Huawei eSight Full Product Datasheet

Product Overview
Huawei eSight is a next-generation comprehensive and integrated IP+IT network operation and maintenance (O&M) system developed to manage enterprise resources, services, and users in compliance with Information Technology Infrastructure Library (ITIL) standards.

Ziyi

James ShangHai Juile

Elle Rom New York ShangHai

Ann

Amy ShangHai Jon

Product Characteristics
Any Customer Multi-edition for any customer Any Vendor Open platform for any vendor

User
New York Video conference Joe So

ShenZhen

ShenZhen

Internet Mail ShenZhen Machine Room

AR

Mail Server Server

Service Resource

ShangHai Machine Room

New York Machine Room

Customer

Vendor

Policy

eSight
Service

Device

Any Policy Intelligent center for any policy

Any Device Flexible mechanism for any device

Any Service Simplied visualization of any service

Huawei eSight Full Product Datasheet 01

Any vendor Preset multi-vendor IP device management capabilities: eSight can manage not only Huawei devices but also other vendor equipment, including Cisco and HP devices. Open platform: Customers and administrators can customize information about their managed devices.

Any device eSight delivers unied management of routers, switches, WLAN, rewall, and other network devices. eSight can monitor IT devices including servers, printers, and workstations. eSight can monitor any device that supports the SNMP protocol.

Any service eSight MPLS, IPSec, WLAN RF, and other views allow visible management of network services, simplifying O&M needs. eSight SLA Manager ensures that users of enterprise IT applications enjoy good experiences by combining network quality metrics to display the network quality in real time. eSight Network Trafc Analyzer visualizes network trafc to help realize ne-grained management of enterprise bandwidth. eSight integrates the management of wired and wireless networks. eSight provides end-to-end monitoring and fault diagnosis for VPN services. eSight displays the topology of virtual resources and physical devices on the entire network, detects virtual machine (VM) changes, and adjusts the physical network policies of VMs accordingly.

Any policy eSight safeguards enterprise network security by supporting batch policy control on network layer devices and providing terminal access and user access authentication.

Any customer eSight satises a range of customer demands and reduces O&M costs with multiple editions and modular components. The hierarchical network management model is suitable for O&M in enterprises with a headquarters-plus-branches structure.

02 Huawei eSight Full Product Datasheet

Product Components
eSight provides a unied O&M platform as well as specic components to meet the demands of enterprise customers. Component eSight Unied Network Management Platform eSight Smart Reporter Description Provides various editions (compact, standard, and professional) for enterprises. In addition to uniform management of devices from various vendors, topology management, fault management, performance management, smart conguration tool, and conguration le management, eSight Unied Network Management Platform allows users to customize management of third-party devices, helping users to establish a network management system catering for their own needs. Provides preset report templates to meet requirements in most maintenance scenarios. Provides the professional report design tool for users to customize statistics reports. Integrates with devices' network quality analysis (NQA) function to diagnose and measure the link performance between network devices 24/7 hours and displays quality of service (QoS) statistics. Administrators can set the QoS threshold. eSight noties administrators remotely when QoS reaches the threshold. Administrators can use the quick diagnosis function to monitor link performance in real time and diagnose faults, which improves maintenance efciency. Integrates the management of wired and wireless networks, and enables service deployment in batches, service adjustment, troubleshooting, and routine maintenance. Collects trafc of routers and Layer 3 switches, analyzes network trafc based on the NetFlow, NetStream, and sFlow protocols, and allows users to customize reports. This helps network administrators to monitor the trafc and bandwidth usage and detect network bottlenecks in a timely manner, providing evidence for network planning and fault diagnosis. Works with the MPLS function of routers and switches to provide visible end-to-end MPLS management of services and diagnosis of faults. Automatically discovers the MPLS TE tunnels (RSVP-TE signaling-based dynamic tunnels and CR-Static signaling-based static tunnels) and LDP tunnels that have been deployed on the network, monitors the tunnels in real time, displays tunnel running status dynamically, and monitors active-standby switchovers and bypasses. Monitors network QoS in real time. Provides multi-dimensional data analysis and displays QoS information in graphs and dashboards, simplifying network management. Integrates with the smart conguration tool, performance monitoring, Network Trafc Analyzer, and SLA Manager on eSight Unied Network Management Platform, providing all-round functions of QoS conguration, monitoring, and optimization. Monitors network resources (including physical servers, VMs, vSwitches, and TOR switches), displays the topology of virtual resources and physical devices, and dynamically adjusts physical network proles based on VM changes. Offers a terminal access control solution based on the linkage of network devices (switches, AR routers, WLAN devices, and rewalls) at access and aggregation layers, and allows the access of enterprise employees, partners, and guests by employing diverse authentication modes, including Portal, 802.1x, and MAC.

eSight SLA Manager

eSight WLAN Manager

eSight Network Trafc Analyzer

eSight MPLS VPN Manager eSight MPLS Tunnel Manager

eSight QoS Manager

eSight DC nCenter

eSight Policy Center

Huawei eSight Full Product Datasheet 03

eSight Unied Network Management Platform

Product Overview
As the network scales and the number of enterprise network applications continue to grow, so does the number of devices, such as multiservice routers, gateways, and WLAN Access Points (APs), which enable communication and collaboration in decentralized networks like enterprise campus networks and branch ofce networks. An increasing number of core and access devices from multiple vendors are used in the enterprise, each with its own management system, creating a nightmare for the system and network administrators. To alleviate the operational burden, Huawei has developed a unied network management system to provide a comprehensive view and management of all network and system resources, to ensure network stability, and improve O&M efciency: eSight. Huawei eSight Unied Network Management Platform provides various editions (compact, standard, and professional) for enterprises. In addition to uniform management of devices from various vendors, topology management, fault management, performance management, smart conguration tool, and conguration le management, eSight Unied Network Management Platform allows users to customize management of third-party devices, helping users to establish a network management system catering for their own needs.

Characteristics
Huawei eSight Unied Network Management Platform provides various editions (compact, standard, and professional) for enterprises. Edition Functions Provides Alarms, Performance, Topology, Conguration les, Network Elements (NEs), Links, Logs, Physical Resources , Electronic Labels, IP topology, Smart Conguration Tool, Security management, Terminal Access management. Provides System Monitor Tool, Database Backup&restore Tool, Fault information collection tool. Provides all functions of the compact edition. Provides WLAN management, NTA network trafc analysis,Policy Center,SLA management, QoS management, MPLS VPN management, MPLS tunnel management,, IPSec VPN management, Report management, SNMP northbound interface. Supports all functions of the standard edition, hierarchical NMS management, and the DC nCenter. Support Dual System (Only Support By Linux OS).

Compact edition

Standard edition

Professional edition

eSight is a lightweight system that allows users to access the network anywhere anytime to check the operating status. eSight employs the browser/server (B/S) architecture that does not require any client software. The interactive web 2.0 interface offers a superior user experience. The platform can run on a portable computer. The minimum hardware requirement is dual-core 2 GHz CPU, 4 GB memory, and 40 GB hard disk. eSight can manage devices from different vendors as well as multiple resources to provide unified management across the whole network. Comprehensive device management: In addition to Huawei routers, switches, ARs, security devices, WLAN devices, and rewalls. eSight can manage devices from major vendors such as HP and Cisco. It can also manage IT resources such as servers and printers.

04 Huawei eSight Full Product Datasheet

Third-party device customization: eSight allows customers to dene vendor names, device types, panel style, performance presentation, and alarms for non-Huawei devices. NE adaptation package: Flexible NE packages can realize rapid device adaptation, increasing the types and functions of managed devices.

Comprehensive fault monitoring system enables real-time fault diagnosis, and provides instructions for quick troubleshooting. eSight provides alarms for all types of faults, including IP, IT, and service faults. eSight provides 24/7 fault monitoring, real-time notication, and remote fault notication. The system can quickly switch between fault or topology views and device panels. eSight categorizes and shields alarms to reduce the number of alarms displayed.

Visual management provides clear and detailed network information Topology management: eSight provides physical typology and IP topology, and displays layered network devices on the graphical interface. It also displays sub network maps, network elements, links, and network element status. Performance management: eSight provides various performance counters that customers can use to monitor system performance. The performance view is updated automatically. Reports and charts display performance counters and historical data. Simple and convenient operation makes it easy for operators to use the system and improves efciency. Portal customization helps users get the information they need. Intelligent conguration: eSight is precongured with multiple common service conguration templates. Users can select the appropriate template to perform the same congurations on devices in batches or use a le to perform different congurations on groups of devices in batches. Conguration le management: Conguration les for multiple devices can be backed up, compared, and restored. The backup function includes immediate backup, periodic backup, and backup triggered

Huawei eSight Full Product Datasheet 05

by device conguration changes. Intelligent report: eSight provides predened reports and an easy-to-use report design function so that users can customize reports to meet their own needs. Hierarchical network management: Users at headquarters can view alarm, topology, and performance information from lower-level network management systems. Disaster recovery (DR) protection ensures service continuity and system reliability. eSight supports two-node clusters in hot standby mode. eSight supports Linux operating systems.

Running Environment
Conguration requirements for eSight Unied Network Management Platform (compact edition) are as follows. Managed Nodes Hardware CPU: dual core 2 GHz or above Memory: 4 GB Hard disk: 40 GB Operating System Database

0-20

WIN 7 32 Bits

MySql 5.5

Configuration requirements for eSight Unified Network Management Platform (standard edition) are as follows. Managed Nodes Hardware CPU: 1 x dual-core 2 GHz or above Memory: 4 GB Disk space: 40 GB NOTE: You are advised to use PC servers. CPU: 2 x dual-core 2 GHz or above Memory: 4 GB Disk space: 60 GB NOTE: You are advised to use PC servers. CPU: 2 x quad-core 2 GHz or above Memory: 8 GB Disk space: 120 GB NOTE: You are advised to use PC servers. CPU: 2 x quad-core 2 GHz or above Memory: 16 GB Disk space: 250 GB NOTE: You are advised to use PC servers. Operating System Database

0-200

200-500

500-2000

Windows Server 2008 R2 standard (64-bit) + MySQL 5.5 Or Windows Server 2008 R2 standard (64-bit) + Microsoft SQL Server 2008 R2 standard Or Novell SUSE Linux Enterprise ServerMulti-language-Enterprise-11.0 SP1 + Oracle Database Standard Edition 11g R2

2000-5000

06 Huawei eSight Full Product Datasheet

Conguration requirements for eSight Unied Network Management Platform (professional edition) are as follows. Managed Nodes Hardware CPU: 1 x dual-core 2 GHz or above Memory: 4 GB Disk space: 40 GB NOTE: You are advised to use PC servers. CPU: 2 x dual-core 2 GHz or above Memory: 4 GB Disk space: 60 GB NOTE: You are advised to use PC servers. CPU: 2 x quad-core 2 GHz or above Memory: 8 GB Disk space: 120 GB NOTE: You are advised to use PC servers. CPU: 2 x quad-core 2 GHz or above Memory: 16 GB Disk space: 250 GB NOTE:You are advised to use PC servers. CPU: 4 x quad-core 2 GHz or above Memory: 32 GB Disk space: 320 GB NOTE: You are advised to use PC servers. Operating System Database

0-200

200-500

500-2000

Windows Server 2008 R2 standard (64-bit) + MySQL 5.5 Or Windows Server 2008 R2 standard (64-bit) + Microsoft SQL Server 2008 R2 standard Or Novell SUSE Linux Enterprise ServerMulti-language-Enterprise-11.0 SP1 + Oracle Database Standard Edition 11g R2

2000-5000

5000-20000

Novell SUSE Linux Enterprise ServerMulti-languageEnterprise-11.0 SP1

Oracle Database Standard Edition 11g R2

eSight standard and professional editions can run on VMs. Requirements for VMs are as follows. Managed Nodes Resources Required by a VM VMWare ESXI 5.0 CPU: 1 x quad-core 2 GHz or above Memory: 6 GB Disk space: 300 GB VMWare ESXI 5.0 CPU: 2 x quad-core 2 GHz or above Memory: 12 GB Disk space: 600 GB Operating System Database

0-500

Windows Server 2008 R2 standard (64-bit) + Microsoft SQL Server 2008 R2 standard

500-2000

Huawei eSight Full Product Datasheet 07

Deployment Scenarios
There is no special requirement on the eSight network as long as managed devices can connect to the eSight server and the devices support the Simple Network Management Protocol (SNMP). eSight compact edition applies to small- and medium-sized enterprises. eSight Compact Edition

eSight standard edition applies to medium- and large-sized enterprises. eSight Standard Edition Branch VPN HQ VPN

Branch

eSight professional edition applies to ultra large enterprises. eSight professional edition is deployed at the headquarters and eSight standard/professional edition is deployed at branches. Administrators at the headquarters can check the network status of each branch. eSight Standard / Professional Edition Branch VPN VPN HQ

eSight Professional Edition

Branch eSight Standard / Professional Edition

08 Huawei eSight Full Product Datasheet

Ordering Information
eSight compact edition
Item eSight AppBase-Compact(include 60 devices License) Quantity 1 Remarks Mandatory, eSight Unied Network Management Platform.

eSight standard edition

Item eSight AppBase-Standard(include 60 devices License) eSight Standard NMS License-Incremental 25 Devices License eSight Standard NMS License-Incremental 50 Devices License eSight Standard NMS License-Incremental 100 Devices License eSight Standard NMS License-Incremental 200 Devices License eSight Standard NMS License-Incremental 300 Devices License eSight Standard NMS License-Incremental 500 Devices License eSight Standard NMS License-Incremental 1000 Devices License eSight Standard NMS License-Incremental 2000 Devices License eSight Standard NMS License-Incremental 5000 Devices License Quantity 1 Optional Optional Optional Optional Optional Optional Optional Optional Optional Remarks Mandatory, eSight Unied Network Management Platform. One such item indicates the management of 25 more devices. One such item indicates the management of 50 more devices. One such item indicates the management of 100 more devices. One such item indicates the management of 200 more devices. One such item indicates the management of 300 more devices. One such item indicates the management of 500 more devices. One such item indicates the management of 1000 more devices. One such item indicates the management of 2000 more devices. One such item indicates the management of 5000 more devices.

eSight professional edition

Item eSight AppBase-Professional(include 60 devices License) eSight Professional NMS License-Incremental 50 Devices License eSight Professional NMS License-Incremental 100 Devices License eSight Professional NMS License-Incremental 200 Devices License eSight Professional NMS License-Incremental 300 Devices License eSight Professional NMS License-Incremental 500 Devices License eSight Professional NMS License-Incremental 1000 Devices License eSight Professional NMS License-Incremental 2000 Devices License eSight Professional NMS License-Incremental 5000 Devices License Quantity 1 Optional Optional Optional Optional Optional Optional Optional Optional Remarks Mandatory, eSight Unied Network Management Platform. One such item indicates the management of 50 more devices. One such item indicates the management of 100 more devices. One such item indicates the management of 200 more devices. One such item indicates the management of 300 more devices. One such item indicates the management of 500 more devices. One such item indicates the management of 1000 more devices. One such item indicates the management of 2000 more devices. One such item indicates the management of 5000 more devices.

Huawei eSight Full Product Datasheet 09

eSight Smart Reporter

Product Overview
With rapid network development and continual integration of network applications and service management, information increases exponentially. It is impossible for administrators to obtain valuable information from the bulk information. Therefore, enterprises are in an urgent need of an information management system that can collect, arrange, analyze, and display data to help improve operating efciency. The information display mode directly affects users' understanding and provides the basis for decision making. eSight provides a powerful report analysis and design tool (eSight Smart Reporter). Huawei eSight Smart Reporter provides preset report templates to meet requirements in most maintenance scenarios and provides the professional report design tool for users to customize statistics reports.

Characteristics
eSight Smart Reporter provides preset report templates to meet requirements in most maintenance scenarios. eSight provides over 40 preset report templates for various statistics elds, such as performance, alarm, resources, WLAN, SLA, and QoS, to help users design reports and obtain statistics with ease.

The powerful quick report function provides direct resource statistics. The quick report function collects statistics on the CPU, memory, interface trafc, AP associated resources, AP trafc, AP radio, and terminal trafc. When a user selects the statistics dimension and device resources, eSight generates a report immediately. The user then can save the report to the local host and view the report.

10 Huawei eSight Full Product Datasheet

Statistics in multiple dimensions allow users to understand data from various angles. eSight Smart Reporter provides statistics in different dimensions, including top N statistics, statistics at different levels (NE level, subnet level, and region level), interface information (interface connection and disconnection, interface trafc, and interface performance), device resource usage (CPU and memory), and wireless resource usage (access users, AP trafc, AP rate, AP access failure, air interface usage, and AP radio). Reports in multiple modes present statistics directly and intuitively. eSight Smart Reporter supports not only tables but also graphs such as line charts, column charts, and pie charts, presenting users with concise and direct statistics.

Reports in multiple le formats apply to various scenarios. eSight allows users to export report statistics into Excel, Word, or PDF les.

Huawei eSight Full Product Datasheet 11

Flexible report settings meet various statistics requirements. eSight supports both manual reports and periodic reports. Users can specify the time to execute periodic report tasks. Users can set the statistics time range. eSight can collect statistics on multiple NEs simultaneously. eSight can automatically send reports to users by email.

Users can specify the peak hours for eSight to collect information during such periods.

12 Huawei eSight Full Product Datasheet

Running Environment
eSight Smart Reporter is installed on the same server as eSight Unied Network Management Platform standard or professional edition. Therefore, the conguration requirements for their running environment are the same.

Deployment Scenarios
The deployment scenarios for eSight Smart Reporter are the same as those for eSight Unied Network Management Platform.

Ordering Information

Item eSight AppBase-Standard(include 60 devices License) or eSight AppBase-Professional(include 60 devices License) eSight Smart Reporter eSight Smart Reporter-Special Services-customize template development(per template)

Quantity

Remarks Mandatory, eSight Unied Network Management Platform. Mandatory, eSight Smart Reporter. Indicates the number of customized templates.

Optional

Huawei eSight Full Product Datasheet 13

eSight SLA Manager

Product Overview
The increasing number of services carried by the IP network makes it difcult to ensure user experience. Administrators must detect potential faults in advance and use efcient fault diagnosis methods to quickly troubleshoot and recover services. Huawei eSight SLA Manager integrates with devices' NQA function to diagnose and measure the link performance between network devices 24/7 hours and display QoS in statistics. Administrators can set the QoS threshold. eSight noties administrators remotely when QoS reaches the threshold. Administrators can also use the quick diagnosis function to monitor link performance in real time and diagnose faults, which improves maintenance efciency.

Characteristics
Service-oriented SLA and easy operation simplify O&M needs. Users can create an SLA service to carry out end-to-end network QoS monitoring and to evaluate network and service QoS based on SLA compliance. eSight has more than 20 SLA service presets, including video, audio, and network applications, allowing customers to dene SLA services to meet their particular needs.

14 Huawei eSight Full Product Datasheet

eSight SLA Manager Displays network QoS in statistics and generates alarms in advance to ensure user experience. After a user creates an SLA task, the task will be executed periodically. QoS is indicated by Daily Compliance. When QoS meets the threshold conditions, eSight noties administrators remotely. Administrators then diagnose faults in advance to ensure user experience.

eSight SLA Manager provides the quick diagnosis function to narrow the fault scope and shorten the fault diagnosis time. eSight provides the quick diagnosis function for users to locate faults by link segments, narrowing the fault scope.

Huawei eSight Full Product Datasheet 15

Visible historical network data provides a basis for network optimization. In actual applications, different QoS values indicate services of different priorities. Different services on a same link can be compared. The comparison result shows whether QoS on a network has taken effect and provides a basis for QoS policy adjustment.

16 Huawei eSight Full Product Datasheet

Running Environment
eSight SLA Manager is installed on the same server as eSight Unied Network Management Platform standard or professional edition. Therefore, the conguration requirements for their running environment are the same.

Deployment Scenarios
The deployment scenarios for eSight SLA Manager are the same as those for eSight Unied Network Management Platform. Source devices must be added to eSight. The IP addresses of the source and destination devices can be pinged.

Ordering Information

Item eSight AppBase-Standard(include 60 devices License) or eSight AppBase-Professional(include 60 devices License) eSight SLA Manager

Quantity

Remarks Mandatory, eSight Unied Network Management Platform Mandatory, eSight SLA Manager

Huawei eSight Full Product Datasheet 17

WLAN Manager
Product Overview
With network development, Wireless Fidelity (Wi-Fi), a low-cost and highly efcient network deployment and maintenance mode, has been widely recognized by customers. However, Wi-Fi's high requirements on environment and disperse deployment of a large number of ACs and APs on WLAN networks have made the maintenance costly and difcult. Therefore, an easy-to-use and efcient WLAN management system is the key to ensure enterprises' end-to-end (E2E) operations. Huawei eSight WLAN Manager integrates the management of wired and wireless networks, and enables service deployment in batches, service adjustment, troubleshooting, and routine maintenance.

Characteristics
eSight WLAN Manager integrates the management of wired and wireless networks.

In eSight physical topology, users can monitor switches, routers, security devices, IT devices, H3C devices, and Cisco devices in a unied manner. By centralized management of wired and wireless devices, such as ACs, power over Ethernet (PoE) switches, and t APs, users can directly view device connections, status, and alarms on the entire network.

18 Huawei eSight Full Product Datasheet

Deploying services on wireless devices in batches improves the management efciency. Users can use the wizard to deploy services, which greatly accelerates service deployment. Users can manage Huawei ACs to congure WLAN services. AP congurations are stored on the AC. After tunnels are set up between the AC and APs, the APs obtain the congurations from the AC.

Various topology views help users to understand the wireless network status in different dimensions. Service topology: The service topology shows the connections between the AC, APs, and STAs and marks rouge APs. Users can view the detailed information about the AC, APs, STAs, and rouge APs and diagnose wireless service faults (such as by the ping operation).

C7-01-01-01-01-02 B7-01-01-01-01-05

C7-01-01-01-01-03

B7-01-01-01-01-01 zyin-4 Ping Tracert

WLAN_yzb_ACU_1 B7-01-01-01-01-02 zyin-1 zyin-3

zyin-2

B7-01-01-01-01-04

Huawei eSight Full Product Datasheet 19

Location topology: The location topology shows the hotspots and radio signal coverage scope and marks rogue APs and collision domains. The color indicates the frequency band, and the color depth indicates signal strength. The red area indicates collision domains. In the location topology, users can set blocks to test the impact of different blocks on signal attenuation.

Wireless Intrusion Detection System (WIDS) provides the detailed interference source list and the inuences of these interference sources on normal APs.

Provides quick service adjustment to cover hotspots and calibrate radio. If a coverage hole exists on the network, users can use eSight WLAN manager to quickly deploy services on new APs to cover hotspots.

20 Huawei eSight Full Product Datasheet

When a carrier's APs or private APs occupy the planned channel and interfere with APs on the live network, users can use eSight WLAN Manager to quickly change the channel if negotiation is unavailable.

Quick AP fault diagnosis

eSight can restart, replace, and restore APs to factory settings in batches. During WLAN network debugging or when APs are faulty, users can remotely restore APs to factory settings in batches using eSight. During WLAN network debugging or when APs are upgraded, users can remotely restart APs in batches using eSight. If an AP is faulty, users can quickly replace the AP in eSight. The replacement does not affect AP congurations. Resource statistics, meeting O&M requirements Entire-network resource statistics: line chart for online users, showing the top 5 accessed t APs and SSIDs, top 5 device alarms, and physical resource statistics on the entire network. AC statistics: line chart for online users by AC, showing AP information, domain information, and top 5 AC alarms AP statistics: top 5 AP alarms and AP performance counters including the number of terminals connected to APs, AP physical attributes, AP trafc, and radio trafc SSID statistics: number of APs, number of VAPs, and number of terminals connected to APs Region and location statistics: total number of APs, number of online APs, and number of online STAs by region and location.

Huawei eSight Full Product Datasheet 21

Running Environment
eSight WLAN Manager is installed on the same server as eSight Unied Network Management Platform standard or professional edition. Therefore, the conguration requirements for their running environment are the same.

Deployment Scenarios
eSight

AR WAN

S77/S97

22 Huawei eSight Full Product Datasheet

Ordering Information
Item eSight AppBase-Standard(include 60 devices License) or eSight AppBase-Professional(include 60 devices License) eSight WLAN Manager Quantity Remarks Mandatory, eSight Unied Network Management Platform Mandatory, eSight WLAN Manager One such item indicates the management of 50 more APs. One such item indicates the management of 100 more APs. One such item indicates the management of 200 more APs. One such item indicates the management of 500 more APs. One such item indicates the management of 1000 more APs. One such item indicates the management of 2000 more APs. One such item indicates the management of 5000 more APs.

eSight WLAN License-Incremental 50 APs License

Optional

eSight WLAN License-Incremental 100 APs License

Optional

eSight WLAN License-Incremental 200 APs License

Optional

eSight WLAN License-Incremental 500 APs License

Optional

eSight WLAN License-Incremental 1000 APs License

Optional

eSight WLAN License-Incremental 2000 APs License

Optional

eSight WLAN License-Incremental 5000 APs License

Optional

Huawei eSight Full Product Datasheet 23

eSight Network Trafc Analyzer

Product Overview
Fast, stable access speeds improve working efciency, while low access speeds often affect ofce work. How can customers determine which applications consume a lot of bandwidth and generate heavy trafc and which employees use these applications? Is it necessary to change the network QoS policy or to expand the network? Network Trafc Analyzer supports NetFlow, NetStream, and sFlow. NTA collects trafc information output by routers and Layer 3 switches, and it provides user-dened reports that network administrators can analyze to learn about trafc and bandwidth usage and nd network bottlenecks. NTA also provides information that network administrators can use for network planning and troubleshooting.

Characteristics
Support for mainstream network trafc protocols including NetStream, NetFlow, and sFlow. Customized Dashboard

You can customize the dashboard to do the following: Rank interface trafc, interface usage, application trafc, protocol trafc, source host trafc, destination host trafc, conversation trafc, and DSCP trafc. Display the form, content, and content arrangement, according to your preferences. NTA displays trafc information in wedges on the window. You can refresh a wedge without changing the whole window. Summarize interface trafc information, including the input rate, output rate, input packet quantity, and output packet quantity. Click a specic interface to learn about the trafc composition of the interface from multiple dimensions such as application, host, conversation, and DSCP within a certain period. Customizing Trafc Applications and Group Network Trafc You can customize trafc applications and group network trafc, as follows: User-dened applications

24 Huawei eSight Full Product Datasheet

User-dened DSCP group User-dened application group User-dened IP group or interface group

User-dened Applications NTA identies applications based on protocol and port number. NTA presets more than 4500 standard and common Layer 4 applications. For unknown applications, NTA automatically adds the applications based on protocol and port number. Generally, you do not have to add any applications. Network administrators can add applications as needed. You can add applications by choosing the protocol, port range and IP address range. For example, the TCP protocol and port 443 indicate HTTPS applications. If the email system of an enterprise uses port 443, network administrators can create a mail application based on the IP address range of the email system. When receiving TCP/443 packets, the system resolves the data in the IP range to the mail application, and resolves other packets to HTTPS applications. User-dened DSCP Group DSCP group is a logical group. You can create a group to differentiate DSCP composition. For example, in WAN QoS monitoring, you can create a voice group (EF), a video group (AF31), and a group of the other DSCP. Therefore, NTA can provide reference for proper QoS bandwidth planning and key services bandwidth of the enterprise. User-dened Application Group You can create application groups as needed to obtain comprehensive information of specic applications. For example, you can create an application group named Mail Service, and combine Lotus Notes, pop3, and SMTP applications into the group to learn about the trafc of mail applications. User-dened IP Group or Interface Group Consider the IP addresses/interfaces in a certain range as a whole to calculate trafc statistics. For example, an enterprise has two oors. When calculating the total trafc of the enterprise, combine all the switch interfaces on the two oors into an interface group, and analyze the total trafc. Monitor Multi-dimensional Trafc Overall network trafc analysis depends on high performance trafc analysis. Network administrators only need to add a monitoring interface and congure the trafc sampling ratio. Then they can monitor and analyze trafc of the interface from multiple dimensions, including the following: Interface trafc analysis Application trafc analysis Source/destination host trafc analysis DSCP trafc analysis Conversation trafc analysis

Note: You can analyze trafc on the trafc trend diagram, which supports double-axis display: trafc/packets.

Huawei eSight Full Product Datasheet 25

Interface Trafc Analysis

Interface trafc analysis checks the trend of trafc for a specied interface, time range, and incoming/ outgoing trafc. Through interface trafc analysis, network administrators can identify the interfaces that are used most often on the network, and this gives them a comprehensive understanding of the whole network status. Administrators can nd interfaces with abnormal trafc in time and locate faults before network performance is reduced. Application Trafc Analysis

Application trafc analysis checks the trend of application changes for a specied interface, time range, and incoming/outgoing trafc. Administrators can locate the host that causes performance problems based on the ranking of source and destination hosts using a specic application. Source/Destination Host Trafc Analysis Source/destination host trafc analysis checks the trend in changes of source/destination host bandwidth usage for a specied interface, time range, and incoming/outgoing trafc. Through source/destination host analysis, network administrators can identify the host that consumes a high bandwidth. Then they can solve any bandwidth problems in time to ensure bandwidth usage efciency. Conversation Trafc Analysis Conversation trafc analysis checks the trend of conversation trafc for a specied interface and time range. It provides detailed conversation information that the network administrator can use for further fault location.

26 Huawei eSight Full Product Datasheet

DSCP Trafc Analysis DSCP trafc analysis checks the trend of DSCP trafc for a specied interface and time range. Therefore, you can plan QoS bandwidth properly to ensure the quality of key services. Group Trafc Analysis Group trafc analysis displays the trafc statistics of DSCP group, interface group, application group, and IP group on specied interfaces within specic time range. It is convenient for network administrators to analyze specic trafc as needed to satisfy special maintenance needs. Customized Trafc Report NTA can customize reports in guide mode by specifying ltering rules, report type and report layout conguration. Trafc reports provide references for further network planning.

Network Trafc Report > Create

General Abstract
Name: Report Category: Description: Interface: Filter: Summary Type:

Filter

Layout

Time Frame

Abstract

gugan Default

GigabitEthernet0/0/0

Application summary, Session summary, DSCP summary, Source host summary, Destnation host summary Application summary - Pie chart Session summary - Table DSCP summary - Line graph - Trafc Source host summary - Region - Trafc Destination host summary - Region - Trafc Current time: Before1days Previous Save Save and Execute Cancel

Layout:

Time Range:

Trafc Auditing NTA can extract an original data stream according to a specied time range and ltering rules for further analysis and fault location. Original trafc information includes the router address, source address, destination address, application, source port, destination port, protocol, inbound interface, outbound interface, DSCP, trafc, and data packets.

Huawei eSight Full Product Datasheet 27

Running Environment
eSight Network Trafc Analyzer can be deployed on the same server as or on different server from eSight Unied Network Management Platform standard or professional edition. Considering the high requirement on server performance in case of huge trafc, you are advised to deploy eSight Network Trafc Analyzer and eSight Unied Network Management Platform on different servers according to the following requirements for running environment. Managed Nodes Hardware CPU: 1 x quad-core 2 GHz or above Memory: 4 GB Disk space: 120 GB NOTE: You are advised to use PC servers. CPU: 2 x quad-core 2 GHz or above Memory: 16 GB Disk space: 250 GB NOTE: You are advised to use PC servers. Operating System Database

0-100 (0-10000 ows/s)

Windows Server 2008 R2 standard (64-bit) + MySQL 5.5 Or Windows Server 2008 R2 standard (64-bit) + Microsoft SQL Server 2008 R2 standard

100-350 (10000-30000 ows/s)

When eSight Network Trafc Analyzer and eSight Unied Network Management Platform are deployed on different servers, eSight Network Trafc Analyzer can be deployed on a VM. The resource requirements for the VM are as follows. Managed Nodes Resources Required by a VM VMWare ESXI 5.0 CPU: 1 x quad-core 2 GHz or above RAM: 6 GB Disk space: 300 GB Operating System Windows Server 2008 R2 standard (64-bit) Database

0-100 (0-10000 ows/s)

Microsoft SQL Server 2008 R2 standard

Deployment Scenarios
eSight NTA Component

S5700 S9703 Deploy NetStream board S9703 S5700 S9706 NE40 Web browser

28 Huawei eSight Full Product Datasheet

This section describes a typical scenario that uses NTA. The network administrator performs the following actions: Deploys a NetStream board on an aggregation switch S9703 to mirror the trafc of the access switches (S5700) on each oor to the NetStream board. Congures the S9703 to send trafc information to NTA.

After the network administrator sets up NTA, you can monitor the trafc and trafc composition of each oor. The network administrator can also deploy the NetStream board on the S9706 to monitor the trafc of all core layers. NTA is deployed at the core layer. You can log in NTA through the web browser to check trafc information.

Ordering Information
Item eSight AppBase-Standard(include 60 devices License) or eSight AppBase-Professional(include 60 devices License) eSight Network Trafc Analyzer manager Quantity Remarks

Mandatory, eSight Unied Network Management Platform.

Mandatory, eSight Network Trafc Analyzer. One such item indicates the management of 1 more device. One such item indicates the management of 2 more devices. One such item indicates the management of 5 more devices.

eSight NTA License-Incremental 1 Device License

Optional

eSight NTA License-Incremental 2 Device License

Optional

eSight NTA License-Incremental 5 Device License

Optional

Huawei eSight Full Product Datasheet 29

MPLS VPN Manager

Product Overview
Virtual private networks (VPNs) are complex. They bear various services such as data, voice, and video. Huawei eSight MPLS VPN Manager is introduced to deal with the complexities such as the following in routine maintenance: How to shield service complexity and let maintenance personnel know the running status of deployed VPN services in real time and perform troubleshooting in a timely manner? How to monitor the bandwidth usage of each service to ensure the priority of emergency command systems and important users? How to ensure the cross-region video conference quality among provinces, cities, counties, and towns? Huawei eSight MPLS VPN Manager integrates discrete VPN information on the network into visible manageable objects and displays them in topology. Administrators can easily monitor VPN services and diagnose faults to ensure QoS and reliability of key services.

Characteristics
Simple and convenient auto-discovery of services simplies O&M. The MPLS VPN Manager combines policies and scopes for service discovery on the entire network. There is no need to specify device roles. It supports the discovery of various types of networking, including full-mesh, hub-and-spoke, MCE, HoVPN, Inter-AS VPN-Option A, and Inter-AS VPN-Option B. One-click fault diagnosis leads to fast fault identication. The MPLS VPN Manager can identify service faults at different layers, including the access layer between PEs and CEs, and public routes and LSPs between PEs.

30 Huawei eSight Full Product Datasheet

Visual service management facilitates unified monitoring of the entire network and provides up-to-themoment operating status of services. The access topology view displays devices according to the services currently running on them. It displays alarms and the link status of current services for quick diagnosis.

eSight MPLS VPN Manager interacts with report, SLA, and performance monitoring. Intelligent interaction with performance monitoring: Users can customize and view trafc statistics, VRF trafc statistics, and the number of VRF active routes on the 5 or 10 most active access interfaces. eSight also provides trafc trend charts with detailed counters.

Intelligent interaction with SLA: The MPLS VPN Manager provides SLA assessment on service links between a PE and a CE, and between PEs based on ICMP Echo service.

Huawei eSight Full Product Datasheet 31

Intelligent interaction with report: Interface trafc statistics and service VRF statistics can be provided in reports. Customers can export these reports.

Running Environment
eSight MPLS VPN Manager is installed on the same server as eSight Unied Network Management Platform standard or professional edition. Therefore, the conguration requirements for their running environment are the same.

Deployment Scenarios

eSight CE PE

P P PE P PE CE Branch VPN A Branch VPN A CE

Ordering Information
Item eSight AppBase-Standard(include 60 devices License) or eSight AppBase-Professional(include 60 devices License) eSight MPLS VPN manager(include 60 Devices License) eSight MPLS VPN License-Incremental 50 Devices License eSight MPLS VPN License-Incremental 100 Devices License Quantity Remarks

Mandatory, eSight Unied Network Management Platform.

Mandatory, eSight MPLS VPN Manager, which can manage 60 provider edges (PEs) and customer edge (CEs). One such item indicates the management of 50 more PEs and CEs. One such item indicates the management of 100 more PEs and CEs.

Optional

Optional

32 Huawei eSight Full Product Datasheet

Item eSight MPLS VPN License-Incremental 200 Devices License eSight MPLS VPN License-Incremental 500 Devices License eSight MPLS VPN License-Incremental 1000 Devices License

Quantity Optional

Remarks One such item indicates the management of 200 more PEs and CEs. One such item indicates the management of 500 more PEs and CEs. One such item indicates the management of 1000 more PEs and CEs. One such item indicates the management of unlimited PEs and CEs, restricted only by the management capability of a specic eSight version.

Optional

Optional

eSight MPLS VPN License-Incremental -Unlimited Devices License

Optional

Huawei eSight Full Product Datasheet 33

eSight MPLS Tunnel Manager

Product Overview
The tunnel technology is widely used in networks. Enterprises choose tunnels based on service features. Generally, LDP tunnels carry services that have low requirements on bandwidth and QoS, and MPLS TE tunnels carry services that have high requirements on bandwidth and QoS. To ensure that services run properly, administrators must know the following tunnel information on the current network: number of tunnels, tunnel types, path of each tunnel, tunnels with the protection function, and whether a tunnel switchover occurs. Huawei eSight MPLS Tunnel Manager automatically discovers the MPLS TE tunnels (RSVP-TE signalingbased dynamic tunnels and CR-Static signaling-based static tunnels) and LDP tunnels that have been deployed on the network, monitors the tunnels in real time, and displays tunnel running status dynamically. In addition, eSight MPLS Tunnel Manager monitors active-standby switchovers and bypasses.

Characteristics
eSight MPLS Tunnel Manager allows users to congure tunnel policies using a template, which is easy and efcient. Users can use the smart conguration tool to deliver tunnel policies in batches, which reduces errors and improves efciency.

34 Huawei eSight Full Product Datasheet

eSight MPLS Tunnel Manager automatically discovers tunnels deployed on the network to obtain information such as the number of tunnels, tunnel types, and tunnel status. eSight MPLS Tunnel Manager uses the automatic discovery function to discover the MPLS TE tunnels (RSVPTE signaling-based dynamic tunnels and CR-Static signaling-based static tunnels) and LDP tunnels that have been deployed on the network to eSight from specied or all devices.

eSight MPLS Tunnel Manager monitors tunnels in real time and dynamically displays the tunnel running status. When receiving an alarm, eSight MPLS Tunnel Manager noties users of the tunnel status change in a timely manner. The tunnel topology displays tunnel status and provides entries for users to view the link bandwidth information (such as bandwidth on outbound interfaces or inbound interfaces and maximum reserved bandwidth), link interface information, and whether MPLS is enabled on devices. Such information helps users to diagnose faults. When receiving an alarm, users can directly access the Tunnel Topology page from the alarm page to check the tunnel status.

When detecting that the active LSP is faulty, eSight MPLS Tunnel Manager performs an active-standby switchover or bypasses the faulty LSP. All paths of the original tunnel before the switchover or bypass are unavailable. The active-standby tunnel switchover status is displayed in the tunnel topology.

Huawei eSight Full Product Datasheet 35

gugan_S7712_201

gugan_AR3260_222

gugan_S7706_17 gugan_AR3260_222

gugan_S7712_188 When an LDP tunnel is faulty, all links in the tunnel topology are unavailable.

M gugan_S7712_188

gugan_AR3260_222

gugan_S7712_201

gugan_AR3260_222

eSight MPLS Tunnel Manager cooperates with the MPLS VPN Manager so that users can quickly know the services affected by tunnel faults and check whether a service fault is caused by a tunnel fault. In the service list of MPLS VPN Manager, users can click Tunnel List to view tunnels that carry a VPN. Users can check whether a service fault is caused by a tunnel fault based on the tunnel status.

36 Huawei eSight Full Product Datasheet

In the tunnel list of MPLS Tunnel Manager, users can click View VPN to view VPNs carried on a tunnel and know the VPNs that will be affected by a tunnel fault.

Running Environment
eSight MPLS Tunnel Manager is installed on the same server as eSight Unied Network Management Platform standard or professional edition. Therefore, the conguration requirements for their running environment are the same.

Deployment Scenarios
eSight

PE1

P3

P4 PE2 P2 PE4

ce1 vpan PE3

P1

ce2 vpan

Ordering Information
Item eSight AppBase-Standard(include 60 devices License) or eSight AppBase-Professional (include 60 devices License) eSight MPLS Tunnel Quantity Remarks

Mandatory, eSight Unied Network Management Platform.

Mandatory, eSight MPLS Tunnel Manager.

Huawei eSight Full Product Datasheet 37

eSight QoS Manager

Product Overview
With rapid network development, an increasing number of users transmit data through networks. IP networks carry not only data services but also VoIP, VPN, and ERP services to meet diversied user requirements. The new services have a common feature, that is, high requirements on transmission performance such as bandwidth, latency, and jitter. Users want better experience during packet transmission. The QoS technology provides various QoS functions based on the requirements of different applications on the network, such as providing dedicated bandwidth, reducing the packet loss rate, managing and avoiding network congestion, adjusting network trafc, and setting packet priorities. Unied QoS management can manage network-wide QoS services in a centralized way to ensure network QoS. Huawei eSight QoS Manager monitors network QoS in real time provides multi-dimensional data analysis, and displays QoS information in graphs and dashboards, simplifying network management. Integrating with the smart conguration tool, performance monitoring, Network Trafc Analyzer, and SLA Manager on eSight Unied Network Management Platform, eSight QoS Manager provides all-round functions of QoS conguration, monitoring, and optimization.

Characteristics
eSight QoS Manager uses a uniform dashboard to manage key information in a centralized manner. The uniform dashboard displays top N information of various network QoS items, such as Bandwidth Usage of Trafc Classier, Rate of Discarded Bits, Excess Bandwidth Rate, and Rate of Matched Bits. Based on such information, users can know the QoS bandwidth usage and network faults in real time. In addition, users can specify which information can be displayed on the dashboard. eSight QoS Manager provides interface QoS management to directly display QoS trafc information. eSight QoS Manager displays interface QoS trafc information in graphs and automatically updates the information. Visualized QoS management enables users to diagnose QoS faults in a timely manner.

38 Huawei eSight Full Product Datasheet

eSight QoS Manager cooperates with various functional components integrated on eSight Unied Network Management Platform to implement E2E QoS management. eSight QoS Manager integrates with the smart conguration tool, performance monitoring, Network Trafc Analyzer, and SLA Manager on eSight Unied Network Management Platform to provide E2E QoS management. Setting QoS parameters: The smart conguration tool quickly delivers QoS congurations to devices in batches or through templates. Checking QoS: eSight SLA Manager checks QoS items and displays QoS data in graphs in real time. Based on the real-time data, users can check whether the network QoS meets QoS congurations. Monitoring QoS trafc information: eSight QoS Manager displays interface QoS trafc information, based on which users can discover QoS exceptions and diagnose faults in advance. Optimizing QoS congurations: Network Trafc Analyzer and performance management display networkwide performance and trafc. Based on such data, users can discover the nodes with performance or trafc exceptions and adjust QoS congurations accordingly to ensure the network-wide trafc balance and stability.

Running Environment
eSight QoS Manager is installed on the same server as eSight Unied Network Management Platform standard or professional edition. Therefore, the conguration requirements for their running environment are the same.

Deployment Scenarios
There is no special requirement on the eSight network as long as managed devices can connect to the eSight server.

Ordering Information
Item eSight AppBase-Standard(include 60 devices License) or eSight AppBase-Professional(include 60 devices License) eSight SLA Manager Quantity Remarks

Mandatory, eSight Unied Network Management Platform.

Mandatory, eSight SLA Manager, which includes the eSight QoS function.

Huawei eSight Full Product Datasheet 39

eSight DC nCenter
Product Overview
With the help of virtualization software, one physical server can be virtualized to multiple VMs that share computer resources. To ensure communication between VMs and communication between VMs and switches, the virtual switch vSwitch is introduced. On the one hand, a vSwitch is deployed on a server and managed by the system administrator; on the other hand, a vSwitch is a switch that is managed by the network administrator. The unclear boarder between network management and server management requires cooperation between the system administrator and network administrator. Sometimes, VMs that occupy fewer resources are migrated to another server to free unnecessary servers and reduce cost. Sometimes VMs are migrated to new servers that are added to satisfy service needs. To meet the VM migration requirement, the destination network where a VM is to be migrated must be prepared in advanced. This brings new challenges to network management. Huawei eSight DC nCenter monitors network resources (including physical servers, VMs, vSwitches, and TOR switches), displays the topology of virtual resources and physical devices, and dynamically adjusts physical network proles based on VM changes.

Characteristics
eSight DC nCenter automatically discovers the virtual and network topologies and uniformly manages the data center network. eSight DC nCenter automatically discovers physical and virtual devices and displays the device connections and status in topology views, including the subordinate and connection relationships between physical TOR switches, physical servers, vSwitches, and VMs.

40 Huawei eSight Full Product Datasheet

eSight DC nCenter uniformly monitors data center network resources. eSight DC nCenter monitors resources such as physical servers, VMs, port groups, and physical network adapters and manages VM performance and alarm information. Physical server: basic information, quantity of VMs, and quantity of vSwitches.

VM: name, VLAN ID, vSwitch and server to which a VM belongs, and bound physical network prole.

Port group: port group name, VLAN ID, and virtual proles (including proles for security, trafc adjustment, and network adapter binding). Users can add, modify, and delete port groups.

Huawei eSight Full Product Datasheet 41

Physical network adapter: network adapter name and status, MAC address, and vSwitch name.

eSight DC nCenter automatically delivers network proles during the VM deployment, which reduces the work complexity for network administrators and shortens the required time. When creating a VM using vCenter during the VM deployment, the server administrator binds the VM to a port group and noties nCenter of the binding relationship. When the VM is brought online, nCenter automatically and quickly delivers the network prole to the TOR switch.

eSight DC nCenter synchronously migrates network proles when migrating a VM, which prevents services from being affected by the migration. eSight DC nCenter listens on VM changes (for example, a VM goes online, goes ofine, or is migrated) through vCenter, synchronizes virtual network congurations to the physical network by changing network congurations between source and destination TOR switches, and generates VM change logs for future troubleshooting.

Running Environment
eSight DC nCenter is installed on the same server as eSight Unied Network Management Platform professional edition. Therefore, the conguration requirements for their running environment are the same.

Deployment Scenarios
There is no special requirement on the eSight network as long as the physical server where a VM is deployed can connect to the eSight server and the VM has been added to eSight DC nCenter.

42 Huawei eSight Full Product Datasheet

Ordering Information
Item eSight AppBase-Professional (include 60 devices License) eSight DC nCenter (include 10000 Virtual Machine License) eSight DC nCenter License-Incremental 10000 Virtual Machine License Quantity Remarks Mandatory, eSight Unied Network Management Platform.

Mandatory, eSight DC nCenter.

Optional

One such item indicates the management of 10,000 more VMs.

More Information
For more information, visit http://enterprise.huawei.com.

Huawei eSight Full Product Datasheet 43

eSight Policy Center

Product Overview
User access security is an important part of enterprise security. The access status of any terminal has direct impact on the entire network security. Unauthorized access is likely to cause leakage of important information, which tremendously bothers enterprise managers and IT departments. Huawei eSight Policy Center offers a comprehensive user authentication solution that involves 5W: Who, Where, When, Which, and What. This solution allows authorized users to access enterprise networks and ensures information security.

Characteristics
Full range of authentication modes: Portal, 802.1x, and MAC Portal authentication is applicable to wireless network access and supports customized authentication pages, which helps convey corporate values. eSight Policy Center supports 802.1x authentication and automatic authentication by the authentication client, and binds the terminal MAC addresses, IP addresses, and users to enable more authentication policies. eSight Policy Center supports automatic upgrade notication of the 802.1x authentication client, simplifying management. eSight Policy Center automatically authenticates printers and IP phones, which ensures the authentication and management over unmanned terminals. Integrated wired and wireless access control, meeting the need for campus network access authentication eSight Policy Center offers a terminal access control solution based on the linkage of network devices (switches, AR routers, WLAN devices, and rewalls) at access and aggregation layers and applies to various campus network scenarios. In case of wireless access, eSight Policy Center links Huawei AC devices to control employee and guest access. Authorization policies based on user roles and more dedicate rights control eSight Policy Center authenticates user information in terms of user login times, roles, access device groups, and user groups. Authenticated users can be granted with a wide range of rights, including dynamic and static ACL, or joining different VLANs. Access rights can be granted by user, terminal, and location. For example, authenticated users can access intranets; outsourced employees or guests can access the Internet via intranets.

44 Huawei eSight Full Product Datasheet

Running Environment
eSight Policy Center is installed on an independent server. The following table lists the running environments.

Managed Users

Hardware CPU: 1 x 6-core processors, 2 GHz or above Memory: 8 GB Disk space: 300 GB NOTE: Use PC Servers. CPU: 1 x 6-core processors, 2 GHz or above Memory: 8 GB Disk space: 300 GB NOTE: Use PC Servers. The number of servers can be calculated based on a single server can manage 10,000 access users

Operating System

Database

010,000 users

Windows Server 2008 R2 standard (64-bit) + Microsoft SQL Server 2008 R2 standard

10,000100,000 users

Windows Server 2008 R2 standard (64-bit) + Microsoft SQL Server 2008 R2 standard

Deployment Scenarios
There is no special requirement on the eSight network as long as the physical server where eSight Policy Center is deployed can connect to terminals and linked network devices.
LDAP server

eSight Standard edition

Authentication policy server Policy Center component

Campus Network
Access switch 802.1x Portal authentication Aggregation switch
STOP

STOP

User authentication AP Outgoing traffic monitonng

Egress router

WAN
STOP STOP

AC AP

Protected resources

Huawei eSight Full Product Datasheet 45

Ordering Information
Item eSight Policy Center eSight AppBase-Professional or Standard (including a license for 60 nodes) eSight Policy Center License-Incremental 250 Users License eSight Policy Center License-Incremental 500 Users License eSight Policy Center License-Incremental 1000 Users License eSight Policy Center License-Incremental 2000 Users License eSight Policy Center License-Incremental 5000 Users License Quantity 1 1 Remarks Mandatory. Mandatory, eSight application platform. One such item indicates the management of 250 more users. One such item indicates the management of 500 more users. One such item indicates the management of 1000 more users. One such item indicates the management of 2000 more users. One such item indicates the management of 5000 more users.

Optional

Optional

Optional

Optional

Optional

More Information
For more information, visit http://enterprise.huawei.com.

46 Huawei eSight Full Product Datasheet

Huawei eSight Full Product Datasheet 47

Copyright Huawei Technologies Co., Ltd. 2013. All rights reserved. No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd. Trademark Notice , HUAWEI, and are trademarks or registered trademarks of Huawei Technologies Co., Ltd. Other trademarks, product, service and company names mentioned are the property of their respective owners. General Disclaimer The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice.