You are on page 1of 96

iMaster NCE-Campus V300R020C10

Monitoring and O&M


Page 0 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Foreword
• With the emergence of cloud computing, the "on-demand" cloud service mode is
gaining popularity, and the traditional network management mode is undergoing a
dramatic transformation. Cloud-based network management is shaping a trend, and
cloud management networks provide a new mode for enterprise network construction
and O&M.

• This document describes the monitoring and O&M functions provided by iMaster NCE-
Campus in the Huawei CloudCampus Solution.

Page 1 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Objectives
• Upon completion of this course, you will be able to:
▫ Understand system O&M functions provided by iMaster NCE-Campus

▫ Understand service O&M functions provided by iMaster NCE-Campus

▫ Understand the preventive maintenance inspection (PMI) function provided by iMaster NCE-
Campus

Page 2 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Contents
1. System O&M

2. Service O&M

3. PMI for Cloud Managed Devices

Page 3 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Cluster Monitoring on the Management Plane
iMaster NCE-Campus provides an independent management plane and service plane.
Different IP addresses and port numbers are used to log in to the planes. This allows
users to focus on different task scenarios and implement efficient system management
and network O&M.

The management plane centrally manages iMaster NCE-Campus software resources,


applications, and databases to implement functions such as installation and deployment,
system monitoring, system maintenance (user and password management, data backup
and restoration, certificate and key management, etc.), and system troubleshooting
(system health check, remote disaster recovery, etc.).

Page 4 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
System Monitoring
The management plane displays monitoring data in terms of the product, node, service,
relational database, and Redis database, as well as allowing users to configure alarm
thresholds for the CPU, memory, and disk usages of nodes.

Page 5 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
System Monitoring - Node
The management plane monitors and displays the CPU usage, memory usage, disk
partitions, and details about resources used by processes on each node.

Page 6 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
System Monitoring - Relational Database
The management plane monitors and displays the running status of each relational
database instance.

Page 7 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
System Monitoring - Redis Database
The management plane monitors and displays the running status of each Redis database
instance.

Page 8 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Unified Monitoring - Overview
The management plane can monitor the network status of network interface cards (NICs),
historical performance indicators of nodes, key middleware indicators, database indicators,
and service key performance indicators (KPIs). It provides enhanced system monitoring
capabilities compared with the original CloudSOP management plane.

Page 9 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Unified Monitoring - Node
The management plane monitors the real-time and historical status of the CPU usage,
memory usage, packet loss rate, network delay, and process of each iMaster NCE-
Campus node to detect and rectify faults in a timely manner, ensuring efficient running of
iMaster NCE-Campus.

Page 10 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Unified Monitoring - Service
The management plane can monitor resources such as the CPU, memory, threads, and
file handles of iMaster NCE-Campus services. Administrators can check the resource
usage of a node based on a service or check the resource usage of a service based on a
node to detect and resolve exceptions in a timely manner, ensuring normal service
running.

Page 11 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Unified Monitoring - Key Middleware
iMaster NCE-Campus uses a large amount of open-source middleware, such as
GaussDB 100 and ETCD. However, the status and indicators of the middleware are not
visualized. The management plane can display the real-time and historical status of key
middleware indicators and the real-time status of all middleware indicators, improving
maintenance efficiency.

Page 12 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
O&M Management - Data Collection
The management plane provides default and custom collection templates for O&M
personnel to collect logs and database tables as required for fault diagnosis.

Page 13 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Introduction to FusionInsight Manager
FusionInsight Manager presents monitoring information in the graphical manner to
help administrators manage FusionInsight nodes.

Page 14 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Homepage
 On the FusionInsight Manager homepage, you can
check the service running status, health status,
CPU usage, memory usage, disk usage, and
interface's network rate of each FusionInsight
node, as well as cluster alarms. An alarm ringtone
is played when an alarm is generated. You can
click the corresponding icon to go to the alarm
page to view alarm details.
 The default CPU usage alarm threshold is 80%,
the memory usage alarm threshold is 90%, and the
disk usage alarm threshold is 90%. If an alarm is
generated, handle the alarm by following
instructions provided in the FusionInsight product
documentation. If the alarm persists, contact
Huawei technical support.

Page 15 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Alarms on FusionInsight Manager
You can view alarm IDs in the alarm list on the O&M > Alarm > Alarm page, and find handling suggestions
based on the alarm ID in the FusionInsight product documentation. If the alarm persists after you have
performed suggested operations, contact Huawei technical support.

Page 16 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Long-Term Monitoring and Routine Check of
the Network Rate
• The rate of access to public cloud services in each region can be monitored.

• Network monitoring is available at www.17ce.com.


1. Information statistics

2. Map display
3. Regional statistics analysis

Page 17 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
One-Time Network Rate Check
• You can manually perform a ping test to test the network rate.

• Check results are displayed in a chart.

Page 18 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
iMaster NCE-Campus Capacity Expansion
This section describes the fundamentals of iMaster NCE-Campus clusters and how
administrators deploy new nodes to relieve the pressure of service expansion. Only
distributed clusters support capacity expansion.

Page 19 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Cluster Capacity Expansion
 iMaster NCE-Campus capacity expansion:
 Minimum clusters do not support capacity expansion, but distributed clusters do.
 Only service nodes can be newly deployed in a cluster, but middleware nodes cannot.
 Capacity expansion is performed using EasySuite.

Page 20 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Node Replacement
 You can replace faulty nodes in an iMaster NCE-Campus cluster.
 Procedure:

Step 1: Back up data, including the product data, product applications, operating system (OS), and
management plane.

Step 2: Deploy a new node and prepare the node for service restoration.

Step 3: Restore files on the new node.

Step 4: Restore mutual trust relationships between nodes.

Step 5: Restore the management plane.

Step 6: Restore the product data, product applications, and databases.

Step 7: Start services on the new node.

Page 21 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Contents
1. System O&M

2. Service O&M

3. PMI for Cloud Managed Devices

Page 22 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Alarm Management Overview
• System administrators can check the running status of iMaster NCE-Campus based on alarms. By doing
so, they can determine whether the system encounters an exception.

• Tenant administrators can check the running status of managed devices based on alarms. By doing so,
they can determine which devices are faulty and handle the faults in a timely manner.

Page 23 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Current Alarms (1/3)
• System and tenant administrators can view all current alarms generated by iMaster NCE-Campus and
devices, respectively, on the Monitoring > Alarm > Current Alarms page and view the detailed location
information and alarm occurrence time.

• They can sort, export, clear, acknowledge, and unacknowledge alarms.

Page 24 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Current Alarms (2/3)
• System and tenant administrators can filter alarms by alarm severity, alarm status, first occurrence time,
last occurrence time, or a combination of the preceding conditions.

• They can also configure combo sorting for alarms and specify the fields to be displayed in the alarm list.

Page 25 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Current Alarms (3/3)
System and tenant administrators can view the details, remarks, and latest handling records of a specific
alarm by clicking .

Note: Correlative alarms are not supported in V300R020C00.

Page 26 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Historical Alarms
All historical alarms of iMaster NCE-Campus and devices are displayed on the Monitoring > Alarm > Historical
Alarms page. After an active alarm is acknowledged or automatically cleared, it will be moved from the current
alarm list to the historical alarm list, and its clearance time will be recorded. In addition, administrators can filter
alarms by alarm severity, occurrence time, name, and location information.

Page 27 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Alarm Masking
• All masked alarms are displayed on the Monitoring > Alarm > Masked Alarms page. After alarms of a type are
masked, no new record is generated on the Current Alarms page when alarms of this type are generated. Masked
alarms can be filtered based on various conditions.

• Administrators can manually unmask alarms of a certain type in the Operation column.

Page 28 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Alarm Notifications via Email

• Administrators can configure alarm


notifications via email on the Monitoring >
Alarm > Alarm Notification page.

• To send emails to specific users to notify


them of alarms, administrators need to
configure the email sending interval, email
recipients, and email content. Administrators
can also specify the severity of alarms for
which email notifications will be sent.

Page 29 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Alarm Settings

On the Alarm Settings page, administrators can customize alarm settings, including the color, notification sound,
font color, and highlight display. In addition, administrators can configure masking rules, intermittent/toggling rules,
correlation rules, automatic acknowledgment rules, redefinition rules, alarm/event name groups, and alarm
synchronization. Administrators can click to view details about each function.

Page 30 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Email Server Configuration
System and MSP administrators can configure an email server on the System > System Management >
Third-Party Service page to send alarm notifications via email. Tenants use the email server configured
by their respective MSPs.

Page 31 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Alarm Dump
• Administrators can configure alarm dump on the Alarm > Alarm >
Alarm Dump page. When the alarm storage duration or number of
historical alarms in the database exceeds the threshold, the alarms in
the database will be written to the configured SFTP server.

▫ iMaster NCE-Campus performs dump detection every four hours.

▫ Alarm dump is triggered when the alarm storage duration exceeds


the configured time.

▫ When a remote SFTP server is configured, every 5 MB (upper


limit) data is packaged, compressed, and then uploaded to the
remote SFTP server.

▫ The condition for terminating alarm dump is that all alarms have
expired.

▫ Only historical alarms and events rather than current alarms are
dumped.

Page 32 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Introduction to Performance Management
• In the CloudCampus scenario, APs, ARs, switches, and firewalls at each site report their
performance data to the iMaster NCE-Campus DataCollector component through HTTP/2.

• The reported data is parsed by the DataCollector component and written into the HBase
database of the FusionInsight cluster.

• The Spark component of the FusionInsight cluster then performs aggregation calculation based
on the Spark computing framework and writes the result into the HBase database.

• Tenant administrators can view the performance data trend and top N devices by performance
at each site, as well as the performance data trend and monitoring indicators of each device on
the iMaster NCE-Campus web UI.

Page 33 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Monitoring Indicators
Category AP AR Firewall Switch
Application monitoring √ √ × ×
Basic performance monitoring √ √ √ √
Terminal monitoring √ √ √ √
Device log monitoring √ √ × √
WAN monitoring × √ × ×
Location monitoring √ × × ×
WIDS monitoring √ × × ×
Mesh monitoring √ × × ×

√: can be monitored
×: cannot be monitored

Page 34 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Monitoring Dashboard
On the Monitoring > Health > Overview page, tenant administrators can check the status, terminal packet loss rate, and application quality
distribution of all sites, and view site locations on the map. They can also view the online Wi-Fi user trend, device status, worst 5 applications
with the poorest performance, worst 5 links with the poorest performance, abnormal cloud managed devices, and alarms.

Note: Both SNMP managed and cloud managed devices are monitored when iMaster NCE-Campus monitors the site status, terminal packet
loss rate, online Wi-Fi user trend, device status, and alarms.

Page 35 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Site Monitoring
• Tenant administrators can choose the IPsec VPN or EVPN tunnel mode on the
Design > Basic Network Design > Network Settings > Tunnel Mode page.

• If the EVPN tunnel mode is selected, tenant administrators can view the site health
status, device status, alarms, device health information, and device list of a specified
site on the Monitoring > Health > Site page. In addition, they can view statistics
about WAN links and applications on the WAN Link and WAN Application tab
pages, respectively. For details, see the SD-WAN O&M feature description.

• If the IPsec VPN tunnel mode is selected, tenant administrators can view the site
health status, device status, alarms, device health information, and device list of a
specified site on the Monitoring > Health > Site page.

• Tenant administrators can select a site on the top of the page to view site monitoring
Note:
information. 1. Differences between the two tunnel modes:
• Select the IPsec VPN tunnel mode in a LAN-only scenario. In this
mode, SD-WAN indicator monitoring is not supported.
• Select the EVPN tunnel mode in a LAN+WAN scenario. In this
mode, both data monitoring in the LAN-only scenario and SD-WAN
indicator monitoring are supported.
2. The functions of displaying device health, site health, device status,
alarms, and device health trends are supported for devices managed by
NETCONF or SNMP.
Page 36 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Inter-Site Monitoring (1/2)
• Tenant administrators can choose the IPsec VPN or EVPN tunnel mode on the Design > Basic Network Design > Network
Settings > Tunnel Mode page.

• If the EVPN tunnel mode is selected, tenant administrators can view the quality and traffic information about WAN-side inter-site links
on the Monitoring > Health > Inter-Site page. For details, see the SD-WAN O&M feature description.

Page 37 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Inter-Site Monitoring (2/2)
• If the IPsec VPN tunnel mode is selected, tenant administrators can view the IPsec VPN status, packet loss rate, and delay between
sites on the Monitoring > Health > Inter-Site page.

Page 38 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Application Monitoring
• Tenant administrators can select the EVPN tunnel mode on the Design > Basic Network Design > Network Settings
> Tunnel Mode page.

• Tenant administrators can view WAN-side application quality statistics on the Monitoring > Health > Application
page. For details, see the SD-WAN O&M feature description.

Page 39 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
WLAN Resource Monitoring
On the Monitoring > Health > WLAN Resources page, tenant administrators can view the AP and SSID information on the entire
network, at a specific site, or in a specific region. They can also view the access user trend, top N APs by the CPU or memory usage, and
top N regions by the number of access users.

Page 40 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Region Monitoring
Tenant administrators can view the imported network planning projects on the Monitoring > Health > Region Monitor page. They can
import a cloud-based WLAN planning project file, import a background image, set the drawing scale, and add APs and adjust their
locations.

Page 41 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Device Performance Data of a Site (1/2)
On the Monitoring > Report > Statistics Analysis page, tenant administrators can view the device performance data trend and
information about top N devices by performance at a specific site based on the device type and time range (such as one day, week, or
month).

Page 42 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Device Performance Data of a Site (2/2)
• Top N terminals by traffic: calculated based on statistics on cloud APs on a per-tenant basis and a per-site basis

• Top N sites by the average number of online users (wireless access): calculated based on statistics on cloud APs and SNMP-managed APs on a per-tenant basis

• Top N sites by traffic: calculated based on statistics on cloud APs, SNMP-managed APs, and other SNMP-managed network devices on a per-tenant basis

• Number of online users (wireless access): calculated based on statistics on cloud APs, SNMP-managed APs, and other SNMP-managed network devices on a per-tenant
basis and a per-site basis

• Network rate and traffic statistics: calculated based on statistics on cloud APs, SNMP-managed APs, and other SNMP-managed network devices on a per-tenant basis and a
per-site basis

• Top N application categories by traffic: calculated based on statistics on cloud APs, firewalls, and ARs on a per-tenant basis and a per-site basis

• Attack detection: calculated based on statistics on cloud APs on a per-tenant basis and a per-site basis

• Top N sites by the number of alarms: calculated based on statistics on cloud managed devices and SNMP-managed devices on a per-tenant basis

• Top N devices by traffic: calculated based on statistics on cloud APs, SNMP-managed APs, and other SNMP-managed network devices on a per-site basis

• Top N SSIDs by traffic: calculated based on statistics on cloud APs and SNMP-managed APs on a per-site basis

• Top N authenticated users by traffic: calculated based on statistics on cloud APs on a per-site basis

• Top N terminal vendors, terminal OSs, and terminal types by traffic: calculated based on statistics on cloud APs and cloud switches on a per-tenant basis and on a per-site
basis

Page 43 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Exporting Monitoring Data to Reports
Tenant administrators can configure a one-time or periodic data export task on the Monitoring > Report > Statistics Analysis > Report
Customization page. By doing so, they can export performance data of devices at a specific site to Excel reports. In the following figure, the
options in the red rectangle are related to WAN services and the option Campus Statistics is related to LAN services.

Page 44 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Terminal Monitoring
Tenant administrators can view terminal statistics on the Monitoring > Health > Terminal page. Terminals connected to
both SNMP managed and cloud managed devices are monitored.

Page 45 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Radio Monitoring
Tenant administrators can view the radio list, radio KPIs, and radio trends on the Monitoring > Health > Device 360 >
AP > Radio page. Radio statistics on both SNMP managed and cloud managed devices are monitored.

Page 46 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Customer Flow Statistics
On the Monitoring > Report > Statistics Analysis > Terminal Behavior Analysis page, tenant administrators can view
site-specific customer traffic statistics in the last minute, in the last 5 minutes, yesterday, and on the day before yesterday,
as well as the average statistics in the last 7 days and last month. They can also view daily, weekly, monthly, and yearly
customer flow trends.

Page 47 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Customer Flow Analysis
Tenant administrators can view the numbers and proportion trends of passers-by and guests, guest dwell duration, and
repeat customers by site on the Monitoring > Report > Statistics Analysis > Terminal Behavior Analysis page.

Page 48 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
WIDS Interference Detection

• Tenant administrators can view information about risky devices, attacks, and related
dynamic blacklists in the current day, week, month, or a user-defined time range on the
Monitoring > Health > Device 360 > AP > Security page. They can also view attack
detection information by tenant.

Note: Statistics on the devices managed by NETCONF and SNMP can be collected.

Page 49 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Application Identification

• Traffic statistics can be collected by application category and specific application based on the data reported
by the ARs, switches, and firewalls managed by NETCONF.

• Tenant administrators can view traffic details of top 5 application categories and top 5 applications by day,
week, or month on the Monitoring > Report > Statistics Analysis page.

Page 50 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Roaming Neighbor Monitoring
• Tenant administrators can view information about roaming neighbors of an AP on the AP details page.

• They can determine whether to adjust the location of APs in a mobility group based on whether terminals can
connect to the APs and the signal strength to ensure that terminals can roam seamlessly between the APs.

Page 51 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Terminal KPI Monitoring
• On the Monitoring > Health > Device Terminal Monitoring page, tenant administrators can view current online users and historical
users using specific terminals and click a terminal MAC address in the user list to view detailed information about a user.

• On the Resource tab page on the AP details page, tenant administrators can view information about users connected to the AP and
click a terminal MAC address to view detailed information about a user.

• Tenant administrators can determine the causes of network quality deterioration in a certain period based on the received signal
strength indicator (RSSI), packet loss rate, delay, and retransmission rate. For example, they can determine whether the network
quality deteriorates due to interference.

Page 52 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Agile Report
Tenant administrators can flexibly customize reports on the Monitoring > Report > Agile Report page.

Page 53 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Periodic Task Management
Tenant administrators can create periodic report tasks on the Monitoring > Report > Periodic Task page and send specific reports in
PDF or Excel to target users via email.

Page 54 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Site-Specific Packet Path Tracing
Tenant administrators can configure packet tracing at a specific site on the Maintenance > Diagnosis Tools > Packet Path Tracing >
Packet Path Tracing on Custom Devices page. With this function configured, iMaster NCE-Campus can trace packets based on the
configured packet characteristics to determine the device ports that the specified packets pass through.

Page 55 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Universal Packet Path Tracing
Tenant administrators can configure packet path tracing on a fabric network or at a site on the Maintenance > Diagnosis Tools >
Packet Path Tracing > Universal Packet Path Tracing page. iMaster NCE-Campus can generate topologies to show packet path
tracing results.

Note:
Universal packet path tracing supports two modes:
• Fabric mode: Fabric networking must be used.
• Common mode: Only simple networking is supported, including the
"AP + switch + firewall" networking, "AP + switch/firewall" networking,
and "switch + firewall" networking.

Page 56 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
AP IoT Monitoring
• On the Monitoring > Health > Device 360 > AP > IoT page, tenant administrators can view information about IoT cards
connected to APs at a specific site, including information about IoT console interfaces and IoT NICs. Such information is also
displayed on the AP details page.

• IoT card monitoring is applicable to the following AP models: AP4050DN-E, AP7052DN, AP7152DN, AP2051DN-E, R250D-E, and
R251D-E.

Page 57 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Monitoring Settings - Quality Calculation
Formula

For devices with WAN-side ports in the EVPN scenario, tenant administrators can set the application quality and link quality thresholds on the
Monitoring > Monitoring Settings > Quality Formula Configuration page to configure a quality calculation formula. In this way, on the
Monitoring > Overview and Monitoring > Inter-Site pages, tenant administrators can view AQM and LQM values calculated based on the
delay, packet loss rate, and jitter values according to the quality calculation formula.

Page 58 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Monitoring Settings – Data Reporting

• For NETCONF-managed devices, tenant administrators can enable them to report certain indicator information on the
Monitoring Settings > HTTP page.

• For SNMP-managed devices, tenant administrators can enable them to report certain indicator information on the
Monitoring Settings > SNMP page.

• The functions of reporting performance data, reporting terminal monitoring information, and reporting alarm data are
enabled by default.

Page 59 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Monitoring Settings - Performance Task
Management

• For SNMP-managed devices, tenant administrators can configure a detailed monitoring policy on
the Monitoring Settings > Performance Task Management page.

• Monitoring policies cannot be configured for NETCONF-managed devices.

Page 60 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Log Dump
• System administrators can configure log dump conditions
and local storage policies to dump excess logs to a local
or remote server.

• Log dump can be configured on the System > Logs >


Logs > Log Overflow Dump page.

• Procedure:

▫ (Optional) Configure the remote SFTP server,


including the IP address, port number, storage path,
username, and password.

▫ Configure log dump conditions, including the dump


threshold and retention period (in days). If either of
the two conditions is met, logs will be dumped to the
remote SFTP server.

▫ Configure a local storage policy, including the local


storage capacity and retention period (in days). The
two parameters specify the maximum number of
dumped files that can be saved locally and the
maximum retention period. If either of the two
conditions is met, dumped files saved locally will be
deleted.

Page 61 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Log Management
• iMaster NCE-Campus can manage security logs, run logs,
and operation logs. In addition, logs can be reported to a
third-party server.

▫ Administrators can view and export security logs, run logs, and
operation logs on the System > Maintenance > Logs page.

▫ Administrators can configure reporting of logs and alarms to a


third-party syslog server. Specifically, they can configure
parameters of a syslog server, types of the logs to be reported,
and alarms to be reported. This function is configurable on the
System > Third-Party Service > Syslog Configuration page.

• Procedure (performed by the system administrator):

1. Enable syslog log reporting.

2. Configure the IP address or domain name and port number of


the syslog server.

3. Select types of logs to be reported.

4. Click Confirm.

Page 62 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Certificate Management
Tenant administrators can manage device certificates of managed APs, ARs, switches, and firewalls on
the Maintenance > Device Maintenance > Device Certificate Management page.

Application scenario:
• A device certificate needs to be replaced with a new one when it is about to expire.
• Enterprises having high security requirements need to use their own certificates.

Page 63 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Device Certificate Management

Updating a device certificate offline Updating a device certificate online

• Manually apply for a certificate from Huawei's Public Key Infrastructure (PKI) system, • The device automatically connects to the
import the certificate to the controller, and then deliver the certificate to a device. certificate server and replaces its certificate.

Page 64 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Introduction to Fault Diagnosis Tools

• iMaster NCE-Campus provides a collection of fault diagnosis tools on its web UI.
Tenant administrators can use these tools to diagnose faults on devices managed by
iMaster NCE-Campus, including APs, ARs, switches, and firewalls. This helps them
quickly locate network faults.

• Currently, tenant administrators can log in to the device CLI remotely, perform remote
control on devices, configure packet header obtaining, collect diagnostic logs from
devices, and use fault location tools to rectify faults.

Page 65 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Remote CLI
• Tenant administrators can perform O&M operations on devices by logging in to the device CLI through
iMaster NCE-Campus.

• Click Command Line in the upper right corner on the device details page to access the device CLI.

Page 66 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Enhanced SSH
To ensure device security, iMaster NCE-Campus supports enhanced SSH, which triggers key updates when
the traffic volume reaches a certain threshold or at a specific interval. This function is disabled by default.

Devices running earlier versions do not support enhanced SSH. If this function is enabled on such devices, they will
be disconnected from iMaster NCE-Campus.

Page 67 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Remote Control (1/2)
Tenant administrators can control indicator blinking on devices and restart devices by clicking Blink and
Reboot Device in the upper right corner on the device details page, respectively.

Page 68 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Remote Control (2/2)
• Tenant administrators can control the LED indicators of APs on the iMaster NCE-Campus GUI.

• The LED indicators of APs can be disabled in a specified time range.

Page 69 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Packet Header Obtaining
Tenant administrators can configure iMaster NCE-Campus to obtain packet headers from specified devices.

Page 70 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Ping
Tenant administrators can ping devices on iMaster NCE-Campus.

Page 71 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Trace
Tenant administrators can perform trace operations on devices through iMaster NCE-Campus.

Page 72 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Fault Information Collection
• Tenant administrators can collect fault information about inter-site links on iMaster NCE-Campus. This function is
applicable to WAN-side devices only. For details, see "Collecting Site Fault Information" in the product
documentation.

Page 73 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Diagnostic Information Collection
Tenant administrators can configure iMaster NCE-Campus to collect CPU alarm logs, memory alarm logs, and logs that
record unexpected restarts from devices.

Page 74 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Application Quality Monitoring
Tenant administrators can specify source and destination sites, source and destination IP addresses, and desired
applications to monitor application quality on the Maintenance > Diagnosis Tools > Application Quality Monitoring
page.

Note: This feature applies only to WAN-side ARs.

Page 75 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Exporting an Online Terminal Statistics Report

Page 76 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Configuring the Interval for Reporting
Terminal Location Information
The function of reporting terminal location information is When this function is enabled, the interval at which
disabled by default. information is reported can be configured.

Page 77 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Log Data Reporting - DNS Service
Experience Data Reporting
When log data reporting is enabled, tenant administrators can configure the function of reporting DNS service
experience data to the analyzer.

Page 78 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Fault Location Tools
Tenant administrators can perform operations on devices through iMaster NCE-Campus, such as ping, trace, radio ping,
virtual cable detection, neighbor signal detection, and device file system management.

Page 79 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Configuration File Management
To quickly back up and restore device configurations, iMaster NCE-Campus can deliver configuration files to devices for them to load
configurations and back up device configuration files. Tenant administrators can import local configuration files to iMaster NCE-Campus
or use the backup configuration files. They can specify a configuration file for a device to restore to its startup or running configuration.

Note: Both SNMP- and NETCONF-managed devices can back up configuration files to the controller and restore their configurations using the backup files. The
device capabilities vary according to the device types. For details, see "Fundamentals" under "Device Management and Maintenance" > "Device File
Management" in the product documentation of the controller.
Page 80 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Device Upgrade Management (1/2)
• System, MSP, or tenant administrators can use the file upload tool to upload software packages and patch packages to iMaster NCE-
Campus and configure device upgrade tasks as needed. iMaster NCE-Campus delivers upgrade commands to target devices which then
obtain required files from the file server to complete upgrade.

• iMaster NCE-Campus can implement smooth upgrade for stacked switches if stack upgrade partitions have been configured on the
Monitoring > Health > Device 360 > Switch > Stack Upgrade Partition page.

Page 81 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Device Upgrade Management (2/2)
• Administrators can resume or cancel the download of files required by device upgrade.

Page 82 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Device Upgrade Management
HOUP

1
2

Device upgrade process

1. The controller obtains the device software package.


• An administrator can obtain the recommended latest stable version of the device from the Huawei Online Upgrade Platform
(HOUP) software library.
• An administrator can also download the required software package from Huawei Support Website and import the package to the
controller.
2. The administrator customizes an upgrade or downgrade policy to manually or automatically upgrade or downgrade the device.
3. When receiving an upgrade task, the device downloads the upgrade package from the specified address and performs an upgrade.

Page 83 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Signature Database Upgrade
System administrators can configure the upgrade center address on the System > System Management > Third-Party Service > Signature Database
Server page. Then, iMaster NCE-Campus can obtain the latest signature database file from the update center periodically or in real time to upgrade its
signature database. Tenant administrators can configure plans for upgrading signature database on devices at a site on the Maintenance > Device
Maintenance > Signature Database Upgrade page. iMaster NCE-Campus will deliver upgrade commands to target devices which then obtain required
signature database files from the file server to upgrade their signature databases.

Page 84 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
License Activation
iMaster NCE-Campus can deliver licenses to devices and activate the licenses. To implement this function,
administrators need to upload licenses to iMaster NCE-Campus on the Maintenance > File Management > File
Management page and then select devices and licenses to be activated on the Maintenance > Device Maintenance >
Activate Device License page. Then, the licenses are activated on the selected devices.

Note: Administrators can load licenses to devices through the controller, facilitating visualized batch operations.
Additionally, they can load licenses directly on devices. The two license loading methods will not cause any conflict.

Page 85 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
SLA Management
Administrators can configure SLA tasks for SNMP-managed devices on iMaster NCE-Campus to implement quick
diagnosis.

Note: The SLA obtains returned values of test cases using the network quality analysis (NQA) protocol of devices and provides four
types of test cases based on specific service and network testing requirements. This can implement high-precision and high-frequency
on-demand tests, helping quickly locate faults. For details, see "Fault Detection and Location" > "SLA Management" in the product
documentation.

Page 86 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Contents
1. System O&M

2. Service O&M

3. PMI for cloud managed devices

Page 87 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Introduction to Device PMI
• iMaster NCE-Campus allows MSP administrators to inspect managed devices such as APs, ARs, switches, and firewalls
and generate PMI reports. This helps large- and medium-sized enterprises check existing network devices and prevent
faults.

• MSP administrators can perform device PMI on a per-tenant basis and obtain PMI reports.

Note: The controller supports built-in PMI scripts for the newly supported device models and versions.
Page 88 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
PMI Report Overview
• The device PMI report is in PDF format. The following figure shows an example.

Page 89 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
PMI Report (1/3)
• The summary chapter describes types of inspected devices, top 20 devices with the most problems, problem severity,
and main problem analysis and description.

• The following figure gives an example of the chart that demonstrates problem severities.

Page 90 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
PMI Report (2/3)
• The device PMI item and result summary chapter gives a PMI summary on a per-site basis, as shown in the following
figure.

Page 91 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
PMI Report (3/3)
• In the detailed device PMI report chapter, detailed PMI results are explained on a per-site basis, as shown in the
following figure.

Page 92 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Quiz
1. Which of the following statements about the system O&M capability are true?
A. A system administrator can check the cluster status.

B. A system administrator can perform a PMI on the system.

C. A system administrator can perform PMI on tenant devices.

2. Which of the following functions are applicable to SNMP-managed devices?


A. Terminal packet loss rate at sites

B. Trend of online Wi-Fi users

C. Device health status

D. Site health

E. WIDS interference detection

F. Diagnosis tools

Page 93 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Summary
• This course describes monitoring and O&M functions provided by iMaster NCE-
Campus.

• Upon completion of this course, you will have a deep understanding of these
monitoring and O&M functions.

Page 94 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Thank You
www.huawei.com

Page 95 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.

You might also like