NetBrain OE System Quick Start Guide

Transcription

1 NetBrain Technologies Inc. NetBrain OE System Quick Start Guide For Operator Edition Administrators

2 Table of Contents 1. Install NetBrain OE System Install Gateway Server Install Network Server Install Workstation Discover Network and Populate the Shared Workspace Start Workspace Wizard Define Telnet/SSH/SNMP credentials and Proxy Discover Live Network Import Configuration Files Tune Live Access Benchmark Create L3 or L2 topology maps Manage Shared Workspace Manage Network Devices Create device groups, sites or link groups Add and remove a device Stitch Topology Build L2 Topology for LAN Segment and Fix up L2 Topology Fix up Network Data... 22

3 1. Install NetBrain OE System Component Minimum System requirements Operation System Others Gateway Server 2 GHz, Dual core CPU, 2 GB memory, 10 Windows Server 2008, Windows Microsoft Internet Information GB free disk space Server 2003 including SP2/R2 Services (IIS) Network Server Workstation 2 GHz, 2 GB memory, 10 GB free disk space 1 GHz, 1 GB memory, 5 GB free disk space Windows Server 2008, Windows Server 2003 including SP2/R2 Windows XP SP2, Windows Vista, Windows 7, Windows Server 2003, Windows Server 2008 See OE End User Tutorial for more Workstation features.

4 1.1 Install Gateway Server Step 1 Install IIS services Step 2 Install Gateway Server Step 3 Activate Gateway Server Step 4 Login in Gateway Server web interface 1. Click Start > Settings > Control Panel > Add or Remove Programs option. 2. Select Add/Remove Windows Components button. 3. Select Application Server item then click the Details button. 4. Select the Internet Information Services (IIS) item, and then click OK to install the services. 1. Run NetBrain Gateway installation setup file and follow the setup wizard. 2. In the window for PostGRES installation, keep the default port and default username postgres. Enter the password as postgres. 1. Click the Start > NetBrain > NetBrain License Tool option. The NetBrain License window opens. 2. Select the NetBrain Enterprise Server from the product drop-down list. 3. Click the Trial Activate button. The Register for Trial License window opens. Note: if you have the permanent license, click the Activate button. At the Activate License window Fill in the License ID, Password, First Name, Last Name and fields. 4. Fill in the and Activation Key and click the Next button to start the activation process. After verification, the trial license will be activated and you are able to use the program for up to 15 days. Enter URL The default username/password is admin/admin. Go to the next step if IIS is already installed. If you got an error message postgresql.conf not found, check whether the Secondary Logon service is running. Start this service if not. Reinstall the Gateway Server. For detail or other possible problem, check here. If you do not have the Activation Key, Click here and fill in the form. NetBrain will send you the Activation Key for the trial license. If the server is not connected to Internet, you can activate the license via . Follow the instruction here. To change the admin default password, click User accounts and then the button of admin. Gateway Server Home page

5 1.2 Install Network Server Step 1 Download Setup File Step 2 Install Network Server Step3 Add Network Server into System Step 4 Check Network Server Status 1. Login to the web interface of Gateway Server and click Install Network Server link. 2. Download the Network Server setup file. 1. Run the Network Server setup file. 2. Follow the Setup Wizard. 1. Login to the web interface of Gateway Server, and click Network Server link. 2. Click the Add the Network Server link. Enter the server IP address, benchmark service and proxy service port. The default benchmark service port is 7813 and the default proxy service port is Click Network Server link at web interface and click Server Status. indicates that the Network Server is ready to work. NetBrain Network Server should automatically start as two services. About how to check whether the services are running correctly, click here for details. If Network Server is not working, make sure that TCP ports 9099 and 7813 are open. For more detail, click here.

6 1.3 Install Workstation Step 1 Download Setup File 1. Login to the web interface of Gateway Server and click Install Workstation link. 2. Download NetBrain OE Workstation setup file. Step 2 1. Run NetBrain OE Workstation setup file. 2. Follow the Setup Wizard. Install NetBrain OE Workstation Step 3 Login to OE Workstation 1. Launch the Workstation. 2. Click the Change Server option from the Server drop down list. 3. Enter the Gateway Server IP address or domain name and the port number. 4. Click the Test connection button. 5. Enter the administrator username and the password. The default is admin/admin. The Workstation user interface is not same for the administrator as for the engineer. Most of tasks in this guide can be done via the administrator user interface of NetBrain Workstation.

7 2. Discover Network and Populate the Shared Workspace As the administrator, you are responsible for building and maintaining the workspace. The workspace is a virtual work environment that NetBrain uses to emulate your network. Most of workspace data is maintained in Gateway and shared by all Workstations. The workspace data in the Gateway Server includes the device configurations, the network topology (Layer 3 and Layer 2 topology), the credentials to access the live network, the shared device groups (including sites and shared link groups) and the data retrieved from the live network (live data). All these data can be managed from the Workstation Administrator user interface and some of these data can also be managed in Web Interface of Gateway Server. NetBrain provides a wizard to help set up the workspace.

8 2.1 Start Workspace Wizard To start the Workspace Wizard, Click the Start button in the start page to open the wizard (if the start page is not visible, click View and then Start page in the ribbon menu). The wizard includes 6 steps, some of which may not be necessary and can be skipped by clicking the Next button. You can also click the Finish button at any step to exit the wizard. Step Operation Description Note Define Telnet/SSH/SNMP Define the credentials to access the live If you do not have live access to the network, you credentials and Proxy network. Used to discover network and tune can jump to step 3. live access. Discover the live network Starting from a seed device, discover your entire live network. Import Configurations Tune Live Access Benchmark the network and build L3 & L2 topology. Create L3 or L2 topology maps If some devices cannot be accessed or are not discovered for some reason, add these devices by importing configuration files. Check the reach-ability of a device and fill in the credentials for each device. Run the benchmark now or setup a schedule to benchmark the network. Create a map from the system generated device groups or switch groups. If you use configuration management tools such as HP Automation and Cisco Works, you can export configurations into a directory from these tools and import them into NetBrain. Alternately you can manually define the credentials for an individual device and a device group. The system automatically builds L3/L2 topology after the benchmark task is done. This step is not essential for workspace setup. It just shows you one of many methods to create a map on demand.

9 2.2 Define Telnet/SSH/SNMP credentials and Proxy Define the credentials for the system to discover the live network and tune live access. 1. Click the Telnet/SSH login tag. 2. Click the Add button. 3. Enter the corresponding values. 4. Repeat step 3 and 4 to add all possible Telnet/SSH login credentials. 5. Click the other tags in Live Network Setting window to add Privilege Password, SNMP community, Network Server and Jumpbox. 6. Click the Next button to go to the next step of Wizard. Note: If both the Network Server and Workstation can access your network directly, then you do NOT need set a Jumpbox. Otherwise you do need set a Jumpbox so that the Network server or Workstation can access the live network. Network Server must be able to access the network devices via telnet/ssh or SNMP. If an ACL is configured for SNMP RO string, then network server IP address must be allowed in that ACL. Live Network Setting Examples Telnet/SSH login Username nb Password nb Privilege Password nb SNMP community nb Network Server IP address Port 9099 Jumpbox IP address Username netbrain Password netbrain Login Prompt login: Command Prompt: :/>

10 2.3 Discover Live Network Discover the network devices starting from a seed router. The discovered devices and configurations are automatically added into the workspace. 1. Click the options button and select correct access order. For example, if most of your devices are accessed via SSH, you can select Try SSH then Telnet. 2. Enter an IP address of the seed router. Or click Select Device to select a seed router. 3. Click the Start Discovery button. 4. Select an entry to view the log. 5. Click the Next button to go to the next step of Wizard. Note: the discovery statistics are updated and displayed at. Inside NetBrain After network devices have been discovered by seed router, you can select scanning the IP subnets. During the discovery process, the system parses live data such as configuration files and routing tables to create a set of destination subnets and directly connected subnets. You can choose to scan all destination subnets or just directly connected subnets. This scan process may help discover more devices, however, be aware that the scan process can be time consuming. To select scanning subnet options, click the Options button in Live Network Discovery window and then select the Discovery Options tag. You can create a discovery report after discovery process is done. Click the Report button ( ) from the Workspace tab. The discovery results are summarized in Discovery report. Under the tag Unknown Device Type are devices which have system object IDs (sysojbectid) not defined in NetBrain's vendor and model table and therefore are denoted as unclassified. You can select one or multiple entries in this list and select Add to Vendor Model Table option. These devices will be recognized by NetBrain in the next discovery. Note: If you fail to discover some devices in your network, first make sure that you enter all possible live network settings at step 1: Define Telnet/SSH/SNMP credentials and Proxy and then you can try different seed routers. Click here for details.

11 2.4 Import Configuration Files After a network device is discovered, its configuration file is automatically imported into the workspace. If some devices cannot be accessed or are not discovered for some reason, add these devices by importing configuration files. 1. Collect configuration files into a file folder. If you use configuration management tools such as HP Automation and Cisco Works, you can export configurations into a directory from these tools and import them into NetBrain. 2. Click From Folder button and select the file folder you saved configuration files. 3. Click the Import button. 4. The imported devices are displayed in the Workspace pane. 5. Click the Next button to go to the next step of Wizard. Inside NetBrain After a configuration file is imported into the workspace, a virtual device is added into the workspace as well as its L3 connection. In the next step, you will add the credentials (device settings) to access the live network. The configuration file retrieved from the live device via Benchmark (see step 2.5) will be used to update the virtual model. Note NetBrain supports configuration files of Cisco IOS router, IOS switch, CatOS switch, Pix/ASA firewall, Junos router, 3COM router/switch. A complete list of vendors and hardware models supported can be found here. Configuration files need to be of original text format.

12 2.5 Tune Live Access Check the reach-ability of a device and fill in the credentials (device settings) for each device. 1. Click Start Tuning. 2. Click an entry to view its log. 3. After the process is finished, right click an entry and view its shared device settings. If you want to telnet/ssh to this device, set the Local CLI settings for this device. 4. Click the Next button to go to the next step of Wizard. Tip: if you get failure for some devices, you can click Start Tuning button again without closing window. The system will only try the devices which failed in last testing. Inside NetBrain The credentials to access a device include its Shared Device Settings and Telnet/SSH CLI Settings. The shared device settings can be used to retrieve live data and execute show commands. Telnet/SSH CLI Settings are used to Telnet/SSH to the devices. You can manually edit the device settings of a device, For shared Device Settings: 1. Right click a device from Workspace Space and select Shared Device Settings menu. 2. Enter the credential directly. Or you can click the button and select one from the live network setting you just defined. 3. You can apply these setting to all devices or a device group. To do so, select the settings and device groups and click the Apply button. More efficiently use Tune Live Access to have the system automatically fill in device settings for all devices. While tuning live access, the system polls live devices using the credentials defined in live network settings. If the system reaches a device successfully, it will fill in the corresponding device settings. The results are saved in Gateway Server. If the system fails to reach a device via a method, first click the entry of this device in Tune Live Access window and view the log for any clue. If the system can ping the device successfully but cannot telnet/ssh to the device or reach the device via SNMP, then quite possibly some live network settings are missing. You need to add Local CLI settings. Click here for other possible cases of failure and solutions.

13 2.6 Benchmark Setup a schedule to benchmark the network at Gateway Server. L2 and L3 topology are automatically updated after each benchmark task. 1. Click the Start Benchmark Now button to have the system start benchmarking your network immediately. Note: You can also click the Schedule Benchmark button to open the web page to schedule benchmark tasks. Please note that L2 topology is not built until the benchmark task is done. 2. Click the Next button to go to the next step of Wizard. Note: If you have a large network, it may take a while to finish a benchmark. You can click the Next button to go to the next step. Since benchmarking is run in the server, exiting this window will not affect the benchmark task. Inside NetBrain When the Gateway Server starts a benchmark task, a DataFolder is automatically created and named with the current date, for example, All benchmarked data is stored into this DataFolder. At the web interface, click the Workspace > DataFolder tabs to view all DataFolders in Gateway Server. The data retrieved from the live network include: configuration, route table, ARP table, MAC table, CDP table and Interface Info. These data are useful in many network tasks in NetBrain Workstation, for example, Route tables can be used to calculate the traffic path. Configurations are used to update L3 topology. ARP/MAC/CDP tables are used to discover L2 topology. Route tables and route tables are used to verify what are changed in network design. If you select auto build L2/L3 topology, L2 and L3 topology are automatically rebuilt from the latest data retrieved from the benchmark process.

14 2.7 Create L3 or L2 topology maps Create a map from the system generated device groups or switch groups. This step is not essential for workspace setup. It just shows you one of many methods to create a map on demand. 1. Select a device group and click Create Map button. Note: You can also create L2 topology maps. Click the Map L2 Topology Map tag to display all switch groups. Select a switch group to map. 2. Click the Finish button to exit the wizard.

15 3. Manage Shared Workspace After building the workspace in the second step, you should have a workspace ready to work on. However due to the complexity of network technologies and the constant changing of your network, there exists certain cases that requires some further adjustment on automatically created topology or other workspace data. Manage network devices Stitch network topology Use case Hard to manage a large amount of devices in the workspace Cannot obtain a device configuration or the type of device is not supported yet. Device is removed from the network There exists MPLS cloud configurations of which are not available. IP unnumbered interfaces are not connected Solution Create the device groups, sites or link groups Manually add a device Delete the device Manually add MPLS cloud Connect IP unnumbered interfaces There exists duplicated IP addresses Apply one interface for the topology and discard other interfaces Discover L2 topology for LAN segments L2 topology automatically discovered after benchmarking is not complete or accurate Discover the L2 topology of LAN segments; manually edit switch connections or IP table. Fix up live data Cannot retrieve the route table or NAT table Fix up Route table/nat table

16 3.1 Manage Network Devices Create device groups, sites or link groups For a large network, you can use device groups or link groups to better organize and manage your network devices. For example, you can create a device group to include all network devices in a logical or physical network site and a link group for all interfaces configured for a certain VRF. Create a shared device group 1. Right click the Shared node under the device group node on the Workspace pane and select the New Device Group option. 2. Enter the device group name. 3. Add devices into this device group. You have two methods to add the devices: a) Click the Dynamic button to set the criteria to search devices. Here you can search devices according to the device type, hostname, IP address, vendor, model, serial number, software version, contact, location and configurations. b) Or click the Add button to add devices statistically into the device group. Create a shared link group 1. Right click the Shared node under the link group node on the Workspace pane and select the New Link Group option. 2. Enter the link group name. 3. Add interfaces into this link group. You have two methods to add the interfaces: a) Click the Dynamic button to set the criteria to search interfaces. Here you can search interfaces according to the interface name, IP address, description, routing protocol, MPLS VRF and multicasting mode. b) Or click the Add button to add interfaces statistically. Create a site 1. In the workspace tab, within the Fix-up Network group, click the Site Manger option. 2. Select a parent site to be split. Initially there exists only one site Entire Network-Site. 3. Click the Define Child Site button. 4. Enter the site name. 5. Add devices into this child site. You have two methods to add the devices: a) Click the Search button to set the criteria to search devices. Here you can search devices according to the device type, hostname, IP address,

17 vendor, model, serial number, software version, contact, location and configurations. b) Or click the Add button to add devices statistically into the site. Note: NetBrain allows you to split a site automatically, making the site splitting process more conveniently. Select a site and then click the Split Site button within the Site Manager window to perform the operations.

18 3.1.2 Add and remove a device Operation Use case Steps Manually add a device If devices in the live network is not in the shared workspace, you can add devices in following ways: 1. Import configurations. See Import configuration files for detail. 2. Discover the network devices. See Discover Live Network for detail. 3. If device configuration fails to be retrieved or the type of device is not supported yet, you can manually add this device. 1. Click Workspace >> Topology Stitching drop-down button ( ), and select Add Generic Device and then select add a type of device, such as Add Router. 2. Fill in device name, management IP address and SNMP RO string. 3. Click SNMP Get button to fetch interface info. If it fails, you need manually add L3 and L2 interface information by clicking Add button. Delete a device Device is removed from the network At Workspace Pane (click View >> Workspace Pane if it is not visible), select one or multiple devices and select Remove from Workspace from the right click menu. Alternatively at Server Web interface, go to Workspace >> Device, select devices to be deleted and then click Delete Devices button.

19 3.2 Stitch Topology After you import the configuration files and/or discover the network devices, the system will automatically build L3 topology. You can also select auto rebuild L3 topology after each benchmark task is finished to ensure that L3 topology is always updated. However for a complex network, the automatically created network topology may be not accurate and requires the manual adjustment. Operation Use Case Steps Manage duplicated IP addresses Same IP addresses are configured on multiple devices. By fault, the system will take one interface for the IP address while building the network model and discard other interfaces having the same IP address. 1. Click Workspace >> Topology Stitching drop-down button ( ) and select Interfaces of Duplicated IP option. 2. At the Interfaces of Duplicated IP window, select an IP address in the left pane and check the interface you want in the workspace. The other interfaces having the same IP address are discarded. Connect Unnumbered Interfaces NetBrain Workstation creates a list of the IP unnumbered interfaces while building the network model from the configuration files. By default, the IP unnumbered-configured interfaces are disconnected from each other. 1. Click Workspace >> Topology Stitching drop-down button ( ) and select IP Unnumbered Links option. Note: The table is empty due to all IP unnumbered interfaces are disconnected by default. 2. Click Auto Connect button. The system will try connecting IP Unnumbered interfaces via CDP table. 3. Click Add button to manually connect two interfaces. Select a source device, source port, destination device, and destination port and Click the Connect button. The two interfaces are connected. Add MPLS cloud The geographically dispersed networks are connected to one another through the MPLS VPN of an ISP. However, the operation of a MPLS VPN in the ISP s network is transparent to users. Consequently, users do not know the

20 whole network well. This may make it inconvenient for users to manage networks. To help users better know their networks, NetBrain introduces a concept called MPLS Cloud. A MPLS Cloud, the ISP s network bearing the MPLS VPN, simulates MPLS features accurately by following the rules of forwarding labeled packets. 1. Click Workspace >> Topology Stitching drop-down button ( ) and select Add MPLS cloud option. 2. Fill in the BGP remote AS number and click the Create button. All devices pointing to this BGP AS are added into the list automatically. Or you can click the Add button to add the CE device manually.

21 3.3 Build L2 Topology for LAN Segment and Fix up L2 Topology You can select automatically build L2 topology in the Gateway Server after the scheduled benchmark is finished. Sometimes due to network complexity and that some live data such as CDP/MAC/ARP table are not retrieved successfully, auto crated L2 topology is not complete or accurate. You can build L2 topology for LAN segments from Workstation. Also you can also manually edit L2 topology results. Build L2 topology for LAN segments 1. Click Workspace >> LAN Discover. 2. Enter LAN segments. 3. Click Options button. 4. Select Via Live Network option and one sub-option. Note: by selecting Via Live Network option, the system will scan all IP addresses in LAN segments and retrieve the corresponding L2 data. You can also select Via Cache Data from a DataFolder if all L2 data in LAN segment are completed. 5. Click Start Discovery button. 6. Save the L2 data when discovery is done. Fix up L2 topology You can fix up L2 topology result. The L2 topology data is stored in One-IP table and switch connection table. To edit One-IP table, click View >> One IP table. Right click an entry of One-IP table and select Edit to edit this entry. Or you can right click any entry and select Add option to add an entry in One-IP table. To edit switch connection table, click View >> Switch Connection. Right click an e and select Edit to edit this entry. Or you can right click any entry and select Add option to add a switch connection.

22 3.4 Fix up Network Data Operation Use cases Steps Fix up route table Fix up NAT table The route tables are used to calculate the traffic path and other network analysis. Some devices may be not accessible or the route table cannot be retrieved. The NAT table displays how the IP is translated in a firewall or a router. NAT table is used in the path calculation and other network analysis. NetBrain Workstation creates NAT table from configuration files. For some devices, NAT configurations are not available or not correctly parsed. 1. Click Workspace >> Fix-up Route Table. 2. At the Fix-up Route Table Manager window, click Add button and select a device. 3. Click the Add Entry button at Fix-up Route Table pane for the device. 4. Set the route entry values and click the Add button. The route entry is added to the device fix-up route table. 1. Click Workspace >> NAT Table. 2. At the NAT Table Manager window, click Add button and select a device. The NAT Table pane for that device opens. The system parses the device configuration and NAT translation are shown if NAT is configured on this device. 3. Click the Add Entry button. 4. Set the NAT entry values and click the Add button. The NAT entry is added to the device NAT table.