Cisco Works 培训手册.doc

Cisco Works 培训手册一概述Cisco Works 是Cisco公司开发的网络管理工具，主要用于Cisco 设备的管理，它包括多个管理模块，目前，我们只使用其中的几个，分别是：n Cisco View：n Traffic Director：n Campus Manager：二使用指导n CiscoWorks2000 server1 概述Ciscoworks2000是Cisco公司开发的网络管理工具，包括多个管理模块，而这些管理模块几乎全部以CiscoWorks2000 Server为平台进行应用。 它并不具有网络管理的功能，只是为其他应用模块提供了一些管理服务。2 使用CiscoWorks2000 Server 登录填写相应的用户名及密码，点击“connect”，出现如下窗口： 配置CiscoWorks2000 Server 设置用户账号为了保证网管系统的安全性，CiscoWorks2000 Server提供了一个多级用户权限管理系统，系统预先设置了两种用户： guest (no password required, user role = Help Desk) admin (password = admin, user role = super user)，该用户可以使用系统中所有的应用程序。 用户级别管理，见下表： Level Description 0Help Desk1Approver2Network Operator4Network Administrator5System Administrator查看用户级别，点击：CiscoWorks2000 ServerSetupSecurityPermissions Report下面是不同级别用户的管理权限：All Users 查看权限Displays predetermined set of applications, tools, and product features each user role can accessCiscoWorks2000 ServerSetupSecurity Permissions Report更改密码Allows users to modify their account passwordCiscoWorks2000 ServerSetupSecurity Modify My Profile查看当前其他用户Displays information about currently logged in CiscoWorks2000 users and allows users to send a broadcast message to othersCiscoWorks2000 ServerSetupSecurityWho Is Logged OnAdmin Tasks 增加用户Creates a new user and provides appropriate user access level to CiscoWorks2000CiscoWorks2000 ServerSetupSecurityAdd Users删除用户Removes user from listCiscoWorks2000 ServerSetupSecurity Modify/Delete Users修改用户Allows updates to user information, such as email address, login name, password, and access levelCiscoWorks2000 ServerSetupSecurity Modify/Delete Users 安装客户端程序管理在本地安装一些应用程序，以提高系统性能，每当使用客户端的浏览器与Server端建立连接时，就可以选择是否安装Client Application Manager (CAM)，或者点击菜单安装：CiscoWorks2000 ServerSetupClient Manager Admin 管理CiscoWorks2000 server 基本的管理工具查看安装的软件包CiscoWorks2000 Server Administration Package Options查看Log文件CiscoWorks2000 ServerAdministration Log File Status 数据管理主要是定时做一些数据存储的工作 back-end进程管理CiscoWorks2000 Serve使用back-end管理正在运行的程序，具体如下：Start processCiscoWorks2000 ServerAdministration Process ManagementStart ProcessStop processCiscoWorks2000 ServerAdministration Process ManagementStop ProcessView processesCiscoWorks2000 ServerAdministration Process ManagementProcess StatusView process failuresCiscoWorks2000 ServerAdministration DiagnosticsProcess Failures 管理Jobs and ResourcesCancel a scheduled jobCiscoWorks2000 ServerAdministrationJob Management, then select Stop JobRemove a jobCiscoWorks2000 ServerAdministrationJob Management, then select Remove JobUnlock an orphaned resourceCiscoWorks2000 ServerAdministrationJob Management, then select Free Resourcen Cisco View1概述CiscoView是一个基于SNMP的图形化设备管理工具，它可以提供对设备的实时查看，它采用client-server模式。2功能 设备前、后面板的图形显示，包括板卡、端口状态 对板卡、端口进行配置 实时查看设备运行状况，如端口利用率等等 提供Telnet等工具3使用指导运行Cisco View之后，会看到如下几部分： Select Device drop-down list box显示、选取设备菜单 Graphical Device display window图形化显示设备状况 Telnet CCOCisco Connection Online (CCO) web page Cisco SupportOpens the TAC Mailer dialog box for sending reports to the Cisco Technical Assistance Center (TAC) group Preference设备参数设置 设备配置步骤：第一步：Select Device Manager Cisco View第二步：输入一个设备的IP地址第三步：鼠标双击选中的设备，显示所需配置信息第四步：进行配置n Traffic Director1概述 功能用来监测、记录网络流量，帮助管理员进行流量分析的工具。Traffic Director的流量监控系统包括一个集中管理的控制台，以及分布在网络中的进行数据采集的代理（Agent），使用Traffic Director，可以实现如下功能： 监测网络就两 设置流量阀值并且在流量达到阀值时告警 收集统计信息并纪录 对流量进行统计，并生成相应的图表以便查看 实时查看网络流量状况协议Traffic Director是基于SNMP、RMON的网管工具，因此可以对不同厂家的设备构成的网络、不同拓扑结构的网络进行流量统计。 SNMP（Simple Network Management Protocol）标准的网络管理协议，它定义了网络控制台和代理之间如何进行通信，在我们这个系统中，代理通常是一台交换机、探针等。这些设备收集的数据以供管理员进行统计、分析、监测，Traffic Director支持SNMP和SNMPv2C Remote Monitoring (RMON) Management Information Base（MIB）定义了网管代理提交那些信息给控制台2基本概念在Traffic Director的使用中，我们会涉及到一些概念：DomainsFiltersPropertiesAgent GroupsRoving AgentsTraps and AlarmsTrend Reports3Traffic Director 协议模型 如图：上面是Traffic Director的协议模型与OSI模型的关系4RMON 简介 简介 全称：Remote Network Monitoring RMON是SNMP MIB的扩展 RMON标准是由IETF制定 RNON MIB设计目标 扩展SNMP的管理内容 RMON探针支持离线操作 减少网络负载 RMON的主要功能 对网段和设备进行监控 性能控制预防性网络管理侦察故障及网络趋势设备监控 故障管理发现问题实时监控网络异常现象 趋势分析 RMON的局限性 信息只能抵达链路层 标准RMON只覆盖以太网和令牌环 缺乏广域网、ATM或其他高速网支持 RMON2RMON功能比较：5Traffic Director应用程序介绍： Traffic Mode Applications实时显示网络链路层的流量状况，见下表：This ApplicationPerforms This FunctionTraffic Monitor收集、显示数据链路层的流量情况Segment ZoomRetrieves data-link layer statistics, consolidates the data, and displays the consolidated data in graphs.Segment DetailsLists all RMON1 statistics and utilization calculation results.Text display.Domain HistoryDisplays and updates a real-time graph of various counters from the RMON1 statistics group and utilization calculation results. The period of historical analysis presented begins when you invoke this application and ends when you exit from this application.TopN TalkersDisplays, by physical (MAC) address, the most active hosts connected to the network segment being monitored by a selected agent (requires that the host group be enabled in the RMON domain).All TalkersLists, by physical (MAC) address, all hosts connected to the network segment being monitored by a selected agent (requires that the host group be enabled in the RMON domain).Short-Term HistoryRetrieves and displays short-term snapshots of RMON1 statistical counters stored in an agents memory buffer. Establishing the parameters of the short-term snapshot is a TrafficDirector administrative function.Long-Term HistoryRetrieves and displays long-term snapshots of RMON1 statistical counters stored in an agents memory buffer. Establishing the parameters of the long-term snapshot is a TrafficDirector administrative functionAll ConversationsLists, by physical (MAC) address, all host pairs connected to the network segment being monitored by a selected agent (requires that the conversations group be enabled in the RMON domain).VLAN MonitorDisplays real-time activity on individual VLANs by packets, octets, or priority levelCustom HistoryRetrieves and displays user-defined MIB variables held in SwitchProbe memoryATM MonitorDisplays graphical, real-time ATM network performance information Protocol Mode Applications实时显示网络层的流量状况，见下表This ApplicationPerforms This FunctionProtocol History(per selected protocol domain) Displays and updates a real-time graph of various statistics (packets, bytes, destinations, and errors) and utilization calculation results for the network layer of the network segment being monitored by a selected agent. The period of historical analysis presented begins when you start this application and ends when you exitTopN Talkers(per selected protocol domain) Displays network-layer information of the most active hosts connected to the network segment being monitored by a selected agent (requires that the host group be enabled in the protocol domain)All Talkers (hosts per selected protocol domain)Lists network-layer information of all hosts connected to the network segment being monitored by a selected agent (requires that the host group be enabled in the protocol domain)All Conversations(per selected protocol domain)Lists network-layer information of all host pairs connected to the network segment being monitored by a selected agent (requires that the conversations group be enabled in the protocol domain).Protocol Zoom (per selected domain group)Retrieves network-layer (protocol) statistics and application-layer statistics (children and grandchildren of protocol) from various counters and displays the data in graphs Application Mode Applications实时显示OSI模型中47层的流量状况，见下表：This ApplicationPerforms This FunctionApplication MonitorRetrieves and displays application-layer (OSI layers four through seven) statistics from various counters for the network segment being monitored by a selected agentApplication HistoryDisplays and updates a real-time graph of statistics (packets and bytes) and utilization calculation results for the application layer of the network segment being monitored by a selected agent. The period of historical analysis presented begins when you start this application and ends when you exitART MonitorDisplays application response times on your network, allowing you to monitor application performanceTopN TalkersDisplays the most active hosts connected to the network segment being monitored by a selected agent (requires that the host group be enabled in the domain).All TalkersLists all hosts connected to the network segment being monitored by a selected agent (requires that the host group be enabled in the domainAll ConversationsLists all host pairs connected to the network segment being monitored by a selected agent (requires that the conversations group be enabled in the domain). TopN ConversationsDisplays, in descending order, the most active pairs of hosts on a network segment Cross-Mode Applications Data Capture Allows you to retrieve specific data and store the data in a file. You can examine this file at any time using the Protocol Decode applicationProtocol Decode Detailed examination of the data retrieved using the Data Capture applicationDomain Discovery Retrieves and lists the names and statistics of all domains and thresholds that have been installed (administrative task) on a selected agent, switch, or DLCIRound Trip Delay Real-time monitoring of ping sweeps configured in SwitchProbe devicesProxy SNMP Real-time observation of MIB values retrieved by SwitchProbe devices in which the SNMP Resource Monitor option is installed, and configured to perform SNMP gets of MIB Objects in devices on the networkTest Agent Quickly determines if a selected agent (a common agent or a Frame Relay agent) or selected switch is operationalAlert Monitor Alerts you when certain conditions arise on the network segment you are monitoring, or when processes that control report data logging encounter problems retrieving data and generating reportsTrend Reporter Generates a wide range of reports to identify usage patterns, gauge network health, and determine the cost of network usage6开始运行Traffic Director第一步：运行Traffic Director，弹出如下窗口：第二步：见上图菜单右半部分，选中下列选项中的一项：Traffic数据链路层信息Protocol网络层信息Application4到7层的信息第三步：见上图菜单左半部分，选中下列选项中的一项：Agent、Agent group、Switch、Frame Relay第四步：选中Domain第五步：选择需要的Application7Traffic Director的管理程序 Config manager用于Agent、Switch等设备的生成、配置、编辑 Property Editor定义一些参数以收集统计结果 Config Servers定义、配置SQL server Config Rollup定义数据在数据库中存储的周期 Filter Editor生成、配置过滤器 Domain Editor Remote Login Test Agent Alert Monitor Trend Reporter Report Editor 8使用Configuration Manager进行配置 首先，需要配置如下信息才能对Switch进行管理 IP地址 交换机类型 read and write community strings name of Switch Configuration Manager支持如下设备： AgentEthernet、Token Ring、FDDI、ATM Virtual Channels、Fast Ethernet、Fast EtherChannel (FEC)、Multiport T1/E1 WAN、Gigabit Ethernet SwitchesCisco Switch Frame Relay Agent Group 启动Configuration Manager第一步：在Traffic Director主菜单选中Admin第二步：选中Config Manager，弹出菜单如下：Config Manager菜单分左、右两部分：Left panel添加、编辑、删除Agent、SwitchRight panel显示选中设备的配置情况 使用Config Manager配置Switch Remote Monitoring Levels Supported for Switches Learning Switch Ports, VLANs, and FECs Prerequisites for Adding a Switch Definition Roving for RMON1, RMON2, and Extended RMON Adding a New Switch to the TrafficDirector Application Testing the Operational Status of a Switch Viewing Switch Port Properties Files Editing Switch Definitions Deleting Switch Definitions Roving Switch Interfaces (Ports, VLANs, FECs) TrafficDirector Requirements for Roving Multiport Roving-Switch Ports Interpreting Roving Messages Interpreting Roving Messages Setting Thresholds on a Non-RMON MIB Objectn Campus ManagerCampus Manager是Cisco Works 2000网管工具中的一个模块，它提供了基于Web的管理工具使管理员对网络拓扑等进行管理。采用client/server这种结构，从而可以使多个用户同时访问Server以进行操作。1 Campus Manager 应用程序 Topology Services用于发现、查看以及监视网络物理拓扑 User Tracking定位、显示网络中的用户及主机 Path Analysis查看数据包在网络中传送的路径2 功能： 查看详细的网络信息，包括设备、链路、端口等. 配置、管理、监视ATM设备 将网络进行逻辑分割病进行管理。 生成并管理 LANE services 查看设备、端口属性，并进行配置.3 使用指导l Topology Services选中Campus Manager Topology Services，应用程序开始运行，出现如下窗口： Topology Services的主窗口显示网络中的VTP domains, VLANs, ATM 以及domains, ATM-VLANs，主窗口分为五个部分：Menu Bar, Tool Bar, Tree View, Summary View, Status Bar Menu Bar包含Topology Service的命令 Tool Bar 一些快捷键 Tree View 显示网络中的VTP domains, VLANs, ATM domains, ATM-VLANs Summary View显示详细的配置信息 Status Bar显示一些系统信息 使用Network Topology Views查看网络拓扑 使用 Topology Services，可以做到： View summary information Open a network topology view Display Device Labels Download a Cisco Visio stencil Export a network topology view to Visio Display Device, Port, Link, Aggregate Link, or Trunk Attributes Display Service Attributes Access ICS Devices Access Application Servers and start Cisco CallManager Display Multi-Layer Switching (MLS) Reports View ANI Server Discovery Metrics View Discrepancy Reports Customize Discrepancy Reports View the Color and Icon Legend Create an Ethernet VLAN Create a Token Ring VLAN View Spanning Tree definitions Add a LAN Emulation Server (LES) to an existing VLAN Configure an LE Config Server Create an SPVC or SPVP Display a Virtual Connection Perform a Virtual Connection (VC) Trace Set the ATM interface configuration Set the ATM interface configurationl 使用User Tracking User Tracking功能： 发现并显示网络中的用户、主机等等 突出显示网络中的设备 上报IP地址、MAC地址以及VLAN名字的冲突 开始使用User Tracking选中Ca