(Optional) Configuring the Southbound IP Address
The network is divided into the southbound network (where devices reside) and northbound network (where the upper-layer NMS, third-party system, and client reside) through the configuration of a southbound IP address. The northbound network cannot directly access devices on the southbound network. Therefore, devices and other network facilities are isolated, enhancing device security and reducing attack risks.
Prerequisites
eSight has been stopped. You can follow instructions in Stopping the eSight Service to manually stop eSight before configuration, or select Automatically start and stop eSight during configuration.
Context
- Currently, the southbound and northbound service isolation function has the following limitations:
- Currently, southbound and northbound service isolation is supported only for the centralized deployment.
- The multi-subnet management function of eSight conflicts with the southbound and northbound service isolation function. If the southbound and northbound service isolation function is enabled, the multi-subnet management function cannot be enabled.
- The eLTE Device Manager manages industry terminals, eNodeBs, and service engines. The multi-subnet function must be enabled. Southbound and northbound isolation is not supported.
- In the southbound and northbound isolation scenario, the web management function under Device Config > Web NMS is unavailable for network devices.
- After the southbound IP address is configured, change the following IP addresses:
- Change the eSight IP address to the southbound IP address on the following types of devices:
- Unified communications devices: CC solution, ECS, IAD, eSpace U2900, eSpace USM, VTC, and SBC (SX series)
- Telepresence and videoconferencing devices: MCU
- Change the IP address used by servers and PON devices to report alarms to the southbound IP address.
- After configuring the southbound IP address, you need to modify SNMP parameters of the FusionSphere accordingly and send the parameter settings to the OpenStack OM.
- Set Alarm source address to OM Network Floating IP Address.
- Select Synchronize SNMP Trap Settings to OpenStack OM.
- Change the eSight IP address to the southbound IP address on the following types of devices:
Procedure
- Log in to the server as the Administrator user.
- Among all programs, choose eSight > eSight Console.
- Choose Tools > Southbound IP Config Tool in the eSight Console window.
The Southbound IP Config Tool dialog box is displayed.
- Configure the southbound IP address and select After modification or rollback, modify the eSight IP address on the device accordingly. Click OK.
If eSight needs to be stopped and started automatically, select Automatically start and stop eSight. Otherwise, you need to manually stop eSight before configuration and start eSight after configuration.
Follow-up Procedure
- If the southbound IP address needs to be changed, perform the following steps:
- Log in to the server as the Administrator user.
- Among all programs, choose eSight > eSight Console.
- Choose Tools > Southbound IP Config Tool in the eSight Console window.
- Configure new Southbound IP and select After modification or rollback, modify the eSight IP address on the device accordingly on the Southbound IP Config Tool page.
If eSight needs to be stopped and started automatically, select Automatically start and stop eSight. Otherwise, you need to manually stop eSight before rollback and start eSight after rollback.
- If the southbound IP address configuration needs to be rolled back, perform the following steps:
- Log in to the server as the Administrator user.
- Among all programs, choose eSight > eSight Console.
- Choose Tools > Southbound IP Config Tool in the eSight Console window.
- Click Roll Back and select After modification or rollback, modify the eSight IP address on the device accordingly on the Southbound IP Config Tool page.
If eSight needs to be stopped and started automatically, select Automatically start and stop eSight. Otherwise, you need to manually stop eSight before rollback and start eSight after rollback.