64 Replies Latest reply: Jun 27, 2012 3:59 AM by michal.hrncirik RSS

IP SLA Installation

Wael Hilal

Hi

I want to install the IP SLA on dedicated server without other Solarwinds packages, i mean i want to put the IP SLA manager on didicated server, can i do that??

 

Regards


 
  • Re: IP SLA Installation
    Andy Ng

    Hi Wael,


    No, the IPSLAMGR module is not standalone.

    You will need to install it above Orion NPM.

     

    Hope that clarifies.

    • Re: IP SLA Installation
      Wael Hilal

      Hi Andy

      Thanks

      So if I have now IP SLA installed on top of Orion NPM, and I want to install it on standalone server, this will not work at all ???

       

      Regards

      • Re: IP SLA Installation
        Andy Ng

        Yes, IPSLAMGR can't work on its own. It requires Orion NPM.

        • Re: IP SLA Installation
          Wael Hilal

          Thanks

          • Re: IP SLA Installation
            Wael Hilal

            Hi

            Can i install the Orion NPM on another server and then use the IPSLA on it???

             

            regards

            • Re: IP SLA Installation
              Andy Ng

              As long as Orion IPSLAMGR is installed above Orion NPM, it will be fine.

              • Re: IP SLA Installation
                Wael Hilal

                Hi

                Can I install the Orion NPM on two servers???

                 

                regards

                • Re: IP SLA Installation
                  Andy Ng

                  If you are talking about 2 Orion NPMs on 2 separate server, of course you are able to do so.

                  But a single license is only valid for a single installation. So, 2 licenses will be required.

                  • Re: IP SLA Installation
                    Wael Hilal

                    Thanks

                    But you know what is our problem.

                    We want to measure the IP SLA between two CPEs, the problem is that the IP SLA server is real IP address, and the Customer CPE are within VPN, so the Orion server cannot reach the CPE because it is inside VPN!!! Can you help us in this regard??

                     

                    Regards

                    • Re: IP SLA Installation
                      jiri.tomek

                      Can you install Additional Poller that can access CPE and setup tunnel between main server and Additional Poller so that they can see each other?

                      • Re: IP SLA Installation
                        Wael Hilal

                        Hi

                        Could you please tell me the solution in more details??

                         

                         

                        Regards

                        • Re: IP SLA Installation
                          Andy Ng

                          I think what Jiri means is that you should install a Orion NPM on one end, and the Additional Poller on the far end.

                          And ensure that both can access CPE and set up a tunnel to communicate between them.

                           

                          Install IPSLAMGR on both of them (IPSLAMGR module installed on the Additional Poller does not require license)

                          And you should be able to monitor the IPSLA between them, as the Orion NPM does not need to communicate with the far end network device.

                          The Additional Poller will communicate with the device at the far end, and will share the information with Orion NPM.

                          • Re: IP SLA Installation
                            Wael Hilal

                            Hi

                            But when I creat an operation what I did is determine the source and target nodes!!! Now both nodes are within VPN!!

                            What do you mean by Far end?? And what do you mean by Poller?? Please explain more

                             

                             

                            Regards

                            • Re: IP SLA Installation
                              jiri.tomek

                              Additional pollers are described in your NPM Administration guide in chapter "Chapter 21 - Using Additional Polling Engines". Additional poller is another machine running SolarWinds products that extends original main server capacity or reach. If you have multiple networks that you want to monitor, you can install additional poller into each of these networks so that each poller can reach machines that you want to monitor. Only thing that you have to do is to setup connection between main server and pollers.

                              In your case when you have part of network over VPN, you will probably need to install one poller in this network behind VPN and setup tunnel through VPN between main NPM/IPSLA server and this poller. Additional poller requires also access to the database server that your installation uses.

                               

                              I can't provide you more details without knowing what is your network setup etc.

                              • Re: IP SLA Installation
                                Wael Hilal

                                Hi

                                Is there any solution that we can depend on to the achieve the same result??

                                 

                                Regards

                                • Re: IP SLA Installation
                                  jiri.tomek

                                  I'm not sure I fully understand. Are you asking for some alternative configuration of SolarWinds products to be able to monitor nodes over VPN network?

                                  You have two options:

                                  • Install Additional Poller in network behind VPN and configure VPN to allow communication between Additional Poller and Main server and Additional Poller and database server
                                  • OR - Configure VPN so that main server can communicate with all required nodes behind VPN. However for this configuration you would have to define more rules for more protocols so variant with Additional Poller is usually the preferred one.
                                  • Re: IP SLA Installation
                                    Wael Hilal

                                    Hi Jiri

                                    Thanks

                                    It seems that the picture is not clear.

                                    We are talking here about huge network and we are selling L3 MPLS VPN for our corporate customers, we have around 500 customers, what we want is to monitor the IP SLA between us and the customer branches, these branches are inside VPN, so how can the IP SLA server communicate between the two sites of the VPN????

                                     

                                     

                                    Regards

                                    • Re: IP SLA Installation
                                      tom.rybka

                                      If you want to have IPSLA operations execute on your site and target the customers' nodes accessible via VPN, you might want to set proper VRF names for the respective operations. You can find the setting among operation properties, in the Advanced section.

                                      • Re: IP SLA Installation
                                        Wael Hilal

                                        Hi

                                        Thanks

                                        It sounds good solution!!

                                        So I can creat operation and assign this operation to VRF which is the VPN CPE and at the same time the Solarwinds server can at the same time communicate with these sites???

                                        Have you test this??

                                         

                                        Regards

                                        • Re: IP SLA Installation
                                          tom.rybka

                                          It is important to keep in mind that the operation execution is not taking place in SolarWinds software, but on the IPSLA capable nodes (Cisco routers). When the router executes such an operation and it targets a destination in a VPN, it uses VRF for proper routing purposes. SolarWinds server (IPSLA Manager) just polls the router for statistics data that the router collected for the operation. (I assume that you have the source IPSLA capable router on your network, managed by Orion.)

                                          • Re: IP SLA Installation
                                            Wael Hilal

                                            Hi

                                            Thanks

                                            Yes, it is clear now.

                                            So at the end can I put any ip address inside the VPN?? I mean can I get statistics from the LAN of the customers???

                                            Or should I depend on WAN interface between the PE and CPE which is also within the VPN???

                                             

                                             

                                            Regards

                                        • Re: IP SLA Installation
                                          pjohansen

                                          The collection of the IPSLA result does not have to be inside the VRF.

                                          But you will need a loopback/interface address on the router/device runnung IPSLA that has connectivity to the Solarwinds poller so that it can collect the statistics of the IPSLA operation (witch is inside VRF).

                                          • Re: IP SLA Installation
                                            Wael Hilal

                                            Hi

                                            So if I put the IP address of the LAN network of the VPN customer, should the CPE be managed by Solarwinds and should I configure snmp on it like I did wih PE routers??

                                             

                                             

                                            Regards

                                            • Re: IP SLA Installation
                                              pjohansen

                                              If the ip address of the LAN network of the VPN customer has connectivity to Solarwinds poller, yes.

                                              • Re: IP SLA Installation
                                                Wael Hilal

                                                Hi

                                                So the operation will start from CPE to CPE?

                                                I mean first of all the CPE should be managed by Solarwinds and should I configure snmp on the CPE???

                                                Is this situation exist?? I mean can I consider a loopback address configured on the PE inside the VPN as end to end testing??

                                                 

                                                 

                                                Regards

                                              • Re: IP SLA Installation
                                                Wael Hilal

                                                Hi

                                                here you mean by the poller the PE router??

                                                how could the CPE be managed via Solarwinds while it is within VPN??

                                                Hope that you can help, what we want is that to measure IP SLA from CPE to CPE within VPN, through Solarwinds we can manage the PE routers connecting the VPNs, but when i put IP address of the LAN of the VPN customer it tell me that the IP address does not exist in the node!!!

                                                 

                                                Regards

                                                • Re: IP SLA Installation
                                                  pjohansen

                                                  Very simple answere to that question is, if Solarwinds does not have  ip connectivity to the CPE you want to collect IPSLA statistics from, you can't collect IPSLA statistics from it.

                                                  • Re: IP SLA Installation
                                                    Wael Hilal

                                                    Hi

                                                    Thanks

                                                    But the IPSLA operations done on the PE,  (the poller) and the PE has connectivity to the CPE!!! As I understood that Solarwinds only collect statistics from the poller (PE) and Solarwinds has IP connectivity to the PE!!!

                                                    Also I tried to put lookpback address on the PE, and put this loopback inside the VPN the operation worked fine!!!

                                                    But when I tried to put the WAN interface between the PE and CPE which is inside the VPN it did not worked!!!

                                                     

                                                     

                                                     

                                                    Wael Hilal

                                                    IP Planning Supervisor | IP Core Planning | Strategic Planning & Development Directorate

                                                     

                                                    Phone:  +970 9 2301056

                                                    Mobile: +970 59 2221056

                                                    E-Fax: +970 9 2001056

                                                     

                                                    PALTEL- Palestine Telecommunications Company

                                                    P.O. Box: 1570, Nablus, Palestine

                                                    www.PALTEL.ps<http://www.paltel.ps/>

                                                    P Please do not print this email unless it is absolutely necessary. Save a tree.

                                                    • Re: IP SLA Installation
                                                      pjohansen

                                                      If you by saying "putting a WAN interface" means configuring the CPE ip address IPSLA should test against Solarwinds also needs access to CPE to configure a IPSLA responder.

                                                      If Solarwinds access to CPE is not possible, add IPSLA manually using command line on routers, and add IPSLA operation Solarwinds after config is ready.

                                                      • Re: IP SLA Installation
                                                        Wael Hilal

                                                        So at the end

                                                        Can the IP SLA operation test from CPE to CPE??? And how??

                                                         

                                                        Regards

                                                      • Re: IP SLA Installation
                                                        Wael Hilal

                                                        Hi

                                                        So if the I want to test the CPE-to-CPE IP SLA, the CPE should be reachable through Solarwinds !!

                                                        But how this will be done while the CPEs inside VPN???

                                                         

                                                         

                                                        Regards

                                                        • Re: IP SLA Installation
                                                          pjohansen

                                                          By adding routing and access for Solarwinds through VPN, or configuring a new VPN for monitoring access to CPE.

                                                          You can of cource not collect monitoring data from anything your monitoring system does not have access to, that should be fairly obvious dont you think?

                                                          • Re: IP SLA Installation
                                                            Wael Hilal

                                                            Hi

                                                            So if it was able for Solarwinds to reach the CPE to get Ip SLA statistics, should the CPE be added to Orion as Node??? And should we Configure SNMP on the CPE??

                                                             

                                                             

                                                            Regards

                                                            • Re: IP SLA Installation
                                                              pjohansen

                                                              Correct, add it like any other node and add ipsla monitoring in Solarwinds after you have manually added ipsla config on same node.

                                                              • Re: IP SLA Installation
                                                                Wael Hilal

                                                                Hi

                                                                But how can i add the CPE as a node in the Solarwinds while it is inside VPN and has Private Ip address??

                                                                 

                                                                Regards

                                                                • Re: IP SLA Installation
                                                                  pjohansen

                                                                  By asking a network engineer to add routing and access to CPE for Solarwinds poller.

                                                                  • Re: IP SLA Installation
                                                                    Wael Hilal

                                                                    Hi

                                                                    Ok, now in the PE router connected to the CPE, i put the WAN interface of the VPN from the PE router, and in the operation advanced option i put the name of the vrf of the VPN; Solarwinds was able to reach that ip interface, while when i put the WAN interface of the VPN from the CPE side with the same settings; Solarwinds can't reach it!!!

                                                                     

                                                                    Regards

                                                                    • Re: IP SLA Installation
                                                                      pjohansen

                                                                      Sorry, I do not understand what you mean by "putting the wan interface" but if you cant reach something you add routing and access so that you can reach it.

                                                                      • Re: IP SLA Installation
                                                                        Wael Hilal

                                                                        Hi

                                                                        Now the CPE is connected to PE router, the PE router is added as a node on Orion, now in the wizard to add new operation you determine the source and the target, you can in advanced option add the vrf name of the VPN and add the IP address, if I put the IP address from the PE router; Solarwinds can reach it, while if I added the IP from the CPE side;Solarwinds can’t reach it although both in the same VPN!!

                                                                         

                                                                        Wael Hilal

                                                                        IP Planning Supervisor | IP Core Planning | Strategic Planning & Development Directorate

                                                                         

                                                                        Phone:  +970 9 2301056

                                                                        Mobile: +970 59 2221056

                                                                        E-Fax: +970 9 2001056

                                                                         

                                                                        PALTEL- Palestine Telecommunications Company

                                                                        P.O. Box: 1570, Nablus, Palestine

                                                                        www.PALTEL.ps<http://www.paltel.ps/>

                                                                        P Please do not print this email unless it is absolutely necessary. Save a tree.

                                                                        • Re: IP SLA Installation
                                                                          pjohansen

                                                                          Ok, then you need to troubleshoot why you arent able to reach CPE.

                                                                          1. SNMP access added to CPE?

                                                                          2. Ping and tracing using CPE source ip adresss to solarwinds ip address.

                                                                           

                                                                          Or add IPSLA using CPE and CP routers command line interface. You then only need SNMP access to CP router from Solarwinds and start monitoring by "adding exsisting IPSLA operation" in Solarwinds.  

  • Re: IP SLA Installation
    sja

    Hi

     

    If you plan to run alot of IPSLA (SLX)  operation you probebly need to check with support what is the maximum

    You could run into some problem there.

    • Re: IP SLA Installation
      Andy McBride

      Just to clarify, we do not support IPSLA inside an MPLS network. You must apply IPSLA to the CPE (MPLS edge). That is where you can specify which VFR to use in the IPSLA manager wizard.

      • Re: IP SLA Installation
        Wael Hilal

        So do you mean by this that the IP SLA statistics can be gotten at the edge of the MPLS network??

        I mean from PE router to PE router??

         

        Wael Hilal

        IP Planning Supervisor | IP Core Planning | Strategic Planning & Development Directorate

         

        Phone:  +970 9 2301056

        Mobile: +970 59 2221056

        E-Fax: +970 9 2001056

         

        PALTEL- Palestine Telecommunications Company

        P.O. Box: 1570, Nablus, Palestine

        www.PALTEL.ps<http://www.paltel.ps/>

        P Please do not print this email unless it is absolutely necessary. Save a tree.

        • Re: IP SLA Installation
          pjohansen

          Not sure what you mean by PE router to PE router. Ipsla statitics is collected on the router you configure it, and nowhere else.

           

           


          • Re: IP SLA Installation
            Wael Hilal

            But what do you mean by CP

          • Re: IP SLA Installation
            Andy McBride


            Typically the PE is the edge of the MPLS network. The WAN connection from the CPE to PE is IP. The MPLS provider will only let you set up operations on the CPE, and sometimes they will not allow that if the CPE is provider managed. If this is the case you can setup the operation on the next router or switch in your LAN (as the source) and choose a router or switch on the remote LAN as the target. These should be as close to the CPE routers as possible. Specify the VRF when you setup the operation. MPLS.jpg

  • Re: IP SLA Installation
    bilel

    Hi


    The question one very important:


    I have a question to ask yourself:
    What commands exactly as written IPSLA?
    And it is the consequence?



    The question two very important:

     

    What are the equipment that are supported by IP SLA ?


    thank you
    Bilel

  • Re: IP SLA Installation
    bilel

    Hi

    Thank you for the response

    but what are the consequences to write to operation ?


    Bilel