Extreme Networks Network Managment System Overview
I think that everyone who is interested in network technologies knows what NMS is, and what amenities and conveniences are added when using it.
Extreme Networks, like many other network equipment manufacturers, has its own NMS. I would like to tell about features of her work in today's habraobzore.
')
The software is built on a client-server architecture and is written in Java. It works on top of platforms such as Windows, Solaris, Linux (RHEL).
It is pleasant that Russian programmers from Nizhny Novgorod are directly involved in writing some code sections.
The release is always available in the public domain for download from the manufacturer’s website, but an affiliate account is needed to generate a trial (30-day) or permanent key.
One of the main features of the work is that in addition to the traditional management and monitoring protocols SNMP v1 / v2 / v3, RMON, telnet, ssh, the system can manage switches via XML, and the open XML SDK is also available. It is noteworthy that it is possible to integrate the NMS Ridgeline itself into the existing system via the “Northbound interface” into other systems that were deployed on the network before.
The software supports all MIB-II compatible devices from other vendors, and using the SDK it is possible to expand this support. The degree of integration can be viewed in the table below:
The product has a modular structure that allows you to get the necessary functionality and scaling for specific tasks.
Feature pack functionality and an increase in the number of supported devices are performed using generated keys, initially all the functionality is already incorporated in the installation package.
Those. basic functionality and added using three different feature packs that are independent of each other.
The control system is very functional in the base and is able to:
Habr machines puts its size (if you want to see pictures in more detail - download screenshots)
Adds support for Identity Management functionality and integration with McAfee NSM.
Identity Manager is the functionality to which you can devote a separate article, but if you try to say briefly, it will look something like this:
- applying policies to the switch port, based on roles, which in turn can be attached to the information transmitted to the LDAP server (which takes place in the vast majority of corporate networks), 802.1x, using Netlogin, by IP, MAC addresses, information from LLDP . As well as the compilation of "black", "white", "gray" lists, monitoring and obtaining statistics.
And if it is even shorter, then an additional level of corporate network security, starting from the access port.
When integrated with McAfee NSM, we can monitor and respond to emerging threats and events generated by such security platforms.
Ridgeline can display the beginning and end of threats:
And it looks like this:
The purpose of this functionality is quite clear from the name)
Support for XNV (ExtremeXOS Network Virtualization) functionality.
Ridgeline can integrate with hypervisor from VmWare, Citrix, Hyper-V and get detailed information about all virtual machines from there. After that, it is possible to monitor the life cycle of these VMs, and when migrating through the network, move their network settings (so-called Virtual Port Profile - VPP) behind them.
The functionality that makes life easier for service providers and in the terminology of Extreme manages and monitors such services as:
Extreme Networks Authorized Training Courses
MUK-Service - all types of IT repair: warranty, non-warranty repair, sale of spare parts, contract service
Extreme Networks, like many other network equipment manufacturers, has its own NMS. I would like to tell about features of her work in today's habraobzore.
')
The software is built on a client-server architecture and is written in Java. It works on top of platforms such as Windows, Solaris, Linux (RHEL).
It is pleasant that Russian programmers from Nizhny Novgorod are directly involved in writing some code sections.
The release is always available in the public domain for download from the manufacturer’s website, but an affiliate account is needed to generate a trial (30-day) or permanent key.
One of the main features of the work is that in addition to the traditional management and monitoring protocols SNMP v1 / v2 / v3, RMON, telnet, ssh, the system can manage switches via XML, and the open XML SDK is also available. It is noteworthy that it is possible to integrate the NMS Ridgeline itself into the existing system via the “Northbound interface” into other systems that were deployed on the network before.
The software supports all MIB-II compatible devices from other vendors, and using the SDK it is possible to expand this support. The degree of integration can be viewed in the table below:
The product has a modular structure that allows you to get the necessary functionality and scaling for specific tasks.
Feature pack functionality and an increase in the number of supported devices are performed using generated keys, initially all the functionality is already incorporated in the installation package.
Those. basic functionality and added using three different feature packs that are independent of each other.
The control system is very functional in the base and is able to:
- Combining devices and ports into necessary logical groups (for example, switches located on the same site, or ports to which only video cameras are connected ...) to which then it is very convenient to apply the settings
- Automatic visualization of the network topology (all or a separate logical group)
- Configure network services (VLAN, VMAN, EAPS, M-LAG, etc.) using a graphical console
- Grouping and categorizing VLANs into logical groups
- Base built-in scripts, as well as extensive support for scripting
- Alarm Manager (SNMP, RMON, Syslog) - filtering, configuration, various reactions to various events
- Configuration Manager - loading and unloading of configurations, schedule, the ability to automatically compare with the basic configuration
- Firmware Manager - control and accounting of installed software, firmware updates
- Search for the required IP or MAC address (IP mapping, MAC, switch port)
- Real-Time Statistic - graphical display of port utilization and the number of errors, the construction of various diagrams
- Internal RADIUS or integration with external.
Habr machines puts its size (if you want to see pictures in more detail - download screenshots)
Security feature pack
Adds support for Identity Management functionality and integration with McAfee NSM.
Identity Manager is the functionality to which you can devote a separate article, but if you try to say briefly, it will look something like this:
- applying policies to the switch port, based on roles, which in turn can be attached to the information transmitted to the LDAP server (which takes place in the vast majority of corporate networks), 802.1x, using Netlogin, by IP, MAC addresses, information from LLDP . As well as the compilation of "black", "white", "gray" lists, monitoring and obtaining statistics.
And if it is even shorter, then an additional level of corporate network security, starting from the access port.
When integrated with McAfee NSM, we can monitor and respond to emerging threats and events generated by such security platforms.
Ridgeline can display the beginning and end of threats:
- Ports scan
- Host sweep
- Exploit Alert
- DoS and DDoS attack
- Reconnaissance alert
- Policy violation
- Virus alert
And it looks like this:
Data Center Feature Pack
The purpose of this functionality is quite clear from the name)
Support for XNV (ExtremeXOS Network Virtualization) functionality.
Ridgeline can integrate with hypervisor from VmWare, Citrix, Hyper-V and get detailed information about all virtual machines from there. After that, it is possible to monitor the life cycle of these VMs, and when migrating through the network, move their network settings (so-called Virtual Port Profile - VPP) behind them.
Service Advisor Feature Pack
The functionality that makes life easier for service providers and in the terminology of Extreme manages and monitors such services as:
- E-Line Provisioning
- E-LAN ​​Provisioning
- vMAN / PB Provisioning
- PBB Provisioning
- VPLS Monitoring
- Service Import and Reconciliation
Summary:
- Very functional software that, thanks to the standard SOAP / XML architecture, makes it easy to integrate or integrate into third-party products
- Up to 10 logical devices can be integrated into the network - FREE, i.e. network for 500-1000 ports. What is quite important in sales in the corporate segment.
- You can request an image of the finished virtual machine to test / work
- Software and patches are freely available on extremenetworks.com
- In the next release, closer integration is expected with the management of wired and wireless devices (since Wi-Fi is becoming the main access for corporate parties), as well as free XNV and IdM support for up to 10 devices.
Extreme Networks Authorized Training Courses
MUK-Service - all types of IT repair: warranty, non-warranty repair, sale of spare parts, contract service
Source: https://habr.com/ru/post/147509/
All Articles