EMC VoyenceControl version Device Services Support (DSR) P/N Rev 02

Transcription

1 EMC VoyenceControl version Device Services Support (DSR) P/N Rev 02 EMC Corporation Corporate Headquarters Hopkinton, MA

2 COPYRIGHT Copyright 2008 EMC Corporation. All rights reserved. Published August 2008 EMC believes the information in this publication is accurate as of its publication date. The information is subject to change without notice. THE INFORMATION IN THIS PUBLICATION IS PROVIDED "AS IS." EMC CORPORATION MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND WITH RESPECT TO THE INFORMATION IN THIS PUBLICATION, AND SPECIFICALLY DISCLAIMS IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Use, copying, and distribution of any EMC software described in this publication requires an applicable software license. For the most up-to-date listing of EMC product names, see EMC Corporation Trademarks on EMC.com. All other trademarks used herein are the property of their respective owners. Page 2

3 TABLE OF CONTENTS COPYRIGHT... 2 PREFACE Who Should Read this Document? Related Publications INTRODUCTION About this Manual Compatibility DEVICE DRIVER INFORMATION Device Drivers Additions to Existing Device Drivers: Enabling Inactive Device Classes ADDITIONAL DEVICE ISSUES COM DEVICES Com Netbuilder II Router Features Available Multi-Config Files Device Data Com Switch Features Available Device Commands Known Issues ACME DEVICES Acme Packet NetNet Router Features Available ADTRAN DEVICES Adtran Netvanta Features Available Multi-Config Files Device Data Known Issues Adtran Netvanta Switch Features Available Multi-Config Files Page 3

4 Device Data Known Issues AIRESPACE DEVICES Airespace Switch Features Available Multi-Config Files Device Data Known Issues ALCATEL DEVICES Alcatel OmniCore Features Available Multi-Config Files Device Data Alcatel Omniswitch Features Available Device Commands Multi-Config Files Device Data ALVARION DEVICES Alvarion Breeze AP Features Available Device Commands Known Issues ARUBA DEVICES Aruba Wireless Switch Features Available Multi-Config Files Device Data CHECKPOINT DEVICES Checkpoint Firewall Features Available Multi-Config Files Device Data Known Issues CISCO DEVICES Cisco Aironet AP VXWorks Features Available Page 4

5 Multi-Config Files Device Data Cisco PIX Firewall Features Available Device Commands Multi-Config Files Device Data Known Issues Cisco VPN Features Available Multi-Config Files Device Data Cisco Aironet AP Package Features Available Multi-Config Files Device Data Cisco Aironet Bridge Package Features Available Multi-Config Files Device Data Cisco CatOS Switch Package Features Available Device Commands Multi-Config Files Device Data Known Issues Cisco Content Services Switch Features Available Multi-Config Files Device Data Cisco Router Features Available Device Commands Multi-Config Files Device Data Known Issues Cisco IOS Switch Package Features Available Page 5

6 Device Commands Multi-Config Files Device Data Known Issues Cisco Lightstream Package Features Available Multi-Config Files Device Data Cisco MDS Features Available Device Commands Multi-Config Files Device Data CITRIX DEVICES Citrix Netscaler LoadBalancer Features Available Multi-Config Files Device Data EDGEWATER DEVICES Edgewater EdgeMarc Router Features Available Multi-Config Files Device Data ENTERASYS DEVICES Enterasys Smartswitch Router Features Available Multi-Config Files Device Data Known Issues ERICSSON DEVICES Ericsson MSED Features Available Multi-Config Files Device Data EXTREME DEVICES Extreme Features Available Page 6

7 Multi-Config Files Device Data Known Issues F5 DEVICES F5 Load Balancer Rev Features Available Device Commands Multi-Config Files Device Data F5 Load Balancer Rev Features Available Multi-Config Files Device Data F5 Load Balancer Rev Features Available Device Commands Multi-Config Files Device Data FORCE10 DEVICES Force10 E-Series Router Features Available Multi-Config Files Device Data FOUNDRY DEVICES Foundry Package Features Available Discovery/Identify Device Device Commands Multi-Config Files Device Data HP DEVICES HP ProCurve Switch Features Available Device Commands Multi-Config Files Device Data Known Issues Page 7

8 JUNIPER DEVICES Juniper Router Package Features Available Multi-Config Files Device Data Known Issues LUCENT DEVICES Lucent Access Point Features Available Multi-Config Files Device Data MARCONI DEVICES Marconi ASX Features Available Device Commands Multi-Config Files Device Data Known Issues MILAN DEVICES SM801P Managed Switch Features Available Multi-Config Files Device Data MOTOROLA BSR BSR64000 Router Features Available Device Commands Multi-Config Files Device Data Known Issues MRV DEVICES MRV LX Terminal Server Features Available Multi-Config Files Device Data NETCACHE DEVICES NetCache Features Available Page 8

9 Multi-Config Files Device Data NETOPIA DEVICES Netopia R7000 Series Features Available Multi-Config Files Device Data NETSCREEN DEVICES Netscreen Firewall Features Available Multi-Config Files Device Data Known Issues NOKIA DEVICES kia IP Features Available Device Commands Multi-Config Files Device Data NORTEL DEVICES rtel Alteon Features Available Multi-Config Files Device Data rtel Router Features Available Multi-Config Files Device Data Known Issues rtel Baystack Features Available Multi-Config Files Device Data rtel BoSS Switch Features Available Multi-Config Files Device Data rtel Contivity Features Available Page 9

10 Multi-Config Files Device Data rtel Multi-Service Switch Features Available Multi-Config Files Device Data Known Issues rtel Passport Features Available Multi-Config Files Device Data rtel Passport Features Available Multi-Config Files Device Data Known Issues PACKETEER DEVICES Packeteer PacketShaper Features Available Multi-Config Files Device Data PARADYNE DEVICES Paradyne Features Available Device Commands Known Issues RADWARE DEVICES Radware WSD Load Balancer Features Available Multi-Config Files Device Data RIVERBED DEVICES Riverbed Steelhead Features Available Device Commands Multi-Config Files Device Data Known Issues Page 10

11 RIVERSTONE DEVICES Riverstone Router Features Available Config Files Device Data SIEMENS DEVICES Siemens Features Available Multi-Config Files Device Data STARENT DEVICES Starent PDSN Features Available Multi-Config Files Device Data SYMBOL DEVICES Symbol WS Features Available OS Management tes Multi-Config Files Device Data TASMAN DEVICES Tasman Router Features Available Multi-Config Files Device Data Known Issues WHERE TO GET HELP Where to get help GLOSSARY INDEX Page 11

12 PREFACE Who Should Read this Document? The information and procedures contained within this document are intended for those individuals who have the responsibility of installing and deploying devices and device drivers. Readers should be familiar with the following: Windows, Solaris, and Linux operating systems Database architecture and concepts Security management Internet protocols, including HTTP, TCP/IP, File Transfer Protocol (FTP), and Telnet Lightweight Directory Access Protocol (LDAP) and directory services Authentication and authorization Related Publications This section lists publications related to Device Services Support. VoyenceControl Device Server Configuration Guide, P/N Page 12

13 INTRODUCTION About this Manual The following information is included in this Device Services Support document. Device Driver Information Device Driver Features and Information Additions to Existing Device Drivers Additional Device Driver Support Device Issues Additional Device Information Compatibility This release is certified to work with VoyenceControl and VoyenceControl 4.0.1, on the following environments: Solaris 10 Red Hat Enterprise Linux 4.0 Microsoft Windows Server 2003 with Service Pack 1 Page 13

14 DEVICE DRIVER INFORMATION Device Drivers The following Device Drivers are included in this release: Acme Packet NetNet Router Motorola BSR64000 Router Riverbed Steelhead Additions to Existing Device Drivers: The following additions to existing Device Drivers are included in this release: Cisco Pix Firewall added Single Context and Multi-Context 7.0 support Cisco Content Services Switch added support for 11501, 11503, Edgewater EdgeMarc Router: Auto discovery will now recognize units using the Edgewater SNMP MIB at enterprises Added better OS version checking by directly reading the /etc/version file Packeteer PacketShaper added support for 3500 and 7500 Enabling Inactive Device Classes To enable a device class that is not enabled by default, follow these steps. Step Action Select Tools -> System Administration from the VoyenceControl menu bar. Select Global -> Device Classes to open the Global Managed Device Classes window. Click the Manage List button. Highlight the Supported Device Class you want to enable, and click the Add button. Repeat this step for all device classes you are enabling. Click Ok. Click Apply. te: Changes to device classes may affect the underlying Auto Discovery device classes configuration Click to confirm the changes. Click Ok. Click Close. Page 14

15 ADDITIONAL DEVICE ISSUES This section details existing device issues that may have been discovered with other Device Services Supported (formerly referred to as DSR) releases. In most cases, a resolution is included to address the issue. Parenthesis in Devices Hostnames - Communication Failures Issue: Using parenthesis in the device hostnames causes Management Communications (such as Configuration Pulls) to fail. Resolution: Ensure that the parentheses used in any existing device hostnames are removed. SNMP Communication Failures Issue: When devices have intermittent SNMP communications (due to device busy failures, or other Network traffic issues), SNMP timeouts may occur in the application. This can cause jobs to fail to devices where SNMP is enabled. Resolution: Refer to the, Device Servers Best Practices and the Edit Device Server Properties sections in the VoyenceControl Online User s Guide. The guide is available from the application s Help link. Once you have accessed the Online User s Guide, use the Search feature to locate the sections. Instructions found in the guide to edit the Device Server Properties include steps for adjusting the SNMP Timeout and Retry settings. You can increase these default settings to ensure timeouts do not occur during the SNMP Communication to the devices. Detecting Device Change Traps/Syslog in a NATTED Environment In a NATTED environment it is not easy to isolate and PULL the exact device from which a configuration changed Trap/Syslog is received based on the IP Address. To address this scenario a best effort PULL is done on all devices that have the IP Address on any of their interfaces if the CM_NATTEDIP_LOOKUP variable is enabled in the infrastructure database. In this release the infrastructure CM_NATTEDIP_LOOKUP will be enabled by the default. This can be disabled if needed in the infrastructure database. Cisco Layer 3 Switch Package The Cisco Layer 3 Switch package is not supported by the device server but is still provided for backward compatibility. This package cannot be used for discovering new Layer 3 Switches. Page 15

16 3COM DEVICES 3Com Netbuilder II Router Device Type Specific Model(s) Documentation/Information Enabled By Default Configuration Change tification (Events) Configuration Files Configuration Content Configuration Protocols User Interface Password Management Cut-Through Access Router Quick Commands Hardware Information Router All Netbuilder II Models bridrout/u_guides/html/index.htm Syslogs, SNMP Trap running ARP, Routes, Interfaces, Identity, System Properties Telnet/TFTP, SSH/TFTP CLI, SNMP SNMP In-Band Telnet/TFTP, SSH/TFTP Telnet/TFTP, SSH/TFTP In-Band Ping Model, OS Features Available Discover/Identify (SNMP) (Pull running configs) (Push Configlets, TERMlets) Device Access (Cut-Through, TERMlets, etc.) Configuration Change tification (SNMP Trap and Syslog Processing) The following are used to provide information about your device (Host Name, Type, Vendor, Model, Operating System, and Serial Number). Discovery Mechanism: Look for SW/NBII in sysdescr Look for ( ) in sysobjectid Operating System from sysdescr Model from lookup table based on sysobjectid Page 16

17 The following are the commands, or processes that are used to pull a configuration from your device. Get the boot directory using the sf 4 command Get a list of files in the boot directory excluding the BOOT.??K file copy [FILENAME] [SERVERIPADDR]:[FILENAME] The following are the commands, or processes that are used to push a configuration to your device. For each file backup above: copy [SERVERIPADDR]:[FILENAME] [FILENAME] Multi-Config Files Following are the files used when storing and revisioning multiple configuration files for multiconfig support. Multi-Config Files Push/Pull Pull Only running Device Data The following data represents device data per device class. Attributed Data ARP Table Access Control Lists CAM Table File System Information Identity Interfaces Keys Memory Access Control Lists Match Counts OSPF Settings Physical Hardware Routes System Properties VLAN Trunk Protocol VLANs Support Page 17

18 3Com Switch 5500 Device Type Switch Specific Model(s) 5500 Documentation/Information Enabled By Default Configuration Files Configuration Content Configuration Protocols User Interface Password Management Text, Running, Startup Quick Commands, Termlet Merge, Command, Configlet, Config Telnet, SSH, Telnet/TFTP, SSH/TFTP CLI SNMP Operating System 3.02 Cut-Through Access Router Quick Commands Hardware Information In-band, SNMP Telnet, SSH, Telnet/TFTP, SSH/TFTP Telnet/TFTP, SSH/TFTP Telnet, SSH Ping, Traceroute, View Routes, View Arp, View Interfaces, Test Credentials, Setup Diagnostic, View Diagnostic Setup, Setup NAT, View NatIP Setup SNMP Features Available Discover/Identify (auto discovery, identify, appear in product) (revision config, rollback, basic diagramming) (Push Configs, Configlets) Device Access (Cut-Through, TERMlets, etc.) Page 18

19 The following are used to provide information about your device (Host Name, Type, Vendor, Model, Operating System, and Serial Number). sysdescription contains Switch 5500 (case-insensitive) The following are the commands, or processes that are used to pull a configuration from your device. display current-configuration display saved-configuration display startup tftp deviceserveraddress put filename filename The following are the commands, or processes that are used to push a configuration to your device. startup configuration can only be transferred via TFTP tftp deviceserveraddress get filename filename Device Commands The following device command sets must be enabled to allow VoyenceControl NG to manage this device class. Device Configuration and Monitoring display current-configuration display saved-configuration display startup tftp deviceserveraddress [ get put localfilename remotefilename copy sourcefilename destfilename save filename delete filename ping ipaddress tracert ipaddress display ip interface display ip routing-table display arp Password Management display password-control local-user username level 2 service-type terminal telnet ssh password [ simple cipher ] password quit Page 19

20 undo local-user oldusername super password [ simple cipher ] newprivpass snmp-agent community [ read write ] newstring undo snmp-agent community oldstring Known Issues The following details existing device issues that have been discovered with other releases. In most cases, a resolution is included to address the issue. 3Com Switch 5500 In 3.01, startup configuration can only be pulled via TFTP; running configuration is not accessible via TFTP, only via the display command. Running configuration can only be pushed via terminal, but some commands may not merge the settings properly. Comments must be left unaltered in the configuration files or the changes may not be recognized. The backup and restore commands do not work for OS version 3.02, so explicit TFTP transfers are used instead. In version 3.01, previous user credentials cannot be removed due to a flaw in the session use count (user access number not 0). Page 20

21 ACME DEVICES Acme Packet NetNet Router Device Type Acme Packet NetNet Router Specific Model(s) 4000, 4000 PAC, 9000 Documentation/Information Enabled By Default Configuration Change tification (Events) Configuration Files Configuration Content Configuration Protocols User Interface Password Management Cut-Through Access Router Quick Commands Hardware Information Syslog, SNMP Traps Binary Quick Commands, Termlet, Command, Config SSH/FTP, Telnet/FTP CLI, SNMP SNMP In-Band SSH/FTP, Telnet/FTP SSH/FTP, Telnet/FTP Terminal Ping, Reboot, FTP Credentials For SNMP: Interfaces, Chassis Inventory Features Available Discover/Identify (auto discovery, identify, appear in product) (revision config, rollback, basic diagramming) (Push Configs) Device Access (Cut-Through, Device Commands, etc.) Configuration Change tification (SNMP Trap and Syslog Processing) Page 21

22 The following items are used to provide information about your device (Host Name, Type, Vendor, Model, Operating System, and Serial Number). SysObjectIDs: * Acme Packet in sysdescr Interface table from MIB-2 Following are the commands or processes used to pull a configuration from your device. From a console session issue the command create CFG [configtype] [temp_filename]. Transfer the config file created in the previous step from the device to DevServer via FTP. Following are the commands or processes used to push a configuration to your device. Transfer the config file from DevServer to the device via FTP. From a console session, issue the command get CFG [temp_filename] [device_ip] From a console session, issue the command extract CFG [configtype] [temp_filename] Page 22

23 ADTRAN DEVICES Adtran Netvanta Device Type Adtran Netvanta Specific Model(s) NetVanta 3200, NetVanta 3305, NetVanta 3205, NetVanta 5305, NetVanta 4305, Atlas 800, Atlas Generic, Atlas 800 Plus, Atlas 810, Atlas 550, Total Access 916e Documentation/Information - Enabled By Default Configuration Files Configuration Content Configuration Protocols User Interface Password Management Cut-Through Access Hardware Information Single Text, Running, Startup Quick Commands, Termlet Merge, Privilege Mode Termlet, User Mode Termlet, Command, Configlet Telnet/TFTP, SSH Only, Telnet Only IOS like SNMP Required Enable, In-Band, SNMP Terminal, SSH, TFTP Terminal, SSH, TFTP Terminal For SNMP: Memory, Interfaces, Serial Number Features Available Discover/Identify (auto discovery, identify, appear in product) (revision config, rollback, basic diagramming) (Push Configs, Configlets) Device Access (Cut-Through, TERMlets, etc.) Page 23

24 The following items are used to provide information about your device (Host Name, Type, Vendor, Model, Operating System, and Serial Number). sysobjectid Following are the commands or processes used to pull a configuration from your device. Telnet/TFTP copy startup-config tftp copy running-config tftp Telnet/SSH show startup show running copy running-config startup-config Multi-Config Files Following are the files used when storing and revisioning multiple configuration files for multiconfig support. Multi-Config Files Push/Pull Pull Only running startup Device Data The following data represents device data per device class. Attributed Data ARP Table Access Control Lists CAM Table File System Information Identity Interfaces Keys Memory Access Control Lists Match Counts OSPF Settings Physical Hardware Routes System Properties VLAN Trunk Protocol VLANs Support Page 24

25 Known Issues The following information details existing device issues that have been discovered within other releases. In most cases, a resolution is included to address the issue. Adtran NetVanta drivers Adtran NetVanta and Adtran NetVanta Switch drivers may experience problems if configured with the message of the day banner. Adtran Netvanta Router - Serial Numbers t Displaying The Adtran Netvanta Router does not show the serial number when using SNMP. Page 25

26 Adtran Netvanta Switch Device Type Specific Model(s) Documentation/Information - Enabled By Default Configuration Files Configuration Content Configuration Protocols User Interface Password Management Cut-Through Access Hardware Information Adtran Netvanta Switch NetVanta 1224, NetVanta 1224R, NetVanta 1224 STR Single Text Quick Commands, Termlet Merge, Privilege Mode Termlet, User Mode Termlet, Configlet Telnet/TFTP, SSH Only, Telnet Only IOS like SNMP Enable, In-Band, SNMP Terminal, SSH, TFTP Terminal, SSH, TFTP Terminal For SNMP: Memory, Interfaces, Serial Number Features Available Discover/Identify (auto discovery, identify, appear in product) (revision config, rollback, basic diagramming) (Push Configs, Configlets) Device Access (Cut-Through, TERMlets, etc.) Page 26

27 The following items are used to provide information about your device (Host Name, Type, Vendor, Model, Operating System, and Serial Number). sysobjectid adtranifnumber Should be greater than 4 Following are the commands or processes used to pull a configuration from your device. Telnet/TFTP copy startup-config tftp copy running-config tftp Telnet/SSH show startup show running copy running-config startup-config Multi-Config Files Following are the files used when storing and revisioning multiple configuration files for multiconfig support. Multi-Config Files Push/Pull Pull Only running startup Page 27

28 Device Data The following data represents device data per device class. Attributed Data ARP Table Access Control Lists CAM Table File System Information Identity Interfaces Keys Memory Access Control Lists Match Counts OSPF Settings Physical Hardware Routes System Properties VLAN Trunk Protocol VLANs Support Known Issues The following information details existing device issues that have been discovered within other releases. In most cases, a resolution is included to address the issue. Adtran NetVanta Switch drivers Adtran NetVanta and Adtran NetVanta Switch drivers may experience problems if configured with the message of the day banner. Page 28

29 AIRESPACE DEVICES Airespace Switch Device Type Specific Model(s) Documentation/Information - Enabled By Default Configuration Files Configuration Content Configuration Protocols User Interface Password Management Wireless Switch Airespace Switch AS-4101 Binary Image Binary Telnet, TFTP, SSH CLI SNMP Only Account, SNMP Operating System Cut-Through Access Hardware Information Terminal/TFTP, SSH/TFTP Terminal/TFTP, SSH/TFTP, Terminal Terminal For SNMP: Memory, Interfaces, Serial Number Features Available Discover/Identify (auto discovery, identify, appear in product) (revision config, rollback, basic diagramming) (Push Configs, Configlets) Device Access (Cut-Through, TERMlets, etc.) The following items are used to provide information about your device (Host Name, Type, Vendor, Model, Operating System, and Serial Number). sysobjectid sysdescr, Switch Contains Airespace Switch Following are the commands or processes used to pull a configuration from your device. transfer upload Following are the commands or processes used to push a configuration to your device. Transfer download Page 29

30 Terminal, one line at a time Page 30

31 Multi-Config Files Following are the files used when storing and revisioning multiple configuration files for multiconfig support. Multi-Config Files Push/Pull Pull Only running Device Data The following data represents device data per device class. Attributed Data ARP Table Access Control Lists CAM Table File System Information Identity Interfaces Keys Memory Access Control Lists Match Counts OSPF Settings Physical Hardware Routes System Properties VLAN Trunk Protocol VLANs Support Known Issues The following information details existing device issues that have been discovered within other releases. In most cases, a resolution is included to address the issue. Airespace 4400 Issue: Over time, a client Out of Memory message may be displayed when opening or searching Checkpoint Firewall or Airespace device configurations that contain large binary files. Resolution: If a client Out of Memory message is displayed, first close, and then reopen the application. Page 31

32 ALCATEL DEVICES Alcatel OmniCore Device Type Alcatel Omnicore Routing Switch Specific Model(s) OmniCore 5052, OmniCore 5022 OmniCore 5010, OmniCore 13 OmniSwitch 5, OmniSwitch 9, OmniCell 5, OmniCell 9, OmniStack 1024 OmniStack 6024 OmniStack 8008 OmniAccess 408 OmniAccess 512 Documentation/Information - Enabled By Default Configuration Files Configuration Content Configuration Protocols User Interface Password Management Cut-Through Access Hardware Information Single Text Termlet Merge, Privilege Mode Termlet, User Mode Termlet SSH/TFTP, Telnet/TFTP, SSH Only, Telnet Only Command Line SNMP In-Band, SNMP Terminal, SSH, TFTP Terminal, SSH, TFTP Terminal For SNMP: Memory, Interfaces Features Available Discover/Identify (auto discovery, identify, appear in product) (revision config, rollback, basic diagramming) (Push Configs, Configlets) Device Access (Cut-Through, TERMlets, etc.) Configuration Change tification (SNMP Trap and Syslog Processing) Page 32

33 The following items are used to provide information about your device (Host Name, Type, Vendor, Model, Operating System, and Serial Number). SysObjectID or sysdesc contains Switch Following are the commands or processes used to pull a configuration from your device. Term write-config TFTP write-config tftp://"+serveripaddr+"/"+tftpfile(configfile.filename) Following are the commands or processes used to push a configuration to your device. Copy to start write mem TFTP copy tftp: Term Push is done by pushing one line at a time after connecting to a terminal session Multi-Config Files Following are the files used when storing and revisioning multiple configuration files for multiconfig support. Multi-Config Files Push/Pull Pull Only running Page 33

34 Device Data The following data represents device data per device class. Attributed Data ARP Table Access Control Lists CAM Table File System Information Identity Interfaces Keys Memory Access Control Lists Match Counts OSPF Settings Physical Hardware Routes System Properties VLAN Trunk Protocol VLANs Support Page 34

35 Alcatel Omniswitch Device Type Switch Specific Model(s) , 6624 Documentation/Information Enabled By Default Configuration Files User Interface Password Management Operating System Cut-Through Access OS Management Router Quick Commands CD-ROM Copy Single Text Command Line SNMP Terminal, Account, SNMP R01 GA R04 Telnet Only, SSH Only, Telnet/FTP, SSH/FTP Telnet Only, SSH Only, Telnet/FTP, SSH/FTP Terminal, SSH FTP, SCP View Interfaces (show ip interface), View Routes (show ip route), View ARP (show arp), Ping (ping ipaddress), TraceRoute (traceroute ipaddress) Features Available Discover/Identify (auto discovery, identify, appear in product) (revision config, rollback, basic diagramming) (Push Configs, Configlets) Configuration Change tification (SNMP Trap) Credentials Management (Change or Roll passwords and SNMP Communities) OS Management (Upgrade OS) The following items are used to provide information about your device (Host Name, Type, Vendor, Model, Operating System, and Serial Number). SysObjectID compared against Alcatel INDIBase.MIB ( ) Chassis serial number is taken from chassis entry of entphysicaltable is ENTITY-MIB Configs use FTP, Configlets use terminal (FTP must be enabled) Running (RAM) config is always synced with working (or running) config Copy to start is handled manually Cold boot starts from /flash/certified/boot.cfg unless identical to /flash/working/boot.cfg. If different, reload working no-rollback timeout must be issued or config changes will fail. Configlets distinguished from config by lack of /flash/working/boot.cfg comment, line 2 Page 35

36 The following are the commands, or processes that are used to pull a configuration from your device. For Terminal: show configuration snapshot For File Transfer: Configuration is pulled using FTP The following are the commands, or processes that are used to push a configuration to your device. For Terminal: Device commands are issued interactively from the stored configuration Device Commands Following are the device command sets you must enable to allow VoyenceControl NG to manage this device class. Device Configuration and Monitoring show system show running-directory no more ping reload working no rollback-timeout show arp show chassis show cmm show configuration snapshot show hardware info show health show interfaces show ip interface show ip protocols show ip route show module long show running-directory show system traceroute File Management cd copy running-config working copy working certified Page 36

37 delete freespace ftp hash ls Password Management [no] snmp community map [no] user password show snmp community map show user show user password-size Multi-Config Files Following are the files used when storing and revisioning multiple configuration files for multiconfig support. Multi-Config Files Push/Pull Pull Only running Device Data The following data represents device data per device class. Attributed Data ARP Table Access Control Lists CAM Table File System Information Identity Interfaces Keys Memory Access Control Lists Match Counts OSPF Settings Physical Hardware Routes System Properties VLAN Trunk Protocol VLANs Support Page 37

38 ALVARION DEVICES Alvarion Breeze AP Device Type Specific Model(s) Documentation/Information Enabled By Default Configuration Files Configuration Content Configuration Protocols User Interface Password Management Wireless Access Point BreezeACCESS SU-A/E-BD Ascii capture (no push) Config Telnet Menu SNMP In-band Operating System Cut-Through Access Router Quick Commands Hardware Information Telnet Telnet Test Credentials Chassis inventory Features Available Discover/Identify (auto discovery, identify, appear in product) (revision config, basic diagramming) Device Access (Cut-Through, TERMlets, etc.) The following are used to provide information about your device (Host Name, Type, Vendor, Model, Operating System, and Serial Number). sysname OID sysservices: bit 3 set brzaccunittype (from Breeze-Access-MIB) The following are the commands, or processes that are used to pull a configuration from your device. Main > Info > Advanced Configuration Page 38

39 Device Commands The following device menus must be enabled to allow VoyenceControl NG to manage this device class. Device Configuration and Monitoring Advanced Configuration Password Management Unit Control Known Issues The following details existing device issues that have been discovered with other releases. In most cases, a resolution is included to address the issue. Alvarion Wireless Access Point Incorrect password specification leaves the login screen in an unusable state. If this occurs, the user must manually login to the device and clear the prompt. SNMP credentials are mapped to user accounts; the corresponding read/write SNMP community change must be saved (not pushed) in the UI prior to initiating the corresponding admin credential roll. Device settings are distributed among several menus. The driver displays their contents, but the results cannot be pushed. Page 39

40 ARUBA DEVICES Aruba Wireless Switch Device Type Specific Model(s) Documentation/Information - Enabled By Default Configuration Change tification (Events) Configuration Files Configuration Content Configuration Protocols Password Management Cut-Through Access Hardware Information Aruba Switch a52, a50, a800 a2400, a5000 Syslog, SNMP Traps Single Text Quick Commands, Termlet Merge, Privilege Mode Termlet, Configlet, Config SSH/TFTP, Telnet/TFTP, Out of Band, SSH Only, Telnet Only SNMP In-Band, SNMP Terminal, SSH, TFTP Terminal, SSH, TFTP Terminal, SSH For SNMP: Memory, Interfaces Features Available Discover/Identify (auto discovery, identify, appear in product) (revision config, rollback, basic diagramming) (Push Configs, Configlets) Device Access (Cut-Through, TERMlets, etc.) Configuration Change tification (SNMP Trap and Syslog Processing) The following items are used to provide information about your device (Host Name, Type, Vendor, Model, Operating System, and Serial Number). SysObjectID Following are the commands or processes used to pull a configuration from your device. Telnet copy running-config tftp Term show startup show run Page 40

41 Following are the commands or processes used to push a configuration to your device. TFTP copy tftp running-config copy tftp startup-config Term Connect to config mode and send one line at a time to the device Multi-Config Files Following are the files used when storing and revisioning multiple configuration files for multiconfig support. Multi-Config Files Push/Pull Pull Only running startup Device Data The following data represents device data per device class. Attributed Data ARP Table Access Control Lists CAM Table File System Information Identity Interfaces Keys Memory Access Control Lists Match Counts OSPF Settings Physical Hardware Routes System Properties VLAN Trunk Protocol VLANs Support Page 41

42 CHECKPOINT DEVICES Checkpoint Firewall-1 Device Type Specific Model(s) Documentation/Information Enabled By Default Other Unique Information Configuration Files Configuration Content Configuration Protocols User Interface Password Management Cut-Through Access Firewall Quick Commands Hardware Information Checkpoint Firewall-1 Only Various Can run on NG with Application Intelligence R55W or standalone. Unix like operating system. Multiple Text, Multiple/Complex Command, Config, Privilege Mode Termlet, Termlet Merge SSH/SCP, SSH Only Command Line SNMP In-Band, SNMP Terminal, SSH, FTP, SCP SSH, FTP, SCP Terminal, SSH Test Credentials, Setup Diagnostic, View Diagnostic Setup, Ping, Traceroute, View Interfaces, View ARP, View Routes, Setup NAT, View NAT Setup, View Processor CPU, View Network Management Events, View Interface Counters For SNMP: Hardware Inventory, Memory, Interfaces, Serial Number Features Available Discover/Identify (auto discovery, identify, appear in product) (revision config, rollback, basic diagramming) (Push Configs, Configlets) Device Access (Cut-Through, TERMlets, etc.) Page 42

43 The following items are used to provide information about your device (Host Name, Type, Vendor, Model, Operating System, and Serial Number). OID FireWall-1 Following are the commands or processes used to pull a configuration from your device. Use the expert command to get to a Unix prompt. Requires the super user password. All files are transferred via FTP or SCP. The files listed in the Multi-Config Files section for this device are pushed via a combination of SSH and SCP commands. Following are the commands or processes used to push a configuration to your device. Use the expert command to get to a Unix prompt. Requires the super user password. All files are transferred back via FTP or SCP. Use the Unix file commands to put the files back into place. The files listed in the Multi-Config Files section for this device are retrieved via a combination of SSH and SCP commands. Multi-Config Files Following are the files used when storing and revisioning multiple configuration files for multiconfig support. Multi-Config Files Push/P ull Pull Only Type Editable Required $base_dir/conf/netso.c Text $base_dir/conf/objects.c Text $base_dir/conf/internalca.c Text $base_dir/conf/snmp.c Text $base_dir/conf/sds_objects.c Text $base_dir/conf/classes.c Text $base_dir/conf/lea_server_unificati Text on_scheme.c $base_dir/conf/log_unification_sche Text me.c $base_dir/conf/newobjects.c Text $base_dir/conf/refs.c Text $base_dir/conf/tables.c Text $base_dir/conf/userdef.c Text $base_dir/conf/cpha.conf Text $base_dir/conf/cphaprob.conf Text $base_dir/conf/cpmap_config.conf Text $base_dir/conf/cpmap_opsec.conf Text $base_dir/conf/cpmap_rulebase.con Text Page 43

44 f $base_dir/conf/cp.lf Text $base_dir/conf/product.conf Text $base_dir/conf/fwauthd.conf Text $base_dir/conf/fwopsec.conf Text $base_dir/conf/slapd.conf Text $base_dir/conf/smtp.conf Text $base_dir/conf/omi.conf Text $base_dir/conf/thresholds.conf Text $base_dir/conf/fwmusers Text $base_dir/conf/gui-clients Text $base_dir/conf/external.if Text $base_dir/conf/cp.license Text $base_dir/conf/masters Text $base_dir/conf/*.w Text /config/active Text $base_dir/state/* Binary $base_dir/conf/serverkeys.* Binary $base_dir/database/* Binary $base_dir/conf/fwauth.ndb Binary $base_dir/conf/fwauth.keys Binary $base_dir/conf/rulebases.fws Binary $base_dir/conf/inst.conf Text $base_dir/conf/sic_policy.conf Text $base_dir/database/cprid/cprid_key s/* $base_dir/database/cprid/cprid_util _keys/* Binary Binary Page 44

45 Device Data The following data represents device data per device class. Attributed Data ARP Table Access Control Lists CAM Table File System Information Identity Interfaces Keys Memory Access Control Lists Match Counts OSPF Settings Physical Hardware Routes System Properties VLAN Trunk Protocol VLANs Support Known Issues The following information details existing device issues that have been discovered within other releases. In most cases, a resolution is included to address the issue. 3.6 Regression - Credentials (Account, Privilege and SNMP) change failed When changing Checkpoint Credentials do not change the enable password from the device communications settings. This may result in the login password being modified and subsequently, you will be denied access to the system. Changing Checkpoint Credentials When changing Checkpoint credentials do not schedule a change of the enable password from the device communications settings. This may result in the login password being modified and subsequent denial of access to the system. Page 45

46 CISCO DEVICES Cisco Aironet AP VXWorks Device Type Specific Model(s) Documentation/Information - Enabled By Default Configuration Files Configuration Protocols User Interface Cut-Through Access Hardware Information Cisco Aironet AP VXWorks 340 VXWork 1200 AP Single Text HTTP/TFTP Command Line SNMP Terminal Terminal For SNMP: Memory, Interfaces Features Available Discover/Identify (auto discovery, identify, appear in product) (revision config, rollback, basic diagramming) The following items are used to provide information about your device (Host Name, Type, Vendor, Model, Operating System, and Serial Number). sysdescr Cisco AP340 sysobjectid or Following are the commands or processes used to pull a configuration from your device. Term: GET /cgi-bin/cgiconfigdownloadall?detaillevel=40 HTTP/1.1\n" te: Termlets are not supported on Cisco Aironet AP VXWorks. Multi-Config Files Following are the files used when storing and revisioning multiple configuration files for multiconfig support. Multi-Config Files Push/Pull Pull Only running Page 46

47 Device Data The following data represents device data per device class. Attributed Data ARP Table Access Control Lists CAM Table File System Information Identity Interfaces Keys Memory Access Control Lists Match Counts OSPF Settings Physical Hardware Routes System Properties VLAN Trunk Protocol VLANs Support Page 47

48 Cisco PIX Firewall Device Type Cisco Pix Firewalls Specific Model(s) 501, 506, 506E, 515, 515E, 520, 525, 515Esc, 515Esy, 515sc, 515sy, 525sc, 525sy, 535, 535sc, 535sy, FWSM-6000, ASA5510, ASA5510-K8, ASA5520, ASA5520sc, ASA5520sy ASA5540, ASA5540sc, ASA5540sy Documentation/Information Enabled By Default Configuration Change tification (Events) Configuration Files Configuration Content Configuration Protocols User Interface Password Management Syslog, SNMP Traps Single Text Quick Commands, Termlet Merge, Privilege Mode Termlet, User Mode Termlet, Command, Configlet, Config SSH/TFTP, Telnet/TFTP, SSH Only, Telnet Only, n-snmp IOS like SNMP, Terminal Enable, In-Band, SNMP Operating System 6.3, 7.0, 7.2 Cut-Through Access OS Management Firewall Quick Commands Hardware Information Terminal, SSH, TFTP Terminal, SSH Terminal, SSH TFTP SetTrapDest, Test Credentials, Setup Diagnostics, View Diagnostics Setup, Setup NAT, View NAT Setup For SNMP: Memory, Interfaces For n-snmp: Memory, Interfaces, Serial Number, OS Version Features Available Discover/Identify (auto discovery, identify, appear in product) (revision config, rollback, basic diagramming) (Push Configs, Configlets) Device Access (Cut-Through, TERMlets, etc.) Configuration Change tification (SNMP Trap and Syslog Processing) Page 48

49 The following items are used to provide information about your device (Host Name, Type, Vendor, Model, Operating System, and Serial Number). SysObjectID * SysDescr PIX or FWSM n-snmp discovery must contain PIX, or FWSM, or Adaptive Security Appliance in results of show version Following are the commands or processes used to pull a configuration from your device. write net ipaddress filename show config show run Following are the commands or processes used to push a configuration to your device. PIX only supports push via Term; enter enable mode, enter config mode and send one config line at a time. Device Commands Following are the device command sets you must enable to allow VoyenceControl to manage this device class. Device Configuration show checksum show version show pager show config show start show run show snmp contact show snmp location show interface include is show interface ifname show memory show memory summary show flash show ip show arp show priv Page 49

50 enable conf term write mem write net ip-addr... no pager page 0 term length 0 exit snmp-server enable traps snmp-server host ip-addr logging history notifications logging on Password Management aaa authentication telnet console LOCAL aaa authentication ssh console LOCAL aaa authentication serial console LOCAL no username "oldname" username "username" password "password" no aaa authentication telnet console LOCAL no aaa authentication ssh console LOCAL no aaa authentication serial console LOCAL passwd "password" no enable password "newprivpass" level "level" enable password "newprivpass" level snmp-server community "newsnmprocommunity" snmp-server host inside "ip-addr" community "community-string" disable enable "level" FWSM Commands (Pix 7.0) show host show mode show context change context system change context "contextname" OS Upgrade copy tftp flash Page 50

51 Multi-Config Files Following are the files used when storing and revisioning multiple configuration files for multiconfig support. Multi-Config Files Push/Pull Pull Only runningadmin runningsystem startupadmin startupsystem Device Data The following data represents device data per device class. Attributed Data ARP Table Access Control Lists CAM Table File System Information Identity Interfaces Keys Memory Access Control Lists Match Counts OSPF Settings Physical Hardware Routes System Properties VLAN Trunk Protocol VLANs Support Known Issues The following information details existing device issues that have been discovered within other releases. In most cases, a resolution is included to address the issue. SNMP Credential Change for PIX 515 (version 7.0) When rolling Credentials (for example, using the application s System Administration - > Networks ->Roll feature), only the credential entry relating to the application s IP address changes. OS Upgrade for PIX 515 (version 6.x) This IOS series does not support commands for listing flash size or contents; the user must ensure sufficient space exists before scheduling the upgrade. Upgrading from version 6.x to version 7.x is not supported by this device class because memory and flash requirements cannot be verified by the driver. Page 51

52 Cisco VPN 3000 Device Type Specific Model(s) 3000 Documentation/Information Enabled By Default Configuration Change tification (Events) Configuration Files Configuration Content Configuration Protocols User Interface Password Management Operating System Cut-Through Access Hardware Information VPN concentrator Syslog, SNMP Traps Single Text Command, Config SSH/SCP, SSH/FTP, Telnet/FTP, SSH Only, Telnet Only, n- SNMP Command Line SNMP In-Band, SNMP OS Upgrade FTP, SCP FTP, SCP Terminal For SNMP: Hardware Inventory, VLANs, Memory, Interfaces, Serial Number, Model, OS Version Features Available Discover/Identify (auto discovery, identify, appear in product) (revision config, rollback, basic diagramming) (Push Configs, Configlets) Device Access (Cut-Through, TERMlets, etc.) Configuration Change tification (SNMP Trap and Syslog Processing) Page 52

53 The following items are used to provide information about your device (Host Name, Type, Vendor, Model, Operating System, and Serial Number). sysobjectid contains or sysdescr contains VPN Sys Services Layer 3, 4, and 7 Following are the commands or processes used to pull a configuration from your device. A terminal session is used to navigate the following menu Administration File Management Export XML File Exported file name is CFGXML FTP or SCP used to pull file CFGXML from device Following are the commands or processes used to push a configuration to your device. SCP or FTP the file CFGXML to the device A terminal session is used to navigate the following menu Administration File Management Import XML File (name CFGXML) Save changes to Config file Page 53

54 Multi-Config Files Following are the files used when storing and revisioning multiple configuration files for multiconfig support. Multi-Config Files Push/Pull Pull Only running Device Data The following data represents device data per device class. Attributed Data ARP Table Access Control Lists CAM Table File System Information Identity Interfaces Keys Memory Access Control Lists Match Counts OSPF Settings Physical Hardware Routes System Properties VLAN Trunk Protocol VLANs Support Page 54

55 Cisco Aironet AP Package Device Type Cisco Aironet Access Point Specific Model(s) 1100, 1130, 1200, 1210, 1240, 1310, 350IOS Documentation/Information Enabled By Default Configuration Change tification (Events) Configuration Files Configuration Content Configuration Protocols User Interface Password Management Cut-Through Access Hardware Information en/us/products/hw/ wireless/ps430/index.html Syslog, SNMP Traps Single Text Termlet Merge, Privilege Mode Termlet, User Mode Termlet, Command, Configlet, Config SSH/TFTP, Telnet/TFTP, SSH Only, Telnet Only, SNMP/TFTP, n-snmp IOS, SNMP Only SNMP, Terminal AAA, In-Band, SNMP Terminal, TFTP Terminal, TFTP Terminal For SNMP: Hardware Inventory, Memory, Interfaces, Serial Number Features Available Discover/Identify (auto discovery, identify, appear in product) (revision config, rollback, basic diagramming) (Push Configs, Configlets) Device Access (Cut-Through, TERMlets, etc.) Configuration Change tification (SNMP Trap and Syslog Processing) Page 55