Configuring Interconnection with iMaster NCE-CampusInsight

Context

iMaster NCE-Campus and iMaster NCE-CampusInsight can be interconnected to enable intelligent WLAN fault diagnosis and user experience analysis, implementing intelligent O&M.

After iMaster NCE-Campus and iMaster NCE-CampusInsight are interconnected, users can be redirected to the iMaster NCE-CampusInsight web UI through the iMaster NCE-Campus web UI. In this case, users can obtain information about tenants, sites and devices, and implement intelligent O&M on devices on iMaster NCE-CampusInsight.

• If iMaster NCE-Campus has been interconnected with iMaster NCE-CampusInsight and capacity expansion is performed for iMaster NCE-Campus, the system administrator needs to log in to iMaster NCE-Campus and click Save on the System > System Management > Analysis Component Integration > CampusInsight page to enable alarm permissions. Otherwise, some alarm rules may fail to be created on iMaster NCE-CampusInsight.

• Since iMaster NCE-CampusInsight does not support geographic redundancy, after a disaster recovery (DR) switchover is performed between the active and standby iMaster NCE-Campus clusters, you need to reconfigure interconnection with iMaster NCE-CampusInsight on iMaster NCE-Campus. In addition, on iMaster NCE-CampusInsight, you need to update the certificate of iMaster NCE-Campus and reconfigure interconnection with iMaster NCE-Campus. If iMaster NCE-CampusInsight fails due to a disaster, you need to install a new iMaster NCE-CampusInsight system with the same southbound IP address as that of the original system and reconfigure interconnection between iMaster NCE-CampusInsight and iMaster NCE-Campus. Historical analysis data will be lost after iMaster NCE-CampusInsight fails.

• One set of iMaster NCE-CampusInsight can connect to only one set of iMaster NCE-Campus.

Prerequisites

• The CampusInsightProxyService module has been installed on iMaster NCE-Campus.
• The iMaster NCE-Campus administrator has provided the following information for the iMaster NCE-CampusInsight administrator to configure interconnection between iMaster NCE-CampusInsight and iMaster NCE-Campus:
  • The login address (IP address+port number or domain name) of the iMaster NCE-Campus service plane and administrator user name and password. The default port number is 18008.

    To log in to iMaster NCE-Campus, you need to open a web browser, input https://service plane IP address:18008 in the address box, and enter the user name and password.

  • IP address and port number of the iMaster NCE-Campus backend ER. The default port number is 26330.

    Log in to the management plane, choose Product > Software Management > Deploy Product Software from the main menu, and choose More > Modify Configurations. The value in globalBackendLBFloatIPAddr field is the IP address of the backend ER.

  • IP address and port number of the iMaster NCE-Campus ER. The default port number is 31943.

    Log in to the management plane, choose Product > Software Management > Deploy Product Software from the main menu, and choose More > Modify Configurations. The value in ER_IP field is the IP address of the ER.

  • CA certificate and manifast.json file of iMaster NCE-Campus

    Obtain the CA certificate files ca.cer and ca_key.pem along with the manifast.json file from the /opt/oss/manager/var/ca directory on the management node.

    Huawei public cloud scenario: Log in to the CloudSOP management plane and choose Product > System Monitor from the main menu. In the upper left corner of the System Monitor page, move the cursor to , select the desired product, and click the Nodes tab. On the displayed tab page, the service1 and service2 nodes are the primary and secondary management nodes, respectively. You can obtain the CA certificate and the manifast.json file [w1] on either of the two nodes.

    MSP-owned cloud and on-premises scenarios: Log in to the iMaster NCE-Campus management plane and choose Product > System Monitor from the main menu. In the upper left corner of the System Monitor page, move the cursor to , select the desired product, and click the Nodes tab. On the displayed tab page, the service1 and service2 nodes are the primary and secondary management nodes, respectively. You can obtain the CA certificate and the manifast.json file [w1] on either of the two nodes.

  • ER certificate of iMaster NCE-Campus.

    Obtain the ER certificate trust.cer from the /opt/oss/NCECAMPUS/etc/ssl/er directory on the node where ERService is deployed.

    If iMaster NCE-CampusInsight needs to obtain the ER certificate of iMaster NCE-Campus after the trust.cer certificate is imported to iMaster NCE-Campus, log in to the node where ERService is deployed and obtain the origintrust.cer file, which is the target ER certificate.

    Log in to the management plane and choose Product > System Monitor > iMaster NCE-Campus from the main menu. Click the Services tab and search for the HRS instance. Check whether the node corresponding to the er process is the node where ERService resides.

    If the IP address, CA certificate, or ER certificate of iMaster NCE-Campus changes, update the related information on iMaster NCE-CampusInsight. Otherwise, the interconnection fails.

Procedure

1. Configure the SSO server to trust the iMaster NCE-CampusInsight login IP address.

   Choose System > System Management > SSO Configuration. Click the SSO Server Configuration tab, and click Create to create a trusted iMaster NCE-CampusInsight login IP address. Then click OK.

   If the login address of iMaster NCE-CampusInsight is translated using NAT, ensure that iMaster NCE-CampusiMaster NCE-WAN can communicate with iMaster NCE-CampusInsight.

   • To log in to iMaster NCE-CampusInsight using the IP address before NAT, set the trusted IP address to the IP address before NAT.
   • To log in to iMaster NCE-CampusInsight using the IP address after NAT, set the trusted IP address to the IP address after NAT.

2. Choose System > System Management > Analysis Component Integration.
3. In the Data Synchronization Configuration area, set IP address to the IP address of the iMaster NCE-CampusInsight Backend ER. iMaster NCE-Campus can interconnect with iMaster NCE-CampusInsight through this northbound IP address.

4. Click Test to test connectivity.
5. Synchronize site data and configure a data synchronization period.

   The data to be synchronized to iMaster NCE-CampusInsight includes the device data and site data of the tenants enabled with data synchronization.

   After the connectivity test succeeds, enable periodic synchronization and set a synchronization time.

6. Set SSO Address to the iMaster NCE-CampusInsight login IP address, and set Port to 31943. The IP address must be the same as the trusted IP address of the SSO server configured in 1. iMaster NCE-Campus can interconnect with iMaster NCE-CampusInsight through the SSO address.

7. In the Southbound Configuration area, set Southbound Address and Port to the IP address and port number used for interconnection between iMaster NCE-CampusInsight and devices. After iMaster NCE-Campus interconnects with iMaster NCE-CampusInsight, iMaster NCE-Campus delivers the IP address to devices. The devices connect to the iMaster NCE-CampusInsight through the southbound IP address and port, and then report data to iMaster NCE-CampusInsight for analysis.

8. Click Save. After the configuration is saved, data will be synchronized periodically.
9. In the License Data Synchronization area, click Synchronize immediately to synchronize the iMaster NCE-CampusInsight license.

Follow-up Procedure

1. Log in to iMaster NCE-Campus as the system administrator.
2. Choose Analysis > CampusInsight. Log in to iMaster NCE-CampusInsight as the admin user, check the iMaster NCE-CampusInsight alarm information and system information, and manage licenses.
3. Log in to iMaster NCE-Campus as a tenant administrator.
4. Choose System > System Settings > Analysis Component Integration. Click Synchronize Immediately. For details, see Synchronizing data to iMaster NCE-CampusInsight.
5. Enable the function of reporting data to iMaster NCE-CampusInsight on switches, APs, or WACs. For details, see Configuring Devices to Report Data to iMaster NCE-CampusInsight.
6. Click Analysis > CampusInsight, and check whether you can be redirected to the iMaster NCE-CampusInsight web UI.

Parameter Description