Embed Size (px)
Citation preview
#ATM16
HPE Aruba Intelligent Management CenterChristopher Young, Consulting TMEKevin Secino, GPLM - IMC
March 2016 @ArubaNetworks |
2
AgendaHPE Aruba NMS PortfolioIntroducing HPE IMCSolving Management Challenges TodayLive Demo
3#ATM16
Best of Breed Integrated Management
MULTIVENDOR MANAGEMENT
for
CLOUD-FIRST, MOBILE-FIRST
NETWORKS
AirWave
IMC
ClearPass
4#ATM16
IMC: Complete management for dynamic agile networks
Across entire network
Campus/Branch• Unified wired and wireless management• Traffic and application visibility• Zero touch deployment
• Integrated central management
• Extendable via additional modules
• Supports up to 6000 devices models
• Maximize network availability
• Gain network visibility• Fully FCAPS management
Simplified, proactive management that spans the network
Data Center• Automation and orchestration• Visualization of virtualized networks• Consistency across data center
5#ATM16
ClearPass: Secure network access for a mobile enterprise
5
NETWORK EDGEMulti-Vendor
Wired/Wireless/VPN
NETWORK CORE ProfilerAAA/RADIUS
NAC
Cert. Authority
Onboarding
Guest
Device Registration
Visitor
Employee
Employee BYOD
Headless Devices
Contractor
Administrator
Policy – Visibility - Workflow
AD/LDAP
SQL
TokenPKI
ClearPass
User/Role
Time/Day
Location
Device Type/Health
USERS
IDENTITY SOURCES
CONTEXT
6#ATM16
AirWave: Multivendor wireless & wired edge network management
Configuration, firmware
distribution, automated
compliance across entire
distributed organization
Client & app-level visibility
Entire access network
– wireless & wired –
Device discovery, classification
& diagnosis
Reporting and analysis
Role-based admin accessOrganize and manage by
business/organizational unit
CENTRALIZED MANAGEMENT COMPREHENSIVE VISIBILITY EASY, INTUITIVE INTERFACE
Network Optimization & Rapid Troubleshooting For Mobile-First Multivendor Networks
7#ATM16
Introducing HPE Aruba IMCOptional subtitle
@ArubaNetworks |
8#ATM16
HPE IMC platform portfolio
IMC Standard– Full FCAPS– Includes 50 device license– Hierarchical model support– Includes the eAPI license – Expandable device support– Modular
IMC Enterprise– Full FCAPS– Includes 50 device license– Hierarchical model support– Includes NTA and WSM modules, and
eAPI license– Expandable device support– Modular
Advanced networks
IMC Basic WLAN– Fault, config and performance– Unified wired and wireless management– Fixed functionality– Fixed 50 device limit– Includes a 50 AP license for WSM
IMC Basic– Fault, config, and performance– Fixed 50 device limit– Fixed functionality
Small, simple networks
9#ATM16
HPE IMC Standard and Enterprise platform functionalityComprehensive, multi-vendor management
– Network discovery– Automated
topology creation– Automated asset
gathering– Virtualization
aware (HyperV, KVM and VMware)
– Performance monitoring
– SNMP trap collecting
– SYSLOG collecting – Email and SMS
alarm notification
– Automated configuration backups
– Network wide configuration changes
– Network wide configuration audits
– Automated policy verifications
– Auto-deployment
– Root-cause alarm and event suppression
Discover Monitor Manage Troubleshoot
– On-demand reporting
– Scheduled reporting
– Auto-delivered reports
Optimized network
Report
10#ATM16
Comprehensive management capabilitiesSingle platform built on top of a modular, service oriented architecture
Confidential – For Training Purposes Only
10
Fault
AlarmsSyslog& Trap
Mgr
Configuration
Intelligent Configuration
CenterCompliance Center
VLAN & ACL
Manager
Accounting
Network Assets
Performance
Performance Mgmt
Virtual Network Mgmt
Security
Security Control Center
FCAPS
IMC Platform
Add-On Modules
Remote Site
Manager
VAN Connect Manage
r
Service Health
Manager
AppPerform.Manager
Intelligent Analysis Reporter
User Behavior Analyzer
Service Operations Mgmt
Network Traffic
Analyzer
User Access
Manager
Endpoint Admission Defense
Branch Intelli. Mgmt
System
TACACS+AuthentManager
IPSec VPN Mgr
MPLS VPN Mgr
Wireless Services
MgrQoS Mgr
vMon
Extended API
VAN Resource Automat
e Manager
VAN SDN Manager
VAN Fabric
ManagerUC HealthManager
Business Service
Performance
CPPMCPGuest
CPOnboardCPOnGuard
11#ATM16
Module solution mapOne platform for multiple solution requirements
BranchBIMSZero
touch
RSMSecure mgmt
DC Monitoring & PerformanceVCM
Server Access
SHMService
Monitoring
APMApplicatio
n Monitorin
g
vMonHyperviso
r traffic monitorin
g
Campus & BYODUBA
Usage Monitor
NTATraffic
Monitor
WSMWireless
Mgmt
ClearPass
Access & BYOD
DC Provisioning & Automation
RAMNetwork
orchestration
VAN Fabric-M
Fabric orchestration
MVMMPLS VPN
Mgmt
IVMDVPN config
Across the NetworkQoSQoS
config
SOMFull IT
lifecycle
BSPBusiness Service
Performance
SDN-MSDN
management
12#ATM16
Solving Management Challenges Today
@ArubaNetworks |
13#ATM16
Network Changes Causing Instability“How do control and audit change on my network ?”
– Change accounts for 69% of network downtime and degradation
– Role Based Management– Controls who can change network configurations
– Audit trail– Who changed what when
– Lock down network configuration– Baselining, Configuration Change notification & Role back
– ITIL based management– Change approval via Service Operations Management (SOM)*
– TACASC+– Full control with ClearPass
* Additional IMC Module
14#ATM16
Network Visibility and Control“I’ve got no visibility and control of what my network is being used for?”
– What is the network really being used for and ensuring control
– Network Traffic Analysis (NTA)* shows– What applications are running & who is using them
– Requires the power of sFlow or NetFlow– Benefit from selling HPNs sFlow enabled Switches
– QoS Manager (QoSM)* allows– Network wide configuration and audit of QoS policies
– Control applications Access Control List Manager (ACLM)– Definition and deployment of ACLs
* Additional IMC Module
15#ATM16
Network Access Management & Guest Access“How do I control access to my network?”
– Controlling Network Access with ClearPass Policy Mgr– Who and what has access & to what – Advanced policy based access control
– Guest Access & BYOD users ClearPass Guest and OnBoard– iPads, tablets, iPhones– Self Registrations and on boarding– Increasing need for Compliance and Security
– Network Access Control & MDM ClearPass OnGuard– Ensure device conform to policy– Integration with MDM for mobile smart devices
– Integration with 3rd party systems ClearPass Exchange
16#ATM16
Integrated Wired and Wireless Management“How do I manage and control access to my Wired and Wireless network ?”
– IMC, WSM, AirWave and ClearPass integrate Wired, Wireless and User Management– Seamless Wired and Wireless Access Control with ClearPass– Management of HPE Aruba Wireless infrastructure with AirWave and WSM– Manage 3rd Party & legacy wireless – including Cisco – WIPS and Spectrum Analysis– Visibility and control of Applications with AppRF*– Client Health*
*AirWave only
17#ATM16
Enabling Cloud and Virtualisation“Configuring the network is the bottleneck when I deploy an new Applications”
– Accelerating Application Deployment in a Virtual world
– VAN Connection Manager (VCM*) enables Virtual Application Networking– Reduces provisioning time from weeks to minute
– VAN Resource Automation Manager (RAM*) end to end service deployment– Eliminates Manual Configuration
– “Death of the CLI”
– Leverages template policy based approach
* Additional IMC ModuleJump VAN details
18#ATM16
App Profile 3BWACLQoS
VAN Connection ManagerSimplifying and accelerating application deployment
App Deployed
1 3
… ready!Virtualizin
g
2Chose application profile from IMC in vCenter.
VM
Create application profile with network policies.
Deploy in vCenter. IMC provisions the connection.
IMC
App Profile 2BWACLQoS
vCenterIMC Plugin
App Profile 1BWACLQoS
App Profile 1BWACLQoS
App Profile 1BW, ACL, QoS
19#ATM16
VAN Resource Automation ManagerSimplifying and accelerating application and services deployment
Virtualized network path per app
1 42Inventory Devices and pool resources.
Create a zone from physical topology.
Simulate the model and deploy.
Zone 1
Zone 2
Zone 1
3Create a service model.
Service Model
BWACLQoS
Service Model
Zone 1
20#ATM16
Resource Automation ManagerCreating agile networks tuned for applications
Application
Application
ApplicationApplication 1
Old way• Best effort• Over subscription• Manual, CLI provisioning
Application 1
Resource Automation• Virtualized service path
• Thin provisioning• Tuned network per app
21#ATM16
Managing Data Center and Virtualised World“How do I manage my physical and virtual network environments?”
– Managing the technologies deployed in the Data Center
– IMC Platform and Virtual Resource Manager– Visibility, monitoring and management of virtualized environment– Data Centre topology to a quickly identify issue location– MDC – multi tenant device virtualization– OneView integration – auto provisions ToR – VXLAN management
– VAN Fabric Manager (VFM*) manages advanced DC technologies– DCI / EVI –Layer 2 DC connectivity deployment and monitoring– Visibility onto VM Migration
* Additional IMC Module
22#ATM16
Managing a mixed vendor environment“I’m locked into Cisco how can I manage my network if I add a second vendor?”
– Extensive 3rd party support
– Comprehensive support for Cisco– Single Management solution for mixed HP / Cisco network– Supports Gartner’s “Dual Vendor” strategy– Includes IMC Platform, WSM*, QoSM*– Also AirWave and ClearPass
– Extensive 3rd party support– User / partner extensible
7000+devices supported
1500+from Cisco
220manufacturers
IMC Functionality HPN CiscoDiscovery & Topology Monitoring / Perfomance Mgmt Events / Traps Device Manager Configuration Backup /Restore Baselining / Change Notifications Bulk Configuration Bulk SW Upgrades VLAN Management ACL Management Network Traffi c Analysis
* Additional IMC Module
23#ATM16
Business Service and Application monitoring“Are my business critical services applications running OK & meeting agreed SLA?”
– Definition and Monitoring of Service Level Agreement and Application Performance
– Service Level management monitoring with Service Health Manager (SHM)*– Define and monitor advanced SLA models– Prove your meeting agreed SLAs
– Application Performance Management (APM)*– Monitoring of Applications and Servers
– UC Health Manager (UCHM)*– Monitoring of MS Lync
– Business Service Performance (BSP)*– Models Business Services
– Comines data from SHM + APM + NTA + VRM……
– Dashboard view critical business services
* Additional IMC Module
24#ATM16
– Managing a mix of traditional network and Software Defined Network
– SDN Manager (SDNM*) multi layer visibility onto Software-defined Networks
• Deploy, monitor and manage OpenFlow switches
• Visualize traffic flow and performance monitoring
• Graphical OpenFlow troubleshooting– Unified management of single and teamed controllers– SDN Application deployment and monitoring
Managing the transition to SDN“How I manage my network as a transition from a traditional to SDN Network?”
Infrastructure
Controller
Applications
* Additional IMC Module
25#ATM16
Multi Site Management“I’ve lots of remote sites which I need to deploy and manage”
– Simplify the deployment and management of multi site networks
– Branch Intelligent Management System (BIMS)*– Zero touch deployment of CPE & remote site devices– Dynamic IP and NAT
– Remote Site Manager (RSM)* – Light weight IMC agent that can be hosted on remote sites– Information sent back to Central manager via secure tunnel
– Provides a Multi Tenant Management solution– Resolves issues of overlapping IP ranges
* Additional IMC Module
26#ATM16
Integration with OSS via North Bound API“I need to integrate the mgmt system with my higher level mgmt. systems”
– IMCs extended API (eAPI) provides rich access to all IMC functionality via API– RestFull / SOAP API– Comprehensive documentation, examples and tools
27#ATM16
HPE IMC REST API (eAPI)
– 400 + APIs
– Python library ( pyhpeimc )
https://github.com/HPENetworking/PYHPEIMC
28
Let’s take a look!
29#ATM16
Join Aruba’s Titans of Tomorrow force in the fight against network mayhem. Find out what your IT superpower is.
Share your results with friends and receive a free superpower t-shirt.
www.arubatitans.com
Thank youContact information
