FUNCTIONAL OVERVIEW

How is the information gathered?
An ipClarity DataSink is deployed on one or more segments of the enterprise network. It uses SNMP (Simple Network Management Protocol) to communicate with devices connected to the network including:

  • Routers
  • Switches
  • Servers
  • UPSs
  • Any other SNMP capable device

When the DataSink is installed it will perform an auto-discovery. During this process the DataSink will form a view of all devices that are SNMP capable, and will allow the customer to choose which devices will be made available for management and reporting purposes. Further auto-discoveries will occur, as configured, automatically on a regular basis or at any time if initiated via the web site. Each network element will be polled every 5 minutes.

How is the information uploaded?
The information gathered by the DataSink is first compressed and encrypted, then uploaded via the Internet every 15 to 30 minutes. The DataSink will initiate this transfer using a FTP upload. This solution is completely secure - the process is initiated from inside the enterprise only and uses standard HTTP and FTP (passive), all information is encrypted, and uploads will work with existing Firewalls and Proxy servers.

Once authenticated on the web site customers can:

View live reports
Live reporting will allow you to view live information on all aspects of your infrastructure's current operation and performance. Live information is available from the last 24 hours up to a maximum of the last 12 months. This will allow you to monitor items such as:

  • Availability
  • Latency from the DataSink to the device
  • CPU utilization
  • Free memory
  • Buffer utilization
  • Buffer hits and misses
  • Physical port information such as status up/down, utilization, errors, discards and more
  • Logical port information (e.g. VLAN) such as status, utilization, errors and discards Clicking on any magnifying glass will provide more detailed information.

Use filters to highlight problem areas
Filters enable you to highlight the areas of your infrastructure that most need attention. For example you could run a filter report to list the 10 ports on any device throughout your network that are producing the most errors. Similarly you could choose any 'group' such as WAN links or manually select a group of elements. Filter reports can be either live or scheduled.

Metrics include: errors, collisions, buffers, CPU, latency, memory, discards or throughput. Once the metric is selected a filter report can be generated to produce an output the based on the: top n, bottom n, top n%, bottom n%, all, value > n or value < n. You define the value of 'n'

Create and view scheduled reports
A number of report templates already exist to get you started. All you need to do is select a group of devices or individual devices. Once configured scheduled reports will run automatically for each configured period, for example, monthly. After a report is compiled it can be emailed directly to addresses specified, or users can view them via the web site. Reports are generated as PDFs and can be viewed and printed in color. In addition you can design your own integrated reports.

For example you might like:

  • A report for senior management that is an overview detailing uptime, utilization summaries and vendor SLA performance.
  • Highly detailed reports for the Network Manager.
  • A report, detailing the performance of your carrier against their contracted SLA. This will highlight any penalty credits that are due.
  • A report designed to see to what extent a specific employee has met their monthly KPIs (Key Performance Indicators) which is in turn used to calculate their bonus.

Integrated reports
An integrated report allows you to combine a number of report templates into one integrated report. Each sub-report appears in its own section and section labels are customized. For example you may wish to combine scheduled reports into an integrated report in the following way:

Section 1: Router Health
Section2: Switch Health
Section 3: WAN links (detailing uptime, utilization by time, latency and errors)
Section 4: Top 10 ports Ð Collisions
Section 5: Top 10 ports Ð Errors

Monitor external networks and sites Ð 'Connectivity Checkpoints'

The DataSink can gather information on availability and latency (delay) of external networks and sites using ICMP , HTTP or a combination of both. We call these 'Connectivity Checkpoints'. The DataSink gathers and uploads this information regularly to the central ipClarity database for storage and manipulation.

Alter configuration information

Maintain Groups:
Devices or ports can be grouped to make reporting easier. For example you might like to organize devices into the following groups:

  • Core Routers
  • Core Switches
  • Branch Routers
  • Workgroup Switches
  • Backbone Links
  • Server Switch ports
  • Servers

For example it would be easier to report on WAN link performance in general, rather than manually select each of the Branch Routers correct WAN ports every time. If additional WAN routers are added, as long as you add the correct port to the WAN link group you will not need to change any of your reports.Groups can of course also be used with live and scheduled filter reports.

Maintain Elements
Turn polling off or on for any particular device, port or attribute including existing, newly discovered and newly changed devices. Also give 'friendly' names to devices and ports. i.e. call a port 'Mail server' instead of 'Ethernet 0/2'.

Maintain Thresholds
Configure thresholds on groups or elements including, if required, the duration for which the threshold is exceeded.

For example, LAN and WAN traffic is bursty by nature and although a threshold may be exceeded momentarily, the Network Manager will most likely only be concerned if a threshold is exceeded for a significant period of time. E.g. inform me if a WAN link exceeds 90% utilization for more than 20 minutes.

A reset time or value can also be configured so you are not alarmed again for a period of time or until the value drops below a second threshold. This ensures you are not flooded with alarms, that they are more meaningful and therefore will be treated with the attention they require.

Depending on the severity of the threshold breach the information may be logged for ad-hoc reporting, emailed on a daily list, emailed immediately or sent via SMS.

Maintain Autodiscovery
Autodiscovery IP address and community strings can be configured from this screen. Regular Autodisovery updates can also be scheduled so new devices can be identified.

GLOSSARY

DataSink
An IP and SNMP capable network appliance, whose initial configuration is performed via a front panel - once the initial configuration is complete and connectivity is achieved, further configuration is performed via the ipClarity web site. The DataSink gathers raw information and uploads it at regular intervals to the central ipClarity database.

Community String
Text string that acts as a password and is used to authenticate messages sent between a management station (the DataSink) and network attached device containing an SNMP agent. The community string is sent in every packet between the manager and the agent. It is also called a community name.

FTP (File Transfer Protocol)
FTP is a protocol for file transfer between devices on the Internet or private IP networks. FTP uses 2 channels, the control channel is initiated from the client the data channel is normally initiated from the server. Passive mode ensures both channels are initiated from the client so there are no inbound connections.

HTTP (HyperText Transfer Protocol)
HTTP is the set of rules for exchanging files (text, graphic images, sound, video, and other multimedia files) on the World Wide Web (Web pages/sites). Relative to the TCP/IP suite of protocols (which are the basis for information exchange on the Internet), HTTP is an application protocol.

IP (Internet Protocol)
Internet Protocol is the method or protocol by which data is sent from one device to another on the Internet and/or private networks. Each device (known as a host) on the Internet or private network has an IP address that uniquely identifies it from all other computers on the network.

SNMP (Simple Network Management Protocol)
A standards based protocol used to manage and gather information from network attached devices on IP (Internet Protocol) networks.

ICMP (Internet Control Message Protocol)
ICMP is part of the IP protocol, and is used to send anomaly reports and control messages. ICMP messages are generated automatically when errors occur in the transmission such as: - no route to the destination - route loop - errors in packet headers. The main 'user interface' to ICMP is the ping program, which sends ICMP ECHO packets and expects ICMP ECHO REPLY packets.

 

 

website monitoring