recorded and the 5650 CPAM is informed. IP path monitors help with data center network management because they maintain a historical log of changes to the control path between a VSC and an associated VM or V-Switch. The monitors can also find historical faults or alarms raised on the path, which can be correlated to affected objects. IP path monitors can also monitor paths from virtual objects to routers in the IP underlay network. The IGP monitor surveils prefixes redistributed into the IGP layer of the IP underlay network, which allows the to perform two primary goals within a multi-vendor IGP infrastructure. 2-8 Alcatel-Lucent 5620 Service Aware Manager

19 2 Solution overview 2.8 service management The central role for the in a Nuage data center solution is discovery of virtual services for the purpose of operational assurance and awareness. A future role for the product can be to further enrich the VSD with analytic intelligence for the DC interconnect (WAN and DC PE) and network behavior so as to collaboratively enrich the DC service experience for tenants. The current release focuses on operational intelligence by discovering dvrs and EVPN service views that are virtualization aware down to the VM and V-Port states. The virtualization view is then combined with 5650 CPAM route analytics so as to have a full view of the mapping of the service to the IP underlay network in both SROS and multi-vendor environments. The supports multi-vendor topology through 5650 CPAM dynamic discovery of the IGP and BGP base routing contexts. These contexts are merged with a comprehensive view of the V-Switch and VM mappings derived from the V-Node to complete the understanding of the underlay-to-overlay service relationships in the network CPAM BGP functionality provides a full view of the DC and WAN routing for the service and is automatically monitored and associated with the VPN with 5650 CPAM event monitor functions. In addition, a full dynamic view of the virtual service and VM and V-Port state and attachment is related to the routing and infrastructure view of the service in detail. This dynamic view provides a comprehensive view of the relationship of the overlay VPN state to the IP underlay network in Nuage 7850 VSG and third-party VSC-based networks. Discovery of the virtualization components in the DC have resulted in significant change in architecture to more closely mirror the philosophy of 5650 CPAM. Virtualized components such as the VM and V-Port are persisted to retain statistics, alarms, and history, which are the primary service handles, whereas services are deleted and changed on a regular basis. Network attachment and history is a key consideration in operations and forensics, so the maintains a state registry and history for the VM attachment, relationships, and key control plane events. The primary operational services features are the following. Discovery of dynamic services based on VM UUID, including persistence of all key events associated with the VM across state changes. For example, the retains the previous VM state, synthetic and correlated alarms, and statistics across VM changes until explicitly deleted or removed due to a cleanup after seven days. Support for a comprehensive connectivity log for virtualization components provides a clear view of where and when a VM and V-Port are connected in the network. This log allows operators to conduct forensic troubleshooting to isolate network or exit router problems. Support for a historical event correlation feature to help operators quickly isolate the root causes and impacts of service problems. For example, VM flapping invariably results in BGP route flapping in the DC, with the latter fault isolated and suppressed in favor of the VM root event. Support for a service supervision web application to simplify triage and navigation to key service KPIs and information. Future features will focus exclusively on REST API and web applications. Alcatel-Lucent 5620 Service Aware Manager 2-9

20 2 Solution overview Release 12.0 R7 December HE AAAA TQZZA Edition 01 The provides many ways of mapping virtual components to network components. For example, the DC Manager exposes the mapping of the V-Switch to upstream routers or VSC to VMs under that controller. However, the key capability for understanding network mapping remains 5650 CPAM IP maps, as the maps provide many standard 5650 CPAM components for visualizing services and packet flows. In particular, the supports virtualization by allowing the highlight (overlay) of services and service paths into the 5650 CPAM topology to help to determine routing paths and reachability. For example, an error in metrics may have disabled ECMP and this can be exposed with overlays. Likewise, path or new IGP monitors can detect reachability problems for services or related infrastructure. In general, the full suite of IP IGP functionality and service and path functionality is available in the 5650 CPAM for managing and troubleshooting the relationship between overlay service and underlay infrastructure. Historical event correlation and logging Network events are stored in a history log that can be used for fault correlation. The event log stores BGP events and DC events. BGP events include reachability alarms and flapping occurrences for the BGP prefix. DC events include creation and deletion of virtual objects as the events are recorded on the VM, V-Switch, V-Port, or VSC. When you perform event retrieval on a dvrs service, you can troubleshoot historical events by correlating DC events to root causes or correlating events to impacts. Therefore, a user can understand the impact of transients on a service or differentiate compute events from problems in the underlay. Flapping events on the VM could occur for legitimate reasons, and this can be distinguished by the. Therefore, alarms regarding VM state changes should be generated only when needed. Map highlighting 5650 CPAM map highlighting can be used to highlight L2/L3 services, composite services, service tunnels, SPF and CSPF routes, and OAM diagnostics results on IGP maps. In a data center network, map highlighting is most useful for mapping paths from a VM or V-Switch to either an associated controller or a PE router. By performing a SPF highlight from a virtual object to a PE router, you can create a highlighted mapping between the virtual object and the IP underlay network. The NV solution extends 5650 CPAM map highlighting to lightweight services, which allows you to highlight routes from the data plane or control plan view of the virtualized service. You can use 5650 CPAM map highlighting to highlight the route between a virtual site and either a service site of a V-Port. With a highlighted route, you can monitor reachability on the virtual service and assess faults that are raised on the route Alcatel-Lucent 5620 Service Aware Manager

21 2 Solution overview Figure CPAM map highlighting VRS redundancy The standalone VSC supports a VRS redundancy configuration for control of a V-Switch. The represents the redundancy configuration by creating a virtual switch session for each VSC/V-Switch association and mapping primary and secondary associations to a virtual switch session group. The virtual switch session group allows you to view the status and associations of VSCs and V-Switches in the network, as well as any aggregated or related alarms. The automatically creates a virtual switch session group when it discovers two virtual switch sessions that belong to the same 5650 CPAM administrative domain and data center POD and that target the same V-Switch instance. 2.9 Alarm management The converts SNMP traps from NEs and from system events to alarms that are associated with the managed device, configured service, or network policy. The alarm-based fault management system includes the following functionality: conversion of SNMP traps from NEs to alarms using the X.733 standard correlation of alarms with equipment- and service-affecting faults updates to the managed-object operational status in near-real-time alarm policy control that allows a network administrator to specify how to process alarms, and how to create and store the alarm logs Alcatel-Lucent 5620 Service Aware Manager 2-11

22 2 Solution overview Release 12.0 R7 December HE AAAA TQZZA Edition 01 point-and-click alarm management using the GUI dynamic alarm list and object properties forms the ability to log the actions performed to resolve a related fault by adding notes to the alarm alarm history for performing trend analysis Basic alarms indicate the problem, affected objects, and remedial actions, and monitor activity on the 7850 VSG or standalone VSC, such as route fluctuations through historical events. The provides improved correlation through integrated service, VM, and BGP events within a new dynamic event correlation system that distinguishes common state changes such as VM moves from faults. Further historical event correlation is supported for root cause and impact analysis. TCAs A suite of customizable threshold crossing alarms (TCAs) is supported on the network (utilization) or virtual ports (queues) and can be used to warn the operator of potential network issues. Alarms are correlated to equipment or service levels making it easier to see the source of a network problem OAM support A future available OAM feature set will use prebuilt test policies to assist on-demand troubleshooting. The ability to perform OAM simplifies on-demand testing with connectivity assurance, in addition to 5650 CPAM management of paths in the network. Supported automation flows will be VM-to-VM checks, VM-to-PE checks, and VM-to- all checks on a zone or domain. This functionality will be similar to highlighting work flows to CPAM as the UI enhancement is integrated in the services layer. The has an available control script that can test underlay reachability between VMs or VMs and PEs. For example, a customer can easily check VM1s connectivity to all other VMs seeing an OAM ping result for the underlay virtual switches by running the script a the service layer Statistics management The performs on-demand or scheduled statistics collection for managed NEs, services, or virtual network objects. These statistics can be used to monitor or troubleshoot a data center network, or to perform SLA or billing functions. Statistics collection can be configured with policies that are distributed to specified network objects. Statistics are displayed in tabular or graphical form using the statistics plotter Alcatel-Lucent 5620 Service Aware Manager

23 2 Solution overview All supported statistics types can be viewed in tabular or graphical format using either historical or real-time data. Tables list specific values of historical data, and table data can be sorted, filtered, and exported to files in different formats. Graphs can be used to identify trends and display multiple statistics counters simultaneously using the Statistics Plotter. The statistics plotter graphs collected statistics from a specified time period, including real-time plotting. The statistics plotter can plot ingress and egress utilization statistics using calculated values. Plotted utilization statistics provide an accessible view of the bandwidth usage on a specified port in both tabular and graphical form. Figure 2-4 statistics plotter Start historical plotting Start real-time plotting Stop plotting Configuration panel Detail panel Save current view Reset zoom Zoom in Zoom out Legend showing monitored object name Overview panel Data list panel Slider DC applications The NV solution provides network management functionality using web-based applications. The use of the web applications is intended mainly for inventory management, network fault monitoring, and troubleshooting purposes. The web applications are external to the client GUI and do not require a local client installation. Alcatel-Lucent 5620 Service Aware Manager 2-13

24 2 Solution overview Release 12.0 R7 December HE AAAA TQZZA Edition 01 Data Center Inventory application The Data Center Inventory application provides a dashboard inventory view of virtual network components and virtualized services in the network. It lists the total count of an object type, along with the number of operational and not operational objects. The dashboard view panel provides an at-a-glance summary of the virtual network components and virtualized services associated with the specified data center. It lists the total count of an object type, along with the number of operational and not operational objects. The inventory search panel provides a list of VMs in the specified data center. The panel allows you to quickly find the status of a specific VM and view its associated underlay components. It includes a persisted administrative state for the last known status of VMs. The inventory topology panel displays a conceptual map of the specified data center. It shows the association of virtual switch controllers, virtual switch groups, virtual switches, virtual machines, and virtual ports. The topology also displays software gateways as both VRS-G and VSG virtual switches. Figure 2-5 Data Center Inventory application Data Center Service Navigator application The Data Center Service Navigator application shows a dashboard of the operational health of the service objects in a specified administrative domain. Virtualized services within the are grouped by their customer, domain, and zone ID, allowing for easy searchability and navigation by enterprise from the web application Alcatel-Lucent 5620 Service Aware Manager

25 2 Solution overview You can specify an enterprise and domain to view a list of the V-Ports within that domain. The list includes V-Port functional state and BGP reachability state. In cases where the functional or reachability state is down, you can hover over the BGP state flag to view correlated alarms causing the administrative down state. You can use the Data Center Service Navigator application to perform in-depth forensic analysis such as root cause and impact analysis. You can also perform an underlay ping test to assess network health. Figure 2-6 Data Center Service Navigator application Fault Management application The Fault Management application provides alarm monitoring, correlation, and troubleshooting for virtual network objects and virtualized services in the network. It allows you to filter, identify root causes, and determine the impact of alarms. It includes the new data center correlation framework to correlate faults unique to virtual network objects. The Fault Management web application provides four different views of network alarm status. Alarm List Alarm Statistics Alarm Distribution Alarm Hierarchy Alcatel-Lucent 5620 Service Aware Manager 2-15

26 2 Solution overview Release 12.0 R7 December HE AAAA TQZZA Edition Alcatel-Lucent 5620 Service Aware Manager

27 3 Use cases 3.1 About use cases Sample VM assessment VM assessment procedures Sample underlay test for a virtualized service Workflow to perform an underlay test Underlay test procedures Sample VM searching and monitoring Sample 5650 CPAM map troubleshooting 3-11 Alcatel-Lucent 5620 Service Aware Manager 3-1

28 3 Use cases 3.1 About use cases The use cases in this chapter provide sample scenarios in which you could use Nuage Virtualization functionality to monitor or assess a data center network. Each use case describes what you can expect to see in the Java or web GUI, and includes procedures detailing how to proceed. 3.2 Sample VM assessment This section demonstrates the ability of the to persist the historical administrative and BGP state for VSP network objects, and to use that information to assess the root cause and impacts of an issue. This sample lists the events that will occur in the when a service-attached VM goes down. It also describes the actions you could take to assess the root cause of the issue. It includes elements and procedures available in both the Java GUI and the web applications. VM monitoring When a VM in the network goes down, the raises an alarm. The alarm raised varies depending on how the VM went down. The alarm is visible from several places: Faults tab on the VM properties form Alarm Window alarm table Data Center Service Navigator application Alarm List Fault Management application Alarm List Figure 3-1 shows the Fault Management application listing a VirtualMachineDown alarm in the Alarm List. Figure 3-1 Fault Management application Alarm List The Data Center Manager still lists the persisted VM, including its current and previous administrative state. The VM is displayed as alarmed. 3-2 Alcatel-Lucent 5620 Service Aware Manager

29 3 Use cases Figure 3-2 shows the Data Center Manager with persisted VMs listed as alarmed objects. Figure 3-2 Data Center Manager Cause codes The Data Center Service Navigator web application shows a dashboard of the operational health of the service objects in a specified administrative domain. You can specify an enterprise and domain to view a list of the V-Ports within that domain. The list includes V-Port functional state and BGP reachability state. In cases where the functional or reachability state is down, you can hover over the BGP state flag to view correlated alarms causing the administrative down state. The alarms associated with BGP reachability state flags are the following: BGP Prefix Unreachable BGP Prefix Conflict BGP Prefix Withdrawn Not Received The BGP state flag can be used to determine if the service endpoint is down for expected or unexpected reasons. For example, if the user brings a VM down intentionally, then the down state in the Service Navigator is expected. An expected outage is represented by a gray dash. If a VM has gone down as a result of a failed V-Switch or V-Switch controller, this is an unexpected failure and is represented by a red arrow. Figure 3-3 shows the Virtual Port tab with state flag icons and a cause code message. Alcatel-Lucent 5620 Service Aware Manager 3-3

30 3 Use cases Figure 3-3 Cause codes and state flags Event retrieval When a VM goes down, you can use the event retrieval log for a more thorough forensic view of the problem. The event retrieval log is available both from the GUI and from the Data Center Service Navigator application. It allows you to perform root cause and impact analysis. See the Nuage Virtualization User Guide for more information on the event retrieval log. 3.3 VM assessment procedures Procedure 3-1 To troubleshoot a down VM using the This sample procedure describes how to troubleshoot a down service-attached VM using the event retrieval log from the GUI. 3-4 Alcatel-Lucent 5620 Service Aware Manager

31 3 Use cases Navigate to a virtualized service or VM 1 Perform one of the following steps. a Navigate to a virtualized service. i ii iii Open the Services Manager by choosing Manage Service Services from the main menu. Search for a virtualized service and open the properties form. Select a virtual site from the service navigation tree and open the properties form. b Navigate to a VM. i ii iii Open the Data Center Manager by choosing Application Data Center Manager from the main menu. Choose Virtual Machine (Data Center) from the drop-down menu. Choose a VM and open the properties form. Open the event retrieval log and define a time interval 2 Click on the Event Retrieval button. The BGP Event Retrieval Filter form opens. On a virtualized service form, the Event Retrieval button is listed under the More Actions button. 3 Configure the Time Interval Type and Time Interval parameters to define a time interval for event retrieval. 4 Click on the View VPRN Events or View VPLS Events button. The event log opens listing all events from within the specified time period. Troubleshoot an event 5 Use the search parameters to find the DC: VM Down event for the VM you are troubleshooting. You can specify a type of event using the drop-down menu. 6 Perform one of the following steps. a b Select the event and click on the View Root Cause button. The View Root Cause form opens listing events determined to be the root cause of the DC: VM Down event. Select the event and click on the View Impact Analysis button. The View Impact Analysis form opens listing events determined to be impacted by the DC: VM Down event. Alcatel-Lucent 5620 Service Aware Manager 3-5

32 3 Use cases Procedure 3-2 To troubleshoot a down VM using the Data Center Service Navigator application 1 Choose a domain from the Domain panel. The Virtual Port tab populates with V-Ports in the domain. 2 Choose a VM V-Port from the Virtual Port tab. 3 Click on the Historical Events tab. 4 Click on the calendar button and specify an event retrieval time interval. 5 Click View Events. The Historical Events tab populates with a list of events from the specified interval. 6 Expand the event to troubleshoot and perform one of the following: a b c Select Impact Analysis from the menu to view events which occurred as a result of the selected event. Select Root Cause Analysis from the menu to view events which caused the selected event to occur. Right-click the event and choose View Correlation Tree to see a graphical representation of the impacts and root causes of the selected events. Figure 3-4 shows an expanded event on the Historical Events tab. Figure 3-4 Root cause analysis 3.4 Sample underlay test for a virtualized service This section demonstrates how to use the to perform an OAM ping test to assess underlay reachability for a virtualized service. Reachability is assessed by performing a ping test on the underlay components. This sample shows how to create the Nuage OAM System script bundle and execute it in the Java GUI or Data Center Service Navigator web application. You can use this sample to troubleshoot a service-attached VM to assess the underlay health of the data center network. 3-6 Alcatel-Lucent 5620 Service Aware Manager

33 3 Use cases Nuage OAM System script bundle The Nuage OAM System script bundle includes the control script and CLI script used to execute the OAM ping test between two V-Ports. The script is included as an example script from which you can create an underlay test script bundle. Note 1 The Nuage OAM System script bundle is limited to testing V-Switch-to-V-Switch or V-Switch-to-NE reachability. Note 2 Before you can execute the script bundle from the Java GUI or from the web application, you must specify a mediation policy and create the script bundle from a provided example script. Test results The test results displayed in the Java GUI and the Data Center Service Navigator application include packet loss information and transfer speed between the source and destination service endpoints. Figure 3-5 Underlay test results 3.5 Workflow to perform an underlay test 1 Configure a mediation policy. See the User Guide for more information about mediation policies. 2 Create the Nuage OAM System script bundle. This procedure needs to be performed only once. See Procedure Execute the script bundle from the Java GUI or the Data Center Service Navigator application. See Procedure 3-4. Alcatel-Lucent 5620 Service Aware Manager 3-7

34 3 Use cases 3.6 Underlay test procedures Procedure 3-3 To create the Nuage OAM System script bundle Perform this procedure to create the Nuage OAM System script bundle from the provided example. Note You cannot load the script from an external directory. 1 Choose Tools Scripts from the main menu. The Scripts form opens. 2 Click Browse Examples. The Browse Examples of Scripts form opens. 3 Expand Script Bundle Examples Data Center. 4 Select the NUAGE OAM SYSTEM example and click Create Bundle. The Script Bundle (Create from example) form opens. 5 Configure the required parameters. 6 Save your changes and close the form. Procedure 3-4 To execute an underlay test from the Java GUI 1 Choose Tools Scripts from the main menu. The Scripts form opens. 2 Choose Script Bundle from the drop-down list. 3 Select the Nuage OAM System script bundle test from the list and click Properties. The Script Bundle (Edit) form opens. 4 Select the control script from the Members panel and click Execute Script. The Execute Script form opens. 5 Click Add to select a Source V-Port. 6 Click Add to select a Target V-Port. 7 Click Execute. The ping test results are displayed when the test is complete. 3-8 Alcatel-Lucent 5620 Service Aware Manager

35 3 Use cases Procedure 3-5 To execute an underlay test from the Data Center Service Navigator 1 Select a domain from the Domain panel. 2 Click on the Underlay Test tab. The service endpoints are listed in the source and destination lists. 3 Select a source and destination endpoint and click Run Test. Figure 3-6 Underlay Test tab 4 The underlay test executes and the ping results are shown in the Test Result tab. Note If the script bundle was not successfully created as described in Procedure 3-3, the Test Result tab displays an error message. 3.7 Sample VM searching and monitoring This section demonstrates the visibility and navigation provided by the when a VM is discovered. The automatically discovers all service-attached VMs and associated virtual network components when a dvrs service is discovered from the VSP. Once the service and associated components are discovered, the allows for each navigation and searchability for VMs in the network. This sample includes features from the Java GUI and the Data Center Inventory application. Alcatel-Lucent 5620 Service Aware Manager 3-9

36 3 Use cases Figure 3-7 Nuage dvrs service solution 7850 VSG VM V-Port V-Switch evpn dvrs VM V-Port V-Switch evpn VM V-Port V-Switch evpn dvrs 7850 VSG VPRN VPRN PE Node PE Node Data Center Inventory application When a dvrs service is discovered by the, associated VMs are automatically discovered and listed in the DC Inventory. The inventory search panel provides a list of VMs in the specified data center. The panel allows you to quickly search for a VM by UUID or Name and view its operational state and its associated underlay components. It includes a persisted administrative state for the last known status of VMs, which gives an indication of when a service failure may have occurred. You can use the DC Inventory application to view the data path of a selected VM. You can also select a virtualized service in the network to see the service mapping to network components. Figure 3-8 shows a search filter being used to find a VM by UUID. When the VM is selected, the Associated Components tab lists the associated V-Switch controller and V-Port, along with upstream routers Alcatel-Lucent 5620 Service Aware Manager

37 3 Use cases Figure 3-8 VM Inventory Search Data Center Manager For a more thorough view of a virtual associations, you can cross-navigate to the Java GUI and use the Data Center Manager. The Data Center Manager exposes the virtualization data path to the user and acts as a central display for all virtual objects in the data center network. The DC Manager provides an at-a-glance view of associations between the VSC, V-Node, V-Switch, V-Port and related underlay components in the IP network. A user can use the DC manager to view current and persisted functional states across controllers, V-Switches, and VMs. You can navigate from the DC Manager to read-only and read/write properties forms for any managed virtual object. The properties forms include information to simplify the association of virtual objects to the IP underlay network. For example, the Virtual Switch properties includes a deduced list of upstream routers. When a VM is discovered by the, it appears in the DC Manager. Associated components in the data path are automatically discovered and listed on the VM properties form. You can navigate from the VM properties form to the associated V-Switch or V-Port properties forms. From there, you can see the VRS service attachments and a list of upstream routers. 3.8 Sample 5650 CPAM map troubleshooting This section demonstrates how to troubleshoot a virtualized service using 5650 CPAM. Alcatel-Lucent 5620 Service Aware Manager 3-11

38 3 Use cases 5650 CPAM map highlighting can be used to highlight L2/L3 services, composite services, service tunnels, SPF and CSPF routes, and OAM diagnostics results on IGP maps. In a data centers network, map highlighting is most useful for mapping paths from a VM or V-Switch to either an associated controller or a PE router. By performing a SPF highlight from a virtual object to a PE router, you can create a highlighted mapping between the virtual object to the network underlay. Procedure 3-6 To troubleshoot a virtualized service using CPAM maps Perform this procedure to highlight a path in a virtualized service. Navigate to a virtual site 1 Open the Services Manager by choosing Manage Service Services from the main menu. 2 Search for a virtualized service and click Properties. 3 Select a virtual site from the service navigation tree and click Properties. Define a source and target for the map highlight 4 Click Navigate and select IGP View: Highlight to Target. The Find Target form opens. By default, the V-Switch for the V-Site is listed as a target for the highlight source. 5 To add more source sites, if required, perform the following steps. i ii Click Add. The Select Source Site for Target form opens. Select a Site and click OK. 6 Click Select. The Select Target form opens. 7 To select a highlight target, perform one of the following steps. a Select a service site as a highlight target. i ii Select Site (Service Management). Select a site and click OK. b Select a V-Port as a highlight target. i ii Select Virtual Port (Data Center). Select a V-Port and click OK. Display the route highlight on the topology map 8 Click OK in the Find Target form. The IGP Topology Map is displayed with the specified route highlighted Alcatel-Lucent 5620 Service Aware Manager

39 3 Use cases See the 5650 CPAM User Guide for more information on the features available from the IGP Topology Map. Alcatel-Lucent 5620 Service Aware Manager 3-13

40 3 Use cases 3-14 Alcatel-Lucent 5620 Service Aware Manager

41 Customer documentation and product support Customer documentation Customer Documentation Welcome Page Technical Support Documentation feedback

42 2014 Alcatel-Lucent. All rights reserved.