Professional Documents
Culture Documents
Component
Collects router and Layer 3 switch trafc, analyzes network trafc based on
NetFlow, NetStream, and sFlow protocols, and allows users to customize
reports. This helps network administrators monitor traffic and bandwidth
usage and detect network bottlenecks in a timely manner, providing evidence
for network planning and fault diagnosis.
Provides a platform for collecting, storing, and auditing multiple types of largescale logs in a unied manner.
Manages logs from Huawei and other vendors'devices.
Provides industry-leading Network Address Translation (NAT) tracing and
security events analysis functions.
Automatically discovers IPSec VPN services on the hub-spoke and site-tosite networks and provides all-round monitoring and diagnostic functions,
including service alarm status monitoring, service topology, performance
monitoring, service diagnosis, and historical tunnel information display.
Provides unied security services management functions for the entire network,
including Huawei firewalls, Unified Threat Management (UTM), and Access
Routers (AR).
Provides policy redundancy analysis, risk analysis, policy matching analysis,
and comprehensive analysis for USG series rewalls to provide basis for policy
optimization.
Product Overview
With the development of enterprise network applications and the expansion of network scale, a large number
of routers, gateways, and Wireless Area Network (WLAN) devices are used on enterprise campus and branch
networks. Enterprises must provide multiple mobile offices, rather than a fixed location, for their employees,
and support diversified services, complicating network management. They urgently need a unified network
management system to improve efciency and ensure normal operation of enterprise services.
Huawei eSight is based on the following concepts: topology-centric, simplified management, and improved
Operation and Maintenance (O&M) efciency. Network administrators can gain an overall understanding of the
network status by viewing the topology. eSight not only provides basic network management capabilities (alarm,
topology, performance, and conguration) but also proactive warnings of potential network faults. In addition,
eSight provides abundant fault location methods to help administrators effectively locate and rectify faults. eSight
provides an all-round, open, and unied management platform, and various service components, to implement
unied management of devices, services, and applications.
Product Features
Easy to Use
ement
Unified Manag
Smart O&M
Easy to Use
User-friendly Graphical User Interface (GUI) and smooth operations
Active monitoring and visible O&M
Unified Management
Multi-type
device management
Multi-vendor device management
Smart O&M
Plug-and-play
Automatic network quality sensing
Product Components
eSight provides a unified O&M platform and specific components to meet enterprise user
requirements.
Description
eSight can manage devices from different vendors and multiple resources to provide
unified management across the entire network.
Unified management of multi-vendor devices: eSight can manage devices from mainstream vendors,
including Huawei, Cisco, Juniper, Ruijie, H3C, Brocade, BDCOM, and Maipu.
Unied management of multi-type devices: eSight can manage network devices such as routers, switches,
rewalls, and WLAN devices, and IT resources such as servers and work stations.
Customized device management: eSight allows customers to customize vendor names, device types, panel
style, performance presentation, and alarms for rapid device adaptation.
Product Overview
As the network scales and the number of enterprise network applications continues to grow, more devices
are deployed. Multiple service routers, security gateways, and Wireless Local Area Network (WLAN) Access
Points (APs) are used to implement communications and collaboration services in decentralized enterprise
campus and branch ofce networks. Enterprises are using an increasing number of core and access devices
provided by multiple vendors. Each device has its own management system, creating confusion for system
and network administrators.
To alleviate the operational burden, Huawei has developed the eSight Unified Network Management
Platform, a unied network management system that provides a comprehensive view and management of all
network and system resources, ensures network stability, and improves O&M efciency.
The eSight Unied Network Management Platform provides compact, standard, and professional editions
for enterprise users. In addition to unified management of devices from various vendors, topology
management, fault management, performance management, a smart conguration tool, conguration le
management, and a Simple Network Management Protocol (SNMP) northbound interface, the eSight Unied
Network Management Platform allows users to customize third-party devices, helping establish a network
management system customized to their own needs.
Features
The eSight Unified Network Management Platform provides compact, standard, and
professional editions for enterprise users.
Edition
Functions
Compact edition
Standard edition
Supports all functions of the compact edition, and Smart Reporter, SNMP north bound
interface, SLA Manager, WLAN Manager, NTA, MPLS VPN Manager, MPLS tunnel manager,
Secure Center, LogCenter, and IPSec VPN manager.
Professional edition
Supports all functions of the standard edition, and hierarchical Network Management
System (NMS), High Availability (HA).
The comprehensive fault monitoring system enables real-time fault diagnosis and quick
troubleshooting.
eSight provides unied monitoring of alarms on the entire network and informs maintenance personnel of
the alarms in the rst instance through alarm sounds, remote alarm notication (email and SMS), and the
alarm panel, ensuring timely troubleshooting.
eSight supports alarm analysis and processing. eSight provides alarm locating functions to switch to NEs,
ports, and services, shield, suppress, and categorize alarms, analyze alarm correlation, redene the alarm
severity, and maintain the experience library, improving troubleshooting accuracy and efciency.
eSight supports customization for alarm shield, redefinition, and alarm sounds to meet specific
requirements in different scenarios.
eSight provides visual management of the entire network topology and status monitoring.
Convenient resource searching on the entire network helps administrators quickly locate resources and
access corresponding services.
Intelligent conguration: eSight is precongured with multiple common service conguration templates.
Users can select an appropriate template to perform the same congurations on devices in a batch or use
a le to perform congurations on groups of devices in a batch.
Conguration le management: Conguration les for multiple devices can be backed up, compared, and
restored. The backup function includes immediate backup and periodic backups, and backups triggered by
device conguration changes. When the device conguration changes, eSight can trigger alarms and send
alarm notication through email.
MIB management: eSight provides Management Information Base (MIB) compilation, loading functions
and Get, GetNext, Walk, and TableView operations.
Unified configuration for wired and wireless services: eSight supports the unified configuration of
wired and wireless services based on the service matrix (including resource groups and service proles),
improving configuration efficiency. When a device goes online, the device is automatically added to
the specied resource group and is granted with the corresponding policies. Plug-and-play is therefore
implemented.
eSight shows device, frame, board, subcard, port on panel, and port state, and allows administrators to
enable or disable ports.
Powerful performance management: eSight provides performance parameter management templates,
supports batch device performance monitoring, visual performance data view, and history date analysis.
Administrators can set different alarm severity and threshold levels and determine whether to send an
alarm based on the number of times that performance indexes exceed the threshold value, lowering report
errors and improving alarm accuracy.
Terminal resource management: eSight provides comprehensive terminal access records, including MAC,
IP address, device name, and port number, helping administrators nd the switch and port on the switch
through which a terminal is connected to the network. Administrators can configure the authorized
terminal IP address, MAC address, and PORT-IP, PORT-MAC, and IP-MAC matching rules. When a terminal
accesses the network illegally, eSight sends emails and records comprehensive information about the
illegal terminal, providing the basis for audits of illegal users.
Group-based management: After a device is added to eSight, the device is automatically added to the
group based on the specied rules and is granted with policies in the group.
Hierarchical network management: Users at headquarters can view alarm, topology, and performance
information from lower-level network management systems. Hierarchical network management meets
large scale network management requirements.
Simple and convenient daily maintenance operations and lower technical requirements
improve work efficiency.
The customized portal allows users to receive all information on the home page. eSight can also integrate
third-party software portals with the home page.
Unied management on wired and wireless users: eSight monitors wired and wireless users in a unied
manner. When associated with WLAN Manager, eSight can quickly rectify faults on wireless users.
Display of wired and wireless devices on one panel: Based on super virtual fabric (SVF) technology, eSight
manages multiple access and aggregation switches as one switch. Information about access switches, APs,
and users is displayed on one panel.
Operating Environment
Conguration requirements for the eSight Unied Network Management Platform (compact edition) are as
follows:
Operating System
Windows7
Configuration Requirements
CPU: 1 x dual-core 2 GHz or higher
Memory: 4 GB
Disk space: 40 GB
Database: MySQL 5.5
PC servers are recommended.
Configuration requirements for the eSight Unified Network Management Platform (standard and
professionaleditions) are as follows:
Operating System
Configuration Requirement
CPU: 1 x dual-core 2 GHz or higher
Memory: 4 GB
Disk space: 40 GB
Database: MySQL 5.5, Microsoft SQL Server 2008 R2 standard
PC servers are recommended.
Determine the hardware specications based on the network scale and
required components.
eSight standard and professional editions can run on VMs. Requirements for VMs are as follows:
Operating System
Configuration Requirement
VMWare ESXI 5.0
CPU: 1 x quad-core 2 GHz or higher
Memory: 6 GB
Disk space: 300 GB
Database: Microsoft SQL Server 2008 R2 standard
Determine the hardware specications based on the network scale and
required components.
Disaster Recovery (DR) protection ensures service continuity and system reliability.
Sight supports two-node clusters in hot standby mode.
eSight supports the Linux operating system.
Deployment Scenarios
The eSight network does not have special requirements when managed devices are connected to the eSight
server and devices support the Simple Network Management Protocol (SNMP).
Ordering Information
Table 2-1 Ordering information for eSight compact edition
Item
Quantity
Remarks
Mandatory for eSight Unified Network
Management Platform
Internet
VPN
Item
Quantity
Remarks
Optional
Branch
Headquarters
eSight professional edition applies to ultra-large enterprises and is deployed at headquarters. eSight standard
or professional edition is deployed at branches. Administrators at headquarters can check the network status
of each branch.
Headquarters
VPN
Branch
Item
Quantity
Remarks
Optional
Statistics in multiple dimensions allow users to understand data from various perspectives.
eSight Smart Reporter provides statistics in different dimensions, including top N statistics, statistics at
different levels (NE level, subnet level, and regional level), interface information (interface connection and
disconnection, interface trafc, and interface performance), device resource usage (CPU and memory), and
wireless resource usage (access users, AP trafc, AP rate, AP access failure, air interface usage, and AP radio).
Product Overview
With rapid network development and continual integration of network applications and service management,
information growth is exploding. Administrators, however, cannot extract the critical information they need
from the bulk; therefore, enterprises urgently need an information management system that can collect,
arrange, analyze, and display data to help improve operating efficiency. The information display mode
directly affects user understanding and provides the basis for decision making. In response to these needs,
eSight provides Smart Reporter as a powerful reporting tool.
Huawei eSight Smart Reporter provides preset report templates to meet requirements in most maintenance
scenarios and a professional report design tool for users to customize statistics reports.
Features
eSight Smart Reporter supports rights- and domain-based management and preset report
templates to meet requirements in most maintenance scenarios.
eSight provides dozens of preset report templates for various statistics elds, such as performance, alarm,
resources, WLAN, Service Level Agreement (SLA), and Quality of Service (QoS), helping users easily obtain
statistics.
Users can specify the times for eSight to collect data generated during peak hours.
Operating Environment
eSight Smart Reporter is installed on the same server as eSight Unified Network Management Platform
standard or professional edition; therefore, conguration requirements for the operating environments are
the same.
Deployment Scenarios
Deployment scenarios for eSight Smart Reporter are the same as those for eSight Unified Network
Management Platform.
Product Overviewt
Currently, most IP networks use coarse-grained bandwidth management polices and do not have quality
monitoring or guarantee mechanisms. Therefore, IP networks provide only connectivity and cannot ensure
good user experience. Users often experience service quality issues such as video pixelation, fuzzy voice, slow
network access, and slow response of cloud desktop. However, the networks and network administrators
are unaware of these issues because there is no system to monitor service quality on the entire network.
Administrators try to locate network problems only after receiving complaints from users. However, it
often takes a long time to locate and solve a problem due to lack of real-time monitoring mechanisms and
effective problem location methods. This problem location process is inefcient and severely affects user
experience.
Huawei eSight SLA Manager implements visible monitoring on network quality by combining the following
methods: simulation ow-based and real service ow-based network quality detection.
Ordering Information
Item
Quantity
Remarks
Huawei eSight SLA Manager monitors network quality using simulation flows by integrating with the
devices' NQA function to diagnose and measure link performance between network devices 24 hours a
day and displays QoS statistics. Administrators can set the QoS threshold, and eSight noties administrators
remotely when QoS reaches the threshold. Administrators can use the quick diagnosis function to monitor
link performance in real time and diagnose faults, which improves management efciency.
Huawei eSight SLA Manager implements network quality detection based on iPCA, which is the industry's
rst multiple-input-multiple-output quality measurement technology and solves the N2 connection problem
in traditional point-to-point quality measurement technologies. iPCA technology uses the enhanced areabased packet conservation mechanism to monitor the quality on a connectionless network and also provides
accurate fault location capabilities.
Features
The network quality emulation test helps users discover network quality problems in
advance.
Service-oriented SLA and easy operation simplify O&M needs. Users can create an SLA service to carry
out E2E network QoS monitoring and evaluate network and service QoS based on SLA compliance. eSight
has more than 20 SLA service conguration items for video, audio, and network applications, allowing
customers to dene SLA services to meet their unique requirements.
eSight SLA Manager displays network QoS statistics and generates alarms in advance to ensure user
experience. After a user creates an SLA task, it will be executed periodically. QoS statistics are displayed
based on daily compliance. When QoS meets the threshold conditions, eSight notifies administrators
remotely, enabling administrators to diagnose faults in advance to ensure the user experience.
eSight SLA Manager provides a quick diagnosis function to narrow the fault scope and shorten fault
diagnosis time. The quick diagnosis function helps users locate faults by link segments, narrowing the fault
scope.
Users can further view real-time data on devices and links as well as packet loss in a port queue or on a
port with the specied MAC address.
Network-level measurement
Network-level measurement targets an area to implement visible monitoring on the area network quality.
Visible historical network data provides a basis for network optimization. In actual applications, QoS values
indicate services of different priorities. Different services on a same link can be compared, and the result
shows whether QoS on a network has taken effect and provides a basis for QoS policy adjustment.
Path hop-by-hop detection can locate the node or link where packets are lost in an area.
eSight SLA Manager provides real-time QoS monitoring, multi-dimensional data analysis,
and graphical data display.
eSight uses the unied dashboard panel to vividly display QoS information, simplifying network management.
The dashboard displays and manages various QoS information in a centralized manner to administrators,
informing them of bandwidth usage and network exception information in real time. The QoS information
includes top bandwidth usage, top discarding rate, top Peak Information Rate (PIR), and top matching rate.
Operating Environment
eSight SLA Manager is installed on the same server as eSight Unified Network Management Platform
standard or professional edition; therefore, conguration requirements for the operating environments are
the same.
Deployment Scenarios
Deployment scenarios for eSight SLA Manager are the same as those for eSight Unified Network
Management Platform. Source devices must be added to eSight, and the IP addresses of the source and
destination devices can be pinged.
Ordering Information
Item
Quantity
Remarks
Product Overview
Fast and stable access speeds improve ofce work efciency, while low access speeds can negatively affect
productivity. Administrators must determine which applications consume the most bandwidth and generate
heavy trafc, and which employees use these applications, and then change the network QoS policy and
expand the network when necessary.
eSight Network Trafc Analyzer (NTA) supports NetFlow, NetStream, and sFlow. It collects trafc information
output by routers and Layer 3 switches and provides user-defined reports to network administrators for
analysis of trafc and bandwidth usage and network bottleneck detection. eSight Network Trafc Analyzer
also provides information for network planning and troubleshooting.
Features
eSight Network Traffic Analyzer supports mainstream network traffic protocols, including NetStream,
NetFlow, and sFlow.
shows the customized dashboard that displays network status.
Figure 5-1 Customized dashboard
Multiple dimensions: eSight Network Trafc Analyzer ranks the trafc on devices and interfaces, including
interface usage, application, host, session, and Differentiated Services Code Point (DSCP) trafc.
Customization: eSight Network Trafc Analyzer allows users to customize the presented content, format,
and formatting style and supports partial trafc updates without changing the Graphical User Interface
(GUI).
The interface traffic and usage rankings display interface traffic statistics, including the incoming and
outgoing rate and incoming and outgoing data packets. Clicking an interface will reveal information about
the trafc composition at different times, in multiple dimensions, including the application, host, session,
and DSCP.
Customized Applications
eSight Network Trafc Analyzer components are recognized based on the protocol and port number, and
hundreds of standard applications and common Layer 4 applications are preset. Protocols and port numbers
can also be added for unknown applications, and network administrators can add applications as required.
Users can customize applications based on the specied protocol, port number, and IP address ranges.
Interface traffic analysis checks the traffic trend for a specified interface, time range, and incoming and
outgoing trafc. Based on interface trafc analysis, network administrators can identify the interfaces that are
used most frequently on the network to gain a comprehensive understanding of the entire network status.
Administrators can detect interfaces with abnormal trafc and locate faults before network performance is
affected.
Operating Environment
eSight Network Trafc Analyzer can be deployed on the same server as eSight Unied Network Management
Platform standard or professional edition, or on a different one. When they are congured on one server,
they can manage no more than 10 NEs, and the conguration requirements are the same as those of the
platform. When they are congured on different servers, conguration requirements are as follows:
Operating System
eSight Network Trafc Analyzer can customize reports by specifying ltering rules, report type, and report
layout conguration. Trafc reports provide references for further network planning.
Windows Server 2008 R2 standard
Configuration Requirement
CPU: 1 x quad-core 2 GHz or higher
Memory: 4 GB
Disk space: 120 GB
Database: MySQL 5.5, Microsoft SQL Server 2008 R2 standard
PC servers are recommended.
Determine the hardware specications based on the network scale.
When eSight Network Trafc Analyzer and eSight Unied Network Management Platform are deployed on
different servers, eSight Network Trafc Analyzer can be deployed on a VM. VM resource requirements are
as follows:
Operating System
Configuration Requirement
VMWare ESXI 5.0
CPU: 1 x quad-core 2 GHz or higher
Memory: 6 GB
Disk space: 300 GB
Database: MySQL 5.5, Microsoft SQL Server 2008 R2 standard
PC servers are recommended.
Determine the hardware specications based on the network scale.
Deployment Scenarios
Original Data Stream Facilitates Fault Location
NTA can extract an original data stream based on a specified time range and filtering rules for further
analysis and fault location. Original trafc information includes the router, source, and destination address,
application, source and destination port, protocol, TCP ag, next hop, inbound and outbound interface, and
DSCP, trafc, and data packets.
Branch 1
WAN
Users can create trafc investigation tasks for suspected abnormal trafc on the NTA page to extract original
data stream information about the current trafc.
Branch 1
eSight network traffic system
eSight Network Trafc Analyzer enables NetStream on an enterprise's WAN-link device interfaces to send
trafc information to the eSight Network Trafc Analyzer. eSight NTA provides the following functions in this
scenario:
Analyzes the current WAN link trafc composition.
Helps recognize abnormal trafc and junk applications.
Quickly locates the IP address of the terminal generating abnormal trafc.
Optimizes link application trafc distribution.
Improves WAN link usage.
Recognizes DSCP bandwidth distribution on the enterprise branch egress.
Adjusts service priority policies.
Periodically generates a link interface trafc report.
Detects network application trafc increase.
Facilitates advance network planning and expansion.
Ordering Information
Item
Quantity
Remarks
Optional
Optional
Optional
Product Overview
Massive application systems and network devices are deployed in an enterprise, including hosts, databases,
other application systems, switches, and rewalls. Due to inconsistent device log formats, low readability,
and difculties storing massive logs, major security risks cannot be promptly detected from logs.
Government agencies and industrial organizations provide guidance and stipulations through internal control
laws and standards, which impose higher requirements on the completeness, accuracy, and effectiveness of
run logs and user logs.
eSight LogCenter:
Provides a platform for collecting, storing, and auditing multiple types of large-scale logs in a unified
manner.
Supports log management of Huawei and third-party vendors.
Provides industry-leading NAT tracing function and security event analysis.
Features
Unified Log Management and Quick Matching Capability
eSight LogCenter supports multiple log collection modes, including Syslog, session, SFTP, FTP static le,
FTP dynamic file, and Windows Management Instrumentation (WMI). Users can collect, classify, filter,
summarize, analyze, store, and monitor logs reported from the application systems or NEs to help the
administrator manage massive logs and learn NE running status, trace network user behaviors, and quickly
recognize and eliminate security risks.
eSight LogCenter supports prompt notications of key logs. The administrator can customize keywords,
log type, and log level thresholds. When logs match customized keywords, log type, or log level, eSight
LogCenter generates alarms in real time and noties users through SMS messages or emails.
Professional NAT Tracing and Automatic Association with User information to Meet Secure
Audit Requirements
eSight LogCenter collects and analyzes logs about sessions on NAT devices to obtain NAT information,
including the IP address, destination port, NAT source IP address, and protocols. eSight LogCenter uses the
NAT information and the data source provided by the Authentication, Authorization and Accounting (AAA)
server to ensure secure audit and trafc investigation.
generates reports to help users learn the network security status. eSight LogCenter supports DDoS attack
event analysis, plug-in block analysis, access control event analysis, policy matching analysis, IPS analysis, URL
lter analysis, and email lter analysis.
Log Collector: Receives, summarizes, formats, lters, counts, and stores logs and generates alarms.
Log Analyzer: Manages policies, reports, devices, systems, and users.
Log Console: Provides an interaction GUI for managing foreground and background using the web.
Centralized deployment: When performance requirements are low, eSight LogCenter can
also be deployed in a centralized way.
Operating Environment
eSight LogCenter Manager can be deployed on the same server as eSight Unied Network Management
Platform standard or professional edition, or on a different one. When they are configured on different
servers, conguration requirements are as follows:
Operating System
Configuration Requirement
CPU: 1 x hexa-core 2 GHz or higher
Memory: 8 GB
Disk space: 36 TB (The recommended available disk space is 33 TB.)
Database: MySQL 5.5, Microsoft SQL Server 2008 R2 standard
PC servers are recommended.
LogCenter supports distributed deployment. Determine the hardware
specications and the number of servers based on the network scale.
Deployment Scenarios
eSight LogCenter network can be deployed in centralized or distributed ways.
Distributed deployment: The Log Collector and the Log Analyzer are deployed separately
on two servers.
Log
Analyzer
Log Analyzer
Huawei
NAT
device
When fewer than 2,000 logs are managed every second in an SMB project, eSight LogCenter and an eSight
application base can be deployed on the same server.
Ordering Information
Description
Quantity
Remarks
Mandatory
Huawei
NAT
device
Database storing
original log text
WLAN Manager
Service topology: The service topology shows connections between the ACs, APs, and Stations (STAs)
and marks rogue APs. Users can view detailed information about the ACs, APs, STAs, and rogue APs and
diagnose wireless service faults (such as by the ping operation).
Product Overview
With network development, Wireless Fidelity (Wi-Fi), a low-cost and highly efcient network deployment
and maintenance mode, has been widely recognized by customers. However, Wi-Fi's high requirements on
the environment and distributed deployment of a large number of ACs and APs on WLAN networks make
maintenance costly and difcult; therefore, an easy-to-use and efcient WLAN management system is the
key to ensure enterprise E2E operations.
Huawei eSight WLAN Manager integrates the management of wired and wireless networks, supporting
wizard conguration to improve wireless services deployment efciency. It displays information about WLAN
network quality, interference sources, wireless intrusion, and access terminals. It also supports one-click
diagnosis, interference source locating, access terminal locating, and spectrum analysis at the terminal and
network side to implement highly efcient troubleshooting.
Features
Unified Wired and Wireless Management
In eSight physical topology, users can monitor switches, routers, and security, IT, H3C, and Cisco devices in
a unied manner. Through centralized management of wired and wireless devices, such as ACs, Power over
Ethernet (PoE) switches, and APs, users can directly view device connections, status, and alarms on the entire
network.
Location topology: WLAN Manager can deploy APs to different areas in the physical topology and display
hotspots to help maintenance personnel discover radio signal coverage holes and channel collision areas.
It supports locating users, unauthorized devices, and interference sources, and displays historical tracks.
Administrators can determine whether to display or hide users of a specied area, rogue APs, unauthorized
users, and interference sources.
Frequency spectrum analysis: Users can obtain the channel quality and interference source information
from spectrograms, which contain real-time, in-depth, channel quality, and channel quality trend grams,
and device duty cycle.
Quick network fault locating: Diagnose network quality from four aspects, including user, SSID, AP, and
AC. List possible problems and give corresponding solutions to help troubleshooting.
When a carrier's APs or private APs occupy the planned channels and interfere with APs
on the live network, users can use eSight WLAN Manager to quickly change the channel if
negotiation is unavailable.
Deployment Scenarios
Ordering Information
Item
Quantity
Remarks
Mandatory
Optional
Optional
Optional
Optional
Optional
Optional
Entire-network resource statistics: An online user line chart shows the top ve accessed t APs and SSIDs,
top ve device alarms, and physical resource statistics on the entire network.
Optional
AC statistics: A line chart shows statistics about online users collected by the AC, including AP and domain
information and the top ve AC alarms.
Optional
AP statistics: Shows the top ve AP alarms and performance counters (including the number of terminals
connected to APs, AP physical attributes and trafc, and radio trafc).
Optional
Optional
Optional
Optional
Optional
Optional
eSight can restart, replace, and restore APs to factory settings in a batch.
During WLAN network debugging, or when APs are faulty, users can remotely restore APs to factory
settings in a batch.
During WLAN network debugging or when APs are upgraded, users can remotely restart APs in a batch.
If an AP is faulty, users can quickly replace the AP in eSight. The replacement does not affect AP
congurations.
Resource Statistics Meeting O&M Requirements
SSID statistics: Shows the number of APs, number of VAPs, and number of terminals connected to APs.
Region and location statistics: Displays the total number of APs, number of online APs, and number of
online STAs by region and location.
Operating Environment
eSight WLAN Manager is installed on the same server as eSight Unified Network Management Platform
standard or professional edition; therefore, the operating environment conguration requirements are the
same.
Product Overview
VPNs are complex, bearing various services such as data, voice, and video. Huawei eSight MPLS VPN
Manager is designed to deal with such complex scenarios as the following in routine maintenance:
Shielding complex services and allowing maintenance personnel to know the operating status of deployed
VPN services in real time and perform troubleshooting in a timely manner.
Monitoring the bandwidth usage of each service to ensure the priority of emergency command systems
and important users.
Ensuring cross-regional video conferencing quality among provinces, cities, counties, and towns.
Visual service management facilitates unified monitoring on the entire network and
provides real-time services operating status.
The access topology view displays devices based on services currently running on them and displays alarms
and the link status of current services for quick diagnosis.
Huawei eSight MPLS VPN Manager integrates discrete VPN information on the network into visible
manageable objects and displays them in topology. Administrators can easily monitor VPN services and
diagnose faults to ensure QoS and reliability of key services.
Features
E2E wizard quickly deploys VPN services.
eSight MPLS VPN Manager provides E2E service deployment capabilities to help users quickly deploy new
VPN services, add new VPN access points, and change existing VPN services, improving service maintenance
efficiency. eSight MPLS VPN Manager supports static routes, OSPF, IS-IS, and Exterior Border Gateway
Protocol (EBGP) routing protocols between PEs and CEs on networks in full-mesh, hub-spoke, Multi-VPNInstance CE (MCE), and customized modes.
eSight MPLS VPN Manager interacts with report, SLA, and performance monitoring.
Intelligent interaction with performance monitoring: eSight MPLS VPN Manager allows users to customize
and view trafc statistics, Virtual Routing and Forwarding Tables (VRF) trafc statistics, and the number of
active VRF routes on the ve or ten most active access interfaces. eSight MPLS VPN Manager also provides
trafc trend charts with detailed counters.
Ordering Information
Item
Intelligent interaction with SLA: eSight MPLS VPN Manager provides SLA assessment on service links
between a PE and a CE, and between PEs based on Internet Control Message Protocol (ICMP) Echo service.
Intelligent interaction with reports: eSight MPLS VPN Manager provides interface traffic statistics and
service VRF statistics in reports, which customers can export.
Operating Environment
eSight MPLS VPN Manager is installed on the same server as eSight Unied Network Management Platform
standard or professional edition; therefore, the operating environment conguration requirements are the
same.
Deployment Scenarios
Quantity
Remarks
Optional
eSight MPLS Tunnel Manager automatically discovers tunnels deployed on the network to
obtain information such as the number of tunnels, tunnel types, and tunnel status.
eSight MPLS Tunnel Manager uses the automatic discovery function to discover the MPLS TE tunnels (RSVPTE signaling-based dynamic tunnels and CR-Static signaling-based static tunnels) and LDP tunnels that have
been deployed on the network to eSight from specied or all devices.
eSight MPLS Tunnel Manager monitors tunnels in real time and dynamically displays the
tunnel running status.
When receiving an alarm, eSight MPLS Tunnel Manager noties users of tunnel status changes in a timely
manner. The tunnel topology displays tunnel status and provides entries for users to view the link bandwidth
information (such as bandwidth on outbound or inbound interfaces and maximum reserved bandwidth), link
interface information, and whether MPLS is enabled on devices, helping users diagnose faults.
Product Overview
When receiving an alarm, users can directly access the Tunnel Topology page from the alarm page to check
the tunnel status.
Tunnel technology is widely used on enterprise networks. Enterprises choose tunnels based on service
features. Generally, LDP tunnels carry services with low bandwidth and QoS requirements, and MPLS TE
tunnels carry services with high bandwidth and QoS requirements. To ensure that services run properly,
administrators must know the following tunnel information on the current network: number of tunnels,
tunnel types, path of each tunnel, tunnels with the protection function, and whether a tunnel switchover
occurs.
eSight MPLS Tunnel Manager automatically discovers MPLS TE tunnels (RSVP-TE signaling-based dynamic
tunnels and CR-Static signaling-based static tunnels) and LDP tunnels that have been deployed on the
network. It monitors the tunnels in real time and displays tunnel running status dynamically. In addition,
eSight MPLS Tunnel Manager monitors active-standby switchover and bypasses.
Features
eSight MPLS Tunnel Manager allows users to easily and efficiently configure tunnel policies
using a template.
The smart conguration tool can be used to deliver tunnel policies in a batch, which reduces errors and
improves efciency.
When detecting that the active LSP is faulty, eSight MPLS Tunnel Manager performs an active-standby
switchover or bypasses the faulty LSP. All paths of the original tunnel before the switchover or bypass are
unavailable. The active-standby tunnel switchover status is displayed in the tunnel topology.
When an LDP tunnel is faulty, all links in the tunnel topology are unavailable.
Operating Environment
eSight MPLS Tunnel Manager is installed on the same server as eSight Unified Network Management
Platform standard or professional edition; therefore, the operating environment conguration requirements
are the same.
Deployment Scenarios
eSight MPLS Tunnel Manager works with MPLS VPN Manager to let users quickly locate
services affected by tunnel faults and check whether a service fault is caused by a tunnel
fault.
In the eSight MPLS VPN Manager service list, users can click Tunnel List to view tunnels that carry a VPN and
check whether a service fault is caused by a tunnel fault based on the tunnel status.
Ordering Information
Item
In the eSight MPLS Tunnel Manager tunnel list, users can click View VPN to view VPNs carried on a tunnel
and learn which VPNs will be affected by a tunnel faul
Quantity
Remarks
Product Overview
Enterprises use the IPSec VPN network to carry service data, ensuring data security; however, IPSec VPN
technology is complex with multiple conguration parameters and commands, leading to troubleshooting
and routine maintenance difculties.
The eSight IPSec VPN management component automatically discovers IPSec VPN services on a hub-spoke
or site-to-site network to provide all-round monitoring and diagnosis, facilitating troubleshooting and
maintenance on the IPSec VPN network.
Features
Various Statistics Display, Showing IPSec VPN Network Performance Status
Operating Environment
eSight IPSec VPN Manager is installed on the same server as eSight Unied Network Management Platform
standard or professional edition; therefore, the operating environment conguration requirements are the
same.
Deployment Scenarios
Currently, eSight supports two IPSec VPN networking scenarios: site-to-site VPN (point-to-point) and hubspoke VPN (point-to-multipoint).
Site-to-site VPN
A site-to-site VPN implements communication between LANs; therefore, it is also called LAN-to-LAN VPN or
gateway-to-gateway VPN. Typical networking is shown below:
PC
PC
IPSec Tunnel
Headquarters
Branch
Internet
Gateway A
Gateway B
Server
Server
Hub-spoke VPN
Hub-spoke VPN implements IPSec VPN communication between an enterprise headquarters and its multiple
branches. Typical networking is shown below:
IPSec Tunnel
Branch 1
Product Overview
Gateway B
Headquarters
Gateway A
eSight Secure Center provides security policy management functions (such as unified configuration and
deployment of security application policies on the entire network) for Huawei UTM, firewalls, and ARs,
helping users manage multiple security devices in a unied manner and reducing security O&M costs.
Internet
Branch 2
PC
Gateway C
Ordering Information
Quantity
Remarks
eSight Secure Center supports the unified configuration of security application policies.
eSight Secure Center centrally manages security application policies on multiple devices, including Huawei
UTMs, rewalls, and ARs. Users can congure device security application polices based on the user, user
group, and device.
IPSec Tunnel
Item
Features
eSight Secure Center supports intelligent security policy analysis to provide basis for
security policy optimization.
eSight Secure Center supports analysis on policy redundancy, policy risk, policy matching rate, and
comprehensive policy analysis.
Policy redundancy analysis: Recognizes redundant policies on the network to ensure rationality of rewall
policies.
Policy risk analysis: Recognizes policies with potential risks and provides suggestions to ensure the conformity
and security of rewall policies. For example, if a policy is used to enable a port that must be disabled, or a
policy is applied to a wider network segment, potential risks exist.
Policy matching rate analysis: Recognizes policies with high matching possibilities to facilitate policy
optimization by O&M personnel.
Operating Environment
eSight Secure Center is installed on the same server as eSight Unified Network Management Platform
standard or professional edition; therefore, the operating environment conguration requirements are the
same.
Deployment Scenarios
Deployment scenarios for eSight Security Center are the same as those for eSight Unified Network
Management Platform.
Ordering Information
Comprehensive policy analysis: Integrates analysis on policy redundancy, policy risk, and policy matching rate
to provide device robustness assessment.
Description
Quantity
Remarks