Cisco VPDN Application

Transcription

1 SPECTRUM Enterprise Manager Device Management Titlepae Cisco VPDN Application Supports Management Module SM-CISAPP

2 Notice Aprisma Management Technologies, Inc. (Aprisma), reserves the right to make changes in specifications and other information contained in this document without prior notice. The reader should in all cases consult Aprisma to determine whether any such changes have been made. The hardware, firmware, or software described in this manual is subject to change without notice. IN NO EVENT SHALL APRISMA, ITS EMPLOYEES, OFFICERS, DIRECTORS, AGENTS, OR AFFILIATES BE LIABLE FOR ANY INCIDENTAL, INDIRECT, SPECIAL, OR CONSEQUENTIAL DAMAGES WHATSOEVER (INCLUDING BUT NOT LIMITED TO LOST PROFITS) ARISING OUT OF OR RELATED TO THIS MANUAL OR THE INFORMATION CONTAINED IN IT, EVEN IF APRISMA HAS BEEN ADVISED OF, KNOWN, OR SHOULD HAVE KNOWN, THE POSSIBILITY OF SUCH DAMAGES. Copyright October 2000 by Aprisma Management Technologies. All rights reserved. Printed in the United States of America. Order Number: Aprisma Management Technologies, Inc. 121 Technology Drive Durham NH SPECTRUM, thespectrum IMT/VNM logo, DCM, IMT, and VNM are registered trademarks, and SpectroGRAPH, SpectroSERVER, Inductive Modeling Technology, Device Communications Manager, and Virtual Network Machine are trademarks of Aprisma or its affiliates. Ethernet is a trademark of Xerox Corporation. Virus Disclaimer Aprisma makes no representations or warranties to the effect that the Licensed Software is virus-free. Aprisma has tested its software with current virus checking technologies. However, because no anti-virus system is 100% reliable, we strongly caution you to write protect and then verify that the Licensed Software, prior to installing it, is virus-free with an anti-virus system in which you have confidence. Restricted Rights Notice (Applicable to licenses to the United States Government only.) 1. Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS Aprisma Management Technologies, Inc., 121 Technology Drive NH (a) This computer software is submitted with restricted rights. It may not be used, reproduced, or disclosed by the Government except as provided in paragraph (b) of this Notice or as otherwise expressly stated in the contract. (b) This computer software may be: (1) Used or copied for use in or with the computer or computers for which it was acquired, including use at any Government installation to which such computer or computers may be transferred; (2) Used or copied for use in a backup computer if any computer for which it was acquired is inoperative; (3) Reproduced for archival or backup purposes; (4) Modified, adapted, or combined with other computer software, provided that the modified, combined, or adapted portions of the derivative software incorporating restricted computer software are made subject to the same restricted rights; (5) Disclosed to and reproduced for use by support service contractors in accordance with subparagraphs (b) (1) through (4) of this clause, provided the Government makes such disclosure or reproduction subject to these restricted rights; and (6) Used or copied for use in or transferred to a replacement computer. (c) Notwithstanding the foregoing, if this computer software is published copyrighted computer software, it is licensed to the Government, without disclosure prohibitions, with the minimum rights set forth in paragraph (b) of this clause. (d) Any other rights or limitations regarding the use, duplication, or disclosure of this computer software are to be expressly stated in, or incorporated in, the contract. (e) This Notice shall be marked on any reproduction of this computer software, in whole or in part. SPECTRUM Enterprise Manager Page2 Cisco VPDN Application

3 Contents INTRODUCTION 4 Purpose and Scope...4 CISCO VPDN APPLICATION 5 Cisco VPDN Application...5 Cisco VPDN System Info View...5 Cisco VPDN Tunnel Attribute View...5 Cisco VPDN Tunnel Session View...7 Cisco VPDN User Failure History View...10 INDEX 12 SPECTRUM Enterprise Manager Page3 Cisco VPDN Application

4 Introduction This section introduces SPECTRUM device management for models of the Cisco VPDN application. Purpose and Scope Use this documentation as a guide for managing the Cisco VPDN application with the SPECTRUM management module SM-CISAPP. The documentation describes the menus, and views that enable you to remotely monitor, configure, and troubleshoot this application through software models in your SPECTRUM database. This application can be modeled with any Cisco Routers with a firmware of 11.3 or greater. SPECTRUM Enterprise Manager Page4 Cisco VPDN Application

5 Cisco VPDN Application This section provides a description of the Cisco VPDN application and its associated application-specific subviews available in SPECTRUM. Cisco VPDN Application This major application (model type CiscoVPDNApp) provides information on Virtual Private Dialup Networks (VPDNs) which handle the forwarding of PPP links from an Internet Provider (ISP) to a Home Gateway. It allows access to the following views: Cisco VPDN System Info View (Page 5) Cisco VPDN Tunnel Attribute View (Page 5) Cisco VPDN Tunnel Session View (Page 7) Cisco VPDN User Failure History View (Page 10) Cisco VPDN System Info View Access: From the Icon Subviews menu for the CiscoVPDNApp Application icon, select System Information. This view provides a table of information about the VPDN system for all tunnel types, including the following: Type The tunnel type. This is the tunnel protocol. Possible values are: 12f and 12tp. Tunnel Total The total number of VPDN tunnels, of this tunnel type, that are currently active. Session Total The total number of active sessions, of this tunnel type, in all the active VPDN tunnels. Denied User Total The total number of denied user attempts to all the VPDN tunnels of this tunnel type since last system re-initialization. Cisco VPDN Tunnel Attribute View Access: From the Icon Subviews menu for the CiscoVPDNApp Application icon, select Tunnel Attributes. This view provides the following table of information about the active VPDN tunnels. An SPECTRUM Enterprise Manager Page5 Cisco VPDN Application

6 Cisco VPDN Application Purpose and Scope entry is added to the table when a new tunnel is initiated and removed from the table when the tunnel is terminated. Index A unique value identifying an entry in the table. Local Name The local name of an active VPDN tunnel. It will be the NAS/LAC name of the tunnel if the router serves as NAS/LAC, or the HGW/LNS name of the tunnel if the system serves as the home gateway. Typically, the local name is the configured host name of the router. Remote Name The remote name of an active VPDN tunnel. It will be the home gateway name of the tunnel if the system is a NAS/LAC, or the NAS/LAC name of the tunnel if the system serves as the home gateway. Remote Endpoint Name The remote end point name of an active VPDN tunnel. This name is either the domain name or the DNIS that this tunnel is projected with. Local Init Conn This object indicates whether the tunnel originated locally. Original Cause The cause that originated an active VPDN tunnel. The tunnel can be projected via domain name, DNIS or a stack group. Tunnel Attr State The current state of an active VPDN tunnel. Tunnels of type l2f will have states with the l2f prefix. Tunnels of type l2tp will have states with the l2tp prefix. Possible states are detailed in Table 1. unknown Table 1: State l2fopening l2fopenwait l2fopen l2fclosing Tunnel Attr States Description The current state of the tunnel is unknown. The tunnel has just been initiated and is waiting for a reply from the remote end to complete the process. This end received a tunnel open request from the remote end and is waiting for the tunnel to be established. The tunnel is active. This end received a tunnel close request. SPECTRUM Enterprise Manager Page6 Cisco VPDN Application

7 Cisco VPDN Application Purpose and Scope Table 1: l2fclosewait l2tpidle State l2tpwaitctlreply l2tpestablished l2tpshuttingdown l2tpnosessionleft Tunnel Attr States (Continued) Description The tunnel has just been shut down and is waiting for the remote end to reply in order to complete the process. No tunnel is initiated yet. The tunnel has been initiated and is waiting for a reply from the remote end to complete the process. The tunnel is active. The tunnel is in the process of shutting down. There is no session left in the tunnel. Active Sessions The number of active sessions currently in the tunnel. Denied Users The number of users denied access to the tunnel. Soft Shut Indicates whether a state of soft-shutdown has been initiated, and if so, prevents any new sessions from being added. Network Service Type The type of network service used in the active tunnel. Local Ip Addr The local IP address of the tunnel. This IP address is that of the interface at the local end of the tunnel. Source Ip Addr The Source IP address of the tunnel. This IP address is the user configurable IP address for Stack Group Biding Protocol. Remote Ip Addr The remote IP address of the tunnel. This IP address is that of the interface at the remote end of the tunnel. Cisco VPDN Tunnel Session View Access: From the Icon Subviews menu for the CiscoVPDNApp Application icon, select Tunnel Sessions. This view contains the Session Attr Table which provides the following information about individual user sessions within the active tunnels: SPECTRUM Enterprise Manager Page7 Cisco VPDN Application

8 Cisco VPDN Application Purpose and Scope Index A unique value identifying an active user session. User Name The name of the user of this session. Tunnel State The current state of an active user session. These states are described in Table 2. unknown opening open closing State Table 2: waitingfortunnel Tunnel States Description The current state of the tunnel s session is unknown. The user session has just been initiated through a tunnel and is waiting for a reply from the the remote end to complete the process. The user session is active. The user session has just been closed and is waiting for a reply from the remote end to complete the process. The user session is in this state when the tunnel which this session is going through is still in a closed state. Call Duration The call duration of the current active user session. Packets Out The total number of output packets through this active user session. Bytes Out The total number of output bytes through this active user session. Packets In The total number of input packets through this active user session. Bytes In The total number of input bytes through this active user session. Device Type On the local end of the tunnel, the type of physical device to which this user session is attached These types are described in Table 3. other Table 3: Type Device Types Description Any device that has not been defined. SPECTRUM Enterprise Manager Page8 Cisco VPDN Application

9 Cisco VPDN Application Purpose and Scope asyncinternalmodem async sync virtualaccess bchan xdsl Table 3: cable Type Device Types (Continued) Modem Pool device of an access server. A regular asynchronous serial interface. A regular synchronous serial interface. Virtual Access. An ISDN call. Description Future application with xdsl devices. Future application with Cable modem devices. Device Caller ID The incoming caller identification of the user. This is the originating number that called into the device that initiated the user session. This can be blank since not all devices can provide caller ID information. Multi Link Indicates whether the session is part of a multilink. Note: The following entries will only contain a value for a device of type asyncinternalmodem. Modem Slot Index The Modem Pool database slot index if it is associated with this user session. Modem Port Index The Modem Pool database port index if it is associated with this user session. DS1 Slot Index The DS1 database slot index if it is associated with this user session. DS1 Port Index The DS1 database port index if it is associated with this user session. DS1 Chan Index The DS1 database channel index if it is associated with this user session. Call Start Time The start time of the current modem call. Call Start Index Arbitrary small integer to distinguish modem calls that occurred at the same time tick. SPECTRUM Enterprise Manager Page9 Cisco VPDN Application

10 Cisco VPDN Application Purpose and Scope Cisco VPDN User Failure History View Access: From the Icon Subviews menu for the CiscoVPDNApp Application icon, select User Failure History. This view provides a table of the record of failure entries that can be referenced by a user name. Only a name that has a valid item in the Cisco IOS VPDN failure history table will yield a valid entry in this table. The table has a maximum of 50 entries of which only the most recent 50 will be stored in the table. Index A unique value used to identify an entry in the table. User Name The user name for this entry. Tunnel ID The Tunnel ID for this entry. If it is the initiator of the tunnel, the ID is the HGW/LNS tunnel ID, otherwise it is the NAS/LAC tunnel ID. User ID The user ID of this entry. Local Init Conn Indicates whether the tunnel in which the failure occurred was generated locally or not. Local Name The local name of the VPDN tunnel in which the failure occurred. It will be the NAS/LAC name of the tunnel if the router serves as a NAS/LAC, or the HGW/LNS name of the tunnel if the system serves as the home gateway. The local name is the configured host name of the router. Remote Name The remote name of the VPDN tunnel in which the failure occurred. It will be the home gateway name of the tunnel if the system is a NAS/LAC, or the NAS/LAC name of the tunnel if the system serves as the home gateway. This object can be empty if the failure occurred prior to successful tunnel projection, thus no source name will be available. Source IP The source IP address of the tunnel in which the failure occurred. This IP address is the interface at the initiator end of the tunnel. Dest IP The destination IP address of the tunnel in which the failure occurred. This IP address is the interface at the receiver end of the tunnel. Hist Count Number of multiple failures that have been experienced by this user on this tunnel. Seeing a SPECTRUM Enterprise Manager Page10 Cisco VPDN Application

11 Cisco VPDN Application Purpose and Scope delta of >1 is an indication that the current failure record is the latest in a series of failures. Fail Time The time the failure occurred. Fail Type The type of failure for the entry. Fail Reason The reason for the failure. SPECTRUM Enterprise Manager Page11 Cisco VPDN Application

12 Index A Application View 5 C Cisco VPDN Application 5 Cisco VPDN System Info View 5 Denied User Total 5 Session Total 5 Tunnel Total 5 Type 5 Cisco VPDN Tunnel Attribute View 5 Active Sessions 7 Denied Users 7 Index 6 Local Init Conn 6 Local Ip Addr 7 Local Name 6 Network Service Type 7 Original Cause 6 Remote Endpoint Name 6 Remote Ip Addr 7 Remote Name 6 Soft Shut 7 Source Ip Addr 7 Tunnel Attr State 6 Cisco VPDN Tunnel Session View 7 Bytes In 8 Bytes Out 8 Call Duration 8 Call Start Index 9 Call Start Time 9 Device Caller ID 9 Device Type 8 DS1 Chan Index 9 DS1 Port Index 9 DS1 Slot Index 9 Index 8 Modem Port Index 9 Modem Slot Index 9 Multi Link 9 Packets In 8 Packets Out 8 Tunnel State 8 User Name 8 Cisco VPDN User Failure History View 10 Dest IP 10 Fail Reason 11 Fail Time 11 Fail Type 11 Hist Count 10 Index 10 P Local Init Conn 10 Local Name 10 Remote Name 10 Source IP 10 Tunnel ID 10 User ID 10 User Name 10 Purpose and Scope 4 R Restricted Rights Notice 2 T Trademarks 2 SPECTRUM Enterprise Manager Page12 Cisco VPDN Application