HP Intelligent Management Center Remote Site Manager

HP Intelligent Management Center Remote Site Manager Administrator Guide Abstract This guide contains comprehensive information for network administrators, engineers, and operators who manage the IMC Remote Site Manager. HP Part Number: 5998-3317 Published: December 2012 Edition: 5PW100-20120913

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Acknowledgments Microsoft, Windows, Windows XP, and Windows NT are U.S. registered trademarks of Microsoft Corporation. Adobe and Acrobat are trademarks of Adobe Systems Incorporated. Java and Oracle are registered trademarks of Oracle and/or its affiliates.

Contents 1 Introducing RSM...6 How RSM works...6 Unified remote site management...8 Rich branch network management tools...8 Cross-site device group management...9 2 Managing remote sites...10 Viewing the remote site list...10 Modifying the number of nodes managed by a remote site...10 Modifying a remote site...11 Synchronizing device information from a remote site...11 3 Managing a branch network...12 Logging in to a remote site...12 Viewing the home page...14 Using RSM Resource module...16 Adding devices to RSM...16 Auto discovering devices...16 Adding a device manually...16 Managing devices in views...16 Port group...16 Custom view...17 IP view...18 Device view...19 Performing batch operations...19 Performing advanced search...20 Configuration example...20 Network requirements...20 Configuration guidelines...21 Create a remote site operator group on the IMC primary site...21 Add an administrator to the operator group for remote site A...21 Log in to IMC RSM Administrator Console...22 Add devices through basic auto discovery...22 Schedule an auto-saving plan...23 Using RSM Alarm module...23 Managing real-time alarms...23 Browsing real-time alarms...23 Viewing alarm details from the Real-Time Alarms page...24 Performing alarm actions in the Alarm Details page...24 Viewing the alarm relation report...24 Recovering alarms from the Real-Time Alarms page...25 Deleting alarms from the Real-Time Alarms list...25 Managing all alarms...26 Browsing all alarms...26 Performing alarm actions in the All Alarms page...27 Querying alarms in the All Alarms page...27 Viewing alarm details from the All Alarms page...27 Performing alarm actions in the Alarm Details page...27 Viewing the alarm relation report...28 Customizing the All Alarms list columns...28 Recovering alarms from the All Alarms page...29 Deleting alarms from the All Alarms page...29 Contents 3

Faulty devices...29 Using RSM Performance module...29 Performance View...30 Monitoring Settings...31 Service Monitor...32 Configuration example...32 Network requirements...32 Add monitor instances for bidirectional bandwidth usage of the uplink interface on Device A...33 Create a performance view...34 View the performance view...34 Add service monitors for website Amazon...34 View service monitoring statistics...35 Using RSM Configuration module...35 Deployment Task List...36 Configuration Center...36 Options...37 Configuration example...37 Network requirements...37 Batch upgrade software...38 Compare device configurations...39 Using RSM ACL module...39 ACL Resource...41 ACL Resource List page...42 Rule Set List page...42 Rule List page...43 ACL Devices...43 ACL Deployment...44 Configuration Example...44 Network requirements...44 Create an ACL resource for the server access control...45 Add an ACL rule set to the ACL resource...45 Specify a time range for the rule set...45 Add an ACL rule to the rule set...46 Using RSM VLAN module...47 Global VLAN...47 VLAN Devices...48 VLAN Deployment Task...48 Batch Deploy...48 Configuration example...49 Network requirements...49 Deploy access ports to Switch A...50 Deploy access ports to Switch B...50 Deploy VLANs 100, 200, and 300 to the core switch...50 Deploy trunk ports in batches through Batch Deploy...51 View task execution and VLAN deployment...51 Using RSM Network Assets module...52 Network Assets...52 Asset Audit...53 Asset OID...53 Options...53 Configuration example...54 Network requirements...54 View asset details...54 Export asset information...54 View audit information...55 4 Contents

Using RSM Report module...55 Report Template List...56 All Scheduled Reports...56 Quick Report Template List...57 Options...57 Configuration example...57 Network requirements...57 View the real-time capacity report...58 Customize a scheduled report...58 4 Managing device groups...60 Viewing the device group page...60 Configuration example...61 Creating an Internet egress device group...61 Assigning devices to the device group...61 Viewing the device list...62 5 Support and other resources...63 Contacting HP...63 Subscription service...63 Related information...63 Documents...63 Websites...63 Typographic conventions...63 Port numbering in examples...64 About HP IMC documents...64 Customer self repair...65 6 Documentation feedback...66 Index...67 Contents 5

1 Introducing RSM Remote Site Manager (RSM) is a separate IMC service component that interacts with the IMC Platform to deliver centralized management for branch networks, regardless of their physical locations and the presence of firewalls and NAT devices. A special IMC Platform/RSM model is used to reduce management costs by eliminating various NMSs deployed at each branch network and deliver management features. The model comprises an IMC Platform system deployed at the corporate headquarters and multiple copies of the RSM component installed at branch networks. It can traverse the Internet or WAN through RESTful API to manage the devices on branch networks protected by firewalls or NAT. The IMC Platform and RSM can communicate via HTTP (or HTTPS to ensure secure data transmission over non-private WAN links or the Internet). In addition, developed based on the IMC Platform, RSM uses the same GUI elements and functional modules as the IMC Platform. The IMC Platform/RSM model delivers the following advantages: Uses the browser/server model rather than the client/server model to provide branch network management by simply logging in to the network management system from a browser. Eliminates the need for devices in branch networks to support special network management protocols, and manages branch networks as easily as the local network of the headquarters. Manages each branch network as an independent unit, supports overlapping IP networks in branch offices and the headquarters data center, and supports auto discovery of local devices by each remote site. Monitors the status of Internet, DHCP, and DNS services for branch networks. Supports grouping of cross-site devices (including those on the headquarters data center and branch networks) for unified management. Provides a variety of management tools for branch network management based on the Fault, Capacity, Accounting, Performance, and Security (FCAPS) model. How RSM works Firewalls or NAT devices are usually deployed to the Internet or WAN egress of branch networks. They interrupt SNMP, SSH, or Telnet traffic which is typically used for internal network management. RSM solves this problem. RSM is deployed inside each branch network and manages the local network by using SNMP, Telnet, and SSH. RSM on each branch network interacts with the IMC Platform as a agent to report information by using RESTful API. HTTP or HTTPS is used to transmit data between the IMC Platform and RSM. On insecure links, HTTPS is recommended to be used in conjunction with Secure Socket Layer (SSL) for data security. The following example describes how RSM works on a company's headquarters network and its branch networks. As shown in Figure 1, the network of company J is composed of the data center at the headquarters and four branch networks. At the egress of each branch network, a firewall or NAT device is deployed to access the Internet for communication with the data center. All branch networks and the data center are separated from each other. They use self-planned IP addresses, resulting in existence of overlapping IP addresses in the entire company network. Branch network users need to access websites and use other web services and have their service status monitored. 6 Introducing RSM

Figure 1 RSM application for company J To manage branch networks by using RSM, follow these steps: 1. Install the IMC Platform on the server at the corporate headquarters (hereinafter referred to as the primary site) to manage the data center network and branch networks. For information about installing the IMC Platform, see HP IMC Installation Guide. 2. Install the RSM component on the server of each branch network (hereinafter referred to as remote site) to manage devices on the branch network and to communicate with the primary site. The installation process is similar to that for IMC Standard Edition. During RSM installation, you must specify the URL of the primary site IMC, enter the username and password of the administrator who can manage the primary site, and set the number of nodes to be managed by the RSM component. For information about installing RSM, see HP IMC Installation Guide. 3. When the remote site is successfully installed, log in to the primary site as the headquarters administrator, and use the Remote Site Manager menu in the navigation tree to view and manage remote sites, as shown in Figure 2. Figure 2 Remote Site page on the primary site How RSM works 7

The headquarters administrator can enter the remote site page by clicking the IP address of a remote site on the list to remotely manage devices for that branch network. 4. A branch network administrator can log in to IMC RSM Administrator Console as an RSM operator to manage the local network. RSM operators are created on the primary site in the same way as IMC Platform operators. Their operation privileges include the Access Remote Site option. For information about creating IMC Platform operators, see HP IMC Base Platform Administrator Guide. 5. Register node licenses, which determine the number of manageable nodes for each remote site. The total number of manageable nodes allowed by node licenses applies to both the primary site and all remote sites. You should reasonably plan the number of manageable nodes for the primary site and each remote site. Register RSM licenses on the primary site, which determine the number of manageable remote sites. NOTE: The IMC Platform can manage a maximum of 50 remote sites, and a remote site can manage a maximum of 1000 devices. Unified remote site management Traditionally, scattered branch offices require separate network management applications to manage their respective networks. This results in high cost and management complexity. The IMC Platform/RSM model solves the problem by integrating branch network management into the headquarters network management platform for centralized management. From the primary site, administrators can have a clear picture of branch network operations, define and distribute management policies for branch networks, check the reachability of each RSM server, synchronize device information from each RSM server, and adjust the number of manageable nodes for each RSM server based on the actual network capacity. Rich branch network management tools RSM provides rich management tools based on the FCAPS model. Administrators can log in to RSM from both the primary site and remote sites to view branch network topologies, device alarms, device performance, and device configuration, configure and deploy ACLs and VLANs, manage network assets, customize various statistical reports, and query statistics. 8 Introducing RSM RSM provides the following management functions to branch networks: Network Resource Management RSM can automatically discover and manage devices on the local network. RSM adds devices to different views by IP address and device type to facilitate view-based management. Most views correspond to a network topology, which offers information about devices, links, MSTP instances, and traffic. RSM also supports visualized operations, including adding devices, links, and clouds to a network topology, and changing the topology background picture. Alarm Management With this feature, administrators can view alarms and faulty devices that generate alarms on the network, and recover, acknowledge, and edit maintenance experience for alarms. Administrators can further identify the root causes and concerned devices of the alarms from alarm relation reports. Performance Management With this feature, administrators can configure performance indexes for monitoring devices in the network, and present statistical performance data in a graph. Performance management helps administrators promptly identify devices with pressure on performance, and avoid network bottlenecks by judging performance data trends from the performance view. Device Configuration Management This feature allows administrators to deploy, restore, compare, and baseline device configuration files, and to deploy and recover software. With this feature, administrators can view the current software version of each device, check whether the software needs to be upgraded, and upgrade software in batches. Administrators can also compare configurations to promptly identify configuration changes. The preceding

configuration operations are tracked as tasks, which can be started, suspended, restored, or deleted as needed. ACL Management To simplify ACL management, RSM offers the function of organizes ACL rules into ACL resources that can be further applied to devices as needed. Administrators can configure and deploy ACLs by using an ACL configuration wizard, without entering any command lines in the configuration process. VLAN Management With this feature, administrators can deploy VLANs, access ports, trunk ports, and hybrid ports to devices, and track the execution of the deploy tasks. Network Asset Management RSM offers audit information about the devices, modules, and chassis on the network. It can identify and manage third-party devices by configuring asset OIDs of these devices.d track the execution of the deploy tasks. Statistical Reports RSM predefines 20 types of report templates for collecting resource, alarm, and performance data. It also supports custom reports generated by the iar tool, daily, weekly, and monthly reports, and quick reports based on device details and link details templates. Cross-site device group management Administrators at the primary site can create cross-site device groups, view top 10 device groups by device count, top 10 device groups by faulty device count, the local device status statistics graph, and the status statistics graph for both local devices and remote site devices. Device grouping helps the administrator reduce the management scope and focus only on important devices. For example, by grouping the core device in each remote site together in a core device group, administrators can monitor the core devices through the group status, and quickly locate and handle any core device that becomes faulty. Cross-site device group management 9

2 Managing remote sites The primary site allows you to view remote site information, modify remote site information, modify the number of manageable nodes for a remote site, and synchronize device information from remote sites. Viewing the remote site list 1. Click the Resource tab. 2. Select Remote Site Manager > Remote Sites from the navigation tree. The Remote Site List page appears. The Remote Site List contains: Status Remote site status from the last polling by the primary site: Unreachable ( ) or Reachable( ). Last Status Change Name Time when the status of the remote site last changed. Name of the remote site. The default name is the IP address of the remote site. Operators can modify the name as needed by clicking the Modify Remote Site icon. IP Address Description IP address of the remote site automatically identified by the primary site. Click the IP address to enter the branch network management page on the remote site. Description of the remote site. The default description is the IP address of the remote site. Operators can modify the description as needed by clicking the Modify Remote Site icon. Node Allocation Modify Remote Site Synchronize Device Info Node allocation status on the remote site, which is expressed by a percentage, a bar graph, and a fraction that consists of the number of managed nodes divided by the total number of manageable nodes for the remote site. The fraction also serves as a link to modify the number of manageable nodes for the remote site. Click the Modify Remote Site icon to modify the name and description of the remote site.anageable nodes for the remote site. The fraction also serves as a link to modify the number of manageable nodes for the remote site. Click the Synchronize Device Info icon to manually synchronize device information from the remote site. Generally, the primary site periodically synchronizes device information from remote sites. Perform manual device synchronization after communication with the remote site was once interrupted. 3. Click Refresh to refresh the Remote Site List. NOTE: You can sort the Remote Site List by the Status, Last Status Change, Name, IP Address, and Description fields. Simply click the column label to sort the list by the selected field. The column label is a toggle switch that allows you to toggle between the various sort options specific to each field. Modifying the number of nodes managed by a remote site The primary site and all remote sites share the total number of manageable nodes permitted by the purchased license. When setting up a remote site, set the number of manageable nodes for the remote site. When network capacity changes, the administrator can increase or reduce the number of manageable nodes for the remote site as needed. 10 Managing remote sites

1. Click the Resource tab. 2. Select Remote Site Manager > Remote Sites from the navigation tree. The Remote Site List page appears. 3. Click the number link on the Node Allocation column for the target remote site. The Modify nodes managed by the remote site page appears. 4. Enter the number of manageable nodes, or click the Move up or Move down icon for adjustment. One click on the Move up or Move down icon increases or reduces the value by 25. The minimum value allowed is the number of nodes currently managed by the remote site. The maximum value allowed is the number of manageable nodes minus those managed by the primary site and those allocated to all other remote sites, but it cannot exceed the upper limit 1000. 5. Click OK. Modifying a remote site To modify the name and description of the remote site: 1. Click the Resource tab. 2. Select Remote Site Manager > Remote Sites from the navigation tree. The Remote Site List page appears. 3. Click the Modify Remote Site icon for the remote site to be modified. 4. Enter a name of 1 to 32 characters and a description of 0 to 128 characters. 5. Click OK. Synchronizing device information from a remote site When a remote site loses communication with the primary site, the device information on the latter might be inconsistent with that of the remote site. Operators can manually synchronize device information from the remote site after the communication is restored. To synchronize device information from a remote site: 1. Click the Resource tab. 2. Select Remote Site Manager > Remote Sites from the navigation tree. The Remote Site List page appears. 3. Click the Synchronize Device Info icon for the target remote site. The primary site starts to synchronize information about all devices managed by the remote site. 4. Click Refresh to view the synchronization result. Modifying a remote site 11

3 Managing a branch network A headquarters administrator can manage a branch network by logging in to the relevant remote site from the IMC primary site. A branch network administrator can log in to the IMC RSM Administrator Console for local network management. A remote site provides the major network management functions available on the IMC Platform, such as Alarm, Performance, Configuration, ACL, and Network Assets. Logging in to a remote site Operators can access a remote site from the primary site or directly by entering the address of the remote site. Operators are provided with the same remote site management functions in these two methods. To log in to a remote site from the IMC primary site: 1. Enter the URL in the browser address bar: http://server-name:port-number/imc, where server-name represents the name of the server where IMC is installed, and port-number represents the TCP port number assigned to IMC. Alternatively, you can replace the server name with the IP address of the server. 2. Enter the operator username and password, and then click Login. Figure 3 Login page for the IMC primary site 3. Click the Resource tab, and then select Remote Site Manager > Remote Sites from the navigation tree. The Remote Site List page appears, as shown in Figure 4. 4. Click an IP address link on the Remote Site List. The remote site management home page appears. If a remote site is in Unreachable state, its IP address link is invalid. 12 Managing a branch network

Figure 4 Remote Site List page on the IMC primary site 5. To directly log in to a remote site: Enter the URL in the browser address bar: http://server-name:port-number/imc, where server-name represents the name of the RSM server and port-number represents the TCP port number assigned to RSM. Alternatively, you can replace the server name with the IP address of the server. Figure 5 IMC RSM Administrator Console page 6. Enter the operator username and password, and then click Login. The home page appears. The operator account is created on the IMC primary site by jts administrator and must have remote site management rights, with the Access Remote Site option selected, as shown in Figure 6. Logging in to a remote site 13

Figure 6 Granting the remote site management rights to an operator group Viewing the home page As shown in Figure 7, the remote site management home page displays summary information about branch network devices, including latest device status, faulty devices, and top 5 devices with the highest performance pressure and their performance data. From the home page, administrators can quickly locate and browse faulty devices for troubleshooting network problems. 14 Managing a branch network

Figure 7 Home page The home page consists of the following areas: IP address link Located on the top left corner of the page to provide a link to the management home page of the current remote site. Functional menu Located on the top right part of the page to provide links to various functional modules. The functional menu varies with the deployed components. Figure 8 shows the complete functional menu when all components for RSM are deployed after a typical installation. The functional menu contains fewer items if only partial of the components are deployed after a custom installation. Custom View Snapshot Displays all custom views and their status (represented by the severest alarm generated by the devices in the view). You can click a view name to enter the relevant custom view. A remote site supports one custom view only, with the view name My Network View. With My Network View, you can view the devices topology, add devices to or delete devices from the view, and ping or traceroute to a device in the view. For details, see IMC Base Platform Administrator Guide for resource management information. View Snapshot Displays views by device type, including routers, switches, servers, storage devices, voice devices, desktops, and others. With View Snapshot, you can view the number of devices for each device type and the current alarm status for each view (represented by the severest alarm generated by the devices in the view). For details, see IMC Base Platform Administrator Guide for resource management information. Faulty Device List Displays a maximum of 10 devices that have generated alarms and marks alarm levels with colors. Click the icon for a faulty device to enter the Device Details page, on which you can view alarm details and fix the device fault. For details, see IMC Base Platform Administrator Guide for resource management information. Performance statistics Provides statistics of the top 5 devices with the highest performance pressure, including CPU usage, memory usage, response time, unreachability proportion, interface incoming traffic, and interface outgoing traffic. The monitor indexes are the same as the default monitor indexes configured on the IMC primary site. For information about modifying the default monitor indexes, see IMC Base Platform Administrator Guide for configuring IMC for use. RSM provides the major functional modules of the IMC Platform to manage branch networks, including Resource, Alarm, Performance, Configuration, ACL, VLAN, Network Assets, and Report. They are described in the following sections. Viewing the home page 15

Using RSM Resource module The RSM Resource module centrally manages devices and interfaces on the remote site. It is a functional subset of IMC Platform Resource Management and provides the following functions: Adding devices: RSM provides two methods for adding devices. You can manually add devices one by one, or perform auto discovery to automatically add devices on the network in batches. Network views: RSM supports port group views, custom views, IP views, and device views. Other operations: Batch operations and advanced search. To manage a remote site in RSM for the first time, you must add devices manually or through auto discovery. After that, you can view device information and network topologies through views and configure the devices. The batch operations provided by RSM are classified into the following categories: NMS Parameter Configuration, Check Configuration, and Device Configuration. With the batch operations, operators can configure device settings (such as SNMP and Telnet settings), save device configurations, and reboot devices in batches. In addition, RSM provides the advanced search feature for operators to quickly locate interfaces or devices in the network. For information about other resource management functions, see IMC Base Platform Administrator Guide for resource management information. Adding devices to RSM You can manage the devices on a remote site in RSM only after you add them to RSM. RSM can automatically add devices through auto discovery. Alternatively, you can manually add devices one at a time (for example, in the case of capacity expansion). Auto discovering devices To access the Auto Discovery page, select Resource > Auto Discovery from the functional menu of the home page. Two auto discovery modes are available: basic and advanced. The basic mode allows you to discover devices on one or multipe IP segments. The advanced mode provides the following methods for discovering devices: routing-based, ARP-based, network segment-based, IPsec VPN-based, and PPP-based. This mode is sufficient for adding large numbers of access layer devices that have the same SNMP, Telnet, or SSH settings. To correctly discover devices, make sure you specify the same SNMP, Telnet, or SSH parameters in RSM as those configured on the devices. Adding a device manually To access the Add Device page, select Resource > Add Device from the functional menu of the home page. Enter the IP address or host name of the device to be added, select a login type, and configure SNMP, Telnet, or SSH settings. To correctly add devices, make sure you enter the same SNMP, Telnet, or SSH parameters in RSM as those configured on devices. Managing devices in views Port group RSM supports the port view, custom view, IP view, and device view, from which administrators can access and manage devices by port, IP address, and device type. To access the Port Group List page, select Resource > Port Group from the functional menu of the home page. 16 Managing a branch network

The administrator can centrally manage important interfaces by adding them to the same port group to promptly locate any faulty interface. As shown in Figure 8, the Connecting Internet port group contains two interfaces, both of which are in up state. This port group is used to manage interfaces connecting to the Internet. Figure 8 Connecting Internet port group Custom view To access the custom view, select Resource > Custom View from the functional menu of the home page. The custom view is predefined with the name My Custom View, and RSM does not support creating custom views other than the predefined one. The custom view contains information about all devices on the branch network and consists of the Device List tab and the Topology tab. With the Device List, the administrator can view device information, ping a device, add devices, add monitors for a device, and so on, as shown in Figure 9. Figure 9 Device List tab of the custom view The Topology tab displays the branch network topology with a toolbar on the top. With the toolbar, the administrator can adjust the view, display network information such as the VLAN view and the traffic topology, add links or remarks to devices, and perform other operations, as shown in Figure 10. Using RSM Resource module 17

Figure 10 Topology tab of the custom view IP view To access the IP view, select Resource > IP View from the functional menu of the home page. The IP view presents devices based on the network segments to which the management IP addresses of the devices belong. With the IP view, the administrator can easily manage networks by IP segment. Figure 11 IP view page 18 Managing a branch network

Device view To access the device view, select Resource > Device View from the functional menu of the home page. With this view, the administrator can view information about all devices. This view provides basically the same functions as the Device List tab of the custom view, as shown in Figure 12. Figure 12 Device view page Performing batch operations To access the Batch Operation page, select Resource > Batch Operation from the functional menu of the home page. As shown in Figure 13, the system provides the following categories of batch operations: NMS Parameter Configuration, Check Configuration, and Device Configuration. These batch operations can reduce repetitive administrative operations and improve maintenance efficiency. Figure 13 Batch operation page Using RSM Resource module 19

Performing advanced search batch operations To access the Advanced Search page, select Resource > Advanced Search from the functional menu of the home page. This function allows you to quickly query devices or interfaces by using a variety of optional query conditions, as shown in Figure 14 and Figure 15, respectively. Figure 14 Advanced Search-Query Devices Figure 15 Advanced Search-Query Interfaces Configuration example Network requirements As shown in Figure 16, add devices of Remote Site A to RSM for management, and configure RSM to save configurations automatically for Switch A, Switch B, and the core switch at a specified time. 20 Managing a branch network

Figure 16 Network diagram for remote site A Configuration guidelines Create a remote site administrator named sitea_admin at the primary site, and set the password to sitea987. Log in to RSM as the remote site administrator, add local devices to RSM in batches through segment-based auto discovery, and schedule a plan to automatically save device configurations at a specified time. Create a remote site operator group on the IMC primary site 1. Navigate to System >Operator Group. a. Click the System tab from the tabular navigation system on the top. b. Click Operator Management on the navigation tree on the left. c. Click the Operator Group icon under Operator Management from the navigation system on the left. IMC displays all operator groups in the Operator Group List displayed in the main pane of the System > Operator Group window. 2. Click Add. 3. Enter Remote Site Operator in the Group Name field. 4. Select ADMIN from the Privilege list. 5. Enter This operator group is granted access to remote sites in the Description field. In this step, grant or restrict access to IMC features for the Operator Group. Click the Expand all icon to view all Operator Privileges. Make sure you select Access Remote Site. 6. Click OK to create the operator group. Add an administrator to the operator group for remote site A 1. Navigate to System >Operator. Using RSM Resource module 21

a. Click the System tab from the tabular navigation system on the top. b. Click Operator Management on the navigation tree on the left. c. Click the Operator icon under Operator Management from the navigation system on the left. 2. Click Add. The Add Operator page appears. 3. Enter sitea_admin in the Login Name field. 4. Select Password from the Authentication Type list. 5. Enter sitea987 in the Password field. 6. Re-enter sitea987 in the Confirm Password field. 7. The Idle Timeout option allows you to configure for how long IMC sessions will remain open and active while not in use. Select Same as System Settings if you want to apply system wide settings to this operator account. Select Configure Individually if you want to configure the Idle Timeout for this operator. Enter the idle timeout in minutes for this operator in the field located to the right of the Idle Timeout list. 8. Select the Remote Site Operator from the Operator Group list. 9. Click OK to accept the operator configuration. Log in to IMC RSM Administrator Console 1. Enter the URL for the RSM server in your browser: http://172.2.0.111:8080/imc 8080 is the TCP port assigned to RSM. 2. Enter sitea_admin in the Operator field. Enter sitea987 in the Password field. 3. Click Login or press Enter. Add devices through basic auto discovery 1. Select Resource > Auto Discovery. Confirm that you are in Basic mode. 2. Enter 172.2.0.2 as the start IP address in the Start IP field. 3. Enter 172.2.0.230 as the end IP address in the End IP field. Click Add to add the IP address range. 4. Enter public in the SNMP Read Community field. The value must be consistent with that configured on the devices to be managed. 5. Enter private in the SNMP Write Community field. The value must be consistent with that configured on the devices to be managed. 6. Select Username+Password from the Telnet Authentication Mode list. The value must be consistent with that configured on the devices to be managed. 7. Enter admin in the Telnet Username field. The value must be consistent with that configured on the devices to be managed. 8. Enter admin123 in the Telnet Password field. The value must be consistent with that configured on the devices to be managed. 9. Click Auto Discovery. After the auto discovery is complete, you can view and configure the discovered devices from the device view, custom view, or IP view. 22 Managing a branch network

Schedule an auto-saving plan 1. Select Resource > Batch Operation. 2. Click Edit Plan next to Save Configuration. The Plan List page appears. 3. Click Add. The Save Configuration page appears. 4. Click Add, select Switch A, Switch B, and Core Switch from the menu that appears, and click OK. 5. Select Once from the Schedule Information list, and then click the calendar icon to set the time to 2012-06-29 17:40:19. 6. Click OK. The auto-saving plan appears on the Plan List, as shown in Figure 17. With the plan, RSM will save configuration files of the selected devices at the specified time. Figure 17 Auto-saving plan Using RSM Alarm module Through device alarms, the administrator can quickly identify and handle network faults. The RSM Alarm module generates alarms from traps and syslogs according to the rules configured on the IMC primary site, and processes device alarms on the branch network. In addition to system-defined alarms, you might need to configure alarm variable matching rules on the IMC primate site so RSM can identify other alarms generated on the branch network. RSM Alarm is a functional subset of IMC Platform Alarm Management and includes Real-Time Alarms, All Alarms, and Faulty Devices. For more details on event and alarm management, see IMC Base Platform Administrator Guide. Managing real-time alarms The Real Time Alarms List provides you with a view of the last 50 unrecovered alarms in real time. In addition, you can view the particular details of an individual alarm, take action on the selected alarm including recover, acknowledge, delete or annotate an alarm and print or export the individual alarm details. Browsing real-time alarms 1. Select Alarm > Real-Time Alarms from the functional menu of the home page. The Real-Time Unrecovered Alarms list appears, which displays the 50 most recent real-time unrecovered alarms. The Real-Time Unrecovered Alarms List contains: Level Contains the alarm or severity level of the alarm. For more information on alarm or severity levels, see IMC Base Platform Administrator Guide. Alarm Source Contains the name and IP address of the device to which this alarm refers. Device names and device IP addresses that are grayed out indicate either that the alarm is generated by the IMC server or that the device is unmanaged. This field contains an active link to navigate you to the Device Details page for the source of this alarm. Click this link to navigate to details on the source device of this alarm. Type Contains the source type of this alarm. This field identifies whether the alarm was generated by a trap, by IMC, or by a Syslog entry. Using RSM Alarm module 23

Description Contains a description of the condition that triggered this alarm. This field contains an active link to navigate you to the Alarm Details page for this alarm. The Alarm Details page provides more detailed information for each alarm. For more information on the Alarm Details page, see IMC Base Platform Administrator Guide. This field also contains a link to the Crystal Reports Alarm Relation Report. For more information on this report, see IMC Base Platform Administrator Guide. Alarm At Contains the date and time stamp for IMC's receipt of this alarm. 2. Modify the refresh rate for this page by clicking the Refresh Interval list located in the upper right corner of the Real-Time Unrecovered Alarms view. You can only view alarms for devices over which you have management access and control. In addition, you can recover, acknowledge, or delete alarms for only those devices to which you have write access. Viewing alarm details from the Real-Time Alarms page 1. Select Alarm > Real-Time Alarms from the functional menu of the home page. 2. Locate and click the link in the Description field in the Real-Time Unrecovered Alarms list for the alarm you want to view details for. Performing alarm actions in the Alarm Details page To take actions on the alarm in the Alarm Details page: 1. Locate the Action navigation tree located on the right of the Alarm Details page. 2. Click the Recover icon to recover the alarm. Recovering an alarm has the effect of clearing it in IMC. When an alarm has been recovered, the selected alarm instance is removed from IMC browsing and notification functions. NOTE: There might be a time lag between recovering or clearing an alarm and its removal from IMC Alarm browsing views. 3. Click the Acknowledge icon to acknowledge the alarm. 4. Click the Delete icon to delete the alarm. 5. Click the Edit Maintenance Experience icon to annotate the alarm with maintenance notes. 6. Enter your maintenance notes in the Maintenance Experience field in the Edit Maintenance Experience dialog box. 7. Click the Alarm Relation Report icon to view the report for this alarm 8. Click the Back icon to return to the previous page. Viewing the alarm relation report To view the Alarm Relation Report: 1. Locate the Action navigation tree located on the right of the Alarm Details page. 2. Click the Alarm Relation Report icon to view the report for this alarm. 3. With the Alarm Relation Report, you can view and print to PDF a formatted report that includes the details of individual alarms. In addition, you can export the data in the Alarm Relation Report to Microsoft Excel (XLS), Microsoft Word (DOC), Adobe Acrobat (PDF), Comma Separated Value (CSV), or Rich Text Format (RTF). 24 Managing a branch network

To print and export the Alarm Relation Report: 1. Click the Alarm Relation Report icon located on the Action navigation tree on the right of the Alarm Details page. The Alarm Relation Report is displayed in the Intelligent Analysis Report Viewer window. 2. Click the Print icon located on the toolbar on the top of the Alarm Relation Report. 3. Select the desired page range from Page Range. 4. Click Print. 5. To export the Alarm Relation Report, click the Export icon located on the toolbar on the top of the Alarm Relation Report. 6. Select the desired export file format from the File Format list. Options include Crystal Reports (RPT), Adobe Acrobat (PDF), Microsoft Excel (97-2003), Microsoft Excel (97-2003) Data Only, Microsoft Word (97-2003) Editable, Rich Text Format (RTF), and Comma Separated Values (CSV). 7. Select the desired page range from Page Range. 8. Click Export. Recovering alarms from the Real-Time Alarms page You can recover one or more alarms from the Real-Time Unrecovered Alarms list. Recovering an alarm has the effect of clearing it from the real-time view. When an alarm has been recovered, the selected alarm instance is considered resolved and removed from notification functions, though recovered alarms can still be viewed from the All Alarms view. Recovered alarms are removed from the alarms database according to the configuration for Data Export. For more information on the Data Export feature, see IMC Base Platform Administrator Guide for information on configuring IMC for use. To recover one or more alarms from the Real-Time Alarms page: 1. Select Alarm > Real-Time Alarms from the functional menu of the home page. 2. Select the real-time alarms you want to recover. 3. Click Recover located in the upper left corner of the Real-Time Unrecovered Alarms window. Deleting alarms from the Real-Time Alarms list Deleting alarms is one way of removing alarms from the alarms database. However, HP does not recommend this method because deleting an alarm removes the event from the alarm database and along with it the ability to report on it. Alarm histories are a valuable data source for performance management of the network infrastructure and this should be considered before deleting alarms. Rather than deleting, you can recover an alarm. Recovering an alarm clears it from IMC alarm views while retaining it in the alarm database for a period of time. You can configure the data export function to export the Alarm database in order to keep a history of alarms. For more information on data exporting, see IMC Base Platform Administrator Guide. To delete an alarm: 1. Select Alarm > Real-Time Alarms from the functional menu of the home page. 2. Select the real time alarms you want to delete. 3. Click Delete located in the upper left corner of the Real-Time Unrecovered Alarms page. 4. Click OK when prompted to confirm deletion. Using RSM Alarm module 25

Managing all alarms The All Alarms List provides a view of all alarms, root and symptom, recovered or cleared and unrecovered. From the All Alarms view, you can also query the alarm database through search capabilities and save those searches for future use. In addition, you can view the particular details of an individual alarm, take action on the selected alarm including recover, acknowledge, delete or annotate an alarm and print or export the individual alarm details. Browsing all alarms To browse all alarms: 1. Select Alarm > All Alarms. IMC displays all alarm entries in the Alarm List displayed in the main pane of the All Alarms window. Alarm list: Level Contains the alarm or severity level of the alarm. For more information on alarm or severity levels, see IMC Base Platform Administrator Guide for information on exploring the IMC interface. Alarm Source Contains the name and IP address of the device to which this alarm refers. Device names and device IP addresses that are grayed out indicate that the alarm is generated by the IMC server or an unmanaged device. This field contains an active link to navigate you to the Device Details page for the source of this alarm. Click this link to navigate to details on the source device of this alarm. Type Contains the source type of this alarm. This field identifies whether the alarm was generated by a trap, by IMC, or by a Syslog entry. Description Contains a description of the condition that triggered this alarm. This field contains an active link to navigate you to the Alarm Details page for this alarm. The Alarm Details page provides more detailed information for each alarm. For more information on the Alarm Details page, see IMC Base Platform Administrator Guide. This field also contains a link to the Crystal Reports Alarm Relation Report. For more information on this report, see IMC Base Platform Administrator Guide for information on event and alarm management. Recovery Status Contains information on whether or not the alarm is recovered or unrecovered. Acknowledgement Status Contains information on whether or not the alarm has been acknowledged or not. If the alarm has been acknowledged, it contains the name of the operator who acknowledged the alarm. Alarm At Contains the date and time stamp for IMC's receipt of this alarm condition. Recovered At Contains the date and time stamp for the recovery or clearing of this event. Persisted Time Contains the duration of the error condition. Persisted time is measured as the amount of time that transpired since the receipt of the event that triggered an alarm and the resolution of the event. You can sort the All Alarms list by the Type, Level, Alarm Source, Description, Recovery Status, Acknowledgement Status, Alarm at, and Recovered at fields. Click the column label to sort 26 Managing a branch network

the list by the selected field. The column label is a toggle switch that lets you toggle between the various sort options specific to each field. Click the Next Page icon to page forward in the All Alarms list. Click the Last Page icon to page forward to the end of the All Alarms list. Click the Previous Page icon to page backward in the All Alarms list. Click the First Page icon to page backward to the front of the All Alarms list. 2. Click 8, 15, 50, 100, or 200 from the right side of the main pane to configure how many items per page you want to view. 3. For lists that have more than one page, click 1, 2, 3, 4, 5, 6, 7, 8, 9, 10 from the upper middle of the main pane to jump to a particular page of the list. You can only view alarms for devices over which you have management access and control. In addition, you can recover, acknowledge or delete alarms for only those devices to which you have write access. Performing alarm actions in the All Alarms page To take actions on the alarm in the All Alarms list: 1. Select the alarms you want to take action on from the Alarm List. 2. Click Recover to recover the selected alarms. There might be a time lag between the recovering or clearing of an alarm and its removal from IMC Alarm browsing views. 3. Click Acknowledge to acknowledge the selected alarms. 4. Click Delete to delete the selected alarms. Querying alarms in the All Alarms page The All Alarms page lets you search the IMC Alarms database. For more information on querying alarms in IMC, see "Managing all alarms." Viewing alarm details from the All Alarms page To view alarm details: 1. Select Alarm > All Alarms from the functional menu of the home page. 2. Locate and click the link in the Description field in the All Alarms list for the alarm you want to view details for. Performing alarm actions in the Alarm Details page To take actions on the alarm in the Alarm Details page: 1. Locate the Action navigation tree on the right of the Alarm Details page. 2. Click the Recover icon to recover the alarm. Recovering an alarm has the effect of clearing it from the view. When an alarm has been recovered, the selected alarm instance is considered resolved and removed from notification functions, though recovered alarms can still be viewed from the All Alarms view. Recovered alarms are removed from the alarms database according to configuration for Data Export. For more information on IMC's Data Export feature, see IMC Base Platform Administrator Guide. There might be a time lag between the recovering or clearing of an alarm and its removal from IMC Alarm browsing views. 3. Click the Acknowledge icon to acknowledge the alarm. Using RSM Alarm module 27

4. Click the Delete icon to delete the alarm. 5. Click the Edit Maintenance Experience icon to annotate the alarm with maintenance notes. Enter your maintenance notes in the Maintenance Experience field in the Edit Maintenance Experience dialog box. 6. Click the Alarm Relation Report icon to view the report for this alarm. 7. Click the Back icon to return to the previous page. Viewing the alarm relation report To view the Alarm Relation Report: 1. Locate the Action navigation tree on the right of the Alarm Details page. 2. Click the Alarm Relation Report icon to view the report for this alarm. With the Alarm Relation Report, IMC operators can view and print to PDF a formatted report that includes the details of individual alarms. In addition, operators can export the data in the Alarm Relation Report to XLS, DOC, PDF, CSV, or RTF. 3. Click the Alarm Relation Report icon located on the Action navigation tree on the right of the Alarm Details page. The Alarm Relation Report is displayed in the Intelligent Analysis Report Viewer window. Printing to PDF 1. Click the Print icon located on the toolbar on the top of the Alarm Relation Report. 2. Select the desired pages from Page Range. 3. Click Print. Exporting alarm relation report data 1. Click the Export icon located on the toolbar on the top of the Alarm Relation Report. 2. Select the desired export file format from the File Format list. Options include Crystal Reports (RPT), Adobe Acrobat (PDF), Microsoft Excel (97-2003), Microsoft Excel (97-2003) Data Only, Microsoft Word (97-2003) Editable, Rich Text Format (RTF), and Comma Separated Values (CSV). 3. Select the desired pages from Page Range. 4. Click Export. Customizing the All Alarms list columns Operators can customize the All Alarms list to meet their individual alarm view needs. 1. Select Alarm > All Alarms from the functional menu of the home page. 2. Click the Custom the table columns link to the far right in the Alarm List. The Custom the table columns dialog box appears. 3. Deselect the names of the columns you want to remove from the All Alarms list. 4. Reorder the appearance of one or more columns in the list by using the Compositor icons located to the right of each column name: Use to move the column to the leftmost position, or Use to move the column one position to the left, or 28 Managing a branch network

Use to move the column one position to the right, or Use to move the column to the rightmost position. 5. Click OK to save your changes. 6. Click Default to restore the All Alarms list to its default appearance. Recovering alarms from the All Alarms page Operators can recover one or more alarms from the All Alarms list. Recovering an alarm has the effect of clearing it from the view. When an alarm has been recovered, the selected alarm instance is considered resolved and removed from notification functions, though recovered alarms can still be viewed from the All Alarms view. Recovered alarms are removed from the alarms database according to configuration for Data Export. For more information on IMC's Data Export feature, see IMC Base Platform Administrator Guide. To recover one or more alarms from the All Alarms page: 1. Select Alarm > All Alarms from the functional menu of the home page. 2. Select the alarms you want to recover. 3. Click Recover located in the upper left corner of the All Alarms window. Deleting alarms from the All Alarms page Faulty devices To delete an alarm from the All Alarms list: 1. Select Alarm > All Alarms from the functional menu of the home page. 2. Select the alarms you want to delete. 3. Click Delete located in the upper left corner of the All Alarms List page. 4. Click OK to confirm deletion of the selected alarms. The Faulty Devices view offers you a graphical view of devices in the network infrastructure that are reporting errors. From this view, you can navigate to the device details page for quick access to devices that are reporting errors. To access the Faulty Devices view, select Alarm > Faulty Devices from the functional menu of the home page. To view updates to the Faulty Device List, click Refresh located in the upper left corner of the page. IMC rechecks the alarms database and update the Faulty Device List. Graphical icons and device names and IP addresses are displayed in the Faulty Devices List for those devices that are reporting errors. To view alarms for these devices, click on the icon or device name to drill down to the Device Details page. For details on navigating the Device Details page, see IMC Base Platform Administrator Guide for information on resource management. Operators can only view devices that they have been granted management access to. The color of a device icon in the Faulty Devices List represents the severest alarm generated by the device. If a device's most severe alarm condition is Info, the device is not displayed in the Faulty Devices List as these alarms are ignored. Using RSM Performance module Packet loss or delay can occur on overloaded network devices, which reduces transmission quality or even interrupts transmission. The RSM Performance module enables you to identify performance bottlenecks in time and generate alarms by monitoring performance indexes of important devices. Using RSM Performance module 29

As shown in Figure 18, RSM Performance uses performance configuration policies of the IMC primary site to monitor the performance of branch networks. RSM also synchronizes the system configuration information of IMC Platform Performance Management from the IMC primary site, including default monitor indexes and performance options. Figure 18 RSM synchronizing system configuration from the IMC Platform RSM Performance is a functional subset of IMC Platform Performance Management and retains three major functions: Performance View, Monitor Settings, and Service Monitor. RSM Performance functions and operations are the same as those of the IMC Platform Performance Management except for the access method. The following sections describe the RSM Performance functions and their respective access methods. For more information about other performance functions, see HP IMC Base Platform Administrator Guide. Performance View The Performance View option presents monitor instances in graphs and allows you to add, modify, and delete performance views. To access the Performance View List page, select Performance > Performance View from the functional menu of the home page. Table 1 shows the supported performance view operations on the page. Table 1 Supported operations Function Adding a performance view Access method Click Add, and then select a view type from the menu that appears, including Trend Line, Data Grid, and At a Glance. Deleting performance views To delete a single performance view, click the Operation icon view, and then click Delete on the menu that appears. for the performance 30 Managing a branch network

Table 1 Supported operations (continued) Function Access method To delete performance views in batches, select the performance views, and then click Delete. NOTE: The system-defined TopN performance view cannot be deleted. Modifying the configuration of a performance view Click the Operation icon for the performance view, and then select Modify from the menu that appears. NOTE: You can only modify the contents for Access Right and Description of the TopN performance view. Viewing the configuration of a performance view Click the Operation icon the menu that appears. for the performance view, and then select View from Viewing monitoring statistics of a performance view Viewing Monitoring Instance for a performance view Querying performance views Adding a folder Click the name of the performance view. Click the Monitoring Instance/State column for the performance view. 1. Point to Query on the upper right corner of the Performance View List page. 2. Enter the name of the performance view to be queried in the box that appears. 3. Click Query. Performance views can be added to different folders, which can be managed by operator groups. To add a folder: 1. Click the Add Folder link located to the far right of the Performance View List. 2. On the window that appears, enter the name, select operator groups, and enter the description. 3. Click OK. Monitoring Settings The Monitoring Settings function allows you to add, modify, and cancel a monitor, modify an index, and query monitor data. To access the Monitor List page, select Performance > Monitoring Settings from the functional menu of the home page. Table 2 shows the supported monitor operations on the page. Table 2 Supported operations Function Viewing the Monitor List Adding a monitor Cancelling monitors Modifying indexes Access method Select Performance > Monitoring Settings. To switch between lists by device and by instance, click Switch to Instance List or Switch to Device List on the upper right part of the page. To display only monitored devices, select Only Display Monitored Devices. To display all devices, deselect Only Display Monitored Devices. Click Add Monitor. To cancel a single monitor, click Cancel in the Operation column for the monitor. To cancel monitors in batches, select the monitors, and then click Cancel Monitor. To modify a single index, click Modify Index in the Operation column for the monitor whose index you want to modify. To modify indexes for monitors in batches, select the target monitors, and then click Modify Index. Monitoring Settings 31

Table 2 Supported operations (continued) Function Access method Viewing performance data To view performance data for all monitor instances, click the Data icon. To view performance data for a monitor instance, click the number link in the Instances column, and then click the Data icon appears. for the monitor instance on the page that Querying monitors 1. Point to Query on the upper right corner of the Monitor List page. 2. On the window that appears, enter query conditions, including the device name, IP address, view name, and device series. 3. Click Query. Service Monitor The Service Monitor option allows you to monitor the reachability and response time of common network services, including DHCP, DNS, Internet, RADIUS, and SNMP. To access the Service Monitor List page, select Performance > Service Monitor from the functional menu of the home page. Table 3 shows the supported service monitor operations on the page. Table 3 Supported operations Function Viewing the Service Monitor List Adding a service monitor Deleting monitors Access method Select Performance > Service Monitor. Click Add Monitor. Select the monitors, and then click Delete. Modifying a service monitor Click the Modify icon for the service monitor. Viewing the configuration of a service monitor Starting monitors Stopping monitors Hiding/Showing service monitor view on Performance View List Click the monitor name of the service monitor. To start a single monitor, click the Start Monitor link in the Monitor Status column for the monitor. To start monitors in batches, select the monitors, and then click Start Monitor. To stop a single monitor, click the Stop Monitor link in the Monitor Statuscolumn for the monitor. To stop monitors in batches, select the monitors, and then click Stop Monitor. Click Hide service monitor view or Show service monitor view on the upper right part of the Service Monitor List. Viewing performance data of a service monitor Click the Data icon for the service monitor. Configuration example Network requirements As shown in Figure 19, configure RSM to monitor bidirectional bandwidth usage on Ethernet 1/2 of Device A. Configure service monitoring to monitor whether branch networks can access amazon.com. 32 Managing a branch network

Figure 19 Network diagram Add monitor instances for bidirectional bandwidth usage of the uplink interface on Device A 1. Select Performance > Monitoring Settings. 2. Click Add Monitor at the top of the Monitor List. The Add Monitor page appears. 3. Click Select Device at the top of the Device List. The Select Devices dialog box appears. 4. Click the Advanced tab, enter Device A in the Device Label field, and click Query. 5. Highlight Device A and click the Add selected button to add it to the Selected Devices list. 6. Click OK. Confirm that the devices now appear in the Device List. 7. Select System-Interface Statistics from the Select Index list. The index or indices appear under the selected item. 8. Select Interface In-Bandwidth Usage and Interface Out-Bandwidth Usage options. 9. Click Modify Index in the lower right corner of the Add Monitorwindow. The Modify Index dialog box appears. If you selected multiple types of monitor indices, the dialog box lists the indices in each tab. 10. To set the alarm thresholds, do the following: a. Click the Interface In-Bandwidth Usage tab. b. Deselect Global Index Settings. This disables the application of the default global settings for the selected monitor instances and enables you to configure and apply custom threshold settings. c. Select Threshold 1 to enable the configuration of the settings for the first threshold. d. Select from the Match Mode list. e. Enter the threshold value 50 in the Value 1 field. Configuration example 33

f. Select % from the Measurement list. g. Use the default value in the Repeat Times field. h. Select Warning from the Alarm Level list. i. Use the default value in the Interval (Sec.) field. j. Select Threshold 2 to enable the configuration of the settings for the second threshold. k. Enter 80 in the Value 1 field. l. Select % from the Measurement list. m. Use the default value in the Repeat Times field. n. Select Critical from the Alarm Level list. o. Repeat this step to modify alarm thresholds for Interface Out-Bandwidth Usage. p. Click OK. 11. Select Monitor Up-Interfaces only in the Advanced Option section. 12. Click OK. The monitor instance appears on the monitor list. Create a performance view 1. Select Device A on the Monitoring Settings Result page, and then click Save as New View. 2. Click Next. 3. Click Save. The Add Performance View page appears. 4. Select Trend Line for View Type. 5. Enter Device A Bandwidth in the View Name field. 6. Select the default folder RootFolder. 7. Select Remote Site A Group for the Access Right field. 8. Click OK. 9. Click Close. The new performance view appears in the Performance View List. View the performance view Click Device A Bandwidth in the Name column to view data of the performance view. Add service monitors for website Amazon 1. Select Resource > Add Device. 2. Enter the IP address of the RSM server to add the RSM server to RSM, and click OK. 3. Select Performance > Service Monitor. 4. Click Add Monitor at the top of the Service Monitor List. 5. Enter Testing Amazon in the Monitor Name field. 6. Select Internet Service Monitor from the Select Service Type list. 7. Select Internet Service Unreachability Proportion (%) and Response Time of Internet Service(ms). 8. Enter www.amazon.com in the Web Address field. 9. Click OK. Two monitors (Internet Service Unreachability Proportion and Response Time of Internet Service) appear in the Service Monitor List, as shown in Figure 20. 34 Managing a branch network

Figure 20 Service monitors for website Amazon View service monitoring statistics After a period of time, click the Data icon shown in Figure 21. for either monitor to view monitoring statistics, as Figure 21 Unreachability Proportion for website Amazon is 100% The Performance feature also sends an alarm to notify the administrator of unreachability, as shown in Figure 22. Figure 22 Alarm information Using RSM Configuration module The RSM Configuration module provides batch operations for configuring software and settings in high efficiency. RSM Configuration also allows you to baseline and compare configurations so you can track any change to device configurations and precisely manage critical configurations such as ACL. As a functional subset of the IMC Platform Configuration Center, RSM Configuration includes Deployment Task List, Configuration Center, and Options. RSM Configuration functions and operations are the same as those of the IMC Platform Configuration Center except for the access methods. The following sections describe RSM Configuration functions and their respective access Using RSM Configuration module 35

methods. For information about other Configuration functions, see HP IMC Base Platform Administrator Guide. Deployment Task List The Deployment Task List presents execution of all deployment tasks. Administrators can run, suspend, resume, delete, and copy deployment tasks. To access the Deployment Task List page, select Configuration > Deployment Task List from the functional menu of the home page. Table 4 shows the supported deployment task operations on the page. Table 4 Supported operations Function Running deployment tasks Suspending deployment tasks Resuming deployment tasks Deleting deployment tasks Access method Select one or more tasks, and then click Run. Select one or more tasks, and then click Suspend. Select one or more tasks, and then click Resume. Select one or more tasks, and then click Delete. Modifying a deployment task Copying a deployment task Viewing history Click the Modify icon Click the Copy icon Click the History icon for the deployment task. for the deployment task. for the deployment task to be viewed. Querying deployment tasks In the Query section, select the task type, task subtype, task status, and operation result, and click Query. Configuration Center The Configuration Center function allows you to deploy software and configurations to devices. To access the Configuration Center page, select Configuration > Configuration Center. RSM Configuration uses the configuration templates and software library on the IMC primary site. The software or configuration template to be deployed on a remote site must exist on the IMC primary site. Table 5 shows the supported Configuration Center operations on the Configuration Center page. Table 5 Supported operations Function Deploying software Deploying configuration Backing up configuration Restoring software or configuration Access method Select the devices to which to deploy the software, then click the Deploy Software. Select the devices to which to deploy configuration, then click the Deploy Configuration. Select the devices for which to back up configuration, and then click the Backup Configuration. Click Restore, and select one of the following options on the menu that appears: Restore Device Software Restore Device Software to Baseline Restore Device Configuration Restore Device Configuration to Baseline 36 Managing a branch network

Table 5 Supported operations (continued) Function Performing an operation for a single device Access method Click the Operation icon on the menu that appears: for a device, and select one of the following operations Latest Startup Configuration Latest Running Configuration Configuration Management Clean Device Space Compare with Other Device Configuration Querying devices In the Query section, enter the device name, device model, and current version select a custom view, and click Query. Options The Options feature allows you to configure the system parameters required for RSM Configuration. To access the Options page, select Configuration > Options. Table 6 shows the supported system parameter operations on the page. Table 6 Supported operations Function File Transfer Mode Backup Policy VPN Instance Access method Click the File Transfer Mode tab. Click the Backup Policy tab. Click the VPN Instance tab. Configuration example Network requirements As shown in Figure 23, update software for Switch A and Switch B in batches. Make sure the target software exists in the software library on the IMC primary site. Compare the running configuration on Switch C with the configuration saved on June 14, 2012 to identify configuration changes. Using RSM Configuration module 37

Figure 23 Network diagram Batch upgrade software 1. Select Configuration > Configuration Center. The Configuration Center page appears. 2. Select Switch A and Switch B, and then click Deploy Software. 3. Click the Select link next to Software, and then select the target software on the window that appears. 4. Use the default settings for other fields, then click Next. 5. After the device space check passes, click Next. 6. On the Set Task Attributes page, select Immediately from the Schedule Time list, use default settings for other fields, and click Next. 7. On the Abstract page, check task attributes, deployment policy, and devices to which the policy is deployed, then click Finish. RSM executes the task and displays the execution result on the Deployment Task List page, as shown in Figure 24. 38 Managing a branch network

Figure 24 Task execution result Compare device configurations 1. Select Configuration > Configuration Center. The Configuration Center page appears. 2. Click the Operation icon for Core Switch, and then select Configuration Management from the Operation menu. 3. Click the Compare icon for the configuration file, select Compare with Current Running Configuration from the page that appears, and click OK. RSM executes the task and displays the result, as shown in Figure 25. Figure 25 Configuration comparison result Using RSM ACL module ACLs are deployed on devices at the access and aggregation layers to implement QoS, security policies, and access control. Any improper ACL configuration can cause network anomalies, which pose a huge challenge to administrators in network maintenance. As shown in Figure 26, the RSM ACL module organizes ACLs into an ACL resource and deploys it to multiple devices, as needed, for packet filtering and VLAN filtering. RSM ACL also provides deployment tasks, including Deploy ACLs, Delete ACLs on Devices, and Deploy ACL Uses. Administrators can deploy ACL rules to selected devices by specifying an ACL resource, devices to deploy the resource, and task execution time through a task wizard. They can also track the task execution result and cause of failure. Using RSM ACL module 39

Figure 26 Deploying ACLs through RSM ACL As a functional subset of IMC Platform ACL Management, RSM ACL includes ACL Resource, ACL Devices, and ACL Deployment. RSM ACL functions and operations are the same as those of the IMC Platform ACL Management except for the access methods. The following sections describe RSM ACL functions and their respective access methods. For information about other ACL functions, see HP IMC Base Platform Administrator Guide. To reuse ACL rules flexibly, RSM ACL reorganizes the configuration process of ACL rules by introducing the concept of ACL resource. Figure 27 shows a comparison between this new configuration mode and the traditional manual mode. 40 Managing a branch network

Figure 27 Manual mode and ACL resource mode ACL Resource The following example describes creation of packet filtering ACLs by using the two configuration modes: Manual mode The network administrator must log in to each device to configure the effective time range and ACL rules and to apply the ACL rules to filter packets. Therefore, the administrator must carefully remember the network topology and ACL rules deployed on each device and ensure correct ACL configuration on each device. ACL resource mode 1. Plan ACL resources: Organize ACL rules into rule sets and group rule sets with the same function into an ACL resource. 2. The operation is reverse to the planning: Define an ACL resource, add rule sets to the resource, and add rules to the rule sets. 3. Deploy the ACL resource to the selected device. 4. Select a use for the ACL resource, deploy them to the devices, and view the deployment result in the task list. To deploy the same ACL resource to multiple devices, repeat steps c and d. RSM ACL also provides batch operations for deploying ACLs to improve ACL configuration efficiency. ACL resources are reorganized from ACL rules. An ACL resource contains configuration information (such as ACL resource name) and ACL rule sets. An ACL rule set contains configuration information (such as rule set name) and ACL rules. ACL rules can be sorted and optimized. Using RSM ACL module 41

Figure 28 ACL Resource composition The procedure for creating an ACL resource is as follows: 1. Create an ACL resource by specifying the ACL identifier type and ACL type. 2. Add ACL rule sets to the ACL resource. 3. Add ACL rules to the ACL rule sets. Add a time range if necessary. 4. Sort and optimize the ACL rules. ACL Resource List page To access the ACL Resource List page, select ACL > ACL Resource from the functional menu of the home page. Table 7 shows the supported ACL resource operations on the page. Table 7 Supported operations Function Adding an ACL resource Deleting ACL resources Access method Click the Add button, and then select an ACL resource type from the menu that appears, including Common ACL Resource and MSM ACL Resource. Select the ACL resources, and then click the Delete button. Renaming an ACL resource Click the Modify icon resource. in the ACL Resource Rename column for the ACL Rule Set List page To access the Rule Set List 1. Select ACL > ACL Resource from the functional menu of the home page. The ACL Resource List page appears. 2. Click the ACL identifier of an ACL resource. The Rule Set List page appears. Table 8 shows the supported rule set operations on the page. 42 Managing a branch network

Table 8 Supported operations Function Adding an ACL rule set Deleting ACL rule sets Viewing an ACL rule set Access method Click Add to configure basic info, time range, and ACL rules for the ACL rule set. Select the ACL rule sets, and then click Delete. Click the name of the ACL rule set to view its basic information, rule information, and time range information. Deploying an ACL rule set to one or multiple devices Copying an ACL rule set Click the Deploy icon Click the Copy icon for the ACL rule set. for the ACL rule set. Modifying an ACL rule set Click the Modify icon for the ACL rule set to modify its basic information, time range information, and ACL rules. Rule List page To access the Rule List page: 1. Select ACL > ACL Resource from the functional menu of the home page. The ACL Resource List page appears. 2. Click the ACL identifier of an ACL resource. The Rule Set List page appears. 3. ClickAdd or the Modify icon for a rule set. The Basic Info page appears. 4. If you select Configure ACL Rules with Range, the Configure Time Range page appears. 5. After configuring the time range, click Next. The Configure Rule page appears. Table 9 (page 43) shows the supported rule operations on the page. Table 9 Supported operations Function Adding an ACL rule Deleting ACL rules Sorting ACL rules Optimizing ACL rules Access method Click Add. Select the ACL rules, and then click Delete. Click Sort, select the rules from the window that appears, and use the Top, Up, Down, and Bottom buttons to sort them. NOTE: Click Optimize. The rules will be deployed in the order they are sorted. Copying an ACL rule Modifying an ACL rule Click the Copy icon Click the Modify icon for the ACL rule. for the ACL rule. ACL Devices The ACL Devices option allows you to manage ACL devices. To access the ACL Devices List page, select ACL > ACL Devices from the functional menu of the home page. Table 10 shows the supported ACL device operations on the page. Using RSM ACL module 43

Table 10 Supported operations Function Displaying all devices or only ACL-capable devices Synchronizing device information Modifying polling settings Access method Select or unselect ACL Devices Only. Select one or more devices, and then click Synchronize. Select one or more devices, and then click Polling Settings. Performing ACL configuration Viewing device details Click the ACL Config icon Click the device name. for a device. ACL Deployment ACL Deployment supports the following deployment tasks: Deploy ACLs, Delete ACLs on Devices, Delete Time Ranges on Devices, Deploy ACL Uses, and Delete ACL Uses on Device. You can start, stop, delete, or modify these tasks. To access the Task List page, select ACL > ACL Deployment from the functional menu of the home page. Table 11 shows the supported ACL task operations on the page. Table 11 Supported operations Function Deploying ACLs Access method Click the Deploy ACLs icon in the Deploy Wizard section. Deleting ACLs on devices Click the Delete ACLs on Devices icon in the Deploy Wizard section. Deleting time ranges on devices Click the Delete Time Ranges on Devices icon in the Deploy Wizard section. Deploying ACL uses Click the Deploy ACL Uses icon in the Deploy Wizard section. Deleting ACL uses on devices Starting tasks Stopping tasks Click the Delete ACL Uses on Devices icon Select one or more tasks, and then click Start. Select one or more tasks, and then click Stop. in the Deploy Wizard section. Deleting tasks Select one or more tasks, and then click Delete. Modifying a task Click the Modify icon for the task. Viewing the task execution result Click the link in the Result column for the task. Configuration Example Network requirements As shown in Figure 29, Host A and Host B are connected to Device A through GigabitEthernet 1/1/1. The IP address of Host A is 10.1.1.1. Configure a basic ACL to allow only Host A to access the server in the director's office from 9:00 to 17:00 every day. 44 Managing a branch network

Figure 29 Network diagram Create an ACL resource for the server access control 1. Select ACL > ACL Resource. The ACL Resource List page appears. 2. Click Add and select Common ACL Resource from the list. The Basic Info page appears. 3. Select Number from the ACL Identity Type list, select Basic from the ACL Type list, enter 2000 in the ACL Identifier field, and enter Access control over the director's office server in the ACL Resource Name field. 4. Click OK. The new ACL resource appears on the ACL Resource List. Add an ACL rule set to the ACL resource 1. Click 2000 in the ACL Identifier column. The Rule Set List page appears. 2. Click Add. The Basic Info page appears. 3. Enter Host A in the Rule Set Name field, select Config from the Match Order list, and select Configure ACL Rules with Time Range. Specify a time range for the rule set 1. Click Next. The Configure Time Range page appears. 2. Click Add. The Add Time Range page appears. 3. Enter Working-time in the Name field. 4. Click Add. 5. Select Cyclic for Type, select Workday for Period, enter 09:00 in the From field and 17:00 in the To field, and then click OK. 6. On the Add Time Range page, click OK. The new time range appears on the Configure Time Range page. 7. Click Next. The Configure Rule page appears. Using RSM ACL module 45

Add an ACL rule to the rule set 1. Click Add. 2. Select permit for Action, select Working-time from the Time Range list, and select IP Address/Mask for Source Address and enter 10.1.1.1/0.0.0.0. 3. Click OK to return to the Configure Rule page. 4. Click Add to add another rule. 5. Select deny for Action, select Working-time from the Time Range list, and select All for Source Address. 6. Click OK to return to the Configure Rule page. 7. Click Back to return to the Rule Set List page. 8. Click the Deploy icon for Host A. 9. Click Select to select Device A. 10. Click Next. 11. In the ACLs To Deploy section, select Add for Deploy Strategy for Device A. In the Time Ranges To Deploy section, select Add for Deploy Strategy for Device A. 12. Click Deploy. The Add Task page appears. Figure 30 Add Task page 13. Select Immediately for Execute, and use default values for other fields. In the Deploy Details section, click the Preview Commands icon to check the command lines to be deployed. Figure 31 Previewing the command lines to deploy 14. Click OK. The Task Result page appears. 15. After deployment is complete, click Close. The Task List page appears. 46 Managing a branch network

Figure 32 ACL deployment result 16. Click the Deploy ACL Uses link in the Deploy Wizard section. 17. Select Packet Filter for Select Use Type, and then click Next. 18. Click Select Device to select Device A, and then click Next. 19. On the Select Object page, select Inbound from the Filter Direction list and GigabitEthernet1/1/1/Inbound from the Interface List, and then click Next. 20. On the Select ACL page, select Basic from the ACL Type list and Number from the ACL Identity Type list, enter 2000 in the ACL Identifier field, and then click Next. 21. Check information on the Summary page, and then click Finish. 22. View the application result on the Deploy ACL Uses Result page, and then click OK. The Add Task page appears. 23. Select Immediately for Execute, and use default values for other fields. Click OK. The Add Task page appears. 24. After deployment is complete, click Close. The Task List page appears. Using RSM VLAN module With the RSM VLAN module, the administrator can quickly deploy and manage VLANs for devices. Specifically, the administrator can deploy access ports, trunk ports, hybrid ports, and VLANs to selected devices and view execution of deployment tasks from the task list. As a functional subset of the IMC Platform VLAN Management, RSM VLAN module includes Global VLAN, VLAN Devices, VLAN Deployment Task, and Batch Deploy. RSM VLAN functions and operations are the same as those of the IMC Platform VLAN Management except for the access methods. Descriptions of RSM VLAN functions and their respective access methods follow. For information about other VLAN functions, see HP IMC Base Platform Administrator Guide for VLAN management. Global VLAN The Global VLAN option presents a list of all VLANs in the network and allows you to manage VLANs and modify VLAN names. To access the VLAN List page, select VLAN > Global VLAN from the functional menu of the home page. Table 12 shows the supported global VLAN operations on the page. Table 12 Supported operations Function Adding a VLAN Deleting VLANs Access method Click Add. Select the VLANs, and then click Delete. NOTE: The predefined VLAN 1 cannot be deleted. Using RSM VLAN module 47

Table 12 Supported operations (continued) Function Modifying a VLAN name Querying VLANs Access method Click the Modify VLAN Name link for the VLAN. 1. Point to Query on the upper right corner of the VLAN List page. 2. Enter the ID and name of the VLAN in the box that appears. 3. Click Query. VLAN Devices The VLAN Devices option allows you to manage VLAN-capable devices and deploy VLAN configuration to devices. To access the VLAN Device List page, select VLAN > VLAN Devices from the functional menu of the home page. Table 13 shows the supported VLAN device operations on the page. Table 13 Supported operations Function Synchronizing device information Access method Select the devices, and then click the Synchronize button. Performing VLAN configuration for a device Click the VLAN Configuration icon for the device. Querying devices 1. Point to Query on the upper right corner of the VLAN Device List page. 2. Enter the device name on the box that appears. 3. Click Query. VLAN Deployment Task The VLAN Deployment Task option allows you to track and view execution results and details of deployment tasks for VLANs, access ports, trunk ports, and hybrid ports. To access the VLAN Deployment Task List page, select VLAN > VLAN Deployment Task from the functional menu of the home page. Table 14 shows the supported VLAN deployment task operations on the page. Table 14 Supported operations Function Adding a task Deleting tasks Access method Click Add Task, and then select a task type from the submenu, including Deploy Access Ports, Deploy Trunk Ports, Deploy Hybrid Ports, and Deploy VLANs. Select the tasks, and then click the Delete button. Viewing details of task deployment Click the Details icon for the device. Batch Deploy The Batch Deploy option provides a wizard for batch deploying access ports, trunk ports, hybrid ports, and VLANs. To access the Batch Deploy page, select VLAN > Batch Deploy from the functional menu of the home page. Table 15 shows the supported batch deploy operations on the page. 48 Managing a branch network

Table 15 Supported operations Function Deploying access ports in batches Deploying trunk ports in batches Deploying hybrid ports in batches Deploying VLANs in batches Access method Click the Access Ports link. Click the Trunk Ports link. Click the Hybrid Ports link. Click the VLAN link. Configuration example Network requirements As shown in Figure 33, a branch office of a company is composed of the marketing department and repair department. Their networks are isolated, but several servers are accessible to both departments. In addition, one server in the marketing department is accessible only to the marketing employees. Configure VLANs in RSM and deploy them to the switches for Layer 2 isolation: On Switch A, assign Ethernet 0/1 to VLAN 100 and Ethernet 0/2 to VLAN 200, and configure uplink port GigabitEthernet 1/1/1 as a trunk port and assign the uplink port to VLAN 100 and VLAN 200. On Switch B, assign Ethernet 0/1 to VLAN 200 and Ethernet 0/2 to VLAN 300, and configure uplink port GigabitEthernet 1/1/1 as a trunk port and assign the uplink port to VLAN 200 and VLAN 300. On the core switch, configure GigabitEthernet 1/1/2 connecting to Switch A as a trunk port, assign the port to VLAN 100 and VLAN 200, configure GigabitEthernet 1/1/3 connecting to Switch B as a trunk port, and assign the port to VLAN 200 and VLAN 300. Figure 33 Network diagram Configuration example 49

Deploy access ports to Switch A 1. Select VLAN > VLAN Devices. The VLAN Device List page appears. 2. Click the VLAN Configuration icon for Switch A. 3. On the Device VLAN tab, click Add. The Add page appears. 4. Enter 100 in the VLAN ID field and Repair in the VLAN Name field. 5. Click Submit. 6. Click Allowed Port List for VLAN 100. The VLAN Information page appears. 7. Click Add. 8. Select Ethernet 0/1, and then click Submit to return to the Allowed Port List page. 9. Click Return to return to the Device VLAN tab for Switch A. 10. Click Add. The Add page appears. 11. Enter 200 in the VLAN ID field and Market in the VLAN Name field. 12. Click Submit. 13. Click Allowed Port List for VLAN 200. The VLAN Information page appears. 14. Click Add. 15. Select Ethernet 0/2, and then click Submit to return to the Allowed Port List page. 16. Click Return to return to the Device VLAN tab for Switch A. Deploy access ports to Switch B 1. Select VLAN > VLAN Devices. The VLAN Device List page appears. 2. Click the VLAN Configuration icon for Switch B. 3. On the Device VLAN tab, click Add. The Add page appears. 4. Enter 200 in the VLAN ID field and Market in the VLAN Name field. 5. Click Submit. 6. Click Allowed Port List for VLAN 200. The VLAN Information page appears. 7. Click Add. 8. Select Ethernet 0/1, and then click Submit to return to the Allowed Port List page. 9. Click Return to return to the Device VLAN tab for Switch B. 10. Click Add. The Add page appears. 11. Enter 300 in the VLAN ID field and Public in the VLAN Name field. 12. Click Submit. 13. Click Allowed Port List for VLAN 300. The VLAN Information page appears. 14. Click Add. 15. Select Ethernet 0/2, and then click Submit to return to the Allowed Port List page. 16. Click Return to return to the Device VLAN tab for Switch B. Deploy VLANs 100, 200, and 300 to the core switch 1. Select VLAN > VLAN Devices. The VLAN Device List page appears. 2. Click the VLAN Configuration icon for the core switch. 3. On the Device VLAN tab, click Add. The Add page appears. 4. Enter 100 in the VLAN ID field and Repair in the VLAN Name field. 5. Click Submit. 6. Repeat steps 3 to 5 to add VLANs 200 and 300. 50 Managing a branch network

Deploy trunk ports in batches through Batch Deploy 1. Select VLAN > Batch Deploy. The Batch Deploy page appears. 2. Click the Trunk Ports link. The Trunk Ports page appears. 3. Enter 5 in the PVID field and 100,200 in the Allowed VLAN field. 4. Click Add. The Select Interfaces dialog box appears. 5. Add GE 1/1/2 of Core Switch and GE 1/1/1 of Switch A: a. From the Query Conditions section, click the By View tab, and click Switches in the Device View. The devices from the group you click appear in the Devices Found section. b. Click Core Switch to enter the Interface List, select GigabitEthernet 1/1/2, and click the Add selected button to add them to the Selected Interfaces list. c. Click the Device List tab, and click Switch A to enter Interface List. d. Select GigabitEthernet 1/1/1 and click the Add selected button to add them to the Selected Interfaces list, and click OK. 6. On the Trunk Ports page, click Submit to return to the Batch Deploy page. 7. Enter 6 in the PVID field and 200,300 in the Allowed VLAN field, and then click Add. 8. Add GE 1/1/3 of Core Switch and GE 1/1/1 of Switch B. For the specific procedure, see 5. 9. On the Trunk Ports page, click Submit to return to the Batch Deploy page. View task execution and VLAN deployment 1. Select VLAN > VLAN Deployment Task. The VLAN Deployment Task List page appears. Figure 34 Deployment result for trunk ports 2. Click the Details icon for a VLAN deployment task to view its execution details. Figure 35 Deploy Trunk Ports Summary Report page Configuration example 51

3. To view all deployed VLANs in the network, select VLAN > Global VLAN. The VLAN List page appears. Figure 36 VLAN List 4. Click the Member Operation link for VLAN 100 to view its deployment information and perform VLAN deployment operations. Figure 37 Member Operation page for VLAN 100 Using RSM Network Assets module The RSM Network Assets module allows you to manage physical assets (such as devices, cards, interfaces, and fans) and non-physical assets. You can view changes to assets through asset audit. RSM supports exporting asset information into Excel for subsequent statistics and reporting. You can also manage other types of network assets by adding their OIDs. RSM Network Assets functions and operations are the same as those of the IMC Platform Network Assets except for the access methods. The following sections describe RSM Network Assets functions and their respective access methods. For more about other Network Assets functions, see HP IMC Base Platform Administrator Guide for resource management. Network Assets The Network Assets option displays information about all network assets and allows operators to modify and query assets. To access the Network Asset List page, select Network Assets > Network Assets. Table 16 shows the supported network assets operations on the page. Table 16 Supported operations Function Adding a network asset Modifying property Access method Click Add. Select an asset, and then click Modify Property. 52 Managing a branch network

Table 16 Supported operations (continued) Function Modifying a network asset Access method Click the Modify icon for the network asset. Querying network assets Exporting asset information In the Network Asset Query section, enter the asset name, device IP address, and device label, select a class, and click Query. Alternatively, click Advanced Query to query assets with more query conditions. Click Export CSV in the upper right corner of the Network Asset List. Asset Audit The Asset Audit function allows you to view and query network asset auditing. To access the Asset Audit List page, select Network Assets > Asset Audit from the functional menu of the home page. Table 17 shows the supported asset audit operations on the page. Table 17 Supported operations Function Viewing a network asset Querying asset auditing Viewing device details Access method Click the asset name. Enter the device IP address, asset name, and device label, and then click Query. Alternatively, click Advanced Query to query with more optional query conditions. Click the device label. Asset OID RSM uses OIDs to identify asset types and use status of assets. In addition to a set of predefined asset OIDs, RSM also supports user-defined OIDs. The Asset OID option allows you to add, modify, delete, and query asset OIDs. To access the Asset OID List page, select Network Assets > Asset OID from the functional menu of the home page. Table 18 shows the supported asset OID operations on the page. Table 18 Supported operations Function Adding an asset OID Modifying an asset OID Deleting an asset OID Access method Click Add. Click the Modify icon Click the Delete icon for the asset OID. for the asset OID. Querying asset OIDs In the Query Asset ID section, enter the OID and name, select a type, select Yes or No for Physical Asset, and click Query. Options The Options feature is used to configure the system parameters required for RSM Network Assets. To access the Options page, select Network Assets > Options from the functional menu of the home page. Table 19 shows the supported system parameter operations on the page. Table 19 Supported operations Parameter Add devices to network asset when adding it to imc platform Auto Synchronization Interval (1-365 days) Operation Select Yes or No, and then click OK. Enter the number of days, and then click OK. Using RSM Network Assets module 53

Configuration example Network requirements View asset information for Switch A. Export asset information. View asset change information. View asset details 1. Select Network Assets > Network Assets. The Network Asset List page appears. 2. Click the asset name for Switch A. The Network Asset Details page appears. Figure 38 Network Asset Details page 3. Click Back to return to the Network Asset List page. Export asset information 1. Click Export CSV in the upper right corner of the Network Asset List. 2. After downloading the exported data, click Close. Figure 39 shows the content of the CSV file. 54 Managing a branch network

Figure 39 Exported asset information View audit information Select Network Assets > Asset Audit. The Asset Audit List page appears. Figure 40 Asset audit information Using RSM Report module The RSM Report module is an important tool for administrators to collect statistics and reports on network operation. It provides various templates for generating reports related to resources, alarms, and performance, and also supports user-defined report templates by using the iar tool. Using RSM Report module 55

Administrators can either browse real-time reports anytime or customize scheduled reports. RSM Report module supports export formats such as PDF and CSV for exporting reports. As a functional subset of the IMC Platform Report Management, RSM Report includes Report Template List, All Scheduled Reports, Quick Report Template List, and Options. RSM Report functions and operations are the same as those of the IMC Platform Report Management except for the access methods. The following sections describe RSM Report functions and their respective access methods. For more about other Report functions, see HP IMC Base Platform Administrator Guide for information on reporting in IMC. Report Template List The Report Template List function displays all report templates in RSM and allows operators to add, modify, and view templates. To access the Report Template List page, select Report > Report Template List from the functional menu of the home page. Table 20 shows the supported report template operations on the page. Table 20 Supported operations Function Adding a report template Setting access rights for a report template Downloading the data source file Access method Click Add or select Report > Add Report Template. NOTE: Before using this function, use the iar tool to create a template file. Click Access Rights. Click Download Data Source File in the upper right corner of the Report Template List. Viewing detailed information about a template Modifying a template Deleting a template Click the Details icon Click the Modify icon Click the Delete icon for the template. for the template. for the template. Querying templates Viewing the contents of a report In the Query Template section, enter the template name, select a template type, and click Query. Click the name of the report template. All Scheduled Reports The All Scheduled Reports function allows you to add, modify, and delete reports and view daily, monthly, and yearly reports. To access the Scheduled Report List page, select Report > All Scheduled Reports from the functional menu of the home page. Table 21 shows the supported scheduled report operations on the page. Table 21 Supported operations Function Adding a scheduled report Viewing information about a scheduled report Access method Click Add or select Report > Add Scheduled Report. Click the name of the scheduled report. Modifying a scheduled report Deleting a scheduled report Click the Modify icon Click the Delete icon for the report. for the report. 56 Managing a branch network

Table 21 Supported operations (continued) Function Querying scheduled reports Access method In the Query Report section, enter the scheduled report name and template name. Click Query. Viewing history reports Click the History Report icon for the report. Resuming/Suspending a scheduled report To resume a scheduled report, click the Resume icon To suspend a scheduled report, click the Suspend icon for the report. for the report. Displaying different types of reports Select different report types on top of the Query Report section. Quick Report Template List Quick report templates are used for generating device details reports and link details reports. To access the Quick Report Template List page, select Report > Quick Report Template List from the functional menu of the home page. Table 22 shows the supported quick report template operations on the page. Table 22 Supported operations Function Adding a custom template Access method Click Add or select Report > Add Custom Template. Viewing information about a custom template Modifying a custom template Deleting a custom template Click the Details icon Click the Modify icon Click the Delete icon for the template. for the template. for the template. Querying templates Viewing a report In the Query Template section, enter the template name, select a template type, and click Query. Click the name of the report template. Options The Options feature allows you to configure the system parameters required for RSM Report. To access the Options page, select Report > Options from the functional menu of the home page. Table 23 shows the supported system parameter operations on the page. Table 23 Supported operations Parameter Vendor Name Vendor Logo Operation Enter the vendor name, and then click OK. Click Upload. Configuration example Network requirements View real-time reports. Customize scheduled reports. Using RSM Report module 57

View the real-time capacity report 1. Select Report > Report Template List. The Report Template List page appears. 2. Click Capacity Report in the Template Name column. Figure 41 Capacity Report Customize a scheduled report 1. Select Report > Add Scheduled Report. 2. Click the Select button for the Template Name field, and then select Device Asset Report from the window that appears. 3. Select Maintainer Group for the Access Right field. 4. Select Weekly for Schedule Type. 5. Select 2012-06-28 for Report Start Date. 6. Select PDF from the Report File Format list. 7. Select Send by Email and enter admin@163.com. 8. Click OK to return to the Scheduled Report List page. 58 Managing a branch network

Figure 42 Result of adding the scheduled report Using RSM Report module 59

4 Managing device groups To facilitate device management, operators typically organize devices into several groups based on the network layout. From the primary site, operators can view the device group list and statistics graphs for the device groups. The device group list contains the name and description of each device group. The device group statistics graphs include Top10 Device Group by Device Count, Top10 Device Groups by Faulty Device Count, Device Status Chart (Local), and Device Status Chart (Local and all sites). All device groups must be configured on the IMC Platform on the primary site. For details on adding a device group, see HP IMC Base Platform Administrator Guide for the information on configuring IMC for use. Viewing the device group page 1. Click the Resource tab. 2. Select Remote Site Manager > Device Group from the navigation tree. The Device Group page appears. Figure 43 Device Group page The device group list contains a list of existing device groups identified by group name and description. Enter the Device List page by clicking a group name to view information about devices in that group, and add, delete, or synchronize devices. For operations on device groups, see HP IMC Base Platform Administrator Guide for information on configuring IMC for use. The Device Group page also displays the following statistics graphs on the right: The Top10 Device Groups by Device Count bar chart presents names of the top 10 device groups that contain most devices, and also presents the number of devices in each group. The Top10 Device Groups by Faulty Device Count bar chart presents names of the top 10 device groups that contain most faulty devices, and also presents the number of faulty devices in each group. Alarm levels on faulty devices in the same device group are represented in different colors. Point to a colored area on a bar to view how many devices in that device group have generated alarms of that alarm level represented in that color. 60 Managing device groups

The Device Status Chart (Local) bar chart presents the number of devices for different alarm levels on the local network of the primary site. The Device Status Chart (Local and all sites) bar chart presents the number of devices for different alarm levels on both the local network of the primary site and networks of all remote sites. 3. Click Refresh to view the latest device group list and statistics graphs. Configuration example Create an Internet gateway device group on the primary site and assign firewalls of branch networks to this group for unified management. After necessary configuration, all branch networks have access to the Internet. Figure 44 Internet Gateway device group Creating an Internet egress device group 1. Click the System tab. 2. Select Group Management > Device Group from the navigation tree. The Device Group List page appears. 3. Click Add. The Add Device Group page appears. 4. Enter Internet Gateway as the group name, select None for Automatically Add New Devices, and select one or more operators who can manage this group. 5. Click OK to return to the Device Group List page. Assigning devices to the device group 1. 6. On the Device Group List page, click the Device List icon for Internet Gateway. The Device List page appears. 2. Click Add. 3. From the Select Devices dialog box, click the By View tab and expand the Site View. Configuration example 61

4. Click the name of a target remote site and select the firewall device from the Devices Found window. Repeat this step to assign the firewall devices of the remaining remote sites to the device group. Confirm that the devices you have found have been added. 5. Click OK. Confirm that the devices now appear in the Device List. Viewing the device list 1. Click the Resource tab. 2. Select Remote Site Manager > Device Group from the navigation tree. The Device Group page appears. 3. Click Internet Gateway in the Group Name column to view status of all devices in the group and deploy software and configuration to them. Figure 45 Internet Gateway device list 4. If the number of devices or faulty devices in this group reaches top 10, you can view statistics about the devices from the bar chart for Top10 Device Groups by Device Count or Top10 Device Groups by Faulty Device Count, as shown in Figure 46. Figure 46 Bar charts on the Device Group page 62 Managing device groups