IMaster NCE-Campus V300R021C00 Monitoring and O&M

iMaster NCE-Campus V300R021C00
Monitoring and O&M

Page 0 Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.
Foreword
• With the emergence of cloud computing, the "on-demand" cloud service mode is
gaining popularity, and the traditional network management mode is undergoing a
dramatic transformation. Cloud-based network management is shaping a trend, and
cloud management networks provide a new mode for enterprise network
construction and O&M.
• This document describes the monitoring and O&M functions provided by iMaster
NCE-Campus in the Huawei CloudCampus Solution.
Objectives
• Upon completion of this course, you will be able to:
▫ Understand system O&M functions provided by iMaster NCE-Campus
▫ Understand service O&M functions provided by iMaster NCE-Campus
▫ Understand the preventive maintenance inspection (PMI) function provided by iMaster

NCE-Campus
Contents
1. System O&M
2. Service O&M
3. PMI for Cloud Managed Devices
Cluster Monitoring on the Management Plane
iMaster NCE-Campus provides an independent management plane and service plane.
Different IP addresses and port numbers are used to log in to the planes. This allows
users to focus on different task scenarios and implement efficient system
management and network O&M.
The management plane centrally manages iMaster NCE-Campus software resources,

applications, and databases to implement functions such as installation and
deployment, system monitoring, system maintenance (user and password
management, data backup and restoration, certificate and key management, etc.), and
system troubleshooting (system health check, remote disaster recovery, etc.).
System Monitoring
The management plane displays monitoring data in terms of the product, node,
service, relational database, and Redis database, as well as allowing users to configure
alarm thresholds for the CPU, memory, and disk usages of nodes.
System Monitoring - Node
The management plane monitors and displays the CPU usage, memory usage, disk
partitions, and details about resources used by processes on each node.
System Monitoring - Relational Database
The management plane monitors and displays the running status of each relational
database instance.
System Monitoring - Redis Database
The management plane monitors and displays the running status of each Redis
database instance.
Unified Monitoring - Overview
The management plane can monitor the network status of network interface cards
(NICs), historical performance indicators of nodes, key middleware indicators, database
indicators, and service key performance indicators (KPIs). It provides enhanced system
monitoring capabilities compared with the original CloudSOP management plane.
Unified Monitoring - Node
The management plane monitors the real-time and historical status of the CPU usage,
memory usage, packet loss rate, network delay, and process of each iMaster NCE-
Campus node to detect and rectify faults in a timely manner, ensuring efficient
running of iMaster NCE-Campus.
Unified Monitoring - Service
The management plane can monitor resources such as the CPU, memory, threads, and
file handles of iMaster NCE-Campus services. Administrators can check the resource
usage of a node based on a service or check the resource usage of a service based on
a node to detect and resolve exceptions in a timely manner, ensuring normal service
running.
Unified Monitoring - Key Middleware
iMaster NCE-Campus uses a large amount of open-source middleware, such as
GaussDB 100 and ETCD. However, the status and indicators of the middleware are not
visualized. The management plane can display the real-time and historical status of
key middleware indicators and the real-time status of all middleware indicators,
improving maintenance efficiency.
O&M Management - Data Collection
The management plane provides default and custom collection templates for O&M
personnel to collect logs and database tables as required for fault diagnosis.
Introduction to FusionInsight Manager
FusionInsight Manager presents monitoring information in the graphical
manner to help administrators manage FusionInsight nodes.
Homepage
 On the FusionInsight Manager homepage, you
can check the service running status, health
status, CPU usage, memory usage, disk usage,
and interface's network rate of each
FusionInsight node, as well as cluster alarms. An
alarm ringtone is played when an alarm is
generated. You can click the corresponding icon
to go to the alarm page to view alarm details.
 The default CPU usage alarm threshold is 80%,
the memory usage alarm threshold is 90%, and
the disk usage alarm threshold is 90%. If an
alarm is generated, handle the alarm by
following instructions provided in the
FusionInsight product documentation. If the
alarm persists, contact Huawei technical support.
Alarms on FusionInsight Manager
You can view alarm IDs in the alarm list on the O&M > Alarm > Alarm page, and find handling
suggestions based on the alarm ID in the FusionInsight product documentation. If the alarm persists after
you have performed suggested operations, contact Huawei technical support.
Long-Term Monitoring and Routine Check of
the Network Rate
• The rate of access to public cloud services in each region can be monitored.
• Network monitoring is available at www.17ce.com.

1. Information statistics
2. Map display
3. Regional statistics analysis
One-Time Network Rate Check
• You can manually perform a ping test to test the network rate.
• Check results are displayed in a chart.
iMaster NCE-Campus Capacity Expansion
This section describes the fundamentals of iMaster NCE-Campus clusters and how
administrators deploy new nodes to relieve the pressure of service expansion. Only
distributed clusters support capacity expansion.
Cluster Capacity Expansion
 iMaster NCE-Campus capacity expansion:
 Minimum clusters do not support capacity expansion, but distributed clusters do.
 Only service nodes can be newly deployed in a cluster, but middleware nodes cannot.
 Capacity expansion is performed using EasySuite.
Node Replacement
 You can replace faulty nodes in an iMaster NCE-Campus cluster.
 Procedure:
Step 1: Back up data, including the product data, product applications, operating system (OS), and
management plane.
Step 2: Deploy a new node and prepare the node for service restoration.
Step 3: Restore files on the new node.
Step 4: Restore mutual trust relationships between nodes.
Step 5: Restore the management plane.
Step 6: Restore the product data, product applications, and databases.
Step 7: Start services on the new node.
Contents
1. System O&M
2. Service O&M
3. PMI for Cloud Managed Devices
Alarm Management Overview
• System administrators can check the running status of iMaster NCE-Campus based on alarms. By
doing so, they can determine whether the system encounters an exception.
• Tenant administrators can check the running status of managed devices based on alarms. By doing so,
they can determine which devices are faulty and handle the faults in a timely manner.
Current Alarms (1/3)
• System and tenant administrators can view all current alarms generated by iMaster NCE-Campus and
devices, respectively, on the Monitoring > Alarm > Current Alarms page and view the detailed
location information and alarm occurrence time.
• They can sort, export, clear, acknowledge, and unacknowledge alarms.
• System and tenant administrators can filter alarms by alarm severity, alarm status, first occurrence
time, last occurrence time, or a combination of the preceding conditions.
• They can also configure combo sorting for alarms and specify the fields to be displayed in the alarm
list.
System and tenant administrators can view the details, remarks, and latest handling records of a specific
alarm by clicking .
Note: Correlative alarms are not supported in V300R020C00.
Historical Alarms
All historical alarms of iMaster NCE-Campus and devices are displayed on the Monitoring > Alarm > Historical
Alarms page. After an active alarm is acknowledged or automatically cleared, it will be moved from the current
alarm list to the historical alarm list, and its clearance time will be recorded. In addition, administrators can
filter alarms by alarm severity, occurrence time, name, and location information.
Alarm Masking
• All masked alarms are displayed on the Monitoring > Alarm > Masked Alarms page. After alarms of a type are
masked, no new record is generated on the Current Alarms page when alarms of this type are generated. Masked
alarms can be filtered based on various conditions.
• Administrators can manually unmask alarms of a certain type in the Operation column.
Alarm Notifications via Email
• Administrators can configure alarm

notifications via email on the Monitoring >
Alarm > Alarm Notification page.
• To send emails to specific users to notify

them of alarms, administrators need to
configure the email sending interval, email
recipients, and email content.
Administrators can also specify the severity
of alarms for which email notifications will
be sent.
Alarm Settings
On the Alarm Settings page, administrators can customize alarm settings, including the color, notification
sound, font color, and highlight display. In addition, administrators can configure masking rules,
intermittent/toggling rules, correlation rules, automatic acknowledgment rules, redefinition rules, alarm/event
name groups, and alarm synchronization. Administrators can click to view details about each function.
Email Server Configuration
System and MSP administrators can configure an email server on the System > System Management
> Third-Party Service page to send alarm notifications via email. Tenants use the email server
configured by their respective MSPs.
Alarm Dump
• Administrators can configure alarm dump on the Alarm > Alarm >
Alarm Dump page. When the alarm storage duration or number of
historical alarms in the database exceeds the threshold, the alarms
in the database will be written to the configured SFTP server.
▫ iMaster NCE-Campus performs dump detection every four hours.
▫ Alarm dump is triggered when the alarm storage duration

exceeds the configured time.
▫ When a remote SFTP server is configured, every 5 MB (upper

limit) data is packaged, compressed, and then uploaded to the
remote SFTP server.
▫ The condition for terminating alarm dump is that all alarms

have expired.
▫ Only historical alarms and events rather than current alarms are
dumped.
Tenant Alarm Management by MSPs
• After logging in to the controller, an MSP administrator can choose Tenant Management >
Tenant Alarm Statistics page to view the number of alarms under all managed tenants and
click a number to view alarm details.
Introduction to Performance Management
• In the CloudCampus scenario, APs, ARs, switches, and firewalls at each site report their
performance data to the iMaster NCE-Campus DataCollector component through HTTP/2.
• The reported data is parsed by the DataCollector component and written into the HBase
database of the FusionInsight cluster.
• The Spark component of the FusionInsight cluster then performs aggregation calculation
based on the Spark computing framework and writes the result into the HBase database.
• Tenant administrators can view the performance data trend and top N devices by
performance at each site, as well as the performance data trend and monitoring indicators
of each device on the iMaster NCE-Campus web UI.
Monitoring Indicators
Category AP AR Firewall Switch
Application monitoring √ √ × ×
Basic performance monitoring √ √ √ √
Terminal monitoring √ √ √ √
Device log monitoring √ √ × √
WAN monitoring × √ × ×
Location monitoring √ × × ×
WIDS monitoring √ × × ×
Mesh monitoring √ × × ×
√: can be monitored
×: cannot be monitored
Monitoring Dashboard
On the Monitoring > Health > Overview page, tenant administrators can check the status, terminal packet loss rate, and application
quality distribution of all sites, and view site locations on the map. They can also view the online Wi-Fi user trend, device status, worst 5
applications with the poorest performance, worst 5 links with the poorest performance, abnormal cloud managed devices, and alarms.
Note: Both SNMP managed and cloud managed devices are monitored when iMaster NCE-Campus monitors the site status, terminal
packet loss rate, online Wi-Fi user trend, device status, and alarms.
Site Monitoring
• Tenant administrators can choose the IPsec VPN or EVPN tunnel mode on the
Design > Basic Network Design > Network Settings > Tunnel Mode page.
• If the EVPN tunnel mode is selected, tenant administrators can view the site
health status, device status, alarms, device health information, and device list of a
specified site on the Monitoring > Health > Site page. In addition, they can view
statistics about WAN links and applications on the WAN Link and WAN
Application tab pages, respectively. For details, see the SD-WAN O&M feature
description.
• If the IPsec VPN tunnel mode is selected, tenant administrators can view the site
health status, device status, alarms, device health information, and device list of a
specified site on the Monitoring > Health > Site page.
Note:
• Tenant administrators can select a site on the top of the page to view site 1. Differences between the two tunnel modes:
• Select the IPsec VPN tunnel mode in a LAN-only scenario. In this
monitoring information. mode, SD-WAN indicator monitoring is not supported.
• Select the EVPN tunnel mode in a LAN+WAN scenario. In this
mode, both data monitoring in the LAN-only scenario and SD-
WAN indicator monitoring are supported.
2. The functions of displaying device health, site health, device status,
alarms, and device health trends are supported for devices managed
by NETCONF or SNMP.
Inter-Site Monitoring (1/2)
• Tenant administrators can choose the IPsec VPN or EVPN tunnel mode on the Design > Basic Network Design > Network
Settings > Tunnel Mode page.
• If the EVPN tunnel mode is selected, tenant administrators can view the quality and traffic information about WAN-side inter-
site links on the Monitoring > Health > Inter-Site page. For details, see the SD-WAN O&M feature description.
Inter-Site Monitoring (2/2)
• If the IPsec VPN tunnel mode is selected, tenant administrators can view the IPsec VPN status, packet loss rate, and delay
between sites on the Monitoring > Health > Inter-Site page.
Application Monitoring
• Tenant administrators can select the EVPN tunnel mode on the Design > Basic Network Design > Network
Settings > Tunnel Mode page.
• Tenant administrators can view WAN-side application quality statistics on the Monitoring > Health > Application
page. For details, see the SD-WAN O&M feature description.
WLAN Resource Monitoring
On the Monitoring > Health > WLAN Resources page, tenant administrators can view the AP and SSID information on the entire
network, at a specific site, or in a specific region. They can also view the access user trend, top N APs by the CPU or memory usage,
and top N regions by the number of access users.
Region Monitoring
Tenant administrators can view the imported network planning projects on the Monitoring > Health > Region Monitor page. They
can import a cloud-based WLAN planning project file, import a background image, set the drawing scale, and add APs and adjust
their locations.
Device Performance Data of a Site (1/2)
On the Monitoring > Report > Statistics Analysis page, tenant administrators can view the device performance data trend and
information about top N devices by performance at a specific site based on the device type and time range (such as one day, week, or
month).
Device Performance Data of a Site (2/2)
• Top N terminals by traffic: calculated based on statistics on cloud APs on a per-tenant basis and a per-site basis
• Top N sites by the average number of online users (wireless access): calculated based on statistics on cloud APs and SNMP-managed APs on a per-tenant basis
• Top N sites by traffic: calculated based on statistics on cloud APs, SNMP-managed APs, and other SNMP-managed network devices on a per-tenant basis
• Number of online users (wireless access): calculated based on statistics on cloud APs, SNMP-managed APs, and other SNMP-managed network devices on a per-tenant
basis and a per-site basis
• Network rate and traffic statistics: calculated based on statistics on cloud APs, SNMP-managed APs, and other SNMP-managed network devices on a per-tenant basis
and a per-site basis
• Top N application categories by traffic: calculated based on statistics on cloud APs, firewalls, and ARs on a per-tenant basis and a per-site basis
• Attack detection: calculated based on statistics on cloud APs on a per-tenant basis and a per-site basis
• Top N sites by the number of alarms: calculated based on statistics on cloud managed devices and SNMP-managed devices on a per-tenant basis
• Top N devices by traffic: calculated based on statistics on cloud APs, SNMP-managed APs, and other SNMP-managed network devices on a per-site basis
• Top N SSIDs by traffic: calculated based on statistics on cloud APs and SNMP-managed APs on a per-site basis
• Top N authenticated users by traffic: calculated based on statistics on cloud APs on a per-site basis
• Top N terminal vendors, terminal OSs, and terminal types by traffic: calculated based on statistics on cloud APs and cloud switches on a per-tenant basis and on a per-
site basis
Exporting Monitoring Data to Reports
Tenant administrators can configure a one-time or periodic data export task on the Monitoring > Report > Statistics Analysis > Report
Customization page. By doing so, they can export performance data of devices at a specific site to Excel reports. In the following figure,
the options in the red rectangle are related to WAN services and the option Campus Statistics is related to LAN services.
Terminal Monitoring
Tenant administrators can view terminal statistics on the Monitoring > Health > Terminal page. Terminals connected to both SNMP
managed and cloud managed devices are monitored.
Terminal statistics is updated every 5 minutes. To view real-time terminal statistics, tenant administrators can click Report Terminal
Data. After that, devices immediately report terminal statistics to the controller at an interval of 10 seconds.
Quick Terminal Statistics Collection
• Terminal statistics on the Monitoring > Overview> Terminal page is updated every 5 minutes.
To view real-time terminal statistics, users can click Report Terminal Data. After that, devices
immediately report terminal statistics to the controller at an interval of 10 seconds.
Radio Monitoring
Tenant administrators can view the radio list, radio KPIs, and radio trends on the Monitoring > Health > Device
360 > AP > Radio page. Radio statistics on both SNMP managed and cloud managed devices are monitored.
Customer Flow Statistics
On the Monitoring > Report > Statistics Analysis > Terminal Behavior Analysis page, tenant administrators can
view site-specific customer traffic statistics in the last minute, in the last 5 minutes, yesterday, and on the day before
yesterday, as well as the average statistics in the last 7 days and last month. They can also view daily, weekly, monthly,
and yearly customer flow trends.
Customer Flow Analysis
Tenant administrators can view the numbers and proportion trends of passers-by and guests, guest dwell duration,
and repeat customers by site on the Monitoring > Report > Statistics Analysis > Terminal Behavior Analysis
page.
WIDS Interference Detection
• Tenant administrators can view information about risky devices, attacks, and related
dynamic blacklists in the current day, week, month, or a user-defined time range on
the Monitoring > Health > Device 360 > AP > Security page. They can also view
attack detection information by tenant.
Note: Statistics on the devices managed by NETCONF and SNMP can be collected.
Application Identification
• Traffic statistics can be collected by application category and specific application based on the data
reported by the ARs, switches, and firewalls managed by NETCONF.
• Tenant administrators can view traffic details of top 5 application categories and top 5 applications by
day, week, or month on the Monitoring > Report > Statistics Analysis page.
Roaming Neighbor Monitoring
• Tenant administrators can view information about roaming neighbors of an AP on the AP details page.
• They can determine whether to adjust the location of APs in a mobility group based on whether terminals
can connect to the APs and the signal strength to ensure that terminals can roam seamlessly between the
APs.
Terminal KPI Monitoring
• On the Monitoring > Health > Device Terminal Monitoring page, tenant administrators can view current online users and
historical users using specific terminals and click a terminal MAC address in the user list to view detailed information about a user.
• On the Resource tab page on the AP details page, tenant administrators can view information about users connected to the AP
and click a terminal MAC address to view detailed information about a user.
• Tenant administrators can determine the causes of network quality deterioration in a certain period based on the received signal
strength indicator (RSSI), packet loss rate, delay, and retransmission rate. For example, they can determine whether the network
quality deteriorates due to interference.
Agile Report
Tenant administrators can flexibly customize reports on the Monitoring > Report > Agile Report page.
Periodic Task Management
Tenant administrators can create periodic report tasks on the Monitoring > Report > Periodic Task page and send specific reports in
PDF or Excel to target users via email.
Site-Specific Packet Path Tracing
Tenant administrators can configure packet tracing at a specific site on the Maintenance > Diagnosis Tools > Packet Path Tracing
> Packet Path Tracing on Custom Devices page. With this function configured, iMaster NCE-Campus can trace packets based on
the configured packet characteristics to determine the device ports that the specified packets pass through.
Universal Packet Path Tracing
Tenant administrators can configure packet path tracing on a fabric network or at a site on the Maintenance > Diagnosis Tools
> Packet Path Tracing > Universal Packet Path Tracing page. iMaster NCE-Campus can generate topologies to show packet
path tracing results.
Note:
Universal packet path tracing supports two modes:
• Fabric mode: Fabric networking must be used.
• Common mode: Only simple networking is supported, including the
"AP + switch + firewall" networking, "AP + switch/firewall"
networking, and "switch + firewall" networking.
AP IoT Monitoring
• On the Monitoring > Health > Device 360 > AP > IoT page, tenant administrators can view information about IoT cards
connected to APs at a specific site, including information about IoT console interfaces and IoT NICs. Such information is also
displayed on the AP details page.
• IoT card monitoring is applicable to the following AP models: AP4050DN-E, AP7052DN, AP7152DN, AP2051DN-E, R250D-E,
and R251D-E.
Monitoring Settings - Quality Calculation
Formula
For devices with WAN-side ports in the EVPN scenario, tenant administrators can set the application quality and link quality thresholds
on the Monitoring > Monitoring Settings > Quality Formula Configuration page to configure a quality calculation formula. In this
way, on the Monitoring > Overview and Monitoring > Inter-Site pages, tenant administrators can view AQM and LQM values
calculated based on the delay, packet loss rate, and jitter values according to the quality calculation formula.
Monitoring Settings – Data Reporting
• For NETCONF-managed devices, tenant administrators can enable them to report certain indicator information on the
Monitoring Settings > HTTP page.
• For SNMP-managed devices, tenant administrators can enable them to report certain indicator information on the
Monitoring Settings > SNMP page.
• The functions of reporting performance data, reporting terminal monitoring information, and reporting alarm data are
enabled by default.
Monitoring Settings - Configuring ARs to Report
Performance Data
• For NETCONF-managed AR devices, the following data reporting functions are added on the Monitor
Settings > HTTP page: Report WAN-side application traffic data, Enhance WAN-side link quality, Report
wan application quality data, Report WAN-side link traffic data, and Report WAN optimization data.
Monitoring Settings - Configuring ARs to
Report Performance Data
• Users can configure AR devices to report application statistics, WAN link traffic statistics, and
application quality statistics on the Monitoring Settings > Collection Configuration page. This
configuration is available only in EVPN tunnel mode. If the source IP address feature is installed,
users can also configure statistics collection based on source IP addresses.
Global Collection Configuration
• Users can configure application traffic statistics collection, application quality statistics
collection, and WAN link traffic statistics collection on the Design > Basic Network Design >
Network Settings > WAN Global Configuration > Collection Configuration page. When an
AR site is created, the controller by default delivers the global collection configuration to the AR
devices at the site.
SAC Configuration
• Users can configure application identification and first-packet identification (FPI) for AR sites on
the Policy > Application Management > SAC Configuration page. Before enabling application
traffic or application quality statistics collection on an AR device, ensure that SAC has been
enabled on the target device.
Monitoring Settings - Application
Experience
• Users can configure NETCONF-managed switches to report user-defined application statistics and pre-defined application
statistics on the Monitoring > Monitoring Settings > Application Experience Settings > Application Experience page.
After the controller delivers corresponding configurations to the target switches, the switches report application experience
analysis data to CampusInsight, which then analyzes and displays the statistics.
Monitoring Settings - iPCA 2.0
• Users can configure iPCA 2.0 for traffic of specific applications that pass through selected interfaces of
NETCONF-managed switches on the Monitoring > Monitoring Settings > Application Experience Settings >
iPCA 2.0 page. After the controller delivers corresponding configurations to the target switches, the switches
report interface traffic statistics, network states and application traffic statistics to CampusInsight, which then
analyzes and displays the statistics.
Monitoring - RR/GW
• MSP administrators can check device health scores, as well as throughput and link
information about RR sites on the Monitoring > RR/GW page.
Monitoring - Tenant Traffic Statistics
Collection
• MSP administrators can check traffic statistics of managed tenant sites on the
Monitoring > Tenant Traffic Statistics page.
Monitoring Settings - Performance Task
Management
• For SNMP-managed devices, tenant administrators can configure a detailed monitoring policy
on the Monitoring Settings > Performance Task Management page.
• Monitoring policies cannot be configured for NETCONF-managed devices.
Log Dump
• System administrators can configure log dump
conditions and local storage policies to dump excess
logs to a local or remote server.
• Log dump can be configured on the System > Logs >

Logs > Log Overflow Dump page.
• Procedure:
▫ (Optional) Configure the remote SFTP server,

including the IP address, port number, storage path,
username, and password.
▫ Configure log dump conditions, including the dump

threshold and retention period (in days). If either of
the two conditions is met, logs will be dumped to
the remote SFTP server.
▫ Configure a local storage policy, including the local

storage capacity and retention period (in days). The
two parameters specify the maximum number of
dumped files that can be saved locally and the
maximum retention period. If either of the two
conditions is met, dumped files saved locally will be
deleted.
Log Management
• iMaster NCE-Campus can manage security logs, run logs,
and operation logs. In addition, logs can be reported to a
third-party server.
▫ Administrators can view and export security logs, run logs,

and operation logs on the System > Maintenance > Logs
page.
▫ Administrators can configure reporting of logs and alarms to

a third-party syslog server. Specifically, they can configure
parameters of a syslog server, types of the logs to be
reported, and alarms to be reported. This function is
configurable on the System > Third-Party Service > Syslog
Configuration page.
• Procedure (performed by the system administrator):
1. Enable syslog log reporting.
2. Configure the IP address or domain name and port number

of the syslog server.
3. Select types of logs to be reported.
4. Click Confirm.
Certificate Management
Tenant administrators can manage device certificates of managed APs, ARs, switches, and firewalls on
the Maintenance > Device Maintenance > Device Certificate Management page.
Application scenario:
• A device certificate needs to be replaced with a new one when it is about to expire.
• Enterprises having high security requirements need to use their own certificates.
Device Certificate Management
Updating a device certificate offline Updating a device certificate online
• Manually apply for a certificate from Huawei's Public Key Infrastructure (PKI) system, • The device automatically connects to the
import the certificate to the controller, and then deliver the certificate to a device. certificate server and replaces its certificate.
Introduction to Fault Diagnosis Tools
• iMaster NCE-Campus provides a collection of fault diagnosis tools on its web UI.
Tenant administrators can use these tools to diagnose faults on devices managed by
iMaster NCE-Campus, including APs, ARs, switches, and firewalls. This helps them
quickly locate network faults.
• Currently, tenant administrators can log in to the device CLI remotely, perform
remote control on devices, configure packet header obtaining, collect diagnostic logs
from devices, and use fault location tools to rectify faults.
Remote CLI
• Tenant administrators can perform O&M operations on devices by logging in to the device CLI through
iMaster NCE-Campus.
• Click Command Line in the upper right corner on the device details page to access the device CLI.
Enhanced SSH
To ensure device security, iMaster NCE-Campus supports enhanced SSH, which triggers key updates when
the traffic volume reaches a certain threshold or at a specific interval. This function is disabled by default.
Devices running earlier versions do not support enhanced SSH. If this function is enabled on such devices, they
will be disconnected from iMaster NCE-Campus.
Remote Control (1/2)
Tenant administrators can control indicator blinking on devices and restart devices by clicking Blink and
Reboot Device in the upper right corner on the device details page, respectively.
Remote Control (2/2)
• Tenant administrators can control the LED indicators of APs on the iMaster NCE-Campus GUI.
• The LED indicators of APs can be disabled in a specified time range.
Packet Header Obtaining
Tenant administrators can configure iMaster NCE-Campus to obtain packet headers from specified devices.
Ping
Tenant administrators can ping devices on iMaster NCE-Campus.
Trace
Tenant administrators can perform trace operations on devices through iMaster NCE-Campus.
Fault Information Collection
• Tenant administrators can collect fault information about inter-site links on iMaster NCE-Campus. This function
is applicable to WAN-side devices only. For details, see "Collecting Site Fault Information" in the product
documentation.
Diagnostic Information Collection
Tenant administrators can configure iMaster NCE-Campus to collect CPU alarm logs, memory alarm logs, and logs
that record unexpected restarts from devices.
Application Quality Monitoring
Tenant administrators can specify source and destination sites, source and destination IP addresses, and desired
applications to monitor application quality on the Maintenance > Diagnosis Tools > Application Quality
Monitoring page.
Note: This feature applies only to WAN-side ARs.
Exporting an Online Terminal Statistics Report
Configuring the Interval for Reporting
Terminal Location Information
The function of reporting terminal location information When this function is enabled, the interval at which
is disabled by default. information is reported can be configured.
Log Data Reporting - DNS Service
Experience Data Reporting
When log data reporting is enabled, tenant administrators can configure the function of reporting DNS
service experience data to the analyzer.
Fault Location Tools
Tenant administrators can perform operations on devices through iMaster NCE-Campus, such as ping, trace, radio
ping, virtual cable detection, neighbor signal detection, and device file system management.
Configuration File Management
To quickly back up and restore device configurations, iMaster NCE-Campus can deliver configuration files to devices for them to
load configurations and back up device configuration files. Tenant administrators can import local configuration files to iMaster
NCE-Campus or use the backup configuration files. They can specify a configuration file for a device to restore to its startup or
running configuration.
Note: Both SNMP- and NETCONF-managed devices can back up configuration files to the controller and restore their configurations using the backup
files. The device capabilities vary according to the device types. For details, see "Fundamentals" under "Device Management and Maintenance" > "Device
File Management" in the product documentation of the controller.
Device Upgrade Management (1/2)
• System, MSP, or tenant administrators can use the file upload tool to upload software packages and patch packages to iMaster NCE-
Campus and configure device upgrade tasks as needed. iMaster NCE-Campus delivers upgrade commands to target devices which
then obtain required files from the file server to complete upgrade.
• iMaster NCE-Campus can implement smooth upgrade for stacked switches if stack upgrade partitions have been configured on the
Monitoring > Health > Device 360 > Switch > Stack Upgrade Partition page.
Device Upgrade Management (2/2)
• Administrators can resume or cancel the download of files required by device upgrade.
Device Upgrade Management
HOUP
1
2
Device upgrade process
1. The controller obtains the device software package.

• An administrator can obtain the recommended latest stable version of the device from the Huawei Online Upgrade
Platform (HOUP) software library.
• An administrator can also download the required software package from Huawei Support Website and import the package
to the controller.
2. The administrator customizes an upgrade or downgrade policy to manually or automatically upgrade or downgrade the device.
3. When receiving an upgrade task, the device downloads the upgrade package from the specified address and performs an
upgrade.
Signature Database Upgrade
System administrators can configure the upgrade center address on the System > System Management > Third-Party Service > Signature Database
Server page. Then, iMaster NCE-Campus can obtain the latest signature database file from the update center periodically or in real time to upgrade its
signature database. Tenant administrators can configure plans for upgrading signature database on devices at a site on the Maintenance > Device
Maintenance > Signature Database Upgrade page. iMaster NCE-Campus will deliver upgrade commands to target devices which then obtain required
signature database files from the file server to upgrade their signature databases.
License Activation
iMaster NCE-Campus can deliver licenses to devices and activate the licenses. To implement this function,
administrators need to upload licenses to iMaster NCE-Campus on the Maintenance > File Management > File
Management page and then select devices and licenses to be activated on the Maintenance > Device
Maintenance > Activate Device License page. Then, the licenses are activated on the selected devices.
Note: Administrators can load licenses to devices through the controller, facilitating visualized batch
operations. Additionally, they can load licenses directly on devices. The two license loading methods will not
cause any conflict.
SLA Management
Administrators can configure SLA tasks for SNMP-managed devices on iMaster NCE-Campus to implement
quick diagnosis.
Note: The SLA obtains returned values of test cases using the network quality analysis (NQA) protocol of devices and provides four
types of test cases based on specific service and network testing requirements. This can implement high-precision and high-
frequency on-demand tests, helping quickly locate faults. For details, see "Fault Detection and Location" > "SLA Management" in
the product documentation.
Contents
1. System O&M
2. Service O&M
3. PMI for cloud managed devices
Introduction to Device PMI
• iMaster NCE-Campus allows MSP administrators to inspect managed devices such as APs, ARs, switches, and
firewalls and generate PMI reports. This helps large- and medium-sized enterprises check existing network devices
and prevent faults.
• MSP administrators can perform device PMI on a per-tenant basis and obtain PMI reports.
Note: The controller supports built-in PMI scripts for the newly supported device models and versions.
PMI Report Overview
• The device PMI report is in PDF format. The following figure shows an example.
PMI Report (1/3)
• The summary chapter describes types of inspected devices, top 20 devices with the most problems, problem severity,
and main problem analysis and description.
• The following figure gives an example of the chart that demonstrates problem severities.
PMI Report (2/3)
• The device PMI item and result summary chapter gives a PMI summary on a per-site basis, as shown in the
following figure.
PMI Report (3/3)
• In the detailed device PMI report chapter, detailed PMI results are explained on a per-site basis, as shown in the
following figure.
Quiz
1. Which of the following statements about the system O&M capability are true?
A. A system administrator can check the cluster status.
B. A system administrator can perform a PMI on the system.
C. A system administrator can perform PMI on tenant devices.
2. Which of the following functions are applicable to SNMP-managed devices?

A. Terminal packet loss rate at sites
B. Trend of online Wi-Fi users
C. Device health status
D. Site health
E. WIDS interference detection
F. Diagnosis tools
Summary
• This course describes monitoring and O&M functions provided by iMaster
NCE-Campus.
• Upon completion of this course, you will have a deep understanding of these
monitoring and O&M functions.
Revision Record Do Not Print this Page
Course Code Product Product Version Course Version

iMaster NCE-
V300R20C00 1.0
Campus
Author/ID Date Reviewer/ID New/ Update
Tian Yakai/00356815 2020-09-30 Li Lei/00247945
Thank You
www.huawei.com

IMaster NCE-Campus V300R021C00 Monitoring and O&M

Uploaded by

Copyright:

Available Formats

IMaster NCE-Campus V300R021C00 Monitoring and O&M

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

IMaster NCE-Campus V300R021C00 Monitoring and O&M

Uploaded by

Copyright:

Available Formats

iMaster NCE-Campus V300R021C00

Monitoring and O&M

▫ Understand service O&M functions provided by iMaster NCE-Campus

▫ Understand the preventive maintenance inspection (PMI) function provided by iMaster

3. PMI for Cloud Managed Devices

The management plane centrally manages iMaster NCE-Campus software resources,

• Network monitoring is available at www.17ce.com.

• Check results are displayed in a chart.

Step 3: Restore files on the new node.

Step 4: Restore mutual trust relationships between nodes.

Step 5: Restore the management plane.

Step 6: Restore the product data, product applications, and databases.

Step 7: Start services on the new node.

3. PMI for Cloud Managed Devices

• They can sort, export, clear, acknowledge, and unacknowledge alarms.

Note: Correlative alarms are not supported in V300R020C00.

• Administrators can configure alarm

• To send emails to specific users to notify

▫ iMaster NCE-Campus performs dump detection every four hours.

▫ Alarm dump is triggered when the alarm storage duration

▫ When a remote SFTP server is configured, every 5 MB (upper

▫ The condition for terminating alarm dump is that all alarms

• Monitoring policies cannot be configured for NETCONF-managed devices.

• Log dump can be configured on the System > Logs >

▫ (Optional) Configure the remote SFTP server,

▫ Configure log dump conditions, including the dump

▫ Configure a local storage policy, including the local

▫ Administrators can view and export security logs, run logs,

▫ Administrators can configure reporting of logs and alarms to

• Procedure (performed by the system administrator):

1. Enable syslog log reporting.

2. Configure the IP address or domain name and port number

3. Select types of logs to be reported.

Updating a device certificate offline Updating a device certificate online

• The LED indicators of APs can be disabled in a specified time range.

Note: This feature applies only to WAN-side ARs.

Device upgrade process

1. The controller obtains the device software package.

3. PMI for cloud managed devices

B. A system administrator can perform a PMI on the system.

C. A system administrator can perform PMI on tenant devices.

2. Which of the following functions are applicable to SNMP-managed devices?

B. Trend of online Wi-Fi users

C. Device health status

E. WIDS interference detection

Course Code Product Product Version Course Version

Author/ID Date Reviewer/ID New/ Update

Tian Yakai/00356815 2020-09-30 Li Lei/00247945

You might also like