Domain Setup Guide. NetBrain Integrated Edition 7.1. All-in-One Appliance

Similar documents
How to Discover Live Network

Quick Setup Guide. NetBrain Integrated Edition 7.0. Two Servers Deployment

NetBrain OE System Quick Start Guide

NetBrain Consultant Edition (CE)

NetBrain Consultant Edition (CE)

NetBrain Quick Start Guide For End Users

NetBrain Enterprise Server 5.4G1 Edition

NetBrain Quick Start Guide For End Users

NetBrain for Beginners v6.1 Workbook

Quick Start Guide (SDN)

NetBrain Workstation AE Quick Start

Quick Start Guide (SDN)

Document the CCIE Lab

NetBrain POC Walk-Through

NetBrain Enterprise Server 5.0 Edition 4 Steps to Setup NetBrain

Release Notes. NetBrain Integrated Edition 7.0

NetBrain OE 5.1 On-Site Trial. Quick Start Workbook

NetBrain OE 4.0. Release Notes July NetBrain Technologies, Inc

NetBrain Technologies Inc. NetBrain Consultant Edition. Quick Start Guide

Setting up. Discovering the Network. Planning Discovery Runs CHAPTER

Add and Organize Devices

MPLS VPN Multipath Support for Inter-AS VPNs

WhatsConfigured v3.1 User Guide

NetBrain Technologies, Inc. 65 Network Drive Burlington, MA Phone: Website:

NetBrain Instant Trial Edition 5.2. Quick Start Workbook

NetBrain Enterprise Edition 6.2 How to Use Topology Stitching Feature

Introduction to NetBrain Site

Quick Setup Guide. NetBrain Integrated Edition 7.0. Distributed Deployment

NetBrain Floating Licensed CE vs AE

ForeScout Extended Module for Tenable Vulnerability Management

KYOCERA Net Admin User Guide

NetBrain Instant Trial Edition 5.1. Quick Start Workbook

WhatsConnected v3.5 User Guide

GWNMS NeDi. About NeDi. Configuring the NeDi Package. Managing User Access. Managing User Accounts

Manage Administrators and Admin Access Policies

Host Identity Sources

ForeScout Extended Module for Qualys VM

CounterACT Wireless Plugin

Viewing System Status, page 404. Backing Up and Restoring a Configuration, page 416. Managing Certificates for Authentication, page 418

NetBrain Technologies, Inc. 15 Network Drive Burlington, MA Phone: Website:

NetBrain Instant Trial Essential Features Walkthrough

ForeScout CounterACT. Configuration Guide. Version 1.8

API User Guide. NetBrain Integrated Edition 7.1

Deploying Devices. Cisco Prime Infrastructure 3.1. Job Aid

Using NetShow Commands

Legal Notes. Regarding Trademarks KYOCERA MITA Corporation

KYOCERA Net Viewer User Guide

Multi-VRF Support. Finding Feature Information. Prerequisites for Multi-VRF Support

Managing MPLS VPN Services

Remote Access MPLS-VPNs

Manage Administrators and Admin Access Policies

vcenter Server Appliance Configuration Update 1 Modified on 04 OCT 2017 VMware vsphere 6.5 VMware ESXi 6.5 vcenter Server 6.5

vcenter Server Appliance Configuration Modified on 17 APR 2018 VMware vsphere 6.7 VMware ESXi 6.7 vcenter Server 6.7

vrealize Operations Management Pack for NSX for vsphere 3.0

MPLS VPN Explicit Null Label Support with BGP. BGP IPv4 Label Session

Managing CX Devices in Multiple Device Mode

Control Wireless Networks

Quick Start Guide (CM)

Managing Site-to-Site VPNs: The Basics

Managing Site-to-Site VPNs

vrealize Operations Management Pack for NSX for vsphere 2.0

Configuring IP SLAs LSP Health Monitor Operations

Dell EMC License Manager Version 1.5 User's Guide

Administration Utilities

Managing Site-to-Site VPNs: The Basics

Configure Controller and AP Settings

MPLS VPN Carrier Supporting Carrier IPv4 BGP Label Distribution

Smart Install in LMS CHAPTER

Discovering Network Devices

Performing Path Traces

Agent and Agent Browser. Updated Friday, January 26, Autotask Corporation

MPLS VPN--Inter-AS Option AB

MPLS over GRE. Finding Feature Information. Prerequisites for MPLS VPN L3VPN over GRE

Managing Load Plans in OTBI Enterprise for HCM Cloud Service

OPC UA Configuration Manager PTC Inc. All Rights Reserved.

Manage Your Device Inventory

vcloud Director Tenant Portal Guide vcloud Director 8.20

Chapter 10 Configure AnyConnect Remote Access SSL VPN Using ASDM

BGP Event-Based VPN Import

HP JetAdvantage Security Manager. User Guide

WhatsUp Gold. Evaluation Guide

Opus Supervisor User Guide

DSS User Guide. End User Guide. - i -

ForeScout Extended Module for ServiceNow

Provisioning MPLS VPN Cable Services

ForeScout Extended Module for ServiceNow

MPLS VPN Carrier Supporting Carrier IPv4 BGP Label Distribution

ForeScout CounterACT. Assessment Engine. Configuration Guide. Version 1.0

MPLS VPN Carrier Supporting Carrier Using LDP and an IGP

Epson Device Admin User s Guide NPD EN

Sync User Guide. Powered by Axient Anchor

Anchor User Guide. Presented by: Last Revised: August 07, 2017

MPLS VPN over mgre. Finding Feature Information. Last Updated: November 1, 2012

Using the Prime Performance Manager Web Interface

MPLS VPN Half-Duplex VRF

User Guide. Version R95. English

Perceptive Matching Engine

ProxyCap Help. Table of contents. Configuring ProxyCap Proxy Labs

Discover Your Network

IBM Proventia Management SiteProtector Policies and Responses Configuration Guide

Transcription:

NetBrain Integrated Edition 7.1 Domain Setup Guide All-in-One Appliance Version 7.1a Last Updated 2018-09-27 Copyright 2004-2018 NetBrain Technologies, Inc. All rights reserved.

Contents 1. Setting Up Your Domain... 3 1.1. Logging into Domain Management Page... 3 4.1. Configuring Network Settings... 4 4.2. Discovering Network Devices... 6 4.3. Cleaning Up Domain Issues... 11 4.4. Creating Sites... 12 4.4.1. Creating a Site Hierarchy by Importing a Spreadsheet... 12 4.4.2. Adding a Container Site... 15 4.4.3. Adding a Leaf Site... 16 4.5. Creating an MPLS Cloud... 17 4.6. Resolving Duplicated IPs... 20 4.7. Scheduling Benchmark Tasks... 22 4.8. Scheduling Discovery Task... 24 4.9. Verifying Task Result... 25 4.10. Scheduling Crawl Tasks... 28 4.11. Scheduling Qapp Tasks... 29

1. Setting Up Your Domain To set up your domain, complete the following steps: Discovery 1. Configure Network Settings. 2. Discover Network Devices. 3. Clean Up Domain Issues. Post-Discovery 1. Create Sites. 2. (Optional) Create an MPLS Cloud. 3. (Optional) Resolve Duplicated IP. 4. Schedule Benchmark Task. 5. Schedule Discovery Task. 6. Verify Benchmark/Discovery Result. 7. Schedule Crawl Tasks. 8. Schedule Qapp Tasks. 1.1. Logging into Domain Management Page 1. In your web browser, navigate to http://<ip address of Windows Server 2016>/admin.html. For example, http://10.10.3.141/admin.html. 2. In the login page, enter your username or email address, and password. 3. Click Log In. NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance) 3

4. Click Initial Domain from the quick access toolbar and select Manage Domain. Note: It is not recommended to use the same web browser to log into NetBrain system with multiple user accounts. Only the last logged-in user will be recognized as the current user. 4.1. Configuring Network Settings NetBrain Network Settings collects all the credentials used to access live devices and retrieve device data. Only the users who have the privilege to manage the domain can configure and share the Network Settings. 1. In the Domain Management page, select Operations > Discover Settings > Network Settings from the quick access toolbar. 2. On the Network Settings tab, enter all available credentials of your network devices and jumpbox server information in the corresponding tabs. Private Key Server Jumpbox Telnet/SSH Login Privilege Login SNMP String Configuring Private Key The following SSH private key types are supported in the NetBrain system to access your network devices: SSHv1 RSA key SSHv2 RSA key SSHv2 DSA key 4 NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance)

1) Click the Private Key tab. 2) Click Add to open the Private Key Settings dialog box. 3) Enter the alias and click Browse to import your SSH private key file. 4) Enter the passphrase twice if your private key is encrypted. 5) Click OK. Repeat step 2) and step 5) to add more entries if required. Configuring Server Jumpbox If NetBrain Front Server cannot access your live network directly, you can configure a Server Jumpbox. The Front Server will access the Server Jumpbox first and then retrieve live data via the Jumpbox. 1) Click the Server Jumpbox tab. 2) Click Add to open the following dialog box and enter the required information. 3) If your network devices require special commands to access via Telnet or SSH, or require an additional set of credentials, you can click Advanced to configure more settings. NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance) 5

4) Click Test to check whether the connection between the Server Jumpbox and the Front Server is working. In the pop-up dialog box, you can click Refresh to retest the connections. 5) Click OK. Configuring Telnet/SSH Login 1) Select the Telnet/SSH Login tab. 2) Click Add to open the Telnet/SSH Login dialog box. 3) Select the authentication method, enter or select the non-privilege login credentials and click OK. Repeat step 2) and step 3) to add more entries if required. Configuring Privilege Login The credentials for privilege login are all enable passwords. With these credentials, the system can issue CLI commands on live devices. 1) Click the Privilege Login tab. 2) Click Add to open the Privilege Login dialog box. 3) Enter the access credentials and click OK. Repeat step 2) and step 3) to add more entries if required. Configuring SNMP Read-Only Community String 1) Click the SNMP String tab. 2) Click Add to open the SNMP Setting dialog box. 3) Select the version of SNMP and enter the required credentials, and then click OK. Repeat step 2) and step 3) to add more entries. 4.2. Discovering Network Devices The live network discovery function enables you to discover your network devices by a unique neighbor-walking method, and provides a granular view of your network infrastructure. NetBrain provides the following two ways to discover your network. 6 NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance)

Discovering Network via Seed Routers Discovering Network by Scanning IP Range Note: Before discovering your network devices, you need to make sure that the connections between NetBrain Front Servers and your live network are working and all available credentials are configured in the Network Settings to access your devices. Note: The total time that the discovery process may take depends on your network scale. If there are specific devices that you don't want the system to discover, you can add these devices into the Do-Not-Scan list. Note: After the discovery, the system will automatically add the newly discovered devices to your domain and perform more addition operations, including build Layer 3 topology, synchronize with sites, and update the CE devices of the BGP MPLS cloud. Note: If the discovery task cannot finish, restart the Windows Server and then try again. Discovering Network via Seed Routers A seed router is the starting point where the discovery begins. With the seed router method, all the discovered neighbor devices will be treated as new seeds, until all devices matching the defined Discovery Depths are discovered. NetBrain enables you to discover all the neighbor devices from the route tables, CDP tables, and SNMP routing protocol neighbors. 1. In the Domain Management page, select Operations > Discover from the quick access toolbar. 2. On the Discover tab, the method Discover via Seed Routers is selected by default. Select one of the following ways to enter one or multiple seed routers: Enter the seed IP addresses directly in the blank field, separated by semicolons. The live network discovery will start from these IP addresses. If you already have any devices discovered in your domain, click Select Devices. Import a.csv or a.txt file by clicking Import IP list. Here is a sample list for your reference: NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance) 7

3. Select one of the following options from the Access Mode drop-down list. SNMP and Telnet retrieve vendor and model information of devices via SNMP first, and then log into devices by using Telnet to retrieve live data. SNMP and SSH retrieve vendor and model information of devices via SNMP first, and then log into devices by using SSH to retrieve live data. SNMP and Telnet/SSH retrieve vendor and model information of devices via SNMP first, and then log into devices by using Telnet to retrieve live data; if Telnet doesn't work, then use SSH. SNMP and SSH/Telnet retrieve vendor and model information of devices via SNMP first, and then log into devices by using SSH to retrieve live data; if SSH doesn't work, then use Telnet. SNMP Only retrieve live data via SNMP only. Note: The data retrieved via SNMP only might be incomplete. 4. Set the discovery depth by entering a value between 0 and 255. It refers to how deep you want the discovery to go. That is, how many levels of neighbors will be explored from the seed router (the neighbors can include NDP neighbors, routing protocol neighbors, and next-hops in route tables, which depend on your configurations). Here is a sample for discovery depth. 5. Click Advanced to configure more settings: Scan destination subnets continue to scan all destination subnets in the route tables of the devices that are discovered in the last depth. Note: The option is only available when the option Use CLI routing table to discover next-hops is selected. Scan all connected subnets continue to scan all directly connected subnets of the devices that are discovered in the last depth. o Minimum mask bits scan subnets with mask exceeding the threshold. The default value is 24 and can be configured between 22 and 32. Use NDP to discover neighbor devices discover neighbor devices by looking up NDP table. Find routing protocol neighbor via SNMP retrieve routing protocol (such as BGP, EIGRP, and OSPF) neighbors via SNMP. Use CLI routing table to discover next-hops discover neighbor devices from route tables retrieved by CLI commands. 8 NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance)

6. Click Start Discovery. The numbers of discovered devices in each category are updated dynamically. When the discovery task is finished, a prompt information is displayed. The discovered devices are automatically added to the current domain. You can click Discovery Report to view the access log of discovered devices or click Execution Log to view the execution log of the entire discovery process. Discovering Network by Scanning IP Range The scanning method only discovers devices in the specified IP range or subnet. A large network is usually divided into segments each of whom occupies a range of IP addresses. To discover this kind of large network more exactly, it is recommended to use this method. 1. In the Domain Management page, click Discover on the Start Page or select Operations > Discover from the quick access toolbar. NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance) 9

2. Under the Discover tab, select Scan IP Range and use one of the following ways to specify the IP range: Enter the IP range directly in the blank field, separated by semicolons. For example, enter 192.168.2.1 as a single IP address; enter 10.10.10.1/24 as a segment address; enter 10.10.10.1-10.10.10.6 as an IP range. Import a.csv or a.txt file by clicking Import IP list. Here is a sample list for your reference: 3. Select one of the following options from the drop-down list of the Access Mode field. SNMP and Telnet retrieve vendor and model information of devices via SNMP first, and then log into devices by using Telnet to retrieve live data. SNMP and SSH retrieve vendor and model information of devices via SNMP first, and then log into devices by using SSH to retrieve live data. SNMP and Telnet/SSH retrieve vendor and model information of devices via SNMP first, and then log into devices by using Telnet to retrieve live data; if Telnet doesn't work, then use SSH. SNMP and SSH/Telnet retrieve vendor and model information of devices via SNMP first, and then log into devices by using SSH to retrieve live data; if SSH doesn't work, then use Telnet. SNMP Only retrieve live data via SNMP only. Note: The data retrieved via SNMP only might be incomplete. 4. To specify the proxies and credentials to be used in the discovery, click Network Settings to adjust. 5. Click Start Discovery. The numbers of discovered devices in each category are displayed. 10 NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance)

6. When the discovery task is finished, a prompt information is displayed. The discovered devices are automatically added to the current domain. You can click Discovery Report to view the access log of discovered devices or click Execution Log to view the execution log of the entire discovery process. 4.3. Cleaning Up Domain Issues After discovering devices, you can view the devices with issues in the Domain Manager and resolve them to maintain your domain assets up-to-date. The domain manager summarizes devices by category and provides quick access to resolve issues. The device list in each category is updated as soon as a discovery task is finished, including both the ondemand discovery and the scheduled discovery. The following categories of reports can be viewed in the Domain Manager. Select the target issue to clean up based your needs. Unknown IP the IP addresses that cannot be accessed via Telnet/SSH and SNMP during a discovery. Discovered Devices the devices discovered successfully during a discovery. Missed Devices the devices existing in the current domain but failed to be verified during a discovery. Discovered by SNMP the devices accessed by SNMP but failed to be accessed via SSH/Telnet. Unknown SNMP sysobjectid the devices whose sysobjectids are not defined in the Vendor Model table. Unclassified Network Devices the devices whose types are not supported, or not recognized due to unknown sysobjectids. NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance) 11

4.4. Creating Sites Site is a geographical grouping of network devices, which can be used as device scopes, asset filters, and map/topology views. For example, you can divide your network into a hierarchy of sites based on country, state, city, region, and office location. There are two types of sites in the system: Container Site ( ) a parent site that contains leaf sites and other container sites. No devices are directly nested under a container site. Leaf Site ( ) a child site that contains devices. The devices can be added manually or searched dynamically. Site Manager is used to manage and maintain the sites in your domain. You can use either of the following ways to create or maintain a site hierarchy: Create a Site Hierarchy by Importing a Spreadsheet Manually create sites: o Create a Container Site o Create a Leaf Site 4.4.1. Creating a Site Hierarchy by Importing a Spreadsheet 12 NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance)

1. Prepare a spreadsheet with the table headers organized as follows to set the site hierarchy. Here is an example: Site Name (Office)\City\State\Country\Region\Device Hostname Note: Only the.csv,.xls, and.xlsx format files are supported. You can add more column headers or leave some columns empty based on your network distribution. Note: The values in the Device Hostname column must be the same as those in the domain so that the devices can be identified and added to the corresponding leaf sites. Note: The value in the Device IP Address column will be set as the criteria to search for site members. Only one IP address is supported in each row. You can leave it empty if not required. 2. Log into Domain Management page.click Site Manager on the Start Page or select Operations > Site Manager from the quick access toolbar. 3. In the Site Manager, click Import from File, and then select the prepared file and click Open. 4. Configure the following settings. NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance) 13

1) On the Define Site Hierarchy tab, select table headers for each level to define the site hierarchy. By default, five levels are provided, and you can add more levels. In this example, you can define the site hierarchy as follows: 2) On the Add Site Properties tab, select the table headers to set the site properties for each level. 3) On the Add Site Identification tab, select the table headers for the following site identification fields: Device Hostname select the Device Hostname table header from the list for device identification. Device IP Address select the Device IP Address table header from the list. Leave it empty if this column is not in the imported spreadsheet. 14 NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance)

5. Click OK. The site nodes are created in the site tree. 6. Click Rebuild Site to rebuild the site topology. The Site Member tab opens automatically, listing the device members in the currently selected site. 7. Click Commit to commit the site changes. 4.4.2. Adding a Container Site 1. Log into Domain Management page.select Operations > Site Manager from the quick access toolbar. NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance) 15

2. In the Site Manager, right-click the My Network root node in the site tree and then select Add Container Site. 3. On the Site Definition tab, enter the site name and click Site Properties to set the site properties. 4. Click OK. Tip: You can add one or more container sites or leaf sites into a container site. However, you cannot assign any devices to a container site directly. 4.4.3. Adding a Leaf Site 1. In the Site Manager, right-click the My Network root node in the site tree and then select Add Leaf Site. 2. On the Site Definition tab, enter the leaf site name and click Site Properties to set the site properties. 3. Add devices to the leaf site by using either of the following ways. The devices contained in a leaf site can be viewed under the Site Member tab. Dynamic Search specify search criteria and a boolean expression and then click Search. Manually Add click Add Devices Manually and then pick out devices from a device group, a site, or a device type. Tip: One device only can belong to one leaf site. When you add a device that has already been assigned to a site, a conflict occurs. Click OK to move the device to the current site. To keep it in its original site, select the Keep in Original Site check box. 16 NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance)

4. Click Rebuild Site to rebuild the site topology. 5. Click Commit to commit the site changes. Tip: If you select the Lockdown Members check box in a leaf site, the site will be locked and you cannot edit or remove its device members. 4.5. Creating an MPLS Cloud Generally, geographically dispersed networks are connected to one another through the MPLS VPN network of an Internet Service Provider (ISP). NetBrain introduces a concept called MPLS Cloud to simulate the MPLS functions by following the rules of forwarding labeled packets. In the system, MPLS Clouds are taken as devices and have virtual routing tables (VRT) to calculate A-B paths across MPLS. Adding an MPLS Cloud 1. Log into Domain Management page. 2. In the Domain Management page, select Operations > Domain Manager from the quick access toolbar. 3. In the Domain Manager, select MPLS Cloud in the left pane and click Add. NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance) 17

4. In the Add MPLS Cloud dialog box, enter the name and description, and add CE devices to this MPLS Cloud by either of the following ways: Dynamic Search 1) Select Dynamic Search Interface. 2) In the pop-up dialog, enter the BGP AS (Autonomous System) number and VRF (virtual routing and forwarding) name. Tip: VRF is used to establish the correct connections if some devices have duplicated IP addresses. Use a semicolon (;) to separate multiple items. 3) (Optional) To exclude specific devices from the search result, you can define criteria to filter them out. 4) Click Search. Tip: To automatically synchronize the list of CE interfaces with your live network, you can select the Auto update dynamic CE list check box. Then the CE list will be auto-updated when a discovery or benchmark task is executed. 5) Review the search result, and click OK. Manually Add 18 NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance)

1) Click Static Interface. 2) In the pop-up dialog, specify the properties of the CE device. a) Select the CE interface connected to the PE device. b) Select the routing protocol configured between the CE and PE interfaces. c) Input the IP address of the PE interface. d) Input the VPN (if available) that the CE device belongs to. When calculating MPLS VRT, the system save the route entries that belong to the same VPN into one VRT, which ensures the accuracy of A/B path across MPLS Cloud from being affected by other unexpected VRFs in one VPN. Tip: The devices that meet all of the following conditions will be added to the CE list: - The devices not only configured with EBGP Neighbor but also pointing to the defined AS number. - The non-loopback interface in the same network segment with EBGP Neighbor IP configured on the device. - The neighbor IP of CE devices does not exist in the domain. 3) Click OK. Tip: To exclude specific interfaces or devices from the CE list, click Exclude and make settings. The priority of items in different categories is as follows: - Manually excluded items have higher priority than those via dynamic search. - Manually excluded items have the same priority with manually added ones. The latest update will be used. 5. Click OK. A confirmation dialog will prompt to ask you whether to rebuild IPv4 L3 topology or not. Make your selection based on needs. Generating Virtual Routing Table To make the MPLS Cloud have routes to the CE devices when calculating an MPLS VPN path, you need to generate a VRT. The logic of calculating a VRT is as follows: Collect BGP advertised routes to MPLS Cloud from CE devices. MPLS Cloud builds its route tables based on routes advertised from CE devices and takes its connected CE interface as the next hop. To generate a VRT for an MPLS Cloud, complete the following steps: 1. Point to the target MPLS Cloud and click the icon to select Generate Virtual Routing Table. NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance) 19

2. In the pop-up dialog, select a data source to use the cached route table of the MPLS Cloud for calculation. Tip: To automatically update the global VRT in the Current Baseline, select the Auto update global virtual route table check box. 3. Click Submit. 4.6. Resolving Duplicated IPs The duplicate IPs refer to the interfaces configured with the same IPv4 addresses. By moving interfaces of duplicated IPs into different zones, you can make all duplicated IPs involved in IPv4 L3 topology link calculations. When you extend IPv4 L3 neighbors, all calculated links can be displayed on the same map page. During the live network discovery, NetBrain will parse the VRF and IPv4 address for each interface and deal with the interfaces of duplicated IPs as follows: If two interfaces are configured with the same IP address, but with different VRFs, then two zones named after the VRFs will be created automatically after the IPv4 L3 topology is built, and these two interfaces will be put into the corresponding zone according to its configured VRF. If two interfaces are configured with the same IP address, but without VRFs configured, these two interfaces will be put into the Default Zone. To separate the two interfaces, you must create a zone manually, then move one of the interfaces and its neighbor interfaces into the created zone, and finally rebuild the IPv4 L3 topology. Tip: The Default Zone is auto-generated in each domain by the system to store interfaces in IPv4 L3 topology by default. It can neither be renamed nor deleted. Example: Only one topology link is drawn between the following two devices because their interfaces are configured with the same IP address, but without VRFs configured. To resolve the issue, complete the following steps: 20 NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance)

1. In the Domain Management page, click Operations > Topology Manager > Duplicated IP and Subnet Manager from the quick access toolbar. All subnets that contain duplicate IPs in the Default Zone are listed under the Auto Detect IP Conflicted IP tab. 2. Create a zone. 1) Click Add at the upper-right corner of the left pane. 2) Enter the zone name, for example, zone1 and click OK. 3. Move the Interface of duplicated IP and its neighbor interfaces to the newly created zone based on your judgment and rebuild the IPv4 L3 topology. 1) Select the interface of duplicated IP and its neighbor interfaces from one or more subnets, and then click Move To. Tip: If a lot of duplicated subnets are detected in the Default Zone, you can quickly search them by entering their IP addresses and subnet masks on the Search Subnet tab. Use semicolons to separate the items if you enter more than one. 2) Select the zone that you created and click Move To. In this example, select the g0/0/0/3.100 interface of the BJ_L2_Core_4-LAN-01 device and the g0/0/0/3.100 interface of the BJ_L2_Core_3-LAN-02 device and move them into zone1. Note: The move operation will delete all the manually added topology links of this interface. 3) Click Yes when a confirmation dialog box pops up. 4) Click OK when a successful notification dialog box pops up. 5) Click Yes to rebuild the IPv4 Layer 3 topology in the pop-up dialog box. NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance) 21

After resolving duplicated IPs, two topology links are drawn between the two devices. 4.7. Scheduling Benchmark Tasks Basic System Benchmark task can regularly collect live data as baselines to build topology, and calculate paths, device groups, sites, and MPLS Virtual Route Tables. The network data to be retrieved are predefined in the task, and the task will be executed on all your domain devices by default. To enable the task and schedule the runtime, complete the following steps. 1. In the Domain Management page, select Operations > Discovery/Benchmark Task from the quick access toolbar. 2. On the Discovery/Benchmark Task tab, select the Enable check box for the Basic System Benchmark entry. 3. Click Basic System Benchmark to configure the task settings. 22 NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance)

1) On the Frequency tab, specify the task execution frequency. 2) On the Device Scope tab, add the target devices for this task. 3) On the Retrieve Live Data tab, select the target data to be retrieved. 4) In the CLI Commands tab, specify CLI commands to retrieve extra data. 5) On the Additional Operations after Benchmark tab, specify the task execution frequency. See Benchmark Task Settings for more details. Build Topology select the target topology to be built after the latest data is retrieved. System Operations select the target objects to be updated after the latest data is retrieved. Rebuild Visual Space select the target templates to be rebuilt for SDN networks. Parse Configuration File select the target parsers to parse specific data from configuration files for the use in other features, such as Instant Qapp. NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance) 23

Update Maps enable the target maps to be updated after the latest data is retrieved. 6) On the Summary tab, review all the settings you have configured for this task. 4. Click Submit. 4.8. Scheduling Discovery Task Discovery tasks can be scheduled regularly to discover new devices from a live network and automatically add the newly discovered devices into your domain. By default, the task will take all devices in your current domain as seed devices to expand the discovery. You need to enable the task, schedule the execution time and configure the proxies and credentials as follows. 1. In the Domain Management page, select Operations > Discovery/Benchmark Task from the quick access toolbar. 2. On the Discovery/Benchmark Task tab, select the Enable check box for the Scheduled System Discovery entry. 3. Click Scheduled System Discovery, and then edit the discovery task by following the wizard. Frequency specify the execution frequency for the task. By default, it is once. Network Settings specify the proxies and credentials to be used to access devices in the discovery. Discovery Seed by default, the Discover all live network method is selected, which means taking all devices in the domain as seeds to discover new devices by neighbor spreading until the discovery depth is reached. To change the method or configure more, see Discovery Seed Settings. Summary check your settings. 24 NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance)

4. Click Submit to save your settings. Tip: After the system discovery task is executed, the system will automatically rebuild IPv4 Layer 3 topology and synchronize new devices to sites. 4.9. Verifying Task Result After a task is executed, you can look into the detailed logs to verify benchmark results or to troubleshoot any problems. The system provides the following two types of logs: Execution log records the overall status of all subtasks, such as building topology, recalculating sites. Device Log records the live access process for each device, including data retrieval process. Example: To browse benchmark logs. 1. In the Domain Management page, select Operations > Discovery/Benchmark Task from the quick access toolbar. Tip: You can view the latest execution result of all benchmark tasks from the Last Result column. To view the detailed latest execution log of a benchmark task, click the hyperlink (such as Succeeded) in its Last Result column. 2. Right-click the target task entry and then select View Log from the drop-down menu. 3. In the following dialog, select the log type to view from the Log column. Tip: To export the log, point to the target task entry and click the Log. The default location of the exported file is C:\Users\<your username>\downloads. icon to select Export Execution Log or Export Device NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance) 25

View Execution Log Click the icon in the target entry. By default, only the failed logs are displayed. To view all items, clear the Only show failed logs check box. View Device Log 26 NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance)

1) Click the icon in the target entry. By default, the devices with any data retrieval failures are listed. Tip: To show all devices, clear the Only show failed devices check box. NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance) 27

For a discovery task, all devices discovered in the task are listed in the pop-up dialog. 2) Select a device entry to view its task log at the bottom of the dialog. 4.10. Scheduling Crawl Tasks The system provides dozens of built-in crawl tasks to crawl your network data regularly. The crawled data can be used for historical data analysis. 28 NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance)

1. In the Domain Management page, select Operations > Domain Maintenance > Crawl Engine Manager from the quick access toolbar. The built-in crawl tasks are listed. 2. In the Crawl Engine Manager, enable the target crawl tasks. By default, the crawl tasks are weekly executed against all domain devices, and the device types mismatched with parsers will be automatically filtered out. To view or change the settings, right-click a target entry and then select Edit. 4.11. Scheduling Qapp Tasks The system provides several built-in scheduled Qapp tasks to create global data views. To enable the schedules: 1. Click the start menu and select Qapp Scheduler. NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance) 29

2. In the Qapp Scheduler page, enable the target tasks. By default, the built-in Qapp tasks run on all network devices weekly and generate related global data views. To view or change the settings, right-click a target entry and then select Edit. 30 NetBrain Integrated Edition 7.1a Domain Setup Guide (All-in-One Appliance)