NetBrain OE System Quick Start Guide · Map the Network For a Task 02 1 Install NetBrain OE System 1.1 Install Gateway Server Step 1 Install IIS services 1. Click Start > Settings

NetBrain Technologies Inc.

NetBrain OE System

Quick Start GuideFor Operator Edition Administrators

01Map the Network For a Task

NetBrain OE System Deployment

See OE End User Tutorial for more Workstation features.

Component Minimum System requirement Operation System Others

Gateway Server 2 GHz, Dual core CPU, 2 GB memory, 10 GB free disk space

Windows Server 2008, Windows Server 2003 including SP2/R2

Microsoft Internet Information Services (IIS)

Network Server 2 GHz, 2 GB memory, 10 GB free disk space Windows Server 2008, Windows Server 2003 including SP2/R2

Workstation 1 GHz, 1 GB memory, 5 GB free disk space Windows XP SP2, Windows Vista, Windows 7, Windows Server 2003, Windows Server 2008

http://software.netbraintech.com/OE_release31/quick_start/end_user_quick_start/end_user_quick_start.htm


1 Install NetBrain OE System1.1 Install Gateway Server

Step 1 Install IIS services

1. Click Start > Settings > Control Panel > Add or Remove Programs option.

2. Select Add/Remove Windows Components button.

3. Select Application Server item then click the Details button.

4. Select the Internet Information Services (IIS) item, and then click OK to install the services.

Go to the next step if IIS is already installed.

Step 2 Install Gateway Server

1. Run NetBrain Gateway installation setup file and follow the setup wizard.

2. In the window for PostGRES installation, keep the default port “54321” and default username “postgres”. Enter the password as “postgres”.

If you got an error message “postgresql.conf not found”, check whether the Secondary Logon service is running. Start this service if not. Reinstall the Gateway Server. For detail or other possible problem, check here.

Step 3Activate Gateway Server

1. Click the Start > NetBrain > NetBrain License Tool option. The NetBrain License window opens.

2. Select the NetBrain Enterprise Server from the product drop-down list.

3. Click the Trial Activate button. The Register for Trial License window opens.

Note: if you have the permanent license, click the Activate button. At the Activate License window Fill in the License ID, Password, First Name, Last Name and Email fields.

4. Fill in the Email and Activation Key and click the Next button to start the activation process. After verification, the trial license will be activated and you are able to use the program for up to 15 days.

· If you do not have the Activation Key, Click here and fill in the form. NetBrain will send you the Activation Key for the trial license.

· If the server is not connected to Internet, you can activate the license via email. Follow the instruction here.

Step 4 Login in Gateway Server web interface

Enter URL http://<IP_or_DNS_Gateway_Server>/netbrain. The default username/password is admin/admin.

To change the admin default password, click User accounts and then the button of admin.

http://forums.netbraintech.com/showthread.php?p=1097#post1097

http://www.netbraintech.com/register/request-trial/enterprise-suite.php

http://forums.netbraintech.com/showthread.php?p=1098#post1098


Gateway Server Home page


1.2 Install Network Server

1.3 Install Workstation

Step 1 Download Setup File

1. Login to the web interface of Gateway Server and click Install Workstation link.

2. Download NetBrain OE Workstation setup file.

Step 2Install NetBrain OE Workstation

1. Run NetBrain OE Workstation setup file.

2. Follow the Setup Wizard.

Step 3Login to OE Workstation

1. Launch the Workstation.

2. Click the Change Server option from the Server drop down list.

3. Enter the Gateway Server IP address or domain name and the port number.

4. Click the Test connection button.

5. Enter the administrator username and the password. The default is admin/admin.

· The Workstation user interface is not same for the administrator as for the engineer.

· Most of tasks in this guide can be done via the administrator user interface of NetBrain Workstation.

Step 1 Download Setup File

1. Login to the web interface of Gateway Server and click Install Network Server link.

2. Download the Network Server setup file.

Step 2Install Network Server

1. Run the Network Server setup file.

2. Follow the Setup Wizard.

N e t B r a i n N e t w o r k S e r v e r s h o u l d automatically start as a service. If not, you can double click its shortcut on desktop to start it.

Step3Add Network Server into System

1. Login to the web interface of Gateway Server, and click Network Server link.

2. Click the Add the Network Server link. Enter the server IP address, benchmark service and proxy service port. The default benchmark service port is 7813 and the default proxy service port is 9099.

Step 4Check Network Server Status

Click Network Server link at web interface and click Server Status. indicates that the Network Server is ready to work.

If Network Server is not working, make sure that TCP ports 9099 and 7813 are open.


2. Discover Network and Populate the Shared Workspace As the administrator, you are responsible for building and maintaining the workspace. The workspace is a virtual work environment that NetBrain uses to emulate your network. Most of workspace data is maintained in Gateway and shared by all Workstations.

The workspace data in the Gateway Server includes the device configurations, the network topology (Layer 3 and Layer 2 topology), the credentials to access the live network, the public device group and the data retrieved from the live network (live data). All these data can be managed by the Workstation Administrator user interface and some of these data can also be managed in Web Interface of Gateway Server.

NetBrain provides a wizard to help set up the workspace.


2.0 Start Workspace Wizard

To start the Workspace Wizard, Click the Start button in the start page to open the wizard (if the start page is not visible, click View and then Start page in the ribbon menu).

The wizard includes 6 steps, some of which may not be necessary and can be skipped by clicking the Next button. You can also click the Finish button at any step to exit the wizard.

Step Operation Description Note

Define Telnet/SSH/SNMP credentials and Proxy Define the credentials to access the live network. Used to discover network and tune live access.

If you do not have live access to the network, you can jump to step 3.

Discover the live network Starting from a seed device, discover your entire live network.

Import Configurations If some devices cannot be accessed or are not discovered for some reason, add these devices by importing configuration files.

If you use configuration management tools such as HP Automation and Cisco Works, you can export configurations into a directory from these tools and import them into NetBrain.

Tune Live Access Check the reach-ability of a device and fill in the credentials for each device.

Alternately you manually define the credentials for an individual device and a device group.

Benchmark the network and build L3 & L2 topology. Run the benchmark now or setup a schedule to benchmark the network.

The system automatically builds L3/L2 topology after the benchmark task is done.

Create L3 or L2 topology maps Create a map from the system generated device groups or switch groups.

This step is not essential for workspace setup. It just shows you one of many methods to create a map on demand.

1

2

3

4

5

6


Click the Telnet/SSH login tag.

Click the Add button.

Enter the corresponding values.

Repeat step 3 and 4 to add all possible Telnet/SSH login credentials.

Click the other tags in Live Network Setting window to add Privilege Password, SNMP community, Network Server and Jumpbox.

Click the Next button to go to the next step of Wizard.

Note:

• If both the Network Server and Workstation can access

your network directly, then you do NOT need set a

Jumpbox. Otherwise you do need set a Jumpbox so

that the Network server or Workstation can access the

live network.

• Network Server must be able to access the network

devices via telnet/SSH or SNMP. If an ACL is

configured for SNMP RO string, then network server IP

address must be allowed in that ACL.

1

2

3

4

2.1 Define Telnet/SSH/SNMP credentials and Proxy

Define the credentials for the system to discover the live network and tune live access.

5

6


Live Network Setting Examples

Telnet/SSH login Username nb

Password nb

Privilege Password nb

SNMP community nb

Network Server IP address 72.85.225.144

Port 9099

Jumpbox IP address 72.85.225.144

Username netbrain

Password netbrain

Login Prompt login:

Command Prompt: :/>


2.2 Discover Live Network

Discover the network devices starting from a seed router. The discovered devices and configurations are automatically added into the workspace.

Click the options button and select correct access order. For example, if most of your devices are accessed via SSH, you can select Try SSH then Telnet.

Enter an IP address of the seed router. Or click Select Device to select a seed router.

Click the Start Discovery button.

Select an entry to view the log.


Note: the discovery statistics are updated and displayed

at.

1

2

3

4

5

6


Inside NetBrain

After network devices have been discovered by seed router, you can select scanning the IP subnets. During the discovery process, the system parses live data such as configuration files and routing tables to create a set of destination subnets and directly connected subnets. You can choose to scan all destination subnets or just directly connected subnets. This scan process may help discover more devices, however, be aware that the scan process can be time consuming. To select scanning subnet options, click the Options button in Live Network Discovery window and then Discovery Options tag.

You can create a discovery report after discovery process is done. Click the Report button ( ) from the Workspace tab. The discovery results are summarized in Discovery report.

Note

If you fail to discover some devices in your network, first make sure that you enter all possible live network settings at step 1: Define

Telnet/SSH/SNMP credentials and Proxy and then you can try different seed routers. Click here for detail.

http://forums.netbraintech.com/showthread.php?t=784


2.3 Import Configuration Files

After a network device is discovered, its configuration file is automatically imported into the workspace. If some devices cannot be accessed or are not discovered for some reason, add these devices by importing configuration files.

Collect configuration files into a file folder.If you use configuration management tools such as HP Automation and Cisco Works, you can export configurations into a directory from these tools and import them into NetBrain.

Click From Folder button and select the file folder you saved configuration files.

Click the Import button.

The imported devices are displayed in the Workspace pane.


1

2

3

4

5


Inside NetBrain

After a configuration file is imported into the workspace, a virtual device is added into the workspace as well as its L3 connection. In the next step, you will add the credentials (device settings) to access the live network such as username/password (see the next step) and so relate the virtual device with the live device. The configuration file retrieved from the live device via Benchmark (see step 2.5) is used to update the virtual model.

Note

NetBrain supports configuration files of Cisco IOS router, IOS switch, CatOS switch, Pix/ASA firewall, Junos router, 3COM router/switch.

A complete list of vendors and hardware models supported can be found here. Configuration files need to be of original text format.



2.4 Tune Live Access

Check the reach-ability of a device and fill in the credentials (device settings) for each device.

Click Start Tuning.

Click an entry to view its log.

After the process is finished, right click an entry and view its device setting or telnet/SSH to it.


Tip: if you get failure for some devices, you can click

Start Tuning button again without closing window.

The system will only try the devices which failed in

last testing.

1

2

3

4


Inside NetBrain

All credentials to access a device are saved as Device Settings. You can manually edit the device setting of a device,

Right click a device from Workspace Space and select Device Settings menu.

Enter the credential directly. Or you can click

the button and select one from the live network setting you just defined.

You can apply these setting to all devices or a device group. To do so, select the settings and device groups and click the Apply button.

More efficiently use Tune Live Access to have the system automatically fill in device settings for all devices. While tuning live access, the system polls live devices using the credentials defined in live network settings. If the system reaches a device successfully, it will fill in the corresponding device settings. The results are saved in Gateway Server.

If the system fails to reach a device via a method, first click the entry of this device in Tune Live Access window and view the log for any clue. If the system can ping the device successfully but cannot telnet/SSH to the device or reach the device via SNMP, then quite possibly some live network settings are missing. Refer to WorkSpace Wizard Step 1 Define Telnet/SSH/SNMP credentials and Proxy to add live network settings. Click here for other possible cases of failure and solutions.

1

2

3



2.5 Benchmark

Setup a schedule to benchmark the network at Gateway Server. L2 and L3 topology are automatically updated after each benchmark task.

Click the Start Benchmark Now button to have the system start benchmarking your network immediately.

Note: You can also click the Schedule Benchmark

button to open the web page to schedule benchmark

tasks. Please note that L2 topology is not built

until the benchmark task is done.


Note: If you have a large network, it may take a while to

finish a benchmark. You can click the Next button

to go to the next step. Since benchmarking is run

in the server, exiting this window will not affect the

benchmark task.

1

2


Inside NetBrain

When the Gateway Server starts a benchmark task, a DataFolder is automatically created and named with the current date, for example, 2010-3-23. All benchmarked data is stored into this DataFolder. At the web interface, click the Workspace > DataFolder tabs to view all DataFolders in Gateway Server. The data retrieved from the live network include: configuration, route table, ARP table, MAC table, CDP table and Interface Info. These data are useful in many network tasks in NetBrain Workstation, for example,

• Route tables can be used to calculate the traffic path.

• Configurations are used to update L3 topology.

• ARP/MAC/CDP tables are used to discover L2 topology.

• Route tables and route tables are used to verify what are changed in network design.

If you select auto build L2/L3 topology, L2 and L3 topology are automatically rebuilt from the latest data retrieved from the benchmark process.


2.6 Create L3 or L2 topology maps

Create a map from the system generated device groups or switch groups. This step is not essential for workspace setup. It just shows you one of many methods to create a map on demand.

Select a device group and click Create Map button.

Note: You can also create L2 topology maps. Click the

“Map L2 Topology” Map tag to display all switch

groups. Select a switch group to map.

Click the Finish button to exit the wizard.

1

2


3. Manage Shared Workspace After building the workspace in the second step, you should have a workspace ready to work on. However due to the complexity of network technologies and the constant changing of your network, there exists certain cases that requires some further adjustment on automatically created topology or other workspace data.

Use case Solution

Manage network devices Cannot obtain a device configuration or the type of device is not supported yet.

Manually add a device

Device is removed from the network Delete the device

Stitch network topology There exists MPLS cloud configurations of which are not available. Manually add MPLS cloud

IP unnumbered interfaces are not connected Connect IP unnumbered interfaces

There exists duplicated IP addresses Apply one interface for the topology and discard other interfaces

Discover L2 topology for LAN segments

L2 topology automatically discovered after benchmarking is not complete or accurate

Discover the L2 topology of LAN segments; manually edit switch connections or IP table.

Fix up live data Cannot retrieve the route table or NAT table Fix up Route table/NAT table


3.1 Manage Network Devices

Operation Use case Steps

Manually add a device

If devices in the live network is not in the shared workspace, you can add devices in following ways:

1. Import configurations. See Import configuration files for detail.

2. Discover the network devices. See Discover Live Network for detail.

3. If device configuration fails to be retrieved or the type of device is not supported yet, you can manually add this device.

1. Click Workspace >> Topology Stitching drop-down button ( ), and select Add Generic Device and then select add a type of device, such as Add Router.

2. Fill in device name, management IP address and SNMP RO string.

3. Click SNMP Get button to fetch interface info. If it fails, you need manually add L3 and L2 interface information by clicking Add button.

Delete a device Device is removed from the network At Workspace Pane (click View >> Workspace Pane if it is not visible), right click the device and select Remove from Workspace.

Alternatively at Server Web interface, go to Worksapce >> Device, select devices to be deleted and then click Delete Devices button.


1.2 Stitch Topology

After you import the configuration files and/or discover the network devices, the system will automatically build L3 topology. You can also select auto rebuild L3 topology after each benchmark task is finished to ensure that L3 topology is always updated. However for a complex network, the automatically created network topology may be not accurate and requires the manual adjustment.

Operation Use Case Steps

Manage duplicated IP addresses

Same IP addresses are configured on multiple devices. By fault, the system will take one interface for the IP address while building the network model and discard other interfaces having the same IP address.

1. Click Workspace >> Topology Stitching drop-down button ( ) and select Interfaces of Duplicated IP option.

2. At Duplicated IP Interfaces window, select an IP address in the left pane and check the interface you want in the workspace. The other interfaces having the same IP address are discarded.


Connect Unnumbered Interfaces

NetBrain Workstation creates a list of the IP unnumbered interfaces while building the network model from the configuration files. By default, the IP unnumbered-configured interfaces are disconnected from each other.

1. Click Workspace >> Topology Stitching drop-down button ( ) and select IP Unnumbered Links option.

Note: The table is empty due to all IP unnumbered interfaces are disconnected by default.

2. Click Auto Connect button. The system will try connecting IP Unnumbered interfaces via CDP table.

3. Click Add button to manually connect two interfaces. Select a source device, source port, destination device, and destination port and Click the Connect button. The two interfaces are connected.


Add MPLS cloud The geographically dispersed networks are connected to one another through the MPLS VPN of an ISP. However, the operation of a MPLS VPN in the ISP’s network is transparent to users. Consequently, users do not know the whole network well. This may make it inconvenient for users to manage networks.

To help users better know their networks, NetBrain introduces a concept called MPLS Cloud. A MPLS Cloud, the ISP’s network bearing the MPLS VPN, simulates MPLS features accurately by following the rules of forwarding labeled packets. 1. Click Workspace >> Topology Stitching drop-down button ( ) and select Add MPLS cloud

option.

2. Fill in the BGP AS number and click the Create button. All devices pointing to this BGP AS are added into the list automatically. Or you can click the Add button to add the CE device manually.


3.3 Build L2 Topology for LAN Segment and Fix up L2 Topology

You can select automatically build L2 topology in the Gateway Server after the scheduled benchmark is finished. Sometimes due to network complexity and that some live data such as CDP/MAC/ARP table are not retrieved successfully, auto crated L2 topology is not complete or accurate. You can build L2 topology for LAN segments from Workstation. Also you can also manually edit L2 topology results.

Build L2 topology for LAN segments

Click Workspace >> LAN Discover.

Enter LAN segments.

Click Options button

Select Via Live Network option and one sub-option.

Note: by selecting Via Live Network option, the system

will scan all IP addresses in LAN segments and

retrieve the corresponding L2 data. You can also

select Via Cache Data from a DataFolder if all L2

data in LAN segment are completed.

Click Start Discovery button.

Save the L2 data when discovery is done.

Fix up L2 topology

You can fix up L2 topology result. The L2 topology data is stored in One-IP table and

1

2

3

4

5

6

switch connection table. To edit One-IP table, click View >> One IP table. Right click an entry of One-IP table and select Edit to edit this entry. Or you can right click any entry and select Add option to add an entry in One-IP table. To edit switch connection table, click View >> Switch Connection. Right click an e and select Edit to edit this entry. Or you can right click any entry and select Add option to add a switch connection.


3.4 Fix up Network Data

Operation Use cases Steps

Fix up route table The route tables are used to calculate the traffic path and other network analysis. Some devices may be not accessible or the route table cannot be retrieved.

1. Click Workspace >> Fix-up Route Table.

2. At the Fix-up Route Table Manager window, click Add button and select a device.

3. Click the Add Entry button at Fix-up Route Table pane for the device.

4. Set the route entry values and click the Add button. The route entry is added to the device fix-up route table.

Fix up NAT table The NAT table displays how the IP is translated in a firewall or a router. NAT table is used in the path calculation and other network analysis. NetBrain Workstation creates NAT table from configuration files. For some devices, NAT configurations are not available or not correctly parsed.

1. Click Workspace >> NAT Table.

2. At the NAT Table Manager window, click Add button and select a device. The NAT Table pane for that device opens. The system parses the device configuration and NAT translation are shown if NAT is configured on this device.

3. Click the Add Entry button.

4. Set the NAT entry values and click the Add button. The NAT entry is added to the device NAT table.

Documents

NetBrain OE System Quick Start Guide · Map the Network For a Task 02 1 Install NetBrain OE System 1.1 Install Gateway Server Step 1 Install IIS services 1. Click Start > Settings