MLM and firewalls don't work as well as you might hope (search the
NetView archives on this). Basically, you cannot have MLM at the other
side of a firewall from your NetView, doing discovery, if ping is turned
off in your firewall - NetView has to get one ping through to a
discovered node for auto discovery to work, even if an MLM tells NetView
that he has discovered a node. Your discovery options are to hand-add
nodes or to use loadhosts to do so.
Once the nodes are discovered into the NetView database, you can use an
MLM on the other side of a firewall to status poll, collect local traps
and collect performance data, forwarding to NetView (provided your
firewall administrator allows SNMP through).
There are a couple of redbooks worth looking for:
SG24-6229 "Extending Network Management Through Firewalls"
SG24-6019 "Tivoli NetView 6.01 and Friends"
The standard NetView documentation with the product doesn't really
address firewall scenarios though there is a separate manual which
details MLM functionality - shame about the lack of MLM support on Linux
though, I say!
The 5-day NetView for Unix for Admins class has a section on MLM. The
new 5-day NetView Integration with Tivoli Availability Products class
has a section on firewalls with one scenario examining firewall and MLM.
Cheers,
Jane
Scot wrote:
Thanks Bill;
I'll keep that in mind when drafting failover situations.
So am I right in thinking the MLM can act as a "gateway" to
firewalled environments? We have several different networks
to deploy and some will only be accessible through a series of firewalls.
We were able to limit the rules and port restrictions with Tivoli
Framework.
Trying to figure out where the NetView docs are that address this
situation.
Thanks again !
Scot Needy
Yahoo.id scot11us
AIM.id scot11us
ICQ.id 179544536
-----Original Message-----
From: Stringfellow, William
[mailto:William.Stringfellow@bankofamerica.com]
Sent: Tuesday, July 01, 2003 1:37 PM
To: Scot; nv-l@lists.tivoli.com
Subject: RE: [nv-l] DR For NetView ?
Hi Scott,
We have been running this for several years. We just have 2 NetViews, 1
east coast and 1 west coast, with one being the primary and the other being
a backup. They each have an MLM in front of them and all of the network
devices are pointed at both MLMs for trap targets. The network devices also
have both Netviews on their access lists.
Whenever we have a problem with the primary, or there is maintenance to
be
done, the operators are all told to shift their monitoring to the backup
server. Used to be hectic when we were still on X sessions. With the
web-client it is hardly noticable.
The database is copied from the primary to the backup once a day, so the
most data you would lose would be 24 hours. Just need to do a reset_ci
after restoring the database onto the backup so that it knows it's real id.
You mentioned Geo load balancing....this does not do that, both NetViews
monitor the entire network, so it is purely disaster recovery.
Bill Stringfellow
Consultant - EDS
Network Management Support
Bank of America
CA4-704-02-03
2000 Clayton Road, Building D
Concord, CA 94520
Office: 925.692.7283
Fax: 925.675.1763
Email: william.stringfellow@eds.com
Pager: 877.647.8086
ePage: 8776478086@skytel.com
-----Original Message-----
From: Scot [mailto:scotrn@cox.net]
Sent: Tuesday, July 01, 2003 8:03 AM
To: nv-l@lists.tivoli.com
Subject: [nv-l] DR For NetView ?
Hi;
We are in the planning stages of launching a
second datacenter site for geo load balancing and
disaster recovery. When looking at the NetView docs
it seems like I can use an MLM like a Tivoli gateway
in production mode but I'm not sure how one would do a
backup NetView Server. Does anyone have any pointers ?
Is there a deployment guide for NetView that would cover this?
I have been searching the IBM website with no luck
and I don's see the docs on CD.
Thanks!
Scot
---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
For additional commands, e-mail: nv-l-help@lists.tivoli.com
*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)
---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
For additional commands, e-mail: nv-l-help@lists.tivoli.com
*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)
---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
For additional commands, e-mail: nv-l-help@lists.tivoli.com
*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)
--
Tivoli Certified Consultant & Instructor
Skills 1st Limited, 2 Cedar Chase, Taplow, Bucks, SL6 0EU, UK
Tel: +44 (0)1628 782565
Copyright (c) 2003 Jane Curry <jane.curry@skills-1st.co.uk>. All rights
reserved.
---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
For additional commands, e-mail: nv-l-help@lists.tivoli.com
*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)
|