Navigation Guide for Cisco Prime LAN Management Solution 4.1 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883 Text Part Number:
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS. THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY. The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB s public domain version of the UNIX operating system. All rights reserved. Copyright 1981, Regents of the University of California. NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED AS IS WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE. IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1005R) Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental. 1998-2011 Cisco Systems, Inc. All rights reserved.
CONTENTS Notices vii OpenSSL/Open SSL Project License Issues vii vii Preface xi Audience xi Document Conventions xi Product Documentation xii Obtaining Documentation and Submitting a Service Request xiv CHAPTER 1 LMS 4.1 Navigation: Overview 1-1 CHAPTER 2 Navigating Cisco Prime Common Services Tasks in LMS 4.1 2-1 Server Tasks 2-1 Software Center Tasks 2-8 Device and Credential Tasks 2-9 Group Administration Tasks 2-16 CHAPTER 3 Navigating Cisco Prime Resource Manager Essentials Tasks in LMS 4.1 3-1 Inventory, Device and Group Tasks 3-1 Configuration Tasks 3-3 Archive Management Tasks 3-5 Compliance Tasks 3-9 Software Management Tasks 3-10 Jobs, Reports and Tools Tasks 3-12 Administration Tasks 3-15 CHAPTER 4 Navigating Cisco Prime Campus Manager Tasks in LMS 4.1 4-1 Campus User Tracking Tasks 4-1 Visualization Tasks 4-6 Configuration Tasks 4-7 Reports and Job Management Tasks 4-9 Administrative Tasks 4-10 iii
Contents CHAPTER 5 Navigating Cisco Prime Device Fault Manager Tasks in LMS 4.1 5-1 Alerts and Activities 5-2 Device Management Tasks 5-2 Notification Services Tasks 5-4 Fault History Tasks 5-7 Configuration Tasks 5-7 CHAPTER 6 Navigating Cisco Prime Health and Utilization Monitor Tasks in LMS 4.1 6-1 Poller and Template Management Tasks 6-1 Threshold and TrendWatch Tasks 6-2 Reports Tasks 6-3 Administration Tasks 6-4 CHAPTER 7 Navigating Cisco Prime Internetwork Performance Monitor Tasks in LMS 4.1 7-1 Collector Management Tasks 7-1 Report Tasks 7-3 Admin Tasks 7-4 CHAPTER 8 Navigating Cisco Prime CiscoView Tasks in LMS 4.1 8-1 CiscoView Tasks 8-2 Mini-RMON Manager Tasks 8-2 CHAPTER 9 Mapping LMS 3.2 Features and Terminologies to LMS 4.1 Functions 9-1 Mapping LMS 3.2 Features in Monitor 9-1 Mapping IPM Features and Terminologies in Monitor 9-2 Mapping HUM Features and Terminologies in Monitor 9-3 Mapping DFM Features and Terminologies in Monitor 9-4 Mapping LMS 3.2 Features in Inventory 9-5 Mapping Common Services Features and Terminologies in Inventory 9-5 Mapping RME Features and Terminologies in Inventory 9-6 Mapping CM Features and Terminologies in Inventory 9-7 Mapping IPM Features and Terminologies in Inventory 9-7 Mapping CiscoView Features and Terminologies in Inventory 9-8 Mapping DFM Features and Terminologies in Inventory 9-8 Mapping LMS 3.2 Features in Configuration 9-8 Mapping RME Features and Terminologies in Configuration 9-9 Mapping CM Features and Terminologies in Configuration 9-11 iv
Contents Mapping LMS 3.2 Features in Reports 9-11 Mapping RME Reports and Terminologies in Reports 9-12 Mapping CS Reports and Terminologies in Reports 9-13 Mapping CM Reports and Terminologies in Reports 9-14 Mapping HUM Reports and Terminologies in Reports 9-15 Mapping DFM Reports and Terminologies in Reports 9-16 Mapping IPM Reports and Terminologies in Reports 9-16 Mapping LMS 3.2 Features in Admin 9-17 Mapping RME Features and Terminologies in Admin 9-18 Mapping CS Features and Terminologies in Admin 9-21 Mapping CM Features and Terminologies in Admin 9-26 Mapping HUM Features and Terminologies in Admin 9-30 Mapping DFM Features and Terminologies in Admin 9-31 Mapping IPM Features and Terminologies in Admin 9-32 CHAPTER 10 Applications and Tasks Removed from LMS 4.1 10-1 Cisco Prime LMS 3.2 Applications Removed from LMS 4.1 10-1 Cisco Prime Common Services Tasks Removed from LMS 4.1 10-1 Cisco Prime Resource Manager Essentials Tasks Removed from LMS 4.1 10-2 Cisco Prime Device Fault Manager Tasks Removed from LMS 4.1 10-4 Cisco Prime Campus Manager Tasks Removed from LMS 4.1 10-4 Cisco Prime Health and Utilization Monitor Tasks Removed from LMS 4.1 10-5 I NDEX v
Contents vi
Notices The following acknowledgements pertain to this software license. OpenSSL/Open SSL Project This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/). This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software written by Tim Hudson (tjh@cryptsoft.com). License Issues The OpenSSL toolkit stays under a dual license, i.e. both the conditions of the OpenSSL License and the original SSLeay license apply to the toolkit. See below for the actual license texts. Actually both licenses are BSD-style Open Source licenses. In case of any license issues related to OpenSSL please contact openssl-core@openssl.org. OpenSSL License: Copyright 1998-2007 The OpenSSL Project. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions, and the following disclaimer in the documentation and/or other materials provided with the distribution. 3. All advertising materials mentioning features or use of this software must display the following acknowledgment: This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/). 4. The names OpenSSL Toolkit and OpenSSL Project must not be used to endorse or promote products derived from this software without prior written permission. For written permission, please contact openssl-core@openssl.org. vii
Notices 5. Products derived from this software may not be called OpenSSL nor may OpenSSL appear in their names without prior written permission of the OpenSSL Project. 6. Redistributions of any form whatsoever must retain the following acknowledgment: This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/). THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT AS IS ' AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software written by Tim Hudson (tjh@cryptsoft.com). Original SSLeay License: Copyright 1995-1998 Eric Young (eay@cryptsoft.com). All rights reserved. This package is an SSL implementation written by Eric Young (eay@cryptsoft.com). The implementation was written so as to conform with Netscapes SSL. This library is free for commercial and non-commercial use as long as the following conditions are adhered to. The following conditions apply to all code found in this distribution, be it the RC4, RSA, lhash, DES, etc., code; not just the SSL code. The SSL documentation included with this distribution is covered by the same copyright terms except that the holder is Tim Hudson (tjh@cryptsoft.com). Copyright remains Eric Young s, and as such any Copyright notices in the code are not to be removed. If this package is used in a product, Eric Young should be given attribution as the author of the parts of the library used. This can be in the form of a textual message at program startup or in documentation (online or textual) provided with the package. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. 3. All advertising materials mentioning features or use of this software must display the following acknowledgement: This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). The word cryptographic can be left out if the routines from the library being used are not cryptography-related. 4. If you include any Windows specific code (or a derivative thereof) from the apps directory (application code) you must include an acknowledgement: This product includes software written by Tim Hudson (tjh@cryptsoft.com). viii
Notices THIS SOFTWARE IS PROVIDED BY ERIC YOUNG AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. The license and distribution terms for any publicly available version or derivative of this code cannot be changed. i.e. this code cannot simply be copied and put under another distribution license [including the GNU Public License]. ix
Notices x
Preface Cisco Prime LAN Management Solution (LMS) provides you with powerful features that enable you to configure, monitor, troubleshoot, and administer networks. Cisco PrimeLMS 4.1 has a new menu layout that facilitates access to information and tools required to manage your network. This guide provides information on the menu and task navigation changes from LMS 3.2 to LMS 4.1. This preface details related documents, and demonstrates the styles and conventions used in this guide. This preface contains: Audience Document Conventions Product Documentation Audience This guide is for users who are skilled in network administration and management, and network operators who use this guide to make configuration changes to devices, using LMS. The network administrator or operator should be familiar with the following: Basic Network Administration and Management Basic Solaris System Administration Basic Windows System Administration Basic LMS Administration Document Conventions Table 1 describes the conventions followed in the user guide. Table 1 Conventions Used Item Commands and keywords Variables for which you supply values Convention boldface font italic font xi
Preface Table 1 Conventions Used Item Displayed session and system information Information you enter Variables you enter Menu items and button names Selecting a menu item in paragraphs Selecting a menu item in tables Convention screen font boldface screen font italic screen font boldface font Option > Network Preferences Option > Network Preferences Note Means reader take note. Notes contain helpful suggestions or references to material not covered in the publication. Product Documentation Note We sometimes update the printed and electronic documentation after original publication. Therefore, you should also review the documentation on Cisco.com for any updates. Table 2 describes on the product documentation that is available. Table 2 Product Documentation Document Title Navigation Guide for Cisco Prime LAN Management Solution 4.1 (this document) Getting Started with Cisco Prime LAN Management Solution 4.1 Available Formats On Cisco.com http://www.cisco.com/en/us/docs/net_mgmt/ ciscoworks_lan_management_solution/4.1/n avigation/guide/lms41_nav_guide.html PDF version part of Cisco Prime LMS 4.1 Product DVD. On Cisco.com http://www.cisco.com/en/us/docs/net_mgmt/ ciscoworks_lan_management_solution/4.1/us er/guide/getting_started/lms41_getstart_guid e.html PDF version part of Cisco Prime LMS 4.1 Product DVD. xii
Preface Table 2 Product Documentation Document Title Configuration Management with Cisco Prime LAN Management Solution 4.1 Monitoring and Troubleshooting with Cisco Prime LAN Management Solution 4.1 Administration of Cisco Prime LAN Management Solution 4.1 Technology Work Centers in Cisco Prime LAN Management Solution 4.1 Inventory Management with Cisco Prime LAN Management Solution 4.1 Installing and Migrating to Cisco Prime LAN Management Solution 4.1 Available Formats On Cisco.com http://www.cisco.com/en/us/docs/net_mgmt/ ciscoworks_lan_management_solution/4.1/us er/guide/configuration/config.html PDF version part of Cisco Prime LMS 4.1 Product DVD. On Cisco.com http://www.cisco.com/en/us/docs/net_mgmt/ ciscoworks_lan_management_solution/4.1/us er/guide/monitoring_troubleshooting/mntug. html PDF version part of Cisco Prime LMS 4.1 Product DVD. On Cisco.com http://www.cisco.com/en/us/docs/net_mgmt/ ciscoworks_lan_management_solution/4.1/us er/guide/admin/admin.html PDF version part of Cisco Prime LMS 4.1 Product DVD. On Cisco.com http://www.cisco.com/en/us/docs/net_mgmt/ ciscoworks_lan_management_solution/4.1/us er/guide/workcenters/wcug.html PDF version part of Cisco Prime LMS 4.1 Product DVD. On Cisco.com http://www.cisco.com/en/us/docs/net_mgmt/ ciscoworks_lan_management_solution/4.1/us er/guide/inventory/inventory.html PDF version part of Cisco Prime LMS 4.1 Product DVD. On Cisco.com http://www.cisco.com/en/us/docs/net_mgmt/ ciscoworks_lan_management_solution/4.1/in stall/guide/install.html PDF version part of Cisco Prime LMS 4.1 Product DVD. xiii
Preface Table 2 Product Documentation Document Title Reports Management with Cisco Prime LAN Management Solution 4.1 Open Database Schema Support in Cisco Prime LAN Management Solution 4.1 Release Notes for Cisco Prime LAN Management Solution 4.1 Supported Devices Table for Cisco Prime LAN Management Solution 4.1 Documentation Roadmap for Cisco Prime LAN Management Solution 4.1 Available Formats On Cisco.com http://www.cisco.com/en/us/docs/net_mgmt/ ciscoworks_lan_management_solution/4.1/us er/guide/reports/lms41_reports_guide.html PDF version part of Cisco Prime LMS 4.1 Product DVD. On Cisco.com http://www.cisco.com/en/us/docs/net_mgmt/ ciscoworks_lan_management_solution/4.1/da tabase_schema4.1/guide/dbviews.html PDF version part of Cisco Prime LMS 4.1 Product DVD. On Cisco.com http://www.cisco.com/en/us/docs/net_mgmt/ ciscoworks_lan_management_solution/4.1/re lease/notes/lms41rel.html PDF version part of Cisco Prime LMS 4.1 Product DVD. On Cisco.com http://www.cisco.com/en/us/docs/net_mgmt/ ciscoworks_lan_management_solution/4.1/de vice_support/table/lms41sdt.html PDF version part of Cisco Prime LMS 4.1 Product DVD. Printed document part of Software kit Obtaining Documentation and Submitting a Service Request For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What s New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at: http://www.cisco.com/en/us/docs/general/whatsnew/whatsnew.html Subscribe to the What s New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS version 2.0. xiv
CHAPTER 1 LMS 4.1 Navigation: Overview Cisco Prime LAN Management Solution (LMS) 4.1 provides powerful features that enable you to configure, monitor, troubleshoot, and administer your networks. Cisco Prime LMS 4.1 has a new menu layout that facilitates access to information and tools required to manage your network. Cisco Prime LMS groups tasks into the following core functions in this release: Monitor (See Monitoring and Troubleshooting with Cisco Prime LAN Management Solution 4.1 for more information) Inventory (See Inventory Management with Cisco Prime LAN Management Solution 4.1 for more information) Configuration (See Configuration Management with Cisco Prime LAN Management Solution 4.1 for more information) Reports (See Reports Management with Cisco Prime LAN Management Solution 4.1 for more information) Admin (See Administration of Cisco Prime LAN Management Solution 4.1 for more information) Work Center (See Technology Work Centers in Cisco Prime LAN Management Solution 4.1 for more information) This guide provides information on the menu and task navigation changes from LMS 3.2 to LMS 4.1, explained in: Navigating Cisco Prime Common Services Tasks in LMS 4.1 Navigating Cisco Prime Resource Manager Essentials Tasks in LMS 4.1 Navigating Cisco Prime Campus Manager Tasks in LMS 4.1 Navigating Cisco Prime Device Fault Manager Tasks in LMS 4.1 Navigating Cisco Prime Health and Utilization Monitor Tasks in LMS 4.1 Navigating Cisco Prime Internetwork Performance Monitor Tasks in LMS 4.1 Navigating Cisco Prime CiscoView Tasks in LMS 4.1 Mapping LMS 3.2 Features and Terminologies to LMS 4.1 Functions 1-1
Chapter 1 LMS 4.1 Navigation: Overview This guide also provides information on the LMS 3.2 applications and tasks removed from LMS 4.1, explained in: Cisco Prime LMS 3.2 Applications Removed from LMS 4.1 Cisco Prime Common Services Tasks Removed from LMS 4.1 Cisco Prime Resource Manager Essentials Tasks Removed from LMS 4.1 Cisco Prime Device Fault Manager Tasks Removed from LMS 4.1 Cisco Prime Campus Manager Tasks Removed from LMS 4.1 Cisco Prime Health and Utilization Monitor Tasks Removed from LMS 4.1 1-2
CHAPTER 2 Navigating Cisco Prime Common Services Tasks in LMS 4.1 Cisco Prime Common Services (CS) provides the application infrastructure for all existing Cisco Prime network management solutions for them to share a common model for data storage, user login, user role definitions, user access privileges, and security protocols. This chapter provides the mapping of CS tasks in LMS 4.1. It explains: Server Tasks Software Center Tasks Device and Credential Tasks Group Administration Tasks Server Tasks This section provides information on the Common Services Server tasks in LMS 4.1. Security Tasks Report Tasks Admin Tasks Table 2-1 Server Tasks Security Tasks Setting up browser security mode Common Services > Server > Security > Single Server Name > Browser-Server Security Mode Setup Admin > Trust Management:Local Server > Browser-Server Security Mode Setup Common Services provides secure access between the client browser and management server. It does this using SSL (Secure Socket Layer). SSL encrypts the transmission channel between the client, and server. 2-1
Server Tasks Chapter 2 Navigating Cisco Prime Common Services Tasks in LMS 4.1 Table 2-1 Server Tasks (continued) Setting up local user policy Setting up security certificate Setting up Peer Server Accounts Common Services > Server > Security > Single Server Name > Local User Policy Setup Common Services > Server > Security > Single Server Name > Certificate Setup Common Services > Server > Security > Multi-Server Trust Management > Peer Server Account Setup Admin > System: User Management > Local User Policy Setup Admin > Trust Management:Local Server > Certificate Setup Admin > Trust Management:Multi Server > Peer Server Account Setup You can setup username and password policies for Cisco Prime local users in Common Services. With the new local user policy, you can: 1. Start the local username with a number 2. Include special characters in local username 3. Specify the length of local username 4. Specify the length of local user password You can add and delete users, edit user profiles and modify the logged in user credentials Cisco Prime allows you to create security certificates that enable SSL communication between your client browser and management server. Self signed certificates are valid for five years from the date of creation. When the certificate expires, the browser prompts you to install the certificate again from the server where you have installed Cisco Prime. Peer Server Account Setup helps you create users who can programmatically login to CiscoPrime LMS Servers and perform certain tasks. These users should be set up to enable communication among multiple Cisco Prime LMS Servers. Users created using Peer Server Account Setup can authenticate processes running on remote Cisco Prime LMS Servers. 2-2
Chapter 2 Navigating Cisco Prime Common Services Tasks in LMS 4.1 Server Tasks Table 2-1 Server Tasks (continued) Setting up System Identity Setup Setting up Peer Server Certificate Setup Setting up Single Sign-On Setup Setting up AAA Mode Setup Common Services > Server > Security > Multi-Server Trust Management > System Identity Setup Common Services > Server > Security > Multi-Server Trust Management > Peer Server Certificate Setup Common Services > Server > Security > Multi-Server Trust Management > Single Sign-On Setup Common Services > Server > Security > AAA Mode Setup Admin > Trust Management:Multi Server > System Identity Setup Admin > Trust Management:Multi Server > Peer Server Certificate Setup Admin > Trust Management:Multi Server > Single Sign-On Setup Admin > System: Authentication Mode Setup Communication between multiple Lms Servers is enabled by a trust model addressed by certificates and shared secrets. System Identity setup helps you to create a "trust" user on servers that are part of a multi-server setup. This user enables communication among servers that are part of a domain. There can only be one System Identity User for each machine. You can add the certificate of another Cisco Prime LMS server into its trusted store. This will allow a Cisco Prime LMS Server to communicate with another using SSL. If a Cisco Prime LMS server needs to communicate with another Lms Server, it must possess the certificate of the other server. You can add certificates of any number of peer Lms Servers to the trusted store. You can add, delete and view the details of the client certificates. With Single Sign-On (SSO), you can use your browser session to transparently navigate to multiple Lms Servers without authenticating to each of them. Communication among multiple Lms Servers is enabled by a trust model addressed by Certificates and shared secrets. The LMS Server provides mechanisms used to authenticate users for Cisco Prime applications. Cisco Prime login modules allow administrators to add new users using a source of authentication other than the native Lms Server mechanism (that is, the Cisco Prime Local login module). 2-3
Server Tasks Chapter 2 Navigating Cisco Prime Common Services Tasks in LMS 4.1 Table 2-1 Server Tasks (continued) Set up Cisco.com User Account Update Proxy Server Setup Report Tasks Log File Status Report Common Services > Server > Security > Cisco.com Connection Management > Cisco.com User Account Setup Common Services > Server > Security > Cisco.com Connection Management > Proxy Server Setup Common Services > Server > Reports > Log File Status Permission Report Common Services > Server > Reports > Permission Report Who Is Logged On Report Process Status Report Common Services > Server > Reports > Who Is Logged On Common Services > Server > Reports > Process Status Audit Log Report Common Services > Server > Reports > Audit Log Admin Tasks Admin > System: Cisco.com Settings > User Account Setup Admin > System: Cisco.com Settings > Proxy Server Setup Reports > System: Status > Log File Reports > System:Users > Permission Reports > System:Users > Who is Logged On Reports > System: Status > Process Reports > Audit:System Certain Software Center features require Cisco.com access. This means that Cisco Prime must be configured with a Cisco.com account that is to be used when downloading new and updated packages. You can update the proxy server configuration using the Proxy Server set up option. The Log File Status Report provides information on log file size and file system utilization. The Permissions Report provides information on roles and privileges associated with the roles. It specifies the tasks that a user in a particular role can perform. The Users Logged In Report provides information on users currently logged into Common Services. The Process Status Report shows the status of the processes running on the Lms Server. Audit log report provides information on: User login and logout from Cisco Prime Cisco Prime Local user addition Cisco Prime Local user modification Cisco Prime Local user deletion Change of Lms Server modes 2-4
Chapter 2 Navigating Cisco Prime Common Services Tasks in LMS 4.1 Server Tasks Table 2-1 Server Tasks (continued) Process Management Tools Common Services > Server > Admin > Processes Taking backup Common Services > Server > Admin > Backup Edit log file rotation Common Services > Server > Admin > Log Rotation Update a license Common Services > Server > Admin > Licensing Collect server information Self Test Information report Common Services > Server > Admin > Collect Server Information Common Services > Server > Admin > Self Test Admin > System: Server Monitoring > Processes Admin > System:Backup Admin > System:Log Rotation Admin > System: License Management Admin > System: Server Monitoring > Collect Server Information Admin > System: Server Monitoring > Selftest Process management tools enable you to manage these backend processes to optimize or troubleshoot the Lms Server. You can do the following activities: View the details of all processes Filter and show only processes of a specific state Start the processes Stop the processes All mandatory processes are started when you start the system You can schedule immediate, daily, weekly, or monthly automatic database backups. You should have the privileges necessary for using this option. Log files can expand and fill up disk space. Log files rotation helps you manage the log files more efficiently. You can add and delete log files for rotation You can obtain a product license and license your application, view details of your current software license, or update to a new license from the Licensing page. You can collect information about the server including system information, environment, configuration, logs, web server information, device and credentials administration information, and grouping services information. You can also delete the collected server information Self Test Information report helps to test certain basic functions of the server 2-5
Server Tasks Chapter 2 Navigating Cisco Prime Common Services Tasks in LMS 4.1 Table 2-1 Server Tasks (continued) Notify users Common Services > Server > Admin > Notify Users Stop a job, delete jobs, filter jobs Free locked resources Configure system preferences Common Services > Server > Admin > Job Browser > Stop, Delete, Filter Common Services > Server > Admin > Resource Browser > Free Resources Common Services > Server > Admin > System Preferences Admin > System: User Management > Notify Users Admin > Jobs: Browser Admin > Network: Resource Browser > Free Resources Admin > System: System Preferences Broadcasts messages to online users. You can post messages to users with active Cisco Prime browsers. By default, the messages will be received within 60 seconds. You can also change this polling interval. You can manage jobs using the Job Browser. From the Job browser you can view a listing of jobs and filter jobs based on certain criteria. Users in Help Desk, Approver, and Network Operator roles are not allowed to stop and delete jobs. All users (including Help Desk) can access the Job Browser page. The Refresh icon in Job browser is available for all users. Common Services provides a Resource Browser for managing resources. You can free locked resources, when necessary, if you have appropriate privileges. All users (including those with Help Desk role alone) can access the Resource browser page. The Refresh icon in the Resource browser is available for all users. System Preferences option is a way to centrally locate information that is used by Cisco Prime applications. You can apply or cancel the changes made to the system configuration. 2-6
Chapter 2 Navigating Cisco Prime Common Services Tasks in LMS 4.1 Server Tasks Table 2-1 Server Tasks (continued) Enable debug mode Common Services > Server > Admin > CS Log Configurations Configure disk space threshold limit Common Services > Server > Admin > DiskWatcher Configuration Admin > System: Debug settings > Common Services Log Configurations Admin > System: Server Monitoring > DiskWatcher Configuration Enables the debugging option for Common Services components without restarting the services. When you enable the debugging option for the selected component, the log levels in the respective properties file is changed to DEBUG and the debug messages are recorded in the corresponding log files You can only enable or disable the debugging option. You cannot choose to set different log levels such as INFO,WARNING, FATAL and ERROR. DiskWatcher is a back-end process that monitors disk space availability on Lms Server. This process calculates the disk space of a drive (on Windows) or a file system (on Solaris) where Cisco Prime applications are installed, and stores them in diskwatcher.log file. You can reset the disk space threshold limit values 2-7
Software Center Tasks Chapter 2 Navigating Cisco Prime Common Services Tasks in LMS 4.1 Software Center Tasks This section provides information on the Common Services Software Center tasks in LMS 4.1: Software Update Tasks Device Update Tasks Schedule Device Download Tasks Activity Log Tasks Table 2-2 Software Center Tasks Software Update Tasks Performing Software Updates Common Services > Software Center > Software Update Device Update Tasks Device Updates Common Services > Software Center > Device Update Schedule Device Download Tasks Scheduling Device Package Downloads Common Services > Software Center > Schedule Device Downloads Admin > System: Software Center > Software Update Admin > System: Software Center > Device Update Admin > System: Software Center > Schedule Device Downloads Finds software updates on Cisco.com, then downloads these updates to a server location. From the server, you can then install the updates using the procedures recommended in the readme file of the update package. You can view a list of all Cisco Prime related device packages on your system using this option. Displays a count of devices supported for each product installed in the system. For device updates the source location could be Cisco.com or the Server Side Directory. The Device Update page lists the product name and the device type count. You can also delete packages that are outdated or that you no longer use. Schedules device package downloads and specifies the time, frequency of the downloads, and the download policy. 2-8
Chapter 2 Navigating Cisco Prime Common Services Tasks in LMS 4.1 Device and Credential Tasks Table 2-2 Software Center Tasks (continued) Activity Log Tasks Scheduled job details Common Services > Software Center > Activity Log > Scheduled Job Details Logs of event details Common Services > Software Center > Activity Log > Event Log Admin > System: Software Center > Scheduled Job Details Admin > System: Software Center > Event Log Displays the details of scheduled jobs in the software center. Scheduled Job table records and displays the downloads to the server. You can view the log from the server or from any client workstation. Displays the logs of events in the software center. The Event Log table shows the list of immediate downloads, installations and uninstallations of device packages. You can view the log from the server or from any client workstation. Device and Credential Tasks This section provides information on the following Common Services Device and Credential tasks in LMS 4.1 : Device DiscoveryTasks, Device Management Tasks Auto Update Server Tasks Report Tasks Device Selector Setting Tasks Admin Tasks 2-9
Device and Credential Tasks Chapter 2 Navigating Cisco Prime Common Services Tasks in LMS 4.1 Table 2-3 Device and Credential Tasks Device DiscoveryTasks Device Discovery Settings Common Services > Device and Credentials > Device Discovery > Discovery Settings Dicovery schedule Common Services > Device and Credentials > Device Discovery > Discovery Schedule Discovery Logging Common Services > Device and Credentials > Device Discovery > Discovery Logging Configuration Device Management Tasks Managing Devices Common Services > Device and Credentials > Device Management Admin > Network: Discovery Settings Admin > Network: Discovery Settings > Schedule Admin > Network: Discovery Settings > Logging Configuration Inventory > Device Administration: Add / Import / Manage Devices Configures the layer 3 and layer 2 protocols and other dicovery options before starting the discovery of devices Also, it displays the list of total devices discovered, number of reachable devices, unreachable devices, and various other details about the devices in the DCR. You can create, view, edit, modify, and delete the device discovery schedule job. Enables the debugging option for components or modules of Common Services Device Discovery without restarting the services. When you enable the debugging option for a selected component, the log levels in the csdiscovery.properties file is changed to DEBUG and the debug messages are recorded in the CSDiscovery.log file. The Device Management option in Device and Credentials Administration helps you manage the list of devices and their credentials. Device Management helps you in: Adding Devices Deleting Devices Editing Device Credentials Editing Device Identity Importing Devices and Credentials Exporting Devices and Credentials Excluding Devices Viewing Devices List 2-10
Chapter 2 Navigating Cisco Prime Common Services Tasks in LMS 4.1 Device and Credential Tasks Table 2-3 Device and Credential Tasks (continued) Auto Update Server Tasks Auto Update Server Common Services > Device and Inventory > Device Administration: Auto Update Auto Update Servers have the following credentials: Credentials > Auto Update Server Management Auto Update Server URL Server Management Username Report Tasks Device List Report Common Services > Device and Credentials > Reports > Device List Report Audit Report Common Services > Device and Credentials > Reports > Audit Report Excluded Devices Report Common Services > Device and Credentials > Reports > Excluded Devices Report Import Status Report Common Services > Device and Credentials > Reports > Import Status Report Reports > Inventory:Management Status > Known Device List Reports > Audit:Device Administration Reports > Inventory:Management Status > Excluded Devices Reports > Inventory:Management Status > Imported Device Status Password The Auto Update Server Management UI is not visible in a DCR Slave machine. Auto Update Server management feature helps you in: Adding an Auto Update Server Editing an Auto Update Server Deleting an Auto Update Server The DCR Device List Report displays the complete list of all devices. The Audit Report displays the complete device list in DCR for a specified period of time. The Excluded Devices Report displays the list of devices that should not be added to DCR. The Imported Device Status report displays the information about the devices that are imported into DCR from any one of the following import sources: Import File Local NMS Remote NMS 2-11
Device and Credential Tasks Chapter 2 Navigating Cisco Prime Common Services Tasks in LMS 4.1 Table 2-3 Device and Credential Tasks (continued) Device Selector Setting Tasks Customization of Device Type Groups Customizing Display Order of Device Groups Common Services > Device and Credentials > Device Selector Settings > Group Customization Common Services > Device and Credentials > Device Selector Settings > Group Ordering Admin > Network: Display Settings > Group Customization Admin > Network: Display Settings > Group Ordering Provides options to select/remove the Device Selector groups. You can customize the Device Type Based Groups folder to display: All devices in groups, based on their Device Category only All devices in groups and subgroups, based on their Device Category and Series All devices in groups and subgroups, based on their Device Category, Series and Model Provides options to choose the order in which the existing groups will be displayed. The Group Ordering setup is specific to each user and the changes will be reflected in the Device Selector panes of all applications. The default order of the groups displayed in the Device Selector pane is: All Devices Device Type Groups User Defined Groups Subnet Groups Application Specific Groups You can change the order and save the configurations. 2-12
Chapter 2 Navigating Cisco Prime Common Services Tasks in LMS 4.1 Device and Credential Tasks Table 2-3 Device and Credential Tasks (continued) Admin Tasks Administering Device and Credential Common Services > Device and Credentials > Admin > Mode Admin > Network: Device Credential Settings > Current DCR Settings The DCR Administration feature allows you to do the following tasks: Repository Settings Changing DCR Mode Configuring Device Polling Settings Unreachable Device Report Common Services > Device and Credentials > Admin > Device Polling > Device Poll Settings Common Services > Device and Credentials > Admin > Unreachable Device Report Admin > Network: Device Credential Settings > Device Poll Settings Reports > Inventory:Management Status > Unreachable Devices Configuring Device Polling Configuring User Defined Fields Configuring Default Credentials To perform these tasks, select Device and Credentials > Admin from the Cisco Prime home page. The Admin page appears with the current DCR Administration settings. You can change the Mode Settings or modify User Defined fields. Configures a Device Polling policy and schedules a Device Polling job to check whether the devices can be reached. Displays the unreachable devices from the DCR. 2-13
Device and Credential Tasks Chapter 2 Navigating Cisco Prime Common Services Tasks in LMS 4.1 Table 2-3 Device and Credential Tasks (continued) Renaming User Defined Fields Common Services > Device and Credentials > Admin > User Defined Fields Admin > Network: Device Credential Settings > User Defined Fields The User Defined Fields (UDFs) are used to store the additional information about a device. DCR supports a maximum of ten UDFs. By default, the user interface provides four UDFs: user_defined_field_0 user_defined_field_1 user_defined_field_2 user_defined_field_3 You can add six more UDFs through the user interface. You can rename or delete all the UDFs including the four default UDFs provided by the user interface. 2-14
Chapter 2 Navigating Cisco Prime Common Services Tasks in LMS 4.1 Device and Credential Tasks Table 2-3 Device and Credential Tasks (continued) Configuring a Default Credentials Set Common Services > Device and Credentials > Admin > Default Credential Sets Admin > Network: Device Credential Settings > Default Credential Sets You can use default credentials to populate newly-added devices in Device Addition flows such as Add and Bulk Import. You can configure multiple default credential sets to a maximum of 50 default credential sets. Each default credential set comprises the following credentials: Primary Credentials (Username, Password, Enable Password) Secondary Credentials (Username, Password, Enable Password) SNMPv2c/SNMPv1Credential s (Read-Only Community String, Read-Write Community String) SNMPv3 Credentials (Mode, Username, Authentication Password, Authentication Algorithm, Privacy Password, Privacy Algorithm) HTTP credentials (Primary HTTP Username and Password, Secondary HTTP Username and Password, HTTP port, HTTPS port, Current Mode) Auto Update Server Managed Device Credentials (Username and Password) Rx Boot Mode Credentials (Username, Password) 2-15
Group Administration Tasks Chapter 2 Navigating Cisco Prime Common Services Tasks in LMS 4.1 Table 2-3 Device and Credential Tasks (continued) Setting up a Default Credential Set Policy Common Services > Device and Credentials > Admin > Default Credential Sets Policy Configuration Admin > Network: Device Credential Settings > Default Credential Sets Policy Configuration Creates a default credential set policy. You can create default credential set policies based on following policy types: IP Address Hostname Display Name You can also specify the order in which the default credential set policies should be applied for devices that are added or imported into DCR. The default credential set policies are applied in the order in which they appear on the Credentials Sets Policy Configuration page. The default credential set policies appearing at the top of the list are applied first. Group Administration Tasks This section provides information on the Common Services Group Administration tasks in LMS 4.1. Table 2-4 Group Administration Tasks Administering Groups Common Services > Groups > Export Admin > System: Group Management > Device Groups The Groups feature in Common Services helps you to group devices managed by Cisco Prime applications. It helps in creating, managing, and sharing groups of devices. The groups created using this feature are shared across applications. The groups created in applications can also be viewed from Common Services. 2-16
CHAPTER 3 Navigating Cisco Prime Resource Manager Essentials Tasks in LMS 4.1 Cisco Prime Resource Manager Essentials (RME) provides lifecycle management of Cisco network devices. Designed to reduce human error and eliminate many of the manual tasks associated with maintaining a network, RME helps optimize manageability and availability for your network. This chapter provides mapping of RME tasks in LMS 4.1. It explains: Inventory, Device and Group Tasks Configuration Tasks Archive Management Tasks Compliance Tasks Software Management Tasks Jobs, Reports and Tools Tasks Administration Tasks Inventory, Device and Group Tasks This section provides information on the following RME tasks in LMS 4.1: Inventory Tasks Device Management Tasks Group Administration Tasks 3-1
Inventory, Device and Group Tasks Chapter 3 Navigating Cisco Prime Resource Manager Essentials Tasks in LMS 4.1 Table 3-1 Inventory, Device and Group Tasks Inventory Tasks Viewing Inventory Collection Status Viewing Inventory Jobs Device Management Tasks Viewing RME Devices Viewing Suspended Devices Working with Alias Devices Viewing Device Credential Verification Jobs RME > Devices > Inventory > View Inventory Collection Status RME > Devices > Inventory > Inventory Jobs RME > Devices > Device Management > RME Devices RME > Devices > Device Management > Suspended Devices RME > Devices > Device Management > Alias Devices RME > Devices > Device Management > Device Credential Verification Jobs Collector Summary portlet Inventory > Job Browsers: Inventory Collection Or Admin > Collection Setting: Inventory > Inventory Jobs Inventory > Device Administration: Manage Device State Inventory > Device Administration: Manage Device State Inventory > Device Administration: Manage Device State Inventory > Job Browsers: Device Credential Verification View the status of Inventory collection. The Inventory Job Browser displays all user-defined jobs. It also displays the system-defined inventory collection and polling jobs. You can create and manage inventory jobs using the Job Browser. You can edit, stop, cancel or delete jobs using this Job Browser. View the list of all devices in LMS. Suspended devices cannot participate in any application flows but all historical data pertaining to the device will continue to be maintained by LMS. When a new device is added to LMS, this device may already exist in LMS, but with another hostname or IP address. This device will be in the Alias state. You can view the detailed list of all scheduled CDA jobs from the Device Credential Verification Jobs browser. 3-2
Chapter 3 Navigating Cisco Prime Resource Manager Essentials Tasks in LMS 4.1 Configuration Tasks Table 3-1 Inventory, Device and Group Tasks (continued) Group Administration Tasks Administering Device Groups Administering Port and Module Groups RME > Devices > Group Administration > Device Group Administration RME > Devices > Group Administration > Port and Module Group Administration Inventory > Group Management: Device Or Admin > System: Group Management > Devices Inventory > Group Management: Port and Module Or Admin > System: Group Management > Port and Module Groups Allows you to create, manage and administer Device Groups. Allows you to create, manage and administer groups based on ports and modules for a selected set of devices or device groups. Configuration Tasks This section provides information on the following RME tasks in LMS 4.1: Config Editor Tasks Netconfig Tasks Table 3-2 Config Editor and Netconfig Tasks Config Editor Tasks Viewing Configuration Files RME > Config Mgmt > Config Editor > Config Files Configuration > Tools: Config Editor > Config Editor You can use this feature to open a configuration file for editing. You can open a configuration file by: Device and Version Opens a configuration file from the archive. Pattern Search Opens a configuration file by searching for a pattern. Baseline Opens a configuration file using a baseline template stored in the device configuration management repository. External Location Opens a configuration file stored in an external location 3-3
Configuration Tasks Chapter 3 Navigating Cisco Prime Resource Manager Essentials Tasks in LMS 4.1 Table 3-2 Config Editor and Netconfig Tasks (continued) Viewing the list of modified private configs Viewing the list of modified public configs Viewing the Status of all Deployed Jobs Netconfig Tasks Browsing and Editing Jobs Using the NetConfig Job Browser RME > Config Mgmt > Config Editor > Private Configs RME > Config Mgmt > Config Editor > Public Configs RME > Config Mgmt > Config Editor > Config Editor Jobs RME > Config Mgmt > Netconfig > Netconfig Jobs Configuration > Tools: Config Editor > Private Configs Configuration > Tools: Config Editor > Public Configs Configuration > Job Browsers: Config Editor Configuration > Job Browsers: NetConfig Or Configuration > Tools: NetConfig > Deploy You can use this feature to display a list of configuration files modified by all users in a private work area. You can: Select a file and click Edit to edit an opened configuration file. Select a file and click Deploy to deploy a job. Select a file and click Delete to remove an opened configuration file. You can use this feature to display a list of configuration files modified by all users in a public work area. You can: Select a file and click Edit to edit an opened configuration file. Select a file and click Deploy to deploy a job. Select a file and click Delete to remove an opened configuration file. You can use this feature to view the status of all pending, running, and completed jobs. You can create a new job or edit, copy, stop, and delete a job that you have opened. You can browse the NetConfig jobs that are registered on the system. Using the NetConfig Job Browser you can edit, copy, retry, stop, or delete jobs. 3-4