Manage a Site
Tenant administrator users can use the Site-Name page to view the details of a site and manage configurations of the site.
To view the details of a site or manage the site:
- Click Resources > Site Management.
The Site Management page appears.
- Click the Site-Name link of the site
that you want to manage.
The Site-Name page appears.
On the Site-Name page, depending on the type of site or the service selected for the site, one or more of the following tabs are displayed:
View general information about the site and the devices associated with the site. You can also view information about the recent alarms and alerts generated in the site. See Table 1.
View and configure IP VPN (Layer 3) parameters to connect an existing Layer 3 VPN to a network managed by Contrail Service Orchestration (CSO) through a provider hub site. For more information on IP VPN parameters, see Table 2.
You can add, edit, or delete IP VPN configuration for a provider hub site. For more information, see Add IP VPN Configuration to Provider Hubs, Edit IP VPN Configuration for Provider Hubs, and Delete IP VPN Configuration from Provider Hubs.
IP VPN can be configured only for provisioned provider hub sites with OAM_AND_DATA or DATA_ONLY capability for each tenant department VPN.
IP VPN configuration is not applicable for data center department VPNs.
View detailed information about the WAN links of the site. You can also add or delete a mesh tunnel between a source site and a destination site. See Table 3.
This tab is available only for SD-WAN sites.
View the list of policies applied to a site (Firewall, NAT, SSL proxy, or SD-WAN policy). Click the policy name to view the rules or intents that are applied to the site.
You can also view:
The name of the tenant user who last updated the policy.
The date and time at which the policy was updated.
Deployment status of the policy (deployed or undeployed).
This tab is available for SD-WAN and NGFW sites.
To edit a policy, click the edit icon (at the end of the row) and you are taken to:
Firewall Policy page (Configuration > Firewall > Firewall Policy) to edit firewall policies.
For more information, see Editing and Deleting Firewall Policies.
NAT Policies page (Configuration > NAT > NAT Policies) to edit NAT policies.
For more information, see Editing and Deleting NAT Policies.
SSL Proxy Policy page (Configuration > SSL Proxy > Policy) to edit SSL proxy policies.
For more information, see Editing, Cloning, and Deleting SSL Proxy Policy Intents.
SD-WAN Policy page (Configuration > SD-WAN > SD-WAN Policy) to edit SD-WAN policies.
For more information, see Editing and Deleting SD-WAN Policy Intents.
View, manage, and delete the devices for the site.
You can also:
Push licenses to a device
Activate a device
View and deploy stage-1 configuration to a device
Download the cloud info template
View, create, edit, deploy, and delete a LAN segment. For information on the fields displayed, see Adding LAN Segments.
Additionally, you can:
Reassign a LAN segment to a different department.
View the devices in a LAN segment and deploy any of these devices.
View the status of the deployment.
For more information on the fields displayed and tasks you can perform on the LAN tab, see Managing LAN Segments on a Tenant Site.
View the network services allocated to the tenant.
Additionally, you can:
Deploy network services to a site: Select the network service, and then select an attachment point in the topology graphic. Alternatively, you can drag and drop the network service to an attachment point in the topology graphic.
Start a network service. For more information, see Start a Network Service.
Disable a network service. For more information, see Disable a Network Service.
Delete a network service. For more information, see Delete a Network Service.
This tab is available only for SD-WAN sites.
Table 1 describes the widgets displayed on the Overview tab of the Site-Name page.
Table 1: Widgets on the Overview tab
View the following general information about the site:
View the recent critical, major, and minor alarms generated in the site with the date and time of occurrence.
From the Period list, you can select one of the following values to filter the generated alarms based on their time of occurrence:
You can click View All Alarms at the bottom-right corner of the Recent Alarms widget to view all the generated alarms in the Alarms page (Monitor > Alerts & Alarms > Alarms). For more information, see About the Alarms Page.
View the recent critical, major, and minor alerts generated in the site with the date and time of occurrence.
From the Period list, you can select one of the following values to filter the generated alerts based on their time of occurrence:
You can click View All Alerts at the bottom-right corner of the Recent Alerts widget to view all the generated alerts in the Alerts page (Monitor > Alerts & Alarms > Alerts). For more information, see About the Generated Alerts Page.
Connectivity & Devices
View the following general information about all the provisioned devices in the site:
Table 2: Fields on the IPVPN tab for provider hubs
Name of the department VPN associated with the IP VPN configuration.
Enter the name of the physical interface on which you want to enable eBGP between provider hub site and the PE router.
VLAN ID of the interface.
Range: 1 through 4094.
Interface IP Prefix
IPv4 address with a prefix of the interface.
AS Loop Count
Maximum number of times the detection of local Autonomous System (AS) number is allowed in the AS path. If this count exceeds the specified AS loop count, the system discards this route. This helps in preventing routing loops. For example, if you configure AS Loop Count as 1, the route is discarded if the neighbor’s local AS is detected in the path more than once.
Range: 1 through 10.
Autonomous system (AS) number for the eBGP peer.
Range: 1 through 4294967295.
IPv4 address of the peer interface.
Status of the IP VPN configuration (in progress or deployed).
Table 3 describes the widgets displayed on the WAN tab of the Site-Name page.
Table 3: Widgets on the WAN tab (Overlay and Underlay)
Overlay and Underlay topology of WAN links
Displays the WAN link topology of the site.
Links displayed in green are up (active) and red are down.
For all sites in full mesh topology, you can view all the connected WAN interfaces for each site. Click the site connection point to see all connections between its WAN interfaces. You can view general information about each WAN interface when you hover over it.
Overlay WAN Widgets
Select the time range by clicking on one of the following options:
You can select a custom time range by clicking Custom and selecting the To and From timing. You can also drag the Time Range slider (from either sides) to select a custom time range.
Note: All the information displayed on this tab is updated based on the time range you select.
Overall Network Statistics
Displays the following metrics for the selected WAN interface in the selected timeframe:
Displays a graphical representation of traffic on each WAN link for the selected time interval. You can update the graph based on any of following filters (drop-down list):
Displays a horizontal bar chart of the top applications that generate the maximum traffic in the spoke site or enterprise hub site.
You can select the Site traffic list to update the chart based on the total bytes, transmitted bytes, received bytes, or throughput (in bps).
Displays the link utilization (in percentage) as a circular chart of the top 10 applications and other applications. You can also view the total link capacity consumed (in bytes). You can select the Site traffic list to update the chart based on total bytes, transmitted bytes, received bytes, or throughput (in bps).
On-Demand VPN Threshold Details
When you hover over On-Demand VPN Threshold Details, you can view the threshold for creating and deleting tunnels, device SKU, maximum number of tunnels allowed, and minimum number of tunnels required before deactivation.
Additionally, you can:
You also can view the following details of the dynamic mesh tunnels history for the selected site:
Note: A new row is added to this table when there is a change in the tunnels associated with the particular site and the table entries are grouped by the destination site.
Underlay WAN Widgets
WAN Link Throughput Over Time
Displays a line chart of WAN interface utilization as throughput (in bps) over time for each underlay WAN link. Different color lines represent the input and output rate for each WAN link. You can select them by hovering over the input/output rate list on the right side of the widget. Every three minutes the bandwidth usage information is collected for each WAN link and the rate is displayed respectively on the graph.
You can view the utilization statistics for a particular time range by selecting any one of the following values from the Time Span list:
Note: You must upgrade the site to CSO Release 6.0.0 to view this widget. For more information, Upgrading Sites.