IP Service Manager User Guide Infrastructure Client for ISM Provision Extreme Networks, Inc. 3585 Monroe Street Santa Clara, California 95051 (888) 257-3000 http://www.extremenetworks.
©2002 Extreme Networks, Inc. All rights reserved. Extreme Networks and BlackDiamond are registered trademarks of Extreme Networks, Inc. in the United States and certain other jurisdictions.
Contents Preface Introduction Terminology vii viii Conventions viii Related Publications 1 2 Infrastructure and Services Management Provision Overview Overview 1-1 Summary of Features 1-2 How ISM Provision works Your Network Devices ISM Provision Server Device Communicators Network Infrastructure Manager Client IP Service Manager Client 1-3 1-4 1-4 1-4 1-5 1-5 Starting IP Service Manager Overview Starting IP Service Manager Summary Steps Detailed Steps IP Service Manager User Guide x 2-1 2-
3 IP Service Manager Overview IPSM Overview Summary of Features IPSM Views Selecting IPSM Views Service Activation View Service Library View Change Control View IPSM Icons Open Changes Save Changes Modify Object Copy Paste Delete Verify Configuration Synchronize Commit Changes Revert Changes Help 4 5 Service Library Overview 4-1 Traffic Policies 4-2 Policy Based Services 4-2 Service Bundles 4-2 Service Categories 4-3 Key Information 4-3 Service Library Tasks Add a Service Bundle Add a Policy
Subscriber 5-2 Customer 5-2 IP Aggregation Point 5-2 Service Activation Tasks Add a Customer Add an IP Subscriber Add an IP Range Subscriber Add an IP Aggregation Point 6 5-2 5-3 5-7 5-9 5-12 Change Control Overview 6-1 Jobs 6-1 Change Control Tasks View Current Job Changes View Committed, Scheduled, or Saved Jobs Delete Scheduled or Saved Jobs 6-2 6-2 6-4 6-6 Index IP Service Manager User Guide v
vi IP Service Manager User Guide
Preface This Preface provides an overview of this guide, describes guide conventions, and lists other publications that may be useful. Introduction This guide provides the required information to manage customers and subscribers using Extreme Networks’ IP Service Manager (IPSM) client as the interface for Extreme Networks’ Infrastructure and Services Management Provision (ISM Provision). This guide is intended for use by network administrators who are responsible for configuring network equipment.
If the information in the release notes shipped with your software differs from the information in this guide, follow the release notes. Terminology When features, functionality, or operation is specific to the Summit, Alpine, or BlackDiamond switch family, the family name is used. Explanations about features and operations that are the same across all Extreme switch product families simply refer to the product as the “Extreme device” or “Extreme switch.
Conventions Table 2: Text Conventions (continued) Convention Description The words “enter” and “type” When you see the word “enter” in this guide, you must type something, and then press the Return or Enter key. Do not press the Return or Enter key when an instruction simply says “type.” [Key] names Key names are written with brackets, such as [Return] or [Esc]. If you must press two or more keys simultaneously, the key names are linked with a plus sign (+). Example: Press [Ctrl]+[Alt]+[Del].
Related Publications The publications related to this one are: • ISM Provision Installation Guide • Network Infrastructure Manager User Guide • ExtremeWare Software User Guide Documentation for Extreme Networks products is available on the World Wide Web at the following location: http://www.extremenetworks.
1 Infrastructure and Services Management Provision Overview Overview Extreme Networks’ Infrastructure and Services Management Provision (ISM Provision) is a tightly connected collection of components for delivering services to customers and for managing your network. ISM Provision allows you to easily extend services to your network users by defining and provisioning bundles of IP services.
Infrastructure and Services Management Provision Overview Summary of Features • Version Control of Network Configuration • Staging of Network Configuration Changes • Configuration rules checking • Helps Manage the VLANs, Access Lists, and QoS Profiles Required to Support Subscribers • Provides Service-Level Abstractions to Manage Subscribers • Client/Server Java architecture - platform independent and scalable • Offline and on-line tool - used in both green field and existing network environments • Co-exis
How ISM Provision works How ISM Provision works IP Service Manager Client NIM Client ISM Provision Server Device Communicator Device Communicator Device Communicator Device #1 Device #2 Device #3 Device #6 Device #4 Device #5 Device #7 Figure 1-1: ISM Provision Components ISM Provision consists of several different components: • ISM Provision Server • Device Communicators • Network Infrastructure Manager Client • IP Service Manager Client These components work together to manage another importa
Infrastructure and Services Management Provision Overview • Your Network Devices The following sections describe these components and how they interact in more detail. Your Network Devices The network managed by ISM Provision consists of your current existing network of Extreme Network devices, or a subset of your devices. Many devices can be managed by ISM Provision simultaneously. The devices are managed by querying them for their configurations, and by sending new configuration commands to them.
How ISM Provision works Typically, you will install one device communicator on the same host as the ISM Provision server, and then add other device communicators on other hosts as needed to manage the processing load of communicating with your devices. Network Infrastructure Manager Client The Network Infrastructure Manager (NIM) client is used to manage changes to the network infrastructure.
Infrastructure and Services Management Provision Overview 1-6 IP Service Manager User Guide
2 Starting IP Service Manager Overview Since the IP Service Manager (IPSM) client is part of ISM Provision, IPSM relies on a running ISM Provision server and device communicator. This chapter assumes that you already have a functioning ISM Provision server and device communicator.
Starting IP Service Manager Detailed Steps 1 Launch the IPSM Client Launch the IPSM client as you would launch other applications on your host. For example, Windows users can select Network Infrastructure Manager from the Start>Programs>Extreme Networks>ISM Provision>Applications menu.
Overview Figure 2-2: IPSM Login Screen Detail 3 Enter your Provider Name In the Provider field, enter the name of the provider that you belong to. If you have previously used IPSM, you will find the previous provider name already entered. 4 Enter a User Account Name In the User Account field, enter your user account name. 5 Enter the Password for the Account In the Password field, enter the account password. The account passwords are not saved and will need to be entered every session.
Starting IP Service Manager Once the information has been entered, the IPSM client will attempt to connect with the ISM Provision server. While it is connecting you will see messages similar to those in Figure 2-3. Figure 2-3: The IPSM Client Connecting to the ISM Provision Server Once the IPSM client is launched, you will see the Service Activation view.
Overview Figure 2-4: IPSM Initial Screen When IPSM launches, the Service Activation view is initially displayed. You are now ready to use IPSM. See Chapter 3, IP Service Manager Overview, for more information about IP Service Manager.
Starting IP Service Manager 2-6 IP Service Manager User Guide
3 IP Service Manager Overview IPSM Overview IPSM is composed of a number of views that are organized to complement your workflow. The different views allow you to manage different functional areas controlled by IPSM. They are: • Service Activation View • Service Library View • Change Control View IPSM also has a number of icons and menus that are available from all of the views.
IP Service Manager Overview IPSM Views When IPSM is first launched you will be presented with the Service Activation view, as shown in Figure 3-1. The different views are described below. Figure 3-1: Initial IPSM Initial Screen Selecting IPSM Views There are four ways to select a particular view.
IPSM Overview Figure 3-2. From left to right the icons represent the views Service Activation, Service Library, and Change Control. Select the icon to display the view. Service Library Change Control Service Activation Figure 3-2: Selecting a IPSM View Using Icons A second way is to select the View menu and choose the view, as shown in Figure 3-3. A third way is to use the shortcut keys also shown in Figure 3-3. Press the [ALT] key and a number key at the same time to use the shortcuts.
IP Service Manager Overview Figure 3-4: Selecting an IPSM View Using Named Icons Service Activation View Figure 3-5: IPSM Service Activation View The Service Activation view of IPSM allows you to manage subscribers, customers, and IP aggregation points. In IPSM, creating a subscriber creates a VLAN or sub-VLAN that contains one physical port on a network device.
IPSM Overview through that port. Customers consist of one or more subscribers. Creating an IP aggregation point creates a super-VLAN (used to contain a subscriber’s sub-VLAN). When you create a subscriber, you will also associate a a service bundle with that subscriber. A service bundle is a specific Qos profile and group of access lists.
IP Service Manager Overview Change Control View Figure 3-7: Change Control View From the Change Control view you can manage the changes you create with IPSM. For your current session, you can see the changes that you have made and not yet saved or committed to the network. There is a record of changes committed to the network and changes scheduled to be committed to the network. You can also review the changes that you have saved or committed from this view.
IPSM Overview Figure 3-8: IPSM Icons: Open Changes, Save Changes, Modify Object, Copy, Paste, Delete, Verify Configuration, Synchronize, Commit Changes, Revert Changes, Help Open Changes Select this icon to open changes that you have previously saved to the ISM Provision server. The changes will be incorporated into your Network Provision view. Once opened, you can further modify the Network Provision view, or commit the changes to the network.
IP Service Manager Overview Verify Configuration Select this icon to check your changes against the ISM Provision rules. If errors are found, they will be identified, and you can change them. Synchronize Select this icon to merge the changes from the server into your view, if you did not update your view when first notified. When the network configuration changes because of the actions of another user, the ISM Provision server changes. Your current view is now out of sync with the server.
4 Service Library Overview The Service Library view of IP Service Manager allows you to create and modify the services available to the subscribers you create in the Service Activation view. The services created in the Service Library view are associated with particular subscribers in the Service Activation view, which in turn creates changes in the device configurations in ISM Provision.
Service Library Traffic Policies A traffic policy is similar to an access list in ExtremeWare. You can specify IP, TCP, and UDP traffic policies to specify the handling of various kinds of traffic. Just like an access list, you specify source, destination, and precedence for the traffic policies. Unlike access lists, there is no “deny” or “permit” parameter for traffic policies. The deny/permit functionality is implemented when you create policy based services.
Service Categories The egress rate limiting behavior of a service bundle is applied to the default QoS profile (Qp1) on the subscriber port, and the ingress behavior is applied to Qp1 on the subscriber’s loopback port. Service Categories The service categories specify the speed of the port to which the services will be applied. The supported categories are 10, 100, and 1000 Mbps. Changing the service category affects the rate limiting choices on the system.
Service Library Add a Service Bundle When you add a service bundle, you will specify the default ingress and egress behavior, and add any policy based services. The service bundle that you create will then be available to apply to the subscribers that you created in the Service Activation view. Summary Steps.
Service Library Tasks Figure 4-1: Create Service Bundle Wizard 2 Enter the service bundle name The name is the key information for the service bundle. Once you have entered the key information you can close the wizard by selecting Finish, but you still may need to configure other parameters before you have a valid configuration. Figure 4-2 shows the upper part of the Create Service Bundle wizard in more detail.
Service Library Figure 4-2: Create Service Bundle Upper Detail 3 Select the service category Choose the service category based on the physical bandwidth of the port you will be applying this service to. Your choices are 10, 100, and 1000 Mbps. 4 Set the default ingress and egress behavior Set the behavior to one of the selections in the drop-down list. If you choose “blocked” or “no rate limiting” the other choices are greyed out.
Service Library Tasks Add a Policy Based Service When you create a policy based service, you will specify whether traffic is blocked, will use no rate limiting, or will use rate limiting, and you will apply one or more traffic policies to the policy based service. Summary Steps.
Service Library Figure 4-3: Create Policy Based Service Wizard 2 Enter the service name The name is the key information for the policy based service, but you must also add at least one traffic policy before you can create a policy based service. 3 Select the service category Choose the service category based on the physical bandwidth of the port you will be applying this service to. Your choices are 10, 100, and 1000 Mbps.
Service Library Tasks Select one of the entries in the Config Areas panel, or select Next to go to one of the Traffic Policy Table pages. From here, select the plus sign (+) icon to launch the Create IP, TCP, or UDP Traffic Policy wizard (see Figure 4-4). Figure 4-4: Launching the Create IP Traffic Policy Wizard See the task section, “Add an IP, TCP or UDP Traffic Policy”, for details on adding a traffic policy once you’ve launched the wizard.
Service Library 1 Launch the Create Traffic Policy wizard 2 Enter the policy name 3 Enter the source and destination subnets 4 Enter the policy precedence 5 For TCP and UDP, enter the source and destination ports 6 Select Finish Detailed Steps. The following steps are a more detailed explanation of the previous section.
Service Library Tasks Figure 4-5: Create TCP Traffic Policy Wizard. 2 Enter the policy name The name is the key information for the traffic policy. Once you have entered the key information you can close the wizard by selecting Finish, but you still may need to configure other parameters before you have a valid configuration. 3 Enter the source and destination subnets Specify the source and destination subnets of the traffic you will apply the traffic policies to.
Service Library If you choose Single Port, choose the Source Port from the drop-down list. Your Source Port choices are any, user defined, or a list of well known services like telnet, finger or tftp. If you choose user defined, you will also choose the Source Port Number, otherwise the port number will be filled in for the well known services, or left blank for any port (see Figure 4-6).
5 Service Activation Overview The Service Activation view of IP Service Manager allows you to control the services provided to your network subscribers. A subscriber in IPSM represents a VLAN that contains one port, so when you create a subscriber in IPSM, a VLAN is added to the device configuration. A customer is a group of subscribers.
Service Activation Subscriber A subscriber is a port and a VLAN that provides access to the network for specified traffic with a specified Quality of Service (QoS). When you create a subscriber in IP Service Manager, the ISM Provision server makes changes to the device configurations to create the VLAN, Qos profiles, and access lists implied by your subscriber. There are two types of subscribers, IP subscribers and IP range subscribers.
Service Activation Tasks • Add a Customer • Add an IP Subscriber • Add an IP Range Subscriber • Add an IP Aggregation Point Add a Customer A customer is a way to organize a collection of subscribers. A customer might be an actual external customer, an internal customer like a department that is billed for services, or a fictional “customer” for the purposes of naming and organizing subscribers.
Service Activation Figure 5-1: Launching the Create Customer Wizard 2 Enter the Customer ID Once the Create Customer wizard has appeared, enter the Customer ID. You must enter this key information in order to create the customer. All the other information is optional, however, you will eventually need to define either an IP subscriber or an IP range subscriber (see Figure 5-2).
Service Activation Tasks Figure 5-2: Create Customer Wizard 3 Enter the Customer Name Enter the name you wish to use to describe the customer in the Customer Name field. 4 Select Next and add subscribers To add subscribers, select Next to move to the next Config Areas page. Add IP subscribers on the IP Subscriber Table page and IP range subscribers on the IP Range Subscriber Table page. Click the plus sign (+) to launch the Create IP Subscriber or Create IP Range Subscriber wizard (see Figure 5-3).
Service Activation Figure 5-3: IP Subscriber Table in the Create Customer Wizard Once the wizard launches, add the information for the subscriber (see Figure 5-4). For more information about the Create IP Subscriber and Create IP Range Subscriber wizards and adding IP subscribers, see the tasks, “Add an IP Subscriber”, and “Add an IP Range Subscriber”. Once you’ve added the subscriber, select Finish to close the subscriber wizard.
Service Activation Tasks Figure 5-4: Create IP Subscriber W)izard 5 Select Finish Select Finish to close the Create Customer wizard. Add an IP Subscriber When you create an IP subscriber, you are defining a single port VLAN on a device, and that single port will be providing network services to any devices connected through that port. You will essentially be creating a VLAN/ IP subnet to deliver service.
Service Activation 4 Choose a service bundle 5 Choose a device, module, and physical interface 6 Choose a loopback module, port, and VLAN ID 7 Select Finish to close the wizard Detailed Steps. The following steps are a more detailed explanation of the previous section.
Service Activation Tasks The subscriber name is the key information for the subscriber. Once you have entered the key information you can close the wizard by selecting Finish, but you still may need to configure other parameters before you have a valid configuration. For example, you may want to create a subscriber, and then go on to specify a service bundle in the Service Library view, returning later to associate the service bundle with the subscriber.
Service Activation super-VLANs in general, and VLAN aggregation, see the ExtremeWare Software User Guide. Summary Steps. To add an IP range subscriber: 1 Launch the Create IP Range Subscriber wizard 2 Enter the subscriber name 3 Enter the VLAN tag 4 Select the IP aggregation point 5 Enter the IP range start and range end 6 Select a service bundle 7 Choose a device, module, and physical interface 8 Choose a loopback module, port, and VLAN ID 9 Select Finish to close the wizard Detailed Steps.
Service Activation Tasks Figure 5-6: Create IP Range Subscriber Wizard 2 Enter the subscriber name The subscriber name is the key information for the subscriber. Once you have entered the key information you can close the wizard by selecting Finish, but you still may need to configure other parameters before you have a valid configuration.
Service Activation layer 2 hop away (and the trunk connection is defined in Network Infrastructure Manager). 5 Enter the IP range start and range end These parameters specify the IP addresses allowed for this IP range subscriber. Any The addresses must be contained in the subnet specified for the IP aggregation point. 6 Select a service bundle Use the drop-down list Service Bundle to select the service bundle for this subscriber. Service bundles are defined in the Service Library view of IPSM.
Service Activation Tasks Detailed Steps. The following steps are a more detailed explanation of the previous section. To create an IP aggregation point: 1 Launch the Create IP Aggregation Point wizard To launch the Create IP Range Subscriber wizard, select Edit>Add>IP Aggregation Point from the menu, or right-click in the IP Aggregation Point panel and select Add>IP Aggregation Point from the pop-up menu.
Service Activation IPSM will create the IP aggregation point’s super-VLAN on this device. 4 Select Finish to close the wizard The IP Range Subscribers tab initially displays no entries. You can add the subscribers later, either when they are created, or you can modify the IP range subscribers to use this IP aggregation point. You cannot modify any of the IP aggregation point parameters once it is created.
6 Change Control Overview The Change Control view of IP Service Manager allows you to commit changes to the ISM Provision server, view the current uncommitted changes that you have made, and to view previously committed, scheduled, or saved changes.
Change Control saved or committed as a unit to the ISM Provision server. Once a job is committed, any changes to the configurations of managed devices are sent to the devices using the device communicator assigned to that device. Different from a committed job is a saved job. A saved job is also stored in the ISM Provision server, but its collection of changes are not sent out to the network, unless the saved job is later committed.
Change Control Tasks 1 Select the Current Job Changes tab in Change Control view 2 Select the Created, Modified, or Deleted Objects In This Job tab The three tabs on the Current Job Changes tab are: Created Objects In This Job, Modified Objects In This Job, and Deleted Objects In This Job. Each tab displays the object changes that are not yet committed to the ISM Provision server. Choose the category of changes you wish to view.
Change Control View Committed, Scheduled, or Saved Jobs Committed, scheduled, and saved jobs are displayed on tabs in the Change Control view of IPSM. Once selected, you can review the job, and view the result of committing or saving it. Summary Steps. To view a committed, scheduled, or saved job: 1 Select the Committed, Scheduled, or Saved Jobs tab in the Change Control view 2 Select the job to review by clicking on the job name 3 Select the Review button 4 Review the job 5 Select Close Detailed Steps.
Change Control Tasks Figure 6-2: Committed Jobs Tab 2 Select the job to review by clicking on the job name 3 Select the Review button Once you select the Review button, the Details For Job window opens.
Change Control Figure 6-3: Job Details Window 4 Review the job On the right-hand side of the window you can select tabs to view created, modified, and deleted objects in this job. Select the tab of interest, then select the object of interest by clicking on it. Selected details about the object will be displayed in the Selected ... Details panel. If you are examining a committed job that was rejected, you will find useful information in the Job Results tab. 5 Select Close Select Close to close the window.
Change Control Tasks Steps. To delete a scheduled or saved job: 1 View the job in the Scheduled or Saved Jobs tab See the task, “View Committed, Scheduled, or Saved Jobs”, if you need detailed instructions. 2 Select the Delete button 3 Select Delete to confirm, Cancel otherwise When you selected the Delete button in step 2, a Delete Job window appears to confirm your choice. Select the Delete button on the window to delete the job.
Change Control 6-8 IP Service Manager User Guide
Index Device Communicators device communicators A account password add customer IP aggregation point IP range subscriber IP subscriber policy based service service bundle traffic policy aggregation point 2-3 5-3 5-12 5-9 5-7 4-7 4-4 4-9 5-2 C changes commit view commit changes conventions notice icons, Preface text, Preface create customer IP aggregation point IP range subscriber IP subscriber policy based service service bundle traffic policy customer add, create D IP Service Manager User Guide 1-4 1
Launch IPSM client login IPSM client 2-2 2-2 2-2 view changes views Service Activation VLAN super, sub 6-2 4-1, 5-1 5-2 N named icons Network Infrastructure Manager NIM 3-3 1-1, 1-5 1-5 P policies traffic policy based service add, create policy based services precedence provider accounts providers 4-2 4-2 4-7 1-5 4-11 1-5 1-5 S saved jobs selecting IPSM views server service add service bundle bundle category policy based Service Activation view service bundles start subscriber subscribers super-VLAN
