1. 1 “Lightning Bolt” Trap Multiplexor DSM Example Revised Mar 26 2001

2. 2 Overview m Medium Sized Central plus ROC m Central Facility to control ~50 sites m Sites contain few to many Win95, NT, Unix machines running mission-critical software m Variable bandwidth from sites to central facility m Some sites are autonomous entities with local management and operations. m Most sites lack local intelligence

3. 3 Typical (Small) Site Scenario m NT & perhaps Unix Servers, 10-50 Windows 95 client workstations m One dedicated Enterprise Management NT m Hardware Monitoring Required m Database monitoring on NT/Unix Servers m Linked to an ROC and a central site for operations and support

4. 4 Small Site Structure Site DSM pings Nodes Site TNG box with DSM Site TNG box with DSM Unix USD NT F/P NT Win 95

5. 5 Large Site Scenario m NT & Unix Servers, 600 Windows 95 client workstations m Two USD servers m Two File/Print servers m Two dedicated Enterprise Management NT m Hardware Monitoring Required m Database monitoring on NT/Unix Servers m Linked to local ROC and central site for operations and support

6. 6 Large Site Structure Site DSMs ping Nodes Site TNG box with DSM Site TNG box with DSM Unix USD NT F/P NT 600* Win95 600* Win95 Site TNG boxes with DSMs Site TNG boxes with DSMs USD NT F/P NT

7. 7 Central Site Scenario m NT & Unix Servers, 1500 Windows 95 client workstations m Five USD servers m Five File/Print servers m Five dedicated Enterprise Management NT m Hardware Monitoring Required m Database monitoring on NT/Unix Servers m Linked to local ROC and central site for operations and support

8. 8 Central Site Structure Site DSMs ping Nodes Site TNG box with DSM Site TNG box with DSM Unix USD NT F/P NT 600* Win95 600* Win95 Site TNG boxes with DSMs Site TNG boxes with DSMs USD NT F/P NT Site TNG boxes with DSMs Site TNG boxes with DSMs Site TNG boxes with DSMs Site TNG boxes with DSMs Site TNG boxes with DSMs Site TNG boxes with DSMs USD NT F/P NT

9. 9 Central Monitoring Facility m Customer required NetView and TNG to be able to simultaneously utilise site information. m ROC may need a subset view of local information NetView Unicenter TNG Unicenter TNG Trap Multiplexor

10. 10 The TNG Solution m Dedicated DSM or Domain Manager to provide Multiplexing of traps m CA-Unicenter TNG WorldView and DSM act as one recipient of traps m Agents and Lightweight DSM at each site issuing traps to Multiplexing DSM which feeds NetView and central TNG plus ROC TNG Customization issues here are setting up the Multiplexing DSM & TNG DSM configuration

11. 11 TNG Solution - At each site m TNG Agents deployed on servers and some critical clients – HP-UX: Os, Log, Pro and Oracle Agents – NT & Win 95: Os Agent m One NT Server per site designated as a Site DSM m Site DSM heartbeats local nodes m Nodes directly trap to Central DSM m No need for site WVGateway

12. 12 TNG Solution - At the Sites... Site DSM pings Nodes Site DSM Unix Win NT Win 95 To Trap Multiplexor DSM at Center or ROC Heart beating Problems

13. 13 TNG Solution - Site DSM m Provides direct local heartbeating, raising traps on errors m No local WorldView Gateway needed m Agents directly trap to Trap Multiplexor DSM which uses TRAP_CONFIG TRAP FORWARD:Y to pass to TNG DSM Only modified Ping Policy is employed at the Site DSM. No Agent Policy.

14. 14 TNG Solution - Central Facility m Require SNMP information from the sites not direct WorldView connection m DSM can act as a trap multiplexor m For TNG WorldView traps are passed through a modified DSM to provide WorldView class/status brokering m NetView receives traps from same trap multiplexor

15. 15 Multiplexing Traps with Unicenter Central Facility Store Trap Multiplexor DSM Traps sent to Multiplexor DSM ROC DSM NetView Central DSM TNG Central DSM TNG

16. 16 Trap Multiplexor DSM m Utilizes Trap Forwarding capability m Implemented using Policy Definitions m Incoming traps can be ‘invisibly’ forwarded to multiple destinations m Only concern is LISTEN, FORWARD statements use same syntax for mask of IP addresses Only Policy employed is to Forward Traps. One line per destination - easy alteration.

17. 17 Trap Multiplexor DSM # Example policy – only these lines in cnf file – no atp file allowed # DSM-1 TRAP_CONFIG TRAP:192.2.*.*:*:*:*:* LISTEN TRAP_CONFIG TRAP:192.2.*.*:*:*:*:* FORWARD:Y:192.2.4.6:162 # DSM-2 - TRAP_CONFIG TRAP:192.29.*.*:*:*:*:* LISTEN TRAP_CONFIG TRAP:192.30.*.*:*:*:*:* LISTEN TRAP_CONFIG TRAP:192.31.*.*:*:*:*:* LISTEN TRAP_CONFIG TRAP:192.29.*.*:*:*:*:* FORWARD:Y:192.30.145.245:162 TRAP_CONFIG TRAP:192.30.*.*:*:*:*:* FORWARD:Y:192.30.145.245:162 TRAP_CONFIG TRAP:192.31.*.*:*:*:*:* FORWARD:Y:192.30.145.245:162

18. 18 Central TNG Configuration m Receives Multiplexed traps m Trap origin is as if the trap were sent directly from the agent node (invisible) m No direct heartbeating m Generates & Maintains Object Store m Connects to Repository Central Facility Trap Multiplexor DSM Unicenter TNG Unicenter TNG

19. 19 Central TNG Configuration Central TNG DSM Trap Multiplexor DSM Trap Multiplexor DSM Traps from Stores (Agent Traps & Hearbeat Failures) Central TNG DSM has standard Agent Management Policy No direct heartbeating, failure indicated by site DSM traps instead Traps forwarded to other SNMP Managers

20. 20 Summary m DSM used for Trap Forwarding to provide site traps to several SNMP Managers m Site DSMs only heartbeat local nodes and trap Central TNG DSMs on m Agents directly trap to Central TNG DSM m Central TNG DSM handles forwarded Agent traps with standard policy, modified heartbeat (ping) policy using traps from site DSMs