CONTENTS Getting Started Introduction to Cisco Prime ...

C O N T E N T S

P A R T 1

Getting Started

C H A P T E R 4

Introduction to Cisco Prime Infrastructure 4-i

Prime Infrastructure Organization 4-ii

C H A P T E R 5

Adding Licenses 5-i

About Traditional Licenses 5-ii

Adding a Traditional License to Access Features 5-ii

About the Smart License Feature 5-ii

C H A P T E R 6

Adding Devices to Prime Infrastructure 6-i

Methods for Adding Devices 6-i

Adding Devices Using Discovery 6-i

Understanding the Discovery Process 6-i

Running Discovery 6-ii

Running Quick Discovery 6-v

Verifying Discovery 6-v

Importing Devices from Another Source 6-vi

CSV File Requirements for Importing Devices 6-vii

Adding Devices Manually 6-viii

Adding Virtual Device Context (VDC) Device 6-ix

About Adding Wireless Devices 6-ix

Validating That Devices Were Added Successfully 6-x

Verifying Device Credentials 6-xi

Editing Device Parameters 6-xi

Synchronizing Devices 6-xiiText Part Number:

iCisco Prime Infrastructure 3.1.5 User Guide

Contents

Adding NAM HTTP/HTTPS Credentials 6-xii

Exporting Devices 6-xiii

Next Steps 6-xiii

C H A P T E R 7

Grouping Devices 7-i

Grouping Devices by Device Type 7-ii

C H A P T E R 8

Setting Up Network Monitoring 8-i

Monitoring Port Groups and Interfaces 8-ii

Setting Up WAN Interface Monitoring 8-iii

Getting Enhanced Client Information by Integrating with Cisco Identity Services Engine (ISE) 8-iii

Adding an Identity Services Engine 8-iv

Configuring ACS View Servers 8-iv

Setting Up Assurance for Performance Monitoring 8-iv

Enabling NAM Data Collection 8-v

Defining NAM Polling Parameters 8-v

Enabling NetFlow Data Collection 8-vi

C H A P T E R 9

Changing User Settings 9-i

Setting User Preferences 9-ii

Changing Your User Preferences 9-ii

Changing Your Idle-User Timeout 9-ii

Changing List Length 9-iii

C H A P T E R 10

Viewing and Managing Dashboards 10-i

Types of Dashboards 10-ii

Network Summary Dashboards 10-ii

Overview Dashboards 10-iv

Wireless Dashboards 10-vi

Performance Dashboards 10-vi

Data Center Dashboards 10-viii

Managing and Editing Dashboards 10-ix

iiCisco Prime Infrastructure 3.1.5 User Guide

Contents

Viewing Options for Metrics 10-ix

Understanding Dashlet Icons 10-ix

Adding Dashboards 10-xi

Adding Dashlets 10-xi

Default Dashlets 10-xi

Time Filters for Dashboards and Dashlets 10-xvii

Overriding a Dashlet Filter 10-xvii

Creating Generic Dashlets 10-xviii

Restoring Dashboards 10-xviii

C H A P T E R 11

Troubleshooting Network Health Using Dashboards 11-i

Defining Health Rules 11-ii

Network Health Map Features 11-ii

Network Health Display Options 11-iii

Network Health Summary 11-iv

P A R T 1

Monitoring Your Network

C H A P T E R 13

Monitoring Devices 13-i

Monitoring Network Devices 13-ii

Network Devices Page 13-ii

Monitoring Jobs 13-ii

Monitoring Background Tasks 13-iv

Using Packet Capture to Monitor and Troubleshoot Network Traffic 13-iv

Securing Network Services 13-v

C H A P T E R 14

Monitoring Wireless Devices 14-i

Monitoring Controllers 14-ii

Monitoring System Parameters 14-ii

Spanning Tree Protocol 14-iii

Management Frame Protection 14-iv

iiiCisco Prime Infrastructure 3.1.5 User Guide

Contents

Rogue AP Rules 14-iv

Monitoring Third Party Controllers 14-v

Monitoring Switches 14-v

Configuring the Switch List Page 14-v

Monitoring Switch System Parameters 14-vi

Monitoring Switch Interfaces 14-vii

Monitoring Switch Clients 14-viii

Monitoring Access Points 14-viii

Searching for Access Points 14-viii

Viewing a List of Access Points 14-ix

Configuring the List of Access Points Display 14-ix

Types of Reports for Access Points 14-x

Generating Reports for Access Points 14-xi

Monitoring Traffic Load 14-xii

Monitoring Dynamic Power Control 14-xii

Monitoring Access Points Noise 14-xii

Monitoring Access Points Interference 14-xiii

Monitoring Access Points Coverage (RSSI) 14-xiii

Monitoring Access Points Coverage (SNR) 14-xiv

Monitoring Access Points Up/Down Statistics 14-xiv

Monitoring the Access Points Voice Statistics 14-xiv

Monitoring the Access Points Voice TSM Table 14-xv

Monitoring the Access Points Voice TSM Reports 14-xv

Monitoring Access Points 802.11 Counters 14-xvi

Monitoring Access Points AP Profile Status 14-xvi

Monitoring Access Points Radio Utilization 14-xvi

Monitoring Access Points Traffic Stream Metrics 14-xvi

Monitoring Access Points Tx Power and Channel 14-xvii

Monitoring VoIP Calls 14-xvii

Monitoring Voice Statistics 14-xvii

Monitoring Air Quality 14-xviii

Monitoring Access Points Details 14-xviii

Monitoring Air Time Fairness 14-xix

Monitoring ATF Statistics 14-xix

Monitoring Rogue Access Points 14-xx

Detecting Rogue Devices 14-xx

Classifying Rogue Access Points 14-xxi

Monitoring Rogue AP Alarms 14-xxiii

Viewing Rogue AP Alarm Details 14-xxiv

ivCisco Prime Infrastructure 3.1.5 User Guide

Contents

Viewing Rogue Client Details 14-xxiv

Viewing Rogue AP History Details 14-xxv

Monitoring Ad hoc Rogues 14-xxv

Monitoring Ad hoc Rogue Alarms 14-xxvi

Viewing Ad hoc Rogue Alarm Details 14-xxvi

Searching Rogue Clients Using Advanced Search 14-xxvii

Monitoring Rogue Access Point Location, Tagging, and Containment 14-xxvii

Detecting Access Points 14-xxviii

Monitoring Rogue Alarm Events 14-xxix

Viewing Rogue AP Event Details 14-xxix

Monitoring Ad hoc Rogue Events 14-xxix

Viewing Ad hoc Rogue Event Details 14-xxx

Troubleshooting Unjoined Access Points 14-xxx

Monitoring Spectrum Experts 14-xxxi

Monitoring WiFi TDOA Receivers 14-xxxi

Searching WiFi TDOA Receivers 14-xxxi

Monitoring Media Streams 14-xxxii

Viewing Media Stream Details 14-xxxii

Radio Resource Management 14-xxxii

Viewing the RRM Dashboard 14-xxxiii

Monitoring Access Point Alarms 14-xxxiii

Monitoring Air Quality Alarms 14-xxxiv

Monitoring CleanAir Security Alarms 14-xxxiv

Monitoring Cisco Adaptive wIPS Alarms 14-xxxiv

Monitoring Cisco Adaptive wIPS Alarm Details 14-xxxv

Monitoring Failure Objects 14-xxxvi

Monitoring Events for Rogue Access Points 14-xxxvii

Monitoring Events for Ad hoc Rogues 14-xxxviii

Monitoring Cisco Adaptive wIPS Events 14-xxxix

Monitoring CleanAir Air Quality Events 14-xxxix

Monitoring Interferer Security Risk Events 14-xl

Monitoring Health Monitor Events 14-xli

C H A P T E R 15

Creating Monitoring Policies and Thresholds 15-i

Default Monitoring Policies 15-ii

Modifying Default Monitoring Policies 15-iv

Creating New Monitoring Policies 15-v

vCisco Prime Infrastructure 3.1.5 User Guide

Contents

GETVPN Monitoring Policies 15-v

DMVPN Monitoring Policies 15-viii

LISP Monitoring Policy 15-ix

Monitoring Third-Party Devices By Polling MIBs 15-ix

Example: Monitoring IP SLA 15-x

Polled Data in Dashlets and Reports 15-xi

C H A P T E R 16

Monitoring Alarms 16-i

What Is an Event? 16-ii

Recurring Alarms and Events 16-iii

What Is an Alarm? 16-iii

Defining Alarm Thresholds 16-iv

Where to Find Alarms 16-v

Display Options 16-vi

Viewing Options for Alarms, Events, and Syslogs 16-vi

Displaying Alarm Icons 16-vi

Changing Alarm Display Behavior 16-vi

Modifying Alarm Failure Source Pattern 16-vii

Customizing the Alarm Summary 16-viii

Changing Alarm Status 16-viii

When to Acknowledge Alarms 16-ix

Including Acknowledged and Cleared Alarms in Searches 16-x

Changing Alarm and Event Options 16-x

Configuring Alarm Severity Levels 16-x

Customizing Alarms and Events For Traps 16-x

Modifying a Customized Trap Event 16-xi

What is an Alarm Policy? 16-xi

Customizing Interface Alarm Policy 16-xii

Customizing Controller Alarm Policy 16-xiii

Customizing Access Point Alarm Policy 16-xiv

Customizing Layer2 Switch Alarm Policy 16-xvii

Customizing Wired Infrastructure Alarm Policy 16-xviii

Viewing the Alarm Policy Summary 16-xix

Restoring Default Settings 16-xix

Getting Help for Alarms 16-xx

Viewing Syslogs 16-xx

viCisco Prime Infrastructure 3.1.5 User Guide

Contents

Supported Syslog Formats for Event Based Inventory 16-xxi

Customizing Alarms and Events For Syslogs 16-xxii

Modifying a Customized Syslog Event 16-xxiii

C H A P T E R 17

Monitoring Clients and Users 17-i

About Wired and Wireless Clients 17-ii

Client Dashlets on the General Dashboard 17-ii

Client Dashboard 17-iii

Monitoring Clients and Users 17-iii

Filtering Clients and Users 17-iii

Viewing Clients and Users 17-iv

When to Use the Client Troubleshooting Tool 17-vi

Launching the Client Troubleshooting Tool 17-vi

About the Client Troubleshooting Page 17-vii

How the Client Troubleshooting Tool Gives Advice 17-viii

Searching for Clients 17-xi

Analyzing Client Connection Logs 17-xi

Viewing Client Event History and Event Logs 17-xii

Checking Client ISE Authentication History and Identity Services 17-xii

Checking Client Clean Air Environment 17-xiii

Running Diagnostic Tests on Problem Clients 17-xiii

When to Run Diagnostic Tests on Problem Clients 17-xiii

Pinging Problem Clients with Text Messages 17-xiv

Viewing Real Time Troubleshooting (RTTS) Details 17-xiv

Debug Commands for RTTS 17-xv

Tracking Clients 17-xvi

Tracking Multiple Clients 17-xvii

Specifying Notification Settings 17-xvii

When to Assign a Username 17-xviii

Identifying Unknown Users 17-xix

Modifying the Clients and Users Page 17-xix

Enabling Automatic Client Troubleshooting 17-xx

When to Obtain Radio Measurements for a Client 17-xx

Obtaining Radio Measurements for a Client 17-xx

Radio Measurement Results for a Client 17-xxi

viiCisco Prime Infrastructure 3.1.5 User Guide

Contents

Viewing Client V5 Statistics 17-xxii

Viewing Client Operational Parameters 17-xxiii

Viewing Client Profiles 17-xxv

Disabling Current Clients 17-xxv

Removing Current Clients 17-xxvi

Enabling Mirror Mode 17-xxvi

Mapping Recent Client Locations 17-xxvii

Mapping Current Client Locations 17-xxvii

Running Client Sessions Reports 17-xxvii

Viewing Client Roam Reason Reports 17-xxviii

Viewing Detecting Access Point Details 17-xxviii

Viewing Client Location History 17-xxviii

Viewing Voice Metrics for a Client 17-xxix

C H A P T E R 18

Performance Routing Version 3 Based Network Monitoring 18-i

Performance Routing 18-ii

Getting Access to PfR Monitoring for a User Group 18-ii

PfR Monitoring Page 18-iii

Site to Site PfR Events Table 18-iv

PfR Filter Panel 18-iv

Service Provider View and DSCP View Charts 18-v

Time Slider 18-vi

Viewing Site to Site PfR Topology 18-vi

Troubleshooting the Sankey diagram 18-vii

Comparing WAN Interfaces 18-viii

C H A P T E R 19

Monitoring Wireless Technologies 19-i

Monitoring Radio Resource Management 19-ii

Channel Change Notifications 19-ii

Transmission Power Change Notifications 19-iii

RF Grouping Notifications 19-iii

RRM Dashboard 19-iii

Monitoring Interferers 19-iv

Configuring the Search Results Display 19-v

viiiCisco Prime Infrastructure 3.1.5 User Guide

Contents

Monitoring RFID Tags 19-v

Searching RFID Tags 19-vi

Checking RFID Tag Search Results 19-vi

Viewing Tag List 19-vi

Monitoring Media Streams 19-vi

Troubleshooting Unjoined Access Points 19-vii

Monitoring Chokepoints 19-viii

Adding a Chokepoint to the Prime Infrastructure Database 19-viii

Adding a Chokepoint to a Prime Infrastructure Map 19-ix

Removing a Chokepoint from the Prime Infrastructure Database 19-x

Removing a Chokepoint from a Prime Infrastructure Map 19-x

Editing a Chokepoint 19-x

Monitoring WiFi TDOA Receivers 19-xi

Enhancing Tag Location Reporting with WiFi TDOA Receivers 19-xi

Adding WiFi TDOA Receivers to Prime Infrastructure and Maps 19-xi

C H A P T E R 20

Using Monitoring Tools 20-i

Monitoring Wireless Voice Audit 20-ii

Monitoring Wireless Voice Diagnostics 20-ii

Monitoring Wireless Configuration Audit 20-iii

Monitoring Autonomous AP Migration Analysis 20-iii

Monitoring Location Accuracy 20-iv

Enabling the Location Accuracy Tool 20-iv

Scheduling a Location Accuracy Test 20-v

Running an On-Demand Location Accuracy Test 20-vi

Monitoring Packet Capture 20-vii

C H A P T E R 21

Viewing Performance Graphs 21-i

Creating Performance Graphs 21-ii

Viewing Multiple Metrics on a Single Performance Graph 21-ii

Performance Graphs Options 21-iii

ixCisco Prime Infrastructure 3.1.5 User Guide

Contents

C H A P T E R 22

Troubleshooting 22-i

Getting Help from Cisco 22-ii

Launching the Cisco Support Community 22-ii

Opening a Support Case 22-iii

Checking an End User’s Network Session Status 22-iii

Troubleshooting Authentication and Authorization 22-iv

Troubleshooting Network Attachments 22-iv

Troubleshooting Network Attachment Devices 22-v

Troubleshooting Site Network Devices 22-v

Troubleshooting the User Application and Site Bandwidth Utilization 22-vi

Troubleshooting User Problems 22-vii

Troubleshooting the User’s Experience 22-vii

Troubleshooting Voice/Video Delivery to a Branch Office 22-viii

Troubleshooting Unjoined Access Points 22-ix

Troubleshooting Wireless Performance Problems 22-x

Root Cause and Impact analysis of Physical and Virtual Data Center Components 22-x

Troubleshooting UCS Hardware Problems 22-xi

Viewing Bandwidth on Fabric Interconnect Ports 22-xii

C H A P T E R 23

Monitoring Multiple Prime Infrastructure Instances 23-i

Viewing the Operations Center Dashboards 23-iii

Configuring Devices Using Operations Center 23-iii

Viewing Configuration Templates Using Operations Center 23-iii

Deploying Configuration Templates 23-iv

Distributing Configuration Templates Across Managed Servers 23-iv

Monitoring Your Network Using Operations Center 23-v

Monitoring Devices Using Operations Center 23-vi

Using Virtual Domains With Operations Center 23-vi

Role Based Access Control Support in Operations Center 23-viii

Managing and Monitoring Prime Infrastructure Servers Using Operations Center 23-viii

Viewing the Prime Infrastructure Server Status Summary in Operations Center 23-ix

Viewing Prime Infrastructure Server Software Updates in Operations Center 23-x

Viewing Prime Infrastructure Server Reachability History in Operations Center 23-x

Viewing Alarms and Events Using Operations Center 23-xi

xCisco Prime Infrastructure 3.1.5 User Guide

Contents

Viewing Clients and Users Using Operations Center 23-xii

Cross-Launching Prime Infrastructure Using Operations Center 23-xii

Running Reports With Operations Center 23-xii

Operations Center FAQs 23-xiii

P A R T 1

Configuring Devices

C H A P T E R 25

Configuring Network Devices 25-i

C H A P T E R 26

Using Templates to Configure Devices 26-i

Guidelines for Planning Your Network Design 26-ii

Creating Feature-Level Configuration Templates 26-iii

Features and Technologies Templates 26-iii

Creating Features and Technologies Templates 26-iv

Deployment Flow for Configuration Templates Using the Wizard 26-v

CLI Templates 26-vi

Prerequisites for Creating CLI Templates 26-vi

Creating CLI Configuration Templates 26-vii

Creating CLI Configuration Templates from Copied Code 26-xii

Exporting a Template 26-xii

Importing a CLI Configuration Template 26-xiii

Exporting CLI Variables 26-xiii

Importing CLI Variables 26-xiii

Example: Updating Passwords Using a CLI Template 26-xiv

Deployment Flow for CLI Templates using the Wizard 26-xv

Composite Templates 26-xvi

Creating Composite Templates 26-xvi

Deployment Flow for Composite Templates Using the Wizard 26-xvii

Feature Templates 26-xviii

My Tags 26-xix

Tagging a New Configuration Template 26-xix

Tagging an Existing Template 26-xix

Associating a Tag With Multiple Templates 26-xx

xiCisco Prime Infrastructure 3.1.5 User Guide

Contents

Controller Templates 26-xx

Creating Controller Templates 26-xxi

Configuring Client Profiling 26-xxiii

Configuring Mobile Concierge (802.11u) 26-xxiv

Access Point Groups 26-xxv

Creating WLAN AP Groups Templates 26-xxv

Adding Access Point Groups 26-xxvi

Deleting Access Point Groups 26-xxvii

Creating Policy Configuration Templates 26-xxvii

Adding FlexConnect Users to FlexConnect AP Groups Templates 26-xxviii

Creating General AAA Security Controller Templates 26-xxviii

RADIUS Authentication Templates 26-xxix

Creating RADIUS Fallback Templates 26-xxix

Creating RADIUS TACACS Fallback Templates 26-xxix

Local EAP General Templates 26-xxx

Local Network Users Templates 26-xxxi

User Login Policies Templates 26-xxxii

MAC Filter Template 26-xxxii

Access Point or MSE Authorization Templates 26-xxxiii

Manually Disabled Client Template 26-xxxiii

Client Exclusion Policies Templates 26-xxxiv

Access Point Authentication and MFP Templates 26-xxxiv

Web Authentication Templates 26-xxxv

External Web Auth Server Templates 26-xxxviii

Security Password Policy Template 26-xxxix

Security - Access Control Templates 26-xxxix

Creating a FlexConnect Access Control List Template 26-xlii

Creating Security - CPU Access Control List Templates 26-xliv

Creating a CPU Access Control List (ACL) Template 26-xliv

Creating Security - Rogue Templates 26-xliv

Rogue AP Rules 26-xlv

Creating a Rogue AP Rule Groups Template 26-xlv

Deploying a Rogue AP Rule Groups Template 26-xlvi

Viewing Deployed Rogue AP Rules 26-xlvi

SIP Snooping 26-xlvii

Creating Management Templates 26-xlvii

Creating LyncSDN Templates 26-l

Creating AVC Profiles Templates 26-lii

Creating NetFlow Templates 26-liii

xiiCisco Prime Infrastructure 3.1.5 User Guide

Contents

Creating EoGRE Tunneling Templates 26-liv

Creating AP Configuration Templates 26-lv

Configuring a New Lightweight Access Point Template 26-lv

Creating Autonomous Access Point Templates 26-lviii

Configuring Switch Location Configuration Templates 26-lx

Creating Autonomous AP Migration Templates 26-lx

Migrating an Autonomous Access Point to a Lightweight Access Point 26-lxi

Viewing the Current Status of Cisco IOS Access Points 26-lxiv

Deploying Templates 26-lxv

Deployment Flow for Model Based Configuration Templates 26-lxvi

Global Variables 26-lxvii

Shared Policy Objects 26-lxvii

Creating Interface Roles 26-lxviii

Creating Network Objects 26-lxix

Creating a Security Rule Parameter Map 26-lxix

Creating a Security Service Group 26-lxx

Creating a Security Zone 26-lxx

Configuration Groups 26-lxxi

Grouping Configuration Templates with Devices 26-lxxi

WLAN Controller Configuration Groups 26-lxxii

Creating Controller Configuration Groups 26-lxxii

Adding or Removing Controllers from Configuration Groups 26-lxxiii

Configuring Multiple Country Codes 26-lxxiv

Applying or Scheduling Configuration Groups 26-lxxv

Auditing Configuration Groups 26-lxxv

Rebooting Configuration Groups 26-lxxvi

Retrieving Configuration Group Reports 26-lxxvii

Wireless Configuration Templates 26-lxxvii

Creating Lightweight AP Configuration Templates 26-lxxviii

Creating Autonomous AP Configuration Templates 26-lxxviii

Creating Autonomous AP Migration Templates 26-lxxviii

Creating Switch Location Templates 26-lxxix

Creating Controller WLAN Configuration Policy Templates 26-lxxix

C H A P T E R 27

Configuring Wireless Devices 27-i

Configuring Controllers 27-ii

Viewing All Controllers 27-iii

xiiiCisco Prime Infrastructure 3.1.5 User Guide

Contents

Wireless Controller Summary Information 27-iii

Controller-Specific Commands 27-iv

Auditing Controllers 27-v

Updating Controller Credentials 27-vi

Updating Controller Credentials in Bulk 27-vii

Rebooting Controllers 27-vii

Downloading Software to Controllers 27-viii

Configuring IPaddr Upload Configuration/Logs from Controllers 27-ix

Downloading IDS Signatures to Controllers 27-ix

Downloading Customized WebAuthentication Bundles to Controllers 27-x

Downloading Vendor Device Certificates to Controllers 27-x

Downloading Vendor CA Certificates to Controllers 27-xi

Saving Controller Configurations to Flash 27-xii

Synchronizing Configurations from Controllers 27-xii

Managing Controller Templates 27-xii

Replacing Old Controller Models with New Models 27-xiv

Modifying Controller Properties 27-xiv

Configuring Controller System Parameters 27-xv

Uploading Configuration and Logs from Controllers 27-xix

Downloading Configurations to Controllers 27-xx

Downloading Icons to Controllers 27-xx

Configuring Controller System Interfaces 27-xxi

Adding Interfaces to Controllers 27-xxi

Viewing or Modifying Controller Interface Details 27-xxii

Configuring Controller System Interface Groups 27-xxiii

NAC Integration 27-xxv

Guidelines for Using SNMP NAC 27-xxv

Guidelines for Using RADIUS NAC 27-xxvi

Configuring NAC Out-of-Band Integration (SNMP NAC): Workflow 27-xxvi

Wired Guest Access 27-xxviii

Creating an Ingress Interface 27-xxxi

Creating an Egress Interface 27-xxxi

Configuring Controller Network Routes 27-xxxii

Viewing Controller Spanning Tree Protocol Parameters 27-xxxiii

Configuring Controller Mobility Groups 27-xxxiv

Background Scanning on 1510s in Mesh Networks 27-xxxvii

Configuring Controller QoS Profiles 27-xxxix

Configuring Controller DHCP Scopes 27-xl

Viewing Controller User Roles 27-xli

Adding a New Local Net User Role to Controllers 27-xli

xivCisco Prime Infrastructure 3.1.5 User Guide

Contents

Configuring a Global Access Point Password 27-xli

Configuring Global CDP 27-xlii

Configuring AP 802.1X Supplicant Credentials 27-xliii

Configuring Controller DHCP 27-xliii

Configuring Access Point Timer Settings 27-xlv

Configuring Controller WLANs 27-xlvi

Configuring Controller WLANs 27-xlvi

Viewing Controller WLAN Configurations 27-xlvii

Adding Policies to Controller WLANs 27-xlvii

Configuring Mobile Concierge (802.11u) on WLANs 27-xlviii

Adding WLANs to Controllers 27-li

Deleting Controller WLANs 27-li

Scheduling Status Changes for Multiple Controller WLANs 27-lii

Viewing WLAN Mobility Anchors 27-liii

Working with WLAN AP Groups 27-liv

Creating Controller WLAN AP Groups 27-liv

Deleting Controller WLAN AP Groups 27-lvi

Auditing Controller WLAN AP Groups 27-lvi

Configuring FlexConnect on APs 27-lvii

Supported Platforms for FlexConnect 27-lviii

FlexConnect Guidelines and Limitations 27-lviii

FlexConnect Authentication Process 27-lix

FlexConnect Operation Modes 27-lix

FlexConnect States 27-lx

Configuring FlexConnect: Workflow 27-lxi

FlexConnect AP Groups 27-lxvi

Viewing FlexConnect AP Groups 27-lxviii

Configuring FlexConnect AP Groups 27-lxix

Verifying APs in FlexConnect Groups 27-lxx

Auditing FlexConnect Groups 27-lxx

Default FlexConnect Group 27-lxx

Moving APs from Default FlexConnect AP Group to another FlexConnect Group 27-lxxi

Delete FlexConnect AP Group 27-lxxi

Configuring Controller Security Parameters 27-lxxii

Configuring Controllers AAA Security 27-lxxiii

Configuring Controller Web Auth Certificates 27-lxxxvii

Configuring Controller User Login Policies 27-lxxxviii

Managing Manually Disabled Clients 27-lxxxviii

Configuring Controller Access Control Lists 27-lxxxix

xvCisco Prime Infrastructure 3.1.5 User Guide

Contents

FlexConnect Access Control Lists 27-xci

Configuring IDS Signatures 27-xcviii

URL ACL Configuration 27-ciii

802.11 Parameters 27-cv

Configuring 802.11a/n Parameters 27-cxii

Configuring 802.11b/g/n General Parameters 27-cxxviii

Configuring Mesh Parameters 27-cxli

Configuring Port Parameters 27-cxlv

Configuring Controller Management Parameters 27-cxlvi

Configuring Location Configurations 27-cliv

Configuring IPv6 27-clv

Configuring Proxy Mobile IPv6 27-clvii

Configuring EoGRE Tunneling 27-clxi

Configuring mDNS 27-clxi

Configuring Application Visibility and Control Parameters 27-clxiii

Configuring NetFlow 27-clxv

Configuring Third-Party Controllers and Access Points 27-clxvi

Adding a Third-Party Controller 27-clxvii

Viewing Third-Party Controller Operational Status 27-clxvii

Viewing the Details of Third-Party Access Points 27-clxviii

Removing Third-Party Access Points 27-clxix

Viewing Third-Party Access Point Operational Status 27-clxix

Configuring Switches 27-clxx

Features Available by Switch Type 27-clxxi

Viewing Switches 27-clxxi

Viewing Switch Details 27-clxxi

Modifying SNMP Parameters 27-clxxi

Modifying Telnet/SSH Parameters 27-clxxii

Adding Switches 27-clxxiii

Removing Switches 27-clxxiv

Enabling Traps and Syslogs on Switches for Wired Client Discovery 27-clxxv

Example: MAC Notification for Traps (Used for Non-Identity Client Discovery) 27-clxxv

Syslog Configuration 27-clxxv

OfficeExtend Access Point 27-clxxvi

Link Latency Settings for Access Points 27-clxxvii

Configuring Link Latency 27-clxxvii

Configuring Unified Access Points 27-clxxviii

Using the Sniffer Feature 27-clxxviii

Configuring Controller Redundancy 27-clxxx

xviCisco Prime Infrastructure 3.1.5 User Guide

Contents

Configuring Cisco Adaptive wIPS Profiles 27-clxxx

Accessing wIPS Profiles 27-clxxxi

Adding wIPS Profiles 27-clxxxi

Editing wIPS Profiles 27-clxxxii

Applying wIPS Profiles 27-clxxxiv

Deleting wIPS Profiles 27-clxxxiv

Associating SSID Groups With wIPS Profiles 27-clxxxiv

Managing MSE High Availability Using Prime Infrastructure 27-clxxxvi

MSE HA Automatic vs Manual Failover and Failback 27-clxxxvi

Pairing MSE HA Servers 27-clxxxvii

Viewing Configured Parameters for MSE HA Devices 27-clxxxviii

Viewing MSE High Availability Status 27-clxxxix

Triggering MSE HA Manual Failover or Failback 27-clxxxix

Enabling Automatic MSE HA Failover and Failback 27-cxc

Unpairing MSE HA Servers 27-cxci

Auto Provisioning for Controllers 27-cxci

C H A P T E R 28

Creating Controller Configuration Groups 28-i

Adding Controller Configuration Groups 28-ii

Configuring Controller Configuration Groups 28-iii

Adding or Removing Controllers from a Configuration Group 28-iv

Adding or Removing Templates from the Configuration Group 28-iv

Applying or Scheduling Configuration Groups 28-v

Auditing Configuration Groups 28-vi

Rebooting Configuration Groups 28-vii

Viewing Configuration Group Reports 28-viii

Downloading Software to Configuration Groups 28-viii

Downloading IDS Signatures to Configuration Groups 28-ix

Downloading Customized WebAuth to Configuration Groups 28-x

About Mobility 28-x

Intra-Controller Roaming 28-x

Inter-Controller Roaming 28-xi

Inter-Subnet Roaming 28-xii

Symmetric Tunneling 28-xiii

About Mobility Groups 28-xiv

When to Include Controllers in a Mobility Group 28-xvi

xviiCisco Prime Infrastructure 3.1.5 User Guide

Contents

Messaging Among Mobility Groups 28-xvi

Configuring Mobility Groups: Workflow 28-xvi

Before You Begin Configuring Mobility Groups 28-xvii

Adding Controllers to Mobility Groups 28-xvii

Adding Controllers to Mobility Groups Manually 28-xviii

Setting Mobility Scalability Parameters 28-xix

Mobility Anchors 28-xx

Adding Multiple Controllers And Setting DCA Channels 28-xx

Configuring Controller Mobility Groups: Workflow 28-xxi

C H A P T E R 29

Configuring Wireless Technologies 29-i

Chokepoints 29-ii

Adding Chokepoints 29-ii

Removing Chokepoints 29-ii

Adding Chokepoints to Maps 29-iii

Removing Chokepoints from Maps 29-iv

Editing Chokepoints 29-iv

Wi-Fi TDOA Receivers 29-iv

Using Wi-Fi TDOA Receivers to Enhance Tag Location Reporting 29-v

Adding Wi-Fi TDOA Receivers 29-v

Adding Wi-Fi TDOA Receivers to Maps 29-vi

Editing Wi-Fi TDOA Receivers 29-vii

Removing Wi-Fi TDOA Receivers 29-vii

Access Point Radios 29-vii

Adding Autonomous Access Points to Prime Infrastructure 29-vii

Configuring Access Point Details 29-xiii

Importing AP Configuration 29-xxi

Exporting AP Configuration 29-xxiii

Configuring Access Points 802.11n Antenna 29-xxiii

Configuring CDP 29-xxxii

Configuring Access Points XOR Antenna 29-xxxii

Configuring Access Point Radios for Tracking Optimized Monitor Mode 29-xxxv

Copying and Replacing Access Points 29-xxxvi

Bulk Copy and Replacing the Access Points 29-xxxvi

Removing Access Points 29-xxxvii

Scheduling and Viewing Radio Status 29-xxxvii

Viewing Audit Status (for Access Points) 29-xxxviii

Filtering Alarms for Maintenance Mode Access Points 29-xxxix

xviiiCisco Prime Infrastructure 3.1.5 User Guide

Contents

Searching Access Points 29-xl

Viewing Mesh Link Details 29-xli

Viewing or Editing Rogue Access Point Rules 29-xli

Configuring WLAN Controller Auto Provisioning 29-xlii

Using the Auto Provisioning Filter List 29-xlii

Adding an Auto Provisioning Filter 29-xliii

Auto Provisioning Primary Search Key Settings 29-xliii

C H A P T E R 30

Scheduling Configuration Tasks 30-i

Managing Scheduled Configuration Tasks 30-ii

Managing AP Template Tasks 30-ii

Viewing WLAN Configuration Scheduled Task Results 30-iii

Managing Software Downloads 30-iii

C H A P T E R 31

Auditing Device Configurations to Ensure Compliance 31-i

Compliance Auditing Prerequisites 31-iii

Creating Compliance Policies 31-iii

Creating Compliance Policy Rules 31-iv

Policy Group Details 31-x

Grouping Policies into Compliance Profiles 31-xiii

Running Compliance Profiles Against Devices 31-xiv

Viewing Compliance Audit Results 31-xv

Fixing Compliance Violations on Devices 31-xvi

Viewing Violation Summary Details 31-xvii

Viewing Device Security Vulnerabilities 31-xvii

Viewing End-of-Life Reports 31-xviii

Viewing Field Notices for Devices 31-xviii

C H A P T E R 32

Configuring Plug and Play 32-i

Prerequisites for Delivering Plug and Play Profiles 32-ii

Plug and Play Workflow 32-ii

Viewing Plug and Play Dashboard 32-iv

APIC-EM and Plug and Play 32-v

xixCisco Prime Infrastructure 3.1.5 User Guide

Contents

Integrating APIC-EM with Prime Infrastructure 32-v

Plug and Play Profiles 32-vi

Creating Plug and Play Profiles for Routers and Switches 32-vii

Creating Plug and Play Profiles for Wireless AP 32-ix

Prerequisites for Connecting a Nexus Device in the Network 32-ix

Creating Plug and Play Profiles for Nexus Devices 32-x

Activating Device Profiles 32-xi

Creating New Plug and Play Profiles and Adding Device Profiles 32-xii

Adding Device Profiles to an Existing Plug and Play Profile 32-xii

Adding Device Profiles into Router and Switches Plug and Play Profiles 32-xii

Importing Device Profiles into Plug and Play Profiles 32-xiv

Adding Device Profiles into Wireless AP Plug and Play Profiles 32-xv

Adding Device Profiles into Nexus Plug and Play Profiles 32-xvi

Supported Devices and Software Images for Plug and Play 32-xvii

Prerequisites for Deploying Bootstrap Configuration into a Device 32-xviii

Bootstrap Configuration 32-xviii

Methods of Installing Bootstrap Configurations 32-xxi

Exporting the Bootstrap Configuration 32-xxii

Exporting the Bootstrap Configuration Using TFTP 32-xxii

Emailing the Bootstrap Configuration 32-xxiii

Emailing the PIN for the Bootstrap Configuration 32-xxiii

Using DHCP to Export Bootstrap Configurations 32-xxiv

Verifying Device Status 32-xxv

Integrating Map View 32-xxv

Deleting Plug and Play Profiles 32-xxvii

32-xxvii

P A R T 1

Managing Device Inventory

C H A P T E R 34

Viewing Devices 34-i

Viewing Network Devices 34-ii

Viewing Compute Devices 34-iv

Creating User Defined UCS Groups 34-vii

Creating User Defined Hosts and VMs 34-vii

xxCisco Prime Infrastructure 3.1.5 User Guide

Contents

C H A P T E R 35

Updating Device Inventory 35-i

Changing Discovery Settings 35-ii

Scheduling Discovery Jobs 35-iii

Monitoring the Discovery Process 35-iii

Discovery Protocols and CSV File Formats 35-iii

Updating Device Inventory Manually 35-iv

Editing Device Inventory Manually 35-iv

Importing Device Inventory 35-v

Using Credential Profiles 35-v

Adding Credential Profiles 35-v

Editing Credential Profiles 35-vi

Deleting Credential Profiles 35-vii

Copying Credential Profiles 35-vii

Viewing Devices Associated with a Credential Profile 35-vii

Troubleshooting Unmanaged Devices 35-viii

C H A P T E R 36

Managing and Monitoring Compute Resources 36-i

Managing VMware Vcenter Server 36-ii

Adding VMware Vcenter Servers 36-ii

CSV File Requirements for Importing Vcenter 36-ii

Monitoring Performance of Compute Resources 36-iii

Setting Polling Interval for Monitoring Compute Resources 36-iii

Monitoring Clusters 36-iv

C H A P T E R 37

Maintaining Software Images 37-i

Overview of Software Image Management 37-ii

Software Image Management Processes and Supported Devices 37-ii

Setting Image Management and Distribution Preferences 37-iv

Configuring Software Image Management Server for Image Distribution 37-v

Managing Software Images 37-vi

Importing Software Images 37-vi

Importing Software Images to the Virtual Image Repository 37-vii

Changing Software Image Requirements 37-viii

xxiCisco Prime Infrastructure 3.1.5 User Guide

Contents

Supported Devices and Image Family 37-viii

Distributing Software Images to Devices 37-x

Activating Software Images 37-xi

Supported Image Format for Stack Devices 37-xii

Viewing Recommended Software Images from Cisco.com 37-xii

Analyzing Software Image Upgrades 37-xiii

C H A P T E R 38

Working with Device Configurations 38-i

Configuration Archives 38-ii

Changing Prime Infrastructure Device Configuration Settings 38-ii

Changing Prime Infrastructure Configuration Archive Collection Settings 38-iii

Supported Syslog Formats for Configuration Archive Collection Settings 38-iii

Comparing Current and Previous Device Configurations 38-iv

Scheduling Configuration Archive Tasks 38-iv

Overview of Device Configurations 38-v

Changing a Single Device Configuration 38-v

Adding a Wireless LAN Controller 38-vi

Changing Wireless LAN Controller Configuration Settings 38-vi

Rebooting Controllers 38-vi

Configuration Rollbacks 38-vii

Rolling Back Device Configuration Versions 38-vii

Deleting Device Configurations 38-viii

C H A P T E R 39

Grouping Devices, Ports and Data Center 39-i

Types of Groups 39-ii

Accessing Device/Location Groups through Virtual Domains 39-ii

Creating Device Groups 39-iii

Searching Device Groups 39-iv

Using Location Groups 39-iv

Creating Location Groups 39-v

Location Groups and Wireless Maps 39-vi

Importing Location Groups Using CSV File 39-vi

Exporting Location Groups as CSV File 39-vi

Editing User Defined and Location Groups 39-vii

xxiiCisco Prime Infrastructure 3.1.5 User Guide

Contents

Duplicating User Defined and Location Groups 39-vii

Device Accessibility in Parent-Child Device and Location Groups 39-viii

Hiding Empty Groups 39-viii

Creating Groups of Ports 39-viii

Creating Device Context or Group Context Port Groups 39-ix

Understanding System Defined Port Groups 39-x

Adding Access Points (AP) to Device Group or Location Group 39-x

Creating Customized Port Groups 39-xi

Grouping Integration with Data Center 39-xi

P A R T 1

Visualizing the Network

C H A P T E R 41

Using Topology Maps 41-i

Topology Overview 41-iii

Network Topology 41-iii

Datacenter Topology 41-iv

Understanding Topology Map Functions and Icons 41-vi

Navigating in Topology Maps 41-vi

Topology Map Icons 41-vii

Before Using Topology Maps 41-vii

Viewing Detailed Tables of Alarms and Links 41-viii

Determining What is Displayed in the Topology Map 41-viii

Displaying Network Elements in the Topology Map 41-ix

Viewing the Contents of a Sub-Group in the Topology Map 41-x

Manually Adding Links to the Topology Map 41-xi

Adding Unmanaged Devices and Links to Topology Maps 41-xi

Changing the Link and Device Types Shown in the Topology Map 41-xii

Viewing Port Channel Links using LAG 41-xii

Showing and Hiding Alarms, Links, and Labels in the Topology Map 41-xiii

Isolating Specific Sections of a Large Topology Map 41-xiii

Getting More Information About Devices 41-xiv

Getting More Information About Links 41-xiv

Viewing Fault Information for Devices and Links 41-xv

Using Device 360° to View a Device’s Topology 41-xvi

xxiiiCisco Prime Infrastructure 3.1.5 User Guide

Contents

Changing the Topology Map Layout 41-xvii

Saving the Topology Map Layout 41-xvii

Saving the Topology Map as an Image File 41-xviii

Creating a Topology Dashlet 41-xviii

Viewing vPc Summary 41-xix

C H A P T E R 42

Using Wireless Maps 42-i

About Prime Infrastructure Site Maps 42-ii

Site Map Hierarchy 42-ii

Site Map Graphics 42-iii

Network Elements on Site Maps 42-iii

Wireless Coverage Areas, Inclusion/Exclusion Regions and Rail Lines on Maps 42-iii

Preparing Image Files for Use with Prime Infrastructure Maps 42-iv

Troubleshooting Problems With CAD Image File Imports 42-iv

Default Campus Maps 42-v

Disabling Next Generation Maps 42-v

Working With Site Maps 42-vi

Creating Campus Maps 42-vi

Adding Image Files to Campus Maps 42-vii

Adding Location Information to Campus Maps 42-viii

Changing Default Map Measurement Units 42-viii

Adding Buildings to Campus Maps 42-ix

Moving Buildings and Floors to Another Campus 42-x

Adding Floor Areas to Buildings 42-x

Adding Image Files to Floor Areas 42-xii

Getting AP Details from 360° View 42-xv

Monitoring Floor Areas 42-xxviii

Panning and Zooming with Next Generation Maps 42-xxviii

Floor View Navigation 42-xxix

Adding Access Points to a Floor Area 42-xxix

Using the Automatic Hierarchy to Create Maps 42-xxxii

Using the Map Editor 42-xxxv

Guidelines for Using the Map Editor 42-xxxv

Guidelines for Placing Access Points 42-xxxv

Guidelines for Inclusion and Exclusion Areas on a Floor 42-xxxvii

Opening the Map Editor 42-xxxviii

xxivCisco Prime Infrastructure 3.1.5 User Guide

Contents

Map Editor Icons 42-xxxviii

Using the Map Editor to Draw Coverage Areas 42-xxxix

Using the Map Editor to Draw Obstacles 42-xl

Defining an Inclusion Region on a Floor 42-xl

Defining an Exclusion Region on a Floor 42-xli

Defining a Rail Line on a Floor 42-xlii

Adding an Outdoor Area 42-xliii

Using Chokepoints to Enhance Tag Location Reporting 42-xliv

Adding Chokepoints to Prime Infrastructure 42-xliv

Adding a Chokepoint to a Prime Infrastructure Map 42-xlv

Positioning Chokepoints 42-xlvi

Configuring Wi-Fi TDOA Receivers 42-xlvii

Adding Wi-Fi TDOA Receivers to Prime Infrastructure 42-xlvii

Adding Wi-Fi TDOA Receivers to a Map 42-xlvii

Positioning Wi-Fi TDOA Receivers 42-xlviii

Managing RF Calibration Models 42-xlviii

Managing Location Presence Information 42-lvi

Searching Maps 42-lvii

Using the Map Editor 42-lvii

Inspecting Location Readiness and Quality 42-lxiii

Inspecting Location Readiness 42-lxiii

Inspecting Location Quality Using Calibration Data 42-lxiii

Inspecting VoWLAN Readiness 42-lxiv

Troubleshooting Voice RF Coverage Issues 42-lxv

Monitoring Mesh Networks Using Maps 42-lxv

Monitoring Mesh Link Statistics Using Maps 42-lxv

Monitoring Mesh Access Points Using Maps 42-lxvii

Monitoring Mesh Access Point Neighbors Using Maps 42-lxviii

Viewing the Mesh Network Hierarchy 42-lxix

Using Mesh Filters to Modify Map Display of Maps and Mesh Links 42-lxx

Monitoring Tags Using Maps 42-lxxii

Using Planning Mode 42-lxxii

Accessing Planning Mode 42-lxxii

Using Planning Mode to Calculate Access Point Requirements 42-lxxiv

Wireless Map Refresh Options 42-lxxviii

Understanding RF Heatmap Calculation 42-lxxix

Drawing Polygon Areas in Wireless Maps 42-lxxix

Floor View in Wireless Maps 42-lxxx

Associating Endpoints with a Site 42-lxxxi

xxvCisco Prime Infrastructure 3.1.5 User Guide

Contents

Viewing Google Earth Maps in Prime Infrastructure 42-lxxxi

Viewing Google Earth Map Details 42-lxxxii

Creating Outdoor Locations using Geographical Coordinates 42-lxxxii

Required Geographical Coordinates 42-lxxxiii

Creating a KML File with Geographical Coordinates 42-lxxxiv

Creating Placemarks for KML Files 42-lxxxiv

Creating a CSV File with Geographical Coordinates 42-lxxxv

Importing Geographical Coordinates Files into Prime Infrastructure 42-lxxxvi

Adding Google Earth Location Launch Points to Access Point Pages 42-lxxxvi

Configuring Google Earth Settings for Access Points 42-lxxxvii

Editing Wireless Maps 42-lxxxvii

Editing Floors 42-lxxxvii

Editing Wireless Maps 42-lxxxviii

Location Accuracy 42-lxxxviii

Viewing Location Accuracy and Readiness 42-lxxxviii

Inspecting Location Quality Using Calibration Data 42-lxxxix

Viewing VoWLAN Readiness 42-lxxxix

Using Chokepoints to Enhance Tag Location Reporting 42-xc

Adding Wi-Fi TDOA Receivers 42-xc

Defining Inclusion Regions on Floors 42-xc

Defining Exclusion Regions on Floors 42-xci

Using Maps to Monitor Your Network 42-xciii

Monitoring Mesh Networks Using Maps 42-xciii

Monitoring Mesh Link Statistics Using Maps 42-xciii

Monitoring Mesh Access Points Using Maps 42-xciv

Viewing Mesh Access Point Configuration Details 42-xciv

Monitoring Mesh Access Point Neighbors Using Maps 42-xcv

Viewing the Mesh Network Hierarchy Using Maps 42-xcv

Using Mesh Filters to Modify Map Display of Maps and Mesh Links 42-xcvi

Monitoring Tags Using Maps 42-xcviii

Viewing Device Details Using Maps 42-xcviii

Using Maps to Plan Your Network Design 42-xcviii

Using Planning Mode 42-xcviii

Using Planning Mode to Calculate Access Point Requirements 42-xcix

Network Design 42-cii

Designing a Network 42-cii

Importing or Exporting WLSE Map Data 42-ciii

Troubleshooting Voice RF Coverage Issues 42-civ

xxviCisco Prime Infrastructure 3.1.5 User Guide

Contents

P A R T 1

Ensuring Network Services

C H A P T E R 44

Securing Network Services 44-i

C H A P T E R 45

Configuring and Monitoring IWAN 45-i

Prerequisites for Enabling IWAN Services 45-ii

Using the IWAN Wizard 45-iv

Using PKI with IWAN-DMVPN Service 45-v

C H A P T E R 46

Using Converged Access Workflow 46-i

Converged Access Workflow Overview 46-ii

Supported Cisco IOS-XE Platforms 46-iv

Prerequisites for Converged Access Deployment 46-v

Prerequisites for Layer 2 and Layer 3 46-v

Prerequisites for Server Configuration 46-x

Converged Access Template-Based Deployment 46-x

Guidelines for Entering Configuration Values 46-xiii

Converged Access Template Field Descriptions 46-xiii

Entering Configuration Values for Controller-Less Single-Switch Deployment Model 46-xvii

Entering Configuration Values for Controller-Less Single/Multi-Domain Wireless Deployment Model 46-xxiii

Entering Configuration Values for Controller-Based Single/Multi-Domain Wireless Deployment Model 46-xxv

Entering Configuration Values for Centralized Wireless Campus Deployment Model 46-xxvii

C H A P T E R 47

Configuring Branch Threat Defense 47-i

Supported IOS-XE Platforms 47-ii

Supported IOS-XE Versions 47-ii

Prerequisites for Enabling Branch Threat Defense 47-ii

Using the Branch Threat Defense Wizard 47-iii

xxviiCisco Prime Infrastructure 3.1.5 User Guide

Contents

C H A P T E R 48

Instant Access Workflow 48-i

Overview 48-ii

Instant Access Topology 48-iii

Pre-requisites for Using Cisco Instant Access Workflow 48-iii

Supported Parent and Client Switches 48-iii

Supported Parent Switches 48-iv

Supported Client Switches 48-iv

Key Functions of Instant Access Workflow 48-iv

VSS Conversion 48-vi

FEX Provisioning and Pre-Provisioning 48-vii

Template/Custom Template/Workgroup Creation using Access Page 48-x

Static Assignment of Workgroups/Templates to Ports 48-xii

Using Instant Access Workflow 48-xiii

C H A P T E R 49

Access Network Workflow 49-i

Overview 49-ii

Pre-requisites for Using Cisco Access Network Workflow 49-ii

Supported Devices 49-ii

Using Access Network Workflow 49-iv

C H A P T E R 50

Configuring Application Visibility and Control 50-i

Configuring the Device using WSMA 50-ii

Configuring Application Visibility 50-iii

Estimating CPU, Memory and NetFlow Resources on ASR Devices 50-v

NBAR Protocol Packs 50-v

Creating an Application Visibility Template 50-vi

Enabling Default Application Visibility on an Interface 50-viii

Application Visibility Troubleshooting Sessions 50-ix

Activating or Deactivating a Troubleshooting Session 50-x

Editing or Deleting a Troubleshooting Session 50-xi

Managing Data Sources 50-xi

Viewing Current Data Sources 50-xii

Deleting Data Sources 50-xii

xxviiiCisco Prime Infrastructure 3.1.5 User Guide

Contents

Enabling Data Deduplication 50-xiii

Creating a VPN Component Template 50-xiii

Creating an IKE Policies Template 50-xiii

Creating an IKE Settings Template 50-xiv

Creating an IPsec Profile Template 50-xiv

Creating a Preshared Keys Template 50-xv

Creating RSA Keys Template 50-xv

Creating a Transform Sets Template 50-xv

Configuring an Easy VPN Server 50-xvi

Creating an Easy VPN Server Proxy Setting Template 50-xvi

Creating an Easy VPN Remote Template 50-xvii

Creating an Easy VPN Server Template 50-xviii

Creating a GSM Profile Template 50-xix

Creating a Cellular Profile Template 50-xix

Redirecting HTTP and HTTPS Traffic 50-xx

Configuring Interfaces 50-xxi

Configuring a Serial Interface 50-xxi

Configuring POS Interface 50-xxii

Configuring a Service Module 50-xxii

Configuring Controllers 50-xxiii

Creating a Gigabit Ethernet or Fast Ethernet Interface 50-xxiii

Creating a Loopback Interface 50-xxiv

Creating a VLAN Interface 50-xxiv

Editing a VLAN Interface 50-xxv

Creating a Tunnel Interface 50-xxv

Editing an Existing Tunnel Interface 50-xxv

Creating a Virtual Template Interface 50-xxvi

Editing an Existing Virtual Template Interface 50-xxvi

Configuring Cellular WAN Interfaces 50-xxvii

Configuring a CDMA Interfaces 50-xxvii

Configuring a GSM Interfaces 50-xxvii

Configuring Network Address Translation (NAT) 50-xxviii

NAT Types 50-xxviii

Configuring NAT for IP Address Conservation 50-xxix

Creating NAT IP Pools 50-xxix

Creating NAT44 Rules 50-xxx

Configuring Interfaces 50-xxx

Setting Up NAT MAX Translation 50-xxxi

Configuring DMVPN 50-xxxi

xxixCisco Prime Infrastructure 3.1.5 User Guide

Contents

Creating a DMVPN Tunnel 50-xxxii

Configuring Hub and Spoke Topology 50-xxxiii

Configuring a DMVPN Fully Meshed Topology 50-xxxiii

Configuring a Cluster Topology 50-xxxiv

Editing a DMVPN 50-xxxv

Deleting a DMVPN 50-xxxv

Configuring GETVPN 50-xxxv

Creating a GETVPN Group Member 50-xxxvi

Creating a GETVPN Key Server 50-xxxvii

Editing a GETVPN Group Member or Key Server 50-xxxviii

Deleting a GETVPN Group Member or Key Server 50-xxxviii

Configuring VPN Components 50-xxxix

Configuring IKE Policies 50-xxxix

Configuring IKE Settings 50-xl

Configuring IPsec Profiles 50-xl

Creating Preshared Keys 50-xli

Creating RSA Keys 50-xli

Configuring Transform Sets 50-xlii

Creating a Zone-Based Firewall 50-xliii

Configuring a Zone-Based Firewall Template 50-xliv

Creating an Interface Role 50-xlv

Creating an IPv4 Network Object 50-xlv

Defining Device Override 50-xlv

Creating a Zone-Based Firewall Policy Rules Template 50-xlvi

Configuring a Zone-Based Firewall on a Single Device 50-xlvi

Creating a Routing Protocol 50-liii

Creating a Static Route 50-liii

Creating a RIP Route 50-liv

Creating an EIGRP Route 50-lv

Creating an OSPF Route 50-lv

Configuring NAM with Application Servers 50-lvi

C H A P T E R 51

Ensuring Consistent Application Experiences 51-i

Evaluating Service Health 51-iii

Creating Custom Applications 51-iv

Service Health Window 51-iv

Viewing the Health Timeline 51-v

xxxCisco Prime Infrastructure 3.1.5 User Guide

Contents

Health Rules 51-v

Enabling Baselining 51-vi

Establishing Performance Baselines 51-vii

Identifying Optimization Candidates 51-viii

Validating Optimization ROI 51-viii

Monitoring Optimized Flows 51-ix

C H A P T E R 52

Troubleshooting Applications 52-i

C H A P T E R 53

Monitoring Microsoft Lync Traffic 53-i

Setting Up Lync Monitoring 53-ii

Viewing Microsoft Lync Data 53-ii

Monitoring End-User Microsoft Lync Experience 53-iii

Monitoring Microsoft Lync Data Between Sites 53-iv

Understanding Voice Quality Value 53-iv

C H A P T E R 54

Using Mediatrace 54-i

Troubleshooting RTP and TCP Flows Using Mediatrace 54-ii

Using the Mediatrace Tables 54-ii

Running Mediatrace from Selected RTP or TCP Flows 54-iii

Launching an Ad Hoc Mediatrace From Endpoints 54-iv

Troubleshooting Worst RTP Endpoints Using Dashlets 54-vi

Comparing Flow Data From Multiple Sources 54-vii

C H A P T E R 55

Cisco Mobility Services Engine and Services 55-i

Adding MSEs to Prime Infrastructure 55-ii

MSE Licensing 55-vi

Installing Device and wIPS License Files 55-vii

Viewing MSE License Information 55-viii

Deleting MSE License Files 55-viii

Viewing MSEs 55-ix

Deleting MSEs from Prime Infrastructure 55-ix

xxxiCisco Prime Infrastructure 3.1.5 User Guide

Contents

Adding a Location Server 55-x

Synchronizing Prime Infrastructure and MSE 55-x

Synchronizing Controllers with MSEs 55-xii

Managing Third-Party Elements on MSEs 55-xiv

Setting and Verifying the Controller Time Zones 55-xiv

Configuring Smart Mobility Services Engine Database Synchronization 55-xv

Viewing MSE Synchronization Status 55-xvii

Viewing Synchronization History 55-xvii

Viewing MSE Notification Statistics 55-xviii

Editing MSE General Properties for MSE 55-xix

Editing NMSP Parameters for MSE 55-xx

Viewing Active Session Details for MSE 55-xxi

Viewing Trap Destinations for MSE 55-xxii

Adding Trap Destinations for MSE 55-xxii

Editing Advanced Parameters for MSE 55-xxiii

Rebooting the MSE Hardware 55-xxiv

Shutting Down the MSE Hardware 55-xxiv

Clearing the MSE Database 55-xxv

Configuring MSE Logging Options 55-xxv

Adding MSE Users 55-xxvii

Deleting MSE Users 55-xxvii

Editing User Properties 55-xxvii

Adding User Groups 55-xxviii

Deleting User Groups 55-xxviii

Editing Group User Permissions 55-xxix

Monitoring Status Information for MSEs 55-xxix

Viewing MSE Server Events 55-xxix

Viewing MSE Audit Logs 55-xxx

Viewing MSE Alarms 55-xxx

Out-of-Sync Alarms 55-xxx

Viewing MSE Events 55-xxxi

Viewing MSE NMSP Connection Status 55-xxxi

Editing MSE Backup Parameters 55-xxxiii

Backing Up MSE Historical Data 55-xxxiii

Restoring MSE Historical Data 55-xxxiv

Downloading Software to MSEs 55-xxxiv

Configuring Partner Systems for MSEs 55-xxxv

Managing Cisco Adaptive wIPS Service Parameters 55-xxxvi

Managing Context-Aware Service Software Parameters 55-xxxvii

xxxiiCisco Prime Infrastructure 3.1.5 User Guide

Contents

Context-Aware Service General Parameters 55-xxxviii

Modifying Tracking Parameters for Mobility Services 55-xxxviii

Filtering Parameters for Mobility Services 55-xli

Modifying History Parameters for Mobility Services 55-xliii

Enabling Location Presence for Mobility Services 55-xliv

Importing Asset Information for Mobility Services 55-xlv

Exporting Asset Information for Mobility Services 55-xlvi

Importing Civic Information for Mobility Services 55-xlvi

Context-Aware Service Wired Parameters 55-xlvii

Context-Aware Service Advanced Parameters 55-xlix

Viewing MSE Notifications Summary 55-liv

Viewing and Managing MSE Notifications 55-lv

Viewing Notification Statistics 55-lvi

Mobile Concierge Service Parameters 55-lvii

Event Groups 55-lvii

Adding Event Groups 55-lvii

Deleting Event Groups 55-lviii

Working with Event Definitions 55-lviii

Adding Event Definitions 55-lx

Deleting an Event Definition 55-lxiii

Searching for Wireless Client on MSE by IPv6 Address 55-lxiv

Viewing Clients Detected by MSE 55-lxv

Viewing MSE Alarm Details 55-lxvii

Monitoring with Mobile Concierge Services 55-lxviii

Defining Venues 55-lxviii

Deleting Venues 55-lxix

Defining Providers with Policies 55-lxx

Deleting Providers 55-lxxi

Defining Policies 55-lxxi

Deleting Policies 55-lxxii

Configuring and Deploying wIPS Solution Using the Wireless Security Configuration Wizard 55-lxxiii

C H A P T E R 56

Configuring the Cisco AppNav Solution 56-i

Overview of Cisco AppNav 56-ii

Components of Cisco AppNav 56-ii

Prerequisites for Configuring Cisco AppNav 56-iv

Configuring Cisco AppNav 56-iv

xxxiiiCisco Prime Infrastructure 3.1.5 User Guide

Contents

Configuring Cisco AppNav from the Device Work Center 56-v

Configuring Cisco AppNav Using Templates 56-vi

Deploying a Cisco AppNav Template 56-vii

Configuring Cisco AppNav Automatically During ISR-WAAS Container Activation 56-viii

C H A P T E R 57

Configuring the Cisco WAAS Container 57-i

Prerequisites for Installing an ISR-WAAS Container 57-ii

Cisco WAAS Central Manager Integration 57-ii

Cisco WAAS Central Manager Integration 57-ii

Configuring Single Sign-On 57-iii

Creating a Username in Cisco WAAS Central Manager 57-iv

Cross-Launching Cisco WAAS Central Manager 57-iv

Defining Interface Roles 57-v

Importing an OVA image 57-v

Configuring Cisco AppNav Automatically During ISR-WAAS Container Activation 57-vi

Installing an ISR-WAAS Container 57-vi

Installing and Activating an ISR-WAAS Container 57-vi

Installing an ISR-WAAS Container on a Single Router 57-vii

Installing an ISR-WAAS Container on Multiple Routers 57-vii

Uninstalling and Deactivating a Cisco WAAS Container 57-viii

Uninstalling a Single Cisco ISR-WAAS Container 57-viii

Uninstalling a Multiple Cisco ISR-WAAS Container 57-viii

Deactivating a Cisco ISR-WAAS Container 57-ix

C H A P T E R 58

Working with Wireless Mobility 58-i

What Is Mobility? 58-ii

New Mobility 58-iii

Mobility Work Center 58-iii

Creating a Mobility Domain 58-iv

Creating a Switch Peer Group 58-iv

Changing a Mobility Role 58-v

Mobility Anchors 58-v

Configuring a Guest Anchor Controller for a WLAN 58-vi

Configuring Spectrum Experts 58-vii

Adding a Spectrum Expert 58-vii

xxxivCisco Prime Infrastructure 3.1.5 User Guide

Contents

Creating wIPS Profiles 58-ix

C H A P T E R 59

Managing Reports 59-i

Generating Reports 59-iii

Creating, Scheduling, and Running a New Report 59-iii

Combining Reports 59-iv

Customizing Report Results 59-v

About Scheduled Reports 59-vi

About Saved Report Templates 59-vii

Prime Infrastructure Report Data Retention Periods 59-vii

A P P E N D I X 60

Prime Infrastructure User Interface Reference 60-i

Understanding the Prime Infrastructure User Interface 60-ii

Toolbar 60-ii

Dock Window 60-ii

Filters 60-iii

Data Entry Features 60-v

Interactive Graphs 60-vi

Common UI Tasks 60-viii

Changing Your Password 60-viii

Changing Your Active Domain 60-viii

Setting Your Home Page 60-viii

Changing User Preferences 60-viii

Getting Device Details from Device 360° View 60-ix

Getting User Details from the User 360° View 60-xii

Getting VRF Details from Router 360° View 60-xiii

Getting Help 60-xiv

Search Methods 60-xiv

Performing an Application Search 60-xiv

Performing an Advanced Search 60-xv

Performing a Saved Search 60-xxiii

A P P E N D I X 61

System Time Zones 61-i

xxxvCisco Prime Infrastructure 3.1.5 User Guide

Contents

xxxviCisco Prime Infrastructure 3.1.5 User Guide