Guest

Cisco IP Solution Center

Release Notes for Cisco IP Solution Center, 3.1

  • Viewing Options

  • PDF (270.2 KB)
  • Feedback
Release Notes for Cisco IP Solution Center, 3.1

Table Of Contents

Release Notes for
Cisco IP Solution Center, 3.1

Contents

Introduction

Materials

Documentation Road Map for Cisco IP Solution Center, 3.1

What Is New in Release 3.1 of ISC

API Support

Backup and Restore

Firewall Service Module (FWSM) Support for Catalyst 6500 and Cisco 7600

High Availability Support

Metro Ethernet QoS

MPLS VPN Carrier Supporting Carrier (CSC) Support

Ring Topology

Virtual Private LAN Services (VPLS) Provisioning

VPN Service Module (VPNSM) Support for Catalyst 6500 and Cisco 7600

System Recommendations

Known Problems in Cisco IP Solution Center, Release 3.1

Obtaining Documentation

Cisco.com

Ordering Documentation

Documentation Feedback

Obtaining Technical Assistance

Cisco TAC Website

Opening a TAC Case

TAC Case Priority Definitions

Obtaining Additional Publications and Information


Release Notes for
Cisco IP Solution Center, 3.1


May 29, 2007


Note All documentation, including this Release Notes for Cisco IP Solution Center, 3.1 document and any or all of the parts of the Release 3.1 documentation set, may be upgraded.


The Cisco IP Solution Center software is referred to as ISC.

The information in this Release Notes for Cisco IP Solution Center, 3.1 document gives you an overview of this release and helps you understand it at a high level. Please read this document prior to reading any other manual for ISC.

All ISC patches are available at: http://www.cisco.com/cgi-bin/tablebuild.pl/isc (where in tablebuild.pl, the last character is the lower-case letter "l").


Note To download and upload configuration files to and from the VPN 3000 concentrator, the only supported mechanism is SSH.



Note If one or more users is logged into a VPN 3000 concentrator through a web interface or through telnet, ISC cannot download to the VPN 3000. Prior to deploying a service request in ISC for a VPN 3000, you need to log out of all active sessions to this VPN 3000.



Note The supported Sybase and Oracle databases behave differently. All GUI queries are case insensitive for Sybase and case sensitive for Oracle.


Contents

The information in this release note is organized into the following sections:

Contents

Introduction

Materials

Documentation Road Map for Cisco IP Solution Center, 3.1

What Is New in Release 3.1 of ISC

System Recommendations

Known Problems in Cisco IP Solution Center, Release 3.1

Obtaining Documentation

Obtaining Technical Assistance

Obtaining Additional Publications and Information

Introduction

Cisco IP Solution Center (ISC), 3.1 is a follow-on release to Cisco IP Solution Center (ISC), 3.0.

This product uses the web-based GUI introduced in ISC 3.0 to improve usability. This product also uses the four-tiered architecture introduced in ISC 3.0 and designed for modularity, reusability, front-end scalability, back-end scalability, and high availability. All the ISC solutions: L2VPN Management (including the new feature Virtual Private LAN Services (VPLS)), MPLS VPN Management, and Security Management, as well as Quality of Service (QoS) are distributed on the same product CD. Security Management is a combination of IPsec, Firewall, and Network Address Translation (NAT), all of which are individually licensed. The types of IPsec are all licensed as one: IPsec Site-to-Site; IPsec Remote Access; and Network-based IPsec VPN Management (the mapping of IPsec to MPLS).

The ISC solutions all continue to provide features such as provisioning, auditing, and service level agreement (SLA) monitoring. These solutions provide network and service management for service providers. They allow service providers to seamlessly provision and manage intranet and extranet VPNs. The MPLS VPN Management and Security Management focus on provisioning, auditing, and monitoring the links between a customer's edge routers through the service provider's network.

For more details, please see the "What Is New in Release 3.1 of ISC" section.

Materials

When you order the Cisco IP Solution Center product, you receive the following:

Cisco IP Solution Center, 3.1 product CD-ROM

Right to Use (RTU) documents that each contain a license key

The Documentation Guide for Cisco IP Solution Center, 3.1 is printed and distributed with all services.

For more information about ISC, see the following.

Documentation Guide for Cisco IP Solution Center, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/docguide

This document - Release Notes for Cisco IP Solution Center, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/relnotes

Cisco IP Solution Center Installation Guide, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/install

Cisco IP Solution Center Infrastructure Reference, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/infrastr

Cisco IP Solution Center System Error Messages, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/mess

Cisco IP Solution Center, 3.1: L2VPN Management User Guide, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/l2vpn

Cisco IP Solution Center, 3.1: MPLS VPN Management User Guide, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/mpls

Cisco IP Solution Center, 3.1: Network-Based IPsec VPN Management User Guide, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/netbased

Cisco IP Solution Center, 3.1: Quality of Service Management User Guide, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/qos

Cisco IP Solution Center, 3.1: Security Management User Guide, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/secmgmt

Cisco IP Solution Center, 3.1: API Programmer Guide, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/api/apipg

Index: Cisco IP Solution Center, 3.1: API Programmer Reference, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/api/apiref


Note All documentation may be upgraded.


Documentation Road Map for Cisco IP Solution Center, 3.1

This section describes documentation resources to help you find information about the Cisco IP Solution Center (ISC).

We recommend you refer to the documentation in the following order:

1. Documentation Guide for Cisco IP Solution Center, 3.1. The printed version of this document is shipped with the product. (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/docguide)

The contents of this document are:

- Product Documentation Set - URLs for all the documentation in this documentation set.

- Obtaining Documentation

- Obtaining Technical Assistance

- Obtaining Additional Publications and Information

2. Release Notes for Cisco IP Solution Center, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/relnotes)

The contents of this document are:

Introduction

Materials

Documentation Road Map for Cisco IP Solution Center, 3.1

What is New in Release 3.1 of ISC

System Recommendations

Known Problems in Cisco IP Solution Center, Release 3.1

Obtaining Documentation

Obtaining Technical Assistance

Obtaining Additional Publications and Information

3. Cisco IP Solution Center Installation Guide, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/install)

The contents of this document are:

System Recommendations

Installing and Logging Into ISC

Setting Up Oracle for ISC

Setting Up Cisco CNS IE2100 Appliances Running Cisco CNS Configuration Engine 1.3.x Software with ISC

Backup and Restore of ISC Repository and Standby System

4. Cisco IP Solution Center Infrastructure Reference, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/infrastr)

The contents of this document are:

Getting Started

WatchDog Commands

Structural Overview

Service Inventory > Inventory and Connection Manager

Service Inventory > Inventory and Connection Manager > Inventory Manager

Service Inventory > Deployment Flow Manager and Service Inventory > Device Console

Service Design

Monitoring

Administration

Cisco CNS IE2100 Appliances

Property Settings

Glossary

5. Cisco IP Solution Center System Error Messages, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/mess)

The contents of this document are:

API Message Format

System Error Messages

The following documents are listed alphabetically. They are specific to services for which you purchase licenses.

Cisco IP Solution Center, 3.1: L2VPN Management User Guide, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/l2vpn)

The contents of this document are:

ISC L2VPN and VPLS Concepts

Setting up the ISC Service

Creating an L2VPN Policy

Managing an L2VPN Service Request

Creating a VPLS Policy

Managing a VPLS Service Request

Auditing and Reports

Cisco IP Solution Center, 3.1: MPLS VPN Management User Guide, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/mpls)

The contents of this document are:

IP Solution Center—MPLS VPN

Inventory Management

MPLS VPN Service Policies

MPLS VPN Service Requests

Provisioning Regular PE-CE Links

Provisioning MVRFCE PE-CE Links

Provisioning Management VPN

Provisioning Cable Service

Provisioning Carrier Supporting Carrier

Provisioning Multiple Devices

Setting Up the Network

Service Request Transition States

Cisco IP Solution Center, 3.1: Network-Based IPsec VPN Management User Guide, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/netbased)

The contents of this document are:

ISC Network-Based IPsec VPN Concepts

Preparing for Network-Based IPsec VPN Provisioning

One-Box Solution for IPsec to MPLS Mapping

Two-Box Solution for IPsec to MPLS Mapping

Provisioning Network-Based IPsec VPN Services

Cisco IP Solution Center, 3.1: Quality of Service Management User Guide, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/qos)

The contents of this document are:

ISC Quality of Service Concepts

Network Architecture

QoS Service Model Overview

Prerequisites and Assumptions

Provisioning Process for IP QoS

QoS Policy Parameters

Applying QoS Policies to VPN Services

Auditing and Reports

Sample Configurations

Cisco IP Solution Center, 3.1: Security Management User Guide, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/secmgmt)

The contents of this document are:

ISC Security Concepts

Preparing for Security Provisioning

Site-to-Site VPN Services

Remote Access VPN Services

NAT Services

Firewall Services

Provisioning Services

Updating and Modifying Pre-shared Keys

The following are the Application Program Interface (API) documents:

Cisco IP Solution Center, 3.1: API Programmer Guide, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/api/apipg)

The contents of this document are:

Introduction

Getting Started

Common APIs

Using Templates

MPLS Provisioning

L2VPN Provisioning

QoS Provisioning

GUI to API Mapping

Index: Cisco IP Solution Center, 3.1: API Programmer Reference, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/api/apiref)

The contents of this index are:

XML Examples

Keywords List

What Is New in Release 3.1 of ISC

The following topics (listed alphabetically) are new or the implementation was changed dramatically from ISC Release 3.0 to this ISC Release 3.1. Additionally, bug fixes are included in this release.

API Support

Backup and Restore

Firewall Service Module (FWSM) Support for Catalyst 6500 and Cisco 7600

High Availability Support

Metro Ethernet QoS

MPLS VPN Carrier Supporting Carrier (CSC) Support

Ring Topology

Virtual Private LAN Services (VPLS) Provisioning

VPN Service Module (VPNSM) Support for Catalyst 6500 and Cisco 7600

API Support

ISC API support now includes the following:

IPsec provisioning support, including service policies and service requests for the following policy types:

Site-to-Site VPN (IPsec; IPsec + GRE; DMVPN; Easy VPN)

Network-based VPN (IPsec; IPsec + GRE)

Remote Access VPN

Creation of a Firewall Service Module (FWSM) device

Asynchronous notifications for database change events

Support for multi-VRFCE (MVRFCE) networks (managing the PE to MVRFCE to CE link). The policy types added are:

PE_MVRFCE_CE

PE_MVRFCE_NO_CE

Support for Service Request Wait Flag (Block until Service Request completes)

Support for output XML to a file in comma separated (CSV) format

Support for Exec Query (SQL like queries for any database information)

Support for View of Configuration Files

Improved support for templates including template formatting and Template Definition support.

Improved Task Support, including full audit support.

SLA features (SLA probes; SLA collections; and SLA reporting) are unsupported.

Additionally, Corba API backward compatibility to VPNSC is not available.

Backup and Restore

To protect your data against operating system crashes, file corruption, disk failures, and total machine failure, ISC 3.1 provides the capability to make backups of your database and to restore data from a backup. ISC 3.1 also provides a procedure to set up a cold stand-by system. Note that a cold stand-by system is different from a hot stand-by (High Availability) system, which is based on Sun™ Cluster architecture.

Firewall Service Module (FWSM) Support for Catalyst 6500 and Cisco 7600

ISC now supports the high throughput Firewall Service Module (FWSM) 1.1 that can connect to the Catalyst 6500 bus or the switch fabric module or to the Cisco 7600 router. The same mechanisms that were used in ISC 3.0 to support the provisioning of security policies on PIX Firewall will be used for the FWSM. Provisioning of network address translation (NAT) on a FWSM is also supported in ISC 3.1.

ISC prepares the Catalyst 6500 switch and Cisco 7600 router for use by other ISC modules, for example VLAN management and VLAN interface assignment. ISC supports the application of Firewall Policies on FWSM 1.1.

High Availability Support

ISC supports Sun™ Cluster Release 3.0 with Update 3 in Failover mode. Sun™ Cluster offers mainframe-class reliability and availability. It is designed to deliver high availability through automatic fault detection recovery, ensuring that your mission-critical applications and services are available when you need them.

ISC supports two nodes in this High Availability (HA) cluster. This support is only for the control tier, known as the Master server and to get this support, you must choose HA Master as your first server when installing ISC.

Metro Ethernet QoS

In ISC 3.1, there is a GUI implementation to deploy an Ethernet QoS policy to the 3550, and 4x00 Catalyst switches in a provider's network, features required for these platforms in the Metro Ethernet (ME) Release 2.1 Solution. The ME QoS Application Program Interface (API) is unsupported.

MPLS VPN Carrier Supporting Carrier (CSC) Support

MPLS supports the Carrier supporting Carrier (CSC) deployment scenario using LDP/IGP and BGP/MPLS.

Ring Topology

Previously, Named Physical Circuits (NPCs) could only support linear connectivity between CE, CLEs, and PE. In ISC 3.1, support is now available for ring connectivity. A ring is three or more nodes, and the nodes in a ring can be PE_CLE, PE_POP, or MVRF_CE. Ring creation using the Ring Editor is needed before using this ring while creating an NPC.

Virtual Private LAN Services (VPLS) Provisioning

ISC 3.1 provides Virtual Private LAN Services (VPLS) support in addition to point-to-point L2VPN service. The VPLS architecture provides Ethernet Multipoint Service (EMS) that uses a virtual forwarding instance (VFI) to bridge endpoints together. VPLS is the connection of multiple sites in a single bridged domain over a managed IP/MPLS network. VPLS presents an Ethernet interface to customers, simplifying the LAN/WAN boundary for Service Providers and customers, and enabling rapid and flexible service provisioning, because the service bandwidth is not tied to the physical interface. All services in a VPLS appear to be on the same LAN, regardless of location.

VPLS uses edge routers that can learn, bridge, and replicate on a VPN basis. These routers are connected by a full mesh of tunnels, enabling any-to-any connectivity.

Auto Discovery of VPLS services is supported.

VPN Service Module (VPNSM) Support for Catalyst 6500 and Cisco 7600

ISC now supports the VPN Service Module (VPNSM) 2.0 that is an IPsec and IKE accelerator card for the Catalyst 6500 and Cisco 7600 platforms. Provisioning of IPsec Site-to-Site, IPsec with GRE and IPsec, and IPsec Remote Access on VPNSM are also supported in ISC 3.1.

System Recommendations

The system recommendations and requirements are listed in Chapter 1, "System Recommendations" of the Cisco IP Solution Center Installation Guide, 3.1. The recommendation is to thoroughly review this list before even planning your installation, to be sure you have all the hardware and software you need to successfully install.

Known Problems in Cisco IP Solution Center, Release 3.1

To find known problems in Cisco IP Solution Center, use the following URL:

http://www.cisco.com/cgi-bin/Support/Bugtool/launch_bugtool.pl

You need to log in to CCO.

You can search for specific bugs or search for a range by product name. This tool enables you to query for keywords, severity, range, or version.

The results display bug ID and title, found-in version, fixed-in version, and status. The bug ID is a hyperlink to detailed information for the bug ID's product, component, severity, first found-in, and release notes.

The results could be displayed in a feature matrix or spreadsheet.

Obtaining Documentation

Cisco provides several ways to obtain documentation, technical assistance, and other technical resources. These sections explain how to obtain technical information from Cisco Systems.

Cisco.com

You can access the most current Cisco documentation on the World Wide Web at this URL:

http://www.cisco.com/univercd/home/home.htm

You can access the Cisco website at this URL:

http://www.cisco.com

International Cisco websites can be accessed from this URL:

http://www.cisco.com/public/countries_languages.shtml

Ordering Documentation

You can find instructions for ordering documentation at this URL:

http://www.cisco.com/univercd/cc/td/doc/es_inpck/pdi.htm

You can order Cisco documentation in these ways:

Registered Cisco.com users (Cisco direct customers) can order Cisco product documentation from the Networking Products MarketPlace:

http://www.cisco.com/en/US/partner/ordering/index.shtml

Nonregistered Cisco.com users can order documentation through a local account representative by calling Cisco Systems Corporate Headquarters (California, USA) at 408 526-7208 or, elsewhere in North America, by calling 800 553-NETS (6387).

Documentation Feedback

You can submit e-mail comments about technical documentation to bug-doc@cisco.com.

You can submit comments by using the response card (if present) behind the front cover of your document or by writing to the following address:

Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883

We appreciate your comments.

Obtaining Technical Assistance

For all customers, partners, resellers, and distributors who hold valid Cisco service contracts, the Cisco Technical Assistance Center (TAC) provides 24-hour-a-day, award-winning technical support services, online and over the phone. Cisco.com features the Cisco TAC website as an online starting point for technical assistance. If you do not hold a valid Cisco service contract, please contact your reseller.

Cisco TAC Website

The Cisco TAC website provides online documents and tools for troubleshooting and resolving technical issues with Cisco products and technologies. The Cisco TAC website is available 24 hours a day, 365 days a year. The Cisco TAC website is located at this URL:

http://www.cisco.com/tac

Accessing all the tools on the Cisco TAC website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a login ID or password, register at this URL:

http://tools.cisco.com/RPF/register/register.do

Opening a TAC Case

Using the online TAC Case Open Tool is the fastest way to open P3 and P4 cases. (P3 and P4 cases are those in which your network is minimally impaired or for which you require product information.) After you describe your situation, the TAC Case Open Tool automatically recommends resources for an immediate solution. If your issue is not resolved using the recommended resources, your case will be assigned to a Cisco TAC engineer. The online TAC Case Open Tool is located at this URL:

http://www.cisco.com/tac/caseopen

For P1 or P2 cases (P1 and P2 cases are those in which your production network is down or severely degraded) or if you do not have Internet access, contact Cisco TAC by telephone. Cisco TAC engineers are assigned immediately to P1 and P2 cases to help keep your business operations running smoothly.

To open a case by telephone, use one of the following numbers:

Asia-Pacific: +61 2 8446 7411 (Australia: 1 800 805 227)
EMEA: +32 2 704 55 55
USA: 1 800 553-2447

For a complete listing of Cisco TAC contacts, go to this URL:

http://www.cisco.com/warp/public/687/Directory/DirTAC.shtml

TAC Case Priority Definitions

To ensure that all cases are reported in a standard format, Cisco has established case priority definitions.

Priority 1 (P1)—Your network is "down" or there is a critical impact to your business operations. You and Cisco will commit all necessary resources around the clock to resolve the situation.

Priority 2 (P2)—Operation of an existing network is severely degraded, or significant aspects of your business operation are negatively affected by inadequate performance of Cisco products. You and Cisco will commit full-time resources during normal business hours to resolve the situation.

Priority 3 (P3)—Operational performance of your network is impaired, but most business operations remain functional. You and Cisco will commit resources during normal business hours to restore service to satisfactory levels.

Priority 4 (P4)—You require information or assistance with Cisco product capabilities, installation, or configuration. There is little or no effect on your business operations.

Obtaining Additional Publications and Information

Information about Cisco products, technologies, and network solutions is available from various online and printed sources.

The Cisco Product Catalog describes the networking products offered by Cisco Systems, as well as ordering and customer support services. Access the Cisco Product Catalog at this URL:

http://www.cisco.com/en/US/products/products_catalog_links_launch.html

Cisco Press publishes a wide range of general networking, training and certification titles. Both new and experienced users will benefit from these publications. For current Cisco Press titles and other information, go to Cisco Press online at this URL:

http://www.ciscopress.com

Packet magazine is the Cisco quarterly publication that provides the latest networking trends, technology breakthroughs, and Cisco products and solutions to help industry professionals get the most from their networking investment. Included are networking deployment and troubleshooting tips, configuration examples, customer case studies, tutorials and training, certification information, and links to numerous in-depth online resources. You can access Packet magazine at this URL:

http://www.cisco.com/packet

iQ Magazine is the Cisco bimonthly publication that delivers the latest information about Internet business strategies for executives. You can access iQ Magazine at this URL:

http://www.cisco.com/go/iqmagazine

Internet Protocol Journal is a quarterly journal published by Cisco Systems for engineering professionals involved in designing, developing, and operating public and private internets and intranets. You can access the Internet Protocol Journal at this URL:

http://www.cisco.com/en/US/about/ac123/ac147/about_cisco_the_internet_protocol_journal.html

Training—Cisco offers world-class networking training. Current offerings in network training are listed at this URL:

http://www.cisco.com/en/US/learning/index.html