Cisco Systems Craft Works Interface Login Modes and Requirements, Component Port Direction

Page 22

Table 12

Network Information (continued)

 

 

 

Type

 

Function

 

 

 

VPN

 

When setting the minimum router configuration, you must use the client Virtual Private

 

 

Network (VPN) IP address and Domain Name Server (DNS) name instead of the client IP

 

 

address and DNS name when configuring the IP hostname for the CWI client. This mapping

 

 

is required for the client to receive notifications from the router.

 

 

If you have a VPN, you can use the basic or SSL encryption configuration.

 

 

Dual-Homed

Dual-homed devices are used to bridge two networks. You can run an instance of CWI on the

 

 

dual-homed device so that you can access the secondary network. You need terminal services

 

 

or X-client software to run the CWI graphical application from the client PC. A dual-homed

 

 

device contains a client-side interface (IP address) and router-side interface (IP address).

 

 

If you have a dual-homed device in your network, you can use the standard or SSL encryption

 

 

configuration. See Figure 9 for an example.

 

 

 

You must open the ports listed in Table 13 when configuring the firewall. See the firewall documentation for information on opening the ports.

Table 13 Firewall Ports

Component

Port

Direction

 

 

 

HTTP and HTTPS

80/443

Inbound

 

 

 

CORBA and CORBA SSL

10001/10002

Inbound

 

 

 

CORBA Notifications

49901 to 49950

Outbound

 

 

 

Telnet and SSH

23/22

Inbound and Outbound

 

 

 

For an example of a dual-homed device configuration, the client side is the primary interface, and the router side is the secondary interface (see Figure 9). When setting the minimum router configuration, you must use the dual-homed device router side (secondary) IP address and DNS name when configuring the IP hostname for the CWI client. This mapping is required for the client to view the notifications from the router received by the dual-homed instance of CWI.

Figure 9 Dual-Homed Device Configuration

 

 

 

 

 

 

 

 

S

 

 

 

 

 

 

 

P

 

E

 

 

 

 

 

 

 

R

 

C

 

 

 

 

 

 

 

I

 

O

 

 

 

 

 

 

 

M

 

N

 

 

 

 

 

 

 

 

A

 

D

 

 

 

 

 

 

 

R

 

A

 

Client PC

 

 

 

 

Y

 

R

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Y

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Dual-homed device

Router

111615

Login Modes and Requirements

A primary goal of CWI is to communicate with a device in any state by dynamically supporting three operational modes (see Table 14). CWI can manage multiple devices with different modes simultaneously.

The three different login modes are based on the following requirements:

Connection methods

MGBL-PIE files (installed or not installed). MGBL refers to Manageability. PIE refers to Package Installation Envelope.

22

Image 22
Contents Cisco Craft Works Interface Quick Start Guide Prerequisites IntroductionAbout CWI Related DocumentationCWI Client System Requirements Router PrerequisitesCWI Client Prerequisites Task Additional InformationHardware Requirements Configuring the Router and CWI ClientSoftware Requirements Enabling the Telnet Server Enabling the Http ServerEnabling the SSH Server Setting Up the Minimum Crypto Configuration for SSL Setting Up the Minimum Crypto RequirementsConnection Methods Installing, Launching, and Uninstalling CWI Installing CWIScripted Login Capability Overview Launching CWILaunching CWI Without Using the Device Tree CWI Login WindowLaunching CWI from the Device Tree Adding or Editing a Device Adding or Editing a Device Group Page Progress Window Specifying the User Login Script Field DescriptionClosing CWI Wait For SendGetting Started with the Operation of CWI Uninstalling CWIInstalling and Accessing Online Help Click CloseCapabilities of the CWI Desktop Understanding the Admin Planes and Device PlanesConfiguring a Router with CWI Node Application InventoryCWI Desktop Window Element DescriptionApplication Description CWI DesktopNetwork Considerations Reference InformationType Function Login Modes and Requirements Component Port DirectionMode Description CWI Supported Connection Methods and ApplicationsTroubleshooting Basic IP Connectivity Testing the CWI ClientTelnet/SSH, or Corba Cisco Product Security Overview Obtaining DocumentationDocumentation Feedback Cisco.comProduct Alerts and Field Notices Reporting Security Problems in Cisco ProductsObtaining Technical Assistance Definitions of Service Request Severity Submitting a Service RequestCisco Technical Support & Documentation Website Obtaining Additional Publications and Information Page Page USA