Cisco Systems Craft Works Interface manual

Quick Start Guide Cisco Craft Works Interface Quick Start Guide Cisco IOS XR Software Release 3.4 1 Introduction 2 About CWI 3 Prerequisites 4 Configuring the R outer and CWI Client 5 Installing, Launc hing, and Uninstalling CWI 6 Getting St arted with the Operation of CWI 7 Reference Inf ormation 8 Obtaining Documentation 9 Documentation F eedbac [...]

2 1 Introduction This document introduces Cra ft W o rks Interface (CWI) that supports Cisco IOS XR Software Release 3.4. Note This document refers to CWI managing devices. For Cisco IOS XR software, the devices can be any or all of the secure domain routers (SDRs) of which your Cisco IOS XR system is composed. Related Documentation See the followi[...]

3 Note If you are using a CORBA connection and require noti fications, the router must be explicitly configured for each cl ient that is to receive notifications. These notifications include real-time inventory updates (for example, online insertion and removal [OIR]), alarms, and change -of-co nfiguration events. See th e “Configuring the Router[...]

4 Hardware Requirements T able 2 lists the CWI client hardware requirements. Software Requirements T able 3 lists the CWI client software requirements. 4 Configuring the Router and CWI Client T o install CWI and for CWI to manage a router , specific configurat ion pieces must be active on the router . If you want to use the serial port or terminal [...]

5 Enabling the HTTP Server T o dow nload and install CWI, you must enable the HTTP server on the device. Note The HTTP server is used only to install CWI. After installation, the server can be dea ctivated. T o activate the HTTP server , i n stall the managea bility PIE, and add the configuration, use the http serv er command in global configuratio[...]

6 Connection Methods Some connection methods require additional config uration on the router , as described in T able 4. For the connection methods that require cryptographic (crypto) set up, see the “Setti ng Up the Minimum Crypto Requirements” section on page 6. Setting Up the Minimum Crypto Requirements This section describes the essentia l [...]

7 Step 4 Authenticate the CA by getting the certificate for the CA. RP/0/RP0/CPU0:router# crypto ca authenticate ca-name Step 5 Obtain a router cert ificate from the CA. RP/0/RP0/CPU0:router# crypto ca enroll ca-name 5 Installing, Launching, and Uninstalling CWI This section provides information on how to install, lau nch, and uninstall CW I. For a[...]

8 Note Y ou must install JRE 1.5 to proceed with the CWI insta llation. Step 5 If this is the first time the CWI client has started CWI, th e Java Plug- in must be installed and the CWI Cisco security certificate must be accepted. a. If the Java Plug-in installation is completed, a dialog box appe ars asking you to trust the s ecurity certificate d[...]

9 Launching CWI Without Using the Device Tree T o lau nch CWI with SSL either enabled or no t enabled, perform the following steps: Step 1 Double-click the CWI icon to launch the cl ient de sktop. Th e CWI - Login wi ndow appears (see Figure 1). Y ou have the option to add a device or device group and log in to multipl e routers. See the “Launchi[...]

10 Step 7 (Optional) If you chose the Scripted connection category to log in to the intermediate or Scripted server: a. Enter the Scripted username . b. Enter the Scripted pass word. c. Click the ellipsis button to display the Login Script Steps window (see Figure 7). Follow the procedure in the “Specifying the User Login Script” section on pag[...]

11 Adding or Editing a Device T o add or edit a new device to the De vice T ree, perform the following steps: Step 1 From the CWI - Login window , right-click the Login informatio n directory and choose Add New Device . The Add Device window appears (see Figure 2). Or you can right-click the dev ice in the Login information directory and choose Edi[...]

12 Adding or Editing a Device Group T o add or edit a new device gro up to the device tree, perform the following steps: Step 1 From the CWI - Login window , right-click the Login Information directory and choo se Add New Devi ce Group . The Add Device Group window appears (see Figure 3). Or yo u can right-click the d evice group and c hoose Edit t[...]

13 Step 3 Enter the same AAA password across all routers. Step 4 (Optional) Enter the enable password for IOS. Note When you connect to an IOS device, you must enter th e enable password. Step 5 Choose one of the following connection categ ories from the drop-down menu: • IP • Console/Aux • Scripted Note If you choose the IP-based or Con sole[...]

14 Figur e 5 Progr ess Windo w If one or more devices failed, see the “Encountering an Er ror W hile Logging into Multiple Devices Simultaneou sly” section on page 14. Encountering an Error Whil e Logging into Multiple Devices Simultaneously If an error is encountered while logging in to multiple devices simultaneously from the Progress window [...]

15 Figure 6 displays the Failed Log window . Click the Close button to go back to the Progress window . Figure 6 F ailed Log Window Specifying the User Login Script Y ou can access devices not direct ly accessible from the CWI work station through the S cripted Login capability . T abl e 5 lists the fields in the Login Script Steps window (see Figu[...]

16 Figure 7 Login Scr ipt St eps Window The exact inputs depend on the intermedia te server that is being used. If you are connecting to the intermediate machine by using SSHv1 or SSHv2, you do not need to specify steps for se nding the userna me and password to the in termediate machine, because this is done when establishing a connection. T able [...]

17 Uninstalling CWI T o unin stall a specific version of CWI, perform the following steps: Step 1 Navigate to the following CWI uninstall directory: <CWI installation directory>/u ninstall Step 2 Execute the uninstall script of the desired version, as shown in the following example: CWI_<version>_uninstall.cmd For Windows, you have the [...]

18 Understanding the Admin Planes and Device Planes For Cisco IOS XR devices, CWI can manage bo th the admin planes and device planes on a single desktop. A node is available for each plane in the Inventory T ree of the CWI desktop. Ea ch plane provides you with different domains (see T able 8). Configuring a Router with CWI T able 9 lists the appl[...]

19 • Filter records. • Set pref erences. CWI Desktop Window The CWI Desktop is the main point of access to a ll CWI applications and tools, al lowing you to configure, monitor , and manag e routers (see Figure 8). The CWI Deskto p is designed with common eleme nts that provide an easy-to-use and consiste nt user interface. T he elements of the [...]

20 Figur e 8 CWI Desktop The CWI Desktop lets you to communicate with the rou ter using the applications that are described in T able 11. 1 Inventory tree 3 CWI Desktop toolbar 2 CWI Desktop menu bar 4 CWI application pane T able 1 1 Applications for the CWI Deskt op Application Description Alarm Dashboard Provides a summary of the alarm status inf[...]

21 7 Reference Information These sections describe addi tional reference information: • Network Considerations, page 21 • Login Modes and Requirements, page 22 • CWI Supported Connection Methods and Applications, page 2 3 • T esting the CWI Client, page 24 Network Considerations Before you start setting up the minimum router and CWI client [...]

22 Y ou must open the ports listed in T able 1 3 when configuring th e firewall. See the firewall documentation for information on opening the ports. For an example of a dual-homed dev ice configuration, the client side is the prima ry interface, and the router side is the secon da ry interface (see Figure 9). When setting the minimum router conf i[...]

23 • HTTP server status (running or not running) • XML agent status (running or not running) T able 14 lists the applications and features to the corresponding login mod e type. CWI Supported Connection Methods and Applications T able 15 provides detailed i nformation on the sup porte d CWI connection meth ods and available applications. Note I[...]

24 Testing the CWI Client V erify that you can connect to the router by lo gging in to th e router . See the “Installing CWI” section on page 7 for procedures . If you are unable to log in to the router , see the “ T roubl eshooting Basic IP Connecti vity” section on page 24. Troubleshooting Basi c IP Connectivity This section provides info[...]

25 8 Obtaining Documentation Cisco documentation and additional literature are a vailable on Cisco.com. This section expl ains the product documentation resources that Cisco offers. Cisco.com Y ou can access the most current Cisco documentation at this URL: http://www.cisco.com/techsupport Y ou can access the Cisco website at this URL: http://www.c[...]

26 A current list of security advisories, security notices, and security responses for Cisco products is available at this URL: http://www.cisco.com/go/psirt T o see security advisories, security notices , and security responses as they are update d in real time, you can subscribe to the Product Security Incident Respons e T eam Really Simple Syndi[...]

27 Cisco Technical Support & Documentation Website The Cisco T echnical Support & Documentatio n website provides online documents and tools for troubleshootin g and resolving technical issues with Cisco products and technologi es. The website is av ailab le 24 hours a day at this URL: http://www.cisco.com/techsupport Access to all tools on[...]

28 Severity 1 (S1)—An existing network is “down” or there is a critical impact to your business operations. Y ou an d Cisco will commit all necessary resources around the clock to resolve the situation. Severity 2 (S2)—Operation of an existing netw ork is severe ly degraded, or signific ant aspects of your business opera tions are negativel[...]

29[...]

30[...]

Corporate Headquarters Cisco Systems, Inc. 170 W es t T a sman Drive San Jose, CA 95134-1706 USA www .cisco.com T el: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 European Headquarters Cisco Systems International BV Haarlerb ergpark Haarlerbergw eg 13-19 1101 CH Amsterdam The Neth erlands www-europe.ci sco.com T el: 31 0 20 357 1000 Fax: 31 0[...]

32[...]