npp user guide r2

7/27/2019 NPP User Guide R2

1/27


2/27


3/27


4/27


5/27

Important Notice

NPP User Guide iii

Important NoticeAllot Communications Ltd. ("Allot") is not a party to the purchase agreement under which NetEnforcer was purchased, andwill not be liable for any damages of any kind whatsoever caused to the end users using this manual, regardless of the form of

action, whether in contract, tort (including negligence), strict liability or otherwise.

SPECIFICATIONS AND INFORMATION CONTAINED IN THIS MANUAL ARE FURNISHED FOR

INFORMATIONAL USE ONLY, AND ARE SUBJECT TO CHANGE AT ANY TIME WITHOUT NOTICE, ANDSHOULD NOT BE CONSTRUED AS A COMMITMENT BY ALLOT OR ANY OF ITS SUBSIDIARIES. ALLOT

ASSUMES NO RESPONSIBILITY OR LIABILITY FOR ANY ERRORS OR INACCURACIES THAT MAY APPEAR IN

THIS MANUAL, INCLUDING THE PRODUCTS AND SOFTWARE DESCRIBED IN IT.

Please read the End User License Agreement and Warranty Certificate provided with this product before using the product.

Please note that using the products indicates that you accept the terms of the End User License Agreement and WarrantyCertificate.

WITHOUT DEROGATING IN ANY WAY FROM THE AFORESAID, ALLOT WILL NOT BE LIABLE FOR ANYSPECIAL, EXEMPLARY, INDIRECT, INCIDENTAL OR CONSEQUENTIAL DAMAGES OF ANY KIND,

REGARDLESS OF THE FORM OF ACTION WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE),

STRICT LIABILITY OR OTHERWISE, INCLUDING, BUT NOT LIMITED TO, LOSS OF REVENUE ORANTICIPATED PROFITS, OR LOST BUSINESS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

CopyrightCopyright 1997-2010 Allot Communications. All rights reserved. No part of th is document may be reproduced,

photocopied, stored on a retrieval system, transmitted, or translated into any other language without a written permission and

specific authorization from Allot Communications Ltd.

TrademarksProducts and corporate names appearing in this manual may or may not be registered trademarks or copyrights of their

respective companies, and are used only for identification or explanation and to the owners' benefit, without intent to infringe.

Allot and the Allot Communications logo are registered trademarks of Allot Communications Ltd.

NOTE: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 ofthe FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment

is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if notinstalled and used in accordance with the instruction manual, may cause harmful interference to radio communications.

Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be

required to correct the interference at his own expense.

Changes or modifications not expressly approved by Allot Communication Ltd. could void the user's authority to operate theequipment.


6/27

Important Notice

NPP User Guideiv

Version History

Doc Version Product Date

v2b1 NPP 26.04.10


7/27


8/27


9/27

NPP User Guide v

Table of Contents

Important Notice .......................................................................................................................... iiiTable of Contents ........................................................................................................................... vTable of Figures ............................................................................................................................. viCHAPTER 1: INTRODUCTION ......................................................................... 1-1NetPolicy Provisioner ................................................................................................................. 1-1Deploying NPP ............................................................................................................................ 1-2Enabling NPP ............................................................................................................................. 1-3CHAPTER 2: NPP AND NETXPLORER ........................................................... 2-1Configuring Accounts in NetXplorer ....................................................................................... 2-1Customizing the Header ............................................................................................................ 2-4CHAPTER 3: NPP AND THE END USER ........................................................ 3-1Logging in to NPP ...................................................................................................................... 3-1

Pipes and Virtual Channels ....................................................................................................... 3-2VCs in NPP ................................................................................................................................. 3-2Adding and Defining Hosts........................................................................................................ 3-4Deleting Hosts and VCs ............................................................................................................. 3-5User Statistics and Graphs ........................................................................................................ 3-6


10/27

NPP User Guidevi

Table of Figures

Figure 1-1: Network Diagram ...................................................................................................... 1-2Figure 1-2: NetXplorer Application Server Registration Dialog ................................................. 1-3 Figure 2-1: NetXplorer Navigation PaneNPP Accounts .......................................................... 2-1Figure 2-2: Account PropertiesNew Account, General tab ...................................................... 2-2Figure 2-3: Account PropertiesNew Account Dialog, Pipes Tab............................................. 2-2Figure 2-4: Account PropertiesNew Account Dialog, Users Tab ............................................ 2-3Figure 2-5: Add User dialog......................................................................................................... 2-3Figure 2-6: Account PropertiesNew Account Dialog, Environment Tab ................................ 2-4Figure 2-7: Account Properties dialog box .................................................................................. 2-5Figure 3-1: NPP Login Screen ..................................................................................................... 3-1Figure 3-2: NPP Account Pipes Page ........................................................................................... 3-2Figure 3-3: NPP Virtual Channels in Pipe Page........................................................................... 3-3Figure 3-4: NPP Insert Virtual Channels Page ............................................................................. 3-3Figure 3-5: NPP Add Hosts Page ................................................................................................. 3-5Figure 3-6: Delete Hosts Page ...................................................................................................... 3-5Figure 3-7: Delete Virtual Channel Dialog .................................................................................. 3-5Figure 3-8: NPP Main Screen ...................................................................................................... 3-6Figure 3-9: NPP VC Statistics Graph ........................................................................................... 3-7


11/27

NPP User Guide 1-1

Chapter 1: Introduction

NetPolicy ProvisionerNetPolicy Provisioner (NPP) enables ISPs to quickly and easily define Accounts thatenable their customers (the end users) to monitor and provision their traffic and their

network's current behavior.

Typically, when ISP customers (the end users) acquire bandwidth from ISPs, thebandwidth allocation is represented in the NetEnforcer/NetXplorer of the ISP as a Pipe

or Virtual Channel. When customers want to monitor the traffic passing through theirPipe or Virtual Channel, NPP enables them to do this.

Using the NPP interface, the service provider defines a view, which allows the

monitoring and management of the traffic on Pipe or Virtual Channel. When definingan end users level of access, the NetXplorer administrator selects the view relevant tothat customer, and then the end user will be given access to this data only.

Using the NPP interface, the user defines a view, which allows monitoring andmanaging the traffic on his Pipe or Virtual Channel. When defining a view, the

NetXplorer administrator selects the Pipe or Virtual Channel per user, and then the end

user will be given access to this data.

End users can access the view (or views) assigned to them by browsing to a uniqueURL. This URL is automatically created by NPP and designates an HTML index filefrom which a customer can access his views. After entering a user name and password,

customers can also view the monitoring graphs of their Pipe or Virtual Channel, and

obtain relevant and current traffic usage data.

Allots NPP provides separate interfaces to manage the following aspects of Networkmanagement:

ISP Administrator functions in the NetXplorer GUI

End user Web interface and features


12/27

NPP User Guide1-2

Figure 1-1: Network Diagram

Wholesale bandwidth providers are interested in providing visibility and control fortheir own end-user/customers. Wholesale customers are interested to provide thefollowing capabilities for their customers:

Monitor and generate reports about their bandwidth usage

Add and manage Virtual Channels inside their Pipe

Such services may be used as a differentiator and be provided free of charge to EndUsers or be charged as extra payment.

Deploying NPP

NPP may be deployed on the same server as NetXplorer or on a dedicated server.

NPP is installed by default along with NetXplorer on the same server, but itsfunctionality will not be enabled without the appropriate License key.

Once installed and activated (by License key), a URL is automatically created by theNPP (http:///npp) and an HTML index file is created from which the end user

can access their views.

After logging in by entering a user name and password, end-users/customers withaccounts properly configured by their ISP can view the monitoring graphs of their Pipeor Virtual Channel, and obtain relevant and current traffic usage data.

NOTE For information concerning installing NPP on a Windows or LinuxServer, see the NetXplorer Installation Guide.


13/27

NPP User Guide 1-3

Enabling NPP

In order to be used, the NPP functionality must be enabled by entering the appropriatekey in NetXplorer. This key may be entered at installation or at any time following. Formore information concerning the NetXplorer Server contact Allot Customer Support at

[email protected].

NOTE For information concerning installing NPP on a Windows or LinuxServer, see the NetXplorer Installation Guide.

To enable NPP:

1. Select Tools > NetXplorer Application Server Registrationfrom the NetXplorer Menu bar.

The NetXplorer Application Server Registration dialog boxappears.

Figure 1-2: NetXplorer Application Server Registration Dialog
mailto:[email protected]:[email protected]:[email protected]


14/27

NPP User Guide1-4

2. Enter the Registration Key and Serial Number which includes NPPfunctionality provided by Allot to enable the NPP.

3. An Expiration Date will be generated automatically after clicking

Save.4. Confirm that NPP is now listed as Enabled. The maximum number

of NPP Accounts is listed in the Server Registration.


15/27

NPP User Guide 2-1

Chapter 2: NPP and NetXplorer

Configuring Accounts in NetXplorerBefore using NPP, Accounts must be configured and individual users must be createdand assigned to these Accounts. These users may then access their Accounts (on the

NPP) using any web browser.

To add an account:

1. In the lower portion of the Navigation pane, clickNPPAccounts.

Figure 2-1: NetXplorer Navigation Pane NPP Accounts

2. In the Navigation pane, right-click the Accounts icon in theNavigation tree and select New Account from the popup menu.

OR

Select the Accounts icon in the Navigation tree and then select New Accountfrom the Actions menu.

OR

Double-click the Accounts icon in the Navigation tree to open the AccountsCatalog. Right-click in the Accounts Catalog and select New Account from the

popup menu.

The Account Properties - New Account dialog is displayed.


16/27

NPP User Guide2-2

Figure 2-2: Account PropertiesNew Account, General tab

3. In the General tab, make sure that the Enabled check box isselected to activate the account. Enter a name, description and

email address for the account.

Figure 2-3: Account PropertiesNew Account Dialog, Pipes Tab

4. In the Pipes tab, select those Pipes that the users in this accountwill be able to have access to, and using the arrow keys move

them from the Available Pipes list, to the Selected Pipes list.

Only regular Pipes may be assigned to an NPP Account. No Pipes that werecreated by a Pipe Template or by a Service Plan may be managed via NPP.

In addition, the following restrictions apply to VCs in Pipes assigned to an NPPAccount:

No Host Catalog entry can be defined in the Internal Host field ofthe VC.

A Host Catalog entry may be defined in the External Host field ofthe VC, but the end user will not be able to see or edit it.

Any VC Templates or VCs with multiple rules in a Pipe will not beable to be edited by the NPP user, therefore it is recommended theynot be used in Pipes assigned to NPP Accounts.


17/27

NPP User Guide 2-3

If a VC Template is assigned to the Pipe despite the fact that it cannotbe edited by the end user, the number of instances should not behigher than the Maximum Allowed Number of Virtual Channels

per Pipe, as defined in the Environment tab.

5. In the Users tab, create users who will have access to the Account.Click Add to open the Add User dialog.

Figure 2-4: Account PropertiesNew Account Dialog, Users Tab

6. Enter all information into the dialog and clickOK. This willassign the new user to the Account. When this user logs into NPPfrom a web browser, this is the Account he will access.

Figure 2-5: Add User dialog


18/27

NPP User Guide2-4

7. In the Environment tab, define the maximum number of VirtualChannels that may be defined in each Pipe in this account.

Figure 2-6: Account PropertiesNew Account Dialog, Environment Tab

8. ClickSave. The account is added to the Navigation tree and may

be accessed by assigned users via NPP.

NOTE The Most Active External Hosts and Most Active Conversations graphsare only available if a Pipe is on a NetEnforcer series AC-400 or AC-800.

Customizing the Header

It is possible to set a custom header that the end user will see when they open their NPPAccount.

NOTE Graphics used for the header should be stored as .jpg or .png files.

To customize the NPP Header

1. Create a new folder under the following path on the NPP server:

NPP installed with NetXplorer (Windows)C:\Allot\netxplorer\jboss-4.0.5\server\allot.

Remote NPP (Windows)C:\Allot\npp\netxplorer\jboss-4.0.5\server\allot.

NPP installed with NetXplorer (Linux)/opt/allot/netxplorer/jboss-4.0.5/server/allot.

Remote NPP (Linux)/opt/allot/npp/netxplorer/jboss-4.0.5/server/allot.


19/27

NPP User Guide 2-5

2. Place the graphic file(s) you wish to use as the NPP logo that theend user sees in the new folder.

3. Open NetXplorer and go to NPP Accounts in the Navigation

Pane.

4. Right clickAccounts and select Properties from the drop downmenu.

5. The Accounts Properties dialog appears.

Figure 2-7: Account Properties dialog box

6. Enter the URL you wish the header to open when clicked(optional).

7. Enter the folder and file name for the graphics you wish to youuse on the left side, center and right side of the header.

8. ClickOKto save the changes.


20/27


21/27

NPP User Guide 3-1

Chapter 3: NPP and the End User

Logging in to NPP

To login to NPP:

1. Log into NPP from any web browser at https:///npp, usingthe IP Address you were given by your ISP.

Figure 3-1: NPP Login Screen

2. Login using your user name and password, which has already been

defined by the ISP in NetXplorer. The Account assigned to you bythe ISP will open automatically.

3. After you successfully log into your Account, the main screen ispresented. The main screen presents the Pipes included in the

Account, and allows you to either work with the VCs in the Pipesor generate monitoring graphs.


22/27

NPP User Guide3-2

Figure 3-2: NPP Account Pipes PageAn NPP Account user can configure and select the following items in the Accounts Pipewindow:

Virtual Channels

Report time parameters

Graph report types

Pipes and Virtual Channels

A Pipe provides a way of classifying traffic that enables you to divide the total

bandwidth used by your account and then manage every Pipe as if it were anindependent link. A Pipe can aggregate several Virtual Channels (VCs), acting like a

container of Virtual Channels. When a new Pipe is assigned to your Account by yourISP, it always includes at least one Virtual Channel, the FallbackVirtual Channel.

Individual Virtual Channels may be created in any Pipe assigned to the Account viaNPP and typically are assigned to a specific Service (protocol or application), time ofday, or Quality of Service.

VCs in NPP

Pipes are added to an Account by the ISP. Once your Account has been configured toaccess a certain Pipe, you can then create, delete and manage Virtual Channels in that

Pipe.


23/27

NPP User Guide 3-3

To create and configure a New VC:

1. After logging into NPP, click on the Virtual Channels linkalongside the appropriate Account Pipe name. The Virtual

Channels in Pipe screen is displayed.

Figure 3-3: NPP Virtual Channels in Pipe Page

2. ClickInsert, and the Insert Virtual Channel screen will appear.

Figure 3-4: NPP Insert Virtual Channels Page

3. Type in the Name of the new VC.

4. Add and apply (or Delete) Hosts to (from) the VC account. Hostsare other computers or servers, and may be machines on yournetwork or websites.

5. Select a Service (From the list predefined by the ISP) whosetraffic will be directed to this VC. A Service may be an

application, such as Facebook, or an internet protocol, such asHTTP.

6. Select a Time (From the list predefined by the ISP) when trafficwill be directed to this VC.

7. Choose an Access option (From the list predefined by the ISP).This typically determines if traffic that goes to this VC isaccepted, dropped or rejected.


24/27

NPP User Guide3-4

8. Select a Quality of Service (which has been named andconfigured by the ISP in advance) that will be applied to traffic in

this VC. QoS typically defines the priority or bandwidth allowedto the VC.

You can contact your ISP and have them name and configure aQoS catalog entry so that it appears in the Insert VC page.

NOTE The list of QoS entries includes all QoS entries that have beenconfigured on the system forall users, not only those you haverequested.

9. After you have chosen all your VC parameters, clickSave toupdate the NPP Account configuration with the new VC.

You may edit or delete a VC in the Account Pipe, or insert and define additional VCsusing the appropriate Edit and Delete links in the Virtual Channels in Pipe page.

Adding and Defining HostsYou may define hosts to be assigned to the VCs that you create.

NOTE Ensure that IP addresses, address ranges and/or subnets have beenconfigured and registered by the ISP before you start defining hosts.

Although you Add or Delete hosts in the Insert Virtual Channel page accessed from theVirtual Channels in Pipe page before preparing a report, you should add and define thehost(s) you wish to choose from the Host drop-down list in the Insert Virtual Channel

page

To add and configure a new host:

1. After logging into NPP, click on the Virtual Channel linkalongside the appropriate Account Pipe name. The VirtualChannels in Pipe is displayed.

2. To add and define host(s) or their respective IP address (range orsubnet), click on the Add Host link in the Insert/Edit Virtual

Channels page. The Add Hosts screen is displayed.

3. Choose the required radio button option and type in the appropriatename or IPs.

4. ClickApply to update the Host to the VC.


25/27

NPP User Guide 3-5

Figure 3-5: NPP Add Hosts Page

5. ClickClose to update the Host drop-down list available in theInsert Virtual Channels page and close the page.

Deleting Hosts and VCsYou can delete hosts from the Virtual Channels page

To delete a host:

6. Click on the Delete Host link in the Virtual Channels page. TheDelete Hosts page is displayed.

7. Select the Host you wish to delete and clickDelete. The hostdetails will be deleted from the list.

Figure 3-6: Delete Hosts Page

VCs may be deleted from a Pipe on the Virtual Channels in Pipe page.

To delete a VC:

1. Select the VC to be deleted in the Virtual Channels in Pipe pageand click the Delete link. A confirmation dialog is displayed.

Figure 3-7: Delete Virtual Channel Dialog


26/27

NPP User Guide3-6

2. ClickOKand the VC details will be deleted from the page.

User Statistics and Graphs

You may generate Graphs on any of the Pipes in your Account by selecting the graphname from the drop down Graphs menu in the Account Pipes page, and on VCs fromthe drop down Graphs menu in the Virtual Channels page.

To see Graphs on your entire Account, select the graph name from the drop downGraphs menu next to All Pipes.

Figure 3-8: NPP Main Screen

The following graphs are available:

Statistics - displays the bandwidth consumed by the Pipe or Virtual

Channel. Virtual Channel Distribution (available on the Pipe level only)

indicates how the traffic on the Pipe is split between the VirtualChannels.

Most Active Virtual Channelsdisplays those Virtual Channelsthat are handling the most traffic.

Most Active Protocols - displays those services, applications orprotocols which you are using the most.

Most Active Hosts - displays those hosts which are using the mosttraffic.

Most Active Internal Hostsdisplays those hosts on your ownnetwork which are using the most traffic.

Most Active External Hosts - displays those hosts outside of yournetwork which are using the most traffic (Not available to allAccounts. Contact your ISP for more information).


27/27

NPP User Guide 3-7

Most Active Conversations - displays the individual connectionsthat are using the most bandwidth (Not available to all Accounts.

Contact your ISP for more information).

In Packet Statistics- displays the bandwidth consumed byincoming packets.

Out Packet Statistics - displays the bandwidth consumed byoutgoing packets.

You may select the time range for the graph by clicking the appropriate link in theGraphs field (Mn, Hr, Dy, Wk, Mo or 6 Mo).

Figure 3-9: NPP VC Statistics Graph

npp user guide r2

Documents