To configure device mediation

Purpose

Perform this procedure to create a mediation policy.

As part of creation of a mediation policy, you will configure the following communication and security policies for discovery rules:

  • MIB entry policies that define how to poll specific device MIBs for changes

  • management ping policies that define periodic device connectivity checks

  • event notification policies that define how the NFM-P processes SNMP traps

Note: LI mediation has special configuration requirements; see To configure an LI security mediation policy for information.

Note: To configure SNMPv3 security, you must preconfigure the NFM-P and managed devices. See To enable SNMPv3 management of a device for information.

Note: For Wavence SNMPv3 password information, see the Wavence documentation.

Steps
 

Choose Administration→Mediation from the NFM-P main menu. The Mediation (Edit) form opens.


Configure the parameters on the General tab.


Configure a mediation security policy.

Note: Some NEs require specific mediation security policies. See the NFM-P device-specific documentation for information.

  1. Click on the Mediation Security tab.

  2. Click Create or choose the default policy and click Properties. The Mediation Policy form (Create | Edit) opens.

  3. Configure the general policy and SNMP mediation parameters.

    Note:

    The Community String value must match the community string value on the managed device.

  4. If you set the Security Model parameter to SNMPv3 (USM), click Select to choose the required SNMPv3 user. SNMPv3 user creation is described in To enable SNMPv3 management of a device .

    Note:

    If you specify the use of SNMPv3 in the policy, you must enable SSH2 in the policy.

  5. Configure the remaining parameters.

    Note:

    If you choose Secure as the File Transfer Type value, you must set the Communication Protocol parameter to SSH2.

    To use SSH2, you must enable SSH2 and host key persistence on the SSH server of the device. See Configuring SSH security on devices for information about configuring SSH2.

    If you choose SSH2 as the Communication Protocol, you must specify the mediation policy for read and write access in the discovery rule of the device.

    If you choose SSH2 as the Communication Protocol, the User Name and User Password parameters must be the SSH user name and password configured on the device.

    See Chapter 8, Device commissioning and management for information about enabling FTP access for a device user account.

  6. Save your changes and close the form.


To configure one or more MIB Entry policies, perform the following steps.

  1. Click on the MIB Entry Policies tab and click Search. A list of MIBs appears, organized by the product name of the device that supports the MIB.

  2. Choose one or more MIBs from the list and click Properties. The MIB Entry Policy (Edit) form opens.

  3. Configure the required parameters in the Configuration panel.

    Caution: Changing the Number of Varbind per PDU value may affect the time required for subsequent NE resynchronizations and degrade NFM-P system performance. Do not configure the parameter without consulting Nokia technical support.

  4. Save your changes and close the form.


To configure a management ping policy, perform the following steps. A management ping policy specifies how the NFM-P checks the connection to device management IP addresses. Each managed device may provide one or more of the following addresses:

  • the system IP address, which is an in-band management interface

  • the management IP address, which is an out-of-band management interface

  • the IP address of the standby CPM

Note: When the device does not have one or two of the IP addresses, for example, there is no CPM IP address, ensure that you do not enable the schedule on the ping policy assigned to missing interfaces. This allows the assignment of an inactive ping policy during discovery configuration.

The destination interface of the ping is determined during discovery-rule creation. You can also perform an unscheduled ping from the Managed State tab of the Discovery Manager configuration form.

You can view management connection alarms from the NE properties form of the managed device that was pinged. For example, from the Discovery Manager form, click on the Resync Status tab. Choose a device from the list and click Properties. From the NE properties form, click on the Faults tab to view the alarms.

  1. Click on the Ping tab.

  2. Click Create or choose a ping policy and click Properties. The Management Ping Policy (Create | Edit) form opens.

  3. Configure the required parameters.

    Note:

    You must enable scheduling for a ping policy to be active. When scheduling is not enabled, and an assigned managed device is not reachable, management connection alarms may not be raised.

  4. Save your changes and close the form.


CAUTION 

CAUTION

Service Disruption

The NFM-P uses SNMP notifications to verify network management functions. Before you configure an event notification policy, consult Nokia support to ensure that you do not disable the processing of traps that the NFM-P requires.

To configure event notification policies, perform one of the following. Otherwise, go to Step 8 .

  1. Select a default trap policy from the list and click Properties. The Event Notification Policy (Edit) form opens.

  2. Create an event notification policy:

    1. Click on the Event Notification Policies tab.

    2. Click Create or select a policy and click Properties. The Event Notification Policy (Create | Edit) form opens.

    3. Configure the parameters.

    4. Click OK. The policy is listed on the form.

    5. Apply the changes in the Mediation (Edit) form.

    6. Select the new policy in the list and click Properties. The Event Notification Policy (Edit) form opens.


Enable or disable collection of traps in a policy.

Note: You cannot configure the Administrative State parameter in a default event notification policy. A default policy is indicated by a check mark beside the Default Policy indicator on the General tab of the Event Notification Policy (Edit) form.

  1. Click on the Notification Policies tab. A list of SNMP traps is displayed.

  2. Select an SNMP trap entry in the list and click Properties. The MIB Entry Policy - trappolicy (Edit) form opens.

  3. Configure the Administrative State parameter.

  4. Save your changes and close the forms.


Click OK to save your changes and close the Mediation (Edit) form.


If you are performing this procedure for device discovery, see Workflow for device discovery for the next steps.

End of steps