You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 11 Next »

Introduction

opConfig 4 is the NMIS 9 compatible version.  In this guide, you will learn all you need to start using opConfig. 

Before you start

We recommend you:

Accessing opConfig

Once opConfig has been installed, we can access the GUI:

http://<yourserver>/en/omk/opConfig

The first step will be to introduce the license, if we haven't done that yet:

Once we introduce the license we will see the first screen of opConfig, the dashboard, that will be empty for the moment:

opConfig GUI Features

Views

In the views menu we have the following views:

  • Dashboard: opConfig landing page were we can see a Summary of the nodes report, last changes and scheduled jobs. 
  • Change Dashboard: A Dashboard with the recent commands and configurations.
    • Commands: Commands run in the last 8 days (By default).
    • Config Changes: These commands are the ones tagged with detect_changes in the last 8 days. 
  • Changes Overview: A table with the recent config changes. 
  • Commands Overview: A table with the recent commands run. 
  • Nodes Report: A table with the nodes information, when was the last change done for a node, information about the OS, etc.
  • Operational Status Report: Overview of what opConfig is doing to which nodes, when, and how successful it was with these operations.
  • Command Outputs: See the result of a command run in a node, for a specific revision.
  • Compare Revisions: Compare different versions of a command.
  • Compare Command Outputs: Compare the result of a command run. 
  • Configuration Change History: A history of the configuration changes performed. Here you can read further regarding how to automate configuration changes.
  • Configuration Set Overview: A list of all the configuration sets, imported using the opconfig cli tool. 
  • Compliance Summary: A list of all the compliance policies. Here you can find further information about opConfig, compliance management and Open Audit integration.
  • Compliance Status Details: The status of the compliance policies. 

Actions

  • Schedule Configuration Changes: From this menu, we can schedule a configuration set to run once, by selecting a date, a node or node set, and a Configuration set. It is also possible to notify introducing an email. 

Virtual Operator 

The Virtual Operator is used to help create jobs comprised of commands sets to be run on various nodes, reporting to see job results and troubleshooting to diagnoses nodes which raise conditions. You can find a complete Virtual Operator guide in this link. 

Nodes Management

From the System > Edit Nodes menu we can see all nodes, a node details and Edit or add a new node. From the node details, we can Test the connection to a Node, or Discover the Node. 

From opConfig 4.0.0, nodes information is shared between NMIS and opConfig, so the "Import Nodes from NMIS" option is not available anymore. 

Credential Sets

Credentials for all connections made by opConfig are configurable from the opConfig GUI ONLY.  Before anything else you need to create sets of credentials to access you devices.  At this point in time, opConfig supports only Telnet and SSH, and for SSH password-based authentication and RSA with no passphrase is supported.

Starting to Collect Data

Steps to set up your first automated job: 

  • Configure a device to to be supported by opConfig. 
  • Create a configuration set
  • Schedule a job. There are several ways of schedule a job: 
    • Create a new virtual operator job: Using the GUI we can create a new job that could be run in a specific time and hour. Note that this option will run once. 
    • Using the CLI Tool: With the configuration option push_configset.
    • Cron job: For the execution of tasks periodically, usually based in the tags of the configurations. An example of some cron jobs for opConfig:
# opConfig: hourly command set running
1 * * * *   root    /usr/local/omk/bin/opconfig-cli.pl quiet=1 act=run_command_sets tags=HOURLY
# and the daily ones
7 7 * * * * root    /usr/local/omk/bin/opconfig-cli.pl quiet=1 act=run_command_sets tags=DAILY
# and a daily import from open-audit enterprise
21 4 * * * root     /usr/local/omk/bin/opconfig-cli.pl quiet=1 act=import_audit
# and a daily purge of old revisions
40 3 * * *     root /usr/local/omk/bin/opconfig-cli.pl act=purge_revisions quiet=1

The schedule maintains a queue of jobs and the opconfig daemon, opconfigd, is the responsible of running this jobs on time. 

It is also important to review and set accordingly the purging policies.

Related readings


  • No labels