Building and Managing a Branch Office Network Using Junos Space Network Director

Transcription

1 Building and Managing a Branch Office Network Using Junos Space Network Director Release 1.6 Published:

2 Juniper Networks, Inc North Mathilda Avenue Sunnyvale, California USA All rights reserved. Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. [Insert Series Title] [Insert Book Title] All rights reserved. The information in this document is current as of the date on the title page. YEAR 2000 NOTICE Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the year However, the NTP application is known to have some difficulty in the year END USER LICENSE AGREEMENT The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement ( EULA ) posted at By downloading, installing or using such software, you agree to the terms and conditions of that EULA. ii

3 Table of Contents About the Documentation vii Documentation and Release Notes vii Documentation Conventions vii Documentation Feedback ix Requesting Technical Support x Self-Help Online Tools and Resources x Opening a Case with JTAC x Part 1 Network Director in a Branch Office Network Chapter 1 Introduction Understanding a Typical Branch Office Network Scenario A Branch Office Network Scenario Topology and Devices in the Branch Office Network Hardware and Software Requirements Network Director Chapter 2 Building the Network by Using Network Director Building the Network Discovering Devices Creating VLAN Profiles Creating Port Profiles Assigning Port Profiles to Devices and Ports Creating and Assigning an FC Gateway Services Profile Setting Up SSIDs Setting Up the Location of Devices Deploying Your Configurations Monitoring the Devices in Your Network Monitoring Devices Using the Monitor Mode Monitoring Devices Using the Topology View Part 2 Index Index iii

4 Junos Space Network Director Based Solutions iv

5 List of Tables About the Documentation vii Table 1: Notice Icons viii Table 2: Text and Syntax Conventions viii Part 1 Network Director in a Branch Office Network Chapter 1 Introduction Table 3: Details of Devices in the Branch Office Network Chapter 2 Building the Network by Using Network Director Table 4: VLAN Profile Settings Table 5: Port Profile Settings Table 6: Port Profile Assignment Details Table 7: Important Monitors v

6 Junos Space Network Director Based Solutions vi

7 About the Documentation Documentation and Release Notes Documentation and Release Notes on page vii Documentation Conventions on page vii Documentation Feedback on page ix Requesting Technical Support on page x Documentation Conventions To obtain the most current version of all Juniper Networks technical documentation, see the product documentation page on the Juniper Networks website at If the information in the latest release notes differs from the information in the documentation, follow the product Release Notes. Juniper Networks Books publishes books by Juniper Networks engineers and subject matter experts. These books go beyond the technical documentation to explore the nuances of network architecture, deployment, and administration. The current list can be viewed at Table 1 on page viii defines notice icons used in this guide. vii

8 Junos Space Network Director Based Solutions Table 1: Notice Icons Icon Meaning Description Informational note Indicates important features or instructions. Caution Indicates a situation that might result in loss of data or hardware damage. Warning Alerts you to the risk of personal injury or death. Laser warning Alerts you to the risk of personal injury from a laser. Tip Indicates helpful information. Best practice Alerts you to a recommended use or implementation. Table 2: Text and Syntax Conventions Table 2 on page viii defines the text and syntax conventions used in this guide. Convention Description Examples Bold text like this Represents text that you type. To enter configuration mode, type the configure command: user@host> configure Fixed-width text like this Italic text like this Represents output that appears on the terminal screen. Introduces or emphasizes important new terms. Identifies guide names. Identifies RFC and Internet draft titles. user@host> show chassis alarms No alarms currently active A policy term is a named structure that defines match conditions and actions. Junos OS CLI User Guide RFC 1997, BGP Communities Attribute Italic text like this Represents variables (options for which you substitute a value) in commands or configuration statements. Configure the machine s domain name: [edit] root@# set system domain-name domain-name viii

9 About the Documentation Table 2: Text and Syntax Conventions (continued) Convention Description Examples Text like this Represents names of configuration statements, commands, files, and directories; configuration hierarchy levels; or labels on routing platform components. To configure a stub area, include the stub statement at the [edit protocols ospf area area-id] hierarchy level. The console port is labeled CONSOLE. < > (angle brackets) Encloses optional keywords or variables. stub <default-metric metric>; (pipe symbol) Indicates a choice between the mutually exclusive keywords or variables on either side of the symbol. The set of choices is often enclosed in parentheses for clarity. broadcast multicast (string1 string2 string3) # (pound sign) Indicates a comment specified on the same line as the configuration statement to which it applies. rsvp { # Required for dynamic MPLS only [ ] (square brackets) Encloses a variable for which you can substitute one or more values. community name members [ community-ids ] Indention and braces ( { } ) ; (semicolon) Identifies a level in the configuration hierarchy. Identifies a leaf statement at a configuration hierarchy level. [edit] routing-options { static { route default { nexthop address; retain; } } } GUI Conventions Bold text like this Represents graphical user interface (GUI) items you click or select. In the Logical Interfaces box, select All Interfaces. To cancel the configuration, click Cancel. > (bold right angle bracket) Separates levels in a hierarchy of menu selections. In the configuration editor hierarchy, select Protocols>Ospf. Documentation Feedback We encourage you to provide feedback, comments, and suggestions so that we can improve the documentation. You can provide feedback by using either of the following methods: Online feedback rating system On any page at the Juniper Networks Technical Documentation site at simply click the stars to rate the content, and use the pop-up form to provide us with information about your experience. Alternately, you can use the online feedback form at ix

10 Junos Space Network Director Based Solutions Send your comments to Include the document or topic name, URL or page number, and software version (if applicable). Requesting Technical Support Technical product support is available through the Juniper Networks Technical Assistance Center (JTAC). If you are a customer with an active J-Care or JNASC support contract, or are covered under warranty, and need post-sales technical support, you can access our tools and resources online or open a case with JTAC. JTAC policies For a complete understanding of our JTAC procedures and policies, review the JTAC User Guide located at Product warranties For product warranty information, visit JTAC hours of operation The JTAC centers have resources available 24 hours a day, 7 days a week, 365 days a year. Self-Help Online Tools and Resources For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called the Customer Support Center (CSC) that provides you with the following features: Find CSC offerings: Search for known bugs: Find product documentation: Find solutions and answer questions using our Knowledge Base: Download the latest versions of software and review release notes: Search technical bulletins for relevant hardware and software notifications: Join and participate in the Juniper Networks Community Forum: Open a case online in the CSC Case Management tool: To verify service entitlement by product serial number, use our Serial Number Entitlement (SNE) Tool: Opening a Case with JTAC You can open a case with JTAC on the Web or by telephone. Use the Case Management tool in the CSC at Call JTAC ( toll-free in the USA, Canada, and Mexico). x

11 About the Documentation For international or direct-dial options in countries without toll-free numbers, see xi

12 Junos Space Network Director Based Solutions xii

13 PART 1 Network Director in a Branch Office Network Introduction on page 3 Building the Network by Using Network Director on page 9 1

14 Junos Space Network Director Based Solutions 2

15 CHAPTER 1 Introduction Understanding a Typical Branch Office Network Scenario on page 3 A Branch Office Network Scenario on page 3 Topology and Devices in the Branch Office Network on page 4 Hardware and Software Requirements Network Director on page 7 Understanding a Typical Branch Office Network Scenario A typical branch office consists of end users using desktop computers, laptop computers, mobile devices, and servers for their day to day work. The underlying network to support such an office typically consists of an array of campus switches, data center switches, wireless LAN controllers, and access points. The administrative overhead to maintain such a network could be quite high. Each switch, controller, and server must be managed independently by one of more network administrators one device at a time. This can be a time consuming and tedious task, especially when the network experiences congestion or packet drops. You can install and configure Junos Space Network Director in your office network to automate routine management tasks such as network provisioning and troubleshooting to improve operational efficiency and reliability. Network Director provides an environment for unified management of Juniper Networks WLC Series Wireless LAN Controllers (WLCs), EX Series Ethernet Switches, EX Series switches with ELS, QFX Series switches, MX Series routers with ELS, QFabric devices, Virtual Chassis Fabrics, and Virtual devices in your network. By providing full network life cycle management, Network Director simplifies the discovery, configuration, visualization, monitoring, and administration of large networks. Operators can quickly deploy a network, configure it optimally to increase network uptime and maximize resources, and respond agilely to the needs of applications and users. Related Documentation Topology and Devices in the Branch Office Network on page 4 Building the Network on page 9 A Branch Office Network Scenario As an example, let us consider a branch office that uses the following end user devices: 3

16 Junos Space Network Director Based Solutions desktop computers wireless devices (laptop computers, smart phones, PDAs, and so on) that use the office wireless network IP phones To have the network fully functional, the branch office network administrators must: Set up a data (wired and wireless) and voice network in the office. Create a 802.1X-based SSID for all employees wireless access. Create an open SSID for wireless access for guest users (with ACL). Once the network is fully functional, the network administrators must be able to manage and monitor all network devices from any location. To support this kind of a network, various network devices need to be deployed. In this scenario, the IT team has procured the following network devices, keeping future expansions in mind: Two EX4200 Ethernet switches One EX4300 Ethernet switch Two EX4500 Ethernet switches One EX9200 Ethernet switch One QFX3500 datacenter switch One WLC2800 controller Two WLA322 access points In addition to these Juniper Networks devices, the IT team has also procured and configured the following third-party devices: A virtual server that hosts a DHCP server and a RADIUS server in two virtual machines each. An FCoE server that converts Ethernet packets to fiber channel (FC) packets and vice-versa. A storage area network (SAN) for storing data. The management of the branch office network built using these devices can be automated by using Network Director. Related Documentation Topology and Devices in the Branch Office Network You can realize all the networking objectives of the branch office described in the previous section by using Network Director. To do this, perform the following tasks: 4

17 Chapter 1: Introduction Ensure physical connectivity between the networking devices You must physically connect the devices as shown in Figure 1 on page 5. Details of devices and the role that they play in this network are described in Table 3 on page 5. Figure 1: Network Physical Topology Table 3: Details of Devices in the Branch Office Network Device Device Name Role IP Address Interface QFX3500 dc-qfx Transit switch XE-0/0/0 to XE-0/0/6 ge-0/0/7 to ge-0/0/41 fc-0/0/42 to fc-0/0/47 EX9200 abc-cr-ex Core switch ge-0/0/0 to ge-0/0/39 5

18 Junos Space Network Director Based Solutions Table 3: Details of Devices in the Branch Office Network (continued) Device Device Name Role IP Address Interface WLC2800 cm-wlc01 Controller EX4500 abc-ag-ex Aggregation switch ge-0/0/0 to ge-0/0/39 EX4500 abc-ag-ex Aggregation switch ge-0/0/0 to ge-0/0/39 EX4200 abc-ac-ex Access switch ge-0/0/0 to ge-0/0/47 EX4300 abc-ac-ex Access switch ge-0/0/0 to ge-0/0/47 EX4200 abc-ac-ex Access switch ge-0/0/0 to ge-0/0/47 Install Network Director Install Network Director and make sure that all the networking devices are reachable from the Network Director system by using the Ping command. See Hardware and Software Requirements Network Director on page 7 for hardware and software requirements for installing Network Director. Build your network in Network Director You can do this by discovering the devices, creating all the necessary profiles, and deploying these profiles to the devices. By this, you are creating a logical network on top of your physical network. The logical network consists of a series of VLANs applied to one or more interfaces of the networking devices by using Port profiles as shown in Figure 2 on page 7. For detailed steps on building your network, see Building the Network on page 9. 6

19 Chapter 1: Introduction Figure 2: Network Logical Topology Deploy and monitor changes on devices Once you create the profiles you must to deploy the configuration to the devices in the network. Network Director provides you with an efficient and flexible means of the deploying the configuration using the Deploy mode. Related Documentation Building the Network on page 9 Hardware and Software Requirements Network Director on page 7 Hardware and Software Requirements Network Director NOTE: If you have already installed Network Director, you can skip this section. The hardware and software requirements for the topology are listed below. 7

20 Junos Space Network Director Based Solutions Hardware requirements: JA2500 Junos Space Physical Appliance. This is a Juniper Networks dedicated, physical, hardware device that is engineered to provide computing power and specific requirements needed to install and run Junos Space applications. Junos Space Virtual Appliance deployed on a VMware ESX or VMWare ESXi server. NOTE: VMware ESX or VMWare ESXi server provides a CPU, hard disk, RAM, and a network controller, but requires installation of an operating system and applications to become fully functional. Software requirements: Junos Space Management Platform Release 13.3R2 Network Director Release 1.6 For step-by-step instructions on installing hardware and software for Network Director, see Network Director Quick Start Guide. Related Documentation Building the Network on page 9 8

21 CHAPTER 2 Building the Network by Using Network Director Building the Network Building the Network on page 9 Deploying Your Configurations on page 21 Monitoring the Devices in Your Network on page 22 After you have installed Network Director, you can use the Build mode to build your network. Build mode provides you with the ability to use device discovery to bring devices under Network Director management, customize your view of the devices, to configure devices, and perform common device management tasks. This section describes: Discovering Devices on page 9 Creating VLAN Profiles on page 11 Creating Port Profiles on page 12 Assigning Port Profiles to Devices and Ports on page 14 Creating and Assigning an FC Gateway Services Profile on page 16 Setting Up SSIDs on page 17 Setting Up the Location of Devices on page 18 Discovering Devices When you start Network Director for the first time, there are no devices present in the Network Director s inventory. You must build your network by discovering devices and adding them to the network. You can use the device discovery wizard to add devices to the network. In the Device discovery task you specify the target devices, the discovery options, and the schedule options in the Device Discovery wizard. 9

22 Junos Space Network Director Based Solutions To add the devices depicted in the topology: 1. Click in the Network Director banner. The banner is the top blue strip that displays the different modes of Network Director. It also enables you to set preferences, open Junos Space, or get help. 2. Select Logical View from the View Selector. You can add devices to Network Director by selecting the device discovery task. 3. Click Device Discovery > Discover Devices in the Tasks pane. The Discover Devices page appears. 4. In the Device Targets wizard page, click Add in the Device Targets table to add individual devices by specifying the IP address and credentials of the devices. The Add Device Target dialog box appears. 5. Select the IP-Range option. In our topology, the IP addresses of the devices in the network range from through Specify the range. Alternatively, you can select the HostName option and enter the hostname of each device that you want Network Director to discover and manage. 6. Click Add to save the target devices that you specified, or click Add More to add more target devices. When you have added all target devices, click Next. 7. In the Discovery Options wizard page, click Add in the Device Credentials table and specify the administrator username and password. The username and password must match the name and password configured on the device. 8. Specify the probes from the Specify Probes table. Select both the Use Ping and the Use SNMP check boxes to enable Network Director for faster discovery of each target device, provided the device is pingable and also SNMP is enabled on the device. 9. Click Add and specify the SNMP details that you have configured on the device. 10. Click Next. 11. In the Schedule Options wizard page, select Run Now and click Next. 12. Review the discovery settings in the Review wizard page and click Finish. A message window opens, displaying the status of the device discovery job name and job ID. Click OK. You can view the device discovery status from the View Discovery Status option from the Device Discovery menu. The Device Discovery Jobs page displays all the scheduled device discovery jobs. After the devices are discovered, the devices appear in the Device Inventory of Network Director. 10

23 Chapter 2: Building the Network by Using Network Director Creating VLAN Profiles VLAN profiles in Network Director enable you to create one or more VLANs and include them in a single profile. For the given office topology, you must create a VLAN profile for each VLAN that you plan to configure. This section describes how you can create a VLAN profile and the key settings that you need to specify for each VLAN profile. To create VLAN profiles: 1. Under Views, select one of these options: Logical View, Location View, Device View or Custom Group View. TIP: Do not select Dashboard View, Virtual View, or Topology View. 2. Click in the Network Director banner. 3. To create a VLAN profile for the wired network, select Wired network from the Tasks pane and click VLAN. 4. From the Manage VLAN Profiles page, click Create to create a new profile. 5. Select Switching (EX) as the device family in the Device Family Chooser window and click OK. 6. In the Create VLAN Profile page, enter the first VLAN profile name as VLAN-EX-data. We will use this VLAN for all the data traffic that traverses the EX4200 access switches. 7. Enter the VLAN name as VLAN30 and optionally enter a description about this VLAN. 8. In the VLAN ID section, select Single and enter 30 as the VLAN ID. 9. Click Next. the Advanced Settings page opens. Let us not specify any advanced settings for this profile now. You can specify advanced settings later by modifying the VLAN profile. 10. Click Next. 11. Review the VLAN settings and click Finish to create the VLAN. The VLAN profile you created appears in the Manage VLAN Profile page. 12. Repeat Steps 1 through 11 to create VLAN profiles with settings described in Table 4 on page 11 for other VLANs in your network. Table 4: VLAN Profile Settings Type of Network Device Family Profile Name VLAN Name VLAN ID Wired Switching (EX) VLAN-EX-voice VLAN20 20 Wired Switching (EX) VLAN-EX-wireless-ap VLAN10 10 Wired Campus Switching ELS VLAN-ELS-data VLAN

24 Junos Space Network Director Based Solutions Table 4: VLAN Profile Settings (continued) Type of Network Device Family Profile Name VLAN Name VLAN ID Wired Campus Switching ELS VLAN-ELS-voice VLAN20 20 Wired Campus Switching ELS VLAN-ELS-wireless-ap VLAN10 10 Wired Campus Switching ELS VLAN-ELS-dc VLAN60 60 Wireless Wireless VLAN-EX-wireless VLAN10 10 TIP: Once you have created a profile for each device family, you can use the Clone task, which is available from the Manage VLAN Profile page to make copies of these profiles and make the necessary modifications. This saves time especially when you create a large number of profiles. For details about the various VLAN profile settings, see Creating and Managing VLAN Profiles. Creating Port Profiles Port profiles provide a convenient way of provisioning interfaces on switches. For our topology, you must create a number of Port profiles and include the VLAN profiles that we created in the previous section in these Port profiles. We will assign the Port profile to interfaces on one or more switches, including aggregated Ethernet interfaces. For the configuration created by the profile to take effect on the devices, you must use Deploy mode to deploy the configuration on the devices. To create Port profiles: 1. Under Views, select one of these options: Logical View, Location View, Device View or Custom Group View. TIP: Do not select Dashboard View, Virtual View, or Topology View. 2. Click in the Network Director banner. 3. Select Wired network from the Tasks pane and click Port. From the Manage Port Profiles page, click Add to create a new Port profile. 4. Select Switching (EX) as the device family in the Device Family Chooser window and click OK. 5. In the Create Port Profile page, enter the first Port profile name as Port_EX_data. We will include the VLAN profile that we created to carry data to this Port profile and assign the Port profile to the appropriate ports on the EX4200 access switches. 12

25 Chapter 2: Building the Network by Using Network Director 6. Select the Service Type as Desktop Phone Port. Depending on the service type you select, Network Director adds the appropriate configurations that are applicable to the selected service type, to the profile. For example, Network Director attaches a default CoS profile and assigns the port mode for the profile. Let us not specify any Authentication profile or Filter profile now. 7. In the VLAN Options section, enter the Member VLAN as VLAN-EX-data and the Voice VLAN as VLAN-EX-voice. 8. Click Finish to create the Port profile. The Port profile you created appears in the Manage Port Profile page. 9. Repeat Steps 1 through 8 to create Port profiles with settings described in Table 5 on page 13. Table 5: Port Profile Settings Device Family Profile Name Service Type Member VLAN Native VLAN Voice VLAN Switching (EX) Port_wireless Desktop Port VLAN-EX-wireless-ap Switching (EX) Port_EX_Aggregated_UL Switched Uplink VLAN-EX-data VLAN-EX-voice VLAN-EX-data VLAN-EX-wireless-ap Campus Switching ELS Port_ELS_Aggregated_UL Switched Uplink VLAN-EX-data VLAN-EX-voice VLAN-EX-data Data Center Switching non ELS Port_EX_Aggregated_DL Switched Downlink VLAN-EX-data VLAN-EX-voice VLAN-EX-data VLAN-EX-wireless-ap Campus Switching ELS Port_ELS_Aggregated_DL Switched Downlink VLAN-EX-data VLAN-EX-voice VLAN-EX-data VLAN-EX-wireless-ap Campus Switching ELS Port_ELS_voice_data Desktop Phone Port VLAN-ELS-data VLAN-ELS-voice Campus Switching ELS Port_ELS_wireless Wireless Access Port VLAN-ELS-wireless Campus Switching ELS Port_ELS_dc Switched Downlink VLAN-ELS-dc 13

26 Junos Space Network Director Based Solutions Once you have created a Port profile for each device family, you can use the Clone task, which is available from the Manage Port Profile page, to make copies of these profiles and make the necessary modifications. This saves time especially when you create a large number of profiles. For details about the various Port profile settings, refer to Creating and Managing Port Profiles. In addition to these Port profiles, you need to create and deploy VLAN and Port profiles for data to move back and forth between the FCoE server to the SAN (storage area network) through the QFX3500. Network Director enables you to set up these VLAN profiles and Port profiles by using the FC Gateway Service profile task. For detailed steps, see Creating and Assigning an FC Gateway Services Profile on page 16. Assigning Port Profiles to Devices and Ports You can assign an existing user-generated or system-generated Port profile to network interfaces (including aggregated Ethernet interfaces), or Port Group member interfaces on one or more devices. During the process of assigning a Port profile to interfaces, you can also: Configure IPv4 or IPv6 addresses on interfaces to which you have assigned a Port profile. TIP: IPv4 filters and IPv6 filters are separate. Configure authentication attributes such as the RADIUS server or servers to use for all 802.1X interfaces on the device. Because configuring these attributes involves assigning an Access profile to the device, you must have previously created an Access profile. To assign a Port profile to interfaces: 1. Click in the Network Director banner. 2. Under Select View, select one of the following views: Logical View, Location View, Device View, or Custom Group. TIP: Do not select Virtual View or Topology View. 3. In the Tasks pane, select Wired > Profiles > Port. The Manage Port Profile page is displayed. 4. Select the Port profile you want to assign and then click Assign. The Assign Port Profile wizard appears. 5. In the Device Selection wizard page, select the devices to which you want to assign the selected Port profile and click Next. 14

27 Chapter 2: Building the Network by Using Network Director 6. In the Assignments table of the Profile Assignment wizard page, select a device and click Assign to Port. 7. In the Assign to Port window, select the port or ports to which you want to assign the profile and click Assign. 8. Click Finish. Table 6: Port Profile Assignment Details For our branch office network, assign the Port profiles that we created in the previous section to various devices as described in Table 6 on page 15. Device Family Port Profile Device Ports Family Port Mode Switching (EX) Port_wireless abc-ac-ex abc-ac-ex ge-0/0/20 ge-0/0/21 ge-0/0/22 ge-0/0/23 ge-0/0/24 ge-0/0/25 Switching (EX) Port_EX_voice abc-ac-ex abc-ac-ex ge-0/0/10 ge-0/0/11 ge-0/0/12 ge-0/0/13 ge-0/0/14 ge-0/0/15 Switching (EX) Port_EX_data abc-ac-ex abc-ac-ex ge-0/0/0 ge-0/0/1 ge-0/0/2 ge-0/0/3 ge-0/0/4 ge-0/0/5 Campus Switching ELS Port_ELS_voice_data abc-ac-ex4300 ge-0/0/0 ge-0/0/1 ge-0/0/2 ge-0/0/3 ge-0/0/4 ge-0/0/5 Campus Switching ELS Port_ELS_wireless abc-ac-ex4300 ge-0/0/10 ge-0/0/11 ge-0/0/12 ge-0/0/13 ge-0/0/14 ge-0/0/15 Switching (EX) Port_EX_Aggregated_UL abc-ag-ex abc-ag-ex ge-0/0/36 ge-0/0/37 ge-0/0/38 ge-0/0/39 15

28 Junos Space Network Director Based Solutions Table 6: Port Profile Assignment Details (continued) Device Family Port Profile Device Ports Family Port Mode Switching (EX) Port_EX_Aggregated_DL abc-ag-ex abc-ag-ex ge-0/0/32 ge-0/0/33 ge-0/0/34 ge-0/0/35 Campus Switching ELS Port_ELS_Aggregated_UL abc-cr-ex ge-0/0/36 ge-0/0/37 ge-0/0/38 ge-0/0/39 Campus Switching ELS Port_ELS_Aggregated_UL abc-cr-ex ge-0/0/32 ge-0/0/33 ge-0/0/34 ge-0/0/35 Campus Switching ELS Port_ELS_wireless abc-cr-ex ge-0/0/28 ge-0/0/29 ge-0/0/30 ge-0/0/31 Campus Switching ELS Port_ELS_dc abc-cr-ex ge-0/0/24 ge-0/0/25 ge-0/0/26 ge-0/0/27 Data Center Switching Non ELS Port_ELS_fcoe dc-qfx ge-0/0/7 Creating and Assigning an FC Gateway Services Profile An FC Gateway Service profile provides a quick way to configure Fibre Channel (FC) gateways on Data Center Switching devices. It is intended for FC gateway devices that are connected directly to the FCoE network, without transit switches. To create an FC Gateway Service profile: 1. Select Wired network from the Tasks pane and click FC Gateway Service. From the Manage FC Gateway Services Profile page, click Add to create an FC Gateway profile. The Create FC Gateway Services Profile page opens. 2. Specify a name for the profile. 3. Enter an FC gateway fabric ID number from 1 through Enter VLAN_60 and 60 as the FCoE VLAN name and ID respectively. 5. Enter VLAN_50 and 50 as the Native VLAN name and ID respectively. 6. Accept the default values for all other fields and click Done. 16

29 Chapter 2: Building the Network by Using Network Director 7. From the Manage FC Gateway Services Profile page, select the profile that you created and click Assign. 8. From the Device Selection wizard page, select dc1-qfx3500 and click Next. 9. In the Assignments table of the Profile Assignment wizard page, select the device and click Assign to Port. 10. In the Assign to Port window, select xe-0/0/6 and fc-0/0/42 as the ports to assign the profile. Make sure that the ae port you select is of type Trunk. 11. Click Assign. 12. Click Next in the Profile Assignment wizard page. 13. Review the assignments and click Finish. After you assign an FC Gateway Service profile to a device, you can deploy the profile from the Deploy mode. Setting Up SSIDs You can use the WLAN Setup task to create and configure one or more SSIDs. To set up an SSID, you must create a Service profile in the Setup WLAN page. To set up WLAN and create SSIDs: 1. Under Views in the Network Director banner, select either Logical View, Location View, Device View, or Custom Group View. TIP: Do not select Dashboard View, Virtual View, or Topology View. 2. Click in the Network Director banner. 3. In the Tasks pane, expand Wireless, expand Tasks, and then click WLAN Setup. The WLAN Setup page opens, displaying the WLAN Setup wizard. The wizard consists of three parts, Create Radio Profile, Assignment, and Summary. 4. In the Create Radio Profile wizard page, enter a name and description for the Radio profile. 5. In the WLAN Service Profile table, click Create. The Create WLAN Service Profile for Radio Profile window opens. Required fields are identified by a red asterisk. 6. Create two Service profiles with 802.1X Service Profile and Open Access Service Profile as the Service Profile Type. Specify fields in the Create WLAN Service Profile for Radio Profile window as shown in Figure 3 on page

30 Junos Space Network Director Based Solutions Figure 3: Service Profile Settings for Secure and Open SSIDs 7. Click OK to save the service profiles. 8. Select the version of auto-tuning that corresponds to the version of the MSS operating system that is installed in the controller. 9. Click Next. The Assign Radios wizard page opens. 10. Select the controller from the Select WLC tree and click Select in the Select Radios table. The Assign Profiles to Radios window opens. 11. Select one or more radios and click Assign. 12. Click Next to open the Review wizard page. 13. Review the WLAN settings and click Finish. Setting Up the Location of Devices Setting up locations that is, creating sites, buildings, floors, closets, and outdoor areas that reflect the physical location of your network devices enables administrators to monitor and troubleshoot the network using the Topology View. You can define the physical location of the devices in the network in a hierarchical way, and define location entities in a site down to the wiring closet. To set up your Location View: 1. Click Build in the Network Director banner to enter Build mode; select Location View or Topology View from the View selector. 2. If you are accessing the Location Setup page from the Location View, select the root node (for example, My Network) in the View pane. 18

31 Chapter 2: Building the Network by Using Network Director 3. Do one of the following depending on the view you are in: From the Tasks pane in the Location View, select Location Management > Setup Locations. From the Tasks pane in the Topology View, select Location > Setup Locations. The Location Setup page opens. 4. Click Add Site to add a new site. Network Director adds a new site under the root node and names it as Site Select the new site and perform any of the following actions: Click Edit Site to modify the name of the site and specify the site address. The Edit Site window opens. Topology View uses this address to place the devices assigned to this site on the topology map. Click Add Building to add a building to your site. Network Director adds a new building under the site and names it as Building-1. Click Outdoor Area to add an outdoor area to your site. Network Director adds a new outdoor area under the site and names it as Outdoor Area-1. You can associate an outdoor area to a site or a building for wireless coverage and upload an image or map of that area. After you designate an outdoor area, you can edit or view the map using the Edit Outdoor Area task. Click Delete to delete the site. 6. If you added a building, select the building and perform any of the following actions to continue building your network: Click Add Floor to add floors to the building. Click Assign Device to assign devices to the selected building. The Associate Devices to Building window opens displaying all the unassigned devices in your network. Select the devices that you want to add to the building and click Add. Network Director adds the selected devices to the network tree. Click Edit Building to edit the name and address of the building. Click Delete to delete the building. 7. If you added an outdoor area, select the outdoor area and perform any of the following actions to continue building your network: Click Assign Device to assign devices to the selected outdoor area. The Associate Devices to Outdoor window opens displaying all the unassigned devices in your network. Select the devices that you want to add to the building and click Add. Click Edit Outdoor Area to edit the name of the outdoor area and to upload the image of the outdoor area. Click Delete to delete the building. 19

32 Junos Space Network Director Based Solutions 8. If you added a floor to the building, select the floor and perform any of the following actions to continue building your network: NOTE: You can add aisles and racks to a floor only from Location view. However, you can view aisles, racks, and devices that you have assigned to these components from Topology View. Click Add Closet to add a wiring closet to the floor. Click Add Aisle to add an aisle to the floor. Click Assign Device to assign devices to the selected floor. The Associate Devices to Floor window opens displaying all the unassigned devices in your network. Select the devices that you want to add to the floor and click Add. Click Edit Floor to modify the name of the floor, floor level and upload the floor plan. Click Delete to delete the floor. 9. If you added a wiring closet, select the wiring closet and perform any of the following actions: Click Assign Device to assign devices to the selected closet. The Associate Devices to Closet window opens displaying all the unassigned devices in your network. Select the devices that you want to add to the closet and click Add. Click Edit Closet to modify the name of the wiring closet. In the Edit Closet window, modify the wiring closet name and click Done. Click Delete to delete the wiring closet. 10. If you added an aisle, select the aisle and perform any of the following actions: NOTE: You can add aisles and racks to a floor only from Location View. However, you can view aisles, racks, and devices that you have assigned to these components from Topology View. Click Add Rack to add a rack to the aisle. Click Edit Aisle to modify the name of the aisle. In the Edit Aisle window, modify the name and click Done. Click Delete to delete the aisle. 11. If you added a rack, select the rack and perform any of the following actions: NOTE: You can add aisles and racks to a floor only from Location View. However, you can view aisles, racks, and devices that you have assigned to these components from Topology View. 20

33 Chapter 2: Building the Network by Using Network Director Click Assign Device to assign devices to the selected rack. The Associate Devices to Rack window opens displaying all the unassigned devices in your network. Select the devices that you want to add to the rack and click Add. Click Edit Closet to modify the name of the rack. In the Edit Rack window, modify the name and click Done. Click Delete to delete the rack. 12. Click Done to save the location details. Network Director displays the location details along with the assigned devices in Location View. Network Director also displays devices laid out on the map according to their locations in Topology View. Related Documentation Deploying Your Configurations on page 21 Deploying Your Configurations The Deploy mode enables you to deploy configuration changes and software upgrades to devices and perform several device management and configuration file management tasks. When you make configuration changes in the Build mode, changes are not deployed to devices automatically. You must manually deploy the changes to devices in Deploy mode. Every time you make configuration changes in Build mode that affect a device, the device is automatically added to the list of devices with pending changes. Configuration changes are deployed to devices at the device level. When you deploy configuration changes to a device, all pending configuration changes for that device are deployed. To start deploying configuration changes: 1. Click Deploy in the Network Director banner. 2. In the Tasks pane, select Configuration Deployment > Deploy Configuration Changes. The Devices with Pending Changes page opens in the main window, listing the devices within the selected node that have pending configuration changes. 3. Select the device or devices in the Devices with Pending Changes page. 4. Click Deploy Now. The Deploy Options window opens. 5. In the Deploy Options window, enter a job name in the Deployment Job Name field; then click OK. The configuration deployment job runs. The Deploy Configuration window opens and displays the results of the deployment job. For detailed procedure on deploying configuration changes to devices, see Deploying Configuration to Devices. 21

34 Junos Space Network Director Based Solutions Related Documentation Monitoring the Devices in Your Network on page 22 Monitoring the Devices in Your Network You can monitor the devices in your network by using any of the following methods: Monitoring Devices Using the Monitor Mode on page 22 Monitoring Devices Using the Topology View on page 24 Monitoring Devices Using the Monitor Mode Monitor mode in Network Director provides you visibility into your network status and performance. Network Director monitors its managed devices and maintains the information it collects from the devices in a database. Monitor mode displays this information in easy-to-understand graphs and in tables that you can sort and filter, enabling you to quickly visualize the state of your network, spot trends developing over time, and find important details. Monitor mode divides monitoring activity into the following categories: Traffic Provides information about traffic on switches, wireless LAN controllers, and interfaces. Client Provides session information about clients connected to wireless access points and to 802.1X authenticator switch ports. RF Provides information about the wireless environment and signal performance. Equipment Provides information about the state of switches, wireless LAN controllers, interfaces, wireless access points, and radios. Fabric Analysis Displays the results of running the Run Fabric Analyzer task on a QFabric or Virtual Chassis Fabric (VCF). It shows information about the health, connectivity, and topology of the fabric. To use Monitor mode to analyze the health of your network: 1. Click Monitor in the Network Director banner. 2. Select My Network, switch or wireless controller in the View pane that contains the traffic you want to monitor. 3. Select an appropriate tab in the Monitor page to view monitors for that category. Some important monitors that you can use are listed in Table 7 on page 22. Table 7: Important Monitors Category Task Description Scope Summary Find End Point Finds end points that match supplied attributes and returns information about the location of the end points on the network. My Network, Switches, Unassigned, and EX Series switch 22

35 Chapter 2: Building the Network by Using Network Director Table 7: Important Monitors (continued) Category Task Description Scope Summary Find User Session Finds client sessions that match supplied attributes and returns information about the sessions. My Network Summary Latency Congestion Shows latency congestion information based on high-frequency statistics data. Any Summary Port Utilization Trend Displays a graph showing the trend of bandwidth use for all the ports on all the devices in the selected scope over the last hour. My Network, mobility domain, standalone switch, Virtual Chassis, or wireless LAN controller, locations Summary Select Monitors to display Selects the monitors that are displayed in the Summary tab My Network Traffic Compare Device Statistics Compares statistics from multiple devices in real time. Any Traffic Current Port Utilization For each port on the selected device, shows the current percentage of port capacity in use. Any RF Interference Sources Displays the sources of interferences detected by the selected radio. Radios only RF RF Neighborhood Displays a list radios that are in the vicinity of the selected radio. These radios are either radios that the selected radio detects or radios that detect the selected radios. Radios only Equipment Logical Interfaces Displays the status of the Ethernet switching interfaces on the device, including aggregated Ethernet interfaces. Information includes VLAN membership, STP state, and port mode. Standalone switch, Virtual Chassis 4. To get help for a monitor, click the Help button in its title bar. 23

36 Junos Space Network Director Based Solutions Monitoring Devices Using the Topology View Once you have set up the physical location of the devices in your network, you can start monitoring these devices from the Topology View. Topology View enables you to view all the discovered devices in your network, overlaid on a map where the devices are located across sites, buildings, floors, outdoor area, closets, and racks along with their physical interconnection with other devices in your network. Topology View also provides visualization around physical connectivity between various discovered interconnected devices. You can use the Topology View to zoom in or zoom out of a site to a building and a building to a site. In the Topology View, you can also double-click a node such as a site, building, and so on to navigate to the next node. You can also see the connectivity between a device and its immediate neighbors, details of alarms, and so on. You can also upload a floor plan at the floor level or a map at the outdoor area if you already have the floor plan or map available. To use the Topology View to monitor devices: 1. Select Topology from the Network View Selector. Network Director lays out the sites that you created in Location View, in the topology map. Network Director uses the location that you specified for each site and building to place them on the map. 2. Click Discovery > Refresh Discovery from the Tasks menu to refresh the topology of devices. Network Director refreshes the Topology View for all the devices that you have added to Topology View. After a successful discovery, you can select and view the connectivity of a particular device to its immediate neighbors by using the tasks in the Connectivity section of the Tasks pane. 3. You can monitor the following details from the Topology View, which you can use to analyze the health of your network: Alarm Details You can view alarm details at site, building, floor, closet, aisle and rack levels. Based on the location node, the alarms are aggregated and displayed. That is, all the alarms for a particular building are aggregated and displayed at the building level. The alarms display as red, orange, yellow, or blue dots indicating critical, major, minor, and information alarms. Network Director updates and displays the alarm status changes in real time in the Topology View. Device Connectivity At the device level, you can view the connectivity details of a device and the details of all the devices that are connected to the specified device. The Device Connectivity View also displays various details about the selected device and its immediate neighbors. The level of detail that Network Director displays in the Device Connectivity View depends on the type of device that you select. To view the connectivity, navigate to a device in a building, floor, outdoor area, closet, or rack, select the device for which you want to view the connectivity details, and click Connectivity > View Device Connectivity from the Topology Tasks pane. The Device Connectivity page opens. You can view the device connectivity details either in graphical view or in grid view 24

37 Chapter 2: Building the Network by Using Network Director Related Documentation Understanding Monitor Mode in Network Director Managing the Topology View 25

38 Junos Space Network Director Based Solutions 26

39 PART 2 Index Index on page 29 27

40 Junos Space Network Director Based Solutions 28

41 T technical support contacting JTAC...x Index Symbols #, comments in configuration statements...ix ( ), in syntax descriptions...ix < >, in syntax descriptions...ix [ ], in configuration statements...ix { }, in configuration statements...ix (pipe), in syntax descriptions...ix B braces, in configuration statements...ix brackets angle, in syntax descriptions...ix square, in configuration statements...ix C comments, in configuration statements...ix conventions text and syntax...viii curly braces, in configuration statements...ix customer support...x contacting JTAC...x D documentation comments on...ix F font conventions...viii M manuals comments on...ix P parentheses, in syntax descriptions...ix S support, technical See technical support syntax conventions...viii 29