Configuration Guide Cisco UCS Express Local Management Platform

Transcription

1 Configuration Guide Cisco UCS Express Local Management Platform Written for LMS 4.4 and SRE- V Software Version: August 2011

2 Table of Contents 1. Preface... 1 Audience... 1 Definitions and Conventions... 1 Reference Documents... 1 Receiving Technical Support Overview... 2 Solution Components... 2 Deployment Example... 2 Management Interfaces... 3 Solution Hardware and Software Requirements... 3 Installation and Configuration Workflow Hardware Installation... 4 Install the SRE- V... 4 Install HWIC Cards... 4 Connect SRE- V USB Port to Router Console... 4 Connect Router to Network Router Configuration... 4 Layer 2 / Layer 3 Interface Overview... 5 VLAN Interface Configuration... 6 Asynchronous Line Configuration... 6 HWIC Cellular Modem Configuration... 7 Asynchronous Line Security Configuration... 8 Login Authentication Configuration Cisco SRE- V Software Installation and Licensing Cisco SRE- V Licensing Download and Install the vsphere Client Managing Users, Groups, Roles and Permissions Create or Edit User Create a Group Create a Role Assign Permissions Configure Hypervisor and Install Uplogix Local Manager VM Download Uplogix Software Hypervisor Networking Configuration Add Uplogix Primary Port Group to vswitch Create vswitch2 with Uplogix Secondary Port Group Deploy OVF Template Add USB Devices to the Uplogix VM Configure Uplogix VM for Automatic Startup Power On the Uplogix Local Manager VM... 23

3 10. Basic Uplogix Local Manager Configuration Connect to the Uplogix LM Uplogix LM IP Configuration Virtual Port Configuration Configuring a Cisco HWIC 3G Modem Configuring a Multi- tech USB Modem Power Controller Configuration Configure System Management Configure Host Router Device Management Troubleshooting Tips Can t Configure MGF IP Information on SRE- V Service Module Interface Can t Upgrade SRE- V Software Problems Connecting to the SRE- V Console Manager/CLI Problems Connecting to the VMware vsphere Hypervisor Can t Establish SSH Session to the Uplogix LM VNC Connections to Uplogix LM Console Don t Work Port 0/1 is Missing from Dashboard Port 0/1 Terminal Session Doesn t Work or Shows High ASCII Characters Can t Connect to Managed Device CLI Modem Does Not Work Security ACL on Host Router Allow Appendix Alternate Network Configurations Network Connectivity Redundancy Options Bonding Redundancy Option Configuration Out- Of- Band Redundancy Option Configuration... 37

4 1. Preface This preface describes the audience and conventions used in this document. It also describes available product documentation and provides information about how to contact Uplogix Technical Support. Audience This guide is intended primarily for network and system administrators. Users should have a basic understanding of networking, Cisco IOS, and router configuration. Definitions and Conventions The following terms and naming conventions are used throughout this document. Cisco SRE Configuration Guide Refers to Cisco s Installation and Configuration Guide for Cisco Services Read Engine Virtualization document. Hypervisor Refers to the VMware vsphere Hypervisor running on the Cisco SRE- V. Local manager The Uplogix Local Manager. Uplogix LM Uplogix Local Manager. Primary Ethernet Interface The primary, management Ethernet interface for the Uplogix LM virtual machine. Connects to the host router MGF interface. Secondary Ethernet Interface The Ethernet interface physically located on the SRE service module (denoted as the Service Module External Interface in Cisco documentation) that is a backup interface for the primary Ethernet interface. This interface only becomes active if network connectivity through the primary interface is lost. UCC Uplogix Control Center (manages Uplogix LMs) VM Virtual Machine Reference Documents Installation and Configuration Guide for Cisco Services Ready Engine Virtualization (Cisco SRE Configuration Guide) User Guide for Uplogix Appliances User Guide for Uplogix Control Center Receiving Technical Support The Uplogix Support Site allows you to open support tickets, browse the knowledge base, access product documentation, and download software updates. You must have a user account to view this site. To create an account, send an to support@uplogix.com with the subject line create account. Include your organization name, your address, and general contact information. Support is also available via phone and . Phone: or (toll- free) support@uplogix.com URL: support.uplogix.com Configuration Guide Cisco UCS Express Local Management Platform 1

5 2. Overview The Cisco UCS Express offers an application execution environment on a Cisco ISR, able to host a full featured Uplogix Local Manager. The ISR is configured with an SRE 700 module, up to 48 Asynchronous HWIC ports to provide console port connections for up to 48 managed devices. The ISR may also be equipped with a HWIC modem for out- of- band network connectivity. Solution Components The following diagram shows the key components in this solution or 3900 series Cisco router 2. Cisco SRE service module (SM- SRE K9) 3. Cisco Asynchronous High- Speed WAN Interface cards (HWIC- 8A, HWIC- 16A) 4. Cisco High Density 8- port EIA- 232 Asynchronous cables (CAB- HD8- ASYNC) 5. Cisco 3G HWIC modem (HWIC- 3G- HSPA- A) or WIC- 1AM- V2 6. Uplogix ISR self management USB to Serial cable 7. Uplogix Secondary Ethernet Port Deployment Example Configuration Guide Cisco UCS Express Local Management Platform 2

6 Management Interfaces Cisco IOS CLI Use the Cisco IOS CLI to configure the host router. This includes the configuration of VLANs, routed interfaces, asynchronous lines, the cellular modem, security features, and the SRE Service Module interfaces. VMware vsphere Hypervisor Direct Console User Interface (DCUI) Use this direct console user interface within the host router to perform Cisco SRE- V configuration and to view support information (such as SRE and VMware license serial numbers) and system logs. This interface should not be necessary for most users unless there are configuration errors that require troubleshooting. VMware vsphere Client Use this Windows- based application to configure the hypervisor and manage the Uplogix Local Manager VM. Uplogix Local Manager CLI Use the Uplogix LM CLI to provision the Uplogix LM. This interface can initially be accessed through the vsphere Client console for the VM and later through a SSH terminal session once its IP address has been configured. This interface is used to configure all attributes and features of the local manager. Uplogix Control Center Use this web- based interface to manage Uplogix LMs in the deployment. Solution Hardware and Software Requirements Note the following hardware requirements: 1. Cisco Integrated Services Router: 2911, 2921, 2951, 3925, 3925e, 3945 or 3945e 2. Cisco SRE Service Modules: 700 and 900 series service modules Note the following software component requirements: 1. Cisco IOS software Version: 15.1(4)M or greater 2. Cisco SRE- V Software Version: or greater 3. Uplogix LMS Version: 4.4 or greater Installation and Configuration Workflow 1. Install the SRE- V and HWICs in the router and make necessary network connections. 2. Use Cisco IOS commands to configure the SRE service module interfaces, VLANs, routed interfaces, asynchronous lines, cellular modem interfaces, and security features. 3. Use the Cisco SRE- V commands to create users with appropriate permissions who will manage the hypervisor and virtual machines. 4. Install vsphere Client application software. 5. Configure the hypervisor and deploy Uplogix Local Manager software to it. 6. Configure the Uplogix Local Manager. Configuration Guide Cisco UCS Express Local Management Platform 3

7 3. Hardware Installation Install the SRE- V If the SRE- V service module has not yet been installed in the Cisco router, follow the instructions outlined in Chapter 2 of the Cisco SRE Configuration Guide titled, Installing the Cisco SRE Service Module into the Router. Install HWIC Cards Install all asynchronous and modem HWICs into the router while it is powered off. These HWIC cards can be plugged into any of the four HWIC slots on the router. Connect Cisco High Density 8- port EIA- 232 Asynchronous cables (CAB- HD8- ASYNC) to the asynchronous HWICs. These cables connect to the console ports of the managed devices. Connect SRE- V USB Port to Router Console Connect the Uplogix USB- to- Serial console cable to the RJ- 45 console input on the router and the USB input on the SRE- V module. This connection is necessary for the Uplogix LM to manage its host router. Note: If additional permanent USB connections are necessary, use a USB hub to connect the Self- Management cable and additional USB hosts to the SRE- V USB port. Connect Router to Network Connect the router to the network and power on the router. 4. Router Configuration Cisco defines three possible configuration models in Chapter 3 of the Cisco SRE Configuration Guide. Uplogix recommends modeling one of the two IOS Layer 3 Routed Configurations for the following key reasons: The majority of traffic to and from the Uplogix VM will flow through the router to the asynchronous lines (which are connected to the managed devices). This topology does not require the additional HW (EHWIC or EtherSwitch Service Module) needed to implement Cisco s MGF Layer 2 Switched Configuration. This document models the IOS Layer 3 Routed Configuration Devices in Different Branch Subnets configuration from the Cisco SRE Configuration Guide. The configuration below assumes the topology shown in the Deployment Example Overview section, with router interface GigabitEthernet0/0 connecting to the WAN/Internet and GigabitEthernet0/1 connecting to a switch trunk port. Configuration Guide Cisco UCS Express Local Management Platform 4

8 Layer 2 / Layer 3 Interface Overview The following diagram shows important Layer 2 and Layer 3 interfaces in the router as well as the IP addresses used in IOS configuration examples used throughout this document. Notes: 1. SM1/0: This interface connects the router to the hypervisor the /30 is used in this example. 2. VLAN1: Identify an IP address and subnet for VLAN1 - the VLAN1 router interface and the Uplogix LM have an IP address in this VLAN/subnet. A /30 subnet mask can be used if the Uplogix LM is the only VM on VLAN1. The example above uses the /24 address and subnet. 3. SM 1/1: This is a Layer 2 interface to the MGF (Multi Gigabit Fabric) that is configured as a trunk in order to carry VLAN traffic from the SRE- V to the router. Configuration Guide Cisco UCS Express Local Management Platform 5

9 VLAN Interface Configuration VLAN Configuration VLAN 1 is assigned an IP address and subnet - the Uplogix LM will later be configured to have an IP address in the VLAN1 subnet.! Interface Vlan1 description management VLAN ip address ! SRE Service Module Interface Configuration The service- module IP address represents the IP address assigned to the hypervisor. SM1/1 represents the MGF interface to the SRE- V virtual machine network and is configured as a trunk.! interface SM1/0 ip address service- module ip address !Application: SRE- V Running on SMV service- module ip default- gateway ! interface SM1/1 description Internal switch interface connected to Service Module switchport mode trunk no ip address! Layer 3 Configuration GigibitEtherent0/0 is the routed interface to the WAN/Internet and effectively the primary Ethernet management interface for the Uplogix LM. The static default route points to the WAN/Internet routed interface.! interface GigabitEthernet0/0 ip address duplex auto speed auto! ip route ! Asynchronous Line Configuration The network devices and power controllers being managed by the Uplogix LM are connected to the Cisco router via 8- port and 16- port Asynchronous High- Speed WAN Interface cards (HWIC- 8A, HWIC- 16A). Lines for HWICs in slots 0 and 1 map to lines 0/0/x and 0/1/x respectively (Router Slot/HWIC Slot/Line Number). Below are sample IOS configuration snippets that show the minimum necessary configuration for the asynchronous interfaces and lines that connect to managed devices. interface Async0/0/0 no ip address encapsulation slip line 0/0/0 0/0/7 no exec transport preferred none transport input telnet Configuration Guide Cisco UCS Express Local Management Platform 6

10 Line information can be viewed on the router by issuing the show line IOS command. Issue the show running- config IOS command to display line configuration information. Note: The router AUX port can be used in lieu of an HWIC asynchronous line to connect to a power controller to the router. The settings for line aux 0 are the same as shown above for the HWIC asynchronous lines; however, the use of the AUX port requires a rolled cable. HWIC Cellular Modem Configuration Below are example IOS configuration snippets that show how to configure the cellular modem interfaces and associated lines. This example assumes an HWIC- 3G- HSPA- A card in HWIC slot 3 of the router. Note that the configuration below is added automatically when the 3G HWIC is installed with the exception of the two bolded configuration commands for line 0/0/0 0/0/7. controller Cellular 0/3! interface Cellular0/3/0 no ip address encapsulation ppp! line 0/3/0 no exec transport input telnet rxspeed txspeed Issue the show line command on the Cisco router to find the line associated with the cellular modem in HWIC slot 3 (0/3/0). This example shows the modem associated with line 51, which is needed to complete the modem configuration in the Uplogix LM. USAUS- 2921# show line Tty Line Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns Int * 0 0 CTY /0-1 1 AUX 9600/ /0-0/0/0 3 TTY 9600/ /0-0/0/1 4 TTY 9600/ /0-0/0/2 5 TTY 9600/ /0-0/0/3 6 TTY 9600/ /0-0/0/4 7 TTY 9600/ /0-0/0/5 8 TTY 9600/ /0-0/0/6 9 TTY 9600/ /0-0/0/7 10 TTY 9600/ /0-0/2/0 35 TTY / inout /0-0/3/0 51 TTY /0 Ce0/3/0 0/3/1 52 TTY /0 Ce0/3/ TTY / / VTY / VTY / VTY / VTY / VTY /0 - Tty Line Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns Int Line(s) not in async mode - or- with no hardware support: 2, 11-34, 36-50, 53-66, Configuration Guide Cisco UCS Express Local Management Platform 7

11 Asynchronous Line Security Configuration Uplogix recommends restricting access to all asynchronous lines that connect to managed devices, modems and the power controllers in order to prevent connections to managed device console ports from any source other than the Uplogix LM. Applying an incoming Access Control List (ACL) to the asynchronous lines that only permits the source IP address of the Uplogix LM accomplishes this. Below are sample IOS configuration snippets that demonstrate how to create and apply such an ACL. This example assumes an IP address is for the Uplogix LM and that the managed devices and power controller are on lines 0/0/0 thru 0/0/7. It also assumes the modem is on line 0/3/0. ip access- list standard UplogixAccessOnly permit line 0/0/0 0/0/7 access- class UplogixAccessOnly in no exec transport preferred none transport input telnet line 0/3/0 access- class UplogixAccessOnly in no exec transport input telnet rxspeed txspeed Login Authentication Configuration The Uplogix LM requires login authentication to be disabled for asynchronous lines connected to managed devices, power controllers, or modems. This makes the asynchronous line ACL described in the previous section critical to system security. Below are sample IOS configuration snippets that demonstrate how to enable AAA on the router to perform local login authentication for everything except the asynchronous lines. aaa new- model! aaa authentication login default local aaa authentication login UplogixAsyncLines none! username admin privilege 15 password 0 password! line 0/0/0 0/0/7 access- class UplogixAccessOnly in login authentication UplogixAsyncLines no exec transport preferred none transport input telnet Configuration Guide Cisco UCS Express Local Management Platform 8

12 5. Cisco SRE- V Software Installation and Licensing This guide assumes the SRE- V service module was purchased with software and a license. If the SRE- V being installed does not have software on it or if the version of software needs to be upgraded, see Chapter 4 of the Cisco SRE Configuration Guide titled, Installing and Managing the SRE- V Software. The commands below can be issued to determine the status and software level of the SRE- V from the router CLI. Issue the service- module sm1/0 status IOS command to display the status and version of the SRE- V software (this command assumes the SRE- V is in slot 1). USAUS- 2921# service- module sm1/0 status Service Module is Cisco SM1/0 Service Module supports session via TTY line 67 Service Module is in Steady state Service Module heartbeat- reset is enabled Getting status from the Service Module, please wait.. Cisco SRE- V Software VMware ESXi build running on SRE Module resource information: CPU Frequency: 1860 MHz Memory Size: 4067 MB Disk 0 Size: MB Disk 1 Size: 2055 MB No install/uninstall in progress Local Partition Info - (0 apps) ===================== Retrieving partition information 6. Cisco SRE- V Licensing This guide assumes the SRE- V service module was purchased with a license. To validate that the SRE- V has an active permanent license, use the service- module sm1/0 session to access the VMware vsphere Hypervisor DCUI, login by pressing the <F2> key (username=root with no password works by default) and scroll down to the View Support Information option the VMware license should be displayed on the right side of the screen as the License Serial Number, which is displayed in the following format: XXXXX- XXXXX- XXXXX- XXXXX. To exit the DCUI interface, press Ctrl + Shift x. Then type disconnect at the router prompt. 7. Download and Install the vsphere Client The VMware vsphere Client software application is needed to manage the hypervisor and virtual machines on the Cisco SRE- V. In order to download the vsphere Client application to your workstation, the workstation needs to be running a Windows OS, have connectivity to the Internet, and have connectivity to the hypervisor on the SRE- V. 1. Go to ip - address. This page will redirect you to the VMware website. 2. Click the Download vsphere Client link, and then click Run to download the vsphere Client. 3. Once installed, open the vsphere Client and provide the hypervisor IP address, username and password (IP Address= ; User name=root; leave password blank, as this is the default setting) to connect to the hypervisor and subsequently the Uplogix Local Manager. Configuration Guide Cisco UCS Express Local Management Platform 9

13 8. Managing Users, Groups, Roles and Permissions Users, groups, roles and permissions for the VMware vsphere Hypervisor on the SRE- V are all configured through vsphere Client. Connect to the VMware vsphere Hypervisor on the SRE- V using vsphere Client (username=root, leave password field blank). Create or Edit User Click on the Users and Groups tab, then click the Users button, then right click and select Add and specify the desired user name, password, etc. and click OK. Double click the User Name to edit the user. Security Note: After logging into the VMware vsphere Hypervisor for the first time, we recommend that the root user be secured by giving it a password. Create a Group Click on the Users and Groups tab, then click the Groups button, then right click and select Add and specify the desired group name and users to be associated with the group and click OK (analogous to User creation above). We recommend using the pre- existing group named users. Create a Role To create a role, click on View followed by Administration and then Roles. Configuration Guide Cisco UCS Express Local Management Platform 10

14 Now right click and select Add and then specify a role name and select the required privileges. Uplogix recommends using the existing role named Administrator except for the case where less privileged users need to be provisioned. Assign Permissions Click on the Permissions tab, then right click and select Add Permission. Now click the Add button and select the user or group, then click the Add button followed by the OK button. Finally, choose a role to assign the user or group from the Assigned Role selector and click the OK button. User UplogixAdmin is assigned the pre- existing role of Administrator in the example below. Configuration Guide Cisco UCS Express Local Management Platform 11

15 9. Configure Hypervisor and Install Uplogix Local Manager VM Download Uplogix Software Download the following files to the same local directory from the Uplogix Support site. Log into the support site, select Software Downloads under Your Account, and then select VM Software (if presented with a license agreement, read license and click on I Agree) and then download the following two files to the same local directory Uplogix Local Manager virtual disk file (sre.vmdk) Uplogix OVF file (uplogix.ovf) Hypervisor Networking Configuration Open the vsphere Client and log into the hypervisor running on the Cisco SRE- V. Click on the Hypervisor IP address in the left navigation bar. Click on the Configuration tab and then Networking. Configuration Guide Cisco UCS Express Local Management Platform 12

16 Add Uplogix Primary Port Group to vswitch1 Click on the Properties link for vswitch1. Select vswitch and click the Add button. Configuration Guide Cisco UCS Express Local Management Platform 13

17 Select Virtual Machine for the connection type and click Next. Set the network label port group property to Uplogix Primary and the VLAN ID port group property to All (4095). Click Next. Click the Finish button. Click the Close button on the vswitch0 Properties window to return to the main networking configuration page. Configuration Guide Cisco UCS Express Local Management Platform 14

18 Create vswitch2 with Uplogix Secondary Port Group Click on Add Networking from the main networking configuration page. Select Virtual Machine for the connection type and click Next. Configuration Guide Cisco UCS Express Local Management Platform 15

19 Select Create a virtual switch for vmnic0 and click Next. Set the network label port group property to Uplogix Secondary and the VLAN ID port group property to All (4095). Click Next. Click Finish. Configuration Guide Cisco UCS Express Local Management Platform 16

20 Deploy OVF Template Select File followed by Deploy OVF Template to copy the Uplogix VM to the hypervisor. Note: The uplogix.ovf file must be in the same directory as the Uplogix VMDK file. Enter the path to the uplogix.ovf file in the URL field and click Next. Configuration Guide Cisco UCS Express Local Management Platform 17

21 Enter a name for the Uplogix VM and click Next. There are no restrictions for the name. Set the disk format to Thick provisioned format and click Next. Configuration Guide Cisco UCS Express Local Management Platform 18

22 Verify that the Uplogix Primary and Uplogix Secondary source networks in the OVF file map to the Uplogix Primary and Uplogix Secondary destination networks accordingly. Click Next. Click Finish on the Ready to Complete window to deploy the Uplogix VM. Configuration Guide Cisco UCS Express Local Management Platform 19

23 Add USB Devices to the Uplogix VM Adding USB devices to the Uplogix VM allows the local manager to see and manage the host router and/or a USB cellular modem. Note: All USB devices must be connected to the SRE- V before proceeding with this step. Select the local manager VM, right click on the VM, and select Edit Settings. Click the Add button, select USB Device, and click Next. Configuration Guide Cisco UCS Express Local Management Platform 20

24 Highlight a USB device to add to the local manager VM. Only one USB device can be added at a time. Click Next. Click Finish to complete the process. Configuration Guide Cisco UCS Express Local Management Platform 21

25 You can repeat the above process if you have another USB device to add. Once you have added all of your USB devices, click OK on the Virtual Machine Properties page. Configure Uplogix VM for Automatic Startup This process will set the local manager to start automatically whenever the hypervisor starts. Select the hypervisor IP in left navigation bar, click on the Configuration tab, click on the Virtual Machine Startup/Shutdown under Software options, and then click on the Properties link in the upper right. Check the box next to Allow virtual machines to start and stop automatically with the system. Select the Uplogix Local Manager VM in the Startup Order table and click Move Up to move the VM up under Automatic Startup. Click OK to complete this configuration. Configuration Guide Cisco UCS Express Local Management Platform 22

26 Power On the Uplogix Local Manager VM Right click on the local manager VM, click on Power, and click on Power On. The green Power On Arrow in the menu bar can also be clicked to power on the selected local manager. Once the local manager has powered on, select the local manager VM in the left navigation bar and click on the Console tab to access the CLI. Configuration Guide Cisco UCS Express Local Management Platform 23

27 10. Basic Uplogix Local Manager Configuration This section describes how to: Use the vsphere Client to connect to the Uplogix LM Configure the management IP address Configure virtual slots and virtual ports Configure the modem connection Configure the power controller connection Configure the local manager to be managed by an Uplogix Control Center (UCC) Configure the local manager to manage its host router Connect to the Uplogix LM Use the VMware vsphere Client to log into the hypervisor on the Cisco SRE- V using the credentials that were created earlier. Once logged in, navigate to and select the Uplogix Local Manager VM, click on the Console tab, click into the console window, and hit <Enter> to display the Uplogix login prompt. Use the default Uplogix login credentials (admin/password) to log into the local manager. Uplogix LM IP Configuration Once logged into the local manager, issue the config system ip command to change the management Ethernet settings. In the following example, the IP address is changed to /24, the gateway is set to , and the hostname is changed from the system serial number to Austin. [admin@vljyihjluj]# config system ip Existing Values Use DHCP: Yes Management IP: Host Name: VLJYIHJLUJ Subnet Mask: Broadcast Address: Default Route: Speed/duplex: auto DNS Server: MAC Address: 00:0C:29:21:44:76 Bonding Link: yes Configuration Guide Cisco UCS Express Local Management Platform 24

28 eth0 Ethernet Link: yes (bonded primary) eth1 Ethernet Link: yes (bonded) Change these? (y/n) [n]: y Enter New Values Use DHCP (y/n) [y]: n Management IP [ ]: Host Name [VLJYIHJLUJ]: Austin Subnet Mask [ ]: Default Route [ ]: DNS Server IP: Warning: Remote connections may be lost if you commit changes. Do you want to commit these changes? (y/n): y Virtual Port Configuration The local manager initially boots up without any ports. If the Uplogix Self Management cable is installed, port 0/1 (the port to the host router) will be created automatically. The first step is to create a virtual slot and define the virtual ports for that slot. The local manager can have up to three virtual slots with 16 ports defined per slot. A virtual port is defined by three objects: the port number on the local manager, the IP address of the host router, and the TCP port number associated with the asynchronous line on the router. In this example, slot 0 contains an 8- port HWIC asynchronous card. This will map to slot 1 of the Uplogix LM. Select an IP address on the router that is persistent. Uplogix recommends using the VLAN=1 (ie: IP address of ). Determine the TCP ports associated with the eight asynchronous lines represented by the HWIC- 8A in slot 0. Log into the router display the lines with the show line command. USAUS- 2921# show line Tty Line Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns Int * 0 0 CTY /0-1 1 AUX 9600/ /0 - * 0/0/0 3 TTY 9600/ /0 - * 0/0/1 4 TTY 9600/ /0 - * 0/0/2 5 TTY 9600/ /0 - * 0/0/3 6 TTY 9600/ /0 - * 0/0/4 7 TTY 9600/ /0 - * 0/0/5 8 TTY 9600/ /0 - * 0/0/6 9 TTY 9600/ /0 - * 0/0/7 10 TTY 9600/ /0 - I 0/2/0 35 TTY / inout / TTY / /0 - * VTY / VTY / VTY / VTY / VTY /0 - Line(s) not in async mode - or- with no hardware support: 2, 11-34, 36-66, The HWIC asynchronous lines are denoted above as TTY 0/0/0 thru 0/0/7 (Lines 3-10). The Line number is used to derive the TCP port. Uplogix recommends using the binary capable ports for all LM to ISR communication. The TCP port is simply 6000 added to the line number. The first line on the HWIC in slot 0 has TCP port 6003 and the eighth line has TCP port Virtual port 1/1 on the Uplogix Local Manager has an IP address and TCP port Run the config system slot 1 command at the local manager prompt to configure virtual ports in slot 1. [admin@austin]# config system slot 1 [config system slot 1]# Configuration Guide Cisco UCS Express Local Management Platform 25

29 When configuring contiguous virtual ports (in this case, TCP ports ), a port range command can be used to automatically increment the TCP port value by 1 for each port in the range. The following command configures all 8 virtual ports associated with the HWIC- 8A in HWIC slot 0 on the router. [config system slot 1]# port Port 1 added. Port 2 added. Port 3 added. Port 4 added. Port 5 added. Port 6 added. Port 7 added. Port 8 added. [config system slot 1]# exit Each virtual port can also be provisioned individually. [admin@austin]# config system slot 1 [config system slot 1]# [config system slot 1]# port Port 1 added. [config system slot 1]# port Port 2 added. [config system slot 1]# port Port 3 added. [config system slot 1]# port Port 4 added. Port 5 added. Port 6 added. Port 7 added. Port 8 added. [config system slot 1]# exit Run the show system slot 1 command to view the virtual port information for slot 1. [admin@austin]# show system slot Run the show dashboard command to view the virtual ports for slot 1. [admin@austin]# show dashboard Port Hostname Status Con Eth Uptime Processor Last Utilization Alarm /1 * 1/1 * 1/2 * 1/3 * 1/4 * 1/5 * 1/6 * 1/7 * 1/8 * Configuration Guide Cisco UCS Express Local Management Platform 26

30 MDM embedded * SYS Austin OK * * 21m 10s 13/10/10 6m 13s Con(sole) or Eth(ernet) link status indicated with '*' Processor Utilization displayed as last collected, 1 and 5 minute averages Last Alarm displays time since last Alarm matched. d=day, h=hour, m=minute, s=second Configuring a Cisco HWIC 3G Modem In this example, the line associated with the 3G HWIC is line 51. As with the virtual ports, add 6000 to the line number to determine the TCP port number for the virtual modem connection (i.e. 6051). The IP address for the virtual modem is the same as that used in the virtual ports example above (VLAN1= ). Issue the config system slot modem command at the local manager CLI to configure the modem slot. [admin@austin]# config system slot modem [config system slot modem]# port Port 1 added. [config system slot modem]# exit [admin@austin]# [admin@austin]# show system slot modem Issue the show dashboard command and look for an asterisk in the Con column of the dashboard for the modem to validate that the modem is connected to the Uplogix Local Manager. [admin@austin]# show dashboard Port Hostname Status Con Eth Uptime Processor Last Utilization Alarm /1 1/1 * 1/2 1/3 1/4 1/5 1/6 1/7 1/8 MDM embedded * SYS Austin OK * * 21m 10s 13/10/10 6m 13s Con(sole) or Eth(ernet) link status indicated with '*' Processor Utilization displayed as last collected, 1 and 5 minute averages Last Alarm displays time since last Alarm matched. d=day, h=hour, m=minute, s=second The next step is to configure the Uplogix LM modem port as a cellular modem. Navigate to the modem port by typing modem at the system prompt. Use the config init command at the modem prompt to configure the modem. [admin@austin]# modem embedded [admin@austin (modem)]# config init This device has already been initialized. Would you like to reinitialize it? (y/n): y Enter New Values description: Cisco 3G make [embedded]: cellular Configuration Guide Cisco UCS Express Local Management Platform 27

31 Serial Bit Rate [38400]: Serial Data Bit [8]: Serial Parity [none]: Serial Stop Bit [1]: Serial Flow Control [none]: Do you want to commit these changes? (y/n): y Testing login will take a few moments... Login successful; credentials are valid. After initializing the modem as a cellular modem, issue the config answer command to configure an appropriate initialization string. In the following example, the access point name (APN) has been changed to internet. [admin@austin (modem)]# config answer [config answer]# init "" ATZ OK AT+CGDCONT=1,"IP","internet" [config answer]# exit [admin@austin (modem)]# show answer disabled SLV suspended when PPP on init "" ATZ OK AT+CGDCONT=1,"IP","internet" answer after 3 rings Next, issue the config ppp command to configure the modem PPP settings. [admin@austin (modem)]# config ppp Existing Values Phone Number: User Name: Password: ******** Use Static IP Address: false Change these? (y/n) [n]: y Enter New Values Phone Number: *99***1# User Name: Uplogix Password: ******* Confirm Password: ******* Use Static IP Address (y/n) [n]: n Do you want to commit these changes? (y/n): y [admin@austin (modem)]# show ppp Phone Number: *99***1# User Name: Uplogix Password: ******** Use Static IP Address: false The ppp cycle duration d 1 command can be run at the modem prompt to test functionality. This command will test PPP over the modem for a duration of 1 minute. Out of Band Cycle: OK indicates a successful test. [admin@austin (modem)]# ppp cycle duration - d 1 Secondary network Local Address is Out of Band is turned on. Waiting 1 minutes Waited 1 minute; Out of Band is up Done waiting Out of Band is turned off Out of Band Cycle: OK Configuration Guide Cisco UCS Express Local Management Platform 28

32 Configuring a Multi- tech USB Modem A Multi- Tech USB cellular modem can be connected to the SRE- V USB port for use as an out- of- band solution. [admin@austin]# modem embedded [admin@austin (modem)]# config init This device has already been initialized. Would you like to reinitialize it? (y/n): y Enter New Values description: MultiTech icell make [embedded]: Multitech Found Multitech ICELL (USB location: usb 2-1) Serial Bit Rate [38400]: Serial Data Bit [8]: Serial Parity [none]: Serial Stop Bit [1]: Serial Flow Control [none]: Do you want to commit these changes? (y/n): y Testing login will take a few moments... Login successful; credentials are valid. Power Controller Configuration In this example, HWIC asynchronous lines 11 and 12 are connected to the serial port of two different power controllers. As with the virtual ports and modem, add 6000 to the line number to determine the TCP port, which becomes 6011 and 6012 for the power controllers. The IP address for the power controller is the same as that used in the virtual port and modem examples above (VLAN1= ). Issue the config system slot power command at the CLI to configure the power controller slot. [admin@austin]# config system slot powercontrol [config system slot powercontrol]# port Port 1 added. [config system slot powercontrol]# port Port 2 added. [config system slot powercontrol]# exit [admin@austin]# show system slot powercontrol [admin@austin]# show dashboard Port Hostname Status Con Eth Uptime Processor Last Utilization Alarm /1 1/1 * 1/2 * 1/3 1/4 PWR1 PWR2 MDM Cisco 3G 52s SYS Austin OK * * 9m 37s 16/18/13 1h 52m Con(sole) or Eth(ernet) link status indicated with '*' Processor Utilization displayed as last collected, 1 and 5 minute averages Last Alarm displays time since last Alarm matched. d=day, h=hour, m=minute, s=second Configuration Guide Cisco UCS Express Local Management Platform 29

33 Configure the first power controller port on Uplogix LM (PWR1) to manage the connected power controller. Navigate to the first power controller port by typing powercontrol 1 at the system prompt followed by config init at the powercontrol/1 prompt. [admin@austin]# powercontrol [admin@austin (powercontrol/1)]# config init Enter New Values description: Rack 322 Power make: servertech model: os: sentryipt os version: console username: admn console password: **** confirm password: **** enable username: enable password: Serial Bit Rate [9600]: Serial Data Bit [8]: Serial Parity [none]: Serial Stop Bit [1]: Serial Flow Control [none]: Do you want to commit these changes? (y/n): y Testing login will take a few moments... Login successful; credentials are valid. Retrieving outlet names. Please wait... Outlet names retrieved. Would you like to add a new mapping? (y/n) [n]: y Outlet: A1 Interface: port1/1 Would you like to add a new mapping? (y/n) [n]: n Scheduling default jobs Testing job rulesmonitor Job rulesmonitor was successful Job rulesmonitor was scheduled Outlets can be mapped to virtual ports when the power controller is initialized. Outlets can also be mapped to ports via the config outlets command. [admin@austin (powercontrol/1)]# config outlets Existing Values Outlet A1 goes to interface port1/1 Change these? (y/n) [n]: y Enter New Values Retrieving outlet names. Please wait... Outlet names retrieved. Outlet A1 goes to interface port1/1; delete? (y/n) [n]: Would you like to add a new mapping? (y/n) [n]: y Outlet: A2 Interface: port1/2 Would you like to add a new mapping? (y/n) [n]: n Do you want to commit these changes? (y/n): y [admin@austin (powercontrol/1)]# show outlets Outlet A1 goes to interface port1/1 Outlet A2 goes to interface port1/2 Follow the same process to configure the second power controller. Configuration Guide Cisco UCS Express Local Management Platform 30

34 Configure System Management Configure the Uplogix LM to be managed by an Uplogix Control Center (UCC). Issue the config system management command to set up UCC management. The IP address for the Uplogix Control Center in the example below is config system management Existing Values Use Management Server: false Hostname or IP: Port: 8443 Heartbeat interval (seconds): 30 Heartbeat band: all Always use minimal heartbeat: false Last successful heartbeat: (not yet contacted) Change these? (y/n) [n]: y Enter New Values Use Management Server (y/n) [n]: y IP [ ]: Port [8443]: Heartbeat interval (seconds) [30]: Heartbeat during [all]: Do you want to commit these changes? (y/n): y [admin@austin]# show system management Use Management Server: true Hostname or IP: Port: 8443 Heartbeat interval (seconds): 30 Heartbeat band: all Always use minimal heartbeat: false Last successful heartbeat: 06/20/ :57:50 UTC (Full) Configure Host Router Device Management The Uplogix Local Manager can be configured to manage its host router. Verify that the Uplogix Self Management cable is connected to the router console port and SRE- V USB port. Navigate to the host router port by typing port 0/1 at the system prompt. [admin@austin]# port 0/1 native Issue the config settings command to configure port settings to use the TFTP protocol as the device configuration pull method. [admin@austin (port0/1)]# config settings Settings Menu Assimilated terminal speed: 19,200 2 Modify terminal serial speed on assimilation: false 3 Device configuration pull method: console 4 Device configuration push method: xmodem 5 Alternative device configuration push method: tftp 6 Device configuration push retries: 3 7 Automatic configuration rollback: [disabled/manual/automatic] automatic 8 Count delay before automatic configuration rollback: 75 9 Issue 'write memory' after configuration rollback: true 10 Verify OS upgrade: true 11 Use manual boot during upgrade, if applicable: true 12 OS image push method: tftp 13 Alternative OS image push method: xmodem 14 Attempt to use XModem- 1K (first attempt only): true 15 Save Configuration on change before reboot? true 16 Reset console and telnet on auth. change? true Configuration Guide Cisco UCS Express Local Management Platform 31

35 17 Previous OS image not found, continue? true 18 Maximum OS image push retry attempts: 3 19 Device reboot timeout (seconds): Force the device to reboot immediately after pushing the OS: true 21 Device pass through timeout(seconds): Enable local echo: false 23 Done Select setting to edit or 23 to end: 3 Device configuration pull method [console]: tftp 1 Assimilated terminal speed: 19,200 2 Modify terminal serial speed on assimilation: false 3 Device configuration pull method: tftp 4 Device configuration push method: xmodem 5 Alternative device configuration push method: tftp 6 Device configuration push retries: 3 7 Automatic configuration rollback: [disabled/manual/automatic] automatic 8 Count delay before automatic configuration rollback: 75 9 Issue 'write memory' after configuration rollback: true 10 Verify OS upgrade: true 11 Use manual boot during upgrade, if applicable: true 12 OS image push method: tftp 13 Alternative OS image push method: xmodem 14 Attempt to use XModem- 1K (first attempt only): true 15 Save Configuration on change before reboot? true 16 Reset console and telnet on auth. change? true 17 Previous OS image not found, continue? true 18 Maximum OS image push retry attempts: 3 19 Device reboot timeout (seconds): Force the device to reboot immediately after pushing the OS: true 21 Device pass through timeout(seconds): Enable local echo: false 23 Done Select setting to edit or 23 to end: 23 [admin@austin (port0/1)]# Configure the port to manage the Cisco host router by issuing the config init command to enter the port configuration wizard. The following information must be known to successfully complete the configuration wizard: the management IP of the router, the router login credentials, the enable password, and the console speed setting. [admin@austin (port0/1)]# config init This device has already been initialized. Would you like to reinitialize it? (y/n): y Enter New Values description: Host Router make [native]: cisco model: os: ios os version: management IP: console username: bob console password: ******* confirm password: ******* enable username: enable password: ***** confirm password: ***** secondary console username: secondary console password: secondary enable username: Configuration Guide Cisco UCS Express Local Management Platform 32

36 secondary enable password: Serial Bit Rate [9600]: Serial Data Bit [8]: Serial Parity [none]: Serial Stop Bit [1]: Serial Flow Control [none]: Do you want to commit these changes? (y/n): y Testing login will take a few moments... Login successful; credentials are valid. Retrieving device information directly from device... Hostname : QA- 162 Serial Number: FHK1407F2PM Make : cisco Model : CISCO3925- CHASSIS OS Type : IOS OS Version : 15.1(3)T Uptime : 3 days, 21 hours, 10 minutes Updating model. Updating OS version. Assimilating the device will set buffered logging on the console. Proceed? (y/n): y - - OUTPUT REMOVED - - Job pullos was successful Job pullos was scheduled Run the show dashboard command to see the host router status. [admin@austin (port0/1)]# show dashboard Port Hostname Status Con Eth Uptime Processor Last Utilization Alarm /1 USAUS OK 3d 21h 04/02/ Con(sole) or Eth(ernet) link status indicated with '*' Processor Utilization displayed as last collected, 1 and 5 minute averages Last Alarm displays time since last Alarm matched. d=day, h=hour, m=minute, s=second Issue the show dir v command to see the local file system that stores the running- config, startup- config, and OS files collected from the host router. [admin@austin (port0/1)]# show dir - v All times shown in UTC. Type Version Size Date Name Config Running current 3631 Jun 21 12:29 running- config Startup current 3631 Jun 21 12:29 startup- config OS current Aug 26 22:36 c2900- universalk9- mz.spa m.bin Configuration Guide Cisco UCS Express Local Management Platform 33

37 11. Troubleshooting Tips Can t Configure MGF IP Information on SRE- V Service Module Interface Verify that the IOS version on the router is 15.1(3) or greater. Can t Upgrade SRE- V Software Check that the IP addresses assigned to the SRE- V service module interface (the /30 subnet on the SM1/0 in this document) are routable between the router and the FTP server where the SRE- V software is stored. Problems Connecting to the SRE- V Console Manager/CLI If the Connection refused by remote host message is received when initiating a CLI session to the SRE- V (via the service- module sm1/0 session command), retry after issuing the service- module sm1/0 session clear command. Problems Connecting to the VMware vsphere Hypervisor Verify that the SRE- V service module interface (sm1/0 or sm2/0) is not administratively shut down. Check that the IP addresses assigned to the SRE- V service module interface (the /30 subnet on the SM1/0 in this document) are routable/reachable from the workstation that is trying to connect with vsphere Client. Can t Establish SSH Session to the Uplogix LM Verify that the Uplogix Local Manager VM is running by connecting to the hypervisor using vsphere Client and browsing the inventory of virtual machines. Verify that the Uplogix LM application is running by connecting to the VM console port through vsphere Client. The application should prompt for a username and password. Verify that the IP address is valid by logging into the Uplogix LM console port through vsphere Client and issuing the show system ip command. Verify that there are no ACLs in the host router blocking access to the Uplogix LM. VNC Connections to Uplogix LM Console Don t Work If a VNC connection to the hypervisor (i.e. the Uplogix Local Manager console port) displays a black screen, make sure the VNC client is set to use all colors and hextile encoding. Port 0/1 is Missing from Dashboard Verify that the Uplogix USB- to- Serial cable is connected to the SRE- V USB port. Verify that the USB- to- Serial cable is mapped to the Uplogix Local Manager VM in the hypervisor. This can be done by right clicking on the Uplogix Local Manager virtual machine (on the inventory page in vsphere Client) and selecting Edit Settings - a USB device should be in the hardware table with a summary of Future Devices USB- RS232 Cable. A restart of the Uplogix Local Manager may be necessary after hot plugging and mapping the USB to the Uplogix VM. Issue the restart command at the Uplogix CLI. Port 0/1 Terminal Session Doesn t Work or Shows High ASCII Characters Verify that the speed setting for the console line in the host router (show running- config begin line con 0) is the same as the speed setting port port 0/1 (show serial command from port0/1 prompt). Initiate a terminal session to the host router on port0/1 by issuing the terminal command. If no response is received after hitting the enter key a few times, or if high ASCII characters are seen, issue the ~s command to reconfigure the serial settings for the terminal, Configuration Guide Cisco UCS Express Local Management Platform 34

38 and try toggling the serial bit rate (try 19200, 38400, and ). Hit the <enter> key after each serial speed configuration to check if a response is received. Can t Connect to Managed Device CLI Verify that the permit statement in the incoming ACL for the asynchronous lines on the router has the current IP address of the Uplogix LM. Verify that the Uplogix LM has successfully connected to the managed device console port by issuing the show dashboard command and looking for an asterisk in the Con column of the dashboard for the port. If the dashboard does not show a connection to the device, verify that the virtual port configuration is correct (correct router IP address and TCP port number for the serial line connected to the managed device) by issuing the show system slot command at the Uplogix LM prompt. Navigate to the managed device port in the Uplogix LM and issue the terminal command to connect to the managed device s CLI. If no response is received after hitting the enter key a few times, or if high ASCII characters are seen, issue the ~s command to reconfigure the serial settings for the terminal, and try toggling the serial bit rate (try 19200, 38400, and ). Hit the enter key after each serial speed configuration to check if a response is received. Modem Does Not Work Check the USB devices associated with the Uplogix Local Manager VM in the hypervisor to make sure the 3G modem is mapped to the Uplogix VM. Verify that the Uplogix LM has successfully connected to the modem by issuing the show dashboard command and looking for an asterisk in the Con column of the dashboard for the modem. If the dashboard does not show a connection to the modem, verify that the modem slot configuration is correct (correct router IP address and TCP port number for the modem line) by issuing the show system slot modem command at the Uplogix LM prompt. Navigate to the modem port in the Uplogix LM and issue the terminal command to connect to the modem command line interface. Issue the AT command. If no response is received, issue the ~s command to reconfigure the serial settings for the terminal, and try toggling the serial bit rate (try 19200, 38400, 57600, and ). Attempt to issue the AT command after toggling the serial bit rate to check if a response is received. Issue the show answer command at the modem configuration prompt and validate that the modem initialization string is correct. If the modem is a Cisco 3G HWIC modem, log into the router and issue the show cellular 0/3/0 all command (this command assumes the 3G HWIC is located in HWIC slot 3) to examine the hardware, profile, data connection, network, radio, and modem security information. Validate modem configuration and functionality. Security ACL on Host Router Allow If a VNC connection to the hypervisor (i.e. the Uplogix Local Manager console port) displays a black screen, make sure the VNC client is set to use all colors and hextile encoding. Configuration Guide Cisco UCS Express Local Management Platform 35

39 12. Appendix Alternate Network Configurations IOS Layer 3 Routed Configuration Devices in Same Branch Subnet This configuration only differs from the Devices in Different Branch Subnets configuration in that it places the Uplogix LM in the same branch subnet as other virtual machines. See the Cisco SRE Configuration Guide for more information. MGF Layer 2 Switched Configuration This configuration model utilizes an EtherSwitch EHWIC or an EtherSwitch Service Module in the router. The MGF backplane switch connects the virtual network on the SRE- V to an EtherSwitch EHWIC or EtherSwitch service module, without sending the traffic through the router CPU. Uplogix does not recommend this configuration because all of the traffic between the Uplogix LM and the managed devices must pass through the router (to the asynchronous lines), constituting much of the traffic to and from the Uplogix LM. Network Connectivity Redundancy Options The Uplogix LM can be configured to use a secondary Ethernet management interface (i.e. the gigabit Ethernet connection on the SRE- V) for network redundancy purposes in addition to or in lieu of a cellular modem. Bonding Redundancy Option Configuration This option places the secondary Ethernet management port in bonded mode (the default configuration). Bonding combines both the primary and secondary Ethernet interfaces into one logical bond0 interface, where the primary Ethernet port is active and the secondary Ethernet port is in a standby mode. If communication over the primary Ethernet management interface (depicted as Router Ethernet below) fails for any reason (switch port, cable, interface or any failure along the Layer 2 path between the Uplogix LM and its gateway), the system automatically fails over to the secondary Ethernet management interface (depicted as SRE Ethernet below), maintaining the same IP and MAC addresses. The 3G modem is configured as an out- of- band option should both primary and secondary Ethernet interfaces experience network communication outages. In this topology, the primary Ethernet management interface for the Uplogix Local Manager VM passes through the router to one of the fixed router Gigabit Ethernet interfaces (with the aid of Cisco s Integrated Routing and Bridging feature), effectively giving the Uplogix LM a Layer 2 path through the router to an access switch. The secondary Ethernet interface is connected to another switch port (ideally on a different access switch) in the same VLAN as the primary Ethernet interface. Configuration Guide Cisco UCS Express Local Management Platform 36

40 Sample IOS Configuration This example assumes that GigabitEthernet0/0 on the router is connected to a switch port in VLAN=167 on an access switch, where the SVI for that VLAN has an IP address of ! bridge irb bridge 1 protocol ieee bridge 1 route ip! interface GigabitEthernet0/0 no ip address duplex auto speed auto bridge- group 1! interface SM1/0 ip address service- module ip address !Application: SRE- V Running on SMV service- module ip default- gateway ! interface SM1/1 description Internal switch interface connected to Service Module switchport mode trunk! interface Vlan1 description management VLAN linked to VLAN=167 on access switch no ip address bridge- group 1! interface BVI1 description Router IP address for Management VLAN ip address ! ip route Out- Of- Band Redundancy Option Configuration This option places the secondary Ethernet management port in an out- of- band mode. When in this mode, the secondary Ethernet port remains in a standby mode until the Uplogix LM detects a communication failure on the primary Ethernet management interface (i.e. the router internet connection). If the router loses network connectivity, the Uplogix LM establishes an out- of- band network connection over the secondary Ethernet management port (connected to the DSL modem) that remains active until router network connectivity is restored. Note: A cellular modem cannot be utilized in this configuration, as the secondary Ethernet becomes the out- of- band option. This option does not require any additional router configuration. Configuration Guide Cisco UCS Express Local Management Platform 37