Download as pdf or txt
Download as pdf or txt
You are on page 1of 170

Avaya Aura System Manager

Administering User Profiles

Course Outline
SMGRs place in the enterprise network
SMGRs permissions model Creating new SMGR administrators

SMGR Roles SMGR Groups

2011. All rights reserved.

Course Objectives
By the end of this lesson, you should

Know how to:


Create SMGR administrators

Apply existing roles to new users


Create new groups & add users to them Create new roles and define privileges

2011. All rights reserved.

Avaya Aura System Manager

Setting the Scene Focus on the Enterprise

What part does SMGR play in

???

SMGR in Avaya Aura


Central Product Management User Profile Management
Admins / communication users

Administration
Configuration Licensing

Central User Profile


User info shared RBAC Role Based Access

Control

2011. All rights reserved.

Unified Communications

Avaya Aura user


Login

Name, Address, Contact


Service Profile App Sequencing CM / SM associations
2011. All rights reserved. 7

Managing the Network

Avaya Aura User Profile

Unified information shared across

multiple services
Application profile

Presence
CM Phone stations

2011. All rights reserved.

Enterprise Administration

Toolwire Student Information

Training lab
Student01

135.122.80.71

135.122.80.55

Student02

135.122.80.72

135.122.80.57

Student03

135.122.80.73

135.122.80.157

Student04

135.122.80.74

135.122.80.177

Avaya Aura System Manager


Using System Manager

Login https://ip/SMGR

admin Tr@1ning

2011. All rights reserved.

13

Exercise: Login to SMGR


Use your Classroom Info txt document to find your

assigned SMGR IP
Launch browser, login using the URL:
https://serverIP/

Initial password:
admin / Tr@1ning

2011 All rights reserved.

14

System Manager Home page

Current log on info

Task oriented views


2011. All rights reserved. 15

System Manager Navigation


Navigation only

shows options for current view


Tabs instead of long

pages
State preserved as

you navigate between tabs

2011. All rights reserved.

16

Tabbed Navigation
SMGR will automatically create tabs for pages visited
Tabs allow you to quickly navigate back and forth

Can have up to 5 open at once (plus the Home tab)

2011. All rights reserved.

17

Lets think about the enterprise

2011. All rights reserved.

18

Enterprise Administration

19

Enterprise Administration
Administrators can be assigned to groups

20

SMGR Users & Permissions


Users assigned roles

Roles group together different permissions Permissions provide access to SMGR resources (UI)
Resources allow you to perform tasks!

User

Roles / Permissions

UI Resource

2011. All rights reserved.

21

SMGR Resources
System Manager is controlled by its web

console
By allocating permissions to admins, they

unlock sections of the SMGR interface

Resources

2011. All rights reserved.

22

Roles

Roles group together

different permissions
Provides a convenient way

of assigning permissions en masse

2011. All rights reserved.

23

Roles

Role
X

Role
Y

The total permissions held by a

user is the aggregate of all roles assigned to them


2011. All rights reserved. 24

Roles in practice
SMGR home page for

user with the System Administrator role

All links available

System Administrator

2011. All rights reserved.

25

Roles in practice

End User

SMGR home page for user with

the End User role (ghosted links)

Many SMGR resources off limits


2011. All rights reserved. 26

Makes sense?
Good time to create some users

2011. All rights reserved.

27

Creating Users How?

Creating users is simple process

Once user is created, they can be

assigned a role by the System Administrator

2011. All rights reserved.

28

Creating SMGR Users

Login name must be of the form user@domain.com Password for SMGR login

2011. All rights reserved.

29

User Management User Creation


Local authentication

Authentication Type

Corporate
(If SMGR has been configured to speak to an LDAP backend)

Active Directory

LDAP

2011. All rights reserved.

30

Creating SMGR Users

SMGR admins do

not need special communication profiles


Communication

profiles are service oriented explored in Avaya Aura Session Manager training
Leave as-is

2011. All rights reserved.

31

Creating SMGR Users


Multiple roles may be

selected and assigned


Default Role = End User

2011. All rights reserved.

32

Creating SMGR Users

When youre ready, save the user by clicking Commit

2011. All rights reserved.

33

Exercise: Create new user account


Define a new administrator user
the head sys admin

Provide:
Name Password (use P@ssw0rd)

Login details

Assign System Administrator role Test by logging in as your newly created user

2011 All rights reserved.

34

SMGR Adoption

Products adopted SMGR for management


Avaya Aura Session Manager
Avaya Aura Communication Manager

Avaya Aura Communication Manager Messaging


Avaya Aura Modular Messaging Avaya Aura Presence Services

Avaya Aura Conferencing


Etc

2011. All rights reserved.

35

SMGR Adoption

Products adopted SMGR for management


Avaya Aura Session Manager
Avaya Aura Communication Manager

Avaya Aura Communication Manager Messaging


Avaya Aura Modular Messaging Avaya Aura Presence Services

CS 1000

Avaya Aura Conferencing


Etc

MAS

SMGR also supports heritage Nortel services (UCM features)

2011. All rights reserved.

36

So what can this new admin user do?


1. Manage adopting services
(admin task) 2. Provision service for someone

(a communication user)

The communication profile details the

Aura services a user is provisioned for may be contacted

Describes the ways in which a user


2011. All rights reserved. 37

Exercise: View Communication Profile address types


Click to edit your newly created user
Expand Communication Profile Consider the types of communication address

2011 All rights reserved.

38

Enterprise Administration

Group A

Group B

39

SMGR Group Management


Groups can be of different types

Bring collections of resources together

for easier management

Groups of Operations

Groups of Users

Groups of Roles
2011. All rights reserved. 40

SMGR Group Management


Having users in the same group as

I dont get automatically assigned the roles that are in the same group as me

other resources does NOT automatically grant permissions to access those resources!

Generic groups of resources

I dont carry permission to access operations just because Im in the same group
2011. All rights reserved. 41

SMGR Group Management


However when assigning what

resources a role has control over, you can select a group as a resource
Provides role with permissions over all

items belonging to a group

I have permission to view / add / delete / edit users, and the resource that I have access to is Team 1

Group Name: Team1 Group Type: Users

Role X

2011. All rights reserved.

42

Creating a Group

2011. All rights reserved.

43

Creating a Group

Navigate to group

management
Enter a name, and

select a group type

2011. All rights reserved.

44

Creating a Group

2011. All rights reserved.

45

Creating a Group
Group membership can be selecting using a query

Users?

Operations?

2011. All rights reserved.

46

Creating a Group
Build complex queries using multiple conditions

Complex Queries

2011. All rights reserved.

47

Creating a Group
Group members can be specifically selected
Once the membership type has been committed, it cannot be edited later

2011. All rights reserved.

48

Creating a group
When selecting resources for a group of type all:
click advanced search, then select the type to see

available resources

2011. All rights reserved.

49

Creating a Group Adding Users


Users may be added to a group when a group is being

edited (see previous slides)


Or, a user can be added to a group by editing the user

Add several users to group at once


(User Management screen)

Add user individually


(Edit user profile)
2011. All rights reserved. 50

Exercise: Create a Group


Define a new group of users

This will group together the users responsible

for logging
Create 2 new users (the logging team) and

assign them to the logging group


(Dont worry too much about the role yet)

Group A

2011 All rights reserved.

51

SMGR Roles Controlling access to resources


Roles give access to specific types of System Manager

resources
Aggregate many permissions under one name

2011. All rights reserved.

52

Role Assignation

2011. All rights reserved.

53

SMGR Role

Default roles

Custom made role

- May be expanded when installing new products

- You may define a role for exactly what you need


2011. All rights reserved. 54

Creating a Custom Role

2011. All rights reserved.

55

Creating a Custom Role

2011. All rights reserved.

56

Defining a Role
A role can provide

permission to access 1 or more resource type

2011. All rights reserved.

57

Defining a Role
Once a resource type is chosen, you can

select which resources to add

Users
Apply filters for easier searching

Operations
2011. All rights reserved. 58

Defining a Role
E.g., When adding permission to view, edit, or delete users:
The resource type will users

The resources themselves will be specific users


Adam, Bob, Carol, Deborah (for example)

E.g., When adding permission to view specific menu items:


The resources type will be operations The resources correspond to SMGR links

2011. All rights reserved.

59

Defining a Role Attributes

Attributes allow you to drill

down either further


You can select precisely

the attributes of a user profile that you wish to grant permissions for

2011. All rights reserved.

60

Defining a Role Attributes


Not all resource types

have attributes
E.g. operations

2011. All rights reserved.

61

And since we mentioned operations


There are lots!
Given the mapping to URIs in the web

console, it indicates how fine grained the level of access control can be

2011. All rights reserved.

62

Role Resource Types?

Key types

2011. All rights reserved.

63

Exercise: Create a new role


Define a role
This role will carry privileges relating

accessing logs and alarms


Add all operations with the term event in them
Hint: use a filter!

Apply the role to the newly created users Test!


Log in as user with only the new role
Group B

2011 All rights reserved.

64

Exercise: Create another role


Define another role
This role will carry privileges relating to user

creation and management


Once the role has been created, create 3 new

users
This admin team will oversee Human Resources

(HR) assign them the newly created role

Extension: If you have time, also create a group for the HR team, and assign these newly created users
Group B

2011 All rights reserved.

65

Deleting Users
Deleting Users required 2 confirmations!

#1
2011. All rights reserved. 66

Deleting Users
Deleting Users required 2 confirmations!

#2
2011. All rights reserved. 67

Enterprise Administration

Susan is getting married, and is changing her job I must update her details and roles

Group A

And Daniel is leaving the company Ill need Group B to delete his profile

68

Exercise: Modify User


One of the HR staff has decided to get married
Change their last name to smith and update

their postal address (you choose the details)


She has also decided to switch jobs remove

the HR user management role previously assigned her


Also delete one user

2011 All rights reserved.

69

Course Objectives
By the end of this lesson, you should

Know how to:


Create SMGR administrators

Apply existing roles to new users


Create new groups & add users to them Create new roles and define privileges

2011. All rights reserved.

70

Avaya Aura System Manager


Administering User Profiles

Avaya Aura System Manager


Advanced Administration

Course Outline
Backing up / restoring from backup
Discovering inventory in the Network Deploying product licenses

Bulk import Bulk export


Configuring SMGR high availability (HA)

2011. All rights reserved.

73

Course Objectives
Know how to:
Backup SMGR data Use SMGR to discover inventory in the Avaya network

Use SMGR as a WebLM server


Manage data in bulk Configure SMGR for HA

2011. All rights reserved.

74

Avaya Aura System Manager

Backing Up SMGR Data

Information held by Avaya Aura SMGR


Product Management Data User Profile Data
Admins / communication users

Element definitions
Configuration Routing Policies, endpoint profiles

User profiles, addresses, roles etc.


Communication profiles Application sequencing
2011. All rights reserved. 76

Backing up SMGR Information

<xml> <data> </data> </xml>

2011. All rights reserved.

77

Backing up SMGR Information

2011. All rights reserved.

78

Backing up SMGR Information

backup
Only specify the filename, not the path

A backup can be created on the local file system

Or copied to a remote Linux server

2011. All rights reserved.

79

Backing up SMGR Information

Specify the full path

When backing up to a remote server (safer), you will need

the remote server SSH login details

2011. All rights reserved.

80

Backing up SMGR Information Scheduling


Backups can be performed when needed (now)

And / or scheduled to take in the future (recurring?)

2011. All rights reserved.

81

Perform a local backup


1. Create a local backup of your SMGR data - now
2. Also schedule a regular maintenance backup:
To take place daily

At midnight
Starting tomorrow Ending after 1 month

2011. All rights reserved.

82

Viewing the backup


When the backup completes, SMGR will summarize the details

SSH

SSH into the SMGR VA

to view the backup


admin/admin

2011. All rights reserved.

83

Locate your backup


SSH into your SMGR
Use the SMGR IP (from your browser URL) Username / password: admin / admin

Navigate to the location


Default is: /var/avaya/backup/manual

Take a look!

2011. All rights reserved.

84

Restoring from backup


When needed, you can restore SMGR config

SMGR will remember previous backups

2011. All rights reserved.

85

Restoring from backup

Be warned that this is a dangerous

operation
It will wipe existing configuration in favor of

the settings found in the backup

2011. All rights reserved.

86

Restore from backup


Notice that your SMGR already has a number of users,

domains & SIP elements defined


Delete any number of these Restore your earlier backup
This will take 5 minutes or so When SMGR becomes available again, check that the

deleted elements have indeed been restored

2011. All rights reserved.

87

Perform a remote backup


Work with a buddy
Backup to your buddys /tmp directory
Name your backup /tmp/NAMEbackup (use your own name)

SSH into your buddys SMGR, and locate your backup


admin / admin

Whats different about the format of the remote backup?

2011. All rights reserved.

88

Avaya Aura System Manager

Inventory Discovery

The IT network

2011. All rights reserved.

90

SMGR Service Discovery

BSM

Discoverable

2011. All rights reserved.

91

SMGR Service Discovery

???

2011. All rights reserved.

92

Inventory Auto Discovery Process


1. Configure SNMP Profile (s)

2. Define Subnet (s)


3. Enter CM details 4. Run discovery profile
NB: SNMP service is not enabled by default on SM. Requires running setup_snmp on target SM
SNMP

SNMP

135.64.0.*
2011. All rights reserved. 93

Inventory Auto Discovery Process


SMGR 6.0 supports automatic element discovery

2011. All rights reserved.

94

Inventory Auto Discovery Process


SNMP access details

SNMP V3

2011. All rights reserved.

95

Inventory Auto Discovery Process


Subnet

2011. All rights reserved.

96

Inventory Auto Discovery Process


CM access details

2011. All rights reserved.

97

Inventory Auto Discovery Process

2011. All rights reserved.

98

Inventory Auto Discovery Process

IP currently being scanned

Devices discovered

2011. All rights reserved.

99

Discover the CM in the network


Create a discovery configuration
Use SNMP V1
Read community: public

Write community: public

Define the subnet youre interested in


Use the IP address provided by the instructor

Use a subnet of 255.255.255.0

Enter CM access details


init / itsgrand3

Monitor the discovery process

2011. All rights reserved.

10 0

Avaya Aura System Manager

Licensing Other Services

SMGR as License Manager

Some activities require permission!


Have to have a license

Avaya products are just the same

2011. All rights reserved.

10 2

SMGR Integrated WebLM Server


You have a license for me?

Full Web LM Server Integrated


License for me?

Must have access to an Avaya

WebLM Server before they can start properly

2011. All rights reserved.

10 3

SMGR Integrated WebLM Server

License file is bound to specific SMGR Contains reference to MAC (unique ID)
Licenses are not portable!

2011. All rights reserved.

10 4

Deploying Licenses

2011. All rights reserved.

10 5

License you SMGR


Apply a license to your SMGR
Use the license.xml on your XP desktop Check that POM now shows as a licensed product
Menu on the left

NB: We do not have a POM in the training lab

2011. All rights reserved.

10 6

Avaya Aura System Manager

Handling Data in bulk

Helps prevent a bad day for the Admin!

2011. All rights reserved.

10 8

Use Cases: Initial Provisioning

Initially provisioning an enterprise Moving lots of information into a new Avaya Aura

installation
Professional Services

Supposes data must already exist somewhere!

2011. All rights reserved.

10 9

Use Cases: Large Data modifications

Modifying large sets of data

quickly

2011. All rights reserved.

11 0

Bulk Import What can be imported?

User Profiles (Including Communication Profile) Application Sequencing

Personal Contact Lists


Shared Addresses Presence Access Control Lists (ACL) SMGR Roles

Element Details Etc.

2011. All rights reserved.

11 1

Import Process
SMGR Data

Represented as XML
Read by SMGR and added

to the DB

SMGR doesnt say how you do this only what format the data should be in

<xml> <data> </data> </xml>

2011. All rights reserved.

11 2

Performance
Initial provisioning of SMGR may involve a large dataset
Bulk Import supports 60 records / minute

100,000 Users spread across multiple files


5,000 Users in a single 600Mb file

<xml> <data> </data> </xml>

<xml> <data> </data> </xml>

2011. All rights reserved.

11 3

Failed records?

<xml> <data> </data> </xml>

<xml> <data> </data> </xml>

Failed to import

Any records that fail to import should be provided for download by the UI Records can then be modified and re-imported
2011. All rights reserved. 11 4

Importing User data


SMGR supports both full and partial User data importing Can update existing users details E.g. Add a contact

<xml>

<xml>

Communication Profile Contacts Address Roles


</xml>

Contacts Roles
</xml>

2011. All rights reserved.

11 5

Importing: User data


Done through the SMGR web interface

2011. All rights reserved.

11 6

Importing: User data


3 Sections
1. Select import XML file
<xml> <data> </data> </xml>

2. Configure Import handling

???
2011. All rights reserved. 11 7

Import a user record


Locate the importUser.xml file on your desktop
View the contents of the file Import the user into your SMGR configuration
Import immediately (dont schedule) Choose to continue processing other records on failure
If the user already exists, select to overwrite with the new one
<xml>

Communication Profile Contacts Address Roles


</xml>

2011. All rights reserved.

11 8

On processing a record that cannot be imported will SMGR rollback?

2011. All rights reserved.

11 9

Importing: User data


If you are re-importing data, you probably dont want to touch

successfully imported User data

2011. All rights reserved.

12 0

Importing: User data

3. Choose immediate or scheduled import

2011. All rights reserved.

12 1

Bulk Import XML Generator


Linux based testing tool for generating large datasets

Generates XML from simple input file ./genxml.sh [-o <output file>] [<input file>]
<xml> <xml> <data> <data> </data> </data> </xml> </xml> <xml> <xml> <data> <data> </data> </data> </xml> </xml> <xml> <xml> <data> <data> </data> </data> </xml> </xml>

Optional if omitted, output thrown to stdout

<xml> <xml> <data> <data> </data> </data> </xml> </xml>

<xml> <xml> <data> <data> </data> </data> </xml> </xml>

<xml> <xml> <data> <data> </data> </data> </xml> </xml>

Download from: http://taco.dr.avaya.com/wiki/index.php/Session_Man ager_Bulk_Import_XML_Generator_R6.0_S34


2011. All rights reserved.

12 2

Bulk Import XML Generator

Linux based testing tool for generating large datasets

Generates XML from simple input file ./genxml.sh [-o <output file>] [<input file>]
<xml> <xml> <data> <data> </data> </data> </xml> </xml> <xml> <xml> <data> <data> </data> </data> </xml> </xml> <xml> <xml> <data> <data> </data> </data> </xml> </xml>

Optional if omitted, output thrown to stdout

<xml> <xml> <data> <data> </data> </data> </xml> </xml>

<xml> <xml> <data> <data> </data> </data> </xml> </xml>

<xml> <xml> <data> <data> </data> </data> </xml> </xml>

Download from: http://taco.dr.avaya.com/wiki/index.php/Session_Man ager_Bulk_Import_XML_Generator_R6.0_S34


2011. All rights reserved.

12 3

Bulk Import XML Generator


Linux based testing tool for generating large datasets

Generates XML from simple input file ./genxml.sh [-o <output file>] [<input file>]
<xml> <xml> <data> <data> </data> </data> </xml> </xml>

???
<xml> <xml> <data> <data> </data> </data> </xml> </xml>

Optional if omitted, output thrown to stdout

<xml> <xml> <data> <data> </data> </data> </xml> </xml>

<xml> <xml> <data> <data> </data> </data> </xml> </xml>

<xml> <xml> <data> <data> </data> </data> </xml> </xml>

<xml> <xml> <data> <data> </data> </data> </xml> </xml>

Download from: http://taco.dr.avaya.com/wiki/index.php/Session_Man ager_Bulk_Import_XML_Generator_R6.0_S34


2011. All rights reserved.

12 4

Bulk Import XML Generator Input file format

Existing CM Association (<ext>|<first ext>-<last ext>), <phone pass>, <domain>, <SM name>, [<orig app. seq. name>], [<term app. seq name>], <cm name> LOCATION=<location> New CM Association (<ext>|<first ext>-<last ext>), <phone pass>, <domain>, <SM name>, [<orig app. seq. name>], [<term app. seq name>], <cm name> LOCATION=<location> template=<endpoint template name> No CM Association (<ext>|<first ext>-<last ext>), <phone pass>, <domain>, <SM name>, [<orig app. seq. name>], [<term app. seq name>] LOCATION=<location>

2011. All rights reserved.

12 5

Bulk Import XML Generator Input file format

Existing CM Association 5500-6500, 123456, avaya.com, nearEndSm, origSeq1, termSeq1, mycm.dr.avaya.com LOCATION=Denver New CM Association 5500-6500, 123456, avaya.com, nearEndSm, origSeq1, termSeq1, mycm.dr.avaya.com asm2=secondarySm bsm=branchSm LOCATION=Denver No CM Association 5386000, 123456, avaya.com, nearEndSm, origSeq1, termSeq1 LOCATION=Denver

2011. All rights reserved.

12 6

Bulk Import XML Generator Input file format

Range of endpoints Vs single endpoint Existing CM Association 5500-6500, 123456, avaya.com, nearEndSm, origSeq1, termSeq1, mycm.dr.avaya.com LOCATION=Denver New CM Association 5500-6500, 123456, avaya.com, nearEndSm, origSeq1, termSeq1, mycm.dr.avaya.com asm2=secondarySm bsm=branchSm LOCATION=Denver No CM Association 5386000, 123456, avaya.com, nearEndSm, origSeq1, termSeq1 LOCATION=Denver

2011. All rights reserved.

12 7

Bulk Import XML Generator Input file format

Existing CM Association 5500-6500, 123456, avaya.com, nearEndSm, origSeq1, termSeq1, mycm.dr.avaya.com LOCATION=Denver

SMs, CMs, Locations, Domains & App sequences must have already been administered before attempting to import

2011. All rights reserved.

12 8

Importing: User data

Passwords can be supplied in the user data XML

These can be plaintext, or you can encrypt them and SMGR

will decrypt the passwords

password1 %z[323*&3

Utility (Part of SMGR SDK)


um_bulkimport-encryptUtil.zip

Usage:
um_bulkimport-encryptUtil.sh import <xmlfilename> <basenamespaceprefix> <deltanamespaceprefix>

2011. All rights reserved.

12 9

Importing: Roles & Groups


In similar fashion, one can import roles
Note: No functionality to schedule Group import yet

2011. All rights reserved.

13 0

Miscellaneous
Login name treated as unique identifier
As such, loginname cannot be updated by bulk import

If importing users, roles & contacts:


1. Roles

2. Public Contacts | Shared Contacts


2. Users

If importing Presence ACL:


1. Users

2. Presence Data

2011. All rights reserved.

13 1

Configuring Default Import Options

2011. All rights reserved.

13 2

Configuring Default Import Options

0 = Skip 1 = Merge 2 = Replace 3 = Delete

2011. All rights reserved.

13 3

2011. All rights reserved.

13 4

SMGR Export Data


Achieved via CLI Tool exportUpmUsers.sh
1. Launch Putty & SSH in using: admin / admin
2. Switch to root # su root (enter p/w root01)

must be executed from SMGR machine

3. Navigate to the directory shown

2011. All rights reserved.

13 5

SMGR Export Data


Inside the config directory, youll find the

bulkexportconfig.properties file
Use this to configure:
Set number of records to be exported
File size Export file destination

2011. All rights reserved.

13 6

Perform Export

Can set options via the CL


u : SMGR Username authorized to export

p : Password
f : Export file name prefix r : Records per file

d : Destination Folder
s : Record starting index e : End offset index (number of records)

Optional Parameters

2011. All rights reserved.

13 7

Export your SMGR user data


Export all SMGR user data
Unzip, and inspect the format of the XML data

# unzip <filename.zip>
# cat <filename.xml> Compare to the XML files from the import exercise

Extension:
If you find yourself waiting, experiment with the settings in the

bulkexportconfig.properties file
Try modifying your exported data, and using it to import new users into

SMGR
Remember the login name Field must be unique
<xml>

Communication Profile Contacts Address Roles


</xml>

2011. All rights reserved.

13 8

Perform Export
You can also schedule an export to be performed

t : Set export scheduled time

YYYY:MM:DD:HH:MM:SS

E.g:

exportUpmUsers.sh -t 2010:05:01:12:00:00

1st of May 2010, at Midday

???

Script regular data exports?

2011. All rights reserved.

13 9

Perform Export
Zip file is created

containing the export

2011. All rights reserved.

14 0

2011. All rights reserved.

14 1

Using the Exported Data

Exported data file can be used in GUI import

By default, data is suitable for complete import

2011. All rights reserved.

14 2

Using the Exported Data


XML File can be amended for use in partial import
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <tns:users xmlns:tns="http://xml.avaya.com/schema/import" xmlns:ns3="http://xml.avaya.com/schema/import_csm_mm" xmlns:ns4="http://xml.avaya.com/schema/import_csm_cm" xmlns:ns5="http://xml.avaya.com/schema/import_sessionmanager" xmlns:ns6="http://xml.avaya.com/schema/deltaImport" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://xml.avaya.com/schema/import userimport.xsd">

<tns:deltaUserList xmlns:ns3=http://xml.avaya.com/schema/import1 xmlns:tns="http://xml.avaya.com/schema/deltaImport" xmlns:xsi="http://www.w3.org/2001/XMLSchema instance" xsi:schemaLocation="http://xml.avaya.com/schema/deltaImport userdeltaimport.xsd ">

<tns:user></tns:user> <tns:users></tns:users>

<tns:userDelta></tns:userDelta> <tns:deltaUserList></tns:deltaUserList>
2011. All rights reserved. 14 3

Demo
Modify Exported Data
Perform Partial Import

2011. All rights reserved.

14 4

Exporting SMGR Roles


Separate CLI utility for exporting roles

2011. All rights reserved.

14 5

Exporting SIP Entities

Domains, Locations, Adaptations, SIP

Entities, Entity Links, Time Ranges, Routing Policies etc. can all be exported
Click the More Actions button to find option
2011. All rights reserved. 14 6

Export your SMGR routing info


Export one or more collections of routing info:
Domain Locations
<xml>

Routing Policies

Communication Profile Contacts Address Roles


</xml>

NB:
Remember that when re-importing something like a routing

policy, it will contain references to SIP entities, domains, dial patterns and so on
These will need to have been re-imported first
2011. All rights reserved. 14 7

Avaya Aura System Manager

High Availability

What is High Availability?


High Availability (HA) is the ability to access a service when you need it

Even in the case where an internal error has occurred

End users (SMGR admins) should not need to know!

2011. All rights reserved.

15 0

SMGR High Availability

How does SMGR deliver HA?


2 SMGR nodes Arranged in active node / backup node configuration

When the active node fails, the backup node automatically takes over
2011. All rights reserved. 15 1

SMGR High Availability & System Platform

SP Utilities

CentOS C-DOM

SMGR HA is facilitated by the Avaya

Aura System Platform


XEN Hypervisor - DOM-0

Its really System Platform HA, but SMGR

benefits by being a VA deployed to SP


Proc HDD RAM NIC

Some things in life are free!

2011. All rights reserved.

15 2

SMGR High Availability & System Platform

SP Utilities CentOS C-DOM

System Manager RHEL SMGR Template

SP Utilities CentOS C-DOM

System Manager RHEL SMGR Template

XEN Hypervisor - DOM-0

XEN Hypervisor - DOM-0

Proc

HDD

RAM

NIC

Proc

HDD

RAM

NIC

Active SMGR on System Platform

Remote SMGR node (name for the backup)


2011. All rights reserved. 15 3

SMGR High Availability & System Platform


Replicated VA machine state consists of:
Everything saved / committed On the hard disk

In the SMGR database

2011. All rights reserved.

15 4

SMGR High Availability & System Platform


Anything not in committed will not have been saved to disk, & will be lost in the case of a failover

VA must boot when it fails over

2011. All rights reserved.

15 5

High Availability Extent of impact


Admin will lose work-in-progress Service outage will last as long as it

takes to:
1. Detect active node is down
2. Boot the remote node VA (triggered

automatically)

2011. All rights reserved.

15 6

SMGR High Availability & System Platform


SMGR already installed on one node
SP Utilities CentOS C-DOM System Manager RHEL SMGR Template SP Utilities CentOS C-DOM System Manager RHEL SMGR Template

XEN Hypervisor - DOM-0

XEN Hypervisor - DOM-0

Proc

HDD

RAM

NIC

Proc

HDD

RAM

NIC

Once HA is configured, the SMGR template is

replicated to the remote node


2011. All rights reserved. 15 7

SMGR High Availability & System Platform


SMGR VAs share the same IP configuration - Problem??
192.168.1.102

192.168.1.102

SP Utilities CentOS

System Manager RHEL SMGR Template

SP Utilities CentOS

System Manager RHEL SMGR Template

C-DOM

C-DOM

XEN Hypervisor - DOM-0


192.168.1.101

XEN Hypervisor - DOM-0


192.168.1.167

Proc

HDD

RAM

NIC

Proc

HDD

RAM

NIC

Active SMGR on System Platform

2011. All rights reserved. Remote SMGR on System Platform15 8

???
192.168.1.101

192.168.1.101

SP Utilities CentOS

System Manager RHEL 5.3 SMGR Template

SP Utilities CentOS

System Manager RHEL 5.3 SMGR Template

C-DOM

C-DOM

XEN Hypervisor - DOM-0

XEN Hypervisor - DOM-0

Proc

HDD

RAM

NIC

Proc

HDD

RAM

NIC

2011. All rights reserved.

15 9

Active Node definition:


Replicates its state to the remote node
Has the SMGR VA turned on

So what decides the active node?


Nodes score themselves Highest score = active node

I am alive, have network connection, can contact the gateway

Score = 6.0

If a node cannot contact the other:


The uncontactable node is assumed

down
The surving node becomes active (if it

isnt already)

2011. All rights reserved.

16 0

SMGR High Availability Configuration


Preferred Configuration

3.1

Crossover cable

Enterprise Network

6.0

2011. All rights reserved.

16 1

Geographical H/A isnt supported by this setup

Why?

2011. All rights reserved.

16 2

SMGR High Availability Configuration


Preferred Configuration

System Platform Server fitted with (at least) dual port NIC

2011. All rights reserved.

16 3

SMGR High Availability Configuration


Preferred Configuration
Direct crossover connection allows high speed

connection between SPs


Avoids large SP payloads having to travel

over the regular network


SP & SMGR VM state copied from active

2011. All rights reserved.

16 4

SMGR High Availability Configuration


Preferred Configuration

Crossover cable

Enterprise Network

2011. All rights reserved.

16 5

SMGR High Availability Configuration


Preferred Configuration

Crossover cable

Enterprise Network
Crossover cable is preferred, not mandatory

Replication will happen over the regular network


2011. All rights reserved. 16 6

SMGR High Availability Configuration

admin admin01

The Toolwire Internet Explorer contains a shortcut to the SP Web Console in Favorites
2011. All rights reserved. 16 7

High Availability

Configure SMGR failover from within the System Platform webconsole


2011. All rights reserved. 16 8

High Availability

Remote node

Enter IP & login details for the remote node


The SP on which you are logged in is preferred by default
2011. All rights reserved. 16 9

Configure SMGR for HA


Work with a buddy
Decide which SMGR will be active, which is remote

Log into SP webconsole on the active node


Configure failover using the details of the remote node The initial replication may take some minutes to complete

Test by logging into the SMGR using the IP of the active node Kill the active node VA, then attempt to access the SMGR IP again

Remote node should kick in, allowing you to use SMGR

2011. All rights reserved.

17 0

Avaya Aura System Manager


Advanced Administration

Thank you!

You might also like