IMC
cancel
Showing results for 
Search instead for 
Did you mean: 

HP iMC High Availability

Dawit_Zeru
Occasional Contributor

HP iMC High Availability

Hi All,

i have a few questions regrading the HP iMC HA installation.

I want over the PDF installation for HA but its not very understanding

we decided to go with 'Centralized deployment with DBMan for data synchronization' Deployment

meaning that we have an iMC server's (Active/Standby) with local DB .

my questions are:

  • why do I need the External IP Address and Internal IP Address?

For what purpose exactly?

  • On the section " Installation considerations " P# 25

The hac.conf is empty?

The document file link is:

http://h20566.www2.hpe.com/hpsc/doc/public/display?sp4ts.oid=4176520&docLocale=en_US&docId=emr_na-c04958702

thanks in advance

7 REPLIES
NeilR
Respected Contributor

Re: HP iMC High Availability

I looked at the document - on page 24 it shows the network diagram. This is the setup I am using. A primary active server, and a standby backup server with the data backed up nightly on the primary and copied to the secondary.. Both my primary and standby have IMC installed with a local DB. I use VMware for both, so each server can be backup in vmware as well.

I'm not sure if this is the configuration you are trying to deploy, but I can share how mine is setup. Attached are 3 screen shots - the network diagram from pg 24, and the DBman config screens from the active and standby server.

I did not use iHAT to configure this - it was not needed to set up this basic configuartion.

This is covered on page 81 in "HPE IMC Centralized Deployment Guide with Local Database" document:

- Setup FTP server on primary and standby. User home directory is the backups folder on the each

- On the active server, point to the standby server using the iP address of the standby. Select the tables to backup. Set a time to backup

- On the standby server, select files to restore.

This will run once a day and copy and restore the DB onto the standby server. The log file will show success or failure.

This configuration has the following advantages:
Standby server is covered as a backup license - no additional license required.
It will recieve alarms and traps if devices are configured to send to the backup server IP as well as the primary
It will process UAM requests, so users can be authtenticated by 802.1x or MAC
It can be upgraded separately from the primary and tested before upgrading the primary
Using VMware, the primary or secondary can be restored from snapshot quickly.

These disadvantages:
You cannot edit the configuration on the standby - no new nodes or changes.
Only the admin user is active- EDIT actually I checked again - other operators are active
It is not a true hot standby, with data synchronized up to the minute
Using VMware, when the primary or secondary is restored from snapshot there will be some loss of alarm and performance data.

If you need true HA, then the setup is more complicated, requiring iHAT to manage. I can not help you there.

But if you just need a failover to handle alarms and authentication, this will be easy to deploy.

Hope this helps - sorry if I did not address your requirement exactly.

Riborg
Occasional Advisor

Re: HP iMC High Availability

Neil, what do you mean by

"Standby server is covered as a backup license - no additional license required."

How is this license activated?

Never heard this from HPE. :)

 

NeilR
Respected Contributor

Re: HP iMC High Availability

I must have read it in one of the docs, but can't recall which - DOn't think it was mentioned in the doc I refer to earlier.

To create a standby server, create a new server and deploy an identical configuration as your primary.

 - Unfortunately you can't clone it because imc has too many places where the ip address needs to be changed properly to bother with.

When you boot it up it will be in demo mode. When you go to log in press the Activate link above the login button.

At the License Information screen, Press Activate Now button - see screen shot

At the Register screen, Select Backup from the dropdown, and then supply the same license key used for the primary - see screen shot.

After this is complete, the server is now a backup imc server. Log into each server, and use the imc deployment tool to configure the backup as I showed earlier. Once the db has been restored, the configuration will be avaialbe on the backup.

The backup as I mention above, will mostly display information copied over, and can't be modified. The UAM related configuration can be deployed to the switches, as secondary radius settings need to be added for the backup to authenitcate users - or you can add manually using CLI on the switch. Most other config operations are disabled

Alarms can be viewed, but only recoverd all on the browse alarms screen - individual alarms can't be recover.

SNMP traps will be sent to the backup if the devices are configured to send to both.

All your devices will now also get queried by the backup over snmp and ping, so if you are restricting this you will need to grant access - otherwise they will generate more traps about unauth access.

Also, create a script to manage the number of backups stored on the standby machine - the deployment tool has a #to keep on the primary, but not the standby, so your disk will fill up.

Dawit_Zeru
Occasional Contributor

Re: HP iMC High Availability

Hi Neil,

i've a qiestion regrding the backup server license.

if my Active server will go down is the backup server will be ACTIVE?

NeilR
Respected Contributor

Re: HP iMC High Availability

If you mean will your backup server become an Active one if the active one fails? No it will not.

It is just a separate server sitting there running the same code. You can log into at any time and see what's there

It will respond same as a active IMC/Radius/UAM server, depending on the order you list in your devices, and if the primary does not respond and itwill authenticate users and assign vlans etc.

It will recieve traps and alarms and track devices using ping and snmp, but it is alreadly doing that all the time, as configured on your devices..

You can use any of the IMC functions in read-only mode, so you can view NTA or other data collected, alarms etc. - just can't add new or change configurations.

Every night or whenever, the backup database gets restored using from the active server, so anything added or deleted on the primary is now on the backup. During the day any changes made will create differences between them. But mostly that doesn't matter much - unless you have a lot of changes

Shirin
Frequent Advisor

Re: HP iMC High Availability

iHA (iMC HA) in my opinion is the best way to deploy iMC in HA. This type of deployment is not limited by the number of the iMC group of servers or by the number of iMC servers in each group. iHA also is very much flexible in term in investement since you need to treat its licencing the same way you will approach a single iMC node and add on the top of it the HA license for the number of servers you want to deploy. iHA has its own (propriatary) cluster and combined with a remote database SQL always-on deployement you reach a high level of redundancy for iMC and for SQL. There is not more any requirement for the iMC dbman tool to backup the iMC database since it is all done on the SQL deployement.

Dawit_Zeru
Occasional Contributor

Re: HP iMC High Availability

Hi,

 

sorry for the late response, but by a chance do you know if the iMC HA support L3 meaning that Maser / Slave server will be in a different subnet and in a different sites?