SD-WAN

I'm trying to configure several SSR routers to send their syslogs to ELK, but have run into the issue that the SSR seems to need the monitoring plugin installed.  The environment I am setting up does not have internet connectivity and is thus unable to reach the repos to pull the plugin.  To test to see if this was even possible, I set up a simple conductor and router in VMWare Workstation and was able to get the plugin list to show up in the conductor and install it.  I can't use dnf or yum to download the package due to missing /etc/128technology/release.pem.  I had to use 

install128t repo authenticate --username <user> --token <token>

to get the list in the conductor to populate.

How do I download the package to install it in my offline network?

I have referenced the following to get to this point:
Monitoring Agent | SSN Docs

Juniper		remove preview
Monitoring Agent | SSN Docs The SSR Monitoring Agent is an entity for collecting data from a node running SSR software and to push it to a collector. It is capable of collecting the data from several sources such as metrics, events etc. The current mechanism of monitoring an SSR involves performing REST or GraphQL queries from the conductor. View this on Juniper >

Installer Command Line Reference | SSN Docs

Juniper		remove preview
Installer Command Line Reference | SSN Docs This is a reference document for the SSR Installer command line interface. To get started installing the SSR with the Installer, see the Router Interactive Installation. To start the Installer, run the install128t command. Beginning with Installer version 2.7.0, the use of the Screen utility is no longer necessary. View this on Juniper >

SD-WAN

Juniper		remove preview
SD-WAN I have tried this config.yaml on my conductor. It is referencing the branch1_router name: user-agent enabled: true lib-directory: /var/lib/128t-monitoring tags: - key: router value: branch1_router - key: node value: node1 sample-interval: 1 push-interval: 1 inputs: - name: t128_events - name: t128_metrics - name: t128_device_state - name: t128_peer_path - name: t128_lte_metric - name: system outputs: - name: t128_events - name: t128_metrics - name: t128_device_state - name: t128_peer_path - name: t128_lte_metric - name: system I can see some information being generated in a file called /tmp/metrics.out mem,host=128t-conductor-5-3-0-94-automation-1.novalocal,node=node1,router=branch1_router used=3698421760i,free=1760661504i,huge_page_size=2097152i,mapped=289501184i,sreclaimable=228458496i,sunreclaim=81453056i,available=4128088064i,commit_limit=4070277120i,inactive=4776312832i,page_tables=61210624i,write_back=0i,total=8140558336i,high_free=0i,huge_pages_free=0i,low_total=0i,committed_as=10119565312i,buffered=16384i,shared=1232896i,swap_cached=0i,vmalloc_chunk=0i,active=1082556416i,huge_pages_total=0i,swap_free=0i,high_total=0i,slab=309911552i,cached=2681458688i,available_percent=50.71013428826315,dirty=3051520i,low_free=0i,swap_total=0i,vmalloc_total=35184372087808i,vmalloc_used=0i,write_back_tmp=0i,used_percent=45.432040498309135 1666914346000000000cpu,cpu=cpu-total,host=128t-conductor-5-3-0-94-automation-1.novalocal,node=node1,router=branch1_router usage_idle=69.87341772051917,usage_nice=0,usage_iowait=0,usage_irq=1.012658227829273,usage_steal=0.5063291139146365,usage_user=23.29113924041866,usage_softirq=0.25316455695731827,usage_guest=0,usage_guest_nice=0,usage_system=5.063291139261492 1666914346000000000cpu,cpu=cpu3,host=128t-conductor-5-3-0-94-automation-1.novalocal,node=node1,router=branch1_router ... View this on Juniper >

Patrick

------------------------------
PATRICK KELLAHER
------------------------------

To follow up on this.  As I am running a new enough version, the monitoring agent is "installed" on the SSR, but isn't available via the GUI.  Following the directions  starting at "File based configuration" (https://www.juniper.net/documentation/us/en/software/session-smart-router/docs/plugin_monitoring_agent/#file-based-configuration) will work.  I would like to point out that this is solely CLI in the OS shell as root and puts no configuration data into the SSR software.

Another useful resource is the 128T github, https://github.com/128technology/monitoring-server.

------------------------------
PATRICK KELLAHER
------------------------------

Original Message:
Sent: 01-26-2023 15:58
From: PATRICK KELLAHER
Subject: Monitoring Agent Offline Install

I'm trying to configure several SSR routers to send their syslogs to ELK, but have run into the issue that the SSR seems to need the monitoring plugin installed.  The environment I am setting up does not have internet connectivity and is thus unable to reach the repos to pull the plugin.  To test to see if this was even possible, I set up a simple conductor and router in VMWare Workstation and was able to get the plugin list to show up in the conductor and install it.  I can't use dnf or yum to download the package due to missing /etc/128technology/release.pem.  I had to use 

install128t repo authenticate --username <user> --token <token>

to get the list in the conductor to populate.

How do I download the package to install it in my offline network?

I have referenced the following to get to this point:
Monitoring Agent | SSN Docs

Juniper		remove preview
Monitoring Agent | SSN Docs The SSR Monitoring Agent is an entity for collecting data from a node running SSR software and to push it to a collector. It is capable of collecting the data from several sources such as metrics, events etc. The current mechanism of monitoring an SSR involves performing REST or GraphQL queries from the conductor. View this on Juniper >

Installer Command Line Reference | SSN Docs

Juniper		remove preview
Installer Command Line Reference | SSN Docs This is a reference document for the SSR Installer command line interface. To get started installing the SSR with the Installer, see the Router Interactive Installation. To start the Installer, run the install128t command. Beginning with Installer version 2.7.0, the use of the Screen utility is no longer necessary. View this on Juniper >

SD-WAN

Juniper		remove preview
SD-WAN I have tried this config.yaml on my conductor. It is referencing the branch1_router name: user-agent enabled: true lib-directory: /var/lib/128t-monitoring tags: - key: router value: branch1_router - key: node value: node1 sample-interval: 1 push-interval: 1 inputs: - name: t128_events - name: t128_metrics - name: t128_device_state - name: t128_peer_path - name: t128_lte_metric - name: system outputs: - name: t128_events - name: t128_metrics - name: t128_device_state - name: t128_peer_path - name: t128_lte_metric - name: system I can see some information being generated in a file called /tmp/metrics.out mem,host=128t-conductor-5-3-0-94-automation-1.novalocal,node=node1,router=branch1_router used=3698421760i,free=1760661504i,huge_page_size=2097152i,mapped=289501184i,sreclaimable=228458496i,sunreclaim=81453056i,available=4128088064i,commit_limit=4070277120i,inactive=4776312832i,page_tables=61210624i,write_back=0i,total=8140558336i,high_free=0i,huge_pages_free=0i,low_total=0i,committed_as=10119565312i,buffered=16384i,shared=1232896i,swap_cached=0i,vmalloc_chunk=0i,active=1082556416i,huge_pages_total=0i,swap_free=0i,high_total=0i,slab=309911552i,cached=2681458688i,available_percent=50.71013428826315,dirty=3051520i,low_free=0i,swap_total=0i,vmalloc_total=35184372087808i,vmalloc_used=0i,write_back_tmp=0i,used_percent=45.432040498309135 1666914346000000000cpu,cpu=cpu-total,host=128t-conductor-5-3-0-94-automation-1.novalocal,node=node1,router=branch1_router usage_idle=69.87341772051917,usage_nice=0,usage_iowait=0,usage_irq=1.012658227829273,usage_steal=0.5063291139146365,usage_user=23.29113924041866,usage_softirq=0.25316455695731827,usage_guest=0,usage_guest_nice=0,usage_system=5.063291139261492 1666914346000000000cpu,cpu=cpu3,host=128t-conductor-5-3-0-94-automation-1.novalocal,node=node1,router=branch1_router ... View this on Juniper >

Patrick

------------------------------
PATRICK KELLAHER
------------------------------

Expanding on what I last stated above:

"I would like to point out that this is solely CLI in the OS shell as root and puts no configuration data into the SSR software"

This means that SSR policy based routing doesn't apply (i.e. SSR routers will not forward the traffic, the underlying OS would need a route to your log collector and no a default router to the kni device doesn't work).  However, I have found that the conductor appears to collect logs from all routers and will forward the messages on.

------------------------------
PATRICK KELLAHER
------------------------------

Original Message:
Sent: 02-01-2023 08:55
From: PATRICK KELLAHER
Subject: Monitoring Agent Offline Install

To follow up on this.  As I am running a new enough version, the monitoring agent is "installed" on the SSR, but isn't available via the GUI.  Following the directions  starting at "File based configuration" (https://www.juniper.net/documentation/us/en/software/session-smart-router/docs/plugin_monitoring_agent/#file-based-configuration) will work.  I would like to point out that this is solely CLI in the OS shell as root and puts no configuration data into the SSR software.

Another useful resource is the 128T github, https://github.com/128technology/monitoring-server.

------------------------------
PATRICK KELLAHER

Original Message:
Sent: 01-26-2023 15:58
From: PATRICK KELLAHER
Subject: Monitoring Agent Offline Install

I'm trying to configure several SSR routers to send their syslogs to ELK, but have run into the issue that the SSR seems to need the monitoring plugin installed.  The environment I am setting up does not have internet connectivity and is thus unable to reach the repos to pull the plugin.  To test to see if this was even possible, I set up a simple conductor and router in VMWare Workstation and was able to get the plugin list to show up in the conductor and install it.  I can't use dnf or yum to download the package due to missing /etc/128technology/release.pem.  I had to use 

install128t repo authenticate --username <user> --token <token>

to get the list in the conductor to populate.

How do I download the package to install it in my offline network?

I have referenced the following to get to this point:
Monitoring Agent | SSN Docs

Juniper		remove preview
Monitoring Agent | SSN Docs The SSR Monitoring Agent is an entity for collecting data from a node running SSR software and to push it to a collector. It is capable of collecting the data from several sources such as metrics, events etc. The current mechanism of monitoring an SSR involves performing REST or GraphQL queries from the conductor. View this on Juniper >

Installer Command Line Reference | SSN Docs

Juniper		remove preview
Installer Command Line Reference | SSN Docs This is a reference document for the SSR Installer command line interface. To get started installing the SSR with the Installer, see the Router Interactive Installation. To start the Installer, run the install128t command. Beginning with Installer version 2.7.0, the use of the Screen utility is no longer necessary. View this on Juniper >

SD-WAN

Juniper		remove preview
SD-WAN I have tried this config.yaml on my conductor. It is referencing the branch1_router name: user-agent enabled: true lib-directory: /var/lib/128t-monitoring tags: - key: router value: branch1_router - key: node value: node1 sample-interval: 1 push-interval: 1 inputs: - name: t128_events - name: t128_metrics - name: t128_device_state - name: t128_peer_path - name: t128_lte_metric - name: system outputs: - name: t128_events - name: t128_metrics - name: t128_device_state - name: t128_peer_path - name: t128_lte_metric - name: system I can see some information being generated in a file called /tmp/metrics.out mem,host=128t-conductor-5-3-0-94-automation-1.novalocal,node=node1,router=branch1_router used=3698421760i,free=1760661504i,huge_page_size=2097152i,mapped=289501184i,sreclaimable=228458496i,sunreclaim=81453056i,available=4128088064i,commit_limit=4070277120i,inactive=4776312832i,page_tables=61210624i,write_back=0i,total=8140558336i,high_free=0i,huge_pages_free=0i,low_total=0i,committed_as=10119565312i,buffered=16384i,shared=1232896i,swap_cached=0i,vmalloc_chunk=0i,active=1082556416i,huge_pages_total=0i,swap_free=0i,high_total=0i,slab=309911552i,cached=2681458688i,available_percent=50.71013428826315,dirty=3051520i,low_free=0i,swap_total=0i,vmalloc_total=35184372087808i,vmalloc_used=0i,write_back_tmp=0i,used_percent=45.432040498309135 1666914346000000000cpu,cpu=cpu-total,host=128t-conductor-5-3-0-94-automation-1.novalocal,node=node1,router=branch1_router usage_idle=69.87341772051917,usage_nice=0,usage_iowait=0,usage_irq=1.012658227829273,usage_steal=0.5063291139146365,usage_user=23.29113924041866,usage_softirq=0.25316455695731827,usage_guest=0,usage_guest_nice=0,usage_system=5.063291139261492 1666914346000000000cpu,cpu=cpu3,host=128t-conductor-5-3-0-94-automation-1.novalocal,node=node1,router=branch1_router ... View this on Juniper >

Patrick

------------------------------
PATRICK KELLAHER
------------------------------