HP Intelligent Management Center Remote Site Management User Guide

HP Intelligent Management Center Remote Site Management User Guide Abstract This book provides overview and procedural information for Remote Site Management, an add-on service module to the Intelligent Management Center that provides network management functionality behind a firewall or network using network address translation. This book is aimed at network administrators who manage and use Intelligent Management Center in their enterprise environment. HP Part Number: 5998-3317 Published: June 2012 Edition: 1

Copyright 2012 Hewlett-Packard Development Company, L.P. Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Acknowledgments Intel, Itanium, Pentium, Intel Inside, and the Intel Inside logo are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. Microsoft, Windows, Windows XP, and Windows NT are U.S. registered trademarks of Microsoft Corporation. Adobe and Acrobat are trademarks of Adobe Systems Incorporated. Java and Oracle are registered trademarks of Oracle and/or its affiliates. UNIX is a registered trademark of The Open Group. Revision History Revision #1 First publication June 2012

Contents 1 Overview...4 2 Remote Site Manager...5 Remote Site Overview...5 Application Scenario...5 Operation Mechanism...6 Precautions...6 Remote Site Operation...6 Functions...7 Modify Remote Site Info...7 Modify the Maximum Number of Nodes Managed by a Remote Site...7 Synchronize Remote Site Device Info...8 Access Remote Site...8 3 Device Group Manager...10 Device Group Overview...10 Precautions...10 Related Topics...10 Add Device Group...10 Operation Procedure...11 Parameters...11 Precautions...11 Related Topics...11 Modify Device Group...11 Operation Procedure...11 Parameters...12 Precautions...12 Related Topics...12 Delete Device Group...12 Operation Procedure...12 Precautions...12 Related Topics...12 4 Support and other resources...13 Contacting HP...13 Subscription service...13 Warranty...13 Documentation...13 Prerequisites...14 Typographic conventions...14 About the HP IMC documentation set...14 5 Documentation feedback...16 Index...17 Contents 3

1 Overview Remote Site Management (RSM) is an add-on service module to the HP Intelligent Management Center (IMC). It provides IMC administrators with tools to manage routers, switches, and other networking devices across firewalls and NAT devices (Figure 1). Figure 1 RSM administrator console in IMC RSM includes two categories of management functions: Remote site management Device group management These functions are described in more detail in the following sections. 4 Overview

2 Remote Site Manager Remote Site Manager can manage internal networks isolated by firewalls or NAT devices and implement unified management of branch networks through the primary site imc. However, this requires an agent to be deployed within the remote site. The agent collects device information and reports it to the primary site imc, thereby implementing management of branch networks across the Internet or WAN. The primary site imc and agents authenticate each other and encrypt transmitted data by using Secure Sockets Layer (SSL) to prevent data tampering or forging and to guard against network viruses and attacks. This section covers the following topics: Remote Site Overview: Describes the operation mechanism and application scenario of remote site management. Remote Site Operation: Describes the functions for the primary site imc to manage remote sites and common operations. On the remote site page, the system presents all current remote sites in a list. The administrator can modify the name and description, change the maximum number of manageable devices, synchronize device information, and directly access the remote site via the IP address link. Remote Site Overview With business expansion, many enterprises establish branch offices all over the world. These small-scaled branch networks are connected to the Internet via firewalls or NAT devices to communicate with their corporate headquarters. These branch networks are referred to as remote sites, which are managed through agents deployed locally. The Secure Socket Layer (SSL) protocol is used for secure data transmission across the Internet. Application Scenario Deploy an imc system in the primary site and one Remote Site Manager (RSM) component in each remote site. Then, you can manage remote sites on the primary site imc by information exchange with them. The primary site imc can monitor the status of each remote site and manage its devices in terms of resource, topology, performance, alarm, and ACL. This scenario is shown in Figure 2. Figure 2 RSM application scenario Remote Site Overview 5

Operation Mechanism Precautions Implementation of a scenario similar to the one shown in Figure 2 would be as follows: Install an imc Platform system in the corporate headquarters (hereinafter referred to as the primary site imc), and apply for the license specifying the number of agents manageable by the primary site imc. Install an RSM component (agent) at each branch office, which becomes a remote site of the primary site imc. During installation, you must specify the URL of the primary site imc, enter the administrator password of the primary site imc, and configure the maximum number of devices that can be managed by the remote site. After the installation, the remote site and its reachability appear in the remote site list of the primary site imc. A heartbeat is maintained between the primary site imc and remote site. The primary site imc automatically obtains information about devices managed by all remote sites. When a device is added to or deleted from a remote site or device alarm status changes, a relevant event is automatically reported to the primary site imc. Two methods can be used to operate devices in remote sites from the primary site imc: Single-site operation: Enter a remote site directly from the primary site imc. Multi-site operation: Select devices from a device group and then operate the devices in the group. System configuration information, such as operator, does not need to be configured on remote sites, because they are automatically synchronized from the primary site imc to remote sites. In addition, remote sites automatically synchronize system configuration information from the primary site imc at regular intervals, including operator, operation group, device group, SNMP template, Telnet template, and SSH template. In setting up your application, be aware of the following precautions: The primary site imc and all remote sites share the license specifying the total number of manageable devices. Make sure that the primary site imc can communicate with all remote sites via HTTP or HTTPS. Connectivity between the primary site imc and remote sites must be ensured. Otherwise, the primary site imc and remote site might fail to synchronize data until regular data synchronization is restored when regaining connectivity. Remote Site Operation As shown in Figure 3, the Remote Site list of the primary site imc shows information about all current remote sites, including current state, time of the last state change, name, description, license usage. You can modify remote site information and perform synchronization operations. 6 Remote Site Manager

Figure 3 Remote Site list Functions Remote site operation involves the following four functions: Modify Remote Site Info Modify the Maximum Number of Nodes Managed by a Remote Site Synchronize Remote Site Device Info Access Remote Site Modify Remote Site Info This function allows you to modify the name and description of a remote site as needed on the primary site imc. Operation Procedure 1. Click the Resource tab, and then select Remote Sites from the navigation tree to enter the remote site list page. 2. Click the Modify icon for a remote site to modify basic information. 3. Enter the name and description, and click OK. Precautions After the name and description are modified on the primary site imc, the modification is automatically synchronized to the remote site, perhaps with some delay. Related Topics Modify the Maximum Number of Nodes Managed by a Remote Site Access Remote Site Modify the Maximum Number of Nodes Managed by a Remote Site When installing an agent, the administrator needs to specify the maximum number of devices that can be managed by the remote site. Then, you can use this function to modify this maximum number on the primary site imc. Operation Procedure 1. Click the Resource tab, and then select Remote Sites from the navigation tree to enter the remote site list page. 2. Click the number link after the percentage bar for a remote site. 3. Enter the maximum number or drag the percentage bar to the desired location. 4. Click OK. Remote Site Operation 7

Precautions After the maximum number of devices that can be managed by a remote site is modified on the primary site imc, the modification is automatically synchronized to the remote site, perhaps with some delay. The modified value cannot be smaller that the number of devices currently managed by the remote site. The primary site imc and all remote sites share the license, and the number of manageable devices assigned to remote sites is considered used on the primary site imc. Related Topics Modify Remote Site Info Synchronize Remote Site Device Info Access Remote Site Synchronize Remote Site Device Info This function allows you to manually synchronize device information of a remote site on the primary site imc. Operation Procedure 1. Click the Resource tab, and then select Remote Sites from the navigation tree to enter the remote site list page. 2. Click the Refresh icon for a remote site to start synchronizing device information of the remote site. Precautions This function synchronizes only device information and does not synchronize system configuration information such as operator, which is automatically sent by the remote site to the primary site imc at regular intervals for synchronization. The synchronization might take a long time, depending on the network conditions between the primary site imc and remote site. Click the Refresh button to see the synchronization result. Related Topics Modify the Maximum Number of Nodes Managed by a Remote Site Access Remote Site Access Remote Site This function allows you to enter a remote site directly from the primary site imc and then to configure and operate the devices in the remote site. Operation Procedure 1. Click the Resource tab, and then select Remote Sites from the navigation tree to enter the remote site list page. 2. Click the IP address link for a remote site to enter the remote site page. Precautions Make sure that the primary site imc and remote sites can communicate via HTTP and HTTPS. 8 Remote Site Manager

Related Topics Modify Remote Site Info Modify the Maximum Number of Nodes Managed by a Remote Site Synchronize Remote Site Device Info Remote Site Operation 9

3 Device Group Manager The administrator can put devices of the primary site and of different remote sites in one device group to implement unified management of cross-site devices, as described in the following sections: Device Group Overview: imc provides functions to group devices of different sites for unified management. Add Device Group: enables you to add device groups Modify Device Group: enables you to modify device groups Delete Device Group: enables you to delete device groups Device Group Overview Device Group functions assign devices from different sites to a device group for unified management. Add, modify, or delete a device group through Add Device Group, Modify Device Group, or Delete Device Group respectively in the imc Platform system. As shown in Figure 4, this function also presents the top 10 device groups by device number using bar charts and offers various statistics about devices. Figure 4 Device Group page in RSM Precautions Related Topics Make sure that the primary site imc and remote sites can communicate via HTTP or HTTPS. When you configure devices of a remote site on the primary site imc, an operation delay might occur. The operation delay depends primarily on the link delay between the primary site and remote site. Refer to the Device Group topic in the imc online help. Add Device Group This function helps you add a device group. 10 Device Group Manager

Operation Procedure Parameters Precautions 1. Select the System tab, and on the navigation tree, click the Device Group link. 2. On the Device Group page, click Add. 3. On the Add Device Group page, make proper settings in the Group Name and Description boxes, and select the operator to manage the device group. 4. Click OK. 5. When adding the device group succeeds, you can continue to add device groups, add devices to the newly added device group, or return to the device group list on the popup page. Related Topics Automatically Add New Devices: Specify the conditions for assigning newly-added devices to the device group. None: Not assign newly-added devices to the device group. All: Assign every newly-added device to the device group. From Network Segment: Assign the newly-added devices matching the specified network segment to the device group. Only the administrator has the right to add a device group. Modify Device Group Delete Device Group Modify Device Group This function helps you modify a device group. Operation Procedure 1. Select the System tab, and on the navigation tree, click the Device Group link. 2. On the Device Group page, click the Modify icon of a device group. 3. The Modify Device Group page is displayed 4. On the Modify Device Group page, make proper settings in Description boxes, and select the operator to manage the device group. 5. Click OK. Modify Device Group 11

Parameters Precautions Related Topics Automatically Add New Devices: Specify the conditions for assigning newly-added devices to the device group. None: Not assign newly-added devices to the device group. All: Assign every newly-added device to the device group. From Network Segment: Assign the newly-added devices matching the specified network segment to the device group. Only the administrator has the right to modify a device group. Add Device Group Delete Device Group Delete Device Group This function helps you delete a device group. Operation Procedure Precautions 1. Select the System tab, and on the navigation tree, click the Device Group link. 2. On the Device Group page, click the Delete icon of a device from the device group list to pop up the confirmation dialog box. 3. A confirmation dialogue box is displayed. 4. Click OK. Related Topics Only the administrator has the right to delete a device group. Add Device Group Modify Device Group 12 Device Group Manager

4 Support and other resources Contacting HP For worldwide technical support information, see the HP support website: http://www.hp.com/support Before contacting HP, collect the following information: Product model names and numbers Technical support registration number (if applicable) Product serial numbers Error messages Operating system type and revision level Detailed questions Subscription service Warranty HP recommends that you register your product at the Subscriber's Choice for Business website: http://www.hp.com/go/e-updates After registering, you receive email notification of product enhancements, new driver versions, firmware updates, and other product resources. The Hewlett-Packard Limited Warranty Statement for this product and the HP Software License Terms which apply to any software accompanying this product are available on the HP networking Web site at www.hp.com/networking/warranty. The customer warranty support and services information are available on the HP networking Web site at www.hp.com/networking/support. Additionally, your HP authorized network reseller can provide you with assistance, both with services that they offer and with services offered by HP. Documentation For the latest documentation, visit the HP website, www.hp.com, and select the Support & Troubleshooting link. Choose See support and troubleshooting information radio button. Enter product name/number OR choose the automatic product name/number detection OR select a product category. From the product page, choose the Manuals link to the documentation associated with your product. Contacting HP 13

Prerequisites Prerequisites for installing this product include: IMC v5.1 or higher installed and deployed on your enterprise network or lab environment. Typographic conventions Table 1 Document conventions Convention Blue text: Table 1 (page 14) Blue, underlined text: http://www.hp.com Element Cross-reference links and email addresses Website addresses Bold text Keys that are pressed Text typed into a GUI element, such as a box GUI elements that are clicked or selected, such as menu and list items, buttons, tabs, and check boxes Italic text Text emphasis Monospace text File and directory names System output Code Commands, their arguments, and argument values Monospace, italic text Code variables Command variables Monospace, bold text Emphasized monospace text IMPORTANT: CAUTION: Provides clarifying information or specific instructions. Indicates that failure to follow directions could result in damage to equipment or data. NOTE: Provides additional information. TIP: Provides helpful hints and shortcuts. About the HP IMC documentation set The HP IMC documentation set includes: Table 2 About the HP IMC documentation set Category Product description and specifications Hardware specifications and installation Documents Marketing brochures HP IMC Getting Started Guide HP IMC Installation Guide HP IMC Probe Installation Guide Purposes Describe product specifications and benefits. Quickly guides you through the IMC main features and troubleshooting common problems. Provides a complete guide to IMC platform and component installation and deployment. Provides a complete guide to IMP Probe installation and deployment. 14 Support and other resources

Table 2 About the HP IMC documentation set (continued) Category Software configuration Operations and maintenance Documents SQL Server 2005 Installation and Configuration Guide SQL Server 2008 Installation and Configuration Guide SQL Server 2008 R2 Installation and Configuration Guide Oracle 11g Installation and Configuration Guide (for Linux) MySQL 5.1 Installation and Configuration Guide (Linux) MySQL 5.1 Installation and Configuration Guide (Windows) HP IMC Base Platform Administrator Guide HP IMC Network Traffic Analyzer Administrator Guide HP IMC Quality of Service Manager Administrator Guide HP IMC User Behavior Auditor Administrator Guide Online Help Read me Purposes Guides you through installing SQL Server 2005 for IMC. Guides you through installing SQL Server 2008 for IMC. Guides you through installing SQL Server 2008 R2 for IMC. Guides you through installing Oracle 11g on Linux for IMC. Guides you through installing MySQL 5.1 on Linux for IMC. Guides you through installing MySQL 5.1 on Windows for IMC. Describes operation procedures on the IMC base platform. Describes operation procedures on the IMC Network Traffic Analyzer. Describes operation procedures on using QoSM to control your network resources. Describes operation procedures on using UBA to audit user behavior. Helps you properly use IMC. Provides latest IMC release information. About the HP IMC documentation set 15

5 Documentation feedback HP is committed to providing documentation that meets your needs. To help us improve the documentation, send any errors, suggestions, or comments to Documentation Feedback (docsfeedback@hp.com). Include the document title and part number, version number, or the URL when submitting your feedback. 16 Documentation feedback

Index A accessing remote sites, 8 adding a device group, 10 Automatically Add New Devices, 11 B branch networks, 5 C contacting HP, 13 conventions document, 14 text symbols, 14 D deleting a device group, 12 device firewall, 5 NAT device, 5 device group adding, 10 deleting, 12 functions, 10 modifying, 11 parameters for, 11, 12 precautions for adding, 11 precautions for deleting, 12 precautions for modifying, 12 device group management, 4 Device Group Manager, 10 document conventions, 14 documentation providing feedback on, 16 documentation, about the HP IMC set, 14 F firewall, 5 H help obtaining, 13 HP technical support, 13 HTTP and HTTPS communication between primary and remote site, 8 I IMC license, 6 IMC primary site, 6 M modifying a device group, 11 multi-site operation, 6 N NAT device, 5 network segment, 11 P parameters for device groups, 11, 12 Precautions for accessing a remote site, 8 for adding device groups, 11 for deleting device groups, 12 for device groups, 10 for modifying a remote site, 7 for modifying device groups, 12 for modifying maximum number of devices to be managed on a remote site, 8 for setting up your RSM application, 6 for synchronizing devices on a remote site, 8 prerequisites for RSM, 14 primary IMC site, 6 connectivity with remote sites, 6 R remote site, 5 accessing, 7, 8 agent installation, 7 connectivity wiith primary IMC site, 6 precautions for accessing, 8 precautions for modifying, 7 precautions for modifying maximum number of devices to be managed on a remote site, 8 precautions for synchronizing devices, 8 synchronizing device info, 8 remote site info modifying, 7 remote site list, 6 Remote Site Management see RSM remote site management overview, 5 remote site operation functions involved in, 7 maximum number of nodes, 7 RSM agent, 5 agent for remote data collection and reporting, 5 application scenario, 5 description of, 4 function categories, 4 functions, 5 multi-site operation, 6 overview of, 4 prerequisites for installing, 14 single-site operation, 6 RSM administrator console, 4 S scenario for RSM use, 5 17

single-site operation, 6 SSL encryption, 5 symbols in text, 14 synchronizing device info on remote site, 8 T technical support HP, 13 text symbols, 14 typographic conventions, 14 18 Index