Junos Space. Junos Space Administration. Modified: Copyright 2016, Juniper Networks, Inc.

Transcription

1 Junos Space Junos Space Administration Modified:

2 Juniper Networks, Inc Innovation Way Sunnyvale, California USA All rights reserved. Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Junos Space Junos Space Administration All rights reserved. The information in this document is current as of the date on the title page. YEAR 2000 NOTICE Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the year However, the NTP application is known to have some difficulty in the year END USER LICENSE AGREEMENT The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement ( EULA ) posted at By downloading, installing or using such software, you agree to the terms and conditions of that EULA. ii

3 Table of Contents About the Documentation xiii Documentation and Release Notes xiii Supported Platforms xiii Documentation Conventions xiii Documentation Feedback xv Requesting Technical Support xvi Self-Help Online Tools and Resources xvi Opening a Case with JTAC xvi Part 1 Overview Chapter 1 Junos Space Administration Junos Space Administrators Overview Maintenance Mode Overview Maintenance Mode Access and System Locking Maintenance-Mode User Administration Systems of Record in Junos Space Overview Systems of Record Implications Chapter 2 Managing Junos Space Appliance Fabric Fabric Management Overview Single-Node Functionality Multinode Functionality Specialized Node Functionality Node Function Availability Overall System Condition and Fabric Load History Overview Overall System Condition Fabric Load History Active Users History Chapter 3 Managing Databases Backing Up and Restoring the Database Overview Backing Up a Database Restoring a Database iii

4 Junos Space Administration Chapter 4 Managing Applications Managing Applications Overview Junos Space Software Upgrade Overview Running Applications in Separate Server Instances Adding a Server Group Adding a Server to a Server Group Starting Servers in a Server Group Stopping Servers in a Server Group Removing a Server Group Moving an Application to a Different Server Group Chapter 5 Troubleshooting Junos Space System Status Log File Overview System Status Log File Customizing Status Log File Content Downloading System Log Files for a Junos Space Appliance Customizing Log Files to Download Chapter 6 Managing Certificates Certificate Management Overview Workflow Loading a Custom Junos Space Server Certificate Loading a User Certificate Loading CA Certificates and CRLs Changing the Authentication Mode Invalid Certificates Chapter 7 Managing the Authentication Servers Remote Authentication Overview Junos Space Authentication Modes Overview Local Authentication Remote Authentication Remote-Local Authentication Junos Space Login Behavior with Remote Authentication Enabled Chapter 8 Managing Tags Tags Overview Chapter 9 Managing DMI Schemas Managing DMI Schemas Overview Chapter 10 Managing Authentication Keys Key-Based Authentication Overview Part 2 Configuration Chapter 11 Managing the Junos Space Fabric Adding a Node to an Existing Junos Space Fabric Configuring the Network Settings of a Node in the Junos Space Fabric Network Settings Configuration Guidelines Changing the VIP Interface in the Same Subnet iv

5 Table of Contents Changing the Node Management IP in the Same Subnet Changing the Default Gateway Changing the Management IP to a Different Network Adding the Device Management IP Address Changing the Device Management IP Address in the Same Subnet Changing the Device Management IP Address to a Different Network Deleting a Device Management IP Address Changing the VIP Interface to a Different Network Changing the Node Management IP Address of All Nodes in the Fabric to the Same Subnet Changing the VIP Interface of a Multiple-Node Fabric to a Different Network Deleting a Node from the Junos Space Fabric Replacing a Failed Junos Space Node Creating a System Snapshot Deleting a System Snapshot Restoring the System to a Snapshot Chapter 12 Managing the Junos Space Network Management Platform Database Backing Up the Junos Space Network Management Platform Database Backing Up the Junos Space Network Management Platform Database to a Local Directory Backing Up the Junos Space Network Management Platform Database to a Remote Host Restoring the Junos Space Network Management Platform Database Through the Junos Space User Interface Restoring a Local Junos Space Network Management Platform Database Through the Junos Space User Interface Restoring the Junos Space Network Management Platform Database from a Remote File Through the Junos Space User Interface Deleting Junos Space Network Management Platform Database Backup Files Chapter 13 Managing the Junos Space License Generating and Uploading the Junos Space License Key File Generating the Junos Space License Key File Uploading the Junos Space License Key File Contents Chapter 14 Managing Junos Space Applications Managing Junos Space Applications Installing or Upgrading a Junos Space Application Viewing Detailed Information About the Junos Space Application Performing Actions on the Junos Space Applications Modifying Junos Space Application Settings Modifying Network Management Platform Settings Configuring Password Rules for Junos Space Network Management Platform Managing Services v

6 Junos Space Administration Configuring Network Activate Application Settings Adding a Junos Space Application Upgrading a Junos Space Application Upgrading Junos Space Software Overview Junos Space 13.3R1 Release Highlights Before You Begin Upgrading Junos Space Release to Release 13.3R1 and Later Versions Upgrading Junos Space Network Management Platform Uninstalling a Junos Space Application Chapter 15 Managing Certificates Installing Custom SSL Certificate on the Junos Space Server Changing the Default Junos Space Server SSL Certificate Installing an X.509 Junos Space Server Certificate Installing a PKCS #12 Format Junos Space Server Certificate Certificate Expiry Certificate Attributes Chapter 16 Managing Authentication Servers Managing Remote Authentication Servers Creating a Remote Authentication Server Modifying Authentication Settings Configuring a RADIUS Server for Authentication and Authorization Configuring TACACS+ for Authentication and Authorization Chapter 17 Managing SMTP Servers Managing SMTP Servers Adding an SMTP Server Chapter 18 Managing Tags Creating a Tag Managing Tags Managing Hierarchical Tags Using the Tag Hierarchy Pane Using the Tag Action Bar Using the Shortcut Menu Using Drag-and-Drop Using the Quick Info Tool Tip Browsing Tagged Objects Viewing All Tags Adding a Child Tag Deleting a Tag Using Notification Using the Tabular View Pane Sharing a Tag Renaming Tags Deleting Tags Tagging an Object Untagging Objects Filtering the Inventory by Using Tags vi

7 Table of Contents Viewing Tagged Objects Chapter 19 Managing DMI Schemas Updating a DMI Schema Creating a Compressed Tar File for Updating DMI Schema Setting a Default DMI Schema Chapter 20 Managing Authentication Keys Generating and Uploading Authentication Keys to Devices Generating Authentication Keys Uploading Authentication Keys to Multiple Managed Devices for the First Time Upload Authentication Keys on Managed Devices that have Conflicting Keys with Junos Space Part 3 Administration Chapter 21 Managing Fabric Viewing Nodes in the Fabric Changing Views Viewing Fabric Node Details Performing Fabric Node Actions Monitoring Nodes in the Fabric Viewing and Modifying the SNMP Configuration for a Fabric Node Starting SNMP Monitoring on Fabric Nodes Stopping SNMP Monitoring on Fabric Nodes Restarting SNMP Monitoring on Fabric Nodes Adding a Third-Party SNMP V1 or V2c Manager on a Fabric Node Adding a Third-Party SNMP V3 Manager on a Fabric Node Deleting a Third-Party SNMP Manager from a Fabric Node Shutting Down or Rebooting a Junos Space Appliance Node From Junos Space Chapter 22 Managing Databases Viewing Database Backup Files Changing Views Viewing Database Details Managing Database Commands Viewing Database Backup Job Recurrence Chapter 23 Managing Licenses Viewing Licenses Viewing License Details Chapter 24 Managing Tags Viewing Tags for a Managed Object vii

8 Junos Space Administration Part 4 Troubleshooting Chapter 25 Troubleshooting Junos Space Customizing Node System Status Log Checking Customizing Node Log Files To Download Downloading the Troubleshooting Log File in the Server Mode Downloading the Troubleshooting Log File in the Maintenance Mode Downloading Troubleshooting System Log Files Through the CLI Downloading a System Log File by Using a USB Device Downloading System Log File by Using SCP Chapter 26 Troubleshooting DMI Schema Management Troubleshooting DMI Schema Management Part 5 Index Index viii

9 List of Figures Part 1 Overview Chapter 2 Managing Junos Space Appliance Fabric Figure 1: Fabric Nodes Figure 2: Fabric with One Node Figure 3: Fabric with Two Nodes Figure 4: Fabric with Three Nodes Figure 5: Overall System Condition Gauge Figure 6: Fabric Load History Chart Figure 7: Active Users History Chart Part 3 Administration Chapter 21 Managing Fabric Figure 8: Disk Usage Threshold Is Normal Figure 9: Trap Details When Disk Usage Normal Figure 10: Disk Usage Threshold Exceeds Configured Threshold Figure 11: Trap Details When DIsk Usage Exceeds Configured Threshold Figure 12: CPU Load Average Threshold Is Normal Figure 13: Trap Details When CPU Load Average Threshold Is Normal Figure 14: CPU Load Average Threshold Upper Limit Exceeded Figure 15: Trap Details When CPU Load 5 Minute Average Exceeds Threshold Figure 16: NMA Is Up Figure 17: Trap Details When NMA Is Up Figure 18: NMA is Down Figure 19: Trap Details When NMA is Down Figure 20: WebProxy Is Up Figure 21: Trap Details When WebProxy Is Up Figure 22: WebProxy Is Down Figure 23: Trap Details When WebProxy Is Down Figure 24: JBoss Is Up Figure 25: Trap Details When JBoss Is Up Figure 26: JBoss Is Down Figure 27: Trap Details When JBoss Is Down Figure 28: Mysql Is Up Figure 29: Trap Details When Mysql Is Up Figure 30: Mysql Is Down Figure 31: Trap Details When Mysql Is Down Figure 32: Postgresql Is Up Figure 33: Trap Details When Postgresql Is Up Figure 34: Postgresql Is Down ix

10 Junos Space Administration Figure 35: Trap Details When Postgresql Is Down Figure 36: Swap Memory Usage Is Normal Figure 37: Trap Details When Swap Memory Is Normal Figure 38: Swap Memory Usage Threshold Exceeds Upper Limit Figure 39: Trap Details When Swap Memory Usage Exceeds Upper Limit Figure 40: CPU Fan Speed Normal Figure 41: Trap Details When CPU Fan Speed Is Normal Figure 42: CPU Fan Speed Is Below the Configured Threshold Figure 43: Trap Details When CPU Fan Speed Is Below the Configured Threshold Figure 44: CPU Voltage Normal Figure 45: Trap Details When CPU Voltage Is Normal Figure 46: CPU Voltage Is Lower Than Configured Threshold Figure 47: Trap Details When CPU Voltage Is Lower Than Configured Threshold Figure 48: CPU Temperature Normal Figure 49: Trap Details When CPU Temperature Is Normal Figure 50: CPU Temperature Exceeds The Configured Threshold Figure 51: Trap Details When CPU Temperature Exceeds The Configured Threshold Figure 52: Trap Details Junos Space Node Is Down Figure 53: Trap Details Junos Space Node Is Up Figure 54: Trap Details Junos Space Node Is Deleted Figure 55: Network Monitoring Details for the Selected Fabric Node x

11 List of Tables About the Documentation xiii Table 1: Notice Icons xiv Table 2: Text and Syntax Conventions xiv Part 1 Overview Chapter 1 Junos Space Administration Table 3: Junos Space Administrators and Junos Space User Interface Users Chapter 5 Troubleshooting Junos Space Table 4: Log Files included in the troubleshoot File Part 2 Configuration Chapter 12 Managing the Junos Space Network Management Platform Database Table 5: Backup Schedule Units and Increments Chapter 14 Managing Junos Space Applications Table 6: Application Information Table 7: Junos Space Network Management Platform Application Settings Table 8: Password Constraint Parameters Table 9: Starting, Stopping, and Restarting Network Monitoring Table 10: Network Activate Application Settings Chapter 15 Managing Certificates Table 11: Certificate Attributes Chapter 16 Managing Authentication Servers Table 12: Remote Authentication Server Settings Table 13: TACACS+ Remote Authentication Server Settings Chapter 18 Managing Tags Table 14: Tag Information Table 15: Objects Supported on the View Tagged Objects Page Chapter 19 Managing DMI Schemas Table 16: Sample URLs for the Repository Table 17: Schema Name Mapping Information Part 3 Administration Chapter 21 Managing Fabric Table 18: Fields for the Fabric Monitoring Inventory Page Table 19: Logical Component Monitoring xi

12 Junos Space Administration Table 20: SNMP Configuration Parameters: Monitoring Disk Usage Table 21: SNMP Configuration Parameters: Monitoring the CPU Load Average Table 22: SNMP Configuration Parameters: Monitoring Processes Table 23: SNMP Configuration Parameters: Monitoring Linux Hardware Chapter 22 Managing Databases Table 24: Fields in the Manage Databases Table Chapter 23 Managing Licenses Table 25: Licenses Details Part 4 Troubleshooting Chapter 25 Troubleshooting Junos Space Table 26: Data and Log Files in troubleshooting log File xii

13 About the Documentation Documentation and Release Notes Documentation and Release Notes on page xiii Supported Platforms on page xiii Documentation Conventions on page xiii Documentation Feedback on page xv Requesting Technical Support on page xvi Supported Platforms To obtain the most current version of all Juniper Networks technical documentation, see the product documentation page on the Juniper Networks website at If the information in the latest release notes differs from the information in the documentation, follow the product Release Notes. Juniper Networks Books publishes books by Juniper Networks engineers and subject matter experts. These books go beyond the technical documentation to explore the nuances of network architecture, deployment, and administration. The current list can be viewed at For the features described in this document, the following platforms are supported: JA1500 Documentation Conventions Table 1 on page xiv defines notice icons used in this guide. xiii

14 Junos Space Administration Table 1: Notice Icons Icon Meaning Description Informational note Indicates important features or instructions. Caution Indicates a situation that might result in loss of data or hardware damage. Warning Alerts you to the risk of personal injury or death. Laser warning Alerts you to the risk of personal injury from a laser. Tip Indicates helpful information. Best practice Alerts you to a recommended use or implementation. Table 2: Text and Syntax Conventions Table 2 on page xiv defines the text and syntax conventions used in this guide. Convention Description Examples Bold text like this Represents text that you type. To enter configuration mode, type the configure command: user@host> configure Fixed-width text like this Italic text like this Represents output that appears on the terminal screen. Introduces or emphasizes important new terms. Identifies guide names. Identifies RFC and Internet draft titles. user@host> show chassis alarms No alarms currently active A policy term is a named structure that defines match conditions and actions. Junos OS CLI User Guide RFC 1997, BGP Communities Attribute Italic text like this Represents variables (options for which you substitute a value) in commands or configuration statements. Configure the machine s domain name: [edit] root@# set system domain-name domain-name xiv

15 About the Documentation Table 2: Text and Syntax Conventions (continued) Convention Description Examples Text like this Represents names of configuration statements, commands, files, and directories; configuration hierarchy levels; or labels on routing platform components. To configure a stub area, include the stub statement at the [edit protocols ospf area area-id] hierarchy level. The console port is labeled CONSOLE. < > (angle brackets) Encloses optional keywords or variables. stub <default-metric metric>; (pipe symbol) Indicates a choice between the mutually exclusive keywords or variables on either side of the symbol. The set of choices is often enclosed in parentheses for clarity. broadcast multicast (string1 string2 string3) # (pound sign) Indicates a comment specified on the same line as the configuration statement to which it applies. rsvp { # Required for dynamic MPLS only [ ] (square brackets) Encloses a variable for which you can substitute one or more values. community name members [ community-ids ] Indention and braces ( { } ) ; (semicolon) Identifies a level in the configuration hierarchy. Identifies a leaf statement at a configuration hierarchy level. [edit] routing-options { static { route default { nexthop address; retain; } } } GUI Conventions Bold text like this Represents graphical user interface (GUI) items you click or select. In the Logical Interfaces box, select All Interfaces. To cancel the configuration, click Cancel. > (bold right angle bracket) Separates levels in a hierarchy of menu selections. In the configuration editor hierarchy, select Protocols>Ospf. Documentation Feedback We encourage you to provide feedback, comments, and suggestions so that we can improve the documentation. You can provide feedback by using either of the following methods: Online feedback rating system On any page of the Juniper Networks TechLibrary site at simply click the stars to rate the content, and use the pop-up form to provide us with information about your experience. Alternately, you can use the online feedback form at xv

16 Junos Space Administration Send your comments to Include the document or topic name, URL or page number, and software version (if applicable). Requesting Technical Support Technical product support is available through the Juniper Networks Technical Assistance Center (JTAC). If you are a customer with an active J-Care or Partner Support Service support contract, or are covered under warranty, and need post-sales technical support, you can access our tools and resources online or open a case with JTAC. JTAC policies For a complete understanding of our JTAC procedures and policies, review the JTAC User Guide located at Product warranties For product warranty information, visit JTAC hours of operation The JTAC centers have resources available 24 hours a day, 7 days a week, 365 days a year. Self-Help Online Tools and Resources For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called the Customer Support Center (CSC) that provides you with the following features: Find CSC offerings: Search for known bugs: Find product documentation: Find solutions and answer questions using our Knowledge Base: Download the latest versions of software and review release notes: Search technical bulletins for relevant hardware and software notifications: Join and participate in the Juniper Networks Community Forum: Open a case online in the CSC Case Management tool: To verify service entitlement by product serial number, use our Serial Number Entitlement (SNE) Tool: Opening a Case with JTAC You can open a case with JTAC on the Web or by telephone. Use the Case Management tool in the CSC at Call JTAC ( toll-free in the USA, Canada, and Mexico). xvi

17 About the Documentation For international or direct-dial options in countries without toll-free numbers, see xvii

18 Junos Space Administration xviii

19 PART 1 Overview Junos Space Administration on page 3 Managing Junos Space Appliance Fabric on page 9 Managing Databases on page 21 Managing Applications on page 25 Troubleshooting Junos Space on page 33 Managing Certificates on page 35 Managing the Authentication Servers on page 41 Managing Tags on page 47 Managing DMI Schemas on page 51 Managing Authentication Keys on page 55 1

20 Junos Space Administration 2

21 CHAPTER 1 Junos Space Administration Junos Space Administrators Overview Junos Space Administrators Overview on page 3 Maintenance Mode Overview on page 5 Systems of Record in Junos Space Overview on page 6 Juniper Networks Junos Space administrators serve different functional roles. A CLI administrator installs and configures Junos Space Appliances. A maintenance-mode administrator performs system-level tasks, such as troubleshooting and database restore operations. After Junos Space Appliances are installed and configured, users created from the Junos Space user interface perform the roles of accessing workspaces and managing applications, users, devices, services, customers, and so forth. Typically, an administrator performs most of the tasks from the Administration workspace. This entire workspace is available only if you are working in the global domain. You can identify the domain that you are currently in from the banner on the Junos Space Network Management Platform user interface. In subdomains, only the tags task is available under the Administration workspace. Table 3 on page 3 describes Junos Space administrators and Junos Space user interface users and the tasks that they perform. Table 3: Junos Space Administrators and Junos Space User Interface Users Junos Space Administrator Description Tasks 3

22 Junos Space Administration Table 3: Junos Space Administrators and Junos Space User Interface Users (continued) CLI administrator An administrator responsible for setting up and managing the system settings for Junos Space Appliances from the serial console. The CLI administrator name is admin. The CLI administrator password can be changed from the console system settings menu. Install and configure basic settings for Junos Space Appliances. Change network and system settings for Junos Space appliances, for example: Change the CLI administrator password. Change network settings, such as: Set DNS servers. Change IP address of the Junos Space node. Change static routes. Change time options. Expand VM drive size (Junos Space Virtual Appliances only). NOTE: This option is available only if the Junos Space node is running on a virtual machine (VM). Retrieve log files for troubleshooting. Update the security settings, such as disable firewall or SSH Debug Maintenance-mode administrator An administrator responsible for performing system-level maintenance on Junos Space Network Management Platform. The maintenance-mode administrator name is maintenance. You can configure the maintenance-mode password is through the serial console when you first configure a Junos Space Appliance. Restore Junos Space Network Management Platform to its previous state by using a database backup file. Shut down Junos Space nodes by entering maintenance mode. Retrieve log files for troubleshooting. Exit maintenance mode and explicitly start up the Junos Space Network Management Platform. Junos Space user interface users A Junos Space user that is assigned one or more predefined roles. Each role assigned to a user provides specific access and management privileges on the objects (applications, devices, users, jobs, services, customers, and so on) available from a workspace on the Junos Space user interface. For complete information about predefined roles that can be assigned to a Junos Space user, see Predefined Roles Overview. Related Documentation Maintenance Mode Overview on page 5 Role-Based Access Control Overview Configuring Users to Manage Objects in Junos Space Overview 4

23 Chapter 1: Junos Space Administration Maintenance Mode Overview In Junos Space Network Management Platform, maintenance mode is a special mode that the administrator uses to perform database restore or debugging tasks while all nodes in the fabric are shut down and the Junos Space Network Management Platform Web proxy is running. The Junos Space system goes into maintenance mode in the following cases: Junos Space Network Management Platform goes down. The system goes into maintenance mode when Junos Space Network Management Platform is down on all nodes in the fabric. Users attempting to log in when the system is in maintenance mode are redirected to the maintenance mode loginpage. Users who logged in to Junos Space Network Management Platform before the shutdown and attempt to perform an action on the user interface are also redirected to the maintenance mode login page. An authorized Junos Space administrator initiates a Restore operation from the Database Backup and Restore workspace to restore a database. When a user initiates a Restore operation, Junos Space Network Management Platform prompts the user to type a username and password to enter maintenance mode, as shown in the Authentication Required dialog box. After the user is authenticated, Junos Space Network Management Platform initiates the Restore operation and the system remains in maintenance mode until the database is restored and the user exits maintenance mode. An authorized Junos Space administrator upgrades the Junos Space Network Management Platform software. When a user initiates a software upgrade, Junos Space Network Management Platform prompts the user to type a usernamef and password to enter maintenance mode, as shown in the Authentication Required dialog box. After the user is authenticated, Junos Space Network Management Platform initiates the software upgrade and the system remains in maintenance mode until the upgrade is finished and the user exits maintenance mode. When a user is authenticated to access Junos Space Network Management Platform in maintenance mode, the maintenance Mode Actions menu displays the tasks a user can perform in maintenance mode. When a user exits maintenance mode, Junos Space Network Management Platform is restarted. After several minutes, the system returns to normal operational mode, and Junos Space users can log in to the user interface. Maintenance Mode Access and System Locking An authorized Junos Space administrator puts the system into maintenance mode by initiating a Restore operation. 5

24 Junos Space Administration Only one maintenance-mode administrator can access maintenance mode at a time. When an administrator logs in to maintenance mode, Junos Space Network Management Platform locks the page. When a second administrator attempts to log in to maintenance mode while the first administrator is logged in, Junos Space Network Management Platform displays a message indicating that another administrator is currently logged in to the system and that maintenance mode is locked. The maintenance mode lock is released when the first administrator logs out or the lock times out. If the logged-in administrator is inactive, the maintenance mode lock is released after five minutes during which another administrator can log in. Maintenance-Mode User Administration The username for the maintenance-mode administrator is maintenance. You can set the password for the maintenance-mode administrator through the Junos Space system console during the initial installation and configuration of a Junos Space Appliance or Junos Space Virtual Appliance. A Junos Space administrator connects to a Junos Space Appliance that is already in maintenance mode by using the URL where ip-address is the Web-access IP address of the Junos Space Appliance. Related Documentation Restoring the Junos Space Network Management Platform Database Through the Junos Space User Interface on page 81 Backing Up the Junos Space Network Management Platform Database on page 75 Backing Up and Restoring the Database Overview on page 22 Systems of Record in Junos Space Overview Although by default the Junos Space network you are administering is the system of record (SOR) each device defines its own official state you may prefer to have the Junos Space Network Management Platform database contain the official state of the network, enabling you to restore that official state if unwanted out-of-band changes are made to a device. This feature enables you to designate Junos Space Network Management Platform as the SOR if you prefer. Systems of Record on page 6 Implications on page 7 Systems of Record A network managed by Junos Space Network Management Platform contains two repositories of information about the devices in the network: the devices themselves (each device defines and reports its official state) and the Junos Space Network Management Platform database (which contains information that is reported by the device during device discovery). One of these repositories must have precedence over the other as the accepted desirable state. By default, the network itself is the system of record (NSOR). 6

25 Chapter 1: Junos Space Administration In NSOR, when a local user commits a change in the configuration of a network device, the commit operation triggers a report via system log to Junos Space Network Management Platform. The values in the Junos Space Network Management Platform database are automatically changed to match the new device values, and the timestamps are synchronized. Thus the devices control the contents of the database. As of version 12.2, you can designate the Junos Space Network Management Platform database values as having precedence over any values configured locally at a device. In this scenario, Junos Space Network Management Platform (database) is the system of record (SSOR). It contains the configurations that the Junos Space administrator considers best for the network devices. If an out-of-band commit operation is executed on a network device, Junos Space Network Management Platform receives a system log message, but the values in the Junos Space Network Management Platform database are not automatically changed or synchronized. Instead, the administrator can choose whether or not to overwrite the device's local changes by pushing the accepted configuration to the device from the Junos Space Network Management Platform database. The choice of pushing the Junos Space Network Management Platform configuration is left to the administrator because the local device changes may, for example, be part of a temporary test that the administrator would not want to interrupt. However, if the tester forgets to reset the configuration at the end of the test, the administrator might then push the SSOR configuration to the device. Implications The basic difference between NSOR and SSOR lies in whether or not the Junos Space Network Management Platform database is automatically synchronized when changes are made to a network device, and which set of values has precedence. Setting the Junos Space Network Management Platform database as the system of record does not protect your network from local changes. The device notifies Junos Space Network Management Platform via system log when the changes occur, and it does not resynchronize, so you still have the previous configuration and you can reset the remote device quickly if you need to do so. In an NSOR scenario, Junos Space Network Management Platform is also notified via system log. You can still push a more desirable configuration to the device, but this process is less efficient. In the NSOR scenario, you can disable automatic resynchronization. When autoresynchronozation is turned off, the server continues to receive notifications and goes into the out-of-sync state; however, autoresynchronozation does not run on the device. You can manually resynchronize a device in such a case. NSOR with automatic resynchronization disabled is not equivalent to SSOR: manually resynchronizing under NSOR updates the values in the Junos Space Network Management Platform database to reflect those on the device. This never happens under SSOR, where the Junos Space Network Management Platform database values have precedence over the device values, and synchronizing them involves pushing the database values to the device, effectively resetting the device s out-of-band changes. Related Documentation Understanding How Junos Space Automatically Resynchronizes Managed Devices 7

26 Junos Space Administration 8

27 CHAPTER 2 Managing Junos Space Appliance Fabric Fabric Management Overview Fabric Management Overview on page 9 Overall System Condition and Fabric Load History Overview on page 17 You can deploy a Junos Space Appliance or a Junos Space Virtual Appliance to create a fabric that provides the scalability and availability that your managed network requires as you add more devices, services, and users. A Junos Space fabric comprises one or more IP-connected nodes. A node is a logical object that represents a single JA1500 Junos Space Appliance or Junos Space Virtual Appliance, its operating system, and the Junos Space Network Management Platform software that runs on the operating system. Each Junos Space Appliance or Junos Space Virtual Appliance that you install and configure is represented as a single node in the fabric. You can add nodes without disrupting the services that are running on the fabric. When you add nodes to the fabric, you can manage and monitor the nodes from the Administration workspace of the Junos Space Network Management Platform GUI. To add, manage, and monitor nodes in the fabric, a fabric administrator (that is, a user with the System Administrator privileges) connects to a single virtual IP address, as shown in Figure 1 on page 10. 9

28 Junos Space Administration Figure 1: Fabric Nodes NOTE: All Junos Space Appliances (nodes) in a fabric must be from the same Junos Space Network Management Platform release. For example, a fabric can comprise Junos Space Release 1.1 Appliances or Junos Space Release 1.2 Appliances, but not both. Single-Node Functionality When the fabric comprises a single Junos Space Appliance, all devices in the managed network connect to that Junos Space Appliance. When you install and configure the Junos Space Appliance, Junos Space Network Management Platform automatically creates a fabric with one node. By default, a fabric that consists of a single node provides complete Junos Space Network Management Platform management functionality, with the following node functions enabled for the node: Load Balancer For processing HTTP requests from remote browsers and North Bound Interface (NBI) clients Database For processing database requests (for create, read, update, and delete operations) Application Logic For processing back-end business logic (Junos Space Network Management Platform service requests) and Device Mediation Layer (DML) workload (that is, any interaction between Junos Space and any device, such as device connectivity, device events, and logging events) NOTE: A fabric that comprises a single node provides no workload balancing and no backup if the Junos Space Appliance goes down. 10

29 Chapter 2: Managing Junos Space Appliance Fabric Multinode Functionality As your network expands with new devices, services, and users, you can add Junos Space Appliances to handle the increased workload. When you install and configure the first Junos Space Appliance, Junos Space Network Management Platform automatically creates a fabric with one node. For each additional Junos Space Appliance that you install and configure, you must add a node to logically represent that Junos Space Appliance in the fabric. Each node that you add to the fabric increases the resource pool for the node functions to meet the scalability and high availability requirements of your network. By default, Junos Space Network Management Platform automatically enables node functionality across the nodes in the fabric to distribute workload. The nodes in the fabric work together to provide a virtualized resource pool for each of the node functions: load balancer, database, and application logic. The Junos Space Network Management Platform node functions distribute the workload across operating nodes according to the following load-distribution rules: Load Balancer When a node that functions as the active load-balancer server is down, all HTTP requests are automatically routed to the standby load-balancer server that is running on a separate node. Database When a node that functions as the active database server is down, all database requests (for create, read, update, and delete operations) are routed to the node that functions as the standby database server. Application Logic (DML and business logic) Device connections and user requests are distributed among the nodes, and device-related operations are routed to the node to which the device is connected. Junos Space Network Management Platform uses the following algorithm to ensure that the number of devices connected to a node does not exceed the threshold limit for each node: Threshold Limit = [(Number of Devices in Database) / (Number of Nodes Running)] + 2 The following workflow describes how the node functions are enabled across the fabric as nodes are added: Adding the first node The load balancer, database, and application logic functions are enabled on the node. Each node function provides both scalability and high availability. Figure 2 on page 12 shows all functions enabled on a fabric comprising one node. 11

30 Junos Space Administration Figure 2: Fabric with One Node Adding the second node When a second node is added to the fabric, the first node functions as the active load-balancer server and active database server, and the second node functions as the standby load-balancer server and standby database server. The load-balancer and application logic node functions provide scalability and high availability. The database node function on the second node provides high availability only. Figure 3 on page 13 shows the functions enabled on a fabric comprising two nodes. 12