No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

eSight V300R010C00SPC200, 300, and 500 Self-Service Integration Guide 10

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring the Interconnection with the third-party system (pull)

Configuring the Interconnection with the third-party system (pull)

In the nbi.xml file, configure the interconnection between eSight and the third-party system in pull mode to enable the third-party system to log in to the eSight FTP server using an FTP client to download SLA northbound files.

  • Configuring the interconnection with the third-party system (pull) is a process of registering northbound FTP users with the FTP server of eSight.
  • eSight can interconnect with a maximum of 20 third-party systems. Each <UserInfo> node indicates a third-party system.
  • The SFTP server of eSight supports public key authentication and password authentication. Northbound FTP users can register using the user name and password only. For the configuration details, see "Procedure" in this section. After the configuration is complete, the user can access in password or public key authentication mode. If the public key mode is used, configure a public key by following instructions in How Do I Configure a Public Key in Pull Mode.
  • After registering FTP users, the passwords for these users in the nbi.xml file are deleted.

Prerequisites

The SFTP service certificate of the northbound interface has been configured in the nbi_ftp_config_eSight.xml file.

Context

  • Periodically modify the configuration items that involve passwords. Changing passwords periodically prevents theft of the passwords and unauthorized access.
  • Only the admin user is supported in the northbound direction.
  • The northbound FTP or SFTP server supports a maximum of 20 user connections.
  • The FTP or SFTP user is automatically logged out if it is idle for more than 5 minutes.
  • If the FTP or SFTP user fails in five consecutive connection attempts, this user will be locked for 5 minutes.
  • Information for interconnecting with the third-party system can be configured on the GUI or through a configuration file. If a configuration file is used, the configuration takes effect after eSight is restarted. The GUI mode is recommended.

Procedure

  • Configure the interconnection information on the GUI.
    1. Choose System > System Settings > Northbound Integration from the main menu.
    2. Choose Local System Settings from the navigation tree on the left, set FTP interface parameters, and click Apply.
      • The FTP protocol is risky. SFTP is recommended.
      • The system IP address must be reachable through SNMP.
      • The port number cannot conflict with other ports of the server. Otherwise, the related FTP server fails to start.
      • When Multiplex southbound FTP server is selected, the southbound FTP service is used. The port number on the GUI is not configurable. Instead, the southbound SFTP or FTP port number is automatically obtained.
      • If the user (only one user) registered with the southbound FTP server is deleted or modified, the Home directory of the northbound storage will be deleted, and the northbound data in a period will be lost.
    3. Choose Third-party System Settings from the navigation tree on the left, and click Create.
    4. Configure the IP address of the third-party system by setting the connection protocol to SFTP/FTP and setting the SFTP/FTP user name and password.

      You can set the SFTP/FTP user name and password. After the setting, the user is created on the eSight server.

    5. Click OK.
  • Configure interconnection information through a configuration file.
    1. Configure the pull mode for transferring SLA northbound file.
      Table 5-26 Configuring the mode for transferring SLA northbound file

      Configuration Item

      Description

      Value

      UserInfo > UserFtpInfo > CommonFTPInfo > IsPush

      Sets the mode for transferring SLA northbound files between eSight and the third-party system.

      0

    2. Configure the name of the third-party system.
      Table 5-27 Configuring the name of the third-party system

      Configuration Item

      Description

      Value

      UserInfo > NmsinfoName

      Configure the name of the third-party system.

      • If an IP address is used as the name, there is no need to set the related parameter in <Installation directory>/AppBase/etc/nbi/snmp/snmpagent.xml.
      • If a character string for example nmsinfo1 is used as the name, set nmsinfo > name in <Installation directory>/AppBase/etc/nbi/snmp/snmpagent.xml to the same name. You also need to configure the corresponding IP address.
      NOTE:

      When multiple third-party systems are configured, you need to set different IP addresses.

    3. Configure FTP information about the third-party system.
      Table 5-28 Configuring FTP information about the third-party system

      Configuration Item

      Description

      UserInfo > UserFtpInfo > CommonFTPInfo > Username

      Indicates the eSight FTP user name.

      NOTE:
      • In a single-node scenario, configure different user names for different third-party systems. If user names are the same, the password configured later will replace the password configured before.
      • In a remote HA scenario, if you configure a user name the same as that of a third-party system, the password must also be the same.

      UserInfo > UserFtpInfo > CommonFTPInfo > AuthMode

      Indicates the authentication mode.

      • 0: password
      • 1: public key
      NOTE:

      The configuration item AuthInfo is invalid in this mode.

      UserInfo > UserFtpInfo > CommonFTPInfo > AuthInfo

      Indicates the eSight FTP user password.

      NOTE:
      • To use encrypt.sh to encrypt data on Linux, run the following commands:

        1>cd <Installation directory>/AppBase/tools/bmetool/encrypt

        2>./encrypt.sh 0

        3>Enter the new password as prompted.

        Enter the password to be encrypted:

        After the commands are successfully executed, the new password in cipher text is displayed.

      • To use encrypt.bat to encrypt data on Windows, run the following commands:

        1>cd /d <Installation directory>/AppBase/tools/bmetool/encrypt

        2>encrypt.bat 0

        3>Enter the new password as prompted.

        Enter the password to be encrypted:

        After the commands are successfully executed, the new password in cipher text is displayed.

      UserInfo > UserFtpInfo > CommonFTPInfo > FileTransMode

      Indicates the protocol used for uploading files.

      • 0: FTP
      • 1: SFTP
      NOTE:

      SFTP is recommended to ensure file transfer security.

    4. Restart the eSight service for the configurations to take effect.
Translation
Download
Updated: 2019-10-30

Document ID: EDOC1100044386

Views: 16010

Downloads: 83

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next