No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

eSight V300R010C00 Operation Guide 07

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
IP Topology Management

IP Topology Management

This section describes how to add devices to eSight and how to construct and view the IP topology.

Operation Procedure

IP address topology management allows you to learn the network architecture and graphically monitor the running status of the entire network.

Table 12-8 Procedure

Step

Operation

Description

1

Set protocol parameters on the device: SNMP, Telnet, LLDP, and NETCONF

Set different protocol parameters based on the site requirement.

2

Add devices to eSight.

Select a proper device addition mode based on the site requirement.

For details about how to add devices to eSight, see Adding Devices to eSight.

3

Create the IP address topology.

The IP address topology displays routers and layer-2 devices, and layout and status of links between routers and layer-2 devices.

4

Check the IP address topology.

  • The IP address topology management page offers a tree structure on the left and a topology pane on the right. IP topology objects are organized hierarchically by IP subnet.
  • eSight allows users to zoom in on and zoom out of an IP address topology view. Meanwhile, an aerial view is provided for users to understand the entire topology structure.
  • Users can view the alarm status and tips of devices and links.
Configuring the NETCONF Protocol on Devices

This section describes how to configure the NETCONF protocol on devices.

To enable eSight to manage network devices with higher security and scalability, you need to set NETCONF parameters on the network devices. NETCONF parameter settings on devices must be the same as those on eSight.

This section uses Huawei CloudEngine 12800 V200R002C20 as an example to describe basic commands for setting NETCONF parameters on the devices. For commands of other device models, see the device configuration manual.

<Device> system-view
[Device] interface GigabitEthernet 1/0/1   //Set GigabitEthernet 0/0/1 as the management interface of the NETCONF agent.
[Device-GigabitEthernet1/0/1] ip address 10.10.10.10 24   //Set the IP address of the management interface of the NETCONF agent to 10.10.10.10.
[Device-GigabitEthernet1/0/1] quit
[Device] ssh user netconfuser   //netconfuser is the user name configured when the device interconnection NETCONF protocol is configured on eSight. 
[Device] aaa
[Device-aaa] local-user netconfuser password irreversible-cipher Changeme123   //Changeme123 is the password configured when the device interconnection NETCONF protocol is configured on eSight. 
[Device-aaa] local-user netconfuser service-type ssh
[Device-aaa] local-user netconfuser level 15   //Set the NETCONF permission of the user to the highest level 15. You are advised to set the NETCONF permission based on the site requirements.
[Device-aaa] quit
[Device] ssh server cipher 3des_cbc aes128_cbc aes128_ctr aes256_cbc aes256_ctr arcfour128 arcfour256 blowfish_cbc des_cbc   //Set the encryption algorithm list on the SSH server.
[Device] ssh user netconfuser authentication-type password
[Device] ssh user netconfuser service-type snetconf
[Device] snetconf server enable
[Device] commit
Creating an IP Address Topology

The IP address topology provides only the monitoring function. After a device is added to eSight successfully, eSight automatically displays the IP address topology information.

NOTE:

The IP address topology information is displayed only when the device has an interface IP address.

The IP address topology management page offers a tree structure on the left and a topology pane on the right. Topology objects are organized hierarchically by IP subnet. eSight allows users to zoom in on and zoom out of a topology view. Meanwhile, an aerial view is provided for users to understand the entire topology structure. Users can view the alarm status and tips of devices and links.

  1. Classify IP address topology objects by the device IP address.
  2. Choose Topology > IP Topology Management from the main menu.

  3. Deploy IP address topology objects based on the network design.

    Users can adjust the IP address topology object based on the actual network structure.

    Table 12-9 Deploying IP address topology objects

    Operation

    Procedure

    Adjusting the locations of NEs and subnets

    Drag objects if you only need to adjust them within the same subnet.

    Identifying IP address topology object scopes using boxes

    Identify IP address topology object scopes using boxes with different shapes and colors to clearly show the network structure. For example, you can use this method to distinguish objects between different campuses.

    1. Click on the toolbar.
    2. Drag a shape to the topology view and set its attributes.
    3. Drag IP address topology objects to the shape. Adjust the layer relationship between the shape and IP address topology objects using the shortcut menu based on the site requirements.

    Setting the subnet background as the image

    Right-click the IP address topology and choose Set Background Image for Subnet from the shortcut menu. You can set a picture as the subnet background image based on the site requirements.

    Set a picture as the subnet background image. If you want to display a device's relative location in a building, set the building drawing as the subnet background image.

  4. Click to save new positions of adjusted IP address topology objects.
Checking the IP Address Topology

Through the IP address topology, you can check physical connections between devices and detailed information about IP address changes and links in layer-2 and layer-3 topology views.

  1. Choose Topology > IP Topology Management from the main menu. The layer-3 topology view is displayed. In the layer-3 topology view, double-click a subnet to access the layer-2 topology view. Then, check NEs and links in the layer-2 IP address topology view.

Troubleshooting

This section describes common faults frequently encountered by users, helping users rectify faults in a timely manner.

Topology Pages Are Blank After eSight Is Accessed Using the Edge Browser
Symptom

Topology pages are blank after eSight is accessed using the Edge browser.

Possible Causes

The Edge browser blocks the flash loading on the untrusted certificate page. You need to install the certificate on the client browser and trust the page with this address.

Procedure
NOTE:

In the Windows10 operating system, you need to log in to the operating system as the administrator to install the certificate on the browser.

The built-in administrator cannot open the Edge browser. Therefore, you need to log in to the operating system as the administrator and use Internet Explorer 11 to install the certificate. Then, you can log in to the operating system using another account and use the Edge browser to access eSight.

  1. Log in to the Windows10 operating system as the administrator and use Internet Explorer 11 to access eSight.
  2. In the Internet Explorer address bar, click Certificate Error in the address box. In the dialog box that is displayed, click View certificates.

  3. On the General page, click Install Certificate.

  4. Select Local Machine and click Next.

  5. On the Certificate Store page, select Place all certificates in the following store and click Browse.

  6. Select Trusted Root Certification Authorities and click OK.

  7. Click Next.

  8. Click Finish.

  9. On the Certificate Path page, select the CA root certificate and click View Certificate.

  10. Click Install Certificate. Repeat steps 4 through 8 to install the certificate.

  11. Restart the browser. Use another account to log in to the Windows 10 operating system, and use the Edge browser to access eSight. Topology pages are displayed properly.
Translation
Download
Updated: 2019-06-30

Document ID: EDOC1100044378

Views: 59668

Downloads: 272

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next