Chapter 3 • Network management
32
1037852-0001 Revision A
Performance
management
NMSS provides both real-time and historical statistics on
network components and traffic. These statistics are obtained by
querying components through SNMP.
Real-time statistics
Real-time performance reports are shown through the Vision
UEM GUI. Detailed statistics, which are updated periodically,
can be displayed on every managed network component. The
display formats can be changed dynamically to show absolute
values, relative values, deltas, or rates. NMSS also has an
integrated graphing tool called FlexGraph that can be used to
build an ad hoc graph of selected statistics to display trends in
real time.
Historical statistics
The historical statistics collection feature enables users to define
ad hoc sets of statistics to be sampled periodically and saved in a
disk file. NMSS can run the sampling operations between a
specific range of times, and save the results in a comma-separated
variables (CSV) formatted file. This facility can be used for
long-term trend analysis.
Security management
NMSS provides mechanisms for operator security, network
component security, and encryption key management.
Operator security
NMSS controls all access to network management features by
user-level authentication. All interfaces, whether interactive,
batch-mode or programmatic, are protected by a user id/password
login sequence.
There are two classes of users defined. Privileged users have
unrestricted rights. They can define other users, assign access
rights for those users, and perform other supervisory and
administrative functions. Unprivileged users can only perform
actions for which access rights have been granted to them.
Network component
security
The network is logically partitioned into network management
domains (NMDs):
• Configuration NMDs
• Management NMDs
Each operator can be associated with one or more NMDs, thus
restricting that operator’s access to network devices only in the
assigned NMDs.
Configuration NMDs Vision supports logical partitioning of the network into
non-overlapping domains called configuration NMDs.