Upload
david-zambrano
View
213
Download
0
Embed Size (px)
Citation preview
Avaya Aura System Manager Administering User Profiles
2011. All rights reserved. 2
Course Outline
SMGRs place in the enterprise network
SMGRs permissions model
Creating new SMGR administrators
SMGR Roles
SMGR Groups
2011. All rights reserved.
By the end of this lesson, you should
3
Course Objectives
Know how to:
Create SMGR administrators
Apply existing roles to new users
Create new groups & add users to them
Create new roles and define privileges
Avaya Aura System Manager
Setting the Scene
Focus on the Enterprise
What part does SMGR play in
???
2011. All rights reserved. 6
SMGR in Avaya Aura
Central Product Management
Administration
Configuration
Licensing
User Profile Management
Admins / communication users
Central User Profile
User info shared
RBAC Role Based Access Control
2011. All rights reserved. 7
Unified
Communications
Avaya Aura user
Login
Name, Address, Contact
Service Profile
App Sequencing
CM / SM associations
2011. All rights reserved. 8
Managing the Network
Avaya Aura User Profile
Unified information shared across multiple services
Application profile
Presence
CM Phone stations
9
Enterprise Administration
Toolwire Student Information
135.122.80.71 135.122.80.55
135.122.80.72 135.122.80.57
135.122.80.73 135.122.80.157
135.122.80.74 135.122.80.177
Student01
Student02
Student03
Student04
Training lab
Avaya Aura System Manager Using System Manager
2011. All rights reserved. 13
Login https://ip/SMGR
admin
Tr@1ning
2011 All rights reserved.
Exercise:
14
Login to SMGR
Use your Classroom Info txt document to find your assigned SMGR IP
Launch browser, login using the URL:
https://serverIP/
Initial password:
admin / Tr@1ning
2011. All rights reserved. 15
System Manager Home page
Current log
on info
Task oriented views
2011. All rights reserved. 16
Navigation only shows options for current view
Tabs instead of long pages
State preserved as you navigate between tabs
System Manager Navigation
2011. All rights reserved. 17
Tabbed Navigation
SMGR will automatically create tabs for pages visited
Tabs allow you to quickly navigate back and forth
Can have up to 5 open at
once (plus the Home tab)
2011. All rights reserved. 18
Lets think about the enterprise
19
Enterprise Administration
20
Enterprise Administration
Administrators can be assigned to groups
2011. All rights reserved. 21
Roles / Permissions
Users assigned roles
Roles group together different permissions
Permissions provide access to SMGR resources (UI)
Resources allow you to perform tasks!
User UI Resource
SMGR Users & Permissions
2011. All rights reserved. 22
Resources
System Manager is controlled by its web console
By allocating permissions to admins, they unlock sections of the SMGR interface
SMGR Resources
2011. All rights reserved. 23
Roles
Roles group together different permissions
Provides a convenient way of assigning permissions en masse
2011. All rights reserved. 24
Roles
Role Y
The total permissions held by a user is the aggregate of all roles assigned to them
Role X
2011. All rights reserved. 25
Roles in practice
SMGR home page for user with the System Administrator role
All links available
System
Administrator
2011. All rights reserved. 26
Roles in practice
SMGR home page for user with the End User role
Many SMGR resources off limits (ghosted links)
End User
2011. All rights reserved. 27
Makes sense?
Good time to create some users
2011. All rights reserved. 28
Creating users is simple process
Once user is created, they can be assigned a role by the System Administrator
Creating Users How?
2011. All rights reserved. 29
Creating SMGR Users
Login name must be of the form [email protected]
Password for SMGR login
2011. All rights reserved. 30
Authentication Type
User Management User Creation
Corporate
Active Directory
LDAP
Local authentication
(If SMGR has been configured to speak to an LDAP backend)
2011. All rights reserved. 31
Creating SMGR Users
SMGR admins do not need special communication profiles
Communication profiles are service oriented explored in Avaya Aura Session Manager training
Leave as-is
2011. All rights reserved. 32
Creating SMGR Users
Multiple roles may be selected and assigned
Default Role = End User
2011. All rights reserved. 33
Creating SMGR Users
When youre ready, save the user by clicking Commit
2011 All rights reserved.
Exercise:
34
Create new user account
Define a new administrator user
the head sys admin
Provide:
Name
Password (use P@ssw0rd)
Login details
Assign System Administrator role
Test by logging in as your newly created user
2011. All rights reserved. 35
Avaya Aura Session Manager
Avaya Aura Communication Manager
Avaya Aura Communication Manager Messaging
Avaya Aura Modular Messaging
Avaya Aura Presence Services
Avaya Aura Conferencing
Etc
Products adopted SMGR for management
SMGR Adoption
2011. All rights reserved. 36
Avaya Aura Session Manager
Avaya Aura Communication Manager
Avaya Aura Communication Manager Messaging
Avaya Aura Modular Messaging
Avaya Aura Presence Services
Avaya Aura Conferencing
Etc
Products adopted SMGR for management
SMGR Adoption
MAS
CS 1000
SMGR also supports heritage Nortel services (UCM features)
2011. All rights reserved. 37
1. Manage adopting services
(admin task)
2. Provision service for someone
(a communication user)
The communication profile details the Aura services a user is provisioned for
Describes the ways in which a user may be contacted
So what can this new admin user do?
2011 All rights reserved.
Exercise:
38
View Communication Profile address types
Click to edit your newly created user
Expand Communication Profile
Consider the types of communication address
39
Enterprise Administration
Group A Group B
2011. All rights reserved. 40
Groups can be of different types
Bring collections of resources together for easier management
Groups of Users
Groups of Roles
Groups of Operations
SMGR Group Management
2011. All rights reserved. 41
Having users in the same group as other resources does NOT automatically grant permissions to access those resources!
Generic groups of resources
I dont carry permission to
access operations just because Im in
the same group
I dont get automatically
assigned the roles that are in the same
group as me
SMGR Group Management
2011. All rights reserved. 42
However when assigning what resources a role has control over, you can select a group as a resource
Provides role with permissions over all items belonging to a group
SMGR Group Management
Group Name: Team1
Group Type: Users
Role X
I have permission to view / add / delete / edit users, and the
resource that I have access to is Team 1
2011. All rights reserved. 43
Creating a Group
2011. All rights reserved. 44
Creating a Group
Navigate to group management
Enter a name, and select a group type
2011. All rights reserved. 45
Creating a Group
2011. All rights reserved. 46
Users?
Operations?
Creating a Group
Group membership can be selecting using a query
2011. All rights reserved. 47
Complex Queries
Creating a Group
Build complex queries using multiple conditions
2011. All rights reserved. 48
Group members can be specifically selected
Creating a Group
Once the membership type has been
committed, it cannot be edited later
2011. All rights reserved. 49
Creating a group
When selecting resources for a group of type all:
click advanced search, then select the type to see available resources
2011. All rights reserved. 50
Creating a Group Adding Users
Users may be added to a group when a group is being edited (see previous slides)
Or, a user can be added to a group by editing the user
Add several users to group at once
(User Management screen)
Add user individually
(Edit user profile)
2011 All rights reserved.
Exercise:
51
Create a Group
Define a new group of users
This will group together the users responsible for logging
Create 2 new users (the logging team) and assign them to the logging group
(Dont worry too much about the role yet)
Group A
2011. All rights reserved. 52
SMGR Roles Controlling access to resources
Roles give access to specific types of System Manager resources
Aggregate many permissions under one name
2011. All rights reserved. 53
Role Assignation
2011. All rights reserved. 54
SMGR Role
Default roles
- May be expanded when installing new products
Custom made role
- You may define a role for exactly what you need
2011. All rights reserved. 55
Creating a Custom Role
2011. All rights reserved. 56
Creating a Custom Role
2011. All rights reserved. 57
Defining a Role
A role can provide permission to access 1 or more resource type
2011. All rights reserved. 58
Users
Operations
Apply filters for easier searching
Defining a Role
Once a resource type is chosen, you can select which resources to add
2011. All rights reserved. 59
E.g., When adding permission to view, edit, or delete users:
The resource type will users
The resources themselves will be specific users
Adam, Bob, Carol, Deborah (for example)
E.g., When adding permission to view specific menu items:
The resources type will be operations
The resources correspond to SMGR links
Defining a Role
2011. All rights reserved. 60
Defining a Role Attributes
Attributes allow you to drill down either further
You can select precisely the attributes of a user profile that you wish to grant permissions for
2011. All rights reserved. 61
Defining a Role Attributes
Not all resource types have attributes
E.g. operations
2011. All rights reserved. 62
And since we mentioned operations
There are lots!
Given the mapping to URIs in the web console, it indicates how fine grained the level of access control can be
2011. All rights reserved. 63
Role Resource Types?
Key types
2011 All rights reserved.
Exercise:
64
Create a new role
Define a role
This role will carry privileges relating accessing logs and alarms
Add all operations with the term event in them
Hint: use a filter!
Apply the role to the newly created users
Test!
Log in as user with only the new role
Group B
2011 All rights reserved.
Exercise:
65
Create another role
Define another role
This role will carry privileges relating to user creation and management
Once the role has been created, create 3 new users
This admin team will oversee Human Resources (HR) assign them the newly created role
Extension: If you have time, also create a group for the HR team, and assign these newly created users
Group B
2011. All rights reserved. 66
Deleting Users
Deleting Users required 2 confirmations!
#1
2011. All rights reserved. 67
Deleting Users
Deleting Users required 2 confirmations!
#2
68
Enterprise Administration
Group A Group B
Susan is getting
married, and is
changing her job I must update her details
and roles
And Daniel is leaving
the company Ill need to delete his profile
2011 All rights reserved.
Exercise:
69
Modify User
One of the HR staff has decided to get married
Change their last name to smith and update their postal address (you choose the details)
She has also decided to switch jobs remove the HR user management role previously assigned her
Also delete one user
2011. All rights reserved.
By the end of this lesson, you should
70
Course Objectives
Know how to:
Create SMGR administrators
Apply existing roles to new users
Create new groups & add users to them
Create new roles and define privileges
Avaya Aura System Manager Administering User Profiles
Avaya Aura System Manager Advanced Administration
2011. All rights reserved. 73
Course Outline
Backing up / restoring from backup
Discovering inventory in the Network
Deploying product licenses
Bulk import
Bulk export
Configuring SMGR high availability (HA)
2011. All rights reserved. 74
Course Objectives
Know how to:
Backup SMGR data
Use SMGR to discover inventory in the Avaya network
Use SMGR as a WebLM server
Manage data in bulk
Configure SMGR for HA
Avaya Aura System Manager
Backing Up SMGR Data
2011. All rights reserved. 76
Information held by Avaya Aura SMGR
Product Management Data
Element definitions
Configuration
Routing Policies, endpoint profiles
User Profile Data
Admins / communication users
User profiles, addresses, roles etc.
Communication profiles
Application sequencing
2011. All rights reserved. 77
Backing up SMGR Information
2011. All rights reserved. 78
Backing up SMGR Information
2011. All rights reserved. 79
A backup can be created on the local file system
Or copied to a remote Linux server
Backing up SMGR Information
backup
Only specify the filename, not the path
2011. All rights reserved. 80
When backing up to a remote server (safer), you will need the remote server SSH login details
Backing up SMGR Information
Specify the full path
2011. All rights reserved. 81
Backups can be performed when needed (now)
And / or scheduled to take in the future (recurring?)
Backing up SMGR Information Scheduling
2011. All rights reserved. 82
Perform a local backup
1. Create a local backup of your SMGR data - now
2. Also schedule a regular maintenance backup:
To take place daily
At midnight
Starting tomorrow
Ending after 1 month
2011. All rights reserved. 83
When the backup completes, SMGR will summarize the details
Viewing the backup
SSH
SSH into the SMGR VA to view the backup
admin/admin
2011. All rights reserved. 84
Locate your backup
SSH into your SMGR
Use the SMGR IP (from your browser URL)
Username / password: admin / admin
Navigate to the location
Default is: /var/avaya/backup/manual
Take a look!
2011. All rights reserved. 85
When needed, you can restore SMGR config
Restoring from backup
SMGR will remember previous backups
2011. All rights reserved. 86
Restoring from backup
Be warned that this is a dangerous operation
It will wipe existing configuration in favor of the settings found in the backup
2011. All rights reserved. 87
Restore from backup
Notice that your SMGR already has a number of users, domains & SIP elements defined
Delete any number of these
Restore your earlier backup
This will take 5 minutes or so
When SMGR becomes available again, check that the deleted elements have indeed been restored
2011. All rights reserved. 88
Perform a remote backup
Work with a buddy
Backup to your buddys /tmp directory
Name your backup /tmp/NAMEbackup (use your own name)
SSH into your buddys SMGR, and locate your backup
admin / admin
Whats different about the format of the remote backup?
Avaya Aura System Manager
Inventory Discovery
2011. All rights reserved. 90
The IT network
2011. All rights reserved. 91
SMGR Service Discovery
BSM
Discoverable
2011. All rights reserved. 92
SMGR Service Discovery
???
2011. All rights reserved. 93
Inventory Auto Discovery Process
1. Configure SNMP Profile (s)
2. Define Subnet (s)
3. Enter CM details
4. Run discovery profile
135.64.0.*
SNMP
SNMP
NB: SNMP service is not
enabled by default on SM.
Requires running
setup_snmp on target SM
2011. All rights reserved. 94
Inventory Auto Discovery Process
SMGR 6.0 supports automatic element discovery
2011. All rights reserved. 95
Inventory Auto Discovery Process
SNMP access details
SNMP V3
2011. All rights reserved. 96
Inventory Auto Discovery Process
Subnet
2011. All rights reserved. 97
Inventory Auto Discovery Process
CM access details
2011. All rights reserved. 98
Inventory Auto Discovery Process
2011. All rights reserved. 99
Inventory Auto Discovery Process
IP currently being scanned
Devices discovered
2011. All rights reserved. 10
0
Discover the CM in the network
Create a discovery configuration
Use SNMP V1
Read community: public
Write community: public
Define the subnet youre interested in
Use the IP address provided by the instructor
Use a subnet of 255.255.255.0
Enter CM access details
init / itsgrand3
Monitor the discovery process
Avaya Aura System Manager
Licensing Other Services
2011. All rights reserved. 10
2
SMGR as License Manager
Some activities require permission!
Have to have a license
Avaya products are just the same
2011. All rights reserved. 10
3
SMGR Integrated WebLM Server
Must have access to an Avaya WebLM Server before they can start properly
You have a
license for me?
License for
me?
Full Web LM
Server Integrated
2011. All rights reserved. 10
4
SMGR Integrated WebLM Server
License file is bound to specific SMGR
Contains reference to MAC (unique ID)
Licenses are not portable!
2011. All rights reserved. 10
5
Deploying Licenses
2011. All rights reserved. 10
6
License you SMGR
Apply a license to your SMGR
Use the license.xml on your XP desktop
Check that POM now shows as a licensed product
Menu on the left
NB: We do not have a POM in the training lab
Avaya Aura System Manager
Handling Data in bulk
2011. All rights reserved. 10
8
Helps prevent a bad day for the Admin!
2011. All rights reserved. 10
9
Use Cases: Initial Provisioning
Initially provisioning an enterprise
Moving lots of information into a new Avaya Aura installation
Professional Services
Supposes data must
already exist
somewhere!
2011. All rights reserved. 11
0
Use Cases: Large Data modifications
Modifying large sets of data
quickly
2011. All rights reserved. 11
1
Bulk Import What can be imported?
User Profiles (Including Communication Profile)
Application Sequencing
Personal Contact Lists
Shared Addresses
Presence Access Control Lists (ACL)
SMGR Roles
Element Details
Etc.
2011. All rights reserved. 11
2
Import Process
SMGR Data
Represented as XML
Read by SMGR and added to the DB
SMGR doesnt say how you do this only what format the data should be in
2011. All rights reserved. 11
3
Performance
Bulk Import supports 60 records / minute
100,000 Users spread across multiple files
5,000 Users in a single 600Mb file
Initial provisioning of SMGR may involve a large dataset
2011. All rights reserved. 11
4
Failed to import
Any records that fail to import should be provided for download by the UI
Records can then be modified and re-imported
Failed records?
2011. All rights reserved. 11
5
Importing User data
SMGR supports both full and partial User data importing
Can update existing users details E.g. Add a contact
Communication
Profile
Contacts
Address
Roles
Contacts
Roles
2011. All rights reserved. 11
6
Importing: User data
Done through the SMGR web interface
2011. All rights reserved. 11
7
Importing: User data
3 Sections
1. Select import XML
file
2. Configure Import
handling
???
2011. All rights reserved. 11
8
Import a user record
Locate the importUser.xml file on your desktop
View the contents of the file
Import the user into your SMGR configuration
Import immediately (dont schedule)
Choose to continue processing other records on failure
If the user already exists, select to overwrite with the new one
Communication
Profile
Contacts
Address
Roles
2011. All rights reserved. 11
9
On processing a record
that cannot be imported
will SMGR rollback?
2011. All rights reserved. 12
0
Importing: User data
If you are re-importing data, you probably dont want to touch successfully imported User data
2011. All rights reserved. 12
1
Importing: User data
3. Choose immediate
or scheduled import
2011. All rights reserved. 12
2
Linux based testing tool for generating large datasets
Generates XML from simple input file
Download from:
http://taco.dr.avaya.com/wiki/index.php/Session_Man
ager_Bulk_Import_XML_Generator_R6.0_S34
./genxml.sh [-o ] []
Optional if omitted, output
thrown to stdout
Bulk Import XML Generator
2011. All rights reserved. 12
3
Bulk Import XML Generator Linux based testing tool for generating large datasets
Generates XML from simple input file
Download from:
http://taco.dr.avaya.com/wiki/index.php/Session_Man
ager_Bulk_Import_XML_Generator_R6.0_S34
./genxml.sh [-o ] []
Optional if omitted, output
thrown to stdout
2011. All rights reserved. 12
4
Linux based testing tool for generating large datasets
Generates XML from simple input file
Download from:
http://taco.dr.avaya.com/wiki/index.php/Session_Man
ager_Bulk_Import_XML_Generator_R6.0_S34
./genxml.sh [-o ] []
Optional if omitted, output
thrown to stdout
???
Bulk Import XML Generator
2011. All rights reserved. 12
5
Existing CM Association
(|-), , , ,
[], [],
LOCATION=
New CM Association
(|-), , , ,
[], [],
LOCATION= template=
No CM Association
(|-), , , ,
[], [] LOCATION=
Bulk Import XML Generator Input file format
2011. All rights reserved. 12
6
Existing CM Association
5500-6500, 123456, avaya.com, nearEndSm, origSeq1, termSeq1, my-
cm.dr.avaya.com LOCATION=Denver
New CM Association
5500-6500, 123456, avaya.com, nearEndSm, origSeq1, termSeq1, my-
cm.dr.avaya.com asm2=secondarySm bsm=branchSm
LOCATION=Denver
No CM Association
5386000, 123456, avaya.com, nearEndSm, origSeq1, termSeq1
LOCATION=Denver
Bulk Import XML Generator Input file format
2011. All rights reserved. 12
7
Existing CM Association
5500-6500, 123456, avaya.com, nearEndSm, origSeq1, termSeq1, my-
cm.dr.avaya.com LOCATION=Denver
New CM Association
5500-6500, 123456, avaya.com, nearEndSm, origSeq1, termSeq1, my-
cm.dr.avaya.com asm2=secondarySm bsm=branchSm
LOCATION=Denver
No CM Association
5386000, 123456, avaya.com, nearEndSm, origSeq1, termSeq1
LOCATION=Denver
Range of endpoints
Vs single endpoint
Bulk Import XML Generator Input file format
2011. All rights reserved. 12
8
Existing CM Association
5500-6500, 123456, avaya.com, nearEndSm, origSeq1, termSeq1, my-
cm.dr.avaya.com LOCATION=Denver
SMs, CMs, Locations,
Domains & App
sequences must have
already been
administered before
attempting to import
Bulk Import XML Generator Input file format
2011. All rights reserved. 12
9
Importing: User data
Passwords can be supplied in the user data XML
These can be plaintext, or you can encrypt them and SMGR will decrypt the passwords
password1
%z[323*&3
um_bulkimport-encryptUtil.zip
um_bulkimport-encryptUtil.sh import
Usage:
Utility (Part of SMGR SDK)
2011. All rights reserved. 13
0
Importing: Roles & Groups
In similar fashion, one can import roles
Note: No
functionality to
schedule Group
import yet
2011. All rights reserved. 13
1
Miscellaneous
Login name treated as unique identifier
As such, loginname cannot be updated by bulk import
If importing users, roles & contacts:
1. Roles
2. Public Contacts | Shared Contacts
2. Users
If importing Presence ACL:
1. Users
2. Presence Data
2011. All rights reserved. 13
2
Configuring Default Import Options
2011. All rights reserved. 13
3
Configuring Default Import Options
0 = Skip
1 = Merge
2 = Replace
3 = Delete
2011. All rights reserved. 13
4
2011. All rights reserved. 13
5
SMGR Export Data
Achieved via CLI
Tool exportUpmUsers.sh must be executed from SMGR machine
1. Launch Putty & SSH in
using:
admin / admin
2. Switch to root
# su root (enter p/w root01)
3. Navigate to the
directory shown
2011. All rights reserved. 13
6
SMGR Export Data
Inside the config directory, youll find the bulkexportconfig.properties file
Use this to configure:
Set number of records to be exported
File size
Export file destination
2011. All rights reserved. 13
7
Perform Export
Can set options via the CL
u : SMGR Username authorized to export
p : Password
f : Export file name prefix
r : Records per file
d : Destination Folder
s : Record starting index
e : End offset index (number of records)
Optional Parameters
2011. All rights reserved. 13
8
Export your SMGR user data
Export all SMGR user data
Unzip, and inspect the format of the XML data
# unzip
# cat
Compare to the XML files from the import exercise
Extension:
If you find yourself waiting, experiment with the settings in the bulkexportconfig.properties file
Try modifying your exported data, and using it to import new users into SMGR
Remember the login name
Field must be unique
Communication
Profile
Contacts
Address
Roles
2011. All rights reserved. 13
9
Perform Export
You can also schedule an export to be performed
Script regular data exports?
t : Set export scheduled time
E.g:
exportUpmUsers.sh -t
2010:05:01:12:00:00
YYYY:MM:DD:HH:MM:SS
??? 1st of May 2010, at Midday
2011. All rights reserved. 14
0
Perform Export
Zip file is created containing the export
2011. All rights reserved. 14
1
2011. All rights reserved. 14
2
Using the Exported Data
Exported data file can be used in GUI import
By default, data is
suitable for
complete import
2011. All rights reserved. 14
3
Using the Exported Data
XML File can be amended for use in partial import
2011. All rights reserved. 14
4
Demo
Modify Exported Data
Perform Partial Import
2011. All rights reserved. 14
5
Exporting SMGR Roles
Separate CLI utility for exporting roles
2011. All rights reserved. 14
6
Exporting SIP Entities
Domains, Locations, Adaptations, SIP Entities, Entity Links, Time Ranges, Routing Policies etc. can all be exported
Click the More Actions button to find option
2011. All rights reserved. 14
7
Export your SMGR routing info
Export one or more collections of routing info:
Domain
Locations
Routing Policies
NB:
Remember that when re-importing something like a routing policy, it will contain references to SIP entities, domains, dial patterns and so on
These will need to have been re-imported first
Communication
Profile
Contacts
Address
Roles
Avaya Aura System Manager
High Availability
2011. All rights reserved. 15
0
What is High Availability?
High Availability (HA) is the ability to access a service when you need it
Even in the case where an internal error has occurred
End users (SMGR admins) should not need to know!
2011. All rights reserved. 15
1
SMGR High Availability
How does SMGR deliver HA?
2 SMGR nodes
Arranged in active node / backup node configuration
When the active node fails, the backup node automatically takes over
2011. All rights reserved. 15
2
SMGR High Availability & System Platform
SMGR HA is facilitated by the Avaya Aura System Platform
Its really System Platform HA, but SMGR benefits by being a VA deployed to SP
Some things in life are free!
XEN Hypervisor - DOM-0
C-DOM
CentOS
SP
Utilities
Proc HDD RAM NIC
2011. All rights reserved. 15
3
XEN Hypervisor - DOM-0
C-DOM
CentOS
SP
Utilities
SMGR Template
RHEL
System
Manager
Proc HDD RAM NIC
Active SMGR on System Platform
XEN Hypervisor - DOM-0
C-DOM
CentOS
SP
Utilities
SMGR Template
RHEL
System
Manager
Proc HDD RAM NIC
Remote SMGR node
(name for the backup)
SMGR High Availability & System Platform
2011. All rights reserved. 15
4
Replicated VA machine state consists of:
Everything saved / committed
On the hard disk
In the SMGR database
SMGR High Availability & System Platform
2011. All rights reserved. 15
5
SMGR High Availability & System Platform
Anything not in committed will not have been saved to disk, & will be lost in the case of a failover
VA must boot
when it fails over
2011. All rights reserved. 15
6
High Availability Extent of impact
Admin will lose work-in-progress
Service outage will last as long as it takes to:
1. Detect active node is down
2. Boot the remote node VA (triggered automatically)
2011. All rights reserved. 15
7
XEN Hypervisor - DOM-0
C-DOM
CentOS
SP
Utilities
Proc HDD RAM NIC
XEN Hypervisor - DOM-0
C-DOM
CentOS
SP
Utilities
SMGR Template
RHEL
System
Manager
Proc HDD RAM NIC
SMGR Template
RHEL
System
Manager
SMGR High Availability & System Platform
SMGR already installed
on one node
Once HA is configured, the SMGR template is replicated to the remote node
2011. All rights reserved. 15
8
XEN Hypervisor - DOM-0
Proc HDD RAM NIC
Active SMGR on System Platform
XEN Hypervisor - DOM-0
Proc HDD RAM NIC
Remote SMGR on System Platform
C-DOM
CentOS
SP
Utilities
SMGR Template
RHEL
System
Manager
C-DOM
CentOS
SP
Utilities
SMGR Template
RHEL
System
Manager
192.168.1.102
192.168.1.101
192.168.1.102
192.168.1.167
SMGR VAs share the same IP configuration
- Problem??
SMGR High Availability & System Platform
2011. All rights reserved. 15
9
XEN Hypervisor - DOM-0
Proc HDD RAM NIC
XEN Hypervisor - DOM-0
Proc HDD RAM NIC
C-DOM
CentOS
SP
Utilities
SMGR Template
RHEL 5.3
System
Manager
C-DOM
CentOS
SP
Utilities
SMGR Template
RHEL 5.3
System
Manager
192.168.1.101 192.168.1.101
???
2011. All rights reserved. 16
0
Active Node definition:
Replicates its state to the remote node
Has the SMGR VA turned on
So what decides the active node?
Nodes score themselves
Highest score = active node
If a node cannot contact the other:
The uncontactable node is assumed down
The surving node becomes active (if it isnt already)
I am alive, have network connection, can contact
the gateway
Score =
6.0
2011. All rights reserved. 16
1
SMGR High Availability Configuration
Crossover cable
Enterprise Network 6.0
3.1
Preferred Configuration
2011. All rights reserved. 16
2
?
Geographical H/A isnt supported by this setup
Why?
2011. All rights reserved. 16
3
SMGR High Availability Configuration
Preferred Configuration
System Platform Server fitted
with (at least) dual port NIC
2011. All rights reserved. 16
4
Preferred Configuration
Direct crossover connection allows high speed connection between SPs
Avoids large SP payloads having to travel over the regular network
SP & SMGR VM state copied from active
SMGR High Availability Configuration
2011. All rights reserved. 16
5
SMGR High Availability Configuration
Preferred Configuration
Crossover cable
Enterprise Network
2011. All rights reserved. 16
6
SMGR High Availability Configuration
Preferred Configuration
Crossover cable
Enterprise Network
Crossover cable is preferred, not mandatory
Replication will happen over the regular network
2011. All rights reserved. 16
7
SMGR High Availability Configuration
admin
admin01
The Toolwire Internet Explorer contains a shortcut to the SP Web Console in Favorites
2011. All rights reserved. 16
8
High Availability
Configure SMGR failover from within
the System Platform webconsole
2011. All rights reserved. 16
9
High Availability
Remote node
Enter IP & login details for the remote node
The SP on which you are logged in is preferred by default
2011. All rights reserved. 17
0
Configure SMGR for HA
Work with a buddy
Decide which SMGR will be active, which is remote
Log into SP webconsole on the active node
Configure failover using the details of the remote node
The initial replication may take some minutes to complete
Test by logging into the SMGR using the IP of the active node
Kill the active node VA, then attempt to access the SMGR IP again
Remote node should kick in, allowing you to use SMGR
Avaya Aura System Manager Advanced Administration
Thank you!