CloudLink User Guide. Release 1.7 for CA AppLogic GA. April Version 1.0

Transcription

1 Release 1.7 for CA AppLogic GA April 2012 Version 1.0

2 Notice THIS DOCUMENT CONTAINS CONFIDENTIAL AND TRADE SECRET INFORMATION OF AFORE SOLUTIONS INC AND ITS RECEIPT OR POSSESSION DOES NOT CONVEY ANY RIGHTS TO REPRODUCE OR DISCLOSE ITS CONTENTS, OR TO MANUFACTURE, USE, OR SELL ANYTHING THAT IT MAY DESCRIBE. REPRODUCTION, DISCLOSURE, OR USE IN WHOLE OR IN PART WITHOUT THE SPECIFIC WRITTEN AUTHORIZATION OF AFORE IS STRICTLY FORBIDDEN. The information furnished herein is believed to be accurate and reliable to the best of our knowledge. However, AFORE Solutions, Inc. assumes no responsibility for its use, or for any infringements of patents or other rights of third parties resulting from its use. AFORE Solutions, Inc. reserves the right to, without notice, modify all or part of this document and/or change product features or specifications and shall not be responsible for any loss, cost, or damage, including consequential damage, caused by reliance on these materials. If you are in any doubt as to whether this is the correct version of the manual for a particular release, contact the AFORE Solutions, Inc. Trademarks AFORE Solutions and the AFORE Solutions logo are trademarks of AFORE Solutions Inc. All other brands or product names mentioned herein are for identification purposed only and may be trademarks and/or registered trademarks of their respective companies. Copyright 2012 All Rights Reserved AFORE Solutions Inc Queensview Drive, Suite 150 Ottawa, Ontario, K2B 8J9, Canada Tel: (613) Fax: (613) Support Inquiries (866) support@aforesolutions.com General Inquiries afore_info@aforesolutions.com Sales Inquiries afore_sales@aforesolutions.com

3 Table of Contents 1 Introduction Audience Organization Typographical Conventions Overview CloudLink Solution Key Features CloudLink Center Getting Started Connecting to CloudLink Center over the Web Topology CloudLink Center User Account Administration Changing the CloudLink Center Password Secure CloudLink VPN Viewing the VPN Configuration Viewing the VPN Certificates Revoking the VPN Certificate Encryption Storage Management Encryption Key Store Management Secure Storage Management Viewing Storage Statistics SLA Monitoring Monitoring the vnode-gateway Connection Viewing Traffic Statistics Performance Availability Testing Performance Delay Measurement Testing Running Connection Tests Performance Reports Generating a Performance Report Logs and Events Viewing the CloudLink Actions Log Viewing the CloudLink Alarms Log Acknowledging CloudLink Alarms Viewing the CloudLink Events Log...53 Software Version 1.7 for CA AppLogic GA 3 Document Version 1.0

4 3.8.1 Viewing the CloudLink Security Events Log Syslog Configuration Configuring a Syslog Logger...55 Glossary Appendix: Active Directory Configuration Software Version 1.7 for CA AppLogic GA 4 Document Version 1.0

5 Table of Figures Figure 2-1 CloudLink solution architecture Figure 3-1: CloudLink Center is connected to CloudLink vnode and Gateway Figure 3-2: CloudLink Center is not connected to CloudLink vnode and Gateway Figure 3-3: CloudLink Center home page Figure 3-4: Main CloudLink Center window Figure 3-5: Topology map viewed from CloudLink Center window Figure 3-6: Changing password of CloudLink Center admin user Figure 3-7: VPN Configuration Figure 3-8 VPN Certificates Figure 3-9: VPN CA History on Gateway Figure 3-10: Revoke VPN Certificate Figure 3-11: Key Store Tab Figure 3-12: Active Directory Configuration panel Figure 3-13: Active Directory used for encryption key storage Figure 3-14: Active Directory inaccessible Figure 3-15: Initial Storage Key tab Figure 3-16: Storage Key tab after user key was generated Figure 3-17: Storage Rate Statistics Figure 3-18: Connectivity status on Tests tab Figure 3-19: Traffic Statistics between Gateway and a remote vnode Software Version 1.7 for CA AppLogic GA 5 Document Version 1.0

6 Figure 3-20: Traffic Statistics between Gateway and a local VM Figure 3-21: Traffic Statistics between Gateway and a remote appliance/vm Figure 3-22: SLA Availability test in progress on Gateway Figure 3-23: Near End Total Up/Down Time chart Figure 3-24: SLA DM and DMV test Figure 3-25: SLA Loopback test completed Figure 3-26: SLA Throughput test completed Figure 3-27: SLA Loss Measurement test completed Figure 3-28: SLA Delay Measurement test in progress Figure 3-29: Generating SLA and/or Storage statistics report Figure 3-30: Generating SLA statistics report Figure 3-31: Generating storage statistics report Figure 3-32: Actions icon Figure 3-33: Actions log window Figure 3-34: Alarms icon Figure 3-35: Alarms log window Figure 3-36: Acknowledge Alarm option Figure 3-37: Alarms window showing all alarms, with one alarm acknowledged Figure 3-38: Alarms window showing all alarms, with all alarms acknowledged Figure 3-39: Alarms window when all alarms are acknowledged and Show All check box is cleared Figure 3-40: Events icon Figure 3-41: Events log window Software Version 1.7 for CA AppLogic GA 6 Document Version 1.0

7 Figure 3-42: Security events icon Figure 3-43: Security Events log window Figure 3-44: Syslog tab Figure 3-45: Syslog server in Postponed status Figure 3-46: Syslog server in active state Figure 3-47: Syslog server in inaccessible status Software Version 1.7 for CA AppLogic GA 7 Document Version 1.0

8 1 Introduction CloudLink s innovative cloud security management software extends the enterprise data center into the cloud, empowering enterprises to securely manage data in both public and private clouds without compromising performance. CloudLink can be easily deployed into the data center and cloud environment without impacting existing network and storage infrastructure. CloudLink provides you with trust in cloud computing by providing multi-tenant security by protecting data in motion and at rest while monitoring network and security Service Level Agreements. CloudLink Center is a part of CloudLink software. CloudLink Center is a management suite delivered as a part of the Gateway. It is a Web-service application that provides management user interfaces to manage CloudLink. CloudLink Center supports secure storage encryption management, SLA monitoring and testing, logs, and event monitoring. 1.1 Audience This guide provides a detailed description of the CloudLink Center management tool. The guide is intended for enterprise personnel deploying applications in CA Applogic grids. 1.2 Organization The user guide consists of the following chapters: Chapter 1, Introduction, introduces you to the CloudLink software. Chapter 2, Overview, provides an overview of the CloudLink software solution. Chapter 3, CloudLink Center, provides instructions how to use the CloudLink Center. Software Version 1.7 for CA AppLogic GA 8 Document Version 1.0

9 1.3 Typographical Conventions This user guide uses the following typographical conventions. Convention Black bold Used for User interface elements such as tabs, check boxes, lists, and buttons. For example: In the CloudLink window, select the Storage tab. You can select either or both of the DM and DM Variation check boxes. In the User name list, select the user account. Italic Examples of formats and values. For example: Type the URL of the Gateway or vnode in the format Regular type on a light gray background with the bold heading NOTE or TIP Notes, which supplement information in the main text, and tips, which provide helpful information that is not obvious or suggest alternative methods of completing steps. For example: NOTE: CloudLink Center uses a self-signed certificate. Regular type with gray top and bottom borders and the bold red heading WARNING Warnings, which alert users of important system events or possible problems. For example: WARNING: When a vnode s certificate is revoked by a Gateway, the VPN connection between the vnode and the Gateway is terminated immediately. Software Version 1.7 for CA AppLogic GA 9 Document Version 1.0

10 2 Overview Organizations looking to build multi-departmental private clouds or employ public cloud services are concerned about cloud infrastructure security and manageability as well as cloud performance monitoring and optimization. CloudLink s virtualized security appliance and management software suite is built to address these concerns. 2.1 CloudLink Solution CloudLink is a software solution that can be easily deployed into the cloud infrastructure and enterprise virtualization infrastructure. For this release, CloudLink supports AppLogic 3.x based virtualization infrastructure. CloudLink comprises three key components as shown in Figure 2-1. Figure 2-1 CloudLink solution architecture Software Version 1.7 for CA AppLogic GA 10 Document Version 1.0

11 vnode vnode is a software virtual appliance that is responsible for networking, SLA and trust management, and encryption of data at rest. Each tenant can deploy one or more vnodes in hosted AppLogic grids. Each vnode provides an encrypted volume, accessible over NFS or CIFS by the appliances connected to it. Gateway A software virtual appliance typically deployed on a cloud user s premises, either in an enterprise data center, or on an AppLogic grid. The Gateway communicates with a vnode in the cloud and creates a secure and monitored VPN connection. All communications between the appliances on the AppLogic grid and the Gateway and appliances/vms connected to the Gateway (if any) in the enterprise data center will go through a secure VPN tunnel. The Gateway can be viewed as an enterprise security management controller that provides encryption keys to encrypt the volume in the cloud and performs SLA monitoring and other management tasks. Each Gateway supports a point-to-point topology (one Gateway for one vnode) or a point-to-multipoint topology (one Gateway for multiple vnodes). CloudLink Center A management suite delivered as a part of the Gateway. It is a Web-service application that provides user interfaces to manage CloudLink. CloudLink Center supports secure storage encryption management, SLA monitoring and testing, logs, and events monitoring. 2.2 Key Features CloudLink provides the following key features: Encryption of data in motion. All communications between the enterprise data center and hosted AppLogic grid in the cloud are encrypted with AES-256 encryption algorithms. SSL VPN between the Gateway and vnode. Since Gateway is located in a trusted boundary, it acts as an SSL VPN server and Certification Authority (CA) to sign certificates used by vnodes to establish the SSL VPN. Encryption of data at rest. Each vnode can create one encrypted volume. It supports block-level AES-256 encryption. Capability to change the encryption keys for encrypted volumes and lock and unlock the encrypted volume. Capability to store encryption keys on a Microsoft Active Directory (AD) server, which is accessible by the CloudLink Center. Software Version 1.7 for CA AppLogic GA 11 Document Version 1.0

12 Multiple appliances within a grid can share the same vnode for encrypting the storage volume. Support for syslog server configuration. CloudLink Gateway system log messages can be directed to a configured remote host. Network SLA monitoring. CloudLink allows users to monitor network usage per Gateway, per vnode, and per appliance/vm. Network SLA testing. CloudLink s SLA testing feature allows end users to test network throughput, packet loss, round-trip delays, and perform loopback testing per Gateway and per vnode. It also supports service availability monitoring based on the availability threshold metrics set by the users. Most tests are done via synthetic frames with no impact to user traffic. 24-hour network SLA performance and storage statistics history. The historical statistics can be exported to a Microsoft Excel spreadsheet. Topology map. On the topology map, the connectivity status between the cloud and enterprise data centers is automatically monitored. Administrators are alerted to connection failures via visual representation of the connection status on the topology map. Software Version 1.7 for CA AppLogic GA 12 Document Version 1.0

13 3 CloudLink Center 3.1 Getting Started You can use the CloudLink Center management application with a Web browser (see Connecting to CloudLink Center over the Web). CloudLink Center supports the following Web browsers: Microsoft Internet Explorer 8.0 Google Chrome Mozilla Firefox 7.0 NOTE: CloudLink Center uses a self-signed certificate. Adobe Flash is required for graphic representation of network performance monitoring and storage statistics. While the CloudLink Center is connected to the CloudLink vnode or Gateway, the CloudLink Center connection status is indicated by a small icon at the lower right of the CloudLink Center window, as shown in Figure 3-1 and Figure 3-2: Figure 3-1: CloudLink Center is connected to CloudLink vnode and Gateway Figure 3-2: CloudLink Center is not connected to CloudLink vnode and Gateway Connecting to CloudLink Center over the Web You can manage your CloudLink Gateway and vnodes with a Web browser. The following browsers are supported: Microsoft IE 8.0 Google Chrome Mozilla Firefox 7.0 To connect to CloudLink Center over the Web: In your Web browser, type the URL of the Gateway or in the format Software Version 1.7 for CA AppLogic GA 13 Document Version 1.0

14 Where the ip-of-node can be a stand-alone Gateway s private interface IP or public interface IP, whichever is accessible. If the Gateway is deployed on an AppLogic grid, ip-of-node must match the ip_addr parameter configured for the Gateway appliance. Unsecure links in this format will be converted to secure addresses in the format Examples: When you connect to CloudLink Center, the CloudLink Center home page is displayed (Figure 3-3). You can use the user name admin, secadmin or observer and the default password cladmin clsecadmin or clobserver respectively to access CloudLink Center (for more information, see CloudLink Center User Account Administration). Figure 3-3: CloudLink Center home page Software Version 1.7 for CA AppLogic GA 14 Document Version 1.0

15 After the entered user name and password are validated, the main CloudLink Center window is displayed (Figure 3-4). Figure 3-4: Main CloudLink Center window NOTE: The user name of the logged-in user is shown on the right end of the bottom bar of the window. 3.2 Topology The Topology Tree is shown on the left side of the window. Shown at the top of the list in the Topology Tree is the node to which CloudLink Center is connected. The Topology Tree shows the following appliance/vm parameters: CloudLink Name CloudLink Role IP (the appliance/vm Private LAN IP address) MAC address Software Version 1.7 for CA AppLogic GA 15 Document Version 1.0

16 You can change the name of an appliance/vm by double-clicking in the CloudLink Name column and typing a new name. New names take effect only locally, within CloudLink Center. In addition to the Topology Tree, the main CloudLink Center window also shows a map representing your secure topology. The map is shown on the right side of the window. The VPN connection status is also shown on the topology map. Under normal operational conditions, the line between the Gateway and a vnode is shown in green. When the VPN connection is in disconnected or warning status, the line becomes black. You can view detailed information on the Gateway-vNode connection on the SLA tab (see Monitoring the vnode-gateway Connection). You can select an appliance/vm on the map by clicking it. Selecting an appliance/vm on the map causes tabs to be shown or hidden in the main CloudLink Center window, depending on whether they are applicable. The Topology map as viewed from the Gateway CloudLink Center is shown in Figure 3-5. Figure 3-5: Topology map viewed from CloudLink Center window You can adjust the position of any appliance/vm on the map by clicking its icon and dragging it to a new position. To adjust the map zoom, use the - and + buttons in the Overview panel. Software Version 1.7 for CA AppLogic GA 16 Document Version 1.0

17 To change focus on the map, use your mouse to move the window in the Overview panel. 3.3 CloudLink Center User Account Administration Three user roles are defined in the Gateway CloudLink Center: secadmin, admin, and observer. The default user credentials are: Login user name: secadmin; password: clsecadmin Login user name: admin; password: cladmin Login user name: observer; password: clobserver The secadmin user has full access to all Gateway CloudLink Center functionality, including secure storage management and key store configuration. This user can change the Gateway CloudLink Center passwords for admin, secadmin, and observer users. The secadmin user is the only user who is authorized to see the Gateway Security Events log and results of Security Audit tests. The admin user has full access to all Gateway CloudLink Center functionality, except secure storage management and key store configuration. This user can change the passwords for admin and observer users. The observer user is permitted to monitor statistics in CloudLink Center and run SLA tests Changing the CloudLink Center Password You can change the CloudLink Center password of the secadmin, admin, or observer user. To change the password of a CloudLink Center user: 1. Open CloudLink Center using the secadmin or admin user account if you are changing the password for the admin or observer account. Open CloudLink Center using the secadmin user account if you are changing the password for the secadmin account. 2. On the left side of the Gateway CloudLink Center, at the top of the list in the Topology Tree, select the Gateway. 3. Click the Administration tab and then the Accounts tab. 4. In the User name list, select the user account (secadmin, admin, or observer). Software Version 1.7 for CA AppLogic GA 17 Document Version 1.0

18 5. Type the old password and then type and confirm the new password (Figure 3-6). 6. Click Change. Figure 3-6: Changing password of CloudLink Center admin user 3.4 Secure CloudLink VPN From the CloudLink Center interface, you can: View the VPN configuration. View VPN certificates. Revoke the VPN certificate for a given vnode Viewing the VPN Configuration You can view the secure VPN configuration in CloudLink Center. To view the VPN configuration: 1. Open CloudLink Center using the secadmin or admin user account. 2. On the left side of the window, at the top of the list in the Topology Tree, select the Gateway. 3. Click the Security tab and then the VPN tab. 4. Click Configuration. The VPN configuration settings are displayed on the VPN tab (Figure 3-7). Software Version 1.7 for CA AppLogic GA 18 Document Version 1.0

19 Figure 3-7: VPN Configuration NOTE: The VPN compression and encryption algorithms cannot be changed in the current CloudLink Center release Viewing the VPN Certificates You can view the VPN certificates for connected vnodes in CloudLink Center. To view VPN certificates: 1. Open CloudLink Center using the secadmin or admin user account. 2. On the left side of the window, at the top of the list in the Topology Tree, select the Gateway. 3. Click the Security tab and then the VPN tab. 4. Click Certificates. The VPN certificates for each vnode are displayed on the VPN tab (Figure 3-8). Software Version 1.7 for CA AppLogic GA 19 Document Version 1.0

20 Figure 3-8 VPN Certificates On receipt of a VPN certification request from a vnode, the Gateway may either accept the certificate, resulting in a certificate status of Signed, or reject the certificate if the Gateway determines that the certificate is invalid or a duplicate. If the certificate is accepted and signed by the Gateway, the vnode will proceed with the VPN connection request. A VPN status of Connected indicates that the VPN between the Gateway and the vnode has been established. The IP address of the connected vnode appears in the CloudLink Center VPN Certificates table. The status of all certification requests is recorded in the CA History table displayed at the bottom of the CloudLink Center VPN Certificates tab (Figure 3-9). Figure 3-9: VPN CA History on Gateway Software Version 1.7 for CA AppLogic GA 20 Document Version 1.0

21 3.4.3 Revoking the VPN Certificate You can revoke the VPN certificate for a particular vnode from the Gateway CloudLink Center. To revoke the certificate, you must log on to CloudLink Center using the secadmin or admin user account. WARNING: When a vnode s certificate is revoked by a Gateway, the VPN connection between the vnode and the Gateway is terminated immediately. All subsequent attempts from the vnode side to re-establish a VPN connection to the Gateway are rejected. To revoke the VPN certificate for a particular vnode: 1. Open the CloudLink Center using the secadmin or admin user account. 2. On the left side of the window, at the top of the list in the Topology Tree, select the Gateway. 3. Click the Security tab and then the VPN tab. 4. In the Categories panel, click the Certificates link. 5. In the Certificates panel, right-click a vnode in the list of those connected to the Gateway and select Revoke Certificate (Figure 3-10). Figure 3-10: Revoke VPN Certificate Software Version 1.7 for CA AppLogic GA 21 Document Version 1.0

22 If you select Yes in the Confirmation window, the VPN certificate for the selected vnode is revoked, the VPN connection to the vnode is terminated, and all subsequent attempts from the vnode to re-establish a VPN connection to the Gateway are rejected. NOTE: All attempts to establish a VPN connection with the Gateway (successful and rejected) are recorded in the CA History panel on the VPN tab. 3.5 Encryption Storage Management CloudLink vnode provides a secure datastore. The datastore is encrypted using a default encryption key. Users must change the default encryption key before they start using the storage. CloudLink Gateway provides two options to store encryption keys (Key Store): Local file system (the default Key Store) Active Directory To use Active Directory for the CloudLink Key Store, you need to deploy a Windows 2003/Windows 2008 server so that it is reachable by the CloudLink Gateway via its Private LAN network interface. For information on how to configure Active Directory on a Windows 2003 or Windows 2008 server, see Appendix: Active Directory Configuration. NOTE: All encryption key and storage management operations are available from the Gateway side only and require the secadmin CloudLink user account (not available on the vnode CloudLink Center). The storage state and the storage statistics can be viewed also by the observer and admin users from the Gateway CloudLink Center Encryption Key Store Management To manage the encryption key store, you must log on to CloudLink Center using the secadmin user account. To display the current location of the encryption key store: 1. Open CloudLink Center using the secadmin user account. 2. On the left side of the window, at the top of the list in the Topology Tree, select the Gateway. 3. Click the Security tab and then the Key Store tab (Figure 3-11). Software Version 1.7 for CA AppLogic GA 22 Document Version 1.0

23 Figure 3-11: Key Store Tab To change the encryption key store location: 1. Open CloudLink Center using the secadmin user account. 2. On the left side of the window, at the top of the list in the Topology Tree, select the Gateway. 3. Click the Security tab and then the Key Store tab. 4. To configure the CloudLink to use Active Directory for encryption key storage, in the Location panel, click the Active Directory link. 5. In the Active Directory Configuration panel (Figure 3-12), specify the Active Directory parameters: Host Port User The Active Directory host IP address (the Active Directory host is a Windows 2003 or Windows 2008 Server where the Active Directory is configured). The TCP port number configured on the Active Directory host. The user name configured on the Active Directory host. Software Version 1.7 for CA AppLogic GA 23 Document Version 1.0

24 Password The password configured for a particular user on the Active Directory host 1. Figure 3-12: Active Directory Configuration panel 6. Click Apply to use the configured Active Directory for storage of CloudLink encryption keys (Figure 3-13). NOTE: It is recommended to delete the encryption keys stored in the local file system after a switch from a local key store location to Active Directory. 1 The Port, User, and Password parameters are part of the Active Directory configuration of Windows 2003 or Windows 2008 Server. For instructions on how to configure the Active Directory, see Appendix: Active Directory Configuration. Software Version 1.7 for CA AppLogic GA 24 Document Version 1.0

25 Figure 3-13: Active Directory used for encryption key storage The Key Store status is Inaccessible in red if the Active Directory Host is inaccessible because of a network problem or incorrectly configured IP, or if there is a problem authenticating the configured user (Figure 3-14). While the Active Directory is inaccessible, all key store operations are unavailable. Check the Action logs to determine why the key store is inaccessible. Software Version 1.7 for CA AppLogic GA 25 Document Version 1.0

26 Figure 3-14: Active Directory inaccessible NOTE: If Active Directory is inaccessible, it might take a few seconds to redisplay the Key Store tab after you selected another tab and then clicked the Key Store tab Secure Storage Management Secure store management requires the CloudLink Center secadmin user account. To view or modify the storage state: 1. Open CloudLink Center using the secadmin user account. 2. On the left side of the window, in the Topology Tree, select the remote vnode with storage attached. 3. Click the Storage tab and then the Key tab. The Key tab displays three panels: Actions, Key Store, and Storage. The Key Store panel shows the currently used key store location (Local or Active Directory) and its status (Accessible or Inaccessible) (Figure 3-15). Software Version 1.7 for CA AppLogic GA 26 Document Version 1.0

27 The Storage panel shows the current storage status (Locked or Unlocked) and the currently used key name. The Actions panel presents a list of the available management commands. Command Unlock Format Change Key Lock Description Open (unlock) the encrypted storage for use. Force unlocking of the storage with a new key, format the disk, and render old data unusable. Change a previously generated key (available only if the storage is unlocked). Close (lock) the storage to make it unavailable for use. You can see the result of each storage operation by viewing the Actions, Events and Security Events logs. For information about how to view these logs, see Logs and Events. NOTE: Initially, after the CloudLink vnode and Gateway installation, the storage status shown in CloudLink Center is Unlocked, and the key name is shown as Undefined, which means that the storage was opened using the default encryption key (Figure 3-15). Use the Format operation to generate your own key. Software Version 1.7 for CA AppLogic GA 27 Document Version 1.0

28 Figure 3-15: Initial Storage Key tab Before using the storage, perform the Format storage operation. As a result of this operation, the storage is formatted and enters the unlocked state with a new key (the key name is displayed on the Key tab; see Figure 3-16). The generated key has a name in the following format: LUN- {SAN IP}_{yyyyMMdd}_{HHmmss}.key Where: {SAN IP} - the IP address of the vnode SAN interface. {yyyymmdd} - key generation date. {HHmmss} - key generation time. NOTES: By default, the key is stored in the local computer file system (on the computer that was used to open CloudLink Center), in the location configured in the system for Web browser downloads. Make sure you remember the location where you saved the key. If you use Internet Explorer 7 or 8 to connect to CloudLink Center, you should consider the known issue with file downloads in Internet Explorer 7 and 8. Software Version 1.7 for CA AppLogic GA 28 Document Version 1.0

29 To save the storage key generated during a Format operation, perform the following steps: 1. In Internet Explorer, click Tools and then click Internet Options. 2. In the Internet Options dialog box, click the Security tab. The Internet Options dialog box shows your security levels and zones. 3. Select the Internet zone and then click Custom Level. 4. In the Security Settings dialog box, scroll down to Downloads and then click Enable for Automatic prompting for file downloads. Figure 3-16: Storage Key tab after user key was generated Viewing Storage Statistics You can view the storage statistics in CloudLink Center. The following storage statistics are available in CloudLink Center in both graph and table form: Read/write rate (KBps) Read/write operations (operations/s) Read/write latency (ms) Software Version 1.7 for CA AppLogic GA 29 Document Version 1.0

30 By default the Statistics graph represents the statistics collected within the last 10 minutes. You can apply the appropriate Time Interval parameter (5 minutes, 10 minutes, 20 minutes, 30 minutes, or 1 hour) to the statistics. To view the traffic statistics collected over the last 24 hours, use the CloudLink SLA Performance Report feature (see Performance Reports). To view the storage statistics: 1. Open CloudLink Center using the secadmin, admin, or observer user account. 2. On the left side of the window, in the Topology Tree, select a remote vnode with the storage attached. 3. Click the Storage tab and then the Statistics tab. The storage rate statistics are displayed (Figure 3-17). Figure 3-17: Storage Rate Statistics 4. In the Time Interval list, select an interval. 5. Click the I/O Latency link in the Statistics panel to view the storage read/write latency statistics. 6. Click the I/O Operations link in the Statistics panel to view the storage read/write operations statistics. Software Version 1.7 for CA AppLogic GA 30 Document Version 1.0

31 7. Click the I/O Rate link in the Statistics panel to go back to the storage read/write rate statistics. NOTE: None of the storage statistics are updated when the storage is locked. 3.6 SLA Monitoring CloudLink provides end-to-end (between a vnode and the Gateway) network performance monitoring, including traffic rate, latency, and packet loss. These capabilities enable cloud service providers and cloud service consumers to verify whether the networking attributes of service level agreement (SLA) are met. In addition to continuous monitoring, CloudLink also provides a testing capability for service turn-up and verification. The end users can use CloudLink to test the network throughput, packet loss, and round-trip delay. In case there is a connectivity fault, CloudLink provides a loopback capability to isolate the fault if it is within a wide area network (WAN) or in a private LAN. The CloudLink SLA feature is available in CloudLink Center. The SLA functions of CloudLink are described in the following sections Monitoring the vnode-gateway Connection Once a vnode-gateway connection is established, the connectivity status is monitored continuously. A connection is declared non-operational if continuity check messages (CCM) between endpoints are not received for 3.5 seconds. To view the vnode-gateway connectivity status: 1. Open CloudLink Center using the secadmin, admin, or observer user account. 2. On the left side of the window, in the Topology Tree, select a remote vnode. 3. Click the SLA tab and then the Tests tab. The connectivity status (to the right of Status) is displayed on the right side of the window (Figure 3-18). The Status of Operational indicates that there are no problems in connection between the vnode and the Gateway. Software Version 1.7 for CA AppLogic GA 31 Document Version 1.0

32 Figure 3-18: Connectivity status on Tests tab NOTE: The warning remccm is displayed to the right of Status if a connectivity problem was detected between the vnode and the Gateway Viewing Traffic Statistics You can view traffic statistics in CloudLink Center. The following traffic statistics are available in graph and table form: Accumulated 2 Rate To display traffic statistics between the CloudLink Gateway and a remote vnode: 1. Open CloudLink Center using the secadmin, admin, or observer user account. 2. On the left side of the window, in the Topology Tree, select a remote vnode. 2 Accumulated statistics are collected every minute for the last 24 hours. Software Version 1.7 for CA AppLogic GA 32 Document Version 1.0

33 3. Click the SLA tab. Traffic statistics are displayed on the Traffic Statistics tab, on the right side of the window (Figure 3-19). 4. To change the type of statistics to display, under Statistics Type, click the appropriate link (Accumulated or Rate). You can specify the following parameters: Units Time Interval Unit of measure for the statistics. To change the unit, select the appropriate value. Statistics for a specific period. Select the period you want. Near End If this check box is selected (the default setting), the data shown is the data collected on the local node (the Gateway). The data shown should be interpreted as follows: Sent means that the data sent by the Gateway (near end) to the selected remote vnode. Received means that the data received by the Gateway (near end) from the selected remote vnode. Far End If this check box is selected, the data shown is the data collected on the far-end node (the remote vnode selected in the Topology Tree). The data shown should be interpreted as follows: Sent means that the data sent by the selected remote vnode (far end) to the Gateway. Received means that the data received by the selected remote vnode (far end) from the Gateway. Software Version 1.7 for CA AppLogic GA 33 Document Version 1.0

34 Figure 3-19: Traffic Statistics between Gateway and a remote vnode To display traffic statistics between CloudLink Gateway and a local appliance/vm: 1. Open CloudLink Center using the secadmin, admin, or observer user account. 2. On the left side of the window, in the Topology Tree, select a local appliance/vm. 3. Click the SLA tab. Traffic statistics are displayed on the Traffic Statistics tab, on the right side of the window (Figure 3-20). Software Version 1.7 for CA AppLogic GA 34 Document Version 1.0

35 Figure 3-20: Traffic Statistics between Gateway and a local VM The data shown can be interpreted as follows: Sent refers to data sent by the selected appliance/vm. Received refers to data received by the selected appliance/vm. To display traffic statistics between the CloudLink Gateway and a remote appliance/vm: 1. Open CloudLink Center using the secadmin, admin, or observer user account. 2. On the left side of the window, in the Topology Tree, select a remote appliance/vm (behind the vnode). 3. Click the SLA tab. Traffic rate statistics are displayed on the Traffic Statistics tab (Figure 3-21). Software Version 1.7 for CA AppLogic GA 35 Document Version 1.0

36 Figure 3-21: Traffic Statistics between Gateway and a remote appliance/vm The data shown can be interpreted as follows: Sent refers to data sent by the selected appliance/vm. Received refers to data received by the selected appliance/vm Performance Availability Testing Two network performance tests are available using CloudLink Center: Availability test Delay Measurement/Delay Measurement Variation (DM/DMV) test You can run either test or both tests concurrently. The performance tests are an on-demand tests that can be initiated and stopped by users. When started, a performance test will run continuously until you stop it. The performance Availability and DM/DMV graphs show the test results for the last minute interval. To see the performance test results for the last 24 hours, use the CloudLink SLA Performance Report feature (for more information, see Performance Reports). Within a specific time interval, a connection is said to be available (Up) if the traffic loss ratio is below a certain user-configurable threshold. The availability is calculated based on the algorithm described in the Metro Ethernet Forum specification MEF Software Version 1.7 for CA AppLogic GA 36 Document Version 1.0

37 The color of the measurement points on the availability graph indicates whether the state is Up (a green point) or Down (a red point). To run an Availability test: 1. Open CloudLink Center using the secadmin, admin, or observer user account. 2. On the left side of the window, in the Topology Tree, select a remote vnode. 3. Click the SLA tab and then the Performance tab. 4. On the Performance tab, under Availability, specify the following information: Threshold up (%) and Threshold down (%) In accordance with MEF 10.2, two thresholds are configured: the up threshold, which indicates the maximum frame loss ratio necessary to declare an interval up if the previous interval was down (that is, the threshold for the down-to-up transition), and the down threshold, which indicates the minimum frame loss ratio at which an interval is declared down if the previous interval was up (that is, a up-to-down transition). Enter appropriate values in the Threshold up (%) and Threshold down (%) boxes. NOTE: The Threshold down must be higher than the Threshold up. Near End Far End Select this check box if you want the Availability measurement for the local CloudLink Gateway to be represented on a graph. Select this check box if you want the Availability measurement for the remote CloudLink vnode (selected in the Topology Tree) to be represented on a graph. NOTE: You can select either or both of the Near End and Far End check boxes as appropriate. NOTE: The actual names of the local CloudLink Gateway and the remote CloudLink vnode are displayed in the Availability panel. 5. To initiate an availability test, click Start. The graph on the Packet Loss tab (Figure 3-22) displays the current frame loss ratio and the Software Version 1.7 for CA AppLogic GA 37 Document Version 1.0

38 threshold levels. The Near End Total Up/Down Time and Far End Total Up/Down Time tabs indicate the total availability time (versus unavailable time) since the start of the test on the local CloudLink Gateway (Figure 3-23) and the remote CloudLink vnode respectively. Figure 3-22: SLA Availability test in progress on Gateway NOTES: When in Up state, the state goes to Down if the Frame Loss Ratio becomes equal to or greater than the Down Threshold. When in Down state, the state goes to Up if the Frame Loss Ratio becomes lower than the Up Threshold. Software Version 1.7 for CA AppLogic GA 38 Document Version 1.0

39 Figure 3-23: Near End Total Up/Down Time chart 6. To stop the test, click Stop Performance Delay Measurement Testing Delay Measurement and Delay Measurement Variation (DM/DMV) is another performance tool that can be used in CloudLink Center. You can use this tool to measure the round-trip delay (DM) and delay variation (DV) on the connection between Gateway and vnode. Delay measurement is an on-demand test that can be initiated and stopped by users. To run a DM/DMV test: 1. Open CloudLink Center using the secadmin, admin, or observer user account. 2. On the left side of the window, in the Topology Tree, click a remote vnode. 3. Click the SLA tab and then the Performance tab. 4. On the Performance tab, under Tests, click the Delay Measurement link. Software Version 1.7 for CA AppLogic GA 39 Document Version 1.0

40 5. Under Delay Measurement, specify the following information: Measurement Interval Packet size DM Delay Variation Interval between delay measurement probes. Packet size for each test. Select this check box if you want the delay measurement to be represented on a graph. Select this check box if you want the delay measurement variation to be represented on a graph. NOTE: You can select either or both of the DM and DM Variation check boxes as appropriate. 6. To initiate a DM/DMV test, click Start. Figure 3-24: SLA DM and DMV test The minimum, maximum, and average round-trip delay and delay variation (jitter on the connection) measurements are displayed on a graph (Figure 3-24). The results are calculated in milliseconds. As the maximum and minimum results can be outliers, the median delay measurement results are displayed on the graph as well. The graph shows the DM/DMV measurements for the last minute interval. To see the results of the DM/DMV test for the last 24 hours, use the CloudLink SLA Performance Report feature (for more information, see Performance Reports). 7. To stop the test, click Stop. Software Version 1.7 for CA AppLogic GA 40 Document Version 1.0

41 3.6.5 Running Connection Tests You can run the following connection-related tests from CloudLink Center: Loopback An on-demand test that is used to test the burst capacity of a connection for a given frame size. The test involves sending a burst of loopback frames of a specified size, identified by a sequence number, toward the vnode. The vnode loops back each frame, and the initiator counts the number of received frames in sequence and out of sequence. The test stops automatically five seconds after all frames have been sent. The test results are meaningful when the test reaches the Completed status. Throughput This test measures the maximum ingress and egress rate at which a certain burst of UDP packets of a certain size can be sent between the Gateway and vnode. Throughout tests are unidirectional, so the ingress rate may be different from the egress rate for a given frame size. Throughput test is an out-of-service test (no user traffic should be transferred when a throughput test is in progress). Loss Measurement The frame loss measurement test is an aggregate test that measures bi-directional frame loss and the delay measurement parameters on a connection between the vnode and the Gateway. The frame loss measurement is calculated using statistical sampling of synthetic packets generated at a specified rate and packet size. The test is used in service, as the synthetic frames will blend with the data traffic and will be exposed to a statistically similar chance to be dropped. Considering the statistical nature of the test, it is recommended to use the packet number no less than 1,000 (the default value).the test terminates automatically five seconds after a specified number of frames has been transmitted. Delay Measurement This test measures the round-trip delay (DM) and delay variation (DV) on the connection between the Gateway and the vnode. The test is used in service, as the synthetic frames will blend with the data traffic. The test terminates automatically five seconds after a specified number of frames has been transmitted. To run an SLA Loopback test: 1. Open CloudLink Center using the secadmin, admin, or observer user account. 2. On the left side of the window, in the Topology Tree, click the remote vnode. 3. Click the SLA tab and then the Tests tab. Software Version 1.7 for CA AppLogic GA 41 Document Version 1.0

42 4. Under Loopback, specify the following information: Packet size Number of Packets Packet size for each test. Specify the number of packets to be sent. 5. To initiate a Loopback test, click Start. The results of the tests are displayed under Results (Figure 3-25). Figure 3-25: SLA Loopback test completed NOTE: You can stop an SLA Loopback test at any time by clicking Stop. To run an SLA Throughput test: 1. Open CloudLink Center using the secadmin, admin, or observer user account. 2. On the left side of the window, in the Topology Tree, click the remote vnode. 3. Click the SLA tab and then the Tests tab. 4. Under Tests, select the Throughput link. Software Version 1.7 for CA AppLogic GA 42 Document Version 1.0

43 5. Under Throughput (Figure 3-26), specify the following information: Packet size Number of Packets Select the packet sizes to test. Specify the test interval in seconds. 6. To initiate a Throughput test, click Start. The results of the Throughput test are displayed under Results (Figure 3-26). Getting the first results might take a few minutes. The egress rates for all selected packet sizes will be calculated first, followed by the ingress rates. Figure 3-26: SLA Throughput test completed NOTES: The SLA Throughput test is an out-of-service test. You can stop an SLA Throughput test at any time by clicking Stop. You cannot run the SLA Throughput and SLA Performance Availability tests at the same time. Software Version 1.7 for CA AppLogic GA 43 Document Version 1.0

44 To run an SLA Loss Measurement test: 1. Open CloudLink Center using the secadmin, admin, or observer user account. 2. On the left side of the window, in the Topology Tree, click a remote vnode. 3. Click the SLA tab and then the Tests tab. 4. Under Tests, select the Loss Measurement link. 5. Under Loss Measurement (Figure 3-27), specify the following information: Rate Packet size Number of packets The number of synthetic packets per second the gateway will generate towards the vnode. The packet size for the test. The total number of transmitted packets. 6. To initiate a Loss Measurement test, click Start. The results of the Loss Measurement test are displayed under Results (Figure 3-27). Figure 3-27: SLA Loss Measurement test completed Software Version 1.7 for CA AppLogic GA 44 Document Version 1.0

45 NOTES: You can stop an SLA Loss Measurement test at any time by clicking Stop. You cannot run the SLA Loss Measurement and SLA Performance Availability tests at the same time. To run an SLA Delay Measurement test: 1. Open CloudLink Center using the secadmin, admin, or observer user account. 2. On the left side of the window, in the Topology Tree, click a remote vnode. 3. Click the SLA tab and then the Tests tab. 4. Under Tests, select the Delay Measurement link. 5. Under Delay Measurement (Figure 3-28), specify the following information: Rate Packet size Number of packets The number of synthetic packets per second the gateway will generate towards the vnode. The packet size for the test. The total number of transmitted packets. 6. To initiate a Delay Measurement test, click Start. The results of the Delay Measurement test are displayed under Results (Figure 3-28). Software Version 1.7 for CA AppLogic GA 45 Document Version 1.0

46 Figure 3-28: SLA Delay Measurement test in progress NOTES: You can stop an SLA Delay Measurement test at any time by clicking Stop. You cannot run the SLA Delay Measurement and SLA Performance DM/DMV tests at the same time. 3.7 Performance Reports CloudLink Center lets you generate and save a report containing the following SLA and storage statistics for the last 24 hours: SLA Traffic statistics SLA Availability test results SLA DM/DMV test results Storage statistics All the reports are saved to the Microsoft Excel (.xls) format. You can select the types of statistics to include in the report. Report generation is available for the secadmin, admin, and observer user accounts. Software Version 1.7 for CA AppLogic GA 46 Document Version 1.0

47 3.7.1 Generating a Performance Report The performance report shows the statistics collected between the Gateway and a selected remote vnode over the last 24 hours. You can generate a performance report from CloudLink Center in one of the following ways: If you need to aggregate statistics in a single report, generate a report from the Topology Tree panel of the CloudLink Center window. You can select either all storage statistics (Rate, Operations, and Latency) and/or all SLA statistics (traffic statistics, availability, and DM and DMV test results). If you need a report for a particular type of SLA statistics or a combination of particular SLA statistic types (traffic statistics, availability, DM and DMV test results), generate a report from the SLA tab. If you need a report for a particular type of storage statistics or a combination of particular storage statistic types (Rate, Operations, and Latency), generate a report from the Storage Statistics tab. To generate an aggregate SLA and/or storage statistics report: 1. Open CloudLink Center using the secadmin, admin, or observer user account. 2. On the left side of the window, in the Topology Tree, right-click a remote vnode and select Report Performance. 3. In the Export Performance window (Figure 3-29), select the types of statistics you want to include in the report (all SLA statistics and/or all storage statistics) and click the Download Report link. Figure 3-29: Generating SLA and/or Storage statistics report Software Version 1.7 for CA AppLogic GA 47 Document Version 1.0

48 Depending on the download settings of your web browser, you might be asked to specify the location on your computer to which to save the report, the report will be saved to the default downloads location specified in the browser settings. The name of the generated report has the following format: {node_name}_{yyyy-mm-dd}_{hh-mm-ss}.xls Where: {node_name} - name of the remote vnode. {yyyy-mm-dd} - report generation date. {HH-mm-ss} - report generation time. To generate an SLA statistics report: 1. Open CloudLink Center using the secadmin, admin, or observer user account. 2. On the left side of the window, in the Topology Tree, click the remote vnode. 3. Click the SLA tab. 4. Right-click the empty space in the Statistics Type panel and select Report Performance. 5. In the Export Performance window (Figure 3-30), select the types of SLA statistics to include in the report and click the Download Report link. Figure 3-30: Generating SLA statistics report Depending on the download settings of your Web browser, you might be asked to specify the location on your computer to which to save the report, or the report will be saved to the default downloads location specified in the browser settings. Software Version 1.7 for CA AppLogic GA 48 Document Version 1.0

49 The name of the generated report has the following format: {node_name}_{yyyy-mm-dd}_{hh-mm-ss}.xls Where: {node_name} - name of the remote vnode. {yyyy-mm-dd} - report generation date. {HH-mm-ss} - report generation time. NOTE: You can also generate an SLA report by right-clicking in the empty space in the Test panel when the Availability or Delay Measurement panel is displayed on the SLA -> Performance tab. To generate a Storage statistics report: 1. Open CloudLink Center using the secadmin, admin, or observer user account. 2. On the left side of the window, in the Topology Tree, click a remote vnode. 3. Click the Storage tab and then the Statistics tab. 4. Right-click the empty space in the Statistics panel and select Report Performance. Figure 3-31: Generating storage statistics report 5. In the Export Performance window (Figure 3-31), select the types of storage statistics to include in the report and click the Download Report link. Depending on the download settings of your Web browser, you might be asked to specify the location to which to save the report, or the report will be immediately saved to the default downloads location specified in the browser settings. Software Version 1.7 for CA AppLogic GA 49 Document Version 1.0

50 The name of the generated report has the following format: 3.8 Logs and Events {node_name}_{yyyy-mm-dd}_{hh-mm-ss}.xls Where: {node_name} - name of the node. {yyyy-mm-dd} - report generation date. {HH-mm-ss} - report generation time. The CloudLink Center logs provide comprehensive information about all events associated with the CloudLink Gateway and vnodes. All CloudLink logs are divided into four categories: Actions Alarms Events Security events To view all logs, you must log into CloudLink Center using the secadmin user account. The CloudLink admin user account can view Actions, Alarms, and Events logs. The CloudLink observer user account can only view Alarms and Events logs. The following sections explain how to view each log Viewing the CloudLink Actions Log To view the CloudLink Actions log, click the actions icon at the bottom of the CloudLink Center window (Figure 3-32). Figure 3-32: Actions icon Each action record will stay active for five minutes and then will be cleared from the panel (timed out). You can use the Show all check box to show all Action records, including the timed-out records. NOTE: The actions icon appears dimmed if the log contains no records and all the action records are timed out. Software Version 1.7 for CA AppLogic GA 50 Document Version 1.0

51 The Actions log window (Figure 3-33) shows the events associated with particular user actions (for example, storage operations or starting or stopping SLA tests). An action record contains the following information: Name (the action name) Object (the name of the appliance/vm from which the action was performed) Status (action status) User (the user who performed the action) IP (the IP address of the computer where the action was performed) Started (the action started time stamp) Completed (the action completed time stamp) Details (additional information about the action; for example, the reason why the action failed) Figure 3-33: Actions log window Viewing the CloudLink Alarms Log To view the CloudLink Alarms log, click the alarms icon at the bottom of the CloudLink Center window (Figure 3-34). Figure 3-34: Alarms icon NOTE: The alarms icon appears dimmed if the log contains no unacknowledged alarm records. The Alarms log window (Figure 3-35) records all major and critical severity events. An alarms record contains the following information: Time (the alarm generation time) Name (the alarm name) Object (the name of the appliance/vm from which the alarm was generated) Software Version 1.7 for CA AppLogic GA 51 Document Version 1.0

52 Figure 3-35: Alarms log window Acknowledging CloudLink Alarms The CloudLink Center Alarms log provides a way to acknowledge CloudLink event alarms. To acknowledge alarms, you need to log into CloudLink Center using the secadmin or admin user account. As soon as you acknowledge all alarms, the alarms icon is deactivated (becomes dimmed) until a new alarm record is detected. The Show All check box gives you the option to view the list of all alarms (the acknowledged and new (unacknowledged ones) or the list of the new alarms only. To acknowledge an alarm in the CloudLink Alarms window: 1. Open CloudLink Center using the secadmin or admin user account. 2. On the bottom of the CloudLink Center window, click the alarms icon. The Alarms window shows all new (unacknowledged) alarms. 3. In the Alarms window, right-click the alarm you want to acknowledge and click Acknowledge Alarm (Figure 3-36). Figure 3-36: Acknowledge Alarm option The acknowledged alarm is removed from the display. 4. To see all the alarms including the acknowledged ones, select the Show All check box at the upperright of the Alarms window (Figure 3-37). Software Version 1.7 for CA AppLogic GA 52 Document Version 1.0

53 Figure 3-37: Alarms window showing all alarms, with one alarm acknowledged When all alarms have been acknowledged, the alarms icon becomes dimmed. It will be activated once a new alarm is detected (Figure 3-38). Figure 3-38: Alarms window showing all alarms, with all alarms acknowledged An empty Alarms window is displayed if all alarms are acknowledged and the Show All check box is cleared (Figure 3-39). Figure 3-39: Alarms window when all alarms are acknowledged and Show All check box is cleared Viewing the CloudLink Events Log To view the CloudLink Events Log, click the events icon at the bottom of the CloudLink Center window (Figure 3-40). Figure 3-40: Events icon Each event record will stay active for five minutes and then will be cleared from the panel (timed out). You can use the Show all checkbox to show all Events records, including the timed-out records. NOTE: The events icon appears dimmed if the Events log contains no records and all the Event records are timed out. Software Version 1.7 for CA AppLogic GA 53 Document Version 1.0

54 The Events log window (Figure 3-41) records all moderate- and minor-severity events. An event record contains the following information: Time (the event generation time) Name (the event name) Object (the name of the appliance/vm where the event was generated) Figure 3-41: Events log window Viewing the CloudLink Security Events Log To view the CloudLink Security Events log, you need to log on CloudLink Center using the secadmin user account. To view the CloudLink Security Events log, click the security events icon at the bottom of the CloudLink Center window (Figure 3-42). Figure 3-42: Security events icon Each security event record will stay active for five minutes and then will be cleared from the panel (timed out). You can use the Show all check box to show all Security Event records, including the timed-out records. NOTE: The security events icon appears dimmed if the Security Events log contains no records and all the Security Event records are timed out. Software Version 1.7 for CA AppLogic GA 54 Document Version 1.0

55 The Security Events log window (Figure 3-43) shows all CloudLink security events. A security event record contains the following information: Time (the security event generation time) Action (the action name) User (the user who performed the action) Object (the name of the appliance/vm where the security event was generated) IP (the IP address of the computer where the action was performed) Permission (the status indicating whether the user is allowed to performed the action) Details (additional information about the action) Figure 3-43: Security Events log window NOTE: Security events with the Permission of Denied are displayed in red. 3.9 Syslog Configuration CloudLink Center lets you configure a syslog logger on the CloudLink Gateway. When the syslog logger is configured, system log messages will be directed to the configured remote host via UDP Port 514. The priority levels are as follows: The info (information) priority level tag is assigned to the event logs. The notice priority level tag is assigned to the action logs. The alert priority level tag is assigned to both the security events logs and the alarms Configuring a Syslog Logger To configure a syslog server: 1. Open CloudLink Center using the secadmin or admin user account. 2. On the left side of the window, in the Topology Tree, select the Gateway at the top of the list. 3. Click the Administration tab and then the Syslog tab (Figure 3-44). Software Version 1.7 for CA AppLogic GA 55 Document Version 1.0

56 Figure 3-44: Syslog tab 4. On the Syslog tab, in the Host box, specify the IP address of the host to which the message logs will be sent. 5. In in the Facility list, select the facility on which the switch s syslog messages are logged. 6. Click Apply. NOTE: By default the syslog server status is Postponed, which means that logs are not sent out until the Syslog status is explicitly set to Resume (Figure 3-45). Software Version 1.7 for CA AppLogic GA 56 Document Version 1.0

57 Figure 3-45: Syslog server in Postponed status 7. Click the Resume link to activate sending of syslog messages (Figure 3-46). Figure 3-46: Syslog server in active state NOTE: Once syslog is activated with the Resume command, messages will be sent to the configured Syslog server until the Postpone command is performed. If communication with the Syslog server is broken, the syslog status is Inaccessible (Figure 3-47). Software Version 1.7 for CA AppLogic GA 57 Document Version 1.0

58 Figure 3-47: Syslog server in inaccessible status Software Version 1.7 for CA AppLogic GA 58 Document Version 1.0