NetBrain Workstation Live Network Access Guide How NetBrain Accesses the Live Network

Transcription

1 Live Network Access Guide How NetBrain Accesses the Live Network Summary Many NetBrain functions such as live network discovery, benchmarking, path discovery and monitoring require access to the live network. In order for these functions to work, you need to input live network settings into the NetBrain system which include: Username/password pairs and privilege passwords. These credentials are used to Telnet/SSH to devices and retrieve live data via CLI show commands. SNMP RO strings are used to access devices via SNMP. Monitoring devices also requires SNMP RO strings. These settings are stored in the server database and the passwords are encrypted. The administrator can also control whether a user is able to use these settings. NetBrain will use the credentials to retrieve data from the live network via SNMP polling and CLI show commands. NetBrain will NEVER make any configuration changes in the live network. Live Network Discovery Based on user selection during discovery, NetBrain uses the following methods to access the live network: Ping SNMP Read only Telnet/SSH For the quickest and most comprehensive discovery, make sure that the NetBrain server can access the live network with ALL methods listed above. NetBrain uses a special neighbor walking algorithm to discover the network. It only uses one Telnet/SSH session per device. Expect light network traffic during NetBrain discovery. The actions that the NetBrain discovery engine uses are: 1. Ping 2. SNMP RO GET to a few OIDs 3. Telnet to port 23 or SSH to port 22, and issue the following commands (based on user selection) a. Show run b. Show ip route summary c. Show ip route d. Show cdp neighbor Benchmarking While benchmarking, the NetBrain server Telnet/SSHs to the device and issues CLI show commands to retrieve configuration files, route tables, ARP tables, CDP tables, MAC tables and interface information for all devices in the system. You can also define your own CLI show commands. For Cisco IOS devices, the benchmarking process may issue the following show commands: Live Network Access Guide 1

2 / show config dynamic Customized show commands defined by users Benchmarked data is used to build or update L3 and L2 topology so that your system is always up to date. Since benchmarked data is a snapshot of your network at a specific point in time, it can also be used for comparison purposes, such as to recall a good network state while you troubleshoot a problem. When you implement a network change, we recommend that you run a benchmark before and after implementation and compare the two sets of data to find differences, so you can find any issues caused by your changes, such as missing routes. Path Discovery Starting from two end points, you can discover and map an application path. Depending on the method used to discover the path, the system will retrieve routing via SNMP or CLI from the live network. If the system retrieves routing via SNMP, it will only retrieve routing related to the destination rather than the entire routing table. Otherwise the system retrieves routing tables from the device via show commands such as. You can also select the Via Cached Route Table option to find the historical path based on historical routing tables. Monitoring Monitoring functions use SNMP polling to retrieve performance data from the live network such as CPU, memory, interface delay, and bandwidth usage. IP Accounting, IP SLA and NetFlow By launching IP accounting, IP SLA and NetFlow functions, the system Telnet/SSHs to the device and issues the corresponding show commands to retrieve the data. NetBrain does not configure IP Accounting, IP SLA or NetFlow for you. It s not a NetFlow Analyzer server either. Show commands If show commands can be issued from a non privileged mode, then the system does not go to privileged mode. Otherwise the system must go to the privileged mode and issue show commands. NetBrain does not make any network configuration changes. Live Network Access Guide 2

3 Device Type Cisco IOS Router Cisco IOS Switch Script summary switch all show ip interface brief brief status description show ip accounting mac accounting show ip cache flow show ip flow top talker traceroute summary show mac address table switch all show ip interface brief brief status description show ip accounting mac accounting show ip cache flow show ip flow top talker show spanning tree blockedports Live Network Access Guide 3

4 Cisco Catalyst Switch Cisco PIX Firewall Cisco ASA Firewall Juniper Router traceroute set length 0 show config show route show cam dynamic show cam static show port status show spantree blockedports no pager write terminal show route no terminal pager 0 show route set cli screen length 0 show config no more terse no more show route summary show route table inet.0 no more show route table $instance_name no more no more show lldp neighbors no more Show version no more show chassis hardware no more show chassis hardware models no more statistics no more show spanning tree interface no more Live Network Access Guide 4

5 3com Switch Cisco Nexus Switch HP ProCurve Switch display current configuration display ip routing table statistics display ip routing table display arp display arp all display mac address display lldp neighbor information display version display device display device manuinfo display brief interface quit super vrf all vrf name show ip arp vrf all show ip arp show ip arp vrf arp name show mac address table show spanning tree blockedports status no page ning config summary show mac address show cdp neighbors detail show lldp info remote show lldp info local Live Network Access Guide 5

6 Juniper EX Switch Cisco WAP NetScreen Firewall Extreme Switch Arista Switch set cli screen length 0 show config no more show route no more show route summary no more show ethernet switching table no more show vlans no more show lldp neighbors no more terse no more show chassis hardware no more show chassis hardware models no more summary show dot11 association traceroute set console page 0 get config get route get arp disable clipaging show config quit ning config summary vrf {vrfname} show mac address table show lldp neighbors detail show spanning tree detail show spanning tree blockedports show inventory show ip interface brief s status Live Network Access Guide 6

7 Brocade Switch Force10 Switch Adtran Switch skip page display summary vrf $vrfname show mac address show fdp neighbors detail show lldp neighbor detail show ip interface brief show spanning tree brief summary vrf {vrfname} show inventory show mac addr table switch show lldp neighbors detail show ip interface brief brief show inter status show spanning tree detail quit show lldp neighbor detail show mac address table Live Network Access Guide 7

8 Riverbed WAN Optimizer Huawei switch Hirschmann Switch Alcatel Lucent Service Router Alcatel OmniSwitch ning config s configured show info s configured display current configuration display ip routing table display lldp neighbor display arp display mac address display version display device super quit ning config show network show lldp remote data switch show mac addr table all logout show router route table show router fib 1 show router $VrfName route table show router $VrfName fib 1 show router arp show chassis show router interface detail admin display config environment no more logout write terminal s port show amp learned show mac learning show lldp remote system show system status Live Network Access Guide 8

9 port long show chassis environment no more Ciena Switch Enterasys Switch interface show port show interface show lldp show neighbors arp show flow show mac addr show config show neighbors wide show neighbors show mac set length 0 Live Network Access Guide 9