Aaa | Cisco Systems CSR 1000V specification

Chapter 1 Cisco CSR 1000V Series Cloud Services Router Overview

Supported Cisco IOS XE Technologies

Table 1-6

Cisco IOS XE Technologies Supported on the Cisco CSR 1000V Cloud Services Router

Minimum Cisco IOS

XE Release

Technologies

Required for

Technology Package

See the Following

Supported

Cisco CSR 1000V

Licenses Supported

Documentation:

Access Control:

•

AAA

Cisco IOS XE

•

Standard

•

Authentication

Release 3.9S

•

Advanced

Authorization and

Accounting

•

Premium

Configuration Guide,

Cisco IOS XE Release 3S

•

Cisco IOS Security

Command Reference

•

Access Control

Cisco IOS XE

•

Standard

•

Securing the Data Plane

Lists

Release 3.9S

•

Advanced

Configuration Guide

Library, Cisco IOS XE

•

Premium

Release 3S

•

Cisco IOS Security

Command Reference

•

IP SLA

Cisco IOS XE

•

Premium

•

IP SLAs Configuration

Release 3.9S

Guide, Cisco IOS XE

Release 3S

• Cisco IOS IP SLAs

Command Reference

•

RADIUS

Cisco IOS XE

•

Standard

•

RADIUS Configuration

Release 3.9S

•

Advanced

Guide Cisco IOS XE

Release 3S

•

Premium

•

Cisco IOS Security

Command Reference

•

TACACS+

Cisco IOS XE

•

Standard

•

TACACS+ Configuration

Release 3.9S

•

Advanced

Guide Cisco IOS XE

Release 3S

•

Premium

•

Cisco IOS Security

Command Reference

•

Layer3 Firewall

Cisco IOS XE

•

Advanced

•

MPLS: Layer 3 VPNs

Release 3.9S

•

Premium

Configuration Guide,

Cisco IOS XE Release 3S

•

Cisco IOS Multiprotocol

Label Switching

Command Reference

•

Zone-Based

Cisco IOS XE

•

Advanced

•

Security Configuration

Firewall

Release 3.9S

•

Premium

Guide: Zone-Based

Policy Firewall, Cisco

IOS XE Release 3S

•

Cisco IOS Security

Command Reference

Cisco CSR 1000V Series Cloud Services Router Software Configuration Guide

1-18

OL-27477-07

Image 32

Cisco Systems CSR 1000V manual Aaa

Contents

Cisco Systems, Inc Copyright 2012-2014 Cisco Systems, Inc. All rights reserved N T E N T S Iii ESXi Prerequisites Upgrading the Cisco IOS XE Software Periodic Notification Vii Viii 13-2 Preface Objectives Document Revision History Release Date Change Summary Organization Chapter Title Description Related Documentation Document ConventionsConvention Description Or Ctrl Square brackets enclose default responses to system prompts Within an optional elementExamples use the following conventions Processes OL-27477-07 Cisco CSR 1000V Series Cloud Services Router Overview Introduction Cisco CSR 1000V Virtual Form Factor Virtual Machine Requirements Router Interfaces Virtual Machines Hypervisor Support ESXi XenServer Machine KVM Microsoft Hyper-V Hypervisor vNIC RequirementsVMware Citrix Kernel Based Virtual Cisco IOS XE Release 10S, 3.11S 12S VMware ESXiNIC Types Supported Citrix XenServer Cisco CSR 1000V and Hypervisor Limitations VMXNET3, VIF and Virtio NIC types are para-virtualized NICs Intel Cisco CSR 1000V Series Software License OverviewServer Requirements Cisco CSR 1000V Version License Type License Term OL-27477-07 OL-27477-07 Feature Cisco ASR 1000 Series Cisco CSR 1000V Series Gigabit Ethernet x ports only When using the Rest API to manage the Cisco CSR Supported Cisco IOS XE Technologies GRE XE Release Technologies Required for Supported Cisco CSR Licenses Supported Documentation XE Release Technologies Required forSee the Following QoS ServicesNetwork Management AAA Waas Managing the Router Using Cisco Configuration Professional Managing the Router Using the Cisco CSR 1000V Rest APIManagement Support Cisco CSR 1000V supports the following management options Related Cisco Product Compatibility Cisco Unified Computing System UCS Products Using Cisco Feature Navigator Using the Software Advisor Cisco IOS XE Release 3.9S/3.10S/3.11S/3.12S Using the Software Release Notes OL-27477-07 Keystrokes Purpose Using Keyboard ShortcutsUsing the History Buffer to Recall Commands Command Mode Access Method Prompt Exit Method Understanding the Command ModesCommand Purpose Finding Command Options Getting Help Using the interface GigabitEthernet Command CommentEnter the configure terminal Interface configuration commands Configuration commandsEnter the command that you want to Configure for the interface. This Using the no and default Forms of Commands Saving Configuration Changes Example 1 Copying a Startup Configuration File to Bootflash Managing Configuration FilesThis task saves the configuration to Nvram Nvram File Security Filtering the Output of show and more CommandsPowering Off the Cisco CSR Installation Overview Cisco CSR 1000V software can install and boot Cisco CSR 1000V Installation Task Workflow Obtaining the Cisco CSR 1000V Software Cisco CSR 1000V Installation FilesCisco CSR 1000V Installation Options Installation Option VMware ESXi Citrix XenServer Guidelines and LimitationsMicrosoft Hyper-V Where to Go Next Rommon and the Cisco CSR OL-27477-07 Installing the Cisco CSR 1000V in VMware ESXi Environments VMware ESXi Support Information 2lists the virtual machine requirements for the Cisco CSR Supported vSwitchCisco CSR 1000V Version GB virtual disk Virtual CPUsGB of RAM Or more virtual network interface cards Supported VMware Features and Operations Virtual CPUs, requiring 2.5 GB minimum of RAM Suspend See the following table for more information Supported VMware Features and Operations Networking Features Supported VMware Features and Operations High Availability Client Allocation VCPUs Requires Minimum Installation Requirements for VMware ESXiGB RAM Allocation VCPUs Requires Minimum Deploying the Cisco CSR 1000V OVA Template to the VM Deploying the OVA Template to the VM OL-27477-07 Property Description Enable SCP Server Enables the IOS SCP feature Property Description Command Name Parameters Description Tar xvf file.ova bdeo.sh README-BDEO.txt Cisco CSR 1000V Cloud Services Router Enters the ESXi login usernamePw -password Enters the ESXi login password Login Ipw -iospasswordEnters the Cisco IOS XE IOS password required for Remote login Choose vApp Options Properties See Figure Adding Custom Properties for the Cisco CSR Choose vApp Options Advanced Edit Property Settings Window Example of Custom Property Added Power on the VM to boot the Cisco CSR Optional Installing the Cisco CSR 1000V in VMware ESXi Environments Click OK Click Finish Increasing Performance on VMWare ESXi Configurations OL-27477-07 Citrix XenServer Support Information Installation Requirements for Citrix XenServer Requirements Cisco IOS XE 3.10S 12SPage Click Finish Kernel Virtual Machine Support Information KVM Support on OpenStack Installation Requirements for KVM Requirements Release 3.10S 11S 12S Installing the Cisco CSR 1000V in KVM Environments Choose Application System Tools Click Advanced options Creating the Instance Using the KVM Command Creating the Instance Using the OpenStack Command Line Tool Nova flavor-create csrflavor 6 4096 0 Creating the Instance Using the OpenStack Dashboard Virsh vcpupin csr1000v 1 Increasing Performance on KVM ConfigurationsVirsh nodeinfo Modprobe vhost-net For more information, see the KVM documentation OL-27477-07 Microsoft Hyper-V Support Information Microsoft Hyper-V Requirements Cisco IOS XE 3.12S Installation Requirements for Microsoft Hyper-V1lists the installation requirements for Microsoft HyperV Creating the VM Configuring the Server Manager SettingsPrerequisites Configuring the VM Settings Click Specify Name and Location Select Network Adapter and click Add Launching the VM to Boot the Cisco CSR Booting the Cisco CSR 1000V and Accessing the Console Booting the Cisco CSR 1000V as the VM OL-27477-07 Accessing the Cisco CSR 1000V Console Accessing the Cisco CSR 1000V Through the VM Console Creating Serial Console Access in VMware ESXi Click the Configuration tab and click Security Profile Click on Add Hardware Creating the Serial Console Access in KVMCreating the Serial Console Access in Microsoft Hyper-V Example Changing the Console Port Access After InstallationCommand or Action Purpose End Exits configuration mode Example Routerconfig# endRouter# copy systemrunning-config Nvramstartup-config Reload Reloads the operating system OL-27477-07 Prerequisites for the Software Upgrade Process Upgrading the Cisco IOS XE Software Copy nvramstartup-config ftp rcp tftp Copies the startup configuration file to a serverConfiguration file copy can serve as a backup copy Enter the destination URL when prompted Dir bootflash Copy bootflash ftp rcp tftp Copy tftp bootflash or Copy rcp bootflash Router# copy tftp bootflash Use this command to enter global configuration mode No boot systemLoading the New System Image Loading the New System Image from the Cisco IOS XE Software Exit Copy running-config startup-config ExitWrite Write memory Do write Do write memory Loading the New System Image from Grub ModeConfig-register Enter the letter c Upgrading the Cisco IOS XE Software Configuration file copy serves as a backup copy Backup copySystem Write down the name of the system image file Rebooting the Cisco CSR OL-27477-07 10-1 10-2 Router# show platform software vnic-if interface-mapping Adding and Deleting Network Interfaces on the Cisco CSR 10-3 Csr1000v# show platform software vnic-if interface-mapping Cisco CSR 1000V Network Interfaces and VM Cloning10-4 10-5 VMware ESXi 10-6 Vlan Cisco CSR 1000V Interfaces Directly Mapped to vSwitch Trunk 10-7 10-8 11-1 About Grub Mode and the Configuration RegisterBit Number Hexadecimal Meaning Accessing Grub Mode Boot FieldEnable Config-register 11-2 11-3 Using the Grub MenuModifying the Configuration Register confreg Confreg value 11-4 11-5 11-6 Changing the Configuration Register SettingsDisplaying the Configuration Register Settings Prerequisites for Call Home 12-1 12-2 Benefits of Using Call HomeInformation About Call Home 12-3 Obtaining Smart Call Home ServicesAnonymous Reporting How to Configure Call Home Configuring Smart Call Home Single CommandFollowing sections show detailed or optional configurations 12-4 12-5 Mode using the call-home reportingCall-home reporting anonymous contact-email-addr Configuring and Enabling Smart Call Home Configure terminal Service call-home No service call-homeEnabling and Disabling Call Home 12-6 12-7 Configuring Contact InformationPhone-number + phone-number 12-8 Configuring Destination ProfilesExample Creating a New Destination Profile 12-9 No destination transport-method email http Destination address email email-address http urlDestination preferred-msg-format long-text Short-text xml 12-11 Configure terminal Call-homeCopying a Destination Profile Setting Profiles to Anonymous Mode Call -homeAnonymous-reporting-only is set, only crash 12-12 Subscribing to Alert Groups 12-13 12-14 Periodic Notification Subscribe-to-alert-group snapshot periodic dailyHhmm hourly mm interval mm monthly date 12-15 12-16 Message Severity ThresholdLevel Keyword Syslog Level Description Configuring Snapshot Command List 12-17 12-18 Configuring General email OptionsPriority number Command or Action Purpose 12-19 12-20 Configure terminal Call-home Rate-limit numberSpecifying Rate Limit for Sending Call Home Messages 12-21 Specifying Http Proxy ServerSpecifies the proxy server for the Http request 12-22 12-23 Configuring Syslog ThrottlingConfigure terminal Call-home No syslog-throttling 12-24 Configuring Call Home Data PrivacyHostname command Sending Call Home Communications Manually Sending a Call Home Test Message ManuallyCall-home test test-messageprofile name Call-home test test-message profile name Call-home send alert-group configuration profile Sending Call Home Alert Group Messages ManuallyCall-home send alert-group snapshot profile name 12-26 Submitting Call Home Analysis and Report Requests 12-27 Example 12-28 12-29 Configuring Diagnostic Signatures Prerequisites for Diagnostic SignaturesInformation About Diagnostic Signatures 12-30 12-31 Diagnostic Signatures OverviewDiagnostic Signature Downloading Diagnostic Signature Workflow Diagnostic Signature Events and ActionsDiagnostic Signature Event Detection 12-32 12-33 Diagnostic Signature ActionsDiagnostic Signature Variables 12-34 How to Configure Diagnostic SignaturesConfiguring the Call Home Service for Diagnostic Signatures 12-35 Mail-server ipv4-addr name priority numberDestination transport-method email http Configuring Diagnostic Signatures Call-home Diagnostic-signatureWhat to Do Next Before You Begin 12-37 Configuration Examples for Diagnostic SignaturesRouter# configure terminal Routerconfig# service call-home 12-38 Displaying Call Home Configuration InformationShow call-home 12-39 ExamplesAll destination profiles 12-40 Example 2 Call Home Information in Detail 12-41 Callloop 12-42 Router# show call-home profile campus-noc 12-43 Example Call Home Statistics Default Settings Alert Group Trigger Events and CommandsParameters Default 12-44 Message Contents Data Item Description Call-Home Message Tag Plain Text and XML XML OnlyType is the product model number from backplane 12-46 12-47 Sample Syslog Alert Notification in XML Format 12-48 12-49 12-50 Activating Cisco CSR 1000V Licenses 13-1 License Upgrade and Downgrade Scenarios 13-2 Managing the Throughput Level Licenses 13-3 Changing the Maximum Throughput Level 13-4 Platform hardware throughput level MB 10 100 1000 250 2500 50 500Platform hardware throughput level 10000 25000 50000 eval-only License-Based Restriction on Aggregate Bandwidth 13-6 13-7 Input58757880 Output Requesting a New Virtual UDI Request license new-udi13-8 Router# show license udi history Rest API 14-1 14-2 14-3 Enabling Rest API Support Using the Cisco IOS XE CLIEnable Configure terminal Activate No shutdownInterface virtualportgroup virtualportgroup-number 14-4 14-5 14-6 Enables the secure Https server Enables the transport map to support HttpsEnters remote-management configuration mode Disabling Rest API Support Disables support for the Rest API Exits remote-management configuration modeRouter# show virtual-service detail Viewing the Rest API Container Status 14-9 Pnsc 14-10 15-1 No shutdown Exit Virtual-service csrmgmtNo shutdown Exit Enables IP processing on an interface without Activate EndInterface virtualportgroup Assigning it an explicit IP address Ip route ip-addresssubnet-maskvirtualportgroup 15-3 15-4 15-5 To the Cisco Prime Network Services Controller HostHttp port command Exits configuration mode and enters privileged Exec modeSettings Displays the Cisco CSR 1000V remote management No pnsc host ipv4-addrlocal-port number shared-secret 15-7 15-8 Troubleshooting Cisco CSR 1000V VM Issues 16-1 16-2 Troubleshooting Network Connectivity IssuesTroubleshooting VM Performance Issues Voluntarily Rehosting the License to a New VM Click Continue to Product License Registration Figure A-1 License to Initiate-Transfer Screen Figure A-3 License Rehost Target and Options Obtaining a Rehost License if the System Fails Command modes, understanding Call-home reporting command Commands Call-home request commandAaa-authorization call-home Call-home send alert-group command Active call-home IN-2 IN-3 IN-4 IN-5 IN-6