Slashdot Mirror
Complex Network Design Tools?
I'm-Not-A-BOFH asks: "How do you do your large scale network design? I am currently designing a large enterprise network - and there is a ton of information to track and think about. I use AutoCAD, Visio and Cisco Configmaker (which sucks) and many other applications. I am looking for software specifically designed to help you design a network.
What tools do you use - and what tools are out there that maybe are little known? How do you begin to manage network documentation when your hosts get into the thousands and your routers and routes into the hundreds? I am really just interested in the tools used to accomplish this - as all the tools I have been finding are just not adequate or well thought out. Please let me know what you think is invaluable to you when you design your systems."
http://www.research.att.com/sw/tools/graphviz/
http://www.lumeta.com/ipsonar.html
The whiteboard.
A good knowledge of networking protocols, etc.
The hardcore network engineer doesn't need diagrams - sh ip route, sh ip bgp, sh ip ospf, sh cdp neigh, sh arp, sh cam dyn, etc. (in Cisco-speak; there are equivalents for other vendors) are enough to visualize/plan/troubleshoot, quite frankly.
We use Netviz. It is data-driven and all the data for the diagrams can be stored in a database. Create one instance of a router, and that instance can appear in any of your diagrams with all of the properties, links and any number of user-defined attributes. Diagrams can be constructed in a hierarchy with drill-down-to-detail capability. Obviously, this is only one component of many you will need in the design process. It doesn't contain all the device specific config-checking tools that some other vendor-specifc tools have, but who needs those anyway?
Also, another set of tools that you might find useful is Opnet IT guru. If you need to model a proof of concept involving a complex network and application interaction, this can do it.
If you run a very Cisco-centric network (or totally Cisco) you can use IPAT Plus from WANDL. It takes Cisco router configs and builds a network model that can be used for reachability proof and various what-if scenarios.
Do I have to do all the work for you?
Opnet
I've been looking at this recently to see how different things will affect my network, since I can't really test them on the live network without making a lot of people and clients really mad. I have not used it yet though.
I prefer to design the network simply using Visio to get a good logical design, and then once that is down, I create another map with the physical layout. Worry about your routing protocols after you have figured out the best logical design (redundancy, required link speeds, etc.). Most network admins have a favorite routing protocol, which for most seems to be EIGRP with cisco equipment. I personally like OSPF because it offers enormous flexibility, and it works with equipment from vendors other than Cisco.
There's a fine line between an ingeniously designed network and something that is overly complex. It takes experience to figure out where that line is. If it seems like you are doing something screwed up, you probably are.
Need Free Juniper/NetScreen Support? JuniperForum
For something that complex, no single tool will do it for you. That said, consider doing your documents in layers. Having a single document that includes all of the gory details of such a large network will be useless. Instead, do a document that describes the high level architecture, then open up each cloud into another document and describe the network topology there, then open up those clouds into documents that get into individual host level information. It is the only reliable way to grow the diagram as necessary and make it possible for others to understand what is going on at a glance.
I generally use Visio for this sort of thing, but planning out a large network using an automated software tool is impossible, at least in my experience. If you can logically group your network at some level, you will find that it will make planning, and/or diagramming your network much easier. Even the largest networks are broken down into several groups at some level, and you have to keep those groups in mind. You should know the usage patterns of these groups, how much bandwidth each group needs, and where they connect to, etc. Logically map out the best performance scenario for these groups. Then start with your smallest groups, and find similarities to form larger groups, until you have encompassed the entire network. I'm assuming that there are probably departmental connections needed, as well as outside connections, but the key is how much each group of people use each resource available.
Many "well-planned" networks fail because they aimed to provide all resources evenly, but in the real-world, this is not the case. Most of the time, a certain group of people use specific resources, and use very little of other resources. Also keep in mind that you must be able to adapt if the resource requirements for a group change, because it will happen. It's the same thing as trying to use a database wizard to optimize your database. A computer just can't do that for you. The software doesn't have all the necessary input parameters to the problem, and even if it did, the problem is NP Hard. So, in reality, it doesn't matter what tool you use to diagram the network, but actual design still has to be done by human insight, or at least a well-trained monkey...
--That's the point of being root, you can do anything you want, even if it's stupid.
how do you get to the level of designing an enterprise network without already having the experience and the toolkit to accomplish your tasks? it seems you already have the tools that most people use to design networks. i have only used visio myself for no more than a network that supports 300 users (law firm) and for a community college computer lab with a mixed platform, with vlans for experimental router subnets for cisco classes and for teaching advanced system adminstration and programming on linux. i learned to use visio and it was adequate. how do these tools fail to scale? maybe provide some examples of where you are having trouble instead of just asking for some other tool. thanks for reading.
a slut did tulsa
If you want to make design, why head to cisco configmaker instead of cisco network designer ?
#include "coucou.h"
..nothing too complex.
As an ex-3Com employee, the network guys made extensive use of a whiteboard, followed by documenting what they'd done in Visio.
I doubt you'll get all information into one form of documentation; you'll most likely need various 'parts' of documentation.
This implies different tools for the job.
Surely a "real" engineer can pull all this together without the need for specific tools?
First, use visio to design your CORE network. This would include all your high bandwidth, long haul fibre links. Choose a routing protocol (ISIS and OSPF are what most carriers use). If you want to implement newer protocols like MPLS, you still need OSPF or ISIS to run underneath it. Your core network should be layer three only. Avoid using ATM links becuase they add an extra "layer 2.5".
Then, off of each core router, drop gig-e links off to your layer 2/3 routers. If redundancy is a huge issue (which is probabally is), you will probabally have two core layer 3 routers (probably cicso, juniper) with a small number of ports, and two layer 2/3 routers (riverstone, foundry, extreme) with a large number of layer two ports at each major location with gig-e multimode links btween them to provide extra redundancy. Before you go and buy everything, spend time testing this four router configuration (see how long it takes to reroute traffic when links go down). This is especially important if you ever intend on implementing VoIP on your new network.
All critical systems (DNS servers, domain controllers, application servers, VoIP gateways, database servers) should be on the layer 2/3 routers, not on the smaller routers underneath that most "end users" will be connected to throughout each location. Essentially the layer 3 routers are just for core routing, and the layer 2/3 routers will provide most of your functionality.
Once you have everything up and running, use SNMP to monitor your links (most SNMP management software draws your network for you, and it will draw nice broken links when links go down). Good SNMP software will map every network device on you network, as long as you configure SNMP on all your new nodes. Also, make sure you have a really cool NOC (Network Operations Center) with lots of LCD projectors and linux/unix workstations. Make sure you have a good naming convention for all your network links and routers.
Don't deploy at 100% capactiy immediately, run at 10% capacity then work your way up.Many unforseen problems WILL come up (Routers have more bugs than you can imagine). In the end, you will probably have a nice buildingwide, statewide, nationwide, or worldwide modern next-generation (VoIP etc) capapable network.
-n
Google wasn't very helpful, I found. Mostly I saw a lot of marketing language written by people who don't really understand what they are writing and are bored by it, anyway.
Along this line of thought, is there a product out there that is a full network simulator? Meaning, can I put routers A, B, and C in my diagram, with A linked to B, and A linked to C. Router A runs BGP between these two connections. Is there software out there to where I could put a simulated load on the router, then virtually "cut" one of the links to see what would happen and how it would affect the other link? What if one of the links' latency spiked? Using BGP with two links is a pretty easy example, but you get the idea. It would be a great teaching tool, as well.
Ideally, Cisco would make a tool like this, so you could tweak the virtual BGP (or MLPPP, OSPF, RIP, STP, etc) configs on the routers, but I haven't seen one on their site.
Visio Enterprise has many a tool set that will both allow theoretical design and actual representation of a network and it's content. The whole thing is based on a database you can build from scratch or modify following an SNMP sweep of your devices. It does a fair job at keeping things contextual and allows you to consult your devices as objects with properties, rather than simply as icons on a piece of paper. No matter what, as complexity grows you will have to give up the convenience of paper as the main media of communication. I'm assuming that some sort of visual representaion is the goal here. Instead, if you are merely looking for a way to document your network for efficient access, and wish to minimize your upkeep, look into products such as Network Node Manager, which will regularly poll inventory information from supported SNMP nodes, or (for servers) IT Operations which will run local agents and gather similar info. There are plenty of rival products and I'm not pushing for HP here, but the most important thing to ask yourself is: how do you intend to use the information? (Rather than how will I gather it.)
From what I have seen of CiscoWorks, it is more of a management tool and less of a design tool.
-- Argel
Opnet is quite good for doing theoretical network designs, and showing what sort of loading is expected at any node.
It can also be linked up with other software to import the network layout from other tools. (I have done it from HP openview).
There are some absolutely crazy people in here trying to talk about things they know nothing about.
First off, you're on the right path with AutoCAD. People who run really large networks do a lot of work with CAD-based tools as opposed to "lower-end" solutions like Visio. I don't agree with one network engineer's statement who claims that you can do all your work with the routing tables and with show commands. That just isn't convenient in any of today's modern enterprises, particularly when "a picture conveys a thousand routes" - it takes a while to troubleshoot interactions involving multiple routers and to suggest even for a moment that you do it in your head is ludicrous. Furthermore, you are costing your organization an incredible amount of money in terms of the cost of bearing your knowledge as opposed to the ability to bring a new engineer's knowledge up to speed quickly.
For dynamic work, i'm doing a lot of generation with aiSee, SNMP, and to some degree, GraphViz. They are all excellent tools and allow me to quickly develop layouts using a number of methods. I do use AutoCAD for some of our larger diagrams, and Visio for some of the smaller networks we run, or when I need to one-off something for a business type to look at. AutoCAD has a number of features that make working with large diagrams easy.
ConfigMaker is indeed a terrible tool. The comment about NetViz was a valuable one; if you're trying to do highly data-driven design (you know what you have and you want it to be drawn), then NetViz is definitely your tool. For conceptual design, stick with AutoCAD.
A colleague and I have a book in progress about network operations and large-scale network design, including some significant talk about best practices.
disclaimer: I work for a national distributor of these products, but probably not in your area If you have a budget you can go for Physical Network Inventory or Logical Network Inventory by GE Network Solutions (formerly known as Smallworld), http://www.gepower.com/dhtml/network_solutions/en_ us/communication/physical_logicalnetwork.jsp/
These applications are used by some big telecom companies and model the network (physically and logically) down to single ports on switches. You can also have multiple people work on the same design, trace errors, check redundancy etc. It will probably read your autocad files too.
A good chunk of the source code is included, but I believe these applications only run on Win32 at the moment (the underlying system also runs on Linux, Solaris and HPUX).
eh.. accidently hit the return key while writing the heading ; )
The process is called encapsulation, and it must all work from layers 1-7 for any of it to work at all. Incidentally, ATM operates at L2. It is purely a switched protocol, defining L2.
Important Stuff: Please try to keep posts on topic. Try to reply to other people's comments instead of starting new threads. Read other people's messages before posting your own to avoid simply duplicating what has already been said. Use a clear subject that describes what your message is about. Offtopic, Inflammatory, Inappropriate, Illegal, or Offensive comments might be moderated. (You can read everything, even moderated posts, by adjusting your threshold on the User Preferences Page)