IPASOLINK PNMSj Monitoring Procedure Manual

8/9/2019 IPASOLINK PNMSj Monitoring Procedure Manual

1/22

NWD-113538-06E

P ASOLINK

N ETWORK

M ANAGEMENT

S YSTEM

PNMS (Java version)

iPASOLINK Series

PNMSjMonitoring

Procedure Manual

NEC CorporationCopyright 2011


2/22

NWD-113538

- i -

Table of Contents

1. Preparing PNMSj and NEs in monitoring of iPASOLINK series ............................................... 1

2. SNMP Protocol (and relevant items) ......................................................................................... 2

2.1. Setting up PNMSj........................................................................................................................2

2.2. Setting up NEs ............................................................................................................................2

3. User Profile (and relevant items) .............................................................................................. 3

3.1. Setting up PNMSj........................................................................................................................3

3.2. Setting up NEs ............................................................................................................................3

4. FTP Protocol (and relevant items) ............................................................................................ 4

4.1. Setting up PNMSj........................................................................................................................4

4.2. Setting up NEs ............................................................................................................................4

5. NTP Protocol (and relevant items) ............................................................................................ 6

5.1.

Setting up PNMSj Server.............................................................................................................6

5.1.1. For Windows Server 2008/Windows Server 2008 R2/Windows Server 2012 R2 ........................ 6

5.1.2. For Solaris 10.......................................................................................................................7

5.1.3.

For Solaris 11.......................................................................................................................8

5.2. Setting up NEs ............................................................................................................................8

6. Severity Colors....................................................................................................................... 12

6.1. Setting up PNMSj......................................................................................................................12

7. HTTP Proxy........................................................................................................................... 13

8. Occupied Protocol Numbers ................................................................................................... 14

APPENDIX A: Sett ing up Cascade Connec tion ........................................................................ 15

APPENDIX B: Sett ing up Internet Opt ions ............................................................................... 16


3/22

NWD-113538

- 1 -

1. Preparing PNMSj and NEs in monitoring of iPASOLINK seriesIn order to monitor iPASOLINK series, following 6 items need to be setup. In this manual, only the

minimal setups necessary are explained. For more detailed explanation of setup procedures, pleaserefer to iPASOLINK series LCT manual.

SNMP protocol (for monitoring/control)

User profile (for security control)

FTP protocol (to transfer/download files) NTP protocol (to synchronize time) Severity color HTTP Proxy


4/22

NWD-113538

- 2 -

2. SNMP Protocol (and relevant items)To monitor NEs by PNMSj, it is necessary to setup SNMP protocol and certain related items. With

regards to the Community name used to monitor/control NEs by PNMSj, same name must be setupfor all NEs. Without this setup, registration and monitoring of NEs by means of Auto-discovery

cannot be done.

2.1. Setting up PNMSjTo monitor NEs, Community used between PNMSj and NEs needs to be setup. For detailed

explanation of this procedure, please refer to section 3.7.11.1. SNMPv2c Setting of PNMSj

Operation Manual.1. Click System Properties PNMS Properties in menu bar of PNMS main window and

SNMPv2c Setting tab will appear in PNMS Properties window.2. Select community name to be used by SNMPv2c.

SNMPv2c Setting - Community (Default: public)3. Setup IP address for Trap receiver. Select IP address used by PNMSj when connecting with

NEs. If expected IP address is not found in the combo box, please enter manually. Trap receiver IP Address Setting - IP Address

2.2. Setting up NEsCommunity name setup in PNMSj must also be setup in all NEs. For detailed explanation of setup

procedure, please refer to LCT Manual of iPASOLINK series.

1. Login to LCT as Admin user.2. From the Menu on left side, select User Account/Security Setting Security Management

Service Status Setting.3. Click No.1 in [SNMP Community] on right side of the window. If No.1 is already used, select

other number for setup.4. Setup following in SNMP Community (No.1) Window.

Community Name : Access Level : Admin

Access Address : Subnet Mask : 255.255.255.255

NOTE

When making arrangements to setup Access

Addresses/Subnet Masks, please proceed by keeping various

situations in mind such as replacing server or monitoring by

multiple numbers of NMS. Above example does not consider

server replacements or multiple NMS usages. If PNMSj

Server address is not clear, set 0.0.0.0 for [Access Address]

as well as for [Subnet Mask].

5. Click [OK] in SNMP Community (No.1) window to complete the setup. Click OK again when

Complete is displayed by Information dialog (Window will close automatically).6. Confirm that the setup is reflected in SNMP Community No.1. With above example, following

should be confirmed. Community Name : Access Level : Admin Access Address :

Subnet Mask : 255.255.255.255


5/22

NWD-113538

- 3 -

3. User Profile (and relevant items)PNMSj calls for LCT as the summary window of monitoring NE details. In order to login

automatically when every time LCT is called, user name and password for LCT login must be setupand be kept in PNMSj. Use name and password used to log into LCT must be same for all NEs.

3.1. Setting up PNMSjTo automatically log into LCT, user name and password used between PNMSj and NEs need to be

setup. For detailed explanation of this procedure, please refer to section LCT Setting and LCT

Security Setting of PNMSj Operation Manual.

[LCT Setting]

1. Click System Properties PNMS Properties in menu bar of PNMS main window and

LCT setting tab will appear in PNMS Properties window.2. Setup the following with regards to launching LCT.

Browser setting :

Specify the browser to be used to launch LCT.[Recommended Browsers ]

Windows: IE7, IE8UNIX: Firefox3.6

[LCT Security Setting]


LCT Security setting tab will appear in PNMS Properties window.2. User name and password used to login to LCT are set separately for each PNMS Security level.

LCT Login User Name/Password (Sorted by PNMS Security Level)

PNMS Securitylevel

LCT Privilege Level LCT Login UserName*

Password*

Admin Admin Admin 12345678

Remote Config Config 87654321

Local Config Config 87654321

User Operator User 87654321

Monitor Operator User 87654321

*LCT login user names/passwords are the default values of NE.

3.2. Setting up NEsLCT Login User Names and Passwords setup for PNMSj must also be setup for all NEs. For detailed

explanation of setup procedure, please refer to LCT Manual of iPASOLINK series. This procedure isnot necessary if no changes are made to (default) settings.

1. Login to LCT as Admin user.

2.

From the Menu on left side, select User Account / Security Setting User AccountManagement.

3. Add any necessary User Names and Passwords.


6/22

NWD-113538

- 4 -

4. FTP Protocol (and relevant items)Certain setups are necessary in order to import PMON, download F/W and for similar other file

transfers. For this procedure, same user name and password will be used by the whole system. Thus,unified user name/password need to be setup for all NEs.

4.1. Setting up PNMSj

To transfer files, user name and password used between PNMSj and NEs need to be setup. Fordetailed explanation of this procedure, please refer to LCT Setting and LCT Security Setting

sections of PNMSj Operation Manual.

[LCT Setting]


LCT setting tab will appear in PNMS Properties window.2. Setup the following with regards to launching LCT.

Browser setting :Specify the browser to be used to launch LCT.

[Recommended Browsers]Windows: IE7, IE8

UNIX: Firefox3.6

[LCT Security Setting]


LCT Security setting tab will appear in PNMS Properties window.2. User name and password used to login to LCT are set separately for each PNMS Security level.

LCT Login User Name/Password (Sorted by PNMS Security Level)

PNMS Security

level

Privilege Level Login User Name* Password*

Admin Admin Admin 12345678

*LCT login user names/passwords are the default values of NE.

4.2. Setting up NEsFTP Login User Name and Password setup by PNMSj Properties - iPASOLINK- ftp setting mustalso be setup for all NEs. This procedure is not necessary if no changes are made to (default) settings.In addition, FTP Service needs to be started. For detailed explanation of setup procedure, please

refer to LCT Manual of iPASOLINK series.

[User Setup]

1. Login to LCT as Admin user.2. From the Menu on left side, select User Account/Security Setting User Account

Management.3. Add necessary User Names and Passwords.

[Starting up FTP Service]4. From the Menu on left side, select User Account/Security Setting Security Management

Service Status Setting.5. Click FTP in FTP frame.

6. Setup following in FTP Setting window. FTP : Service Enable

TCP Port(Command) : 21 TCP Port(Data) : 20 MAX Session : 1 Auto Stop : Enable

7. Click [OK] in FTP Setting window to complete the setup. Click OK again when Complete is

displayed by Information dialog (Window will close automatically).


7/22

NWD-113538

- 5 -

8. Confirm that the setup is reflected in FTP. With above example, followings should beconfirmed. FTP : Running

TCP Port(Command) : 21 TCP Port(Data) : 20 MAX Session : 1

Auto Stop : Enable


8/22

NWD-113538

- 6 -

5. NTP Protocol (and relevant items)The time set in iPASOLINK equipments are synchronized by NTP; thus, NTP Server is essential in

synchronizing with all NEs. In this section, how to use PNMSj server as NTP server and setups to be donein order to execute time synchronization of NEs are explained. Following example shows PNMSj actingas the client to outside NTP server so that it will act as NTP server for iPASOLINK equipments.

5.1. Setting up PNMSj Server5.1.1. For Windows Server 2008/Windows Server 2008 R2/Windows Server 2012 R2

To carry out time synchronization of NEs, NTP server of the Windows needs to be given properprivilege. To do so, following setups need to be done.

5.1.1.1. When there is no outside NTP server1. Click [Start] button and click [run command]. Then, enter regedit and click [OK].2. Find following registry key and click.

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesW32Time

TimeProvidersNtpServer

3. Right click [Enabled] in right side window and then click [Modify].

4. Enter 1 in [Value data] box of [EDIT DWORD VALUE] dialog box and click [OK].5. Find following registry key and click.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesW32TimeConfig

6. Right click [AnnounceFlags] in right side window and then click [Modify].

7. Enter 5 in [Value data] box of [EDIT DWORD VALUE] dialog box and click [OK].8. Right click [LocalClockDispersion] in right side window and then click [Modify].

9. Enter 0 in [Value data] box of [EDIT DWORD VALUE] dialog box and click [OK].10. Find following registry key and click.

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesW32TimeParamete

rs

11. Right click [NtpServer] in right side window and then click [Modify].12. Delete any letters found in [Value data] box of [Edit String] dialog box and click [OK].

13. Terminate registry editor.14. Enter following command at the command prompt and press Enter key to restart Windows time

service.net stop w32time && net start w32time

5.1.1.2. When there is outside NTP server available1. Click [Start] button and click [run command]. Then, enter regedit and click [OK].

2. Find following registry key and click.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesW32Time

TimeProvidersNtpServer

3. Right click [Enabled] in right side window and then click [Modify].4. Enter 1 in [Value data] box of [EDIT DWORD VALUE] dialog box and click [OK].

5. Find following registry key and click.

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesW32TimeConfig6. Right click [AnnounceFlags] in right side window and then click [Modify].

7. Enter 5 in [Value data] box of [EDIT DWORD VALUE] dialog box and click [OK].8. Right click [LocalClockDispersion] in right side window and then click [Modify].

9. Enter 0 in [Value data] box of [EDIT DWORD VALUE] dialog box and click [OK].10. Find following registry key and click.

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesW32TimeParamet

ers

11. Right click [NtpServer] in right side window and then click [Modify].12. Enter IP address of ntp server in [Value data] box of [Edit String] dialog box and click [OK].

13. Terminate registry editor.14. Enter following command at the command prompt and press Enter key to restart Windows time

service.net stop w32time && net start w32time


9/22

NWD-113538

- 7 -

5.1.2. For Solaris 105.1.2.1. When there is no outside NTP server

1. Login as a root user.> su -

2. Copy file from the template.

# cp /etc/inet/ntp.server /etc/inet/ntp.conf3. Edit copied setup file.

# vi /etc/inet/ntp.conf

[Edit No.1] Change any lines starting out with server.

(Before)

server 127.127.XType.0(After)

server 127.127.1.0 prefer[Edit No.2] Change any lines starting out with fudge.

(Before)fudge 127.127.XType.0 stratum 0

(After)

fudge 127.127.1.0 stratum 0[Edit No.3] Comment out any lines starting with key.

(Before)

keys /etc/inet/ntp.keystrustedkey 0

requestkey 0

controlkey 0(After)

# keys /etc/inet/ntp.keys# trustedkey 0

# requestkey 0# controlkey 0

4.

Create drift file.# touch /var/ntp/ntp.drift

5. Launch ntp server.# svcadm -v enable ntp

5.1.2.2. When there is outside NTP server available1. Login as a root user.

> su -

2. Copy file from the template.# cp /etc/inet/ntp.server /etc/inet/ntp.conf

3. Edit copied setup file.

# vi /etc/inet/ntp.conf[Edit No.1] Change any lines starting out with server.

(Before)server 127.127.XType.0

(After)server preferserver 127.127.1.0

[Edit No.2] Change any lines starting out with fudge.

(Before)fudge 127.127.XType.0 stratum 0

(After)fudge 127.127.1.0 stratum 0

[Edit No.3] Comment out any lines starting with key.(Before)

keys /etc/inet/ntp.keys


10/22

NWD-113538

- 8 -

trustedkey 0requestkey 0controlkey 0

(After)

# keys /etc/inet/ntp.keys# trustedkey 0

# requestkey 0# controlkey 0

4. Create drift file.# touch /var/ntp/ntp.drift

5. Launch ntp server.# svcadm -v enable ntp

5.1.3. For Solaris 115.1.3.1. When there is no outside NTP server available

1. Login as a root user.

> su -

2. Copy file from the template.# cp /etc/inet/ntp.client /etc/inet/ntp.conf

3. Edit copied setup file.

(Before)

multicastclient 224.0.1.1(After)

#multicastclient 224.0.1.1

server 127.127.1.0

fudge 127.127.1.0 stratum 04. Lunch ntp.server.

# svcadm -v enable ntp

5.1.3.2. When there is outside NTP server available1. Login as a root user.

> su -2. Copy file from the template.

# cp /etc/inet/ntp.client /etc/inet/ntp.conf3. Edit copied setup file.

(Before)multicastclient 224.0.1.1

(After)#multicastclient 224.0.1.1

server

4. Launch ntp.# svcadm -v enable ntp

5.2. Setting up NEsIn order to synchronize time by top NE (Root NE), either PNMSj Server or an outside NTP servermust be specified as the NTP server. The top NE of each subnet (Branch NE) must specify top NE

(Root NE/Branch NE) of upper subnet where it belongs as the NTP server. Other NEs than

mentioned above (Normal NEs) must specify top NE (Root NE/Branch NE) of subnet where thosebelong as the NTP server. Do not create loop with NTP protocol network (protocol itself does not

detect nor abort loop). For example, specify NTP server as the Default Gateway to avoid loop. For

detailed explanation of setup procedure, please refer to LCT Manual of iPASOLINK series.


11/22

NWD-113538

- 9 -

[Set current time and time zone]

1. Login to LCT as Admin user.2. From the Menu on left side, select Equipment Utility Date/Time Setting.

3. Click Modify button.

4. Check off Display PC Time in Date/Time Setting window. If the same Time Zone is notselected for the PC where LCT is launched and for the machine where PNMSj is active, make

adjustment by selecting appropriate values for Date, Time and Time Zone.5. Click [OK] in Date/Time Setting window to complete the setup. Click OK again when

Complete is displayed by Information dialog (Window will close automatically).


12/22

NWD-113538

- 10 -

[Execute the following to specify as the NTP Server.]

6. From the Menu on left side, select User Account/Security Setting Security ManagementService Status Setting.

7. Click NTP in NTP frame.8. Setup following in NTP Setting window.

NTP : Enable NTP Server Mode : (For Root NE/Branch NE) Unicast

(Other than above) Disabled NTP Client Mode : Unicast Stratum : 5

9. Click [OK] in NTP Setting window to complete the setup. Click OK again when Complete isdisplayed by Information dialog (Window will close automatically).

10. Confirm that the setup is reflected in NTP. With above example, followings should beconfirmed. NTP : Enable NTP Server Mode : (For Root NE/Branch NE) Unicast

(Other than above) Disabled NTP Client Mode : Unicast

Stratum : 5 Multicast Port (Irrelevant) Multicast Interval (Irrelevant)

[Execute the following to specify as the NTP Client]

11. Click No.1 in NTP Server Address frame.

12. Setup following in NTP Server Address Setting window.

IP Address xxx.xxx.xxx.xxx(For Root NE) Server address of PNMSj

(For Branch NE) IP address of Root NE/Branch

NE of upper subnet which it belongs to(For Normal NE) IP address of Root NE orBranch NE of subnet which it belongs to

* However, if iPASOLINK NE is located in the

middle of its previous versions, setups foriPASOLINK that is closest to PNMSj must be

the same as that of Root NE. Further, setups forBranch NE and Normal NE which belong to

such network must be done by assuming thatNE, having same setup as Root NE, as the Root

NE.

NTP Version 4

Poll Time 18hour12min16s (65536s)


13/22

NWD-113538

- 11 -

13. Click [OK] in NTP Server Address Setting window to complete the setup. Click OK againwhen Complete is displayed by Information dialog (Window will close automatically).

14. Confirm that the setup is reflected in NTP Server Address No.1. With above example,

followings should be confirmed.

IP Address xxx.xxx.xxx.xxx(For Root NE) Server address of PNMSj(For Branch NE) IP address of Root NE/Branch

NE of upper subnet which it belongs to(For Normal NE) IP address of Root NE or

Branch NE of subnet which it belongs to* However, if iPASOLINK NE is located in the

middle of its previous versions, setups for

iPASOLINK that is closest to PNMSj must bethe same as that of Root NE. Further, setups forBranch NE and Normal NE which belong to

such network must be done by assuming that

NE, having same setup as Root NE, as the RootNE.

NTP Version 4

Poll Time 18hour12min16s (65536s)


14/22

NWD-113538

- 12 -

6. Severity ColorsTo match Severity Colors with that in LCT, please setup following in PNMSj. With this procedure,

colors in existing NEs will also be changed.

6.1. Setting up PNMSj

For detailed explanation of this procedure, please refer to section SNMPv2c Setting of PNMSjOperation Manual.


Color tab will appear in PNMS Properties window.2. Select Status in Select Type of Color Settings.

3. By referring to the chart below, select Severity for target Item. Select RGB tab in Change Colordialog. Enter values for Red/Green/Blue accordingly by RGB chart. Close dialog by pressing OK

button in Change Color dialog.4. Select Log in Select Type of Color Settings.

5. By referring to the chart below, select Severity for target Item. Select RGB tab in Change Color

dialog. Enter values for Red/Green/Blue accordingly by RGB chart. Close dialog by pressing OK

button in Change Color dialog.6. Click OK button of PNMSj Properties to apply settings.

Severity Color Chart

Severity PNMSj(Default) PNMSj(Changed) LCT

CriticalR: 238

G: 0B: 0

R: 238

G: 0B: 0

R: 255

G: 0B: 0

MajorR: 238G: 85

B: 85

R: 255G: 154

B: 0

R: 255G: 154

B: 0

MinorR: 238G: 170

B: 170

R: 255G: 255

B: 0

R: 255G: 255

B: 0

WarningR: 238

G: 0B: 170

R: 99

G: 255B: 255

R: 99

G: 255B: 255

IndeterminateR: 238G: 170

B: 0

R: 255G: 153

B: 255

MaintenanceR: 238

G: 238B: 85

R: 238

G: 238B: 85

R: 255

G: 154B: 0

NormalR: 102G: 255B: 0

R: 102G: 255B: 0

R: 0G: 255B: 0


15/22

NWD-113538

- 13 -

7. HTTP ProxyIF the network between PNMSj Client and NE can not be opened at the time when LCT is called,

direct connection between PNMSj Client and NE can be bypassed by setting up HTTP Proxy serverin PNMSj.

For detailed explanation of setup procedure, please refer to Setting up Web Proxy section of

Server Setting Manual.


16/22

NWD-113538

- 14 -

8. Occupied Protocol NumbersNecessary port numbers to monitor iPASOLINK equipments are listed below.

Direction of Communication Protocol Receiving Port

Client PNMSj Server RMI 1099 (Initial connection port)1024-65535 (Connection port)

Client PNMSj Server HTTP 80

Client PNMSj Server HTTP Proxy 8080

PNMSj Equipment SNMP 161

PNMSj Equipment FTP 21

PNMSj Equipment FTP-DATA 20

PNMSj Equipment HTTP 80

Equipment PNMSj SNMP TRAP 162

Equipment PNMSj NTP 123


17/22

NWD-113538

- 15 -

APPENDIX A: Sett ing up Cascade Connection

In order for PNMSj to correctly display cascade connected NE, a single, uniquely Own Cascade ID

must be set within a cascade group.Primary IP Address setup for each NE in a cascade group must have the same subnet address.

For detailed setup method, please refer to LCT Manual of iPASOLINK.1. Login to LCT.2. From the Menu on left side, select Equipment Setup Network Management Configuration

Equipment Cascade Setting.3. In order for IP address to be matched with Own Cascade ID, click Setup button and setup

following in Equipment Cascade Setting window.

Number of Cascaded NEs: Number of NE to be connected by cascade connection

Own Cascade ID: Ones very own Cascade ID

Cascade ID / IP Address: IP address matched with Own Cascade ID of other NE

that exists within a cascade group


18/22

NWD-113538

- 16 -

APPENDIX B: Sett ing up In ternet Opt ions

To call out LCT in iPASOLINK equipment, URL of that LCT must be added as one of the Trusted Sites in

Internet Options.Furthermore, in order for save file and select file menus of iPASOLINK equipment to function properly,Custom level in Trusted Sites needs to be changed.

(1) Click Internet Optionsin the Control Panel window.


19/22

NWD-113538

- 17 -

(2) Click the Security tabin Internet Properties window and choose Trusted Sitesicon in Selecta zone to view or change security settings field; then click Sitesbutton.

(3) In Add this website to the zone field of Trusted sites window, enter the URL for LCT ofiPASOLINK equipment to monitor; then click Addbutton.

http://[IP address of iPASOLINK equipment to monitor]


20/22

NWD-113538

- 18 -

(4) Check to make sure that the added URL appears in the Websites field and click Close button tocomplete the process

(5) Click [Custom level...].


21/22


22/22

NWD-113538

(8) Click [OK]to complete the setup.

Documents

IPASOLINK PNMSj Monitoring Procedure Manual