IP SLA Installation

Re: IP SLA Installation

Andy Ng Apr 11, 2012 10:19 PM (in response to Wael Hilal)

Hi Wael,

No, the IPSLAMGR module is not standalone.

You will need to install it above Orion NPM.

Hope that clarifies.

Re: IP SLA Installation

Wael Hilal Apr 12, 2012 12:17 AM (in response to Andy Ng)

Hi Andy
Thanks
So if I have now IP SLA installed on top of Orion NPM, and I want to install it on standalone server, this will not work at all ???

Regards
Like (0)

Actions
- Re: IP SLA Installation
  
  Andy Ng Apr 12, 2012 1:01 AM (in response to Wael Hilal)
  
  Yes, IPSLAMGR can't work on its own. It requires Orion NPM.
  
  Like (0)
  
  Actions
  - Re: IP SLA Installation
    
    Wael Hilal Apr 12, 2012 1:07 AM (in response to Andy Ng)
    
    Thanks
    
    Like (0)
    
    Actions
    - Re: IP SLA Installation
      
      Wael Hilal Apr 12, 2012 1:56 AM (in response to Wael Hilal)
      
      Hi
      Can i install the Orion NPM on another server and then use the IPSLA on it???
      
      regards
      
      Like (0)
      
      Actions
      - Re: IP SLA Installation
        
        Andy Ng Apr 12, 2012 1:58 AM (in response to Wael Hilal)
        
        As long as Orion IPSLAMGR is installed above Orion NPM, it will be fine.
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 12, 2012 2:06 AM (in response to Andy Ng)
        
        Hi
        Can I install the Orion NPM on two servers???
        
        regards
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Andy Ng Apr 12, 2012 2:12 AM (in response to Wael Hilal)
        
        If you are talking about 2 Orion NPMs on 2 separate server, of course you are able to do so.
        But a single license is only valid for a single installation. So, 2 licenses will be required.
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 12, 2012 2:22 AM (in response to Andy Ng)
        
        Thanks
        But you know what is our problem.
        We want to measure the IP SLA between two CPEs, the problem is that the IP SLA server is real IP address, and the Customer CPE are within VPN, so the Orion server cannot reach the CPE because it is inside VPN!!! Can you help us in this regard??
        
        Regards
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        jiri.tomek Apr 12, 2012 2:34 AM (in response to Wael Hilal)
        
        Can you install Additional Poller that can access CPE and setup tunnel between main server and Additional Poller so that they can see each other?
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 12, 2012 2:59 AM (in response to jiri.tomek)
        
        Hi
        Could you please tell me the solution in more details??
        
        Regards
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Andy Ng Apr 12, 2012 3:05 AM (in response to Wael Hilal)
        
        I think what Jiri means is that you should install a Orion NPM on one end, and the Additional Poller on the far end.
        And ensure that both can access CPE and set up a tunnel to communicate between them.
        
        Install IPSLAMGR on both of them (IPSLAMGR module installed on the Additional Poller does not require license)
        And you should be able to monitor the IPSLA between them, as the Orion NPM does not need to communicate with the far end network device.
        The Additional Poller will communicate with the device at the far end, and will share the information with Orion NPM.
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 12, 2012 3:12 AM (in response to Andy Ng)
        
        Hi
        But when I creat an operation what I did is determine the source and target nodes!!! Now both nodes are within VPN!!
        What do you mean by Far end?? And what do you mean by Poller?? Please explain more
        
        Regards
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        jiri.tomek Apr 12, 2012 3:38 AM (in response to Wael Hilal)
        
        Additional pollers are described in your NPM Administration guide in chapter "Chapter 21 - Using Additional Polling Engines". Additional poller is another machine running SolarWinds products that extends original main server capacity or reach. If you have multiple networks that you want to monitor, you can install additional poller into each of these networks so that each poller can reach machines that you want to monitor. Only thing that you have to do is to setup connection between main server and pollers.
        In your case when you have part of network over VPN, you will probably need to install one poller in this network behind VPN and setup tunnel through VPN between main NPM/IPSLA server and this poller. Additional poller requires also access to the database server that your installation uses.
        
        I can't provide you more details without knowing what is your network setup etc.
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 15, 2012 1:01 AM (in response to jiri.tomek)
        
        Hi
        Is there any solution that we can depend on to the achieve the same result??
        
        Regards
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        jiri.tomek Apr 16, 2012 1:48 AM (in response to Wael Hilal)
        
        I'm not sure I fully understand. Are you asking for some alternative configuration of SolarWinds products to be able to monitor nodes over VPN network?
        You have two options:
        Install Additional Poller in network behind VPN and configure VPN to allow communication between Additional Poller and Main server and Additional Poller and database server
        OR - Configure VPN so that main server can communicate with all required nodes behind VPN. However for this configuration you would have to define more rules for more protocols so variant with Additional Poller is usually the preferred one.
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 16, 2012 5:47 AM (in response to jiri.tomek)
        
        Hi Jiri
        Thanks
        It seems that the picture is not clear.
        We are talking here about huge network and we are selling L3 MPLS VPN for our corporate customers, we have around 500 customers, what we want is to monitor the IP SLA between us and the customer branches, these branches are inside VPN, so how can the IP SLA server communicate between the two sites of the VPN????
        
        Regards
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        tom.rybka Apr 16, 2012 6:22 AM (in response to Wael Hilal)
        
        If you want to have IPSLA operations execute on your site and target the customers' nodes accessible via VPN, you might want to set proper VRF names for the respective operations. You can find the setting among operation properties, in the Advanced section.
        
        Like (1)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 16, 2012 6:35 AM (in response to tom.rybka)
        
        Hi
        Thanks
        It sounds good solution!!
        So I can creat operation and assign this operation to VRF which is the VPN CPE and at the same time the Solarwinds server can at the same time communicate with these sites???
        Have you test this??
        
        Regards
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        tom.rybka Apr 16, 2012 8:17 AM (in response to Wael Hilal)
        
        It is important to keep in mind that the operation execution is not taking place in SolarWinds software, but on the IPSLA capable nodes (Cisco routers). When the router executes such an operation and it targets a destination in a VPN, it uses VRF for proper routing purposes. SolarWinds server (IPSLA Manager) just polls the router for statistics data that the router collected for the operation. (I assume that you have the source IPSLA capable router on your network, managed by Orion.)
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 16, 2012 8:23 AM (in response to tom.rybka)
        
        Hi
        Thanks
        Yes, it is clear now.
        So at the end can I put any ip address inside the VPN?? I mean can I get statistics from the LAN of the customers???
        Or should I depend on WAN interface between the PE and CPE which is also within the VPN???
        
        Regards
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        pjohansen Apr 16, 2012 8:24 AM (in response to Wael Hilal)
        
        The collection of the IPSLA result does not have to be inside the VRF.
        But you will need a loopback/interface address on the router/device runnung IPSLA that has connectivity to the Solarwinds poller so that it can collect the statistics of the IPSLA operation (witch is inside VRF).
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 16, 2012 8:28 AM (in response to pjohansen)
        
        Hi
        So if I put the IP address of the LAN network of the VPN customer, should the CPE be managed by Solarwinds and should I configure snmp on it like I did wih PE routers??
        
        Regards
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        pjohansen Apr 16, 2012 8:48 AM (in response to Wael Hilal)
        
        If the ip address of the LAN network of the VPN customer has connectivity to Solarwinds poller, yes.
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 17, 2012 2:06 AM (in response to pjohansen)
        
        Hi
        So the operation will start from CPE to CPE?
        I mean first of all the CPE should be managed by Solarwinds and should I configure snmp on the CPE???
        Is this situation exist?? I mean can I consider a loopback address configured on the PE inside the VPN as end to end testing??
        
        Regards
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 17, 2012 4:59 AM (in response to pjohansen)
        
        Hi
        here you mean by the poller the PE router??
        how could the CPE be managed via Solarwinds while it is within VPN??
        Hope that you can help, what we want is that to measure IP SLA from CPE to CPE within VPN, through Solarwinds we can manage the PE routers connecting the VPNs, but when i put IP address of the LAN of the VPN customer it tell me that the IP address does not exist in the node!!!
        
        Regards
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        pjohansen Apr 17, 2012 5:18 AM (in response to Wael Hilal)
        
        Very simple answere to that question is, if Solarwinds does not have ip connectivity to the CPE you want to collect IPSLA statistics from, you can't collect IPSLA statistics from it.
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 17, 2012 5:24 AM (in response to pjohansen)
        
        Hi
        Thanks
        But the IPSLA operations done on the PE, (the poller) and the PE has connectivity to the CPE!!! As I understood that Solarwinds only collect statistics from the poller (PE) and Solarwinds has IP connectivity to the PE!!!
        Also I tried to put lookpback address on the PE, and put this loopback inside the VPN the operation worked fine!!!
        But when I tried to put the WAN interface between the PE and CPE which is inside the VPN it did not worked!!!
        
        Wael Hilal
        IP Planning Supervisor | IP Core Planning | Strategic Planning & Development Directorate
        
        Phone: +970 9 2301056
        Mobile: +970 59 2221056
        E-Fax: +970 9 2001056
        
        PALTEL- Palestine Telecommunications Company
        P.O. Box: 1570, Nablus, Palestine
        www.PALTEL.ps<http://www.paltel.ps/>
        P Please do not print this email unless it is absolutely necessary. Save a tree.
        
        image001.png 5.4 KB
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        pjohansen Apr 17, 2012 5:35 AM (in response to Wael Hilal)
        
        If you by saying "putting a WAN interface" means configuring the CPE ip address IPSLA should test against Solarwinds also needs access to CPE to configure a IPSLA responder.
        If Solarwinds access to CPE is not possible, add IPSLA manually using command line on routers, and add IPSLA operation Solarwinds after config is ready.
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 17, 2012 7:56 AM (in response to pjohansen)
        
        So at the end
        Can the IP SLA operation test from CPE to CPE??? And how??
        
        Regards
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        pjohansen Apr 17, 2012 8:09 AM (in response to Wael Hilal)
        
        http://lmgtfy.com/?q=cisco+ipsla+setup
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 17, 2012 8:12 AM (in response to pjohansen)
        
        Nice
        Thanks
        
        Wael Hilal
        IP Planning Supervisor | IP Core Planning | Strategic Planning & Development Directorate
        
        Phone: +970 9 2301056
        Mobile: +970 59 2221056
        E-Fax: +970 9 2001056
        
        PALTEL- Palestine Telecommunications Company
        P.O. Box: 1570, Nablus, Palestine
        www.PALTEL.ps<http://www.paltel.ps/>
        P Please do not print this email unless it is absolutely necessary. Save a tree.
        
        image001.png 5.4 KB
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 17, 2012 8:27 AM (in response to pjohansen)
        
        Hi
        So if the I want to test the CPE-to-CPE IP SLA, the CPE should be reachable through Solarwinds !!
        But how this will be done while the CPEs inside VPN???
        
        Regards
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        pjohansen Apr 17, 2012 8:42 AM (in response to Wael Hilal)
        
        By adding routing and access for Solarwinds through VPN, or configuring a new VPN for monitoring access to CPE.
        You can of cource not collect monitoring data from anything your monitoring system does not have access to, that should be fairly obvious dont you think?
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 19, 2012 12:18 AM (in response to pjohansen)
        
        Hi
        So if it was able for Solarwinds to reach the CPE to get Ip SLA statistics, should the CPE be added to Orion as Node??? And should we Configure SNMP on the CPE??
        
        Regards
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        pjohansen Apr 19, 2012 10:48 AM (in response to Wael Hilal)
        
        Correct, add it like any other node and add ipsla monitoring in Solarwinds after you have manually added ipsla config on same node.
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 22, 2012 3:50 AM (in response to pjohansen)
        
        Hi
        But how can i add the CPE as a node in the Solarwinds while it is inside VPN and has Private Ip address??
        
        Regards
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        pjohansen Apr 22, 2012 4:04 AM (in response to Wael Hilal)
        
        By asking a network engineer to add routing and access to CPE for Solarwinds poller.
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 23, 2012 2:39 AM (in response to pjohansen)
        
        Hi
        Ok, now in the PE router connected to the CPE, i put the WAN interface of the VPN from the PE router, and in the operation advanced option i put the name of the vrf of the VPN; Solarwinds was able to reach that ip interface, while when i put the WAN interface of the VPN from the CPE side with the same settings; Solarwinds can't reach it!!!
        
        Regards
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        pjohansen Apr 23, 2012 2:47 AM (in response to Wael Hilal)
        
        Sorry, I do not understand what you mean by "putting the wan interface" but if you cant reach something you add routing and access so that you can reach it.
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 23, 2012 2:59 AM (in response to pjohansen)
        
        Hi
        Now the CPE is connected to PE router, the PE router is added as a node on Orion, now in the wizard to add new operation you determine the source and the target, you can in advanced option add the vrf name of the VPN and add the IP address, if I put the IP address from the PE router; Solarwinds can reach it, while if I added the IP from the CPE side;Solarwinds can’t reach it although both in the same VPN!!
        
        Wael Hilal
        IP Planning Supervisor | IP Core Planning | Strategic Planning & Development Directorate
        
        Phone: +970 9 2301056
        Mobile: +970 59 2221056
        E-Fax: +970 9 2001056
        
        PALTEL- Palestine Telecommunications Company
        P.O. Box: 1570, Nablus, Palestine
        www.PALTEL.ps<http://www.paltel.ps/>
        P Please do not print this email unless it is absolutely necessary. Save a tree.
        
        image002.png 5.4 KB
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        pjohansen Apr 23, 2012 3:08 AM (in response to Wael Hilal)
        
        Ok, then you need to troubleshoot why you arent able to reach CPE.
        1. SNMP access added to CPE?
        2. Ping and tracing using CPE source ip adresss to solarwinds ip address.
        
        Or add IPSLA using CPE and CP routers command line interface. You then only need SNMP access to CP router from Solarwinds and start monitoring by "adding exsisting IPSLA operation" in Solarwinds.
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 23, 2012 8:16 AM (in response to pjohansen)
        
        Hi
        So is this setup exist and others using it??
        
        Regards
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        pjohansen Apr 23, 2012 8:32 AM (in response to Wael Hilal)
        
        If you mean "does it work" the answere is yes, and I am using it on many devices.
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 23, 2012 8:44 AM (in response to pjohansen)
        
        Really
        Even if the CPE is private IP ande Solarwinds server in Real network??
        Could you plesae what are you ding exactly??in more details!
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        pjohansen Apr 23, 2012 10:33 AM (in response to Wael Hilal)
        
        1 Add snmp access for Solarwinds to CP
        2. Add CP to Solarwinds as node.
        3. Add IPSla monitor to CP using command line on router. Monitor to be configured with source and destination ip and VRF inside network to test.
        4. Add ipsla monitor responder to to CPE using command line on router
        5. Add CP node to ipsla monitoring as existing, do not add new ipsla monitor.
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        Wael Hilal Apr 23, 2012 1:53 PM (in response to pjohansen)
        
        Thanks
        What do you mean here CP.
        You mean even if the CPE is inside VPN it should be reachable for Solarwinds which is in real network??
        Could you please clarify the last two points?
        
        Wael Hilal
        IP Planning Supervisor | IP Core Planning | Strategic Planning & Development Directorate
        
        Phone: +970 9 2301056
        Mobile: +970 59 2221056
        E-Fax: +970 9 2001056
        
        PALTEL- Palestine Telecommunications Company
        P.O. Box: 1570, Nablus, Palestine
        www.PALTEL.ps<http://www.paltel.ps/>
        P Please do not print this email unless it is absolutely necessary. Save a tree.
        
        image001.png 5.4 KB
        
        Like (0)
        
        Actions
        
        Re: IP SLA Installation
        
        pjohansen Apr 24, 2012 5:03 AM (in response to Wael Hilal)
        
        Sorry, I meant the device you are adding ipsla to and Solarwinds have snmp connectivity to.
        
        Like (0)
        
        Actions

Re: IP SLA Installation

sja Apr 12, 2012 2:46 AM (in response to Wael Hilal)

Hi

If you plan to run alot of IPSLA (SLX) operation you probebly need to check with support what is the maximum

You could run into some problem there.

Re: IP SLA Installation

Andy McBride Apr 23, 2012 12:05 PM (in response to sja)

Just to clarify, we do not support IPSLA inside an MPLS network. You must apply IPSLA to the CPE (MPLS edge). That is where you can specify which VFR to use in the IPSLA manager wizard.
Like (0)

Actions
- Re: IP SLA Installation
  
  Wael Hilal Apr 23, 2012 1:55 PM (in response to Andy McBride)
  
  So do you mean by this that the IP SLA statistics can be gotten at the edge of the MPLS network??
  I mean from PE router to PE router??
  
  Wael Hilal
  IP Planning Supervisor | IP Core Planning | Strategic Planning & Development Directorate
  
  Phone: +970 9 2301056
  Mobile: +970 59 2221056
  E-Fax: +970 9 2001056
  
  PALTEL- Palestine Telecommunications Company
  P.O. Box: 1570, Nablus, Palestine
  www.PALTEL.ps<http://www.paltel.ps/>
  P Please do not print this email unless it is absolutely necessary. Save a tree.
  
  image001.png 5.4 KB
  
  Like (0)
  
  Actions
  - Re: IP SLA Installation
    
    pjohansen Apr 24, 2012 1:46 AM (in response to Wael Hilal)
    
    Not sure what you mean by PE router to PE router. Ipsla statitics is collected on the router you configure it, and nowhere else.
    
    Like (0)
    
    Actions
    - Re: IP SLA Installation
      
      Wael Hilal Apr 24, 2012 1:48 AM (in response to pjohansen)
      
      But what do you mean by CP
      
      Like (0)
      
      Actions
    - Re: IP SLA Installation
      
      Andy McBride Apr 24, 2012 3:33 PM (in response to pjohansen)
      
      Typically the PE is the edge of the MPLS network. The WAN connection from the CPE to PE is IP. The MPLS provider will only let you set up operations on the CPE, and sometimes they will not allow that if the CPE is provider managed. If this is the case you can setup the operation on the next router or switch in your LAN (as the source) and choose a router or switch on the remote LAN as the target. These should be as close to the CPE routers as possible. Specify the VRF when you setup the operation.
      
      Like (0)
      
      Actions

Re: IP SLA Installation

bilel Jun 15, 2012 7:20 AM (in response to Wael Hilal)

Hi

The question one very important:

I have a question to ask yourself:
What commands exactly as written IPSLA?
And it is the consequence?

The question two very important:

What are the equipment that are supported by IP SLA ?

thank you
Bilel

Re: IP SLA Installation

Andy McBride Jun 18, 2012 11:31 AM (in response to bilel)

http://www.solarwinds.com/documentation/IPSLA/docs/IPSLAManagerAdministratorGuide.pdf
See appendix B
Like (0)

Actions

Re: IP SLA Installation

bilel Jun 20, 2012 2:50 AM (in response to Wael Hilal)

Hi

Thank you for the response

but what are the consequences to write to operation ?

Bilel

Re: IP SLA Installation

michal.hrncirik Jun 21, 2012 2:48 AM (in response to bilel)

Hi Bilel,

what do you mean by the consequences? IPSLA Manager uses exactly the same syntax as you would use directly through Cisco CLI.
Like (0)

Actions
- Re: IP SLA Installation
  
  bilel Jun 21, 2012 3:05 AM (in response to michal.hrncirik)
  
  Hi
  I speak of consequence on my network architecture for IP SLA if written command, behind me I just do not take the risk that my network architecture falls.
  
  So I'd like to know what I risk behind setting up IP SLA?
  
  Hoping to have understood!
  
  Bilel
  
  Like (0)
  
  Actions
  - Re: IP SLA Installation
    
    michal.hrncirik Jun 21, 2012 8:45 AM (in response to bilel)
    
    Hi,
    there should not be any risk behind setting up IP SLA on your network. IPSLA operations have a minimal impact on network health. The only problem could be when you set up operations to be tested too frequently or you have a lot of overlapping operations on the same paths.
    
    You may take a look into the IPSLA admin guide page 24 - "Understanding the Impact IP SLA Operations" where you may see a model situation.
    
    thanks,
    Michal
    
    Like (0)
    
    Actions
    - Re: IP SLA Installation
      
      bilel Jun 21, 2012 9:02 AM (in response to michal.hrncirik)
      
      Thank you
      
      Bilel
      
      Like (0)
      
      Actions
    - Re: IP SLA Installation
      
      bilel Jun 21, 2012 9:35 AM (in response to michal.hrncirik)
      
      Hi
      Could you send me the link directly
      thank you
      Bilel
      
      Like (0)
      
      Actions
    - Re: IP SLA Installation
      
      bilel Jun 21, 2012 9:36 AM (in response to michal.hrncirik)
      
      You may take a look into the IPSLA admin guide page 24 - "Understanding the Impact IP SLA Operations" where you may see a model situation.
      
      Like (0)
      
      Actions
      - Re: IP SLA Installation
        
        michal.hrncirik Jun 27, 2012 3:59 AM (in response to bilel)
        
        http://www.solarwinds.com/documentation/IPSLA/docs/IPSLAManagerAdministratorGuide.pdf
        1 of 1 people found this helpful
        
        Like (0)
        
        Actions