H3C SeerEngine Controllers Safety & Configuration Cautions and Guidelines-5W101

HomeSupportResource CenterDiagnose & MaintainH3C SeerEngine Controllers Safety & Configuration Cautions and Guidelines-5W101

H3C SeerEngine Controllers

Safety & Configuration Cautions and Guidelines

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Document version: 5W101-20210408

Copyright © 2021 New H3C Technologies Co., Ltd. All rights reserved.

No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of New H3C Technologies Co., Ltd.

The information in this document is subject to change without notice.



Controller safety & configuration cautions and guidelines

Introduction

Only trained and qualified personnel are allowed to do the configuration tasks described in this guide. This guide contains important information that if not understood or followed can result service anomalies or interruption. Before you perform high-risk tasks, read the information in this document carefully and apply for a cutover time window.

High-risk tasks

IMPORTANT

IMPORTANT:

The operation paths vary by software version.

 

Table 1 High-risk tasks

Controller

Operation path

Task

Risks

SeerEngine-DC

Provision > Inventory > Devices > Physical Devices > Switching Device Data Sync Details > Data Sync

Manually synchronize the configuration between the controller and its incorporated devices.

When you click Data Sync, a dialog box that prompts the risks opens. Data synchronization might add, delete, or edit the configuration on devices. For example, data synchronization might delete the configuration only on a device but not on the controller, which might interrupt some services.

SeerEngine-DC

Provision > Network Design > Fabrics > Settings > Settings > Advanced Settings > Reply by Device/Proxy ARP/ND on Device

Edit the way a device replies to ARP requests from hosts.

Editing the way a device replies to ARP requests affects ARP packet forwarding, which might affect the specific services.

SeerEngine-DC

System > Parameters > ARP > Edit > Host Aging Time

Edit the ARP aging time.

By default, the ARP aging time is 0, which means that ARP entries do not age out. Editing the ARP aging time might bring vPorts offline and delete access configuration for the corresponding subnets on devices, which might affect the specific services.

SeerEngine-DC

Tenants > Common Network Settings > Virtual Distributed Switches > Edit Virtual Distributed Switch > Advanced Settings

Edit the advanced parameters for a VDS.

Editing the advanced settings for a VDS might affect the specific services.

SeerEngine-DC

System > Parameters > Firewalls > Edit > Enable Security Policy

Change the type of firewall policies deployed.

By default, the controller deploys security policies to firewalls. If you change the type of firewall policies deployed to object policy, the firewalls might operate incorrectly. Changing the type of firewall policies deployed to security policy might also cause firewalls to operate incorrectly.

DR2000

Service > General Groups > Auto Import Devices and Interfaces

Identify the roles of devices and deploy configurations to devices by role.

Unexpected configurations might be deployed to devices.

SeerEngine-Campus

Provision > Inventory > Devices > Physical Devices > Switching Device Data Sync Details > Data Sync

Manually synchronize the configuration between the controller and its incorporated devices.

When you click Data Sync, a dialog box that prompts risks opens. Data synchronization might add, delete, or edit the configuration on devices. For example, data synchronization might delete the configuration only on a device but not on the controller, which might interrupt some services.

SeerEngine-Campus

Provision > Inventory > Templates > Underlay Automation Control > Enable/Bulk Enable

On this page, you can enable automation again on devices where automation has stopped.

After automation is enabled for devices, the controller deploys configurations to devices based on the topology changes, which might affect services.

SeerEngine-WAN

Assurance > Configuration Audit > Configuration Audit > Configuration Audit Results > Sync

Manually synchronize the configuration between the controller and its incorporated devices.

When you click Sync, a dialog box that prompts the risks opens. Data synchronization might add, delete, or edit the configuration on devices. For example, data synchronization might delete the configuration only on a device but not on the controller, which might interrupt some services.

SeerEngine-SDWAN

Assurance > Configuration Audit > Configuration Audit > Configuration Audit Results > Sync

Manually synchronize the configuration between the controller and its incorporated devices.

When you click Sync, a dialog box that prompts the risks opens. Data synchronization might add, delete, or edit the configuration on devices. For example, data synchronization might delete the configuration only on a device but not on the controller, which might interrupt some services.

All controllers

System > License > Disconnect

Disconnect the controller from the license server.

After you manually disconnect the controller from the license server, the controller will not enter fail-safe state, which will invalidate licenses and might affect services.

All controllers

CLI in the operating system

All non-query commands executed in the CLI of the operating system except for the commands in the routine inspection guide.

Operating the processes and files related to the controller in the CLI of the operating system might cause the controller to operate incorrectly.

All controllers, SeerAnalyzer

CLI in the operating system

Power off a server

Powering off the server in the CLI of operating system might cause database exceptions. Therefore, before powering off a controller/SeerAnalyzer server, you must follow the powering on/off guidelines in the user guide.