cgn harmony apps user guide - a10 networks

A10 Networks® CGN Harmony App v3.5 User Guidefor A10 Thunder® Series and AX™ Series

9 October 2020

© 2020 A10 NETWORKS, INC. CONFIDENTIAL AND PROPRIETARY- ALL RIGHTS RESERVED

Information in this document is subject to change without notice.

PATENT PROTECTION

A10 Networks products are protected by patents in the U.S. and elsewhere. The following website is provided to satisfy the virtual patent marking pro-visions of various jurisdictions including the virtual patent marking provisions of the America Invents Act. A10 Networks' products, including all Thunder Series products, are protected by one or more of U.S. patents and patents pending listed at:

https://www.a10networks.com/company/legal-notices/a10-virtual-patent-marking

TRADEMARKS

A10 Networks trademarks are listed at:

https://www.a10networks.com/company/legal-notices/a10-trademarks

CONFIDENTIALITY

This document contains confidential materials proprietary to A10 Networks, Inc. This document and information and ideas herein may not be dis-closed, copied, reproduced or distributed to anyone outside A10 Networks, Inc. without prior written consent of A10 Networks, Inc.

A10 NETWORKS INC. SOFTWARE LICENSE AND END USER AGREEMENT

Software for all A10 Networks products contains trade secrets of A10 Networks and its subsidiaries and Customer agrees to treat Software as confi-dential information.

Anyone who uses the Software does so only in compliance with the terms of the End User License Agreement (EULA), provided later in this docu-ment or available separately. Customer shall not:

1. Reverse engineer, reverse compile, reverse de-assemble, or otherwise translate the Software by any means.

2. Sub-license, rent, or lease the Software.

DISCLAIMER

This document does not create any express or implied warranty about A10 Networks or about its products or services, including but not limited to fit-ness for a particular use and non-infringement. A10 Networks has made reasonable efforts to verify that the information contained herein is accurate, but A10 Networks assumes no responsibility for its use. All information is provided "as-is." The product specifications and features described in this publication are based on the latest information available; however, specifications are subject to change without notice, and certain features may not be available upon initial product release. Contact A10 Networks for current information regarding its products or services. A10 Networks’ products and services are subject to A10 Networks’ standard terms and conditions.

ENVIRONMENTAL CONSIDERATIONS

Some electronic components may possibly contain dangerous substances. For information on specific component types, please contact the manufac-turer of that component. Always consult local authorities for regulations regarding proper disposal of electronic components in your area.

FURTHER INFORMATION

For additional information about A10 products, terms and conditions of delivery, and pricing, contact your nearest A10 Networks location, which can be found by visiting www.a10networks.com.

https://www.a10networks.com/company/legal-notices/a10-virtual-patent-marking

https://www.a10networks.com/company/legal-notices/a10-trademarks

http://www.a10networks.com

3

Table of Contents

INTRODUCTION TO CGN HARMONY APP .......................................................................... 9Thunder CGN.................................................................................................................................. 9

CGN App Benefits ......................................................................................................................................10

INSTALLATION AND UPGRADE ......................................................................................... 11Management of CGN App/Prerequisites .............................................................................................. 11

User Roles: Super/Provider Admin, Tenant/App Admin ........................................................... 11CGN Dashboard ....................................................................................................................................12

App Catalog ..................................................................................................................................................12Upload an App .............................................................................................................................................12Update an App ............................................................................................................................................14Installed Apps ..............................................................................................................................................15Enabling or Disabling CGN App ...............................................................................................................15Delete/Uninstall CGN App ........................................................................................................................ 17

CGN APP GETTING STARTED ........................................................................................ 19Help for Getting Started ...........................................................................................................................20Launching the CGN App through (Provider) Root ............................................................................20Loading the Tenant ................................................................................................................................... 22Launching CGN App through Tenant ................................................................................................... 22Help Center for CGN App ......................................................................................................................... 25

CGN APP DASHBOARD ................................................................................................. 27CGN App Service Selector......................................................................................................... 27Key Performance Indicator Bar................................................................................................ 27

KPI Bar for LSN and NAT Services ........................................................................................................28KPI Drilldown for LSN and NAT Services .............................................................................................28

SUBSCRIBERS .....................................................................................................................................28CURR SESSION/ SESS RATE ............................................................................................................ 29THROUGHPUT(bps) ............................................................................................................................30PACKET RATE(pps) ..............................................................................................................................31TCP / UDP POOL USE ........................................................................................................................ 32Control CPU, Data CPU, Memory .................................................................................................... 32

KPI Bar for Fixed-NAT Services .............................................................................................................33KPI Drilldown for Fixed-NAT Services ..................................................................................................34

PACKET RATE(pps) .............................................................................................................................34PACKET RATE(pps) ............................................................................................................................. 37

Time Window Selector ..............................................................................................................................38

CGN App v3.5 User Guide

Contents

4

Alerts and Events Menu ...........................................................................................................................38Drilldown From Chart Overlay Events ...........................................................................................39

Sync Tooltip ................................................................................................................................................39Link Cursor ............................................................................................................................................39Unlinked Charts ...................................................................................................................................40

Overall Dashboard ......................................................................................................................................41CGN Dashboard ..........................................................................................................................................44

SUBSCRIBERS Widget .......................................................................................................................45SESSIONS Widget ................................................................................................................................45INFRASTRUCTURE RESOURCES .....................................................................................................45MAPPINGS BY PROTOCOL ................................................................................................................45THROUGHPUT Widget ........................................................................................................................45PACKET RATE Widget ........................................................................................................................45MAPPINGS ............................................................................................................................................46POOL UTILIZATION (LSN and NAT64 services) ...........................................................................46TRAFFIC BY PROTOCOL ....................................................................................................................48

CGN APP ANALYTICS ................................................................................................... 51Traffic .............................................................................................................................................51

Subscriber ..............................................................................................................................................51Traffic: CGN Services ( LSN and NAT Services only) ........................................................................54

Port Mapping ........................................................................................................................................54Port Mapping ........................................................................................................................................54NAT Pools ..............................................................................................................................................55Misbehaviors ........................................................................................................................................ 57

Traffic: CGN Services Page for Fixed NAT Services .........................................................................58Traffic CGN Thunder Cluster ...................................................................................................................61

Thunder Cluster ...................................................................................................................................61Traffic : Internet .........................................................................................................................................62

Destination ...........................................................................................................................................62Applications..................................................................................................................................63Drops..............................................................................................................................................65IP Anomaly.................................................................................................................................... 70

DDoS or Intelligent DDoS .......................................................................................................................... 71Synchronize Cookie .................................................................................................................... 72Subscriber Port Usage ............................................................................................................... 72

LOG VIEW PANEL ........................................................................................................... 75Session Logs ................................................................................................................................ 75Error Logs...................................................................................................................................... 78Alerts Logs.................................................................................................................................... 78Event Logs.................................................................................................................................... 79

CGN APP TROUBLESHOOTING ....................................................................................... 81

5


Contents

KPI drill down................................................................................................................................82Log Drill Down ..............................................................................................................................82Link Cursor....................................................................................................................................83Chart Overlay ...............................................................................................................................83IP Anomaly Detection.................................................................................................................83Synchronise Cookie ....................................................................................................................85App Firewall and Watch List......................................................................................................85Error and Drop Analytics ..........................................................................................................85Session Log Analytics ................................................................................................................85

ADDITIONAL RESOURCES AND TECHNICAL SUPPORT ....................................................87Supported Products ................................................................................................................... 87Technical and Customer Support............................................................................................ 87


Contents

6

7


Contents


Contents

8

9

CGN App v3.5 User GuideFeedback

INTRODUCTION TO CGN HARMONY APP

Carrier Grade Networking Address Translation (CGN or CGNAT), also known as Large Scale NAT (LSN), is an extension of traditional Network Address Translation (NAT) technologies for large scale networks and Internet Service Providers (ISPs).

CGN provides a solution to relieve IPv4 exhaustion and is an integral part of IPv6 migration.

The A10 Networks® Harmony Controller - CGN App v3.5 provides visibility and analytics for A10 Networks® CGN services.

Thunder CGNIPv4 Preservation and IPv6 Transition Management:

The most advanced CGN solution, A10 Thunder® Series CGN provides high-performance, highly transparent network address and protocol translation that allows service providers and enterprises to extend IPv4 network connectivity, while simultaneously transitioning to IPv6 standards.

NOTE: For more information on Harmony Applications, and details about CGN and CGN Apps v3.5, see http://docs.hc.a10networks.com/.


Thunder CGN

10

eeeFF Feedback

CGN App Benefits

The A10 CGN App simplifies operations and monitoring for CGN infrastructure, performance analytics, anomaly detection, and faster troubleshooting. Infrastructure and application operations teams can centrally manage infrastructure configuration and application policies for A10 Thunder and Lightning application for CGN services. The CGN services also provide high performance, highly transparent, network address and protocol translation.

At a high level, the benefits include:

• Improved service quality.

• Reduced operation time and complexity.

https://www.surveymonkey.com/r/WHZK9CH

11


INSTALLATION AND UPGRADE

CGN App collects data from ACOS instances or standard hardware-based ACOS devices. The CGN App can be installed and managed according to the Provider-Tenant architecture to manage tenants and users.

User Roles: Super/Provider Admin, Tenant/App Admin

To know more about this Provider-Tenant model, refer to Harmony Controller documentation here:

http://docs.hc.a10networks.com/a10-providertenant-model.html

The A10 Networks® CGN Harmony App v3.5 software is packaged within Harmony Controller 5.2.0. There is no installation needed.

CGN App v3.5 is also available as a package file in .zip format. You can install on a Harmony Controller platform running 5.2.0 or higher.

The following topics are covered in this chapter:

• Management of CGN App/Prerequisites

• App Catalog

• Upload an App

• Update an App

• Installed Apps

• Enabling or Disabling CGN App

• Delete/Uninstall CGN App

Management of CGN App/Prerequisites

http://docs.hc.a10networks.com/5.1.0p2/a10-providertenant-model.htm

http://docs.hc.a10networks.com/5.1.0p2/a10-providertenant-model.htm

http://docs.hc.a10networks.com/5.1.0p2/a10-providertenant-model.html




12

eeeFF Feedback

CGN Dashboard

The A10 CGN Dashboard displays analytics for Applications, Appservers, Thunder, Client and Logs. The configuration can be loaded and accessed through CGN Apps.

For more information, see:

http://docs.hc.a10networks.com/ThunderADC/a10-thunder-adc.html

App Catalog

The App Catalog on Harmony Controller provides the list of uploaded Harmony Apps, with the following conditions:

• The Root or Provider administrator can enable the CGN App and make it available for the Tenants or Provider.

• Root administrator can only update or delete the CGN App from App Catalog.

• When Harmony CGN App is successfully added, the CGN app is visible under App Catalog.

Upload an App

Follow the steps to upload a new app from the App Catalog section:

1. Select Harmony Controller > root or Provider account.

2. Click Apps > App Catalog from the app store.

3. Click + Upload an App, to add the new version of the CGN App to Harmony Controller.

http://docs.hc.a10networks.com/5.1.0p2/cgn_dashboard.html


13


FIGURE 1 : Harmony Controller > root > + Upload an App

4. Browse the CGN App package file to upload from the local repository.

5. Add the app description and click Next.



14

eeeFF Feedback

FIGURE 2 : Upload App and provide details

Update an App

This option is available only for the root or Provider account. Follow the steps to update an app from the App Catalog section:

1. Click Apps > App Catalog and select the provider from the drop-down.

2. Click : and select Update to update an app.

3. Browse the CGN App package file to upload from the local repository.

4. Add the app description and click Update.


15


FIGURE 3 : root > Apps Manager > Apps Catalog > CGN App > Update

Installed Apps

All available apps for the root or Provider are displayed under Installed Apps.

Enabling or Disabling CGN App

This option is available for the Tenant account . To enable or disable CGN app, follow the below steps:

1. Click Apps > My Apps and select the Tenant from the drop-down.

2. Click CGN App and select : > Enable/Disable to enable or disable the app.



16

eeeFF Feedback

FIGURE 4 : Enable CGN App


17


Delete/Uninstall CGN App

This option is available only for the root or Provider account .Follow the steps to delete an app from the App Catalog section:

1. To search for CGN App, type the app name in the search tab.

2. To uninstall the CGN App, select : > Uninstall.

FIGURE 5 : root > Apps Manager > Apps Catalog > CGN App > Uninstall



18

eeeFF Feedback


19


CGN APP GETTING STARTED

The A10 Networks® Harmony Controller - CGN App v3.5 provides visibility and analytics for A10 Networks® CGN services.


• Help for Getting Started

• Launching the CGN App through (Provider) Root

• Loading the Tenant

• Launching CGN App through Tenant

• Help Center for CGN App


20

eeeFF Feedback

Help for Getting Started

To get started with the CGN App, view the Video Tutorial or Getting Started.

FIGURE 6 : Getting Started with App from Harmony Controller

Launching the CGN App through (Provider) Root

To launch the CGN App:

1. Login to Harmony Controller > root.

2. Click Apps > CGN in the side panel.


21


FIGURE 7 : Harmony Controller > Root > CGN Dashboard



22

eeeFF Feedback

FIGURE 8 : Launch CGN App

Loading the Tenant

1. Select the user account. The SuperAdmin, (Provider) Root, ControllerTenant options are available.

2. Select predefined ControllerTenant associated to a cluster and select the partition option in the drop-down list at top.

NOTE: Disable pop-up blocker to ensure that the select tenant windowpop-up, functions correctly.

Launching CGN App through Tenant

To launch the CGN App from Harmony Controller Tenant user account:

1. Login to Harmony Controller.

2. Select the related Tenant user account on top panel.

3. Click Apps Manager drop-down on left hand panel of Harmony Controller.


23


4. The following two tabs are available in Harmony Controller Apps Manager ;

5. Click Installed Apps . Select the required App and click Enable.

6. To launch the App from Harmony Controller Tenant user account, click Installed Apps . Select the required App and click Enable.

FIGURE 9 : Harmony Controller (Tenant) > Apps Manager > Installed Apps

7. Click My Apps on left hand panel.

8. To launch ADC App, click menu “:” > launch the App on app in My Apps page.

Tab Description

My Apps Provides a list of all enabled Apps

Installed Apps Provides a list of Apps loaded to the Controller Tenant Repository



24

eeeFF Feedback

FIGURE 10 : Harmony Controller > Apps Manager > My Apps

9. Select Tenant and click Proceed to launch the App.

NOTE: Disable pop-up blocker to ensure that the Select Tenant window pop-up functions correctly.


25


Help Center for CGN App

The Help Center the following quick access links

• Product documentation

• Product Demos

• Technical Articles

• Video Tutorials

• White Papers

• Create Ticket

• Privacy Policy

• End of Sale

Click the“?” icon on the top-right corner of the application navigation bar to access and explore the feature.



26

eeeFF Feedback

FIGURE 13 : CGN App Help Center Pop-up Menu Widget


27


CGN APP DASHBOARD

CGN App Key Performance Indicator Bar

Key Performance Indicator Bar The CGN App KPI bars are of two types:

• KPI Bar for LSN and NAT Services

• KPI Bar for Fixed-NAT Services

The CGN App v3.5 contains the following main tabs with various feature widgets:

• CGN App Service Selector

•

• Time Window Selector

• Alerts and Events Menu

• Sync Tooltip

• Overall Dashboard

• CGN Dashboard

CGN App Service SelectorThe App Service Selector is available on the CGN App Header for Dashboard and Analytics tab selections.

The CGN App Service Selector is a selection list. Select the pre-defined application services to view the related data and statistics.

FIGURE 14 : App Service Selector -CGN App Header


Key Performance Indicator Bar

28

eeeFF Feedback

KPI Bar for LSN and NAT Services

The CGN KPI Bar displays the following statistics for LSN and NAT services. This data is refreshed every time as per the selection in the Time Window Selector widget:

FIGURE 15 : KPI Bar on CGN App Header

KPI Drilldown for LSN and NAT Services

To analyze the KPI statistics in detail, click the KPI to view the detailed statistics on the widgets , when LSN or NAT services are configured.

SUBSCRIBERS

The current number of subscribers of the selected CGN service with one or multiple active sessions in the following report formats:

• Stacked Column

• Area

• Histogram

The various widgets displayed are:

The KPI Bar Widget for LSN and NAT services are:

Widget / Field DescriptionSUBSCRIBERS Current number of subscribers of the selected CGN service with one or

multiple active sessions.CURR SESS/ SESS RATE Current average active sessions and session creation rate.THROUGHPUT(bps) Current Uplink and Downlink throughput in bits per second. PACKET RATE(pps) Current Uplink and Downlink packet rate in packets per second. TCP / UDP POOL USE Current percentage of pool utilization of all NAT pools in active partition and

shared partitions.Control CPU Current usage percentage of control CPU.Data CPU Current usage percentage of CPU data.Memory Current percentage of memory utilization.

Widget / Field DescriptionUSER QUOTA CREATED Displays the time series of newly created user quota.USER QUOTA DELETED Displays the time series of user quota freed.


29



Feedback

FIGURE 16 : CGN App > KPI Bar > Subscribers Drilldown

CURR SESSION/ SESS RATE

Current number of sessions of the selected CGN service with one or multiple active sessions for the selected time range, in the following report formats:

• Stacked Column

• Area

• Histogram

The various widgets displayed are:

Widget / Field DescriptionSESSIONS CREATED Displays the time series of newly created data sessions SESSIONS DELETED Displays the time series of data sessions freed.




30

eeeFF Feedback

FIGURE 17 : CGN App > KPI Bar > SESSION RATE Drilldown

THROUGHPUT(bps)

The current number of sessions of the selected CGN service with one or multiple active sessions for the selected time range, in the following report formats:

• Stacked Column

• Area

• Histogram

The various widgets displayed for Uplink section are:

The various widgets displayed for Downlink section are:

Widget / Field DescriptionForward Egress Bytes TCP Displays the time series of TCP throughput measured at forward direction

egress side.

Forward Egress Bytes UDP Displays the time series of UDP throughput measured at forward direction egress side.

Forward Egress Bytes ICMP Displays the time series of ICMP throughput measured at reverse direction egress side.

Forward Egress Bytes OTHERS Displays the time series of others throughput measured at forward direc-tion egress side.

Widget / Field DescriptionReverse Egress Bytes TCP Displays the time series of TCP throughput measured at reverse direction

egress side.

Reverse Egress Bytes UDP Displays the time series of UDP throughput measured at reverse direction egress side.


31



Feedback

FIGURE 18 : CGN App > KPI Bar >THROUGHPUT Drilldown

PACKET RATE(pps)

The currentnumber of sessions of the selected CGN service with one or multiple active sessions for the selected time range in the following report formats:

• Stacked Column

• Area

• Histogram

The various widgets displayed for Packet Rate section are:

Reverse Egress Bytes ICMP Displays the time series of ICMP throughput measured at reverse direction egress side.

Reverse Egress Bytes OTHERS Displays the time series of others throughput measured at reverse direc-tion egress side

Widget / Field Description

Widget / Field DescriptionForward Egress Bytes TCP Displays the time series of TCP throughput measured at forward direction

egress side.

Forward Egress Bytes UDP Displays the time series of UDP throughput measured at forward direction egress side.




32

eeeFF Feedback

TCP / UDP POOL USE

The current number of sessions of the selected CGN service with one or multiple active sessions for the selected time range in the following report formats:

• Stacked Column

• Area

• Histogram

The various widgets displayed for this section are:

Control CPU, Data CPU, Memory

Displays the infrastructure utilization of the selected CGN service with one or multiple active sessions for the selected time range in the following report formats:

• Stacked Column

• Area

• Histogram


Forward Egress Bytes ICMP Displays the time series of ICMP throughput measured at reverse direction egress side

Forward Egress Bytes OTHERS Displays the time series of others throughput measured at forward direc-tion egress side.


Widget / Field DescriptionTCP POOL USE Displays the time series of the percentage of used TCP ports from all avail-

able NAT pools, including NAT pools deployed in the partition where this CGN technology is deployed on and the shared partition.

UDP POOL USE Displays the time series of the percentage of used UDP ports from all avail-able NAT pools, including NAT pools deployed in the partition where this CGN technology is deployed on and the shared partition.

IP TOTAL Displays the time series of the number of available NAT IPs in all available NAT pools.

Widget / Field DescriptionCONTROL CPU Displays the time series of control CPU utilization.DATA CPU Displays the time series of data CPU utilization.MEMORY Displays the time series of memory utilization.


33



Feedback

FIGURE 19 : KPI Bar > Infrastructure Utilization Drilldown

KPI Bar for Fixed-NAT Services

The CGN KPI Bar displays the following statistics for Fixed NAT services. This data is refreshed every time as per the selection in the Time Window Selector widget:

FIGURE 20: KPI Bar on CGN App Header: Fixed NAT Services

The KPI Bar Widget for fixed NAT services are:

Widget / Field DescriptionNAT IPS The current value of number of NAT IPs configured in the selected CGN

service.CURR SESS/ SESS RATE The current active sessions and session creation rate.THROUGHPUT(bps) The current Uplink and Downlink throughput in bits per second. PACKET RATE(pps) The current Uplink and Downlink packet rate in packets per second. TCP / UDP PORT USE Maximum port utilization percentage for TCP and UDP, Control CPU The current usage percentage of control CPU.Data CPU The current usage percentage of CPU data.Memory The current percentage of memory utilization.




34

eeeFF Feedback

KPI Drilldown for Fixed-NAT Services

To analyse the KPI statistics in detail, click the KPI to view the detailed statistics on the widgets , when Fixed NAT services are configured.

• Subscribers

• CURR SESS/ SESS RATE

• THROUGHPUT / UDP PORT USE

• PACKET RATE(pps)

• TCP / UDP PORT USE

• Control CPU, Data CPU, Memory(bps)

All KPI drilldowns provide similar information for FIXED NAT Services, however additional details for Fixed-NAT and DS-LITE services are provided for Throughput and Packet Rate

PACKET RATE(pps)

Displays the CGN traffic packet rate of the selected CGN service with one or multiple active sessions for the selected time range in the following report formats:

• Stacked Column

• Area

• Histogram


35



Feedback


Widget / Field DescriptionFIXED NAT44 FORWARD EGRESS BYTES ICMP

Displays the time series of ICMP bytes rate of Fixed NAT44 technology measured at forward direction egress side.

FIXED NAT44 FORWARD EGRESS BYTES TCP

Displays the time series of TCP bytes rate of Fixed NAT44 technology mea-sured at forward direction egress side.

FIXED NAT44 FORWARD EGRESS BYTES UDP

Displays the time series of UDP bytes rate of Fixed NAT44 technology mea-sured at forward direction egress side.

FIXED NAT44 FORWARD EGRESS BYTES OTHERS

Displays the time series of others bytes rate of Fixed NAT44 technology measured at forward direction egress side.

FIXED DS-LITE FORWARD EGRESS BYTES ICMP

Displays the time series of ICMP bytes rate of Fixed DS-Lite technology measured at forward direction egress side.

FIXED NAT64 FORWARD EGRESS BYTES ICMP

Displays the time series of ICMP bytes rate of Fixed NAT64 technology measured at forward direction egress side.

FIXED NAT64 FORWARD EGRESS BYTES TCP

Displays the time series of TCP bytes rate of Fixed NAT64 technology mea-sured at forward direction egress side.

FIXED NAT64 FORWARD EGRESS BYTES UDP

Displays the time series of UDP bytes rate of Fixed NAT64 technology mea-sured at forward direction egress side.

FIXED NAT64 FORWARD EGRESS BYTES OTHERS

Displays the time series of others bytes rate of Fixed NAT64 technology measured at forward direction egress side.

FIXED DS-LITE FORWARD EGRESS BYTES TCP

Displays the time series of TCP bytes rate of Fixed DS-Lite technology measured at forward direction egress side.

FIXED DS-LITE FORWARD EGRESS BYTES UDP

Displays the time series of UDP bytes rate of Fixed DS-Lite technology measured at forward direction egress side.

FIXED DS-LITE FORWARD EGRESS BYTES OTHERS

Displays the time series of others bytes rate of DS-LITE technology mea-sured at forward direction egress side.




36

eeeFF Feedback

FIGURE 21 : KPI Bar > Throughput Drilldown for Fixed NAT and DS-Lite


37



Feedback

PACKET RATE(pps)

Displays the CGN traffic packet rate of the selected CGN service with one or multiple active sessions for the selected time range in the following report formats:

• Stacked Column

• Area

• Histogram


Widget / Field DescriptionFIXED NAT44 FORWARD EGRESS PACKETS ICMP

Displays the time series of ICMP packet rate of Fixed NAT44 technology measured at forward direction egress side.

FIXED NAT44 FORWARD EGRESS PACKETS TCP

Displays the time series of TCP packet rate of Fixed NAT44 technology measured at forward direction egress side.

FIXED NAT44 FORWARD EGRESS PACKETS UDP

Displays the time series of UDP packet rate of Fixed NAT44 technology measured at forward direction egress side.

FIXED NAT44 FORWARD EGRESS PACKETS OTHERS

Displays the time series of others packet rate of Fixed NAT44 technology measured at forward direction egress side.

FIXED DS-LITE FORWARD EGRESS PACKETS ICMP

Displays the time series of ICMP packet rate of Fixed DS-Lite technology measured at forward direction egress side.

FIXED NAT64 FORWARD EGRESS PACKETS ICMP

Displays the time series of ICMP packet rate of Fixed NAT64 technology measured at forward direction egress side.

FIXED NAT64 FORWARD EGRESS PACKETS TCP

Displays the time series of TCP packet rate of Fixed NAT64 technology measured at forward direction egress side.

FIXED NAT64 FORWARD EGRESS PACKETS UDP

Displays the time series of UDP packet rate of Fixed NAT64 technology measured at forward direction egress side.

FIXED NAT64 FORWARD EGRESS PACKETS OTHERS

Displays the time series of others packet rate of Fixed NAT64 technology measured at forward direction egress side.

FIXED DS-LITE FORWARD EGRESS PACKETS TCP

Displays the time series of TCP packet rate of Fixed DS-Lite technology measured at forward direction egress side.

FIXED DS-LITE FORWARD EGRESS PACKETS UDP

Displays the time series of UDP packet rate of Fixed DS-Lite technology measured at forward direction egress side.

FIXED DS-LITE FORWARD EGRESS PACKETS OTHERS

Displays the time series of others packet rate of DS-LITE technology mea-sured at forward direction egress side.




38

eeeFF Feedback

Time Window Selector

The Time Window Selector has the following components:

FIGURE 22 : Time Window Selector

Alerts and Events Menu

For all app services, new overlays and alerts are displayed, with events statistics and KPI time series. Alerts consist of all levels of alerts and events from the CGN app services, for tenants, clusters and devices, where these app services are deployed.

• metrics time series chart from session rate to overlay with events.

• red dots indicate that there are one or multiple alerts and events.

• by default all alerts and events are enabled.

• Enable or disable Alerts, by selecting “:” menu next to the Time Slider.

Overlay alerts and events are displayed on the time series graphs in CGN App Analytics and Dashboard pages. New alerts and events generated are plotted on the time series graph in real time. Using this information, users can:

• Correlate the events and alerts data with live traffic for troubleshooting.

• Easily map any significant modification in incoming traffic to corresponding events or alerts that triggered the change in traffic.

The five categories of alerts and events are:

• System Events

• Service Alerts

• Infrastructure Alerts

• Anomalies

Widget / Field DescriptionCalendar Widget - Date Selector

Select date timeline using the calendar.

Time Selection Scroll Bar Select the timeline for data analysis.Auto Refresh Timer Specify a time to refresh the page automatically.


39



Feedback

• Configuration Events (Category – System; Sub-category – Services)

These alerts & events can be configured from Harmony Controller.

Users can select the type of overlay alerts and events on the charts from the dropdown menu next to the Auto Refresh duration selection button.

The overlay data is displayed on the charts as red dots. On hover on any of the overlay point, a tooltip displays what category of event/alert occurred at that timestamp.

A new menu option : is available next to the Time Selector, to enable Alerts and events overlay data. Click the menu option to find Alerts and Events On Off button.

The Alerts and Event Overlay options are available for all CGN App Dashboard and Analytics widgets when Alerts and Events are enabled from Alerts and Events menu. CGN App > Alerts and Events Menu

Drilldown From Chart Overlay Events

This enhancement provides the following functionalities:

• Chart overlay events drill down to display the Event View panel. The Tooltip in time series charts in CGN App display:

• Category list of alerts and events.

• Count of alerts and events against each category type.

• Click on a category of alerts & events in the tooltip. Drill down to the CGN App > Log View > Alerts and Events section and display the selected category of logs and events for the selected time interval displayed in the tooltip. Users can view more details about the alerts and events that occurred in the selected interval.

Sync Tooltip

All charts in ADC App Dashboard and Analytics tab widgets have Linked Cursor for the charts. The linked chart option is enabled when you click Sync Tooltip button.

Link Cursor

The tooltips of the charts are linked together. Once user moves the cursor into one of the charts, it displays the tooltip and line at the cursor point. All related charts display tooltips and lines at the points with the same timestamp.


http://docs.hc.a10networks.com/HC-5.2.0/a10-alerts-events1.html



40

eeeFF Feedback

A new switch button Sync Tooltip is available on the right of Time Bar. It is used to enable or disable the Linked Cursor.The cursor links the charts together to easily contrast data among the different charts.

The Link Cursor is displayed as a red line when user hovers over any time series chart on the CGN App widgets. The link cursor is indicated for all the analytics widgets as a red vertical line pointing to the same time instance.

Unlinked Charts

Tool sync tip functionality provides option for user to turn ON/OFF the sync of cursors in multiple charts. When "Sync Tooltip" is turned off and the cursor is moved into a chart, only the current chart will show tooltip and line where the cursor is displayed.

FIGURE 23: CGN App > Sync Tooltip > Enable/ Disable Link Cursor


41



Feedback

Overall Dashboard

Select the “Overall” Option in the dashboard KPI bar selection list to view the CGN App > Overall Dashboard. It has various widgets as follows:

Widget / Field DescriptionALERTS Displays the list of service alerts from CGN app services in current

tenant and infrastructure alerts from the devices in the clusters where these CGN app services are deployed.

The alerts and events are color coded as follows:

• Red: Number of alerts at Emergency, Alert, Critical, and Error levels• Orange: Number of alerts at Warning level• Green: Number of alerts at Notification level• Blue: Number of alerts at Information level• Yellow: Number of alerts at Debug level

This information can be further sorted by:

• Time• Severity• Object Type• Name




42

eeeFF Feedback

GEOGRAPHICAL LOCATIONS This widget displays global map with number of devices as a colour coded map with additional device location feature, where device details like IP and zone (city name) / location are displayed as overlay on the geo-location maps.

SCORECARD Scorecards: The scorecard displays key performance indicators (KPIs), attributes of the CGN app services, and the devices and clusters where these CGN app services are deployed. The scorecards can be used at different levels:

• Servers, • Clusters, • Device usage statistics.

The Scorecard can only be used for monitoring metrics at app service, device & cluster levels.

Each scorecard selection has a pull down menu where user can select various KPIs and parameters to be displayed on the scorecard to help in analysis and troubleshooting.

The scorecard also has “search by” options. The search parameters are different based on the tab selected in the Scorecard.

• For Service Tab - Search by app services.• For Clusters Tab - Search by cluster name or location.• For Devices Tab - Search by Device name or location.• For MyCard Tab - Search by app service name, cluster name, device

name or location.



43



Feedback

FIGURE 24: CGN App > Overall Dashboard

CGN App > Overall Dashboard> My Device pull-up menu




44

eeeFF Feedback

CGN Dashboard

Select the LSN, NAT64 or fixed NAT services option in the dashboard KPI bar selection list, to view the CGN Dashboard.

The following is a list of new features and their details included in this product:

• SUBSCRIBERS Widget

• SESSIONS Widget

• THROUGHPUT Widget

• PACKET RATE Widget

• MAPPINGS BY PROTOCOL

• INFRASTRUCTURE RESOURCES

• MAPPINGS

• POOL UTILIZATION (LSN and NAT64 services)

• TRAFFIC BY PROTOCOL

NOTE: The descriptions, statistics and formulas for the analytics displayed on CGN App are also available in the Debug window >Design document tab.

FIGURE 25 : CGN App Dashboard Widgets


45



Feedback

SUBSCRIBERS Widget

Displays the Average Subscribers number, Newly Added, and Removed subscribers in the time frame selected and their time series.

SESSIONS Widget

Displays the average sessions, average session rate, total accumulative of newly opened and closed sessions, and their time series.

INFRASTRUCTURE RESOURCES

Displays the peak, average, and time series of control CPU, data CPU and memory utilization of the cluster where the selected CGN service is deployed.

MAPPINGS BY PROTOCOL

Displays the average port mappings for the selected time window, filter by TCP, UDP and ICMP protocols and the relative traffic share.The statistics for MAPPINGS BY PROTOCOL are displayed in separate tabs.

THROUGHPUT Widget

This widget displays the amount of traffic, Uplink and Downlink throughput in time series and histogram with even buckets between 0 and maximum value.

PACKET RATE Widget

This widget displays the Uplink and Downlink packet rate in time series and histogram with even buckets between 0 and maximum value.




46

eeeFF Feedback

FIGURE 26: CGN App Dashboard Widgets: Mappings, Pool Utilization

MAPPINGS

This widget displays the following port mapping analytics:

• QUOTA EXCEEDED: Displays the time series and histogram of quota exceeded event by quota type, i.e., TCP, UDP, ICMP, extended user quota, data session user quota and ses-sion rate user quota.

• PORT UNAVAILABLE: Displays the time series and histogram of ports unavailable as per port type, i.e., TCP, UDP, ICMP.

• MAPPINGS: Displays the time series and histogram of active port mappings by TCP, UDP, ICMP protocols.

POOL UTILIZATION (LSN and NAT64 services)

This widget displays the utilization time series for percentage of used ports.by protocol, ( TCP, UDP, ICMP), subscribers per NAT IP, percentage of used NAT IPs and total NAT pool size. These NAT pools may be shared by a number of CGN technologies. This widget supports upto 30 NAT pools. This widget has the following tabs:

• TCP

• UDP

• Subscribers per NAT IP


47



Feedback

• NAT IP

• Size (NAT IPs)

NOTE: Pool Utilization Widget is available only for LSN and NAT services.

TCP

This widget shows time series of the maximum TCP port utilization of available ports in the pool, i.e., number of NAT IPs multiply by 64512. This widget also shows maximum NAT IP utilization, i.e., maximum used NAT IPs divided by total NAT IPs in the pool. These NAT pools are configured in the current partition or in the shared partition.

UDP

This widget shows time series of the maximum UDP port utilization of available ports in the pool, i.e., number of NAT IPs multiply by 64512. This widget also shows maximum NAT IP utilization, i.e., maximum used NAT IPs divided by total NAT IPs in the pool. These NAT pools are configured in the current partition or in the shared partition.

ICMP

This widget shows time series of the maximum ICMP port utilization of available ports in the pool, i.e., number of NAT IPs multiply by 64512. This widget also shows maximum NAT IP utilization, i.e., maximum used NAT IPs divided by total NAT IPs in the pool. These NAT pools are configured in the current partition or in the shared partition.

Subscribers per NAT IP

This widget shows the time series of active subscribers using the pool per NAT IP. These NAT pools are configured in the current partition or in the shared partition.

NAT IP

This widget shows the percentage of NAT IPs used.

Size (NAT IPs)

This widget shows the number of NAT IPs configured in the NAT pool.




48

eeeFF Feedback

FIGURE 27 : Pool Utilization Widget

TRAFFIC BY PROTOCOL

Displays the throughput and packet rate by protocol, i.e TCP, UCP, ICMP, Others.

• THROUGHPUT: Displays the throughput time series by protocol.

• PACKET RATE: Displays the packet rate time series by protocol.


49



Feedback

FIGURE 28: CGN App > Dashboard > Traffic By Protocol

FIGURE 29 : CGN Dashboard for Fixed NAT services




50

eeeFF Feedback


51


CGN APP ANALYTICS

The A10 Networks® Harmony Controller - CGN App v3.5 provides visibility and analytics for your A10 Networks® CGN services.


• Traffic

• Applications

• IP Anomaly

• Synchronize Cookie

• Subscriber Port Usage

Traffic The Harmony CGN App Analytics screen has the Selector Diagram displays the various statistics for:

• Subscriber

• Traffic: CGN Services ( LSN and NAT Services only)

• Traffic CGN Thunder Cluster

• Traffic : Internet

Click the required option to view the related analytics.

FIGURE 30: Analytics Selector Diagram

Subscriber

Click the Subscriber option to view the related analytics page.


Traffic

52

eeeFF Feedback

NOTE: If the FIXED NAT option is selected in the App Service Selector, theSubscribers widget, USER QUOTA, and USER QUOTA EXCEEDEDwidgets are not displayed.

The Subscriber Analytics page has the following widgets:

Widget / Field DescriptionSUBSCRIBERS Displays the Average Subscribers number, Newly Added and Removed

subscribers in the time frame selected and their time series. MAPPINGS Displays the average port mappings, total number of mappings

created, freed, and their time series.SESSIONS Displays the average sessions, average session rate, total accumulative of

newly opened and closed sessions, and their time series. SESSION TIME SERIES Time series of Concurrent, Created and Freed subscriber sessions. SESSION RATE Time series and histogram of new sessions created per second.USER QUOTA User quota time series filtered by, active, created and removed users. PACKET SIZE HISTOGRAM Subscriber side packet size histogram as per Uplink, Downlink with bucket

size defined by ACOS.USER QUOTA EXCEEDED The time series and histogram for user session quota exceeded by quota

types: TCP, UDP, ICMP, Extended, Data Sessions or Session Rate.TOP SUBSCRIBERS(IPV4) Top subscribers with IPv4 addresses in Uplink or Downlink sorted by vol-

ume, packets, and sessions, calculated using sampled logs sorted as per time and percentage.

HOURS:PERCENTAGEChart based on percentage sampled logs in the specified number of hours.

TOP SUBSCRIBERS(IPV6) Top subscribers with IPv6 addresses in Uplink or Downlink sorted by vol-ume, packets, and sessions, calculated using sampled logs sorted as per time and percentage.

HOURS:PERCENTAGEChart based on percentage sampled logs in the specified number of hours.

THROUGHPUT (Subscriber side)

Throughput time series for total traffic or protocol traffic filtered by Uplink or Downlink measured on subscriber side.

PACKET RATE (Subscriber side)

Packet rate time series for total traffic or protocol traffic filtered by Uplink or Downlink measured on subscriber side.


53


Traffic

Feedback

FIGURE 31 : CGN App Subscriber Analytics



Traffic

54

eeeFF Feedback

Traffic: CGN Services ( LSN and NAT Services only)

The CGN Service analytics are visible only for LSN and NAT services selection.

Click the CGN Services option on the illustration diagram to view the related traffic analytics.

Port Mapping

The CGN Services Analytics page has the following widgets under Port Mapping section:

Port Mapping

The CGN Services Analytics page has the following widgets under Port Mapping section:

Widget / Field Description MAPPINGS BY PROTOCOL

Average port mappings for the selected time window, filter by TCP, UDP and ICMP protocols and the relative traffic share.

PORT MAPPINGS Histogram of port mappings created and freed events, filtered by Created or Freed CGN services.Time series of port mapping events.

MAPPING ERRORS The time series of mapping errors, including TCP NAT port unavailable, UDP NAT port unavailable, and ICMP NAT port unavailable.

SESSIONS BY TECHNOLO-GIES

Time series of active concurrent sessions or opened/closed sessions, filter by technologies, like NAT 44 NAT 64 and DSLITE;

USER QUOTA EXCEEDED Sessions with user quota exceededTCP FULL CONE CONNEC-TIONS

Time series of TCP full cone current connections, and opened/closed events, filter by technologies.

UDP FULL CONE SESSIONS Time series of UDP full cone current sessions, and opened/closed events, filter by technologies.

Widget / Field DescriptionACTIVE MAPPINGS BY PROTOCOL

Active mappings time series, filter by TCP, UDP, ICMP protocols.

MAPPING EVENTS HISTOGRAM

Histogram of mappings created and freed events, filtered by Created or Freed CGN services.

MAPPING EVENTS Mapping event time series by created and freed events of CGN services.


55


Traffic

Feedback

FIGURE 32: Analytics > Traffic > CGN Services ( LSN and NAT64 only) > Port Mappings

NAT Pools

The Fixed-NAT Pool Utilization Histogram provides protocol specific statistics for how many ports, the Fixed-NAT subscribers are using in real-time with the following options:

• Histogram per fixed-NAT configuration

• Supports only TCP/UDP port usage

• Supported on shared and L3V partitions

• Histogram is generated only when Fixed-NAT is configured and it cannot be enabled or dis-abled.

MAPPINGS BY PROTOCOL Average port mappings for the selected time window, filter by TCP, UDP and ICMP protocols and the relative traffic share.

MAPPING ERRORS The mapping for errors time series including TCP NAT ports unavailable, UDP NAT ports unavailable, ICMP NAT port unavailable, user quota creation failed, full cone session creation failure.

FULL CONE SESSIONS Histogram of number of active full cone sessions, filter by TCP and UDP protocols.




Traffic

56

eeeFF Feedback

This widget enhancement provides the snapshot statistics for port utilization of each NAT pool for both LSN and Fixed NAT. User can measure the port allocation efficiency and use this data for IP address planning. The user can make better use of resources by allocating more or less NAT IPs per configuration.

The following new/enhanced statistics are available in the Pool Utilization Widget:

• Total pool utilization %

• Per pool utilization %

• Total mapped subscribers

• Total users

The widget provides information on how many ports the subscribers are using, in a time graph for-mat. This helps the user to analyse:

• Number of subscribers impacted by the current quota configuration at different times of the day.

• Number of requests denied by the quota settings

• For a goal of < 0.01% of subscriber, what are the UQ/EUQ settings

• For a goal of < 0.001% of sessions, what are the UQ/EUQ settings

• If more IPs are added in the pool, what the UQ/EUQ settings must be to reach the required goals

• Predict, if there is a change UQ/EUQ to larger or smaller values, what number of subscribers and sessions are impacted

• With the upper part of the range, user can see how many users are actively using ports in the higher range at a given time. The upper bound will be based on the customer's Fixed-NAT configuration.

The CGN Services Analytics page has the following widgets under NAT Pools section:

Widget / Field DescriptionPOOL UTILIZATION Pool utilization time series by protocols and Port, Used NAT IPs and

Size (NAT IPs) utilization.

• Ports, • IPs• Subscribers for NAT pools.

These NAT pools can be shared by a number of CGN technologies. This widget supports upto 30 NAT pools


57


Traffic

Feedback

FIGURE 33: Analytics > Traffic > CGN Services ( LSN and Fixed NAT only) > NAT Pools

Misbehaviors

The CGN Services Analytics page has the following widgets under Misbehaviors section:

TOP USED NAT IPs Top NAT IPs(upto 30) used within these pools, calculated by sampled logs collected from devices.

POOL ERRORS NAT pool related errors, filter by Pool Unusable, HA NAT Pool Unusable.


Widget / Field DescriptionLID POLICY ACTIONS Time series of LID Policy Actions, filter by drops and pass through.

BLACKLISTING Time series of number of blacklisting policy actions, filter by:

• User-Quota Unusable Drop • User-Quota Marked Unusable.

DROPS Time series of occurrences of drops based on specified reason:

• Self Hairpinning,• Inbound Filtered, • LID Drop, • New User NAT Resource Unavailable, • No Class-List match.

UPLINK THROUGHPUT Compare throughput by ingress and egress in Uplink direction, filter by protocols TCP, ICMP, UDP, Other and Total.

DOWNLINK THROUGHPUT Compare throughput by ingress and egress in Downlink direction, filter by protocol TCP, ICMP, UDP, Other and Total.



Traffic

58

eeeFF Feedback

FIGURE 34: Analytics > Traffic > CGN Services ( LSN ) > Misbehaviors

Traffic: CGN Services Page for Fixed NAT Services

The CGN Services Page displays different widgets and analytics when Fixed NAT service is selected.

UPLINK PACKET RATE Compare packet rate in pps by Ingress and Egress in Uplink direction, filter by protocol TCP, ICMP, UDP, Other and Total.

DOWNLINK PACKET RATE Compare packet rate in pps by Ingress and Egress in Downlink direction, fil-ter by protocol TCP, ICMP, UDP, Other and Total.


Widget/Field Description

MAPPINGS BY PROTOCOL This widget displays average port mappings over the selected time window, filtered by TCP, UDP and ICMP protocols and their relative shares.

PORT MAPPINGS This widget displays port mappings ALLOCATED or FREED over the selected time window, filtered by TCP, UDP and ICMP protocols and their relative shares.

PORTS UNAVAILABLE This widget displays number of unavailable ports over the time series, filtered by TCP, UDP and ICMP protocols and their rela-tive shares.


59


Traffic

Feedback

SESSIONS BY TECHNOLOGIES This widget displays number OF SESSIONS, Concurrent, or Open/Closed over the time series window, filtered by technolo-gies NAT44 Open, NAT44 Closed, NAT64 Open, NAT64 Closed, DS-Lite Open, DS-Lite Closed and their relative shares.

USER QUOTA EXCEEDED This widget displays number of USER QUOTA EXCEEDED instances filtered by SESSIONS over the time series.

TCP FULL CONE CONNECTIONS This widget displays number of CONCURRENT and OPEN/CLOSED TCP FULL CONE CONNECTIONS over the time series, filtered by NAT44 NAT64 and DSLITE technologies.

UDP FULL CONE SESSIONS This widget displays number of CONCURRENT and OPEN/CLOSED UDP FULL CONE CONNECTIONS over the time series, filtered by NAT44 NAT64 and DSLITE technologies.

FULL CONE SESSIONS CREATION FAILED

This widget displays number of failed creation of full cone sessions over the time series.

ENDPOINT INDEPENDENT MAPPING MATCHES

This widget displays number of ENDPOINT INDEPENDENT MAPPING MATCHES over the time series, filtered by NAT44 NAT64 and DSLITE technologies.

ENDPOINT INDEPENDENT FILTERING MATCHES

This widget displays number of ENDPOINT INDEPENDENT FILTERING MATCHES over the time series, filtered by NAT44 NAT64 and DSLITE technologies.

ENDPOINT INDEPENDENT FILTERING LIMIT EXCEEDED

This widget displays number of ENDPOINT INDEPENDENT FIL-TERING LIMIT EXCEEDED instances, over the time series, fil-tered by NAT44 NAT64 and DSLITE technologies.

ENDPOINT DEPENDENT FILTERING DROPS

This widget displays number of ENDPOINT DEPENDENT FIL-TERING DROPS, over the time series, filtered by NAT44 NAT64 and DSLITE technologies.

DESTINATION RULE LIST Destination Rules define policies that apply to traffic intended for a service after routing is performed. This widget displays number of DROPS and “Pass Throughs” in the DESTINATION RULE LIST, over the time series.

HAIRPIN CONNECTIONS CREATED This widget displays number of HAIRPIN CONNECTIONS CREATED, over the time series, filtered by NAT44 NAT64 and DSLITE technologies.

SELF HAIRPINING DROP This widget displays number of SELF HAIRPINING DROPS, over the time series, filtered by NAT44 NAT64 and DSLITE technologies.

OTHER ERRORS This widget displays number of OTHER ERRORS, over the time series, filtered by:

• LID StandbyDrops• Config not found• IPV6 in IPV4 Drops• Destination Rule List SNAT Drops• Port overload failed




Traffic

60

eeeFF Feedback

UPLINK THROUGHPUT This widget compares throughput by ingress and egress in Uplink direction for the traffic protocol types:

• TCP• UDP• Total

DOWNLINK THROUGHPUT This widget compares throughput by ingress and egress in Downlink direction for the traffic protocol types:


UPLINK PACKET RATE This widget compares packet rate by ingress and egress in Uplink direction for the traffic protocol types:


DOWNLINK PACKET RATE This widget compares packet rate by ingress and egress in Downlink direction for the traffic protocol types:




61


Traffic

Feedback

FIGURE 35: Analytics > Traffic > CGN Services (Fixed NAT)

Traffic CGN Thunder Cluster

Click the CGN Thunder Cluster option on illustration diagram to view the related analytics page.

Thunder Cluster

The CGN Services Analytics page has the following widgets under Thunder Cluster section:

Widget / Field DescriptionCLUSTER CPU Control CPU and Data CPU Utilization for the total cluster percentage.

CLUSTER MEMORY Maximal value of memory utilization for the entire cluster.

CLUSTER THROUGHPUT Average and peak values of throughput of Ingress, Egress, and Total combined traffic handled by the devices in the cluster.

DEVICES IN CLUSTER App service name, ACOS version, average CPU utilization, average memory utilization, total session rate, total interface throughput, and time series for device health score.

DEPLOYMENT LOCATIONS Heat map of geographical locations of the devices in the cluster at country level if specified.

CLUSTER TRAFFIC Cluster level aggregated traffic for Ingress and Egress, filter by throughput and active sessions.



Traffic

62

eeeFF Feedback

FIGURE 36: Analytics > Traffic > CGN Thunder Cluster

Traffic : Internet

Click the Internet option on illustration diagram to view the related analytics page.

Destination

The CGN Services Analytics page has the following widgets under Destination section:

Widget / Field DescriptionTHROUGHPUT ( UPLINK, DOWNLINK)

Internet side Uplink and Downlink throughput Kbps in time series and histogram with even buckets.

PACKET RATE / PACKETs ( Fixed NAT selection only)

Internet side Uplink and Downlink packet rate or packets in pps time series and histogram with even buckets.

FRAGMENTED TRAFFIC Fragmented traffic volume by aggregated total, uplink, downlink, and total their time series and histogram, estimated from sampled logs.

THROUGHPUT ( TRAFFIC) Throughput of Internet traffic, filter by per protocol or overall throughput, in time series and histogram, for uplink and downlink

AVG PACKET SIZE Average packet size time series and histogram, filtered by uplink and downlink.

PACKET SIZE HISTOGRAM Packet size histogram, filter by uplink and downlink for Internet traffic.

TOP DESTINATIONS Displays Top IPv4 and IPv6 destinations by volume, packets and sessions, calculated using sampled logs. selection by Total, Uplink or Downlink data.


63


Applications

Feedback

FIGURE 37 : CGN App> Analytics > Internet Page

Applications The Analytics > Applications tab displays the following widgets:

Widget / Field DescriptionTOP APPLICATIONS ( Per RuleSet)

Displays statistics for Top Used Apps and Top Categories (App) for the selected time range.filtered by:

• Connections: Number of Connections• Volume : Connection Volume

APPLICATION TRAFFIC DISTRIBUTION

Displays traffic distribution of applications detected by this CGN service fil-tered by categories.

Displays PEER TO PEER APP VOLUME and CONNECTIONs statistics withfollowing information:

• FILE-MANAGEMENT, • NETWORKING, • WEB, VPN-TUNNELS, ANONYMIZERS-AND-PROXIES,

WEB-EXT-PROXY-AVOID-AND-ANONYMIZERS• WEB, MOBILE, MULTIMEDIA-STREAMING, WEB-EXT-NEWS.



Applications

64

eeeFF Feedback

LISTS MANAGER Displays application statistics with Categories, Connection, and Volume information for networking standards-based data. The lists:

• Category List• Watch List

APPLICATIONS BYCATEGORIES

Displays statistics for predefined Applications by categories, for example:

• networking, standards-based• file-management, standards-based• web, mobile, multimedia-streaming, web-ext-news• web, vpn-tunnels, anonymizers-and-proxies, web-ext-proxy-avoid-

and-anonymizers;

for the selected time range.filtered by:


APPLICATIONS BYWATCHLIST

Displays statistics for Applications defined by watchlist for the selected time range.filtered by:




65


Drops

Feedback

FIGURE 38: Analytics > Applications

Drops All counters related to service drops are tagged at different levels and for different causes ffor app services and displayed as widgets on Analytics page for the following module sections:

• CGN

• L4

• iDDoS

• System DPDK



Drops

66

eeeFF Feedback

The following widgets are available for each section:

Widget / Field DescriptionDISTRIBUTION OF ANOMALY CLASSES AND LAYERS

Displays the distribution of the IP anomalies by layers. Select a single layer to see the distribution of anomalies from that layer, filterd by:

• Layer 3• Layer 4

This widget can be used to detect distribution of anomalies for Layer 3, Layer 4, according to different pre-defined classes. For details, refer to “Transition Solutions Guide”.

DROPS BY REASON Displays the Drops by Reason time graph with filter by options:

• policy • other reason

for the related section like CGN, Layer 4, iDDoS, and System DPDK. DROPS BY REASON SUMMARY

Displays the summary list of drops by reason under Policy and Others grouping.

DROPS BY SEVERITY Displays the Drops by Severity time graph with filter by options:

• Critical • Warning• Others

DROPS BY SEVERITY SUMMARY

Displays the summary list of drops by severity under Warning Critical, or Others grouping.

ERRORS BY SEVERITY Displays the Errors by Severity time graph with filter by options:

• Critical • Warning• Others


67


Drops

Feedback

ERRORS BY SEVERITY SUMMARY

Displays the summary list of Errors by Severity under Warning, Critical, or Others grouping. For example:

Warnings:

• UDP NAT Port Unavailable• Full-cone Session Creation Failed• TCP NAT Port Unavailable• ICMP NAT Port Unavailable

BLACKLISTED ENTRIES This widget is available for iDDoS section. To view blacklisted entries, check Harmony Controller > Device Utilities > Device CLI section and run the following CLI commands:

• show cgnv6 ddos-protection ip-entries• show cgnv6 ddos-protection l4-entries• show cgnv6 ddos-protection disabled-ip-by-bgp




Drops

68

eeeFF Feedback

FIGURE 39: CGN App > Analytics > Drops > CGN


69


Drops

Feedback

FIGURE 40: CGN App > Analytics > Drops > System DPDK



IP Anomaly

70

eeeFF Feedback

IP AnomalyA new tab is added to CGN App Analytics page. Navigate to Analytics > IP Anomaly. This page showcases IP Anomaly statistics, with the following widgets:

iThe Analytics > IP Anomaly tab displays the following data:

Widget / Field DescriptionNORMAL PACKETS VSANOMALY EVENTS

Displays the time series of Uplink and Downlink packet rates shown in pos-itive vertical axis and anomaly triggered drops shown in negative vertical axis, filtered by:

• Uplink• Downlink• Layer 3 Anomaly• Layer 4 Anomaly

This widget can be used to detect anomalies for Layer 3, Layer 4, Uplink and Downlink as follows:

• The 0 value on the IP Anomaly graph indicates normal Uplink-Downlink behaviour.

• Negative value indicates lot of anomalies in Layer-3 and Layer-4 anomalies.

• Positive values in the uplink and downlink number of packets provides various indications. Refer to “IP Anomaly” section of “Transition Solutions Guide” for further information

DISTRIBUTION OF ANOMALY CLASSES AND LAYERS

Displays the distribution of the IP anomalies by layers. Select a single layer to see the distribution of anomalies from that layer, filterd by:

• Layer 3• Layer 4

This widget can be used to detect distribution of anomalies for Layer 3, Layer 4, according to different pre-defined classes. For details, refer to “Transition Solutions Guide”.


71


IP Anomaly

Feedback

FIGURE 41 : Analytics > IP Anomaly

DDoS or Intelligent DDoS

Navigate to Analytics > IP Anomaly . This page showcases IP Anomaly statistics, with the following widgets. These statistics help in intelligent DDoS (Distributed Denial of Service) detection:

• NORMAL PACKETS VS ANOMALY EVENTS: To detect anomalies for Layer 3, Layer 4, Uplink and Downlink

• DISTRIBUTION OF ANOMALY CLASSES AND LAYERS: To detect distribution of anomalies for Layer 3, Layer 4, according to different pre-defined classes.



Synchronize Cookie

72

eeeFF Feedback

Synchronize CookieThe Analytics > Synchronize Cookie tab displays the following data:

FIGURE 42: Analytics > Synchronize Cookie

Subscriber Port UsageCGN App > Subscriber Port Usage widgets allow visibility into the utilization of the allocated port count. User can efficiently configure their Fixed-NAT setup to accommodate maximum active subscribers.

These widgets provide a graphical representation of TCP and UDP protocol statistics for how many ports their Fixed-NAT subscribers are using in real-time. User can make better use of their resources by allocating more or less number of NAT IPs per configuration.

NOTE: Subscriber port usage statistics are generated only when Fixed-NAT is configured and it cannot be enabled or disabled.

Widget / Field DescriptionPASSED VS FAILED Displays the distribution of the number of TCP SYN cookie for which the

responding ACK passed the SYN cookie check versus the number of TCP SYN cookie for which the responding ACK failed the SYN cookie check.

TCP SYN COOKIE VERIFICATION

The time series of the number of TCP SYN cookie for which the responding ACK passed the SYN cookie check, the number of TCP SYN cookie for which the responding ACK failed the SYN cookie check and the number of TCP SYN cookie sent, filtered by:

• Passed• Failed• Ack Sent


73


Subscriber Port Usage

Feedback

The Subscriber Port Usage widgets are available only for fixed NAT selection.

Visibility and analytics are displayed for:

• Number of ports,

• Number of fixed NAT subscribers.

• Distribution graph of how many ports are used by subscribers.

This helps the user to gain insights to if any port unavailable error is correlated with high subscriber port usage. User can plan the fixed NAT configuration accordingly, to balance the available IP address resources and provide quality service to subscriber.

The Analytics > Subscriber Port Usage tab displays the following data:

Widget / Field DescriptionSUBSCRIBERS PORT USAGE CORRELATION

Displays subscribers port usage data for TCP and UDP ports, can be filtered by:

• NAT Port Unavailable TCP• TCP User Quota Exceeded

SUBSCRIBERS IN PORT RANGE (TCP)

Displays subscribers in port range for :

• TCP ports• UDP ports

for selected time range, filtered by IP Address.

ACTIVE SUBSCRIBERS (TCP)

Displays subscribers in port range for :

• TCP ports• UDP ports

for selected time range, filtered by IP Address.



Subscriber Port Usage

74

eeeFF Feedback

FIGURE 43: Analytics > Subscriber Port Usage


75


LOG VIEW PANEL

The Log View Panel is at the footer of the GUI page with following options drop-down windows:

• Session Logs

• Error Logs

• Alerts Logs

• Event Logs

Click on a category of alerts & events in the tooltip. Drill down to the Log View > Alerts and Log View > Events section and display the selected category of logs and events for the selected time interval displayed in the tooltip. Users can view more details about the alerts and events that occurred in the selected interval.

Session Logs Displays session logs and filters as per ACOS device instance system logs and statistics. Click the expand window button at the bottom right-hand corner to open up the Log Window with various sub-options and filters and illustration diagram

• Protocol

• Subscriber IP

• Source Port

• Destination IP

• Destination Port

• NAT IP

• NAT Port

• Technology

• LID

• Pool Name

• MSISDN


Session Logs

76

eeeFF Feedback

• IMEI

• IMSI


77


Session Logs

Feedback

The following enhancements are available for Session Logs view:

• Search options, where user can search or select source or subscriber log port from the Search drop-down in session logs. The search option displays drop down of top 10 IPs for multiple choice search

• LIDs filter avialable for only LSNAT

• Firewall policy violation individual category list, where user can see information for 30 to 40 violations.

FIGURE 44: Session Log Window and Options



Error Logs

78

eeeFF Feedback

Error LogsDisplays error logs and filters as per ACOS device instance error logs and statistics for the following selections:

• Protocol

• Subscriber IP

• Pool Name

• MSISDN

• IMEI

• IMSI

FIGURE 45: Error Logs

Alerts LogsAlert Logs display all the alerts specific to the:

• selected app service,

• system

• infrastructure level alerts.

Displays alert logs and filters as per ACOS device instance alert logs and statistics for the following selections:

• Reset

• Cluster

• Device

• App Svc Type


79


Event Logs

Feedback

• App Svc Name

• Tenant Name

• Trigger Name

• Alert Name

• Severity

FIGURE 46: Alert Logs

Event Logs Displays event logs and filters as per ACOS device instance event logs and statistics for the following selections:

• Cluster

• Device

• Tenant

• Thunder Module

• Message Lineage

• Severity



Event Logs

80

eeeFF Feedback

FIGURE 47 : Event Logs


81


CGN APP TROUBLESHOOTING

This section showcases the important Alerts, Warnings, and Troubleshooting methods, for the CGN App for the following categories:

• KPI drill down

• Link Cursor

• Chart Overlay

• IP Anomaly Detection

• Synchronise Cookie

• App Firewall and Watch List

• Error and Drop Analytics


KPI drill down

82

eeeFF Feedback

KPI drill downAdditional drilldown statistics pages are added to the KPIs in KPI Bar. To analyse the KPI statistics in detail and perform troubleshooting, click the individual KPI button to view the detailed statistics and widgets.

The CGN App KPI bars are of two types:

• KPI Bar for LSN and NAT Services that consists of following drilldowns:

• SUBSCRIBERS


• THROUGHPUT(bps)


• TCP / UDP POOL USE

• Control CPU, Data CPU, Memory

• KPI Bar for Fixed-NAT Services that consists of following drilldowns:

• NAT IPS


• THROUGHPUT(bps)


• TCP / UDP PORT USE

• Control CP, Data CPU, Memory

For details, see Key Performance Indicator Bar .

Log Drill DownLog View panel at the bottom of CGN App has enhanced log view features for two selections:

• Session Logs

• Error Logs

The following enhancements are available:

• Search options, where user can search or select source or subscriber log port from the Search drop-down in session logs. The search option displays drop down of top 10 IPs for multiple choice search

• LID ACOS avialable for only LSNAT


83


Link Cursor

Feedback

• Firewall policy violation individual category list, where user can see information for 30 to 40 violations.

For details, see Log View Panel chapter.

Link CursorThe User Interface has been enhanced to group analytics in an improved format. Troubleshooting - Link Cursor. TCP latency reading can be collected from ISG routes in each site. An average TCP latency can be compared with ISG routers latency within the site and also compared with different sites, to analyse the latency between A10 CGN and ISG routers or to diagnose any latency issue quicker. If a site has a higher TCP latency than others, then the user can take the required action.

The Link Cursor is displayed as a red line when user hovers over any time series chart on the CGN App widgets. The link cursor is indicated for all the analytics widgets as a red vertical line pointing to the same time instance.

Chart OverlayView the Chart Overlay statistics and related widgets to drill down troubleshoot overlay network issues. This option is available for all widgets and services. New overlays and alerts are displayed, with events statistics and KPI time series

• metrics time series chart from session rate to overlay with events.

• red dots indicate that there are one or multiple alerts and events.

• By default, all alerts and events are enabled.

• Enable or disable Alerts, by selecting “:” menu next to the CGN App > Time Slider

The overlay displays only the number of alerts and events, but no events details. For details, see CGN App Dashboard chapter.

IP Anomaly DetectionNavigate to CGN App > Analytics > IP Anomaly page to view the statistics to troubleshoot for IP Anomalies. View the anomaly types statistics and detect anomalies. View the Distribution of Anomaly Classes and Layers widget to analyse, and detect any distributed denial of Service anomalies or DDoS attack. Blacklist the relevant IPs that are causing the attacks, through ACOS or Harmony Controller.



IP Anomaly Detection

84

eeeFF Feedback

This page showcases IP Anomaly statistics, with the following widgets:

• NORMAL PACKETS VS ANOMALY EVENTS: To detect anomalies for Layer 3, Layer 4, Uplink and Downlink

• The 0 value on the IP Anomaly graph indicates normal Uplink-Downlink behaviour.

• Negative value indicates lot of anomalies in Layer-3 and Layer-4 anomalies.

• Positive values in the uplink and downlink number of packets provides various indications. Refer to “IP Anomaly” section of “Transition Solutions Guide” for further information

• DISTRIBUTION OF ANOMALY CLASSES AND LAYERS: To detect distribution of anomalies for Layer 3, Layer 4, according to different pre-defined classes.

These statistics help in IP Anomaly detection. For details, see “CGN App User Guide”. For details, see IP Anomaly .


85


Synchronise Cookie

Feedback

Synchronise CookieNavigate to CGN App > Analytics > Sync Cookie page to view the statistics to troubleshoot for cookie synchronization issues.

App Firewall and Watch ListNavigate to:

• CGN App > Analytics > Applications

• CGN App > Analytics > IP Anomaly page

to view the statistics to troubleshoot for application firewall and IP watchlist analysis

Error and Drop Analytics Navigate to CGN App > Log View Panel > Error Logs page to view the Error Log statistics and related widgets to drill down troubleshoot for error log issues.

For details, see Log View Panel chapter.

Session Log Analytics .Navigate to CGN App > Log View Panel > Session Logs page to view the Session Log statistics and related widgets to drill down troubleshoot for issues.



Session Log Analytics

86

eeeFF Feedback


87


ADDITIONAL RESOURCES AND TECHNICAL SUPPORT

The CGN App provides users with real-time actionable insights on network traffic and subscriber behavior, enabling faster, easier, and precision troubleshooting, as well as increasing operational efficiency with enriched logs and detailed analytics.

To know more about the CGN App, you can check out the following video available at multiple locations:

• On A10 Harmony Controller and Lightning ADC Documentation site: http://docs.hc.a10networks.com/CGN/

Supported ProductsThe A10 Networks® technical and customer support team is available at your service on phone, email and web channels.

Technical and Customer SupportTo know more about A10 Networks® Harmony Controller, refer the following:

Contact: https://www.a10networks.com/company/contact-us

Support: https://www.a10networks.com/support

Call (International): 1-408-325-8676

Call (Toll-Free USA & Canada): 1-888-TACS-A10

http://docs.hc.a10networks.com/CGN/


Technical and Customer Support

88

eeeFF Feedback


89


Contents

cgn harmony apps user guide - a10 networks

Documents