Using its SNMP token-ring application to communicate with SNMP proxy agents, LAN Network Manager monitors activity on SNMP segments and the stations inserted on those segments. This chapter describes how to monitor and manage the segments and stations in your network.
You manage your SNMP token-ring segments by monitoring their status on the LAN Network and Segment submaps and by accessing information about them using the segment management windows.
The LAN Network submap provides a detailed view of a particular subnet that LAN Network Manager manages. The different types of LAN segments, such as token-ring and FDDI, are represented with icons, along with the bridging devices that provide their connectivity.
SNMP segments are represented by an ring icon in the LAN Network submap.
To access management windows that provide profile, fault, and performance information for a segment, click on a segment icon with mouse button 3, select LAN, and then select a menu choice from the context menu. Actions available from these management windows enable you to resynchronize the segment and set access control parameters.
Double-click on a specific segment in the LAN Network submap to open a Segment submap. The Segment submap shows a detailed view of the segment resources. Stations and SNMP-managed 8230 concentrators are displayed in nearest active upstream neighbor (NAUN) order, according to their adapters.
From the Segment submap, you can determine the current status of a resource by its color, use management windows to obtain profile, configuration, fault, and performance information for a resource, and navigate to other submaps for a detailed view of a particular resource.
The merging function of LAN Network Manager enables LAN Network Manager to combine overlapping views of SNMP segments that are being monitored by more that one SNMP agent. The merging function simplifies the graphical representation of the network and makes the job of managing it easier.
If you have SNMP-managed bridges in your network, along with your SNMP agent programs, the merging function integrates the information provided by both the bridge and segment agents. If LAN Network Manager recognizes a segment that is attached to a bridge, the Segment submap is moved to the Bridge submap, so that you can access information about the bridge and the segment from the same submap.
| Note: | An overlapping surrogate or RMON agent is required for an SNMP-managed 8230 to be merged within a bridge submap. |
You can also navigate to a view of the segment stations from the Bridge submap.
View and change specific information about SNMP segments
using the SNMP segment profile, configuration, fault, and performance
management windows. To display a segment management window, select a
segment from the LAN Network submap and then select the type of information
you want to display from the LAN pull-down or LAN context menu.
| For information about: | Read: |
|---|---|
| Segment profile | Segment Profile Information |
| Segment configuration | Segment Configuration Information |
| Segment fault | Displaying Segment Fault Information |
| Segment performance | Displaying Segment Performance Information |
Display information about a segment on the Segment Profile window. This window displays general information about the token-ring segment and the proxy agent it communicates with, as well as basic information about the activity on that segment.
To display the profile information for a segment, select the segment, then select Profile from either the LAN pull-down menu or the context menu.
Display and change configuration information for a segment on the Segment Configuration window. This window contains a field for you to enter information about who to contact for problems with the segment and, for proxy agents that support AWP 7607, allows you to control whether Ring Error Monitoring (REM) is enabled for the segment.
To view or change access control information for the segment, select the Access control push button on the Segment Configuration window.
To display the configuration information for a segment, select the segment,
then select Configuration from either the LAN pull-down menu or the
context menu.
| For information about: | Read: |
|---|---|
| Access control | Access Control Information |
| Adding authorized MAC addresses | Adding Authorized MAC Addresses |
| Removing access to a segment | Removing Network Access |
| Resync | Resynchronizing an SNMP Segment |
Set access control parameters for a specific segment on the Segment Configuration - Access Control window. Using this window, you can make access control active or inactive for this segment and specify the conditions under which an adapter should be removed from the segment.
The access control settings in the Segment Configuration - Access Control window override the general policy defined on the SNMP Token-Ring Application - Access Control Policy window. For example, assume you have set access control to be active for all segments on the SNMP Token-Ring Application - Access Control Policy window and you select the Unknown to segment condition. If you then set access control to be inactive for segment 005 on the Segment Configuration - Access Control window, adapters will not be removed from segment 005, even if they are unknown to that segment. See Defining SNMP Token-Ring Access Control Parameters for more information.
The access control settings of individual segments are overwritten by changes to the general access control policy if the Overwrite resource specific field on the SNMP Token-Ring Application - Access Control Policy window (described in Access Control Information) is set to Yes. To ensure that the settings you define on the Segment Configuration - Access Control window are used even if the general access control policy is changed on the SNMP Token-Ring Application - Access Control Policy window, the Overwrite resource specific field on the SNMP Token-Ring Application - Access Control Policy window should be set to No.
Note that due to the way the RMON standard is defined in RFC 1513, when you define access control parameters for a segment being managed by an RMON agent, the policy is only enforced when the segment is resynchronized. This means that, for RMON segments only, unauthorized adapters remain inserted on a segment until the segment is resynchronized, either manually or at the resync interval defined for the agent in SMIT (the default resync interval is 1 hour). To ensure that unauthorized adapters are immediately removed from a segment, manually resynchronize the segment.
To display the Segment Configuration - Access Control window, follow these steps:
The Segment Configuration window is displayed.
The Segment Configuration - Access Control window is displayed.
When access control is active, LAN Network Manager immediately records the current configuration of the segment. Any adapter that is not attached to the segment at the time access control is made active is considered unauthorized.
From the Segment Configuration - Access Control window, you can add new MAC addresses to the list of MAC addresses authorized to access the segment. This allows you to attach new stations to the segment without having to turn off security by de-activating access control.
To add a MAC addresses to the list of authorized MAC addresses, follow these steps:
You can remove access to an SNMP segment for a token-ring resource by deleting the resource's MAC address from the list of authorized MAC addresses. To do so, follow these steps:
This removes the resource from the list of authorized MAC addresses, but not from the SNMP segment. The resource continues to send and receive token-ring frames.
To remove the resource from the SNMP segment, manually resynchronize the segment as described in Resynchronizing an SNMP Segment or follow these steps:
This removes the resource from the segment.
To ensure the configuration for a segment is accurate, manually resynchronize the segment. When you resynchronize a segment, LAN Network Manager queries each adapter, updates the database with current information, and refreshes the Segment submap. To resynchronize a segment, select Resync from the Actions pull-down menu on the Segment Configuration window.
Fault information for a segment is displayed on the Segment Fault window. This window displays the status of the segment and provides data for the fault domain and the soft errors on the segment.
To display the fault information for a segment, select the segment, then select Fault from either the LAN pull-down menu or the context menu.
To display additional information about the soft errors, select the Soft error table push button on the Segment Fault window.
To display additional information about the ring maintenance activity on the segment, select the Ring maintenance activity table push button on the Segment Fault window.
The Segment Fault - Soft Error window displays detailed information about the soft errors that are occurring on the selected segment. Soft errors are intermittent errors on a network that cause data to have to be transmitted more than once to be received.
To display the Segment Fault - Soft Error window, select the Soft error table push button from the Segment Fault window.
The Segment Fault - Maintenance Activity window displays information about administrative activity occurring on the segment. The statistics on this window detail such activity as the number of times active monitor negotiation has taken place and the number of times the claim-token process was performed.
To display the Segment Fault - Maintenance Activity window, select the Ring maintenance activity table push button from the Segment Fault window.
Performance information for a segment is displayed on the Segment Performance window. This window displays the ring utilization for the selected segment. Ring utilization is the percentage of the total data-transmission capacity of the segment that is currently being utilized.
To display the performance information for a segment, select the segment, then select Performance from either the LAN pull-down menu or the context menu.
You manage token-ring stations by monitoring the status of the stations on the Segment submap and by accessing information about the stations using the station management windows.
The Segment submap shows the adapter name and current status of each station on a segment, and you can obtain more information about a particular station using the profile and configuration menu choices.
Double-clicking on a station in a submap displays the Node submap. The Node submap represents the contents of the selected resource, according to protocol. The icons in the submap show which protocols are present in the resource elements.
View and change specific information about SNMP stations
using the SNMP station profile, configuration, and fault management
windows. To display a station management window, select a station from
the Segment submap and then select the type of information you want to display
from the LAN pull-down or LAN context menu.
| For information about: | Read: |
|---|---|
| Station profile | Station Profile Information |
| Station configuration | Station Configuration Information |
| Station fault | Station Fault Information |
Basic information for a station is displayed on the Station Profile window. This window contains information identifying the adapter in the station, information about the operation of the station, and data describing how the station is attached to the segment.
To display information about how the station is physically attached to the network, select the Attachment data push button on the Station Profile window.
To display the profile information for a station, select the station, then select Profile from either the LAN pull-down menu or the context menu.
The Station Configuration window enables you to control aspects of a station's configuration. You can indicate whether a station should be monitored and specify the days and times that the station is allowed to access the ring.
To display information about how the station is physically attached to the network, select the Attachment data push button on the Station Configuration window.
To display the configuration information for a station, select the station, then select Configuration from either the LAN pull-down menu or the context menu.
Fault information for a station is displayed on the Station Fault window. This window contains data related to the fault conditions on the station.
To display the fault information for a station, select the station, then select Fault from either the LAN pull-down menu or the context menu.