Elements synchronized from CA Network Flow Analysis (NFA) to NetOps Portal are not in the correct domain

Products

• CA Network Flow Analysis (NetQos / NFA)
• CA Performance Management - Usage and Administration
• DX NetOps

Issue/Introduction

Symptoms of this issue appear after adding the NFA Data Source (DS) into NetOps Portal and the NFA to NetOps Portal element synchronization completes. 

When that activity is completed the following odd behavior might be observed:

1. NFA synchronized elements appear as members of the wrong IP Domain in NetOps Portal
   
   
2. Devices that are known to NetOps Portal as both being discovered and polled by the Data Aggregator (DA) and also synchronized from NFA, show different data in different views. One element representing the devices shows DA based polled SNMP data but no NFA data, while a second element representing the devices shows NFA based data but no DA based polled SNMP data

Environment

Release: 
Component:

Resolution

At root the cause of this issue is addition of the NFA DS to NetOps Portal after elements have been discovered by the DA. Per the NFA integration with NetOps Portal user guides it discusses adding the NFA DS to NetOps Portal before any discovery profiles are run in the DA.

The result of this incorrect order of configuration is that the synchronized elements may end up in the wrong IP Domain in NetOps Portal. If that is done the result observed is where for example all NFA synchronized elements are placed in the Default Domain, but their DA discovered equivalents reside in a custom IP Domain.

Due to this there may appear to be now solution in NetOps Portal since manual element movement between IP Domains is limited to DA discovered devices. We would see the NFA contributed devices in the Default Domain membership in this example, while the DA discovered equivalents reside in the custom IP Domain. The result of this is no option to move the elements from one Domain to another as can be done via the DC Status pages for DA discovered devices.

But a solution does exist for this in the NFA UI. The solution can be performed post NFA DS creation in NetOps Portal.

The solution is to manage the Domain membership in the NFA UI through the Administration settings. Log into the NFA UI and go to the Administration area. Under the Interfaces options select the "Physical & Virtual" option. Select to edit the active interfaces that reside in the wrong IP Domain and modify the Domain value to the correct IP Domain. Save the changes.

Once the changes are made, after the next update sync cycles for the NFA DS completes, followed by a DA DS update synchronization cycle, the elements should now reside in the correct IP Domain.