Cisco 3.5 - Manuals

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page vi Cisco Systems, Inc. Never use a revoked or an expired encryption key. The correct public key to use in your correspondence with PSIRT is the one linked in the Contact Summary section of the Security Vulnerability Policy page at this...

Important Notice Cisco Systems, Inc. Page vii Submitting a Service Request Using the online TAC Service Request Tool is the fastest way to open S3 and S4 service requests. (S3 and S4 service requests are those in which your network is minimally impaired or for which you require product information.)...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page viii Cisco Systems, Inc. Obtaining Additional Publications and Information Information about Cisco products, technologies, and network solutions is available from various online and printed sources. Cisco Marketplace provides a variety...

About This Guide Cisco Systems, Inc. Page xi About This Guide This Administrator’s Guide describes the structure and features of the Sheer™ Dynamic Network Abstraction (DNA) system. Sheer DNA Manage is the GUI client application designed to simplify and facilitate Sheer DNA administration. Sheer DNA...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page xii Cisco Systems, Inc. Chapter 10, Managing Sheer DNA Security , page 135, describes how Sheer DNA implements a three-dimensional security engine combining a role-based security mechanism with scopes that are granted to users. In addi...

Introducing Sheer DNA Cisco Systems, Inc. Page xiii Table of Contents 1 Introducing Sheer DNA .................................................................. 1 1.1 The Sheer Solution................................................................................................... 1 1.2 Sheer DNA...

Introducing Sheer DNA Cisco Systems, Inc. Page 1 1 Introducing Sheer DNA About this chapter: This chapter describes the Sheer™ Dynamic Network Abstraction (DNA) platform and architecture. In addition, it provides a brief explanation of the terms used throughout this guide. The Sheer DNA Manage maint...

Introducing Sheer DNA Cisco Systems, Inc. Page 3 • OSS/BSS (Vertical) Integration: open, flexible northbound adaptation framework to OSS/BSS applications, in a wide variety of APIs, protocols and information models • Scalability: a fully distributed solution implementing parallel processing that inh...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 4 Cisco Systems, Inc. 1.2 Sheer DNA Components The Sheer DNA system is comprised of several key components, as described in the sections that follow. 1.2.1 Autonomous VNE The Autonomous VNEs (Virtual Network Elements) are software enti...

Introducing Sheer DNA Cisco Systems, Inc. Page 5 Another important function of the Sheer DNA Gateway is to map network resources to the business context. This enables Sheer DNA to contain information that is not directly contained in the network (such as VPNs and Subscribers) and display it to north...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 6 Cisco Systems, Inc. • Sheer DNA Manage: A system administration and configuration tool for managing the entire Sheer DNA platform, as described below. • Sheer Registry Editor: A tool used for viewing and configuring the Sheer Registr...

Introducing Sheer DNA Cisco Systems, Inc. Page 7 1.4 Additional Concepts and Terms The sections below include additional concepts and terms used in the Sheer DNA Manage application and throughout this guide. AVM The Sheer DNA Units are divided into AVMs (Autonomous Virtual Machines). These AVMs are ...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 8 Cisco Systems, Inc. License Sheer DNA Client applications and BQL connectivity is based on installed license files. Sheer DNA Manage enables the administrator to control and monitor the number of Sheer DNA Client and BQL connections ...

Introducing Sheer DNA Cisco Systems, Inc. Page 9 Protection Group A Protection Group is a cluster to which Units and Standby Units are related. In case of Unit failover then the Redundant Unit will be taken from the same Protection Group. Redundant Unit The Sheer DNA Unit comes with built-in redunda...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 10 Cisco Systems, Inc. Scopes A scope is a named collection of managed Network Elements that have been grouped together in order to allow a user to view and/or manage the Network Elements provided a given role. Grouping can be based on...

Introducing Sheer DNA Cisco Systems, Inc. Page 11 Workflow A workflow consists of several tasks grouped together and arranged in a flowchart. All workflows are stored on the Sheer DNA Gateway. After a workflow is deployed, it is accessible using Sheer DNA Manage in order to view properties and statu...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 12 Cisco Systems, Inc. Examples use the following conventions: Convention Description screen Examples of information displayed on the screen are set in Courier New font. Boldface screen Examples of text that the user must enter are set...

Getting Started with Sheer DNA Manage Cisco Systems, Inc. Page 13 2 Getting Started with Sheer DNA Manage About this chapter: This chapter describes the Sheer DNA Manage working environment and how to access Sheer DNA Manage tools and commands. It also provides instructions for launching and overvie...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 14 Cisco Systems, Inc. To start Sheer DNA Manage 1. From the Start menu, select the Programs folder, then Sheer DNA/Sheer DNA Manage . The Sheer DNA Manage - Login dialog box is displayed. Note: It is recommended that the administrator...

Getting Started with Sheer DNA Manage Cisco Systems, Inc. Page 15 2.2 The Sheer DNA Manage Window The Sheer DNA Manage window is displayed below. Menu barToolbar Tree pane Shortcut menu Status barWorkspace The Sheer DNA Manage window is divided into areas or panes, as follows: • The Tree pane, as de...

Getting Started with Sheer DNA Manage Cisco Systems, Inc. Page 17 • Users: Enables the administrator to define and manage user accounts. For more information about the Users branch, refer to page 49. • Workflow Engine: Enables the administrator to manage workflow templates and running workflows in r...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 18 Cisco Systems, Inc. 2.2.2 Sheer DNA Manage Window Workspace The Workspace is displayed on the right side of the Sheer DNA Manage window and enables the user to view Sheer DNA Manage information according to the branch selected in th...

Getting Started with Sheer DNA Manage Cisco Systems, Inc. Page 19 Filter: Enables the user to define a filter on the information displayed in the table of the Workspace using the Filter dialog box. For more information, refer to page 63. Note: When a filter is applied the Set Selection Filter button...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 20 Cisco Systems, Inc. • Users , page 49. • Workflow Engine , page 52. 2.3.1 DNA Servers Branch Sheer DNA Manage maintains a list of all of the DNA Servers defined in the system. The DNA Servers branch enables the user to add and remov...

Getting Started with Sheer DNA Manage Cisco Systems, Inc. Page 21 For more information about DNA Server menu and toolbar options: • Menu options, refer to page 21. • Toolbar options, refer to page 23. The Workspace area of the DNA Servers branch enables the user to view a list of all of the Sheer DN...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 24 Cisco Systems, Inc. Search for a Sheer DNA Unit/AVM/VNE amongst all the Sheer DNA Servers. When a Sheer DNA Unit is selected in the table of the Workspace the following tools are displayed in the toolbar: Creates a new AVM in the se...

Getting Started with Sheer DNA Manage Cisco Systems, Inc. Page 25 An example of the Sheer DNA Manage window when a DNA Servers Entity sub-branch is selected is displayed below. Each row in the table in the Workspace enables the user to view the status of an AVM. The AVMs can be sorted in ascending o...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 26 Cisco Systems, Inc. • Key: The key of the AVM, which is unique to the system. By default the key is displayed as “AVM + ID + timestamp”. For more information about DNA Server specific menu and toolbar options: • Menu options, refer ...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 28 Cisco Systems, Inc. Actions Enables the user to start or stop an AVM. Delete Deletes an AVM. Move AVM Move an entire AVM between DNA Units. Properties Displays the properties of the selected AVM and its status in the General tab of ...

Getting Started with Sheer DNA Manage Cisco Systems, Inc. Page 29 For more information on the DNA Servers Entity sub-branch, refer to Chapter 6, Managing AVMs and VNEs. 2.3.3 AVM Branch The AVM sub-branch enables the user to manage information relating to the VNEs in a selected AVM. This includes: •...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 32 Cisco Systems, Inc. Delete Deletes an AVM from the Sheer DNA Server. Note: Reserved AVMs 0-100 cannot be deleted. Move AVM Move an entire AVM between DNA Units. For more information, refer to page 86. Note: Reserved AVMs 0-100 canno...

Getting Started with Sheer DNA Manage Cisco Systems, Inc. Page 33 DNA Manage Toolbar – AVM Branch When the AVM sub-branch is selected in the Tree pane the following tools are displayed in the toolbar: Creates a new VNE in the selected AVM. Displays the properties of the selected AVM. Deletes the sel...

Getting Started with Sheer DNA Manage Cisco Systems, Inc. Page 35 • Creation Date: The date when the license was implemented. • Client Type: The applications to which the user is authorized to connect, namely, BQL and/or Sheer DNA Client applications. For more information about: • Menus options, ref...

Getting Started with Sheer DNA Manage Cisco Systems, Inc. Page 37 DB Segments Branch The DB segments branch in Sheer DNA Manage displays a table describing the storage allocated for all database segments. An example of the Sheer DNA Manage window when the DB Segments branch is selected is displayed ...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 38 Cisco Systems, Inc. Service Disclaimer Message of the Day The Message of the Day sub - branch enables the user to define a message (service disclaimer) that will be displayed when a user logs in to the Sheer Client applications. An ...

Getting Started with Sheer DNA Manage Cisco Systems, Inc. Page 39 Polling Groups The Polling Groups sub-branch enables the user to manage polling groups, by categorizing a group of devices to be polled according to pre-set intervals. The Polling Groups sub - branch is displayed below. The following ...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 40 Cisco Systems, Inc. File Menu – Polling Groups Branch The File menu is displayed below. New Polling Group Creates a new polling group. Properties Displays the properties of the selected polling group. Exit Exits Sheer DNA Manage. Tr...

Getting Started with Sheer DNA Manage Cisco Systems, Inc. Page 41 Toolbar – Polling Groups Branch When the Polling Groups sub-branch is selected in the Tree pane the toolbar contains the following tools: Creates a new polling group. Displays the properties of the selected polling group. Deletes the ...

Getting Started with Sheer DNA Manage Cisco Systems, Inc. Page 43 File Menu – Protection Groups Branch The File menu is displayed below. New Protection Group Creates a new protection group. Properties Displays the properties of the selected protection group. Exit Exits Sheer DNA Manage. Tree Pane Me...

Getting Started with Sheer DNA Manage Cisco Systems, Inc. Page 45 For more information about: • Menu options, refer to following section. • Toolbar, refer to page 46. Note: The menus and toolbar displayed in the Sheer DNA Manage window are context sensitive; the options vary depending on your select...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 46 Cisco Systems, Inc. New Scope Creates a new scope. Workspace Shortcut Menu – Scopes Branch When the user right-clicks in the table in the Workspace the following shortcut menu is displayed: Delete Deletes the selected scope. Propert...

Getting Started with Sheer DNA Manage Cisco Systems, Inc. Page 47 2.3.6 Topology Branch The Topology branch enables the user to define static links between the Network Elements in order to supplement or override existing auto-discovered topology. The Sheer DNA Manage window with the Topology branch ...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 48 Cisco Systems, Inc. File Menu – Topology Branch The File menu is displayed below. New Static Link Creates a new static link. Properties This option is unavailable. Exit Exits Sheer DNA Manage. For more information, refer to page 56....

Getting Started with Sheer DNA Manage Cisco Systems, Inc. Page 49 Toolbar – Topology Branch The Topology branch contains the following tools: Opens the New Link dialog box enabling the user to create a link between two devices. For more information, refer to page 127. Deletes the selected static lin...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 50 Cisco Systems, Inc. Note: The default permission only applies at an application level, namely, all the activities that are related to GUI functionality, not the activities related to devices. For more information, refer to Chapter 1...

Getting Started with Sheer DNA Manage Cisco Systems, Inc. Page 51 Exit Exits Sheer DNA Manage. For more information, refer to page 56. Tree Pane Menu – Users Branch When the user right-clicks on the Users branch in the Tree pane the following menu is displayed: New User Creates a new user for the cu...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 52 Cisco Systems, Inc. 2.3.8 Workflow Engine Branch The Workflow Engine branch enables the user to manage workflow templates and running workflows in runtime. The Workflow Engine branch includes the following sub-branches: • Templates:...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 54 Cisco Systems, Inc. Toolbar – Templates Branch When the Templates sub-branch is selected in the Tree pane the toolbar contains the following tools: Deletes the selected workflow template. For more information about workflows, refer ...

Getting Started with Sheer DNA Manage Cisco Systems, Inc. Page 55 • Name: The name of the workflow, as defined using the Sheer Workflow Editor. • State: The current status of the workflow, namely, Ready , Running , Done , or Aborted . For more information about: • Menu options, refer to the followin...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 56 Cisco Systems, Inc. Abort/Rollback Aborts the workflow and performs rollback if the workflow is running, or if the workflow has already been completed it performs rollback. Delete Deletes the workflow from the database. Note: A work...

Deploying Sheer DNA Cisco Systems, Inc. Page 57 3 Deploying Sheer DNA About this chapter: This chapter describes the steps that must be performed to deploy Sheer DNA and provides cross-references to the relevant sections in this Administrator’s Guide. 3.1 System Setup Flow The flow below describes t...

Deploying Sheer DNA Cisco Systems, Inc. Page 59 Step 3: Customize protection groups: Enables the administrator to change the default setup of Sheer DNA Units by customizing protection groups (clusters) and then assigning Sheer DNA Units to these groups. For more information, refer to Cisco Active Ne...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 60 Cisco Systems, Inc. 3.2 User and View Setup Flow The flow below describes the steps required to setup Sheer DNA users and the view using Sheer DNA Manage and the order in which they should be performed. Step 1: Install client licens...

General DNA Manage Tables Cisco Systems, Inc. Page 61 4 General DNA Manage Tables About this chapter: This chapter describes how to perform general Sheer DNA Manage functions when working with tables: Working with DNA Manage Tables , page 61, describes how to work with Sheer DNA Manage tables, inclu...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 62 Cisco Systems, Inc. • Export table information. • Finding specific information in DNA Manage tables You can also find specific DNA Manage information, such as DNA Units, AVM/VNE details using the toolbar button and entering criteria...

General DNA Manage Tables Cisco Systems, Inc. Page 63 4.2 Finding Text in a Table Sheer DNA Manage enables the user to search for information in the Workspace by entering the search criteria, for example, by entering a partial user name. Note: The tools displayed in the table are a generic component...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 64 Cisco Systems, Inc. The following dropdown lists are displayed in the Filter dialog box: • Field: Displays a dropdown list of all the columns displayed in the current table. • Operator: Displays a dropdown list of the values include...

General DNA Manage Tables Cisco Systems, Inc. Page 65 4.4 Setting Selection Filters The user can choose a line or specific set of lines, and display them in the table (all un-selected lines are hidden). The user may make continuous multiple line selections, setting the table content after each selec...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 66 Cisco Systems, Inc. 2. Click the button. Only the selected line(s) remain in the table. To undo the previous filter selection 1. Select one or several lines and filter them out using the appropriate table toolbar buttons. 2. To undo...

General DNA Manage Tables Cisco Systems, Inc. Page 67 4.5 Sorting a Table The tables displayed in Sheer DNA Manage can be sorted by defining specific criterion on a one-time only basis or continuously. To sort a table 1. In the toolbar, click . The Sort dialog box is displayed. The following dropdow...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 68 Cisco Systems, Inc. 4. Select Once Only or Continuously/Repeatedly . 5. Click OK . The table information is sorted according to the filter defined. 4.6 Exporting the Table to a File Sheer DNA Manage enables the user to export all th...

Managing Sheer DNA Units Cisco Systems, Inc. Page 69 5 Managing Sheer DNA Units About this chapter: This chapter describes how to manage Sheer DNA Units. This includes adding and removing Sheer DNA Units, and viewing Sheer DNA Unit properties. What is a DNA Unit? , page 70, provides a description of...

Managing Sheer DNA Units Cisco Systems, Inc. Page 71 The clustered N+m High Availability mechanism within the Sheer DNA Fabric is designed to handle the failure of a Sheer DNA Unit. Sheer DNA Unit availability is established in the Gateway, running a Protection Manager process, which continuously mo...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 72 Cisco Systems, Inc. To add a new DNA Unit 1. Select the DNA Servers branch in the DNA Manage window Tree pane. The DNA Servers branch is displayed. 2. Right-click on the DNA Servers branch to display the shortcut menu and select New...

Managing Sheer DNA Units Cisco Systems, Inc. Page 73 • Standby Unit: Define whether a Sheer DNA Unit is defined (checkbox is selected) as a standby unit. • The Protection Group dropdown list displays the currently defined list of customized protection groups 3. Enter the IP Address of the new Sheer ...

Managing Sheer DNA Units Cisco Systems, Inc. Page 75 4. You can change the assigned DNA Unit protection group, as required, by selecting an option from the dropdown list. The Enable Unit Protection checkbox defines whether a Sheer DNA Unit is enabled (the checkbox is selected) for high availability....

Managing AVMs and VNEs Cisco Systems, Inc. Page 79 6 Managing AVMs and VNEs About this chapter: This chapter describes defining and managing AVMs and VNEs. Creating AVMs , page 80, describes how to define an AVM for a Sheer DNA Unit Server. AVM Status , page 82, describes the status of AVMs when the...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 80 Cisco Systems, Inc. 6.1 Creating AVMs Sheer DNA Manage enables the user to define AVMs for DNA Unit Servers. Every AVM (Autonomous Virtual Machine) in the Sheer DNA Fabric is by default managed by the watchdog protocol. Sheer DNA Ma...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 82 Cisco Systems, Inc. • Enable AVM Protection: By default this option is selected enabling the watchdog protocol on the AVM when high availability is enabled. For more information, refer to the Cisco Active Network Abstraction High Av...

Managing AVMs and VNEs Cisco Systems, Inc. Page 83 • Shutting Down: When a Stop (command) option is issued, and while the command is being executed (some processes may still be running), the status of the AVM is Shutting Down . 6.2.1 Admin and Oper Mode AVM Status The table below describes the statu...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 84 Cisco Systems, Inc. The AVM Properties dialog box is displayed with the details of the selected AVM, including, the IP address/key of the Sheer DNA Unit. The following field is displayed in the AVM Properties dialog box: • Status: T...

Managing AVMs and VNEs Cisco Systems, Inc. Page 85 To delete an AVM 1. Select the DNA Servers branch in the Sheer DNA Manage window’s Tree pane. The DNA Servers branch is displayed. 2. Expand the DNA Servers branch and select the required AVM sub-branch in the Tree pane. 3. Right-click to display th...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 86 Cisco Systems, Inc. • When the AVM is stopped the Down state is displayed in the Workspace . Note: When the AVM status is displayed as Down , the status remains Down and no-reload will take place. 6.6 Moving AVMs Sheer DNA Manage en...

Managing AVMs and VNEs Cisco Systems, Inc. Page 87 3. Right-click to display the menu and select Move AVM . The Move to dialog box is displayed. The Move to dialog box displays a tree-and-branch representation of the selected Sheer DNA Server and its Units, excluding the Sheer DNA Unit in which the ...

Managing AVMs and VNEs Cisco Systems, Inc. Page 89 While in maintenance mode (temporary state) a VNE: • Does not change state on its own, unless the user explicitly (manually) switches the VNE back to active state. • Never polls the device. • Does not report any alarms, including device reachability...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 90 Cisco Systems, Inc. A VNE must be loaded into the bootstrap of the Sheer DNA Unit before it starts monitoring its underlying NE. This changes the administrative status of the VNE to Up, and ensures that the VNE is loaded on subseque...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 92 Cisco Systems, Inc. 6.8.1 General Tab The General tab enables the user to manage VNE information in the connected Sheer DNA. The following VNE identification fields are displayed in the Identification area: • VNE Name: The name of t...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 94 Cisco Systems, Inc. 6.8.2 SNMP Tab The SNMP tab enables the user to support polling and accessing devices using SNMPv1, SNMPv2 and SNMPv3. Selecting the SNMP tab displays the following dialog box: The following checkbox and radio bu...

Managing AVMs and VNEs Cisco Systems, Inc. Page 99 6.8.5 Polling Tab When customizing polling rates, special consideration should be given to the following: • Fast polling rates (30 sec) provide high data accuracy • Fast change tracking (VC table, profile changes) and accurate flows vs. • Constant p...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 100 Cisco Systems, Inc. Selecting the Polling tab displays the following dialog box: The following radio buttons are displayed in the Polling Method area: • Group: The VNE inherits the polling rates from the polling group selected in t...

Managing AVMs and VNEs Cisco Systems, Inc. Page 101 The following polling interval fields are displayed in the Polling Intervals area: • Status: Sets the polling rate for status-related information, such as device status (up/down), port status, admin status and so on. The information is related to t...

Managing AVMs and VNEs Cisco Systems, Inc. Page 103 • Maintenance: Click this button to move the VNE to maintenance mode, so that no alarms will be sent. If this is done when the VNE has been stopped this has no meaning for the VNE. • DNA Unit : The current Sheer DNA Unit that hosts the VNE. • AVM: ...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 104 Cisco Systems, Inc. 6.11 Changing the VNE’s State Sheer DNA Manage enables the user to start or stop a VNE or move a VNE to maintenance mode. Starting the VNE adds the VNE to the server bootstrap. Stopping the VNE removes the VNE f...

Managing AVMs and VNEs Cisco Systems, Inc. Page 105 4. Right-click to display the shortcut menu and select one of the following: • Actions | Start or in the toolbar click . • Actions | Stop or in the toolbar click . • Actions | Maintenance or in the toolbar click . 5. The state of the VNE changes ba...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 106 Cisco Systems, Inc. 4. Select Move VNEs from the shortcut menu. The Move To dialog box is displayed: The Move To dialog box displays a tree-and-branch representation of the selected Sheer DNA Server, its Units and AVMs, excluding t...

Managing Global Settings Cisco Systems, Inc. Page 107 7 Managing Global Settings About this chapter: This chapter describes how to define and manage the Sheer DNA Manage global settings, including, client licenses, polling groups, protection groups and customizing a message of the day (service discl...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 108 Cisco Systems, Inc. To install a license 1. Select the Client Licenses sub-branch in the Sheer DNA Manage window’s Tree pane. The Client Licenses table is displayed. 2. Right-click the Client Licenses sub-branch to display the shor...

Managing Global Settings Cisco Systems, Inc. Page 109 4. Paste the information in the New Client License dialog box. 5. Click OK . The new license information is displayed in the Workspace . The administrator can uninstall the client license, for example, if it has expired. Note: The default license...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 110 Cisco Systems, Inc. 3. Right-click to display the shortcut menu and select Properties , or from the File menu select Properties or in the toolbar click Properties . The Client License Properties dialog box is displayed. The followi...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 112 Cisco Systems, Inc. 7.2 Viewing DB Segments Sheer DNA Manage enables the administrator to view and monitor the following: • Database segments’ storage allocation information • Database disk usage • Database growth The information i...

Managing Global Settings Cisco Systems, Inc. Page 113 7.3 Customizing a Message of the Day Sheer DNA Manage enables the user to define a message (service disclaimer) that is displayed when the user logs in to any Sheer Client application (optional). The user must accept the message before logging in...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 114 Cisco Systems, Inc. To remove a message of the day 1. Select the Message of the Day sub-branch in the Sheer DNA Manage window’s Tree pane. 2. In the Workspace , select the text in the Message area and press Delete on your keyboard....

Managing Global Settings Cisco Systems, Inc. Page 115 • System . Sets the polling rate for system-related information, such as device name, device location and so on. • Topology Layer 1 Counters . Sets the polling rate of the topology process as an interval for the Layer 1 counter. This is an ongoin...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 116 Cisco Systems, Inc. 7.4.2 Customizing a Polling Group Sheer DNA Manage enables the user to create and customize new polling groups. The new polling groups that are created can then be used when defining a VNE. For more information,...

Managing Global Settings Cisco Systems, Inc. Page 117 4. Right-click to display the shortcut menu and select New Polling Group or from the File menu select New Polling Group or in the toolbar click New . The New Polling Group dialog box is displayed. The following fields are displayed at the top of ...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 118 Cisco Systems, Inc. • System: Sets the polling rate for system-related information, such as device name, device location and so on. The following fields are displayed in the Topology area: • Layer 1: Sets the polling rate of the to...

Managing Global Settings Cisco Systems, Inc. Page 119 7.4.4 Deleting a Polling Group Sheer DNA Manage enables the user to delete polling groups. To delete a polling group 1. Select the Global Settings branch in the Sheer DNA Manage window’s Tree pane and choose the Polling Groups sub-branch. The Pol...

Managing Global Settings Cisco Systems, Inc. Page 121 When the VNE is using slow polling and CPU usage drops to a regular level (or below the minimum value), Sheer DNA waits for the VNE to drop below the maximum CPU usage threshold value twice (default) and only then does the VNE return to normal po...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 122 Cisco Systems, Inc. To create a protection group 1. Select the Global Settings branch in the Sheer DNA Manage window’s Tree pane. The Global Settings branch is displayed. 2. Expand the Global Settings branch and select the required...

Managing Global Settings Cisco Systems, Inc. Page 123 7.5.1 Checking Assignment of Protection Groups to DNA Units The administrator can view the protection groups to which the Sheer DNA Units are currently assigned. In so doing, the administrator can, at a glance, check that the configuration or ass...

Managing Global Settings Cisco Systems, Inc. Page 125 7.5.3 Viewing and Editing Protection Group Properties The administrator can view the properties of a protection group, for example, the description. In addition, the administrator can edit the description of the protection group. To view and edit...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 126 Cisco Systems, Inc. 7.5.4 Deleting a Protection Group Sheer DNA Manage enables the user to delete protection groups. Note: Check that you are deleting the correct protection group, as there may be a DNA Unit using the protection gr...

Managing Links Cisco Systems, Inc. Page 127 8 Managing Links About this chapter: This chapter describes how to add and remove a static link between two ports of two Network Elements in the network. These static links will override any existing auto-discovered topology in the system. A static link is...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 128 Cisco Systems, Inc. To create a new static link 1. Select the Topology branch in the Sheer DNA Manage window. The Topology branch is displayed. Note: Any changes made in the Topology branch are saved automatically and are registere...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 130 Cisco Systems, Inc. 4. Expand the tree and select the A Side and Z Side port of each device. For more information about the icons and severity displayed in this dialog box, refer to the Cisco Active Network Abstraction NetworkVisio...

Managing Links Cisco Systems, Inc. Page 131 6. Click Close . The New Static Link dialog box is closed and the newly created link between the two devices is displayed in the Workspace . Note: The new link is created with the rule A Side < Z Side lexicographically. For example, if the user selected...

Managing Workflows Cisco Systems, Inc. Page 133 9 Managing Workflows About this chapter: This chapter briefly describes the Workflow Engine branch in the Sheer DNA Manage application. About the Sheer Workflow Editor , below, provides an overview of the Sheer Workflow Editor. Workflow Engine Branch ,...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 134 Cisco Systems, Inc. After a workflow is deployed, it is accessible via Sheer DNA Manage for viewing properties and status. Deployed workflows can be invoked via the Sheer DNA API using BQL. 9.2 Workflow Engine Branch The Workflow E...

Managing Sheer DNA Security Cisco Systems, Inc. Page 135 10 Managing Sheer DNA Security About this chapter: This chapter describes how Sheer DNA implements a two-dimensional security engine combining a role-based security mechanism with scopes (groups of Network Elements) that are granted to users. ...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 136 Cisco Systems, Inc. After the user is allocated a scope (list of Network Elements) and a role, the user can then perform various activities on the Network Elements included in the scope, as follows: • Activate services. • Manage al...

Managing Sheer DNA Security Cisco Systems, Inc. Page 137 • Operator: Configure business tags and manage most day-to-day operations. • Viewer: View only access to the network and to non-privileged system functions. Note: Roles can be granted per scope or at an application level (namely, all the activ...

Managing Sheer DNA Security Cisco Systems, Inc. Page 139 10.2 Customizing Security Flow The flow below describes the steps required to customize security using Sheer DNA Manage and the order in which they must be performed. Step 4: Grant scopes and roles to a user(s) Step 3: Define Sheer DNAuser acc...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 140 Cisco Systems, Inc. 10.3 Creating Scopes Sheer DNA Manage enables the administrator to group a collection of managed Network Elements together in order to enable the user to view and/or manage the Network Elements based on the user...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 142 Cisco Systems, Inc. 10.3.1 Editing a Scope and Viewing a Scope Properties Sheer DNA Manage enables the administrator to edit the details of a scope and to view the scope’s properties. To edit a scope or view scope properties 1. Sel...

Managing Sheer DNA Security Cisco Systems, Inc. Page 143 To delete a scope 1. Select the Scopes branch in the Sheer DNA Manage window’s Tree pane. The Scopes table is displayed in the Workspace . 2. Select the scope that you want to delete in the Workspace . Note: Multiple rows can be selected using...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 144 Cisco Systems, Inc. To define a user account 1. Select the Users branch in the Sheer DNA Manage window. The Users branch is displayed. 2. Right-click to display the menu and select New User or from File menu select New User or in t...

Managing Sheer DNA Security Cisco Systems, Inc. Page 145 The following fields are displayed in the New User dialog box: • User Name: The new user’s name used for logging in (mandatory). Note: The user name is unique and a maximum of 20 characters may be used. Special characters may not be used. • Fu...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 146 Cisco Systems, Inc. 3. Enter a unique User Name (mandatory). 4. Enter a Full Name and Description (optional). 5. Enter a Password (mandatory). 6. Enter the password again in the Confirm Password field (mandatory). 7. Select a secur...

Managing Sheer DNA Security Cisco Systems, Inc. Page 147 3. From the shortcut menu, select Properties . The Properties dialog box is displayed with the General tab selected by default. The General tab contains general user account information and the following fields are displayed: • User Name: The ...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 148 Cisco Systems, Inc. • Limit Connections to: The number of instances of the Sheer DNA Client applications that the user can access at any one time. For example, if the number of connections is limited to 10, the user can have 5 inst...

Managing Sheer DNA Security Cisco Systems, Inc. Page 149 3. Select the Security tab. The following tab is displayed. The Security tab controls the user’s capability to view and manage the application, and Network Elements by granting the user scopes and security access roles. By default a new user i...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 150 Cisco Systems, Inc. 4. Click Add to add the scope to the Active Rights of the user. The Security Level dialog box is displayed. The following area is displayed in the Security Level dialog box: • Available Scopes: Lists all of the ...

Managing Sheer DNA Security Cisco Systems, Inc. Page 151 10.5.3 Map User Permissions Sheer DNA Manage enables the administrator to assign a map(s) to the user. When the user logs in to Sheer NetworkVision, the user can only open and manage the map(s) assigned to the user by the administrator. To ass...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 152 Cisco Systems, Inc. The following buttons are displayed between the available maps and assigned maps lists in the Map tab: Moves the selected map to the Assigned Maps list. Move the entire available map list to the Assigned Maps li...

Managing Sheer DNA Security Cisco Systems, Inc. Page 153 In addition, the current user can also initiate a change of password, where the user will be required to enter the old password in order to validate the new password. To change a user’s password (administrator) 1. Select the Users branch in th...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 154 Cisco Systems, Inc. 3. Enter the new password in the New Password and Confirm P assword fields. 4. Click OK . A confirmation message is displayed. 5. Click OK . The Change User Password dialog box is closed.

Utility Scripts Cisco Systems, Inc. Page 155 A Utility Scripts About this appendix: This appendix describes the Sheer DNA utility scripts. Restarting Sheer DNA Gateway , below, describes how to restart the Sheer DNA Gateway from the Unix command line. Restarting a Sheer DNA Unit , page 155, describe...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 156 Cisco Systems, Inc. Restarting a machine may cause some of the VNEs running on the machine to be reported as unreachable. This is due to handshake protocols with the Sheer DNA Unit that will fail due to the unavailability of the VN...

Golden Source Registry Cisco Systems, Inc. Page 157 B Golden Source Registry About this appendix: This appendix provides details of the Golden Source Registry. The Golden Source registry is the master registry responsible for maintaining, distributing, and updating registry configuration files to al...

Ports Used by Sheer DNA Cisco Systems, Inc. Page 159 C Ports Used by Sheer DNA About this appendix: This appendix provides a list of the ports used by the various Sheer DNA Server and Client applications. Scope Protocol Port Sheer DNA Gateway Northbound Sheer NetworkVision TCP 9770 Sheer NetworkVisi...

Drools Rules Engine Cisco Systems, Inc. Page 161 D Drools Rules Engine About this appendix: This appendix introduces and describes the Drools rules engine. Drools Rules Engine Overview , below, introduces the Drools rules engine components and terminology. Drools and ANA Integration , page 162, expl...

Cisco Active Network Abstraction Administrator’s Guide, 3.5 Page 162 Cisco Systems, Inc. • A rule can perform many types of actions, such as: • Add or remove an object from the working memory • Modify an object • Execute a method on one of the objects • The Agenda is where Drools stores the list of ...

Drools Rules Engine Cisco Systems, Inc. Page 163 The Drools parameters are stored in the ANA registry file mmvm.xml under the event-management key: • Context ID - the Drools context name • Rule file name – the name of the respective rule file. • the specified rule (the file name under mmvm.xml ). D....