Huawei eSight Network Full Product Datasheet

HUAWEI
eSight
Network
Contents
01 | Huawei eSight Network Full Product Datasheet

05 | eSight Network Management Platform

11 | eSight Network Device Manager

15 | eSight Network Agile Reporter

17 | eSight Network SLA Manager

21 | eSight Network Traffic Analyzer

29 | eSight Network WLAN Manager

43 | eSight Mobile Manager

47 | eSight Network IPSec VPN Manager

51 | eSight Network Secure Center

54 | More Information
01 | Huawei eSight Network Full Product Datasheet

Huawei eSight Network

Full Product Datasheet

Product Overview
With the development of enterprise network applications and the expansion of network scale, a large number of
routers, gateways, and wireless local area network (WLAN) devices are used on enterprise campus and branch
networks. Enterprises must provide multiple mobile offices, rather than a fixed location, for their employees, and
support diversified services, complicating network management. They urgently need a unified network management
system to improve efficiency and ensure normal operation of enterprise services.
Huawei eSight Network is based on the following concepts: topology-centric, simplified management, and improved
operation and maintenance (O&M) efficiency. Network administrators can gain an overall understanding of the network
status by viewing the topology. eSight Network not only provides basic network management capabilities (alarm,
topology, performance, and configuration) but also proactive warnings of potential network faults. In addition, eSight
Network provides abundant fault location methods to help administrators effectively locate and rectify faults. eSight
Network provides an all-round, open, and unified management platform, and various service components, to implement
unified management of devices, services, and applications.

Product Features
Ease to Use
• User-friendly Graphical User Interface (GUI) and smooth operations
• Active monitoring and visible O&M
• Mobile O&M, agile and open

Unified Management
• Multi-type device management

Smart O&M
• Plug-and-play
• Automatic network quality sensing
• Full lifecycle management
 Huawei eSight Network Full Product Datasheet | 02

Product Components
eSight Network provides a unified O&M platform and specific components to meet enterprise user requirements.

Component Description

Provides NMSs of the compact, standard, and professional editions for enterprise users.
eSight Network Management
Supports unified management of devices from various types, topology management, fault
Platform
management, performance management, and user right management.

Manages network devices from multiple types.

Provides the IP topology and link management functions for monitoring the network
eSight Network Device
topology and changes in real time.
Manager
Provides the smart configuration tool, configuration file management, and device software
management to update configuration files and software versions.

Analyzes report data from multiple dimensions and allows users to flexibly drag required
eSight Network Agile Reporter content to be contained in reports, implementing complex query from Big Data.
Displays reports in an easy-to-understand manner.

Provides Simple Network Management Protocol (SNMP), RESTful Open APIs, and File
eSight Network Open SDK
Transfer Protocol (FTP) interfaces to integrate with third-party systems.

Implements visible monitoring on network quality by combining the following methods:

simulation flow-based and real service flow-based network quality detection.
Monitors network quality using simulation flows by integrating with devices' Network
Quality Analysis (NQA) function to diagnose and measure link performance between
network devices 24x7 and displays Quality of Service (QoS) statistics. eSight Network
notifies administrators remotely when QoS reaches the threshold set by administrators.
eSight Network SLA Manager Administrators can use the quick diagnosis function to monitor link performance in real
time and diagnose faults, which improves management efficiency.
Implements network quality detection based on iPCA, which is the industry's first multiple-
input-multiple-output quality measurement technology and solves the N2 connection
problem in traditional point-to-point quality measurement technologies. iPCA technology
uses the enhanced area-based packet conservation mechanism to monitor the quality on
a connectionless network and also provides accurate fault location capabilities.

Analyzes network traffic based on NetFlow, NetStream, and sFlow protocols. This helps
network administrators monitor traffic and bandwidth usage on enterprise campus
eSight Network Traffic
egress and wireless campus networks, generate traffic analysis reports, and detect
Analyzer
network bottlenecks in a timely manner, providing evidence for network planning and fault
diagnosis.

Provides integrated management of wired and wireless networks.

Supports full lifecycle WLAN management, including visible planning (highly-efficient
WLAN planning with professional tools), fast service provisioning in three steps, active
eSight Network WLAN O&M, all-round quality awareness regionally or globally.
Manager Provides search-centric E2E one-click fault diagnosis, interference source locating, and
spectrum analysis to implement highly efficient troubleshooting.
Provides position-based terminal location and northbound interfaces to achieve mutual
benefits from the wireless network.
03 | Huawei eSight Network Full Product Datasheet

Component Description

Allows administrators to manage WLANs using mobile terminals with the 360-degree
WLAN monitoring and fault diagnosis, and advertisement pushing apps. With eSight
eSight Mobile Manager Mobile, administrators can manage WLANs anytime, anywhere.
Provides open SDK to allow third parties to develop various industrial applications, building
a win-win ecosystem.

Automatically discovers IPSec VPN services on the hub-spoke and site-to-site networks
eSight Network IPSec VPN and provides all-round monitoring and diagnostic functions, including service alarm status
Manager monitoring, service topology, performance monitoring, service diagnosis, and historical
tunnel information display.

eSight Network Secure Center Provides unified security policy management functions for the firewalls.
 Huawei eSight Network Full Product Datasheet | 04

HUAWEI
eSight
Network
05 | Huawei eSight Network Full Product Datasheet

eSight Network
Management Platform

Product Overview
As the network scales and the number of enterprise network applications continues to grow, more devices are
deployed. Multiple service routers, security gateways, and wireless local area network (WLAN) access points (APs) are
used to implement communications and collaboration services in decentralized enterprise campus and branch office
networks. Enterprises are using an increasing number of core and access devices provided by multiple vendors. Each
device has its own management system, creating confusion for system and network administrators.
To alleviate the operational burden, Huawei has developed the eSight Network Management Platform, a unified network
management system that provides a comprehensive view and management of all network and system resources,
ensures network stability, and improves O&M efficiency.
The eSight Network Management Platform provides compact, standard, and professional editions for enterprise users.
It supports unified management of devices, topology management, fault management, performance management, and
user right management.

Features
eSight Network provides compact, standard, and professional editions for enterprise users.

Edition Functions

• Basic network management capabilities: alarms, performance, topology

management, Network Elements (NEs), logs, security management, maintenance
Compact edition
tools, database backup tool, and fault collection tool.
• Applies to monitoring on small-scale networks management with 40 NEs.

• Basic network management capabilities: alarms, performance, topology

management, Network Elements (NEs), logs, security management, maintenance
tools, database backup tool, and fault collection tool.
Standard edition
• Supports service components that can be installed due to service needs.
• Provides all-around network management functions that address most network
management needs of 5000 NEs.

• All functions of the standard edition.

• High Availability (HA).
Professional edition
• A single NMS of the professional edition applies to large-scale network
management with up to 20,000 NEs.
 Huawei eSight Network Full Product Datasheet | 06

eSight Network provides rights-based, domain-based, and time-based authorization, and flexible network user
authentication methods.
• eSight Network enables refined management authorization by assigning different user names and passwords to
administrators and by controlling administrator management authority, management range, time range allowed to
log in, and IP range allowed to log in.
• eSight Network supports Lightweight Directory Access Protocol (LDAP), RADIUS, and local authorization methods.

The comprehensive fault monitoring system enables real-time fault diagnosis and quick troubleshooting.
• eSight Network provides unified monitoring of alarms on the entire network and informs maintenance personnel
of the alarms in the first instance through alarm sounds, remote alarm notification (email and SMS), and the alarm
panel, ensuring timely troubleshooting.
• eSight Network supports alarm analysis and processing. eSight Network provides alarm locating functions to switch
to NEs, ports, and services, shield, suppress, and categorize alarms, analyze alarm correlation, redefine the alarm
severity, and maintain the experience library, improving troubleshooting accuracy and efficiency.
• eSight Network supports customization for alarm shield, redefinition, and alarm sounds to meet specific
requirements in different scenarios.
• eSight Network provides correlation analysis for a large number of alarms to improve alarm effectiveness, and
centrally displays alarms to improve management efficiency.

eSight Network provides visual management of the entire network topology and status monitoring.
07 | Huawei eSight Network Full Product Datasheet

• Various device discovery methods: eSight Network can discover devices automatically, separately, or in a batch.
The automatic device discovery model can add new devices periodically. eSight Network supports management of
devices with IPv6 addresses.
• Simplified management on network topologies: eSight Network provides physical topologies and shows network
structure hierarchically. Administrators can view network resource alarm states and basic link information. eSight
Network also supports customization in the topology view.
• eSight Network shows device, frame, board, subcard, port on panel, and port state, and allows administrators to
enable or disable ports.
• Powerful performance management: eSight Network provides performance parameter management templates,
supports batch device performance monitoring, visual performance data view, and history date analysis.
Administrators can set different alarm severity and threshold levels and determine whether to send an alarm based
on the number of times that performance indexes exceed the threshold value, lowering report errors and improving
alarm accuracy.
• Group-based management: After a device is added to eSight Network, the device is automatically added to the group
based on the specified rules and is granted with policies in the group.

eSight Network displays key performance counters in portlets on the home page, and allows you to search for
required portlets by keyword.
• The customized portal allows users to receive all information on the home page. eSight Network can also integrate
third-party software portals with the home page.
• Convenient resource searching on the entire network helps administrators quickly locate resources and access
corresponding services.

B/S architecture supports multiple operating systems.

• eSight Network uses Browser/Server (B/S) architecture, which does not require any client software. The server need
only be updated when the software updates.
• The platform supports Windows and SUSE Linux operating systems and Oracle, and SQL Server databases.

Disaster Recovery (DR) protection ensures service continuity and system reliability.
• eSight Network supports two-node clusters in hot standby mode.
• eSight Network supports the Linux operating system.
 Huawei eSight Network Full Product Datasheet | 08

Operating Environment
Configuration requirements for the eSight Network Management Platform (compact edition) are as follows:

Operating System Server Configuration Requirement Virtual machine Configuration Requirement

CPU: 2 x dual-core 2 GHz or higher VMWare ESXI 5.0/5.5、FusionSphere V1R5、

Memory: 8 GB or higher Hyper-V
Disk space: 300 GB or higher CPU: 8 vCPU 2 GHz or higher
Windows Server Database: Microsoft SQL Server 2012 Memory: 8 GB or higher
2012 R2 standard standard Disk space: 300 GB or higher
(64 bits) Minimum disk IO speed greater than Database: Microsoft SQL Server 2012 standard
100MB/s, recommanded 180MB/s above.
Determine the hardware specifications based on
PC servers are recommended. the network scale and required components.

Configuration requirements for the eSight Network Management Platform (standard and professional editions) are as
follows:

Operating System Server Configuration Requirement Virtual machine Configuration Requirement

CPU: 2 x hexa-core 2 GHz or higher

Memory: 32 GB or higher
VMWare ESXI 5.0/5.5、FusionSphere V1R5、
Disk space: 600 GB or higher
Hyper-V
Minimum disk IO speed greater than
CPU: 16 vCPU 2 GHz or higher
100MB/s, recommanded 180MB/s above.
Windows Server Memory: 32 GB or higher
Database: Microsoft SQL Server 2012
2012 R2 standard Disk space: 600 GB or higher
standard
(64 bits) Database: Microsoft SQL Server 2012 standard

PC servers are recommended.

Determine the hardware specifications based on
Determine the hardware specifications
the network scale and required components.
based on the network scale and required
components.

CPU: 2 x hexa-core 2 GHz or higher

Memory: 32 GB VMWare ESXI 5.0/5.5、FusionSphere V1R5、
Disk space: 600 GB Hyper-V
Minimum disk IO speed greater than CPU: 16 vCPU 2 GHz or higher
Novell SUSE Linux
100MB/s, recommanded 180MB/s above. Memory: 32 GB or higher
Enterprise Server-
Database: Oracle Database Standard Disk space: 600 GB or higher
Multi-language-
Edition 11g R2 Database: Oracle Database Standard Edition 11g
Enterprise-12.0
R2
SP2
PC servers are recommended.
Determine the hardware specifications Determine the hardware specifications based on
based on the network scale and required the network scale and required components.
components.
09 | Huawei eSight Network Full Product Datasheet

Deployment Scenarios
The eSight Network does not have special requirements when managed devices are connected to the eSight Network
server and devices support the Simple Network Management Protocol (SNMP).
eSight Network compact edition applies to small- and medium-sized enterprises.

eSight Compact Edition

eSight Network standard edition applies to medium- and large-sized enterprises.

eSight Standard Edition

Branch
VPN

Headquarters
VPN

Branch

eSight Network professional edition applies to ultra-large enterprises , management scale can be reached 20000
network element.

eSight Standard or
Professional Edition eSight Professional Edition

Branch
VPN

Headquarters
VPN

Branch

eSight Standard or Professional Edition

 Huawei eSight Network Full Product Datasheet | 10

Ordering Information
Ordering information for eSight Network compact edition

Item Quantity Remarks

eSight Network Application Base-Compact Mandatory for eSight Network Management

1
(includes 40 devices license) Platform

Ordering information for eSight Network standard edition

Item Quantity Remarks

eSight Network Management Platform- Mandatory for eSight Network Management

1
Standard Platform

Ordering information for eSight Network professional edition

Item Quantity Remarks

eSight Network Management Platform- Mandatory for eSight Network Management

1
Professional l Platform
11 | Huawei eSight Network Full Product Datasheet

eSight Network Device

Manager

Product Overview
Manages network devices and provides the IP topology and link management functions for monitoring the network
topology and changes in real time.
Provides the smart configuration tool, configuration file management, and device software management to update
configuration files and software versions.

Features
eSight Network monitors terminals connected to the network devices to prevent unauthorized users from consuming
network resources.
• Terminal resource management: eSight Network provides comprehensive terminal access records, including MAC,
IP address, device name, and port number, helping administrators find the switch and port on the switch through
which a terminal is connected to the network. Administrators can configure the authorized terminal IP address, MAC
address, and PORT-IP, PORT-MAC, and IP-MAC matching rules. When a terminal accesses the network illegally, eSight
Network sends emails and records comprehensive information about the illegal terminal, providing the basis for
audits of illegal users.

eSight Network supports wired and wireless convergence management.

• Unified configuration for wired and wireless services: eSight Network supports the unified configuration of wired
and wireless services based on the service matrix (including resource groups and service profiles), improving
configuration efficiency. When a device goes online, the device is automatically added to the specified resource group
and is granted with the corresponding policies. Plug-and-play is therefore implemented.
 Huawei eSight Network Full Product Datasheet | 12

• Unified management on wired and wireless users: eSight Network monitors wired and wireless users in a unified
manner. When associated with WLAN Manager, eSight Network can quickly rectify faults on wireless users.

• Display of wired and wireless devices on one panel: Based on super virtual fabric (SVF) technology, eSight Network
manages multiple access and aggregation switches as one switch. Information about access switches, APs, and
users is displayed on one panel.

Simple and convenient daily maintenance operations and lower technical requirements improve work efficiency.
• Intelligent configuration: eSight Network is preconfigured with multiple common service configuration templates.
Users can select an appropriate template to perform the same configurations on devices in a batch or use a file to
perform configurations on groups of devices in a batch.
• Configuration file management: Configuration files for multiple devices can be backed up, compared, and
restored. The backup function includes immediate backup and periodic backups, and backups triggered by device
configuration changes. When the device configuration changes, eSight Network can trigger alarms and send alarm
notification through email.
13 | Huawei eSight Network Full Product Datasheet

• MIB management: eSight Network provides Management Information Base (MIB) compilation, loading functions and
Get, GetNext, Walk, and TableView operations.
• Supports device software upgrade and management.
• Compliance check: eSight Network supports to create, delete, modify and view the compliance check tasks.The tasks
can be executed immediately and periodically.When compliance check fails, eSight Network can trigger alarms.

eSight Network supports unified VLAN resource management.

eSight Network allows administrators to create and delete VLAN resources, deliver VLAN configurations, view resources
in the VLAN topology, and collect VLAN statistics on the entire network.
• VLAN resource management: eSight Network displays VLAN resources on the entire network. Administrators can
add, delete, and modify VLANs, and view devices and interfaces whose packets can pass through the specified VLAN.
When administrators delete a VLAN, eSight Network can display all devices and interfaces related to the VLAN to
prevent misoperation.
• VLAN device management: eSight Network allows administrators to perform interface and VLAN configurations for
multiple devices in a batch and can quickly switch to the NE manager. Administrators can view, add, and modify VLAN
information on the device panel of the NE manager and can also configure voice VLANs.
• Visible VLAN topology: eSight Network can filter device and link information based on the VLAN. Administrators can
add or remove multiple devices and links to a VLAN. eSight Network can also filter MSTP loop prevention flags based
on the VLAN.

Operating Environment
eSight Network Device Manager is installed on the same server as eSight Network Management Platform standard or
professional edition; therefore, the operating environment configuration requirements are the same.

Deployment Scenarios
Deployment scenarios for eSight Network Device Manager are the same as those for eSight Network Management
Platform.
 Huawei eSight Network Full Product Datasheet | 14

Ordering Information
Ordering information for eSight Network standard edition

Item Quantity Remarks

eSight Network Management Platform- Mandatory for eSight Network Management

1
Standard Platform

eSight Network Device Manager(includes 60

1 Mandatory for eSight Network Device Manager
devices license)

eSight Network Standard NMS License (for 25

Optional One license manages 25 incremental devices.
incremental devices)

eSight Network Standard NMS License (for 50

Optional One license manages 50 incremental devices.
incremental devices)

eSight Network Standard NMS License (for 100

Optional One license manages 100 incremental devices.
incremental devices)

eSight Network Standard NMS License (for 200

Optional One license manages 200 incremental devices.
incremental devices)

eSight Network Standard NMS License (for 300

Optional One license manages 300 incremental devices.
incremental devices)

eSight Network Standard NMS License (for 500

Optional One license manages 500 incremental devices.
incremental devices)

eSight Network Standard NMS License (for One license manages 1,000 incremental
Optional
1,000 incremental devices) devices.

Ordering information for eSight Network professional edition

Item Quantity Remarks

eSight Network Management Platform- Mandatory for eSight Network Management

1
Professional Platform

eSight Network Device Manager(includes 60

1 Mandatory for eSight Network Device Manager
devices license)

eSight Network Professional NMS License (for

Optional One license manages 50 incremental devices.
50 incremental devices)

eSight Network Professional NMS License (for

Optional One license manages 100 incremental devices.
100 incremental devices)

eSight Network Professional NMS License (for

Optional One license manages 200 incremental devices.
200 incremental devices)

eSight Network Professional NMS License (for

Optional One license manages 300 incremental devices.
300 incremental devices)

eSight Network Professional NMS License (for

Optional One license manages 500 incremental devices.
500 incremental devices)

eSight Network Professional NMS License (for One license manages 1,000 incremental
Optional
1,000 incremental devices) devices.
15 | Huawei eSight Network Full Product Datasheet

eSight Network Agile

Reporter
Product Overview
Huawei eSight Network Agile Reporter analyzes report data from multiple dimensions and allows users to flexibly drag
required content to be contained in reports, implementing complex query from Big Data. It displays reports in an easy-
to-understand manner.

Features
eSight Network quickly generates reports in drag-and-drop mode, meeting requirements in specific scenarios.
• Measurement counters of various dimensions are predefined on eSight Network. Users can drag them to the
corresponding lines or columns based on actual needs to generate customized reports.

• eSight Network supports data update in real time. It updates the query results in real time based on selected search criteria.
• Users can create, delete, edit, and execute scheduled reports.

eSight Network displays abundant data and provides data analysis capability to meet statistics requirements.
• Supports functions such as sorting, filtering, classification, and slicing, without secondary processing of Excel.
 Huawei eSight Network Full Product Datasheet | 16

• Supports year-on-year and month-on-month data comparison to accurately evaluate the service change trend.

• Supports visible real-time monitoring and multiple display modes, including the line chart, bar chart, and pie chart.

eSight Network dynamically displays multi-dimensional data to facilitate quick data analysis.
• Supports details statistics, Top N sorting, threshold setting, and table-chart conversion.
• Supports space dimensions including NE, subnet, and region, and links, cards, APs, SSIDs, and radios.
• Supports comprehensive report statistics, such as interface information statistics (interface status, interface
traffic, and interface performance), device resource usage statistics (CPU and memory), and wireless resource usage
statistics (access users, AP traffic, AP rate, AP access failure, air interface usage, and AP radio frequency).

Operating Environment
eSight Network Agile Reporter is installed on the same server as eSight Network Management Platform standard or
professional edition; therefore, the operating environment configuration requirements are the same.

Deployment Scenarios
Deployment scenarios for eSight Network Agile Reporter are the same as those for eSight Network Management
Platform.

Ordering Information
Item Quantity Remarks

eSight Network Management Platform-

Standard Or Mandatory for eSight Network Management
1
eSight Network Management Platform- Platform
Professional

eSight Network Device Manager(includes 60

1 Mandatory for eSight Network Device Manager
devices license)

eSight Network Agile Reporter 1 Mandatory for eSight Network Agile Reporter
17 | Huawei eSight Network Full Product Datasheet

eSight Network SLA

Manager
Product Overview
Currently, most IP networks use coarse-grained bandwidth management polices and do not have quality monitoring
or guarantee mechanisms. Therefore, IP networks provide only connectivity and cannot ensure good user experience.
Users often experience service quality issues such as video pixelation, fuzzy voice, slow network access, and slow
response of cloud desktop. However, the networks and network administrators are unaware of these issues because
there is no system to monitor service quality on the entire network. Administrators try to locate network problems only
after receiving complaints from users. However, it often takes a long time to locate and solve a problem due to lack of
real-time monitoring mechanisms and effective problem location methods. This problem location process is inefficient
and severely affects user experience.
Huawei eSight Network SLA Manager implements visible monitoring on network quality by combining the following
methods: simulation flow-based and real service flow-based network quality detection.
Huawei eSight Network SLA Manager monitors network quality using simulation flows by integrating with the devices'
NQA function to diagnose and measure link performance between network devices 24 hours a day and displays QoS
statistics. Administrators can set the QoS threshold, and eSight Network notifies administrators remotely when QoS
reaches the threshold. Administrators can use the quick diagnosis function to monitor link performance in real time
and diagnose faults, which improves management efficiency.
Huawei eSight Network SLA Manager implements network quality detection based on iPCA, which is the industry's first
multiple-input-multiple-output quality measurement technology and solves the N2 connection problem in traditional
point-to-point quality measurement technologies. iPCA technology uses the enhanced area-based packet conservation
mechanism to monitor the quality on a connectionless network and also provides accurate fault location capabilities.

Features
The network quality emulation test helps users discover network quality problems in advance.
• Service-oriented SLA and easy operation simplify O&M needs. Users can create an SLA service to carry out E2E
network QoS monitoring and evaluate network and service QoS based on SLA compliance. eSight Network has more
than 20 SLA service configuration items for video, audio, and network applications, allowing customers to define SLA
services to meet their unique requirements.
 Huawei eSight Network Full Product Datasheet | 18

• eSight Network SLA Manager displays network QoS statistics and generates alarms in advance to ensure user
experience. After a user creates an SLA task, it will be executed periodically. QoS statistics are displayed based
on daily compliance. When QoS meets the threshold conditions, eSight Network notifies administrators remotely,
enabling administrators to diagnose faults in advance to ensure user experience.

• eSight Network SLA Manager provides a quick diagnosis function to narrow the fault scope and shorten fault
diagnosis time. The quick diagnosis function helps users locate faults by link segments, narrowing the fault scope.

• Visible historical network data provides a basis for network optimization. In actual applications, QoS values indicate
services of different priorities. Different services on a same link can be compared, and the result shows whether QoS
on a network has taken effect and provides a basis for QoS policy adjustment.

eSight Network SLA Manager provides real-time QoS monitoring, multi-dimensional data analysis, and graphical
data display.
eSight Network uses the unified dashboard panel to vividly display QoS information, simplifying network management.
The dashboard displays and manages various QoS information in a centralized manner to administrators, informing
them of bandwidth usage and network exception information in real time. The QoS information includes top bandwidth
usage, top discarding rate, top Peak Information Rate (PIR), and top matching rate.

eSight Network supports network quality detection based on real service flows.
• Device- or link-level measurement
After iPCA is enabled for agile devices and links in batches, quality status of devices and links is clearly displayed in the
topology. When the device or link quality threshold is exceeded, an alarm is generated and reported to the administrator
in a timely manner.
19 | Huawei eSight Network Full Product Datasheet

Users can further view real-time data on devices and links as well as packet loss in a port queue or on a port with the
specified MAC address.

• Network-level measurement
Network-level measurement targets an area to implement visible monitoring on the area network quality.

Path hop-by-hop detection can locate the node or link where packets are lost in an area.
 Huawei eSight Network Full Product Datasheet | 20

Operating Environment
eSight Network SLA Manager is installed on the same server as eSight Network Management Platform standard or
professional edition; therefore, the operating environment configuration requirements are the same.

Deployment Scenarios
Deployment scenarios for eSight Network SLA Manager are the same as those for eSight Network Management
Platform. Source devices must be added to eSight Network, and the IP addresses of the source and destination devices
can be pinged.

Ordering Information
Item Quantity Remarks

eSight Network Management Platform-

Standard Or Mandatory for eSight Network Management
1
eSight Network Management Platform- Platform
Professional

eSight Network Device Manager(includes 60

1 Mandatory for eSight Network Device Manager
devices license)

eSight Network SLA Manager 1 Mandatory for eSight Network SLA Manager
21 | Huawei eSight Network Full Product Datasheet

eSight Network Traffic

Analyzer

Product Overview
Fast and stable access speeds improve office work efficiency, while low access speeds can negatively affect
productivity. Administrators must determine which applications consume the most bandwidth and generate heavy
traffic, and which employees use these applications, and then change the network QoS policy and expand the network
when necessary.
eSight Network Traffic Analyzer (NTA) analyzes network traffic based on NetFlow, NetStream, and sFlow protocols. This
helps network administrators monitor traffic and bandwidth usage on enterprise campus egress and wireless campus
networks, generate traffic analysis reports, and detect network bottlenecks in a timely manner, providing evidence for
network planning and fault diagnosis.

Features
eSight Network Traffic Analyzer supports mainstream network traffic protocols, including NetStream, NetFlow, and
sFlow.
Figure 10-1 shows the customized dashboard that displays network status.
Customized dashboard
 Huawei eSight Network Full Product Datasheet | 22

• Multiple dimensions: eSight Network Traffic Analyzer ranks the traffic on devices and interfaces, including interface
usage, application, host, session, and Differentiated Services Code Point (DSCP) traffic.
• Customization: eSight Network Traffic Analyzer allows users to customize the presented content, format, and
formatting style and supports partial traffic updates without changing the Graphical User Interface (GUI).
• The interface traffic and usage rankings display interface traffic statistics, including the incoming and outgoing rate
and incoming and outgoing data packets. Clicking an interface will reveal information about the traffic composition
at different times, in multiple dimensions, including the application, host, session, and DSCP.

Customized Traffic Applications and Group Network Traffic

Customization options for traffic applications and group network traffic, as follows:
• Customized applications
• Customized DSCP group
• Customized application group
• Customized IP address group or interface group

Customized Applications
eSight Network Traffic Analyzer components are recognized based on the protocol and port number, and hundreds of
standard applications and common Layer 4 applications are preset. Protocols and port numbers can also be added for
unknown applications, and network administrators can add applications as required. Users can customize applications
based on the specified protocol, port number, and IP address ranges.

Customized DSCP Group

DSCP group is a logical group, and users can create a group to differentiate DSCP composition. For example, in WAN QoS
monitoring, users can create a voice group (EF), a video group (AF31), and a group for the other DSCP; therefore, eSight
Network Traffic Analyzer can provide a reference for proper enterprise QoS bandwidth and key service bandwidth
planning.

Customized Application Group

Create application groups as required to obtain comprehensive information about specific applications. For example,
create an application group named Mail Service, and combine Lotus Notes, pop3, and SMTP applications into the group
to learn mail application traffic.

Customized IP Address Group or Interface Group

Users can consider the IP addresses or interfaces in a certain range as a whole to calculate traffic statistics. For
example, assume that an enterprise has two floors and the total enterprise traffic must be calculated. Simply combine
all switch interfaces on the two floors into an interface group and analyze the total traffic.

Monitoring Multi-dimensional Traffic with Simple Configuration

• Overall network traffic analysis depends on high performance traffic analysis. Network administrators need only add
a monitoring interface and configure the traffic sampling ratio before monitoring and analyzing interface traffic from
multiple dimensions, including the following:
* Interface traffic analysis
* Application traffic analysis
* Source/Destination host traffic analysis
* DSCP traffic analysis
* Session traffic analysis

Users can analyze traffic on the traffic trend diagram, which displays traffic and packets, respectively, on two
coordinates.
23 | Huawei eSight Network Full Product Datasheet

• eSight Network can work with Huawei devices to intelligently analyze bandwidth distribution of dynamic port
applications, such as common P2P applications BT and eMule, and other websites.

• eSight Network can work with Huawei WLAN devices AC6005, AC6605 and ACU2 to display application traffic
distribution of enterprise wireless campus networks and allow users to obtain the application development status in
different regions.

• Device traffic analysis allows users to view the traffic trend and distribution of a single device. eSight Network
can identify applications transmitted by the device, source and destination hosts, DSCP traffic distribution, and
NetStream-enabled interface traffic on the device.
 Huawei eSight Network Full Product Datasheet | 24

Interface Traffic Analysis

25 | Huawei eSight Network Full Product Datasheet

Interface traffic analysis checks the traffic trend for a specified interface, time range, and incoming and outgoing traffic.
Based on interface traffic analysis, network administrators can identify the interfaces that are used most frequently on
the network to gain a comprehensive understanding of the entire network status. Administrators can detect interfaces
with abnormal traffic and locate faults before network performance is affected.

Application Traffic Analysis

Application traffic analysis checks the trend in application changes for a specified interface, time range, and incoming
and outgoing traffic. Administrators can locate the host that causes performance problems based on the source
ranking and destination hosts using a specific application.

Source/Destination Host Traffic Analysis

Source/destination host traffic analysis checks the trend in source/destination host bandwidth usage changes for a
specified interface, time range, and incoming and outgoing traffic. Based on source/destination host analysis, network
administrators can identify the host that consumes high bandwidth and solve any bandwidth problems in a timely
manner to ensure bandwidth usage efficiency.

Session Traffic Analysis

Session traffic analysis checks the trend of session traffic for a specified interface and time range. Session traffic
analysis provides detailed session information the network administrator can use for further fault location.

DSCP Traffic Analysis

DSCP traffic analysis checks the DSCP traffic trend for a specified interface and time range, ensuring proper QoS
bandwidth planning and the quality of key services.

Group Traffic Analysis

Group traffic analysis displays the DSCP group, interface group, application group, and IP group traffic statistics on
specified interfaces within a specific time range. Network administrators can conveniently analyze specific traffic as
required to satisfy special maintenance requirements.

Threshold Value Alarm

eSight Network allows administrators to set traffic threshold values for applications and hosts. When the number of
times that the monitored value exceeds the threshold values within a specified time reaches the preset value, eSight
Network sends alarm notifications through email.

Customized Traffic Report

eSight Network Traffic Analyzer can customize reports by specifying filtering rules, report type, and report layout
configuration. Traffic reports provide references for further network planning.
 Huawei eSight Network Full Product Datasheet | 26

Original Data Stream Facilitates Fault Location

NTA can extract an original data stream based on a specified time range and filtering rules for further analysis and
fault location. Original traffic information includes the router, source, and destination address, application, source and
destination port, protocol, TCP flag, next hop, inbound and outbound interface, and DSCP, traffic, and data packets.
Users can create traffic investigation tasks for suspected abnormal traffic on the NTA page to extract original data
stream information about the current traffic.

Operating Environment
eSight Network Traffic Analyzer can be deployed on the same server as eSight Network Management Platform standard
or professional edition, or on a different one. When they are configured on one server, they can manage no more than 10
NEs, and the configuration requirements are the same as those of the platform. When they are configured on different
servers, configuration requirements are as follows:
27 | Huawei eSight Network Full Product Datasheet

Operating System Configuration Requirement

CPU: 2 x hexa-core 2 GHz or higher

Memory: 32 GB or higher
Disk space: 600 GB or higher
Windows Server 2012 R2 standard (64
Database: Microsoft SQL Server 2012 standard, Oracle Database
bits), Novell SUSE Linux Enterprise Server
Standard Edition 11g R2
12.0 SP2

PC servers are recommended.

Determine the hardware specifications based on the network scale.

When eSight Network Traffic Analyzer and eSight Network Management Platform are deployed on different servers,
eSight Network Traffic Analyzer can be deployed on a VM when the number of nodes is less than 100. VM resource
requirements are as follows:

Operating System Resources Required by a VM

VMWare ESXI 5.0/5.5, FusionSphere V1R5,Hyper-V

CPU: 16 vCPU 2 GHz or higher
Memory: 32 GB or higher
Windows Server 2012 R2 standard (64 Disk space: 600 GB or higher
bits), Novell SUSE Linux Enterprise Server Database: Microsoft SQL Server 2012 standard, Oracle Database
12.0 SP2 Standard Edition 11g R2

PC servers are recommended.

Determine the hardware specifications based on the network scale.

Deployment Scenarios

Branch 1

WAN
Branch 1

eSight network traffic system

eSight Network Traffic Analyzer enables NetStream on an enterprise's WAN-link device interfaces to send traffic
information to the eSight Network Traffic Analyzer. eSight Network NTA provides the following functions in this scenario:
• Analyzes the current WAN link traffic composition.
• Helps recognize abnormal traffic and junk applications.
• Quickly locates the IP address of the terminal generating abnormal traffic.
• Optimizes link application traffic distribution.
• Improves WAN link usage.
• Recognizes DSCP bandwidth distribution on the enterprise branch egress.
• Adjusts service priority policies.
• Periodically generates a link interface traffic report.
• Detects network application traffic increase.
• Facilitates advance network planning and expansion.
 Huawei eSight Network Full Product Datasheet | 28

Ordering Information
Item Quantity Remarks

eSight Network Management Platform-

Standard Or Mandatory for eSight Network Management
1
eSight Network Management Platform- Platform
Professional

eSight Network Device Manager(includes 60

1 Mandatory for eSight Network Device Manager
devices license)

eSight Network Traffic Analyzer 1 Mandatory for eSight Network Traffic Analyzer

eSight Network NTA License-Incremental 1

Optional One license manages one incremental device.
Device License

eSight Network NTA License-Incremental 2

Optional One license manages two incremental devices.
Devices license

eSight Network NTA License-Incremental 5

Optional One license manages five incremental devices.
Devices license
29 | Huawei eSight Network Full Product Datasheet

eSight Network WLAN

Manager

Product Overview
With network development, Wireless Fidelity (Wi-Fi), a low-cost and highly efficient network deployment and
maintenance mode, has been widely recognized by customers. However, Wi-Fi's high requirements on the environment
and distributed deployment of a large number of ACs and APs on WLAN networks make maintenance costly and
difficult; therefore, an easy-to-use and efficient WLAN management system is the key to ensure enterprise E2E
operations.
Huawei eSight Network WLAN Manager integrates the management of wired and wireless networks, supporting full
lifecycle WLAN management, including visible planning (highly-efficient WLAN planning with professional tools), fast
service provisioning in three steps, active O&M, all-round quality awareness regionally or globally. It provides search-
centric E2E one-click fault diagnosis, interference source locating, and spectrum analysis to implement highly efficient
troubleshooting. It also provides position-based terminal location, behavior analysis, and northbound interfaces to
achieve mutual benefits from the wireless network.

Features
Unified Wired and Wireless Management
In eSight Network physical topology, users can monitor switches, routers, and security, IT, H3C, Aruba, and Cisco devices
in a unified manner. Through centralized management of wired and wireless devices, such as ACs, Power over Ethernet
(PoE) switches, and Fat APs, users can directly view device connections, status, and alarms on the entire network.

Visible Network Planning, File Generating Through the WLAN Planner

Provides the network planning tool to import location pictures including the regional background pictures, scale, obstacles,
Bluetooth Beacon, and pre-deployed APs to the WLAN topology.

Deploying Services on Wireless Devices in Batches, Improving Management Efficiency

Quickly provisions services in three steps using AP group-based matrix. This function provides profile-based configuration for
WLAN devices of V2R6 and later versions.
 Huawei eSight Network Full Product Datasheet | 30

• After ACs and X7 series switches are automatically discovered and added to eSight Network, users can use
configuration profiles to complete basic configurations for the ACs and X7 series switches. The configurations include
VLANIF interfaces, address pools for establishment of service channels and management channels, and channel
configuration for interface groups.

• Global AC configuration: Users can set global parameters for the ACs.

• Service configuration: eSight Network provides pre-defined profiles based on the AP group to quickly provision
WLAN services, improving configuration efficiency. eSight Network displays the relationships between AP groups and
profiles in the matrix. AP group profiles apply to multiple ACs.
31 | Huawei eSight Network Full Product Datasheet

• Various VAP and radio profiles are preset and can be used repeatedly to improve the configuration efficiency.
Parameters in the profiles are set based on administrators' experience, facilitating similar configurations by other
administrators.

Various Topology Views Show Wireless Network Status in Different Dimensions

Location topology: WLAN Manager can deploy APs and Beacon to different areas in the physical topology and display
hotspots to help maintenance personnel discover radio signal coverage holes and channel collision areas. It supports
locating users, unauthorized devices, and interference sources, and displays historical track and Beacon information.
Administrators can determine whether to display or hide users of a specified area, rogue APs, unauthorized users, and
interference sources.
 Huawei eSight Network Full Product Datasheet | 32

• Frequency spectrum analysis: Users can obtain the channel quality and interference source information from
spectrograms, which contain real-time, in-depth, channel quality, and channel quality trend grams, and device duty
cycle.

Comprehensive monitoring: all-round quality awareness regionally or globally

Region monitor makes user experience visible. eSight Network cleans original performance data by region, and
dynamically cleans data by the levels of monitored indicators to generate proportion tables.
33 | Huawei eSight Network Full Product Datasheet

eSight Network integrates region-based user experience data to provide wireless signal coverage and interference
distribution information by floor, helping IT personnel identify coverage holes and obtain interference information. In
this way, Top 3% to Top 22% of WLAN problems can be quickly solved.

The region monitor function provides a list of abnormal indicators to display abnormal indicators from various
dimensions and provide troubleshooting suggestions, allowing users to view the trend of abnormal indicators.
 Huawei eSight Network Full Product Datasheet | 34

For a non-bottom-layer region, you can set a GIS map as the subnet background. In addition, you can zoom in or out the
map, move the map, and set locations on the map.
35 | Huawei eSight Network Full Product Datasheet

Wireless Network Security Detection

The Wireless Intrusion Detection System (WIDS) monitors intrusion devices and non–Wi-Fi interferences and provides
frequency spectrum analysis features.
• WIDS management: The WIDS manages wireless network interferences in different categories. Interferences are
classified based on user customized rules. Upon detecting an interference, the WIDS chooses whether to generate an
alarm based on user alarm configurations. The WIDS can also take countermeasures for unauthorized devices.

Search-based One-Click Fault Diagnosis, Quickly Locating Faults

• Quick network fault locating: Diagnose network quality from four aspects, including user, SSID, AP, and AC. List
possible problems and give corresponding solutions to help troubleshooting. (Note: This function applies to WLAN
V2R6 and earlier versions only.)
• After a user reports a fault, eSight Network quickly locates the user from a large number of users to start E2E one-
click fault diagnosis.
 Huawei eSight Network Full Product Datasheet | 36

In addition to fault diagnosis functions as well as Syslogs and performance data, eSight Network provides diagnosis
tools to help network administrators troubleshoot wireless network O&M problems, such as end user login failures,
frequent logout, and poor signal. (This function applies to WLAN devices running V200R006 and later versions.)

WLAN Location
• User Location with High Precision and Low Delay
Based on the three-point location and fingerprint location algorithms which are widely used in the industry, eSight
Network innovatively offers the patented PAIRS location algorithm which greatly reduces the impact of the transmit
power difference on the location precision. eSight Network also provides the fingerprint collection tool to import signal
strength eigenvalues measured at fingerprint points to eSight Network, so that more precise location results can be
obtained. Additionally, the location update interval can be customized based on requirements in different scenarios. A
large number of tests verify that the terminal location precision can reach 3 to 5 meters and the location delay can
reach 3 seconds in an ideal situation.
The Bluetooth location SDK provides the high-precision location terminal location solution, allowing third parties to carry
out secondary development and implement applications of high-precision location, such as indoor navigation and car
navigation. eSight Network can monitor the Beacon status on the entire network through interconnection with the AP
with built-in Bluetooth module. It is verified that Bluetooth supports 1 m high-precision location and the delay is within
1s.
In addition, eSight Network supports Bluetooth tag-based location with the accuracy of 3 m to 5 m. eSight can play
historical tracks of Bluetooth tags with a preset or user-defined time range.

• Real-time Customer Distribution

WLAN location can be used to obtain location information about all users in a Wi-Fi coverage area. Based on the
location information, eSight Network can intuitively present the distribution of people, that is, the heat map.
39 | Huawei eSight Network Full Product Datasheet

• Open Interfaces Provided to Construct a Win-Win Ecosystem with Third Parties

Huawei sticks to the integration strategy and provides open interfaces for integration. eSight Network can send user
location information, including subscription to notifications of customer entry or leaving, to third-party systems, so that
precision marketing can be implemented for target customer groups. Different advertisements and coupon information
are pushed to users in different areas. This brings benefits for users, enhances their shopping experience, and improves
the efficiency of targeted marketing methods. Based on user location information, Huawei partners can develop apps
with business values, such as store navigation and car seeking.

Quick Service Adjustment, Covering Hotspots and Optimizing Radio Frequency

If a coverage hole exists on the network, users can use eSight Network WLAN Manager to quickly deploy services on
new APs to cover hotspots.

When a carrier's APs or private APs occupy the planned channels and interfere with APs on the live network, users can
use eSight Network WLAN Manager to quickly change the channel if negotiation is unavailable.
 Huawei eSight Network Full Product Datasheet | 40

Quick AP Fault Diagnosis

eSight Network can restart, replace, and restore APs to factory settings in a batch.
• During WLAN network debugging or when APs are faulty, users can remotely restore APs to factory settings in a batch.
• During WLAN network debugging or when APs are upgraded, users can remotely restart APs in a batch.
• If an AP is faulty, users can quickly replace the AP in eSight Network. The replacement does not affect AP configurations.

Multi-dimensional Energy-saving Management

• Energy-saving policies based on locations are defined to disable wireless signals by radio, SSID, or AP to implement
energy-saving management.
• Energy-saving policies are executed immediately or periodically.

Resource Statistics Meeting O&M Requirements

• Entire-network resource statistics: An online user line chart shows the top five accessed fit APs and SSIDs, top five
device alarms, and physical resource statistics on the entire network.
• AC statistics: A line chart shows statistics about online users collected by the AC, including AP and domain
information and the top five AC alarms.
• AP statistics: Shows the top five AP alarms and performance counters (including the number of terminals connected
to APs, AP physical attributes and traffic, and radio traffic).
• SSID statistics: Shows the number of APs, number of VAPs, and number of terminals connected to APs.
• Region and location statistics: Displays the total number of APs, number of online APs, and number of online STAs by
region and location.
41 | Huawei eSight Network Full Product Datasheet

Operating Environment
eSight Network WLAN RTLS can be deployed on the same server as eSight Network Management Platform standard or
professional edition, or on a different one. When they are configured on one server, they can manage no more than 500
APs of standard edition or 1000 APs of professional edition, and the configuration requirements are the same as those
of the platform. When they are configured on different servers, configuration requirements are as follows:

Virtual machine Configuration

Managed Nodes Operating System Server Configuration Requirement
Requirement

VMWare-ESXI 5.0/5.5、
CPU: 2 x hexa-core 2GHz or higher FusionSphere V1R5、Hyper-V
Memory: 32 GB or higher CPU: 16vCPU 2GHz or higher
Disk space: 600 GB or higher Memory: 32 GB or higher
WLAN RTLS AP
Database: Microsoft SQL Server 2012 Disk space: 600 GB or higher
numbers:
standard, Oracle Database Standard Database: Microsoft SQL Server 2012
0-2000
Edition 11g R2 standard, Oracle Database Standard
Terminal
Edition 11g R2
numbers: 24000
PC servers are recommended.
Windows Server Determine the hardware specifications Determine the hardware
2012 R2 standard based on the network scale. specifications based on the network
(64 bits), Novell scale.
SUSE Linux VMWare-ESXI 5.0/5.5、
Enterprise Server FusionSphere V1R5、Hyper-V
12.0 SP2 CPU：4 x octa-core 2GHz or higher
CPU: 32vCPU 2GHz or higher
Memory: 64GB or higher
Memory: 64GB or higher
WLAN RTLS AP Disk space: 600GB or higher
Disk space: 600GB or higher
numbers: 2000- Database: Microsoft SQL Server 2012
Database: Microsoft SQL Server 2012
5000 standard, Oracle Database Standard
standard, Oracle Database Standard
Terminal Edition 11g R2
Edition 11g R2
numbers: 64000
Determine the hardware specifications
Determine the hardware
based on the network scale.
specifications based on the network
scale.

Deployment Scenarios

eSight AR

WAN

AC
 Huawei eSight Network Full Product Datasheet | 42

Ordering Information

Item Quantity Remarks

eSight Network Management Platform-

Standard Or Mandatory for eSight Network Management
1
eSight Network Management Platform- Platform
Professional

eSight Network Device Manager(includes 60

1 Mandatory for eSight Network Device Manager
devices license)

eSight Network WLAN Manager (includes 5 APs) 1 Mandatory

eSight Network WLAN License-Incremental 5

Optional One license manages 5 incremental APs
AP Licenses

eSight Network WLAN License-Incremental 50

Optional One license manages 50 incremental APs.
AP Licenses

eSight Network WLAN License-Incremental 100

Optional One license manages 100 incremental APs.
AP Licenses

eSight Network WLAN License-Incremental 200

Optional One license manages 200 incremental APs.
AP Licenses

eSight Network WLAN License-Incremental 500

Optional One license manages 500 incremental APs.
AP Licenses

eSight Network WLAN License-Incremental

Optional One license manages 1,000 incremental APs.
1,000 AP Licenses

eSight Network WLAN License-Incremental

Optional One license manages 2,000 incremental APs.
2,000 AP Licenses

eSight Network WLAN License-Incremental

Optional One license manages 5,000 incremental APs.
5,000 AP Licenses

eSight Network WLAN Real-Time Location WLAN location function for interference
Optional
System (RTLS) sources, rogue devices, and terminals

eSight Network WLAN RTLS-5AP Optional One license manages 5 incremental RTLS APs.

eSight Network WLAN RTLS-25AP Optional One license manages 25 incremental RTLS APs.

eSight Network WLAN RTLS-50AP Optional One license manages 50 incremental RTLS APs.

One license manages 100 incremental RTLS

eSight Network WLAN RTLS-100AP Optional
APs.

One license manages 500 incremental RTLS

eSight Network WLAN RTLS-500AP Optional
APs.

One license manages 1000 incremental RTLS

eSight Network WLAN RTLS-1000AP Optional
APs.

To use the WLAN location function, the eSight

eSight Network WLAN RTLS API Optional
Network Open SDK component is required.
43 | Huawei eSight Network Full Product Datasheet

eSight Mobile Manager

Product Overview
The rapid development of the Internet and wide application of Wi-Fi networks in various sectors, such as the
government, enterprise, finance, and education, increase O&M workloads and difficulties. Network O&M personnel
have to deal with an increasing number of network issues to ensure that customers can make the most of the
convenience of Wi-Fi networks.
The O&M personnel can only rectify network faults after receiving user reports and may fail to accurately locate faults.
In addition, troubleshooting is considerably complex and time-consuming. They urgently need a solution that can
simplify O&M, improve user satisfaction, and also guarantee enterprises' benefits.
Huawei eSight Mobile is an application that can be installed on mobile terminals. Providing multiple core features,
eSight Mobile allows operations and maintenance (O&M) personnel to manage Wi-Fi networks anywhere, anytime,
simplifying network management and control. As an extension to Huawei's PC-based network management software
eSight Network, eSight Mobile supports lightweight installation and more widespread applications, enabling
enterprises to perform O&M with minimum costs while yielding higher efficiency.

Features
360-degree WLAN Monitoring
eSight Mobile displays monitored key counters and provides optimization suggestions.
 Huawei eSight Network Full Product Datasheet | 44

Fault Diagnosis
eSight Mobile searches the user who reports a fault to quickly locate the fault cause, and checks user logs to determine
whether the problem is solved.

Region Monitor
eSight provides a region monitor app that can be installed on mobile terminals to monitor the WLAN network quality by
region.
• You can follow a region to monitor user experience information in the region, including the receive rate, association
success ratio, and user offline ratio. You can view detailed information about a region, including user experience
counters in this region and basic information about its lower-layer regions.
45 | Huawei eSight Network Full Product Datasheet

iPCA
eSight Mobile releases the iPCA application to provide the iPCA capability on mobile terminals. The application enables
users to create, manage, and view iPCA tasks and perform hop-by-hop network quality measurement on terminals.
iPCA task list and management on terminal

Open SDK, Building a Win-Win Ecosystem

eSight Mobile releases the open SDK to allow enterprises or third parties to develop their own applications based on
service needs, building a win-win ecosystem.

WLAN Evaluation
The WLAN evaluation function can rapidly test the connected wireless networks and score the networks. The function
can also deeply test the networks. You can configure the test items, and view, save, or export inspection records.
 Huawei eSight Network Full Product Datasheet | 46

Device Management
You can use your mobile phone to monitor status statistics of wired devices, expand the device list, and filter
information about a specified device. You can tap a specific device to view basic device information, health status, and
key performance indicators (KPIs). You can also perform ping and trace operations on a specific device.

Operating Environment
1. eSight Mobile Manager is installed on the same server as eSight Network Management Platform standard or
professional edition; therefore, the operating environment configuration requirements are the same.
2. The eSight Mobile app can be installed on the Android 4.2+ and IOS8.0+ system.

Deployment Scenarios
1. Deployment scenarios for eSight Mobile Manager are the same as those for eSight Network WLAN Manager.
2. The mobile phone on which the eSight Mobile app is installed must be able to communicate with the server where
WLAN Manager is installed.

Ordering Information

Item Quantity Remarks

eSight Network Management Platform-

Standard Or Mandatory for eSight Network Management
1
eSight Network Management Platform- Platform
Professional

eSight Network Device Manager(includes 60

1 Mandatory for eSight Network Device Manager
devices license)

eSight Mobile can be used for free, you can

eSight Mobile Manager 1 download from the mobile phone application
market or APP Store.
47 | Huawei eSight Network Full Product Datasheet

eSight Network
IPSec VPN Manager

Product Overview
Enterprises use the IPSec VPN network to carry service data, ensuring data security; however, IPSec VPN technology is
complex with multiple configuration parameters and commands, leading to troubleshooting and routine maintenance
difficulties.
The eSight Network IPSec VPN management component automatically discovers IPSec VPN services on a hub-spoke
or site-to-site network to provide all-round monitoring and diagnosis, facilitating troubleshooting and maintenance on
the IPSec VPN network.

Features
Various Statistics Display, Showing IPSec VPN Network Performance Status
 Huawei eSight Network Full Product Datasheet | 48

Automatic Service Discovery, Simplifying User Operation

eSight Network IPSec VPN Manager automatically discovers all or specified IPSec VPN services on a hub-spoke or site-
to-site network. Users can view service alarm status, encrypted service data direction, and packet loss information
on the service topology. Users can also view tunnel information and historical information about tunnel setup to help
locate service faults.

Quick Diagnosis, Improving Troubleshooting Efficiency

The quick diagnosis function allows users to find detailed causes for service faults, such as failure of activating
services and VPN faults. The following information can be diagnosed: interface status at two ends, whether IPSec
policies are applied to interfaces, whether the policies can initiate IPSec negotiation, IPSec policy integrity, Internet Key
Exchange (IKE) negotiation result, and IPSec negotiation result. Users can export diagnosis results.

Operating Environment
eSight Network IPSec VPN Manager is installed on the same server as eSight Network Management Platform standard
or professional edition; therefore, the operating environment configuration requirements are the same.

Deployment Scenarios
Currently, eSight Network supports two IPSec VPN networking scenarios: site-to-site VPN (point-to-point) and hub-
spoke VPN (point-to-multipoint).
49 | Huawei eSight Network Full Product Datasheet

• Site-to-site VPN
A site-to-site VPN implements communication between LANs; therefore, it is also called LAN-to-LAN VPN or gateway-
to-gateway VPN. Typical networking is shown below:

• Hub-spoke VPN
Hub-spoke VPN implements IPSec VPN communication between an enterprise headquarters and its multiple branches.
Typical networking is shown below:
 Huawei eSight Network Full Product Datasheet | 50

Ordering Information
Item Quantity Remarks

eSight Network Management Platform-

Standard Or Mandatory for eSight Network Management
1
eSight Network Management Platform- Platform
Professional

eSight Network Device Manager(includes 60

1 Mandatory for eSight Network Device Manager
devices license)

eSight Network IPSec VPN Manager (includes

1 Mandatory. One license manages 60 devices.
60 devices license)

eSight Network IPSec VPN License-Incremental

Optional One license manages 50 devices.
50 Devices license

eSight Network IPSec VPN License-Incremental

Optional One license manages 100 devices.
100 Devices license

eSight Network IPSec VPN License-Incremental

Optional One license manages 200 devices.
200 Devices license

eSight Network IPSec VPN License-Incremental

Optional One license manages 500 devices.
500 Devices license

eSight Network IPSec VPN License-Incremental

Optional One license manages 1,000 devices.
1,000 Devices license
51 | Huawei eSight Network Full Product Datasheet

eSight Network
Secure Center

Product Overview
eSight Network Secure Center provides security policy management functions (such as unified configuration and
deployment of security application policies on the entire network) for firewalls, helping users manage multiple security
devices in a unified manner and reducing security O&M costs.

Features
eSight Network Secure Center supports the unified configuration of security application policies.
eSight Network Secure Center centrally manages security application policies on firewalls,. Administrators can manage
security policies from multiple dimensions, such as user, user group, and device. They can create, modify, copy, move, enable,
disable, deploy, lock, unlock, batch import, and batch export security policies and manage policy groups. Secure Center also
supports global configuration of service-based policies and objects to simplify device configuration. In addition, administrative
domains are defined to grant administrators operation rights on different domains, isolating their managed data.

eSight Network Secure Center supports quick backup and restoration of policies and objects.
eSight Network Secure Center supports manual and automatic backup and restoration of firewall policies and objects.
After planning and deploying policies and objects, administrators can manually back up policies and objects or Secure
Center automatically backs up data periodically. Administrators can also compare backup data to determine the
one used for restoring network configurations. If incorrect data is planned and leads to abnormal service running,
administrators can quickly replace incorrect data on eSight with backup data and deliver the data to devices to ensure
that the network can quickly restore the normal status.
 Huawei eSight Network Full Product Datasheet | 52

eSight Network Secure Center supports configuration source tracing for users’ operations, to see the difference
between every operation.

eSight Network Secure Center supports virtual firewall management.

eSight Network Secure Center automatically detects virtual firewalls and configures security policies on them and can
configure and manage security policies on hundreds of virtual firewalls in a unified manner.

Operating Environment
eSight Network Secure Center is installed on the same server as eSight Network Management Platform standard or
professional edition; therefore, the operating environment configuration requirements are the same.

Deployment Scenarios
Deployment scenarios for eSight Network Security Center are the same as those for eSight Network Management
Platform.
53 | Huawei eSight Network Full Product Datasheet

Ordering Information

Item Quantity Remarks

eSight Network Management Platform-

Standard Or Mandatory for eSight Network Management
1
eSight Network Management Platform- Platform
Professional

eSight Network Device Manager(includes 60

1 Mandatory for eSight Network Device Manager
devices license)

Mandatory. The eSight Network Secure

eSight Network Secure Center (includes 5 Center provides basic functions of security
1
devices license) policy management, including five device
management licenses.

eSight Network Secure Center License- Optional

One license manages five incremental devices.
Incremental 5 Devices 0 to 600

eSight Network Secure Center License- Optional

One license manages 25 incremental devices.
Incremental 25 Devices 0 to 120
 Huawei eSight Network Full Product Datasheet | 54

HUAWEI
eSight
Network
55 | Huawei eSight Network Full Product Datasheet

More Information
For more information, visit http://enterprise.huawei.com/en.

Professional Service and Support

Huawei Professional Services provides expert network design and service optimization tasks, helping customers design
and deploy a reliable, secure, high-performance network, maximizing return on investment and reducing operational
expenses.

Company Addendum
For more information, visit http://enterprise.huawei.com/en/ or contact your local Huawei office.
Copyright © Huawei Technologies Co., Ltd. 2017. All rights reserved.
No part of this document may be reproduced or transmitted in any form or by any means without prior written consent
of Huawei Technologies Co., Ltd.

NO WARRANTY
Unless otherwise specified, all statements, information, and recommendations in this document are provided "AS
IS" without warranties, guarantees, or representations of any kind, either express or implied.
To the maximum extent permitted by applicable law, in no event shall Huawei Technologies Co., Ltd. be liable for any
special, incidental, indirect, or consequential damages, or lost profits, anticipated savings, business, revenue, data,
or goodwill.
Huawei Technologies Co., Ltd.
Huawei Industrial Base
Bantian, Longgang
Shenzhen 518129
People's Republic of China
Tel: +86 755 287 80808
Website: http://www.huawei.com.cn
 Huawei eSight Network Full Product Datasheet | 56

Copyright © Huawei Technologies Co., Ltd. 2017. All rights reserved.

No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei
Technologies Co., Ltd.

Trademark Notice
, HUAWEI, and are trademarks or registered trademarks of Huawei Technologies Co., Ltd.
Other trademarks, product, service and company names mentioned are the property of their respective owners.

General Disclaimer
The information in this document may contain predictive statements including,
without limitation, statements regarding the future financial and operating results,
future product portfolio, new technology, etc. There are a number of factors that
could cause actual results and developments to differ materially from those
expressed or implied in the predictive statements. Therefore, such information is
provided for reference purpose only and constitutes neither an offer nor an
acceptance. Huawei may change the information at any time without notice.