Cisco Prime Network Services Controller 3.0 CLI Configuration Guide

Transcription

1 Cisco Prime Network Services Controller 3.0 Configuration Guide January Chapter 1 Overview... 4 Information About Prime Network Services Controller... 4 Information About the Prime Network Services Controller... 5 Accessing the Prime Network Services Controller... 5 Overview of the Prime Network Services Controller s... 6 Prime Network Services Controller Basic s... 9 Chapter 2 Managing Prime Network Services Controller Rebooting Prime Network Services Controller Updating the System Setting the Host Name Restoring Prime Network Services Controller Working With Services Reinitializing the Database Restarting Services Starting Services Displaying the Status of Services Stopping Services Managing Files and Applications Copying a File Deleting a File Managing the Bootflash and Volatile Directories Managing Security Managing the Network Interface Setting the IP Address Setting the Gateway Address Setting the Netmask Using the Ping Setting Terminal Session Parameters Setting the Terminal Length Setting the Session Timeout Setting the Terminal Width Displaying System Information Displaying Providers Displaying Information , 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 169

2 Displaying the Clock Displaying the Configuration Information Displaying the Network Interface Displaying System Information Displaying Version Numbers Displaying Technical Support Information Displaying the Update History Displaying FSMs Chapter 3 Managing File Backups and Management Data Exports and Imports Restoring the Cisco Prime Network Services Controller Software to the Backup Configuration Working with File Backups Creating File Backups Deleting File Backups Displaying File Backups Enabling File Backups Disabling File Backups Working With File Backup Attributes Working With Management Data Exports and Imports Creating Management Data Export Services Deleting Management Data Export Services Displaying Management Data Export Services Enabling Management Data Export Services Disabling Management Data Export Services Creating Management Data Import Services Deleting Management Data Import Service Displaying Management Data Import Services Enabling Management Data Import Services Disabling Management Data Import Services Working With Management Data Attributes Chapter 4 Managing Logs, Events, and Faults Working With Management Logs Setting Log Severity Levels and Log Size Resetting the Management Log Levels Saving Management Log Parameters Displaying Management Logs Acknowledging Faults Displaying Audit Logs Displaying Events Displaying Faults Chapter 5 Managing the Device Profile Creating a DNS Server Host Name Creating an NTP Server Host Name Deleting a DNS Server Host Name Deleting an NTP Server Host Name Changing the Domain Name Displaying the Device Profile Setting the Core File Policy Setting the Fault Policy Setting the Log Policy Setting the Syslog Policy Setting the Timezone Displaying the DNS Server Displaying the Domain Name Displaying the NTP Server Chapter 6 Managing Policies Working With Core File Policies Creating a Core File Policy Displaying Core File Policies , 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 169

3 Deleting a Core File Policy Working With Fault Policies Creating a Fault Policy Displaying Fault Policies Deleting a Fault Policy Working With Log Policies Creating a Log Policy Displaying Log Policies Deleting a Log Policy Working With Syslog Policies Creating a Syslog Policy Displaying Syslog Policies Deleting a Syslog Policy Chapter 7 Setting Attributes for Core File, Fault, and Log Policies Setting Core File Policy Attributes Setting the Administration State Setting the Description Setting the Host Name Setting the Path Setting the Port Setting Fault Policy Atttributes Setting the Administration State Setting Clear Action Setting the Description Setting the Flap Interval Setting the Retention Interval Setting Log Policy Attributes Setting the Backup Count Setting the Description Setting the Level Setting the Size Chapter 8 Setting Attributes for Syslog Policies Assigning a Description to a Syslog Policy Sending Syslog Alerts Working With the Console Attribute Creating the Console Attribute Enabling the Console Attribute Disabling the Console Attribute Setting the Console Attribute Working With the File Attribute Creating the File Enabling the File Disabling the File Setting the File Working With the Monitor Attribute Creating the Monitor Enabling the Monitor Disabling the Monitor Setting the Monitor Working With the Remote Destination Attribute Creating Remote Destinations Enabling Remote Destinations Disabling Remote Destinations Setting Remote Destinations Index Chapter 9 Obtaining Documentation, Obtaining Support, and Security Guidelines , 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 169

4 Chapter 1 Overview The following sections provide basic information about Prime Network Services Controller and the Prime Network Services Controller : Information About Prime Network Services Controller Information About the Prime Network Services Controller Information About Prime Network Services Controller Prime Network Services Controller is a virtual appliance, based on Red Hat Enterprise Linux (RHEL), that provides centralized device and security policy management of the Cisco Virtual Security Gateway (VSG) and Cisco Adaptive Security Appliance 1000V (ASA 1000V) Cloud Firewall. VSG is a virtual firewall appliance for the Cisco Nexus 1000V Series switch. VSG provides trusted access to virtual data center and cloud environments. VSG enables a broad set of multi-tenant workloads that have varied security profiles to share a common compute infrastructure in a virtual data center private cloud or in a public cloud. By associating one or more virtual machines (VMs) with distinct trust zones, VSG ensures that access to trust zones is controlled and monitored through established security policies. ASA 1000V is a virtual appliance that was developed using the ASA infrastructure to secure the tenant edge in multi-tenant environments with Nexus 1000V deployments. It provides edge features and functionality (including site-to-site VPN, NAT, and DHCP), acts as a default gateway, and secures the VMs within the tenant against any network-based attacks. Designed for multi-tenant operation, Prime Network Services Controller provides seamless, scalable, and automation-centric management for virtualized data center and cloud environments. With a web-based GUI,, and XML APIs, Prime Network Services Controller allows you to manage VSGs and ASA 1000Vs that are deployed throughout the data center from a centralized location. Multi-tenancy refers to the architectural principle, where a single instance of the software runs on a Software-as-a- Service (SaaS) server, serving multiple client organizations or tenants. Multi-tenancy is contrasted with a multiinstance architecture, where separate software instances are set up for different client organizations. With a multitenant architecture, a software application is designed to virtually partition data and configurations, so that each tenant works with a customized virtual application instance. Prime Network Services Controller is built on an information model-driven architecture, where each managed device is represented by its subcomponents. This architecture enables Prime Network Services Controller to provide greater agility and simplification for securing multi-tenant infrastructure. Prime Network Services Controller communicates with vcenter, VSM, ASA 1000V, and VSG over a management VLAN. 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 169

5 Information About the Prime Network Services Controller This section includes the following topics: Accessing the Prime Network Services Controller Overview of the Prime Network Services Controller Prime Network Services Controller Basic s Accessing the Prime Network Services Controller You can access the using either of the following ways: Using the VSphere Client to Access the Prime Network Services Controller Using SSH to Access the Prime Network Services Controller Using the vsphere Client to Access the Prime Network Services Controller To access the Prime Network Services Controller from within the vsphere Client: 1. Choose Home > Inventory > Hosts and Clusters. 2. From the pane on the left side, choose Prime Network Services Controller VM. 3. Click the Console tab to access the Prime Network 4. Login as admin with the Prime Network Services Controller password specified at Prime Network Services Controller installation time. EXAMPLE hostname login: admin Password: MyPassword Using SSH to Access the Prime Network Services Controller To access the Prime Network Services Controller from SSH: 1. Enter the command ssh admin@nsc-ip where NSC-IP is your Prime Network Services Controller IP address. 2. When the following prompt appears, enter your Prime Network Services Controller administrator password. admin@nsc-ip's password: 3. (Optional) If you are asked for confirmation to save your Prime Network Services Controller IP to ssh known_hosts, enter yes. EXAMPLE This example shows how to access the Prime Network Services Controller using SSH: $ ssh admin@ admin@ 's password: Last login: Fri Aug 10 20:49: from Logged in from Cisco Prime Network Services Controller TAC support: Copyright (c) , Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software are owned by other third parties and used and distributed under license. Certain components of this software are licensed under 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 169

6 the GNU General Public License (GPL) version 2.0 or the GNU Lesser General Public License (LGPL) Version 2.1. A copy of each such license is available at and host-name# Overview of the Prime Network Services Controller s An important component of Prime Network Services Controller is the. With it, you can perform the following tasks: Restore Prime Network Services Controller to a full state without having to reinstall Prime Network Services Controller. Collect technical support data and copy it to a file. Change the hostname. Change the management interface IP settings. Configure Prime Network Services Controller device profiles. Create Prime Network Services Controller system policies. Create backups and import/export services. Prime Network Services Controller contains six sub-s. You use all six sub-s to manage Prime Network Services Controller. The s are as follows: Management controller This is the default. The command prompt is host-name#. Use this to perform the following tasks: host-name# commit-buffer Commit transaction buffer connect Connect to another discard-buffer Discard transaction buffer exit Exit from command interpreter scope Changes the current mode show Show system information terminal Terminal top Go to the top mode where Show information about the current mode host-name# show cli Information clock Clock configuration Configuration network-interface VM IP interface system Systems version Version of installed applications Local management This is the local management. The command prompt ishost-name(local-mgmt)#. Use this to perform the following tasks: host-name(local-mgmt)# connect Connect to another copy Copy a file delete Delete a file dir Show content of dir exit Exit from command interpreter modify Modify the shared secret on service registry ping Ping reboot Perform system reboot restore Restore the VM service Control services 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 169

7 show terminal top Update Show system information Terminal Go to the top mode Update the system using the specified image host-name(local-mgmt)# connect local-mgmt Local-mgmt policy-mgr Policy-mgr resource-mgr Resource-mgr service-reg Service-reg vm-mgr Vm-mgr host-name(local-mgmt)# show cli Information clock Clock tech-support Show tech support update-history show update system image history version Version of installed applications Policy manager This is the policy manager. The command prompt is host-name(policy-mgr)#. Use this to perform the following tasks: host-name(policy-mgr)# commit-buffer Commit transaction buffer connect Connect to Another discard-buffer Discard transaction buffer exit Exit from command interpreter scope Changes the current mode show Show system information terminal Terminal top Go to the top mode where Show information about the current mode host-name(policy-mgr)# connect policy-mgr Policy-mgr resource-mgr Resource-mgr service-reg Service-reg vm-mgr Vm-mgr host-name(policy-mgr)# scope monitoring Monitor the system org Organizations host-name(policy-mgr)# show cli Information configuration Configuration org Organizations timezone Set timezone version Version of installed applications Resource manager This is the resource manager. The command prompt is host-name(resourcemgr)#. Use this to perform the following tasks: host-name(resource-mgr)# commit-buffer Commit transaction buffer connect Connect to Another discard-buffer Discard transaction buffer exit Exit from command interpreter scope Changes the current mode show Show system information terminal Terminal top Go to the top mode 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 169

8 where Show information about the current mode host-name(resource-mgr)# connect policy-mgr Policy-mgr resource-mgr Resource-mgr service-reg Service-reg vm-mgr Vm-mgr host-name(resource-mgr)# scope monitoring Monitor the system host-name(resource-mgr)# show cli Information configuration Configuration version Version of installed applications Service registry This is the service registry. The command prompt is host-name(service-reg)#. Use this to perform the following tasks: host-name(service-reg)# acknowledge Acknowledge commit-buffer Commit transaction buffer connect Connect to Another discard-buffer Discard transaction buffer exit Exit from command interpreter scope Changes the current mode show Show system information terminal Terminal top Go to the top mode where Show information about the current mode host-name(service-reg)# connect policy-mgr Policy-mgr resource-mgr Resource-mgr service-reg Service-reg vm-mgr Vm-mgr host-name(service-reg)# scope monitoring Monitor the system host-name(service-reg)# show cli Information clients Show registered clients configuration Configuration controllers Show registered controllers fault Fault providers Show registered providers version Version of installed applications Virtual machine manager This is the virtual machine manager. The command prompt is hostname(vm-mgr)#. Use this to perform the following tasks: host-name(vm-mgr)# commit-buffer Commit transaction buffer connect Connect to Another discard-buffer Discard transaction buffer exit Exit from command interpreter scope Changes the current mode show Show system information terminal Terminal top Go to the top mode 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 169

9 where Show information about the current mode host-name(vm-mgr)# connect policy-mgr Policy-mgr resource-mgr Resource-mgr service-reg Service-reg vm-mgr Vm-mgr host-name(vm-mgr)# scope monitoring Monitor the system host-name(vm-mgr)# show cli Information configuration Configuration version Version of installed applications Prime Network Services Controller Basic s The basic commands for the Prime Network Services Controller are as follows: commit-buffer Saves the configuration. commit-buffer can be used with the optional keyword verify-only. When you execute commit-buffer verifyonly the configuration is verified but not saved. connect Connects to other s. discard-buffer Deletes the configuration. enter Creates an object and places you in a mode. exit Exits modes, s, and the default. scope Places you in a mode. show Displays information. top Places you in management controller mode. where Shows you where you are at in the Prime Network? Displays the commands available in the mode. > Redirects show commands to a file. >> Redirect show commands to a file in append mode. Pipes show command output to a filter. 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 169

10 Chapter 2 Managing Prime Network Services Controller This following sections provide procedures for managing Prime Network Services Controller: Rebooting Updating the System Setting the Host Name Restoring Working With Services Reinitializing the Database Restarting Services Managing Files and Applications Managing Security Managing the Network Interface Setting Terminal Session Parameters Displaying System Information Rebooting Prime Network Services Controller You can reboot Prime Network Services Controller. Local management 1. connect local-mgmt 2. reboot Step 1 connect local-mgmt nsc# connect local-mgmt Step 2 reboot Places you in the local management. Reboots Prime Network Services Controller. nsc(local-mgmt)# reboot 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 169

11 This example shows how to reboot Prime Network Services Controller: nsc# connect local-mgmt Cisco Prime Network Services Controller TAC support: Copyright (c) , Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software are owned by other third parties and used and distributed under license. Certain components of this software are licensed under the GNU General Public License (GPL) version 2.0 or the GNU Lesser General Public License (LGPL) Version 2.1. A copy of each such license is available at and nsc(local-mgmt)# reboot The VM will be rebooted. Are you sure? (yes/no): yes Rebooting... Broadcast message from root (pts/0) (Thu Sep 30 01:52: ): The system is going down for reboot NOW! nsc(local-mgmt)# Updating the System You can update the system. Local management 1. connect local-mgmt 2. update {bootflash: ftp: scp: sftp: volatile:} <uri> Note: Do not use TFTP to update the system. Step 1 connect local-mgmt nsc# connect local-mgmt Places you in the local management. 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 169

12 Step 2 update Updates the system. nsc (local-mgmt)# update bootflash:/pnsc.3.0.bin This example shows how to update the system: nsc# connect local-mgmt Cisco Prime Network Services Controller TAC support: Copyright (c) , Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software are owned by other third parties and used and distributed under license. Certain components of this software are licensed under the GNU General Public License (GPL) version 2.0 or the GNU Lesser General Public License (LGPL) Version 2.1. A copy of each such license is available at and nsc(local-mgmt)# update bootflash:/pnsc.3.0.bin Setting the Host Name You can set the host name. Caution: Changing the host name will cause new certificate generation designed to warn the user of the impact of the change. The VM Manager Extension file would have to be exported again and installed on vcenter. Any web browser client that had the certificate installed will get a prompt for a new certificate. Changing the certificate will also cause InterCloud Switch and Virtual Supervisor Module (VSM) instances to lose visibility and Prime Network Services Controller will be unable to manage the devices. To reconnect a VSM, use the VSM to uninstall and then reinstall the VSM-CPA. To reconnect an InterCloud Switch, reboot the InterCloud Switch from the Prime Network Services Controller GUI. Management controller 1. scope system 2. set hostname 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 169

13 Step 1 scope system Places you in system mode. nsc# scope system Step 2 set hostname Sets the host name. Step 3 nsc /system # set hostname testhost commit-buffer Commits (saves) the configuration. nsc /system* # commit-buffer This example shows how to set the host name: nsc# scope system nsc /system # set hostname testhost nsc /system* # commit-buffer nsc /system # Restoring Prime Network Services Controller You can restore Prime Network Services Controller. Management controller 1. connect local-mgmt 2. restore {ftp: scp: sftp:} <uri-remote-file> Note: Do not use TFTP to restore Prime Network Services Controller. 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 169

14 Step 1 connect local-mgmt Places you in the local management. nsc# connect local-mgmt Step 2 restore nsc(local-mgmt)# restore scp://jsmith@ /ws/jsmith-sjc This example shows how to restore Prime Network Services Controller: nsc# connect local-mgmt Cisco Prime Network Services Controller TAC support: Copyright (c) , Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software are owned by other third parties and used and distributed under license. Certain components of this software are licensed under the GNU General Public License (GPL) version 2.0 or the GNU Lesser General Public License (LGPL) Version 2.1. A copy of each such license is available at and nsc(local-mgmt)# restore scp://jsmith@ /ws/jsmithsjc/483fullstatesftp Enter password: Stopping services Extracting files Configuring network NOTE - the IP address you're restoring from differs from your current IP, you might lose network connectivity nsc(local-mgmt)# Working With Services The following topics describe how to reinitialize your database, and start and stop services: Reinitializing the Database Restarting Services Starting Services Displaying the Status of Services Stopping Services 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 169

15 Reinitializing the Database You can reinitialize your database. Local management 1. connect local-mgmt 2. service reinit Step 1 connect local-mgmt Places you in the local management. nsc# connect local-mgmt Step 2 service reinit Reinitializes the database. nsc(local-mgmt)# service reinit This example shows how to reinitialize a database: nsc# connect local-mgmt Cisco Prime Network Services Controller TAC support: Copyright (c) , Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software are owned by other third parties and used and distributed under license. Certain components of this software are licensed under the GNU General Public License (GPL) version 2.0 or the GNU Lesser General Public License (LGPL) Version 2.1. A copy of each such license is available at and nsc(local-mgmt)# service reinit The Prime Network Services Controller databases will be reinitialized. Are you sure? (yes/no): yes Shutting down pmon: [ OK ] Starting pmon: [ OK ] nsc(local-mgmt)# 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 15 of 169

16 Restarting Services You can restart services. Local management 1. connect local-mgmt 2. service restart Step 1 connect local-mgmt Places you in the local management. nsc# connect local-mgmt Step 2 service restart Restarts services. nsc(local-mgmt)# service restart This example shows how to restart services: nsc# connect local-mgmt Cisco Prime Network Services Controller TAC support: Copyright (c) , Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software are owned by other third parties and used and distributed under license. Certain components of this software are licensed under the GNU General Public License (GPL) version 2.0 or the GNU Lesser General Public License (LGPL) Version 2.1. A copy of each such license is available at and nsc(local-mgmt)# service restart Shutting down pmon: [ OK ] Starting pmon: nsc(local-mgmt)# 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 169

17 Starting Services You can start services. Local management 1. connect local-mgmt 2. service start Step 1 connect local-mgmt Places you in the local management. nsc# connect local-mgmt Step 2 service start Restarts services. nsc(local-mgmt)# service start This example shows how to start services: nsc# connect local-mgmt Cisco Prime Network Services Controller TAC support: Copyright (c) , Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software are owned by other third parties and used and distributed under license. Certain components of this software are licensed under the GNU General Public License (GPL) version 2.0 or the GNU Lesser General Public License (LGPL) Version 2.1. A copy of each such license is available at and nsc(local-mgmt)# service start Starting pmon: [ OK ] nsc(local-mgmt)# 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 17 of 169

18 Displaying the Status of Services You can display the status of services. Local management 1. connect local-mgmt 2. service status Step 1 connect local-mgmt Places you in the local management. nsc# connect local-mgmt Step 2 service status Shows the status of all your services. nsc(local-mgmt)# service status This example shows how to start services: nsc# connect local-mgmt Cisco Prime Network Services Controller TAC support: Copyright (c) , Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software are owned by other third parties and used and distributed under license. Certain components of this software are licensed under the GNU General Public License (GPL) version 2.0 or the GNU Lesser General Public License (LGPL) Version 2.1. A copy of each such license is available at and nsc(local-mgmt)# service status SERVICE NAME STATE RETRY(MAX) CORE pmon running N/A N/A core-svc_cor_dme running 0(4) no service-reg-svc_reg_dme running 0(4) no 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 18 of 169

19 core-svc_cor_secag running 0(4) no resource-mgr-svc_res_dme running 0(4) no policy-mgr-svc_pol_dme running 0(4) no sam_cores_mon.sh running 0(4) no vm-mgr-svc_vmm_dme running 0(4) no core-svc_cor_controllerag running 0(4) no vm-mgr-svc_vmm_vmag running 0(4) no core-httpd.sh running 0(4) no core-svc_cor_sessionmgrag running 0(4) no nsc(local-mgmt)# Stopping Services You can stop services. Local management 1. connect local-mgmt 2. service stop Step 1 connect local-mgmt Places you in the local management. nsc# connect local-mgmt Step 2 service stop Stops your services. nsc(local-mgmt)# service stop 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 19 of 169

20 This example shows how to stop services: nsc# connect local-mgmt Cisco Prime Network Services Controller TAC support: Copyright (c) , Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software are owned by other third parties and used and distributed under license. Certain components of this software are licensed under the GNU General Public License (GPL) version 2.0 or the GNU Lesser General Public License (LGPL) Version 2.1. A copy of each such license is available at and nsc(local-mgmt)# service stop Shutting down pmon: [ OK ] nsc(local-mgmt)# Managing Files and Applications This section includes the following topics: Copying a File Deleting a File Managing the Bootflash and Volatile Directories Copying a File You can copy files. Local management 1. connect local-mgmt 2. copy {bootflash: ftp: scp: stfp: tftp: volatile:} <uri-source-file> {bootflash: ftp: scp: stfp: tftp: volatile:} <uri-destination-file> 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 20 of 169

21 Step 1 connect local-mgmt Places you in the local management. Step 2 copy nsc# connect local-mgmt Copies the file. nsc(local-mgmt)# copy scp://jsmith@ /ws/jsmithsjc/pnsc.3.0.bin bootflash:/ This example shows how to copy a file: nsc# connect local-mgmt Cisco Prime Network Services Controller TAC support: Copyright (c) , Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software are owned by other third parties and used and distributed under license. Certain components of this software are licensed under the GNU General Public License (GPL) version 2.0 or the GNU Lesser General Public License (LGPL) Version 2.1. A copy of each such license is available at and nsc(local-mgmt)# copy scp://jsmith@ /ws/jsmith-sjc/pnsc.3.0.bin bootflash:/ Password: nsc(local-mgmt)# Deleting a File You can delete files. Local management 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 21 of 169

22 1. connect local-mgmt 2. delete {bootflash: volatile:} <uri-file> Step 1 connect local-mgmt Places you in the local management. Step 2 delete nsc# connect local-mgmt Deletes the file. nsc(local-mgmt)# delete bootflash:/pnsc.3.0.bin This example shows how to delete a file: nsc# connect local-mgmt Cisco Prime Network Services Controller TAC support: Copyright (c) , Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software are owned by other third parties and used and distributed under license. Certain components of this software are licensed under the GNU General Public License (GPL) version 2.0 or the GNU Lesser General Public License (LGPL) Version 2.1. A copy of each such license is available at and nsc(local-mgmt)# delete bootflash:/pnsc.3.0.bin Delete bootflash:///pnsc.3.0.bin? (yes/no): yes Deleted nsc(local-mgmt)# Managing the Bootflash and Volatile Directories You can manage the bootflash and volatile directories. Local management 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 22 of 169

23 1. connect local-mgmt 2. dir {bootflash: volatile:} Step 1 connect local-mgmt nsc# connect local-mgmt Places you in the local management. Step 2 dir nsc(local-mgmt)# dir bootflash: This example shows how to monitor the bootflash directory: nsc# connect local-mgmt Cisco Prime Network Services Controller TAC support: Copyright (c) , Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software are owned by other third parties and used and distributed under license. Certain components of this software are licensed under the GNU General Public License (GPL) version 2.0 or the GNU Lesser General Public License (LGPL) Version 2.1. A copy of each such license is available at and nsc(local-mgmt)# dir bootflash: 19M Jul PNSC-vsgpa.1.2.1b.bin 19M Jul PNSC-vsmpa.1.2.1b.bin 431M Aug 8 23:36 nsc.2.0.3f.bin Usage for bootflash:// KB used KB free KB total nsc(local-mgmt)# 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 23 of 169

24 Managing Security Local management 1. connect local-mgmt 2. modify shared-secret Step 1 connect local-mgmt Places you in the local management. nsc# connect local-mgmt Step 2 modify shared-secret nsc(local-mgmt)# modify shared-secret Changes the shared secret password. The password must be a minimum of 8 characters. This example shows how to modify the shared secret password: nsc# connect local-mgmt Cisco Prime Network Services Controller TAC support: Copyright (c) , Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software are owned by other third parties and used and distributed under license. Certain components of this software are licensed under the GNU General Public License (GPL) version 2.0 or the GNU Lesser General Public License (LGPL) Version 2.1. A copy of each such license is available at and nsc(local-mgmt)# modify shared-secret Enter the Shared Secret : Confirm Shared Secret : nsc(local-mgmt)# 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 24 of 169

25 Managing the Network Interface The following topics provide procedures for managing the virtual machine network interface: Setting the IP Address Setting the Gateway Address Setting the Netmask Using the Ping Setting the IP Address Caution: Once committed, this change might disconnect the current session. Local management 1. scope network-interface mgmt 2. set net ip <ip-address> 3. commit-buffer Step 1 scope network-interface mgmt nsc# scope network-interface mgmt Step 2 set net ip nsc /network-interface # set net ip Step 3 commit-buffer Places you in network-interface mode. Sets the IP address. The format of the argument is A.B.C.D. Commits (saves) the configuration. nsc /network-interface* # commit-buffer 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 25 of 169

26 This example shows how to set the IP address to : nsc# scope network-interface mgmt nsc /network-interface # set net ip Warning: When committed, this change may disconnect the current session. nsc /network-interface* # commit-buffer nsc /network-interface# Setting the Gateway Address Caution: You should be clear on what you are doing when resetting this property. Once it is reset, traffic in your network will be reset. Management controller 1. scope network-interface mgmt 2. set net gw <gateway-address> commit-buffer 3. commit-buffer Step 1 scope network-interface mgmt nsc# scope network-interface mgmt Step 2 set net gw nsc /network-interface # set net gw Step 3 commit-buffer Places you in network-interface mode. Sets the gateway address. The format of the argument is A.B.C.D. Commits (saves) the configuration. nsc /network-interface* # commit-buffer 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 26 of 169

27 This example shows how to set the gateway address to : nsc# scope network-interface mgmt nsc /network-interface # set net gw Warning: When committed, this change may disconnect the current session. nsc /network-interface* # commit-buffer nsc /network-interface # Setting the Netmask Caution: Once committed, this change might disconnect the current session. Management controller 1. scope network-interface mgmt 2. set net netmask <netmask> 3. commit-buffer Step 1 scope network-interface mgmt nsc# scope network-interface mgmt Step 2 set net netmask nsc# /network-interface # set net netmask Step 3 commit-buffer Places you in network-interface mode. Sets the gateway address. The format of the argument is A.B.C.D. Commits (saves) the configuration. nsc /network-interface* # commit-buffer 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 27 of 169

28 This example shows how to set the netmask to : nsc# scope network-interface mgmt nsc /network-interface # set net netmask Warning: When committed, this change may disconnect the current session. nsc /network-interface* # commit-buffer nsc /network-interface# Using the Ping You can ping the hostname or IP address of a device to ensure that you have connectivity to that device. Management controller scope network-interface mgmt ping <hostname or ip-address> commit-buffer Step 1 scope network-interface mgmt nsc# scope network-interface mgmt Step 2 ping <hostname or ip-address> Places you in network-interface mode. Ping the hostname or IP address. nsc(local-mgmt)# ping This example shows how to ping IP address : nsc# connect local-mgmt Cisco Prime Network Services Controller TAC support: Copyright (c) , Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software are owned by other third parties and used and distributed under license. Certain components of this software are licensed under the GNU General Public License (GPL) version 2.0 or the GNU Lesser General Public License (LGPL) Version 2.1. A copy of each such license is available at and 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 28 of 169

29 nsc(local-mgmt)# ping PING ( ) 56(84) bytes of data. 64 bytes from : icmp_seq=1 ttl=249 time=6.06 ms 64 bytes from : icmp_seq=2 ttl=249 time=1.55 ms 64 bytes from : icmp_seq=3 ttl=249 time=1.77 ms ping statistics packets transmitted, 3 received, 0% packet loss, time 2000ms rtt min/avg/max/mdev = 1.559/3.131/6.060/2.072 ms nsc(local-mgmt)# Setting Terminal Session Parameters You can set the terminal session parameters as described in the following sections: Setting the Terminal Length Setting the Session Timeout Setting the Terminal Width Setting the Terminal Length You can set the number of rows of characters that display on your computer screen when you execute a show command. Management controller 1. terminal length <terminal-length> Step 1 terminal length nsc# terminal length 46 Sets the number of rows that display. The range of valid values is 0 to 511. This example shows how to set the number of rows that display to 46: nsc# terminal length 46 nsc# 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 29 of 169

30 Setting the Session Timeout You can set the terminal session timeout. Management controller 1. terminal session-timeout <terminal session timeout in minutes> Step 1 terminal session-timeout nsc# terminal session-timeout 100 Sets the terminal session timeout. The range of valid values is 0 to minutes. This example shows how to set the terminal session timeout to 100 minutes: nsc# terminal session-timeout 100 nsc# Setting the Terminal Width You can set the number of columns of characters that display on your computer screen when you execute a show command. Management controller 1. terminal width <terminal width> 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 30 of 169

31 Step 1 terminal width nsc# terminal width 46 Sets the number of columns that display. The range of valid values is 24 to 511. This example shows how to set the number of columns that display to 46: nsc# terminal width 46 nsc# Displaying System Information This section includes the following topics: Displaying Providers Displaying Information Displaying the Clock Displaying the Configuration Information Displaying the Network Interface Displaying System Information Displaying Version Numbers Displaying Technical Support Information Displaying the Update History Displaying FSMs Displaying Providers You can display Prime Network Services Controller providers. Service registry 1. connect service-reg 2. show providers Step 1 connect service-reg nsc# connect service-reg Places you in the service registry. 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 31 of 169

32 Step 2 show providers Displays providers. nsc(policy-mgr)# show providers This example shows how to display providers: nsc# connect service-reg nsc(service-reg) # show providers Registered Providers: ID: 1001 Registered Provider IP: Registered Provider Name: PNSC Registered Provider Type: Policy Mgr ID: 1002 Registered Provider IP: Registered Provider Name: PNSC Registered Provider Type: Resource Mgr ID: 1004 Registered Provider IP: Registered Provider Name: PNSC Registered Provider Type: Vm Mgr Displaying Information You can display information about the Prime Network Management controller 1. show cli {command-status history mode-info shell-type} Step 1 show cli Displays information. nsc# show cli mode-info 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 32 of 169

33 This example shows how to display mode information: nsc# show cli mode-info Mode: / Mode Data: nsc# Displaying the Clock You can display the system clock. Management controller Local management 1. show clock Step 1 show clock Displays the clock. nsc# show clock This example shows how to display the clock: nsc# show clock Thu Nov Displaying the Configuration Information You can display the configuration information. Management controller Policy manager Resource manager Service registry 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 33 of 169

34 Virtual machine manager 1. (Optional) connect {policy-mgr resource-mgr service-reg vm-mgr} Note Step 1 is optional. You can also perform the show configuration command in the management controller. Each returns different configuration information, depending on the you logged into. 2. show configuration Step 1 show configuration Displays configuration information. nsc# show configuration This example shows how to display the configuration information of the management controller: nsc# show configuration scope system set hostname pnsc exit scope network-interface mgmt set net ip netmask gw exit nsc# Displaying the Network Interface You can display the network interface. Management controller 1. show network-interface [detail fsm status mgmt] Step 1 show network-interface Displays the network interface. nsc# show network-interface mgmt 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 34 of 169

35 This example shows how to display the interface ID, IP address, gateway, and netmask in table form: nsc# show network-interface mgmt VM IP interface: ID OOB IP Addr OOB Gateway OOB Netmask Mgmt nsc# This example shows how to display the interface ID, IP address, gateway, and netmask in list form: nsc# show network-interface detail VM IP interface: ID: Mgmt OOB IP Addr: OOB Gateway: OOB Netmask: Current Task: nsc# Displaying System Information You can display system information Management controller 1. show network-interface [detail fsm status] Step 1 show network-interface Displays the network interface. nsc# show network-interface mgmt This example shows how to display detailed information about the system: nsc# show system detail Systems: Hostname: nsc Address: Current Task: nsc# 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 35 of 169

36 Displaying Version Numbers You can display application version numbers. Management controller Local management 1. (Optional) connect local-mgmt Note: Step 1 is optional. You can also perform this show version command in the local management. 2. show version (Local Management) Step 1 connect local-mgmt nsc# connect local-mgmt Step 2 show version Places you in the local management. Displays the version number. nsc# show version Step 1 show version Displays the version number. nsc# show version This example shows how to display version numbers in the management controller : nsc# show version Name Package Version GUI core Base System 2.0(0) 2.0(0) service-reg Service Registry 2.0(0) 2.0(0) policy-mgr Policy Manager 2.0(0) 2.0(0) resource-mgr Resource Manager 2.0(0) 2.0(0) vm-mgr VM manager 2.0(0) none nsc# 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 36 of 169

37 Displaying Technical Support Information You can display technical support information. Local management 1. connect local-mgmt 2. show tech-support Step 1 connect local-mgmt nsc# connect local-mgmt Step 2 show tech-support nsc# show tech-support Places you in the local management. Displays technical support information. This example shows how to display version numbers in the management controller : nsc# connect local-mgmt Cisco Prime Network Services Controller TAC support: Copyright (c) , Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software are owned by other third parties and used and distributed under license. Certain components of this software are licensed under the GNU General Public License (GPL) version 2.0 or the GNU Lesser General Public License (LGPL) Version 2.1. A copy of each such license is available at and nsc(local-mgmt)# show tech-support Initiating tech-support information on NSC-TD.Cisco.com All tech-support tasks are completed. The detailed tech-support information is located at volatile:/// v NMC-TD.Cisco.com-techsupport.tgz nsc(local-mgmt)# 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 37 of 169

38 Displaying the Update History You can display the update system image history. Local management 1. connect local-mgmt 2. show update-history Step 1 connect local-mgmt nsc# connect local-mgmt Step 2 show update-history nsc(local-mgmt)# show update-history Places you in the local management. Displays update system image history. This example shows how to display the update system image history: nsc# connect local-mgmt Cisco Prime Network Services Controller TAC support: Copyright (c) , Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software are owned by other third parties and used and distributed under license. Certain components of this software are licensed under the GNU General Public License (GPL) version 2.0 or the GNU Lesser General Public License (LGPL) Version 2.1. A copy of each such license is available at and nsc(local-mgmt)# show update-history Thu Aug 9 02:05:01 UTC Thu Aug 9 02:05:01 UTC Starting Apache Update Thu Aug 9 02:05:01 UTC Thu Aug 9 02:05:01 UTC found for httpscert Thu Aug 9 02:05:01 UTC found for httpscacert 2013, 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 38 of 169

39 Thu Aug 9 02:05:01 UTC found for combinedcert Thu Aug 9 02:05:01 UTC found for keyfile Thu Aug 9 02:05:01 UTC found for unsecureport Thu Aug 9 02:05:01 UTC found for secureport Thu Aug 9 02:05:01 UTC found for commproto Thu Aug 9 02:05:01 UTC found for hn Thu Aug 9 02:05:01 UTC found for domain Thu Aug 9 02:05:01 UTC Cannot find necessary cert values, skipping until setup has been run Thu Aug 9 02:05:01 UTC Thu Aug 9 02:05:01 UTC Completed Apache Update Thu Aug 9 02:05:01 UTC Thu Aug 9 02:06:30 UTC Cleaning up extracted files Thu Aug 9 02:06:30 UTC Cleaning up bin file Thu Aug 9 17:05:54 UTC Thu Aug 9 17:05:54 UTC Starting Apache Update Thu Aug 9 17:05:54 UTC Thu Aug 9 17:05:54 UTC found /opt/cisco/cert/cacertificate.pem for httpscert Thu Aug 9 17:05:54 UTC found /opt/cisco/cert/cacertificate.pem for httpscacert Thu Aug 9 17:05:54 UTC found /opt/cisco/cert/combined.pem for combinedcert Thu Aug 9 17:05:54 UTC found /opt/cisco/cert/privkey.pem for keyfile Thu Aug 9 17:05:54 UTC found 80 for unsecureport Thu Aug 9 17:05:54 UTC found 443 for secureport Thu Aug 9 17:05:54 UTC found HTTPS for commproto Thu Aug 9 17:05:54 UTC found Prime Network Services Controller for hn Thu Aug 9 17:05:54 UTC found cisco.com for domain Thu Aug 9 17:05:54 UTC Updating httpd.conf for core dos2unix: converting file /opt/cisco/core/apache/conf/httpd.conf to UNIX format... dos2unix: converting file /opt/cisco/core/apache/conf/httpd.conf to UNIX format... Thu Aug 9 17:05:54 UTC Updating httpd-ssl.conf for core dos2unix: converting file /opt/cisco/core/apache/conf/extra/httpd-ssl.conf to UNIX format... dos2unix: converting file /opt/cisco/core/apache/conf/extra/httpd-ssl.conf to UNIX format... Thu Aug 9 17:05:54 UTC Thu Aug 9 17:05:54 UTC Completed Apache Update Thu Aug 9 17:05:54 UTC dos2unix: converting file /etc/sysconfig/iptables-config to UNIX format... dos2unix: converting file /etc/sysconfig/clock to UNIX format... Thu Aug 9 17:09:16 UTC , 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 39 of 169