Foglight APM for Real User Experience 5.9.11 - Installation and Setup Guide

Tchater maintenant avec le support

Monitoring physical networks Monitoring virtual networks Mixing physical and virtual appliances Adding Foglight APM to an existing Foglight installation

Installing physical appliances

Before you begin

Physical appliance components Other network components required Anatomy of an appliance

Planning an installation of physical appliances

Public network switch Private network switch for the capture subnet Network taps

Monitoring individual web servers Monitoring web server farms

Network information required for physical appliances

Installing appliances on a network rack Connecting appliances to the network Connecting Sniffers

Connecting Sniffers to network taps Connecting Sniffers to Archivers

Connecting one Sniffer to one Archiver Connecting Sniffers to Archivers

Starting physical appliances and configuring remote access Launching the Console Program remotely with DRAC

Installing virtual appliances

Monitoring multiple ESXi hosts

Monitoring multiple hosts through a centralized Sniffer Monitoring multiple hosts using local Sniffers Mixing virtual and physical appliances Scaling out a multiple host configuration Installing virtual appliances to monitor multiple hosts

Monitoring a single ESXi host

All-on-one-host variation Scalability Installing virtual appliances to monitor a single host

Before you begin

Software environment Foglight APM OVF templates Required port groups RAID configuration Network information for virtual appliances

Creating port groups on virtual switches

Configuring port groups on a distributed switch

Creating a Monitoring Network port group required by Sniffers Creating the Capture Network port group required by Sniffers and Archivers Creating a virtual adapter for the Capture Network port group

Configuring port groups on a standard switch

Deploying Foglight virtual templates Deploying the Foglight virtual Sniffer template Connecting virtual appliances on different servers Powering on virtual appliances

Setting up appliances

Logging in to the Console Program Enabling SSH and changing the default password Setting the date and time Specifying network settings Exiting the Console Program Launching Foglight Configuring software components

Working with appliance-hosted Management Servers

Configuring Management Server settings Configuring the Management Server to work with SSL keys

Creating a new SSL key for Foglight HTTPS access Using an existing SSL key for Foglight HTTPS access Configuring Foglight for secure remote LDAP access

Restricted file access Transferring support files from a physical appliance

Transferring files to Windows systems Transferring files to Linux systems

Troubleshooting appliance-hosted Management Servers Differences from working with server-hosted Management Servers

Setting up server-hosted Management Servers

Server requirements

Downloading and installing 256-bit encryption files Disabling the NetBIOS over TCP/IP setting

Installing Foglight APM cartridges Communicating with Sniffer and Archiver appliances Configuring Federated Children Enabling High Availability mode

Maintaining appliances

Launching the Console Program

Accessing physical appliances using SSH on Microsoft Windows systems Accessing physical appliances using SSH on UNIX systems

List of tasks available from the main menu Managing user accounts

Adding new user accounts Modifying user accounts and enabling SSH Removing user accounts

Modifying the time zone, time, or date Modifying the list of NTP servers for physical appliances Modifying network settings Shutting down appliances Rebooting appliances Updating software

Upgrading from a PKG file Displaying the upgrade log

Testing network settings Stopping and starting processes Reviewing the appliance system details and health status Reviewing the status of NIC devices Verifying monitored traffic by port Purging and resetting Archiver databases Creating support bundles Creating TCP dump files Accessing the home directory Creating Dell report archives on physical appliances

Backing up and restoring physical appliances

Setting up appliances as NetVault clients

Enabling an appliance's NetVault client Registering an appliance in NetVault

Running and restoring backups

Stopping Foglight and running a backup Restoring backups

Preparing a new appliance Restoring a backup

Appendix: Troubleshooting

Diagnosing Sniffer issues

Overview of the Sniffer test Running the Sniffer test Investigating and resolving issues in monitored traffic

Understanding packet drops with SPAN ports and aggregation network taps Expanding full partitions on virtual appliances

Expanding the size of virtual disks Expanding the size of partitions

Creating a Monitoring Network port group required by Sniffers

If you are using a full-duplex network tap, create two monitoring port groups, such as Monitoring Network A and Monitoring Network B.

To create a Monitoring Network port group:

In vCenter®, select Home > Inventory > Networking.

In the navigation pane, right-click dvSwitch and select New Port Group.

The Create Distributed Port Group wizard opens. Click Next or Back to navigate between pages.

On the Properties page, set the following options:

•

Name — Type Monitoring Network (or Monitoring Network B, if this is a second monitoring port group).

•

Number of Ports — Select 32.

•

VLAN Type — Select None.

On the Ready to Complete page, click Finish.

The Monitoring Network port group appears in the navigation pane. Now you need to enable its promiscuous mode.

Right-click Monitoring Network and select Edit Settings.

The Monitoring Network Settings dialog box opens.

Under Policies, select Security.

From the Promiscuous Mode list, select Accept.

Click OK.

This port group configuration is complete.

Creating the Capture Network port group required by Sniffers and Archivers

To create the Capture Network port group:

In the vCenter® navigation pane, right-click dvSwitch and select New Port Group.

The Create Distributed Port Group wizard opens. Click Next or Back to navigate between pages.

On the Properties page, set the following options:

•

Name — Type Capture Network.

•

Number of Ports — Select 32 (the minimum recommended for performance purposes).

•

VLAN Type — Select None.

On the Ready to Complete page, click Finish.

The Capture Network port group appears in the navigation pane.

Select Capture Network and ensure that the Promiscuous Mode is set to Reject.

Now you need to assign this port group to a virtual adapter on each host. See Creating a virtual adapter for the Capture Network port group.

Creating a virtual adapter for the Capture Network port group

Each Sniffer and Archiver requires a unique IP address to send and receive data on the Capture Network. For each host, you need to create a virtual adapter, assign the Capture Network port group to it, and specify an unused local IP address. Later, when you deploy the appliance templates and set up the appliances, you type this IP address as the Auxiliary IP Address. For more information, see Specifying network settings.

Repeat this procedure for each ESXi® host where you intend to deploy a Sniffer or Archiver.

To create and assign a virtual adapter for the Capture Network port group:

In vCenter®, navigate to Home > Inventory > Hosts and Clusters.

In the navigation pane, select a host where you intend to deploy a Sniffer or Archiver.

Click the Configuration tab.

In the Hardware box, click Networking.

If there is more than one option in the View section, click vSphere Distributed Switch.

Click Manage Virtual Adapters.

The Manage Virtual Adapters dialog box opens.

Click Add.

The Add Virtual Adapter wizard opens. Each of the following steps corresponds to a page in the wizard. Click Next or Back to navigate between pages.

On the Creation Type page, select New Virtual Adapter.

On the Virtual Adapter Type page, select VMkernel.

On the Connection Settings page, click Select port group and select Capture Network.

On the VMkernal - IP Connection Settings page, select Use the following IP settings and set the following options:

IP Address — Type an unused local IP address.

Subnet Mask — Type the subnet mask.

On the Ready to Complete page, click Finish.

Verify that the virtual adapter appears in the list for this host.

Click Close.

Configuring port groups on a standard switch

The following procedure assumes that your environment already has a standard switch with a port group that connects to the intranet. This existing port group corresponds to the VM Network described in Required port groups. If you do not have a standard switch configured for this purpose, see the VMware® documentation for instructions on how to create the switch and configure the port group. This procedure uses vSphere® Client to connect to the vSphere host, but you can accomplish the same tasks through vCenter® Server.

When using two hosts, repeat this procedure on each host. When using one host, do not create the Capture Network port group (as noted in All-on-one-host variation).

To create the port groups:

From vSphere Client, select the host in the navigation pane, and click the Configuration tab.

In the Hardware box, click Networking.

Locate the switch and click its Properties link.

The vSwitch Properties dialog box opens, displaying configuration information for the switch and its port groups.

To create the Capture Network port group required by Sniffers and Archivers located on different hosts:

Click Add.

The Add Network Wizard opens. Each of the following steps corresponds to a page in the wizard. Click Next or Back to navigate between pages.

On the Connection Type page, select Virtual Machine.

On the Connection Settings page, replace the default label with Capture Network. The VLAN ID is already correctly set to None (0).

On the Summary page, click Finish.

The Capture Network port group appears in the Switch Properties dialog box. This port group configuration is complete.

To create the Monitoring Network port group required by Sniffers:

Click Add.

On the Connection Type page, select Virtual Machine.

On the Connection Settings page, set the following options:

Network Label — Type Monitoring Network (or Monitoring Network B, if this is a second monitoring port group).

VLAN ID — Select All to allow the Sniffer to receive traffic from any VLAN. You can leave this set to None if you have only one VLAN.

On the Summary page, click Finish.

The Monitoring Network port group appears in the vSwitch Properties dialog box. Now you need to enable its promiscuous mode.

Select the Monitoring Network port group and click Edit.

The Monitoring Properties dialog box opens.

Click the Security tab.

Select the check box beside Promiscuous Mode and select Accept from the list.

Click OK.

This port group configuration is complete.

In the vSwitch Properties dialog box, verify that the Monitoring Network’s Promiscuous Mode is set to Accept, and all other port groups are set to Reject.

Click Close.

Documents connexes

The document was helpful.

Sélectionner une évaluation

I easily found the information I needed.

Sélectionner une évaluation

Veuillez sélectionner votre produit

Afin de mieux répondre à vos besoins, précisez l'objet du tchat:

Solutions recommandées pour votre problème

Foglight APM for Real User Experience 5.9.11 - Installation and Setup Guide

Creating a Monitoring Network port group required by Sniffers

Creating the Capture Network port group required by Sniffers and Archivers

Creating a virtual adapter for the Capture Network port group

Configuring port groups on a standard switch