APTARE IT Analytics Data Collector Installation Guide for Fabric Manager

Last Published:
Product(s): APTARE IT Analytics (10.6)
  1. Fabric Manager Data Collection overview
    1.  
      Introduction
    2.  
      Fabric Manager: Collection of SAN switch data
    3.  
      Switch zone alias collection
  2. Pre-Installation setup for Brocade switch
    1.  
      Pre-Installation setup for Brocade switch
    2.  
      Prerequisites for adding Data Collectors (Brocade switch)
    3.  
      Upgrade troubleshooting: Brocade BNA SMI-S (CIM) server and Java 11
    4.  
      Supported switches
    5.  
      Brocade switches: Default ports and firewall considerations
    6.  
      Installation overview (Brocade switch)
    7.  
      Brocade switch Data Collector policy
  3. Pre-Installation setup for Cisco switch
    1.  
      Pre-Installation setup for Cisco switch
    2.  
      Prerequisites for adding Data Collectors (Cisco switch)
    3.  
      Upgrade troubleshooting: Cisco DCNM SMI-S (CIM) server and Java 11
    4.  
      Cisco switches: Default ports and firewall considerations
    5.  
      Installation overview (Cisco switch)
    6.  
      Cisco switch Data Collection policy
    7.  
      Before you start Cisco switch Data Collection
  4. Pre-Installation setup for Brocade Zone alias
    1.  
      Pre-Installation setup for Brocade zone alias
    2.  
      Prerequisites for adding Data Collectors (Brocade zone alias)
    3.  
      Brocade switches: Default ports and firewall considerations
    4.  
      Installation overview (Brocade zone alias)
    5.  
      Brocade zone alias Data Collector policy
  5. Pre-Installation setup Cisco Zone alias
    1.  
      Pre-Installation setup Cisco zone alias
    2.  
      Prerequisites for adding Data Collectors (Cisco zone alias)
    3.  
      Cisco switches: Default ports and firewall considerations
    4.  
      Installation overview (Cisco Zone Alias)
    5.  
      Cisco zone alias Data Collector policy
  6. Installing the Data Collector software
    1.  
      Introduction
    2.  
      Installing the WMI Proxy service (Windows host resources only)
    3.  
      Testing WMI connectivity
    4.  
      Installing Data Collector software: From the internet
    5.  
      Installing Data Collector software: No internet available from the Data Collector server
    6.  
      Installing Data Collector software on Windows portal platform
    7.  
      Installing Data Collector software on Linux portal platform
  7. Validating Data Collection
    1.  
      Validation methods
    2.  
      Data Collectors: Vendor-Specific validation methods
    3.  
      Working with on-demand Data Collection
    4.  
      Using the CLI check install utility
    5.  
      List Data Collector configurations
  8. Uninstalling the Data Collector
    1.  
      Uninstall the Data Collector on Linux
    2.  
      Uninstall the Data Collector on Windows
  9. Manually starting the Data Collector
    1.  
      Introduction
  10. Appendix A. Firewall configuration: Default ports
    1.  
      Firewall configuration: Default ports

Upgrade troubleshooting: Cisco DCNM SMI-S (CIM) server and Java 11

With the introduction of support for Java 11, older versions of Cisco DCNM may encounter compatibility issues. The following section covers potential workarounds. Collection occurs from the SMI-S (CIM) server component of the DCNM the data collector is collecting from. The version of Java used by APTARE IT Analytics disables some insecure TLS algorithms by default. If collection fails with the following error in the collector logs, the version of Cisco DCNM may be incompatible and not allow collection using the TLS algorithms enabled by default with Java 11.

Failed to establish JDBC connection to: jdbc:jtds:sqlserver://...
java.sql.SQLException: Network error IOException: null
at net.sourceforge.jtds.jdbc.JtdsConnection.<init>
(JtdsConnection.java:437)

Upgrade Cisco DCNM to the latest version to enable secure collection. If upgrade is not possible, a workaround can be attempted to restore compatibility. If the following steps do not resolve the issue, your version of Cisco DCNM is not supported.

  1. Edit <collector install dir>/java/conf/security/java.security.

  2. Search for jdk.tls.disabledAlgorithms.

  3. Copy the existing lines and comment (to have a backup for easy restore).

    #jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, 
DH keySize < 1024, \
#    EC keySize < 224, 3DES_EDE_CBC, anon, NULL
jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, 
DH keySize < 1024, \
    EC keySize < 224, 3DES_EDE_CBC, anon, NULL

  4. One at a time, remove an algorithm from the jdk.tls.disabledAlgorithms and test the collection, starting at the last algorithm and working backward. Stop once you reach an algorithm containing 'keySize <'.

    • Remove one algorithm - for example NULL

      jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, 
DH keySize < 1024, \
    EC keySize < 224, 3DES_EDE_CBC, anon

    • Save the file.

    • Run checkinstall and verify collection succeeds.

    • If checkinstall does not succeed, restore jdk.tls.disabledAlgorithms to its original state.

  5. Change to DH keySize<768 - for example.

    jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA,
DH keySize < 768, \
EC keySize < 224, 3DES_EDE_CBC, anon, NULL

    • Save the file.

    • Run checkinstall and verify collection succeeds.

  6. If a working configuration is found, restart the collector service.