Nick_Ellson
Joined 4 years ago
User Profile
User Widgets
Contributions
Re: LM with CLoudgenic (Palo Alto Prisma SD-WAN) API support?
Ah well.. we have another road block in our success path. As Cloudgenix Customer #1 (were using them before they came out of beta) we are established in their hood.cloudgenix.com portal structure. Can't make use of the Palo Alto SASE API until all our data is copied over to Palo Servers in May 2023...0Views0likes0CommentsRe: LM with CLoudgenic (Palo Alto Prisma SD-WAN) API support?
Just now, Stuart Weenig said: Ha, we've already gone to production and the only time things are clean are the first 59 seconds after i onboard a customer's devices. I can imagine as a Monitoring solution for multiple tenancy that things are bit more dicey. Worst case for my crew is we mess up an escalation chain and we get 100's of tickets instead of 10. Fortunately the ticketing system has bulk delete ?0Views0likes0CommentsRe: LM with CLoudgenic (Palo Alto Prisma SD-WAN) API support?
1 minute ago, Stuart Weenig said: Must be nice not to when you make a change in your portal. We are still in our Pro Services engagement for turn up, so I am addeding and deleting things daily to figure out what might break next ? It's a sea of red triangles man, a sea of them.1View0likes0CommentsRe: LM with CLoudgenic (Palo Alto Prisma SD-WAN) API support?
Just now, Stuart Weenig said: Yeah, sandbox portal doesn't have customer devices in it, so no dice for mine. Same.. haven't had an ION in our lab portal is years.. will see if Palo will issue some eval's for VM's perhaps..3Views0likes0CommentsRe: LM with CLoudgenic (Palo Alto Prisma SD-WAN) API support?
To add some context to what we have achieved with other integrations with Cloudgenix in the past: The Topology API contains the necessary information at a site level to show all of the VPN Fabric connections and their status. When posting for a particular Site ID, you obtain a list of several "Types" of topology. For making Topology maps for use in mapping your SD-WAN, you look for the type "vpn". This will give you source and destination nodes to make pretty maps of the underlaying fabric from spokes to hubs, or spokes to spokes. But for connectivity validation, using the status of the type: "internet-stub" you get a better idea of your ISP's validity at each location that goes beyond just Link Up/Down on any particular ION's interface. It is a direct representation of the SWI's ability to connect to the portal itself and is also used by Cloudgenix for use in making pathing decisions. This is what the Topo_App from ebob9 in github is doing to provide this data via synthetic web transactions so that basic monitoring tools like Thousand Eyes or Solarwinds can monitor this data. Having LM do this directly via the portal API is a great advantage to us as it eliminates the middleware portion of our current monitoring.11Views0likes0CommentsRe: NetFLow config for Cisco Nexus NXOS devices?
On 8/23/2022 at 10:14 AM, mnagel said: IME, IOS-XE does not permit Netflow to be sourced from Mgmt-Intf, but perhaps this has been relaxed in later releases. For the Nexus7K, if the netflow-original record lacks even one expected field (which seems hard to believe), it just silently fails. You might find some evidence in wrapper.log as to why but I have not generally had luck with that. You might take a look at alternate vendors that do maintain examples for other ideas -- one is https://support.solarwinds.com/SuccessCenter/s/article/Example-Nexus-7000-Config-flexible-v9-specific?language=en_US Yup, that solved the two Internet Routers, had to move my OOB VRF to an inband port, netflow working fine. As for the Nexus 7004's, I have an F2 Line card that forces flow samples... decided to just bail on trying to get that to work with LM.116Views0likes0Comments