ca unified infrastructure management network performance management capabilities

Pre-Con Education: CA Unified Infrastructure Management Network Performance Management Capabilities

Martin Kowalewski, Daniel Okine

DevOps: Agile Ops

CA Technologies

CA UIM Product Management

DO5X84E

@CA_IM

@okined

#CAWorld

2 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

© 2015 CA. All rights reserved. All trademarks referenced herein belong to their respective companies.

The content provided in this CA World 2015 presentation is intended for informational purposes only and does not form any type of

warranty. The information provided by a CA partner and/or CA customer has not been reviewed for accuracy by CA.

For Informational Purposes Only

Terms of this Presentation


Abstract

Please join us for a detailed education session on the new application-aware network performance management capabilities within CA Unified Infrastructure Management. We will explore how CA Unified Infrastructure Management continues to deliver on our vision of agile, unified monitoring that is easy to set up, administer and use. This session will teach you how to install and configure the newest network monitoring functionality, specifically focused around the unification of traffic analysis (with CA Network Flow Analysis), network device performance (with the SNMP collector probe), and application delivery performance (with CA Application Delivery Analysis). These advanced capabilities will help you proactively resolve network issues across your applications and services before user experience suffers. We will also show how you can rapidly add and configure new network devices for monitoring. Using the SNMP collector probe self-certification, you’ll learn how to quickly produce the metrics you need without waiting for vendors to add support for these. In short, this will be a dive into the newest, most advanced network capabilities of CA Unified Infrastructure Management and how they can enable your business to be successful in the application economy.

Martin Kowalewski

Daniel Okine

CA Technologies

CA UIM Product Management


Agenda

MODULE 1 – DESCRIBE CA APPLICATION DELIVERY ANALYSIS (CA ADA)

MODULE 2 – CONFIGURE CA UIM/CA ADA INTEGRATION

MODULE 3 – DESCRIBE CA NETWORK FLOW ANALYSIS (CA NFA)

MODULE 4 – CONFIGURE CA UIM/CA NFA INTEGRATION

MODULE 5 – SELF-CERTIFICATION WITH SNMPCOLLECTOR

1

2

3

4

5

Module 1 –Describe CA Application Delivery Analysis (CA ADA)


Time Wasted

Why is it so slow?It’s probably the

network!!

I’m not sure if the problem is the

server, network or application. I’m going to escalate

it to all the teams.

It’s probably the network!!

What problem? All the devices are

up and running.

Not today! Today is launch day.


Quickly Identify the Fault-Domain

Network?

Server?

Application?

Data Center

Remote Site

WAN

Response Times Between the Server Switch and the Client

Response Times Between the Server Switch and Server

Combined Network and Server Response Times That Reflect the End User Experience


CA ADA Overview: Architecture

Network Type

Network Type

Network TypeNetwork Type

LA

NYC

SEA

CHI

HOU

40 Mbps

30 Mbps20 Mbps

12 Mbps


TCP(80) SYN ACK

User

Infrastructure Server

TCP(80) SYN

Web Transaction

CA ADA Monitor

Server Connection Setup Time

Network Connection Setup Time

TCP(80) ACK


TCP(80) SYN ACK

User


TCP(80) SYN

Web Transaction

HTTP GET index.html (Data Request A)

Data Response A1

ACK Response A1

Data Response A2

ACK Response A2

CA ADA Monitor

TCP(80) ACK

Server Response Time

Network Round Trip Time

HTTP GET index.html (Data Request B)

Data Transfer Time


TCP(80) SYN ACK

User


TCP(80) SYN

Web Transaction

HTTP GET index.html (Data Request A)

Data Response A1

ACK Response A1

Data Response A2

ACK Response A2

CA ADA Monitor

TCP(80) ACK

Server Response Time

Network Round Trip Time

HTTP GET index.html (Data Request B)

Data Transfer Time

Data Response B1

Data Response B1

Data Response B1NoResponse

NoResponse

ACK Response B1

Retransmission Delay

ACK Response B2

Data Response B2


Response Time Insight

Server Response TimeAmount of time it takes for the server to begin responding to a request.

Data Transfer TimeAmount of time for the server to send, and the network to deliver, the requested data

Retransmission TimeTime spent resending packets due to packet lossNetwork Round Trip TimeAmount of time it takes for a packet to traverse the network in both directionsAverage time for a TCP request to be fulfilled

Server Response

+Data Xfer

+Retrans. Delay

+Network RTT

=

Total Transaction Time Gray line represents observed transactions over given time interval


Value of End-to-End Monitoring


What CA ADA Does With Data

Baselines normal performance

Automatically computes thresholds to define degraded & excessive performance

Classifies relative performance for all monitored networks, servers, & applications

Launches appropriate, automated investigations when performance degrades


Classifying Relative Performance

Requires accurate definition of “normal” performance

Requires significant statistical sampling

Requires understanding how performance relates to application interaction by users

Degraded

Excessive

Available/Normal

Unavailable


Module 1 Summary

You should now be able to:– Understand how and where CA ADA fits

in the network

– Identify the key metrics that are calculated by CA ADA

– Understand the value end to end monitoring provides

In the next module, you will:– Configure CA ADA/CA UIM integration


Class Question

Where should CA ADA collectors be installed in the network?

Branch NetworkA

In the CloudB

Data CenterC

All of the aboveD


Class Question

What metric identifies the time that it takes for a server to respond to a request for data?

Network Response TimeA

Server Connection TimeB

Server Response TimeC

Data TimeD

Module 2 –Configure CA UIM/CA ADA Integration


What CA ADA Integration IS:

Shows the evolution of the CA UIM unification strategy

Shows application delivery metrics inside of USM

Support for an operational workflow– Drill to Server – View System metrics, App Probe metrics, and/or App

Delivery metrics from CA ADA

Drill-out capability from each CA ADA chart in context

Support for n CA ADA consoles on a single inventory probe


What CA ADA Integration IS NOT:

Provides support for dashboards of Top-N CA ADA KPIs for the entire enterprise

Automatically syncs CA ADA incidents as alarms in CA UIM (Behavior that exists with CAPC/NPC) – SNMP trap integration is the current supported path to get CA ADA

incidents to show up as alarms inside of CA UIM.

Provides support for Single Sign-On between CA UIM and CA ADA

Multi-tenant aware


USM

Bus

Discovery NMS/UDM

ADAConsole

MetricsAPI

CA ADA Inventory

Probe

DataWS

InvWS

UI ctd

High-Level Technical Architecture

CA ADA-based views

Drill-out


Requirements

CA ADA 10.4 Install– Master Console with Collection - Install of CA ADA Master Console on a

single vm or physical server, with a 2nd nic available for collection.

– Distributed Deployment - Multi-box with CA ADA console and CA ADA collectors in the environment. All current collectors supported. (Single Port, MTP, Gigastor, etc.)

ADA_Inventory Probe– Local or Remote Probe used to send CA ADA inventory to UDM

CA UIM 8.35(CR) – GA 8.4


Deployment Steps

Install and configure CA ADA 10.4

Install and configure CA UIM 8.35 (CR)

Download and deploy ADA_Inventory probe to either CA ADA Master Console or other robot

Configuration in Admin Console– Add New ADA Console

– Enter name of console and hostname or IP address of CA ADA Master Console


Deployment Steps (cont’d)

Configure in Admin Console– Add New ADA Console

– Enter name of console and hostname or IP address of CA ADA Master Console

– Choose whether to include only servers with User Defined Apps

– Click Submit, then click Save

Open USM– Select server from inventory that is being monitored by CA ADA

– Click the Advanced tab to see the CA ADA “goodness”


Best Practices for Production

It is recommended to only export servers for “user-defined” apps.

To further value, ensure server and app probes are deployed to servers that are also being monitored by CA ADA.

To simplify deployment use a single ADA_Inventory probe for CA ADA deployments with multiple consoles.


Module 2 Exercise

In the following lab exercise, you will:– Validate data in CA ADA

– Install and configure ADA_Inventory Probe

– Execute Operational Workflow using application delivery data inside of USM


Lab Environment

CA NFA Standalone

CA ADA Standalone

Florida - Infrastructure

Arizona - Infrastructure

Data Center Infrastructure

TIXCHANGE-WEB

Netflow

SNMP Polling

CA UIM with SNMPC

R R CA UIM Robot

Switch Router

WAN

Packet Data (SPAN)

R

RTIXCHANGE-APP

TIXCHANGE-DB

R Michigan - Infrastructure

R


Module 2 Summary

You should now be able to:– Understand CA UIM/CA ADA integration

architecture and deployment requirements

– Identify if CA ADA is successful collecting data

– Install and configure ADA_Inventory probe

– Execute USM workflow using CA ADA metric data

In the next module, you will:– Describe CA Network Flow Analysis

Module 3 –Describe CA Network Flow Analysis (CA NFA)


NetFlow, IPFIX

CA Network Flow Analysis100% visibility into network traffic and behavior

• Visibility into how the network is being used –users, destinations, prioritization

• Single, data center-based collection point

• Accurate historical, real-time and projective capacity account

• Cisco IVT certified for AVC (Application Visibility and Control) enabled devices for rich accounting, classification and reporting of applications


CA Network Flow Analysis – Benefits

Reduce WAN Costs• Visibility into utilization levels in order to optimize network capacity• Make sure bandwidth is not the root cause for performance issues before investing in costly

upgrades

Detect, isolate and resolve network problems faster

• Reduces false positives and wasted efforts through patented anomaly detection that dynamically adapts the network profile to ensure detection accuracy.

• Gain an enterprise-wide view of infrastructure availability and performance, and, when needed, drill down to flow components for detailed analysis and guided workflows that enable faster problem remediation.

Understand, predict and meet changing network capacity demands

• Reality-based capacity planning with access to 13 months of enterprise-wide historical data.• Intelligent, fact-based decisions regarding capacity investments and resource optimization to

address and anticipate evolving technical and business requirements.

Align to business priorities

• Cisco NBAR2 support enables rich application accounting, classification and reporting to enhance visibility into applications running on the network.

• With enhanced visibility - Intelligently prioritize, control, route, load-balance and optimize application traffic to maximize user experience, optimize bandwidth and reduce costs.


IP-Flow Technology Support

Flexible NetFlow

Sflow

Jflow

Cflowd

NetFlow v5

NetFlow v9

IPFIX

NetStream

34

Application AwarenessCisco Application Visibility and Control (AVC)

Pervasive App Visibility Business Policy-based Rules Comprehensive Reporting

• No additional hardware

• Rich data collection using NetFlow v9/IPFIX

• Easy to integrate into many reporting tools

• No need for complex IP and port ACLs

• See inside HTTP flows to identify specific Cloud applications

• Better use of costly bandwidth

• Per-branch and per-application level reporting

VISIBILITY TO 1000+ APPS SMART CAPACITY PLANNINGNO PROBES

PrivateCloud

Branch DC/Headquarters

WANNetFlow v9

Enterprise Edge

AVC

AVC

CSR

Proliferation

of Devices

Users/Machines

60% of IT Professionals Cite Performance as Key Challenge for Cloud

ISR

ASR

AVC

AVC


AVC Operation – Performance Collection and Exporting


Cisco AVC

With Cisco AVC, customers can…– Discover network traffic with application-level insight with deep

packet visibility into web traffic

– Analyze and report on application usage

– Classify and manage application sessions (including web browsing, multimedia streaming, and peer-to-peer applications)

– Build reporting for capacity planning and compliance

– Enforce quality-of-service (QoS) policies and service guarantees for latency-sensitive applications (such as voice over IP [VoIP] and interactive gaming)

– Implement fair-use policies and manage network congestion by optimizing application-level traffic


Deployment Architecture 2-Tier

Router configenablesNetFlow NetFlow Datagrams:

1 Minute

• Records Raw flows in Harvester Archive• Creates 1 minute data files containing top

protocols/hosts/Conversations/ToS per interface • New devices are Polled for SNMP information

• Pulls data from the Harvester as needed• Web GUI for reporting and Administration

Long term storage of 15 minute bucket:•Protocol data for the past 13 months•Interface summary data for the past 13 months•ToS summary data for the past 13 months•Top protocols for the top ToS values for the past 13 months•Host and conversation data for the past two months•Top hosts and conversations for the top ToS values for the past 2 months


Deployment Architecture 3-Tier

Router configenablesNetFlow NetFlow Datagrams:

1 Minute

• Collects up to 9 Million flows per minute• Records Raw flows in Harvester Archive• Creates 1 minute data files containing top

protocols/hosts/Conversations/ToS per interface • New devices are Polled for SNMP information

• Pulls data from the Harvester every 15 minutes • Web GUI for reporting and Administration• Manages interfaces stored on the DSA

Long term storage of 15 minute bucket:•Protocol data for the past 13 months•Interface summary data for the past 13 months•ToS summary data for the past 13 months•Top protocols for the top ToS values for the past 13 months•Host and conversation data for the past two months•Top hosts and conversations for the top ToS values for the past 2 months


Deployment Architecture – Multi-Platform Harvester


Stacked Protocol Trend

Applications

broken out by

NBAR2

Classification….


Network CongestionWe see a large amount of Windows Media saturating the interface


QoS Validation

This also corresponds to a large amount of “Real Time” queued traffic

Which is comprised of Windows Media


Root Cause: Non-Business Critical Traffic

Which is caused by streaming games from NBA.com


Deeper Network Flow Details When Needed

Drill-down to raw data with flow forensics

Delay between router and client

Server Response

Client Experience

• Report on all of the flow data that is collected in your environment & analyze every protocol, host, and conversation on your network

• Browse raw flow data & drill down to jump to detailed information about any of the fields in a data packet for any monitored interface


Patented Anomaly Detection

Visibility into network use – users, destinations, prioritization

Single collection point

Accurate historical, real-time and projective capacity account

Cisco IVT certified for AVC (Application Visibility and Control) enabled devices

Proactively detect security risks that impact performance


Module 3 Summary

You should now be able to:– Understand the benefits of CA Network Flow

Analysis

– Understand the technologies supported by CA Network Flow Analysis

– Understand the deployment architecture of CA Network Flow Analysis

In the next module, you will:– Configure NFA/UIM Integration


Class Question

What are the key benefits of CA Network Flow Analysis?

Reduce WAN CostsA

Detect, isolate and resolve network problems fasterB

Align to business prioritiesC

All of the AboveD


Class Question

What Flow Technology is NOT supported by CA NFA?

IPFIXA

Cisco NetflowB

Cisco AVCC

TraceflowD


Class Question

What is the recommend deployment architecture for new installs?

Two-TierA

One-TierB

Three-TierC

Three-BeerD

Module 4 –Configure CA UIM/CA NFA Integration


What CA NFA Integration IS:

Unified view of SNMP and Netflow data inside of CA UIM– Interface Details – SNMP Interface Rate, Errors, Discards with NFA

Stacked Protocol, Top Hosts and Conversions

– Advanced Tab – SNMP Interface Rate, CBQoS Volume, CBQoS Drops, NFA Stacked ToS, Tops Hosts per ToS, Top Conversions per ToS

Upgrade path for existing CA UIM Flow Probe users to leverage the features of the current full CA NFA solution

Single sign-on drill-out capability from each CA NFA chart in context to CA NFA Console for additional diagnostic detail

Multi-tenant aware


What CA NFA Integration IS NOT:

Provides support for dashboards of Top-N NFA KPIs for the entire enterprise

Sync’s CA NFA events as alarms in CA UIM (similar to current functionality of CAPC/NPC)– SNMP trap integration is the current supported path to get CA NFA

events/analysis traps to show up as alarms inside of CA UIM


USM

Bus

Discovery NMS/UDM

NFAW

MetricsAPI

SNMP_collectNFA

Inventory Probe

DataWS

InvWS

UI ctd ctd

Technical Architecture

snmp_c-based views

Nfa-based views

**Drill-out

SNMP Profile transfer agent

Pulls from UDM


Requirements

CA NFA Install

• Standalone - Single box with both harvester and console installed on a single vm or physical server(Windows 2012 R2 Only)

• Distributed - Multi-box with harvester(s) and console installed on separate VMs or physical servers• Windows 2012 R2 For Console• Windows 2012 R2 or Redhat 6.7 for Harvester

NFA_Inventory Probe • Local or Remote Probe used to send NFA inventory to UDM for reconciliation with SNMPCollector

NQ_Services Probe • If Multi-tenancy is required

CA UIM 8.2+ with SNMP Collector 2.1+

• Recommended CA UIM 8.4 with SNMPCollector 3.2


Deployment Steps

Install and configure CA NFA 9.3.3

Install and configure CA UIM 8.35 (CR)

Download and deploy NFA_Inventory probe to either CA NFA Console or any other robot

Download and deploy SNMPCollector

Download and deploy NQ_Services probe to same hub with UGS (if multi-tenancy is required)


Deployment Steps (cont’d)

Configure in Admin Console– Click Add New NFA Console

– Enter name of console and hostname or IP address of NFA Console

– Click Submit

– Click Save

Open USM– Select router from inventory

– Click Interface Details

– Select interface to see the CA NFA “goodness”



Ensure that SNMPCollector is monitoring the same network devices sending flow data

Leverage SNMPCollector for utilization alarms and use CA NFA to understand what is driving the utilization

NFA Export IP address (configured on the Router) and SNMPC Polled IP should be the same. It is recommended to be the loopback interface or management IP of the device.

Collocate NFA_Inventory probe with the CA NFA Console


Module 4 Exercise

In the following lab exercise, you will:– Validate data in CA NFA

– Install and configure NFA_Inventory probe

– Install and configure SNMPCollector probe

– Execute Operational Workflow using CA Network Flow Analysis data inside of USM


Lab Environment

CA NFA Standalone

CA ADA Standalone

Florida - Infrastructure

Arizona - Infrastructure

Data Center Infrastructure

TIXCHANGE-WEB

Netflow

SNMP Polling

CA UIM with SNMPC

R R CA UIM Robot

Switch Router

WAN

Packet Data (SPAN)

R

RTIXCHANGE-APP

TIXCHANGE-DB

R Michigan - Infrastructure

R


Module 4 Summary

You should now be able to:– Understand CA UIM/CA NFA integration architecture

and deployment requirements

– Identify if CA NFA is successful collecting data

– Install and configure NFA_Inventory probe

– Install and configure SNMPCollector probe

– Execute USM operational workflow using CA NFA/SNMPC Data

In the next module, you will:– Leverage Self Certification with SNMPCollector

Module 5 –Self-Certification With SNMPCollector


What SNMPC Self Certification IS:

Create new vendor certification for new device support– Associate SNMP OIDs with existing metric in an existing metric family

Create new custom monitors– Associate SNMP OIDs with existing metric in an existing metric family

Create and modify custom vendor certifications

Create Expressions for custom vendor certifications

Modify existing expressions in custom vendor certifications


What SNMPC Self Certification IS NOT:

Redefine an existing metric in an existing Metric Family

Add new metric to and existing Metric Family

Define and create a new Metric Family

Automatically deploy a new custom vendor cert to multiple SNMPCollector probe instances


High Level Architecture for Self Certification


Requirements

CA UIM 8.2+ installed

UMP 8.2+ installed

At least one installed instance of SNMP Collector 2.1+

– SNMPCollector must be on a secondary hub

– SNMPCollector must be within the same domain as UMP


Deployment Steps

Install and configure CA UIM 8.2 or later.

Download and deploy SNMPCollector per documentation, if not already deployed

Download and deploy Self Cert portlet to the UMP hub

Configure

– Create a Self Certification portlet page

– Add the Self Certification portlet to the created page



Names attribute must always be assigned for all custom vendor certification

Description should be assigned

Expressions must be validated using test

Tabular OIDs must be added from a single table to maintain integrity of indexing


Best Practices for Product (cont’d)

Scalar OIDs can be picked from multiple MIBs

New custom vendor certs should be saved to running SNMPC instance


Module 5 Exercise

In the following lab exercise, you will:– Add a new MIB File into MIB repository

– Load MIB file into MIB Browser

– Use Search feature to find a specific OID

– Browse and select OIDs to monitor

– Manually enter OID to monitor

– Create a vendor cert for an existing MF

– Deploy and validate a vendor cert


Module 5 Summary

You should now be able to:– Load and manage MIB files in MIB repository

– Create custom vendor certification

– Deploy and start using custom vendor cert


Q & A


Recommended Sessions

SESSION # TITLE DATE/TIME

DO5T26T Tech Talk: Self-Certify New Devices with the CA Unified

Infrastructure Management SNMP Collector 11/18/2015 at 3:00 pm

DO5X127SVision and Roadmap: Application-Aware Network

Monitoring Solutions for UIM 11/18/2015 at 4:30 pm

DO5T25T

Tech Talk: Leverage the Combined Power of CA Unified

Infrastructure Management, CA Network Flow Analysis

and CA Application Delivery Analysis

11/19/2015 at 12:15 pm


Must See Demos

CA UIM and CA APM IntegrationArea #5

ANPM

Area #5

CA UIM for MSPs

Area #5

CA UIM for Networking

Area #5


For More Information

To learn more, please visit:

http://cainc.to/Nv2VOe

CA World ’15

http://cainc.to/Nv2VOe

http://bit.ly/1wbjjqX