For those familiar with the VMware ecosystem, it is similar to vRNI (vRealize Network Insight), now called Aria Operations Network, however, I believe SevOne is a broader solution, providing “out-of-the-box” compatibility with other devices more easily, such as Cisco, Fortinet solutions, etc.<\/p>\n
<\/p>\n
The objective of this series of posts will be to show how to configure SevOne to connect to devices in the vSphere environment. Another post will cover NSX and Fortinet SDWAN, followed by a more in-depth look at how to configure reports, network maps, etc.<\/p>\n Regarding integration, I’ll open a sidebar here.<\/p>\n There are two<\/strong> integration<\/strong> options we can explore. One uses the SNMP (Simple Network Management Protocol)<\/strong>, in which we can monitor the devices in our environment for availability. For example, we can create reports and views of CPU and memory usage, as well as network interface utilization for a device, whether it’s a vSphere device or virtualized devices in the environment. Of course, we can also use physical devices (Cisco, Fortinet, etc.), It’s the same monitoring we could do using other SNMP-compatible solutions, such as Zabbix, Nagios, and Grafana, that is, an overview that allows us to identify failures in the network.<\/p>\n On the other hand, we can integrate with SevOne using protocols such as NetFlow, sFlow, IPFIX, etc<\/strong>. These protocols allow us to analyze network flows by inspecting packets passing through the network, giving us detailed insights into what’s traveling on the network\u2014top flows by source or destination, for example, top countries accessed via the internet, which applications use the network the most, and what connects and communicates with what. Here lies the magic of the solution.<\/p>\n Think of yourself as a network manager. The company’s CIO walks into the room and asks, “What are our users accessing on the internet? Which applications are most accessed, and how can we prioritize them?” These are the kinds of questions that only a solution like this can answer. With SevOne, it’s possible to integrate a series of devices from different vendors to provide the most detailed view possible.<\/p>\n <\/p>\n I believe there are a few ways to do this, whether via manual insertion, discovery by network range, etc. I will try to approach the integration first via SNMP by configuring it manually, and then we will configure NetFlow to receive the traffic.<\/p>\n First, enable SSH on the hosts through vCenter by accessing the vCenter GUI interface > select the host > Configure > Services > SSH > Start, I am using vSphere 8, I believe that is the same process from vSphere 6.7 to 9.<\/p>\n After connecting through SSH into each host ESX’i, type:<\/p>\n Most likely it will not have any information configured, as in the previous image, now type “esxcli system snmp set” to configure the target and community, in this case of course the target is SevOne:<\/p>\n The syntax is server IP address (SNMP target)@port (161 UDP by default),\/SNMP community name (normally is public<\/strong>), in my case I have two target servers for SNMP, you can configure more than one using “comma” <\/strong>to separate.<\/p>\n Then type enable to enable SNMP services on those ESXi hosts:<\/p>\n Restart the SNMP service using:<\/p>\n You can also test the SNMP sending traps to SevOne using:<\/p>\n Now, let’s configure SNMP on vCenter, the process is very similar:<\/p>\n Connect through SSH to vCenter and type snmp.get <\/strong>(in my case everything is configured)<\/p>\n First of all, configure the community name, in my case is “public”<\/p>\n Configure the target using the following command, to separate targets use a comma:<\/p>\n You can also set the SNMP log level using below command:<\/p>\n Then, enable SNMP:<\/p>\n At this point the vCenter can send SNMP information about status to the receivers, but, for another kind of information you also need to configure this information on vCenter GUI interface, following:<\/p>\n Click on vCenter > Configure > General > Edit > SNMP section<\/strong><\/p>\n then:<\/p>\n There are two ways to configure that, let’s do to in the easiest way (I think !!!!)<\/p>\n Click on Devices > VMware Browser<\/p>\n Then, click on “Create vCenter”, in my case I have already configured it previously:<\/p>\n Fill in the requested information:<\/p>\n Choose the Device group as you want, it is just to organize the devices in categories , we will use those groups in rules, reports etc in future post:<\/p>\n Also, fill in the information about SNMP previously configured on vCenter and hosts ESX’i:<\/p>\n Choose the SNMP tab to VMware and fill in the login information, enabling SevOne to automatically discover devices inside the vSphere environment, like ESX’i hosts and VM’s:<\/p>\n After that, click on “SAVE” and wait SevOne to connect and discover the necessary information, also start receiving SNMP traps.<\/p>\n After the SevOne discovery, the hosts ESXi and VM’s, click on each host and make sure that the SNMP configuration is the same as configured previously.<\/p>\n Go back to vCenter Gui interface and click on Network > click on each VDS > Configure > Netflow > Edit<\/p>\n Fill in the information of SevOne IP address server, the default port<\/strong> of SevOne is 9996<\/strong><\/p>\n Configure it to each VDS that you want to send Netflow.<\/p>\n Also, enable Netflow on each Portgroup:<\/p>\n Click on each PortGroup > Configure > Properties > Edit<\/p>\n And then go to Monitoring and enable Netflow:<\/p>\n Enable NetFlow in each portgroup, including the portgroup used as Uplink Portgroup, of course, enable just on Portgroups that you want to receive Netflow information on SevOne.<\/p>\n Go back to SevOne Appliance just to make sure that you have rules enabling to receive all packets of Netflow sent by VMware.<\/p>\n Go to Administration > Flow Configuration > Flow Rules<\/p>\n <\/p>\n Make sure that you have rules allowing VMware devices to send information to SevOne, those rules are used to manage the information that is received by SevOne, blocking for example that SevOne receives information from LAN interfaces of some device, but allowing it from the WAN, they are just rules to restrict what information you want to receive, in my case I kept the default rule, allowing everything, I just enabled it.<\/p>\n <\/p>\n Go to the SevOne Data Insight appliance, <\/strong>this appliance transforms network data received by SevOne NMS Appliance into actionable insights to optimize IT operations, enabling the creation and sharing of reports and workflows with the SevOne Network Management System (NMS)<\/p>\n Log in to the appliance and go to Device in the menu:<\/p>\n![\"\"](\"http:\/\/vbrain.com.br\/wp-content\/uploads\/2025\/10\/img_68e7ef80b5e3d.png\")
<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\nIntegrating SevOne with vCenter and discovering devices:<\/h3>\n
Configuring SNMP on vSphere:<\/h3>\n
<\/a><\/p>\nesxcli system snmp get<\/code><\/strong><\/p>\n<\/a><\/p>\nesxcli system snmp set --targets=192.168.0.5@161\/public,192.168.0.6@161\/public<\/code><\/p>\nesxcli system snmp set --enable true<\/code><\/p>\n\/etc\/init.d\/snmpd restart<\/code><\/p>\nesxcli system snmp test<\/code><\/p>\n<\/a><\/p>\n<\/a><\/p>\nsnmp.set --communities public<\/code><\/p>\nsnmp.set --targets 192.168.0.6@161\/public<\/code> (example of one targer) snmp.set --targets 192.168.0.6@161\/public,192.168.0.5@161\/public<\/code> (example of multiple targets)<\/pre>\n<\/a><\/p>\nsnmp.set --loglevel <DEBUG|INFO|WARNING|ERROR><\/code><\/p>\nsnmp.enable<\/code><\/p>\n<\/a><\/p>\n<\/a><\/p>\nOk, right now let’s configure the vSphere as a sender on SevOne NMS appliance, log in on it with GUI interface:<\/h3>\n
<\/a><\/p>\n<\/a><\/p>\n<\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\nOk, so right now lets to configure NetFlow on virtual switches to receive the information about flows that are crossing our network.<\/h3>\n
<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\nOk, lets to test if everything is ok!!!<\/h3>\n