Configuring the Cisco Prime NAM 2300 Series Appliances
This chapter describes how to configure the Cisco Prime NAM 2300 series appliances to establish network connectivity, configure IP parameters, and how to perform other required administrative tasks using the NAM command line interface (CLI). This chapter also provides information about how to get started with the NAM graphical user interface (GUI) and how to perform various system management tasks.
This chapter contains the following sections:
For more advanced NAM configuration information, use the NAM web serverr interface or see the Network Analysis Module Command Reference.
Logging In For the First Time
After you turn power on and boot the Cisco Prime NAM 2300 series appliance for the first time, the login prompt displays on the attached console. When shipped from the factory, the root user is preconfigured on the Cisco Prime NAM 2300 series appliance. The default password for the root user is root.
Note You must change the user root password during the first login session.
The root user has access to the root (read/write) level of NAM and can enter NAM command-line interface (CLI) commands.
To log in to the Cisco Prime NAM 2300 series appliance for the first time, open a console session or a serial session with the NAM appliance. This example opens a session with the Cisco Prime NAM 2320:
Note After your initial login, you can enable telnet and ssh connections to the NAM appliance.
Step 1 When the NAM login prompt appears, type root and press Enter.
nam.localdomain login
: root
Step 2 When the password prompt appears, type root and press Enter.
After you enter the ID and password, you will be prompted to change the root password.
nam2304-209.localdomain login: root_
Last login: Mon Aug 20 08:28:34 2012 from sjc-vpn2-1516.cisco.com on pts/1_
Cisco Prime NAM Appliance 2304 ("NAM2304-RJ45-K9") Console, 5.1(3)_
Copyright (c) 1999-2012 by Cisco Systems, Inc._
System_Alert! Default password has not been changed!_
Please enter a new root user password._
Step 3 Enter the new password for the root user, then enter it a second time.
Successfully changed password for user 'root'_
We recommend that you make a record of the password, and store this information in a secure location. You should change this password regularly in accordance with your site’s password security policies. See Changing the Root Password.
Changing the Root Password
This section describes how to change the root user password after the initial login session. To change the root password:
Step 1 Open a console session or serial session with the NAM appliance.
Step 2 When prompted for a username, enter root.
The Cisco Prime NAM 2300 series appliance ships from the factory with default settings for user root with a password of root.
Step 3 When prompted, enter the password for user root.
After you log in as the root user, you have read and write access to the root level of the NAM appliance, and you can enter and perform CLI commands.
Step 4 Enter the following command to change the root user password.
password root
Step 5 Enter the new password for user root and confirm it.
We recommend that you make a record of the password and store this information in a secure location. You should change this password regularly in accordance with your site’s password security policies.
Step 6 Type exit to end the session and log out.
Examples
This section provides the following examples:
Changing the NAM Root Password: Example
root@nam2304-209.localdomain# password root
Successfully changed password for user 'root'
Verifying the NAM Root Password: Example
nam1.company.com login: root
Cisco Prime NAM Appliance 2304 ("NAM2304-RJ45-K9") Console, 5.1(3)
Copyright (c) 1999-2012 by Cisco Systems, Inc.
root@nam1.company.com# exit
Resetting the NAM Root Password to the Default Value
For information about how to reset the NAM root password to the default value, see the Cisco Prime Network Analysis Module Software User Guide.
Establishing Network Connectivity
This section describes how to configure a Cisco Prime NAM 2300 series appliance to configure IP parameters and establish network connectivity.
Log in to a Cisco Prime NAM 2300 series appliance from the management console and enter the following CLI commands with the appropriate information for your site:
Step 1 Use the ip address command to configure the NAM appliance IP address. The syntax for this command is as follows:
ip address ip-address subnet-mask
Example
root@localhost#
ip address 172.20.104.126 255.255.255.248
Step 2 You can use the ip broadcast command to configure the NAM appliance broadcast address. The syntax for this (optional) command is as follows:
ip broadcast broadcast-address
Example
root@localhost#
ip broadcast 10.255.255.255
Step 3 Use the ip gateway command to configure the NAM appliance default gateway address. The syntax for this command is as follows:
ip gateway ip-address
Example
root@localhost#
ip gateway 172.20.104.123
Step 4 You can use the exsession command to enable remote login to the NAM appliance using either Telnet or SSH. The syntax for this (optional) command is as follows:
exsession on (for Telnet)
or
exsession on ssh (for SSH)
Examples
To configure the NAM appliance to enable Telnet access:
root@localhost#
exsession on
To configure the NAM appliance to enable SSH access:
root@localhost#
exsession on ssh
Step 5 You can use the ip domain command to configure the NAM appliance system domain name. The syntax for this (optional) command is as follows:
ip domain name
Example
root@localhost#
ip domain your_company.com
Step 6 You can use the ip host command to configure the NAM appliance system hostname.
The syntax for this command is as follows:
ip host name
Example
root@localhost#
ip host nam_machine
Step 7 You might (optionally) want to use the ip nameserver command to configure one or more name servers for the NAM appliance.
The syntax for this command is as follows:
ip nameserver ip-address [ip-address] [ip-address}
Examples
root@localhost#
ip nameserver 172.20.104.10
root@localhost#
ip nameserver 172.20.104.10 172.20.104.20 172.20.104.30
Checking Your Configuration
After you finish configuring the NAM appliance for network connectivity, it is a good idea to check your connectivity and verify the IP parameters you have just configured for the NAM appliance.
Step 1 Use the ping command to check connectivity between the NAM appliance and a network device.
The syntax for this command is as follows:
ping {hostname | ip-address}
Examples
root@localhost#
ping nam_machine.your_company.com
root@localhost#
ping 172.20.104.10
The following is an example of the ping command showing successful connectivity:
root@nam_machine.your_company.com# ping 172.20.104.10
PING 172.20.104.10 (172.20.104.10) 56(84) bytes of data.
64 bytes from 172.20.104.10: icmp_seq=1 ttl=254 time=1.27 ms
64 bytes from 172.20.104.10: icmp_seq=2 ttl=254 time=1.13 ms
64 bytes from 172.20.104.10: icmp_seq=3 ttl=254 time=1.04 ms
64 bytes from 172.20.104.10: icmp_seq=4 ttl=254 time=1.08 ms
64 bytes from 172.20.104.10: icmp_seq=5 ttl=254 time=1.11 ms
--- 172.20.104.10 ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4003ms
rtt min/avg/max/mdev = 1.043/1.129/1.278/0.090 ms
root@nam_machine.your_company.com#
Step 2 Use the show ip command to verify that you have configured the NAM appliance IP parameters the way you want them.
The syntax for this command is as follows:
show ip
root@localhost# show ip root@nam1.company.com# show ip
The following is an example of the show ip command output that shows a configured NAM appliance:
root@nam2304-209.localdomain# sho ip
IP address: 172.20.103.209
Subnet mask: 255.255.255.128
IP Broadcast: 172.20.103.255
DNS Name: nam2304-209.localdomain
Default Gateway: 172.20.103.129
Nameserver(s): 171.68.226.120
HTTP secure server: Disabled
Verifying System Status
To verify the status of an installation, upgrade, or downgrade or to troubleshoot problems, use commands from those listed in Table 3-1 , Common Diagnostic and Show Commands .
Note ● The tables in these sections show only common managed device and network module commands.
– To view a complete list of available commands, type ? at the prompt
(Example: user@nam_host.domain#
?).
– To view a complete list of command keyword options, type ? at the end of the command
(Example: nam_host.domain#
ip ?).
- The tables group commands by the configuration mode in which they are available. If the same command is available in more than one mode, it might act differently in each mode.
Note Many show commands include the keyword option to display diagnostic output on your screen or to pipe it to a file or a URL.
Table 3-1 Common Diagnostic and Show Commands
|
|
clear access-log |
Clear web access log. |
clear captured-data-files |
Delete all captured files in NAM local drive. |
clear monitoring-data |
Delete all monitoring data on NAM. |
clear system-alerts |
Clear system alerts. |
clear system-passwords |
Restore default CLI passwords of application image. |
ping |
Pings a specified IP address or hostname to check network connectivity. |
show access-log |
Displays the web access log. |
show application |
Displays the protocol grouping information. |
show audit-trail |
Displays the web GUI logins and CLI access settings. |
show autocreate-data-source |
Displays the data source autocreation settings. |
show cdb |
Displays information about a CDB file. |
show cdp settings |
Displays the CDP settings. |
show certificate |
Displays installed certificate. |
show certificate-request |
Displays certificate signing request. |
show clock |
Displays the current date and time. |
show configuration |
Displays the current bootloader configuration as entered using the configure command. |
show data-source |
Displays the data sources. |
show date |
Displays the current date and time. |
show debug |
Displays the debug information. |
show device |
Displays the remote devices. |
show email |
Displays EMail settings. |
show entity |
Displays the entity MIB information. |
show flow-cache-sizes |
Displays the NAM internal cache sizes. |
show ftp |
Displays the FTP settings for schedule reports. |
show hosts |
Displays the hosts entries. |
show inventory |
Displays the system inventory information. |
show ip |
Displays the IP parameters. |
show local-storage all |
Displays all physical disks and virtual drives. |
show local-storage physical |
Displays all physical disks. |
show local-storage progress |
Displays progress of drive rebuilds. |
show local-storage virtual |
Displays all virtual drives. |
show log |
Displays the NAM config, patch, report, and upgrade logs |
show memory |
Displays the amount of installed memory, amount available, and the amount currently used by the system. |
show monitor |
Displays the configured collections. |
show patches |
Displays any installed patches. |
show preferences |
Displays the NAM web interface preferences. |
show protocol-feature |
Displays the parsing protocol feature settings. |
show remote-storage |
Displays the remote storage settings for storing capture data. |
show snmp |
Displays the SNMP parameters. |
show syslog-settings |
Displays the NAM syslog settings. |
show system-alerts |
Displays NAM failures and problems. |
show tech-support |
Displays general information about the host router that is useful to Cisco technical support for problem diagnosis. |
show time |
Displays the NAM system time settings. |
show trap-dest |
Displays the NAM trap destination. |
show version |
Displays information about the loaded router, software or network module bootloader version, and also hardware and device information. |
show waas |
Displays WAAS devices and data sources. |
show web-publication |
Displays web publication settings. |
show web-users |
Displays a list of current local web users. |
Enabling the NAM Web Server
This section describes how to enable the NAM web server and browser-based access to the NAM graphical user interface (GUI).
Note You can enable the NAM to function as an HTTP server or an HTTPS secure server, but not as both simultaneously.
To enable the NAM web server and provide browser-based access, confirm that your web browser supports your NAM software release.
Note For a list of supported browsers, see the NAM software release notes.
To enable the NAM web server:
Step 1 Open a Telnet or SSH session to the NAM appliance and at the password prompt, enter your password.
telnet {ip-address | hostname}
or
ssh {ip-address | hostname}
Step 2 Enter one of the following commands to enable either an HTTP server or an HTTPS secure server:
To enable the NAM HTTP web server:
ip http server enable
To enable the NAM HTTPS secure web server:
ip http secure server enable
The NAM requests a web administrator user name.
No web users are configured.
Please enter a web administrator user name [admin]: <CR>
The NAM web server requires at least one properly-configured web administrator. If the NAM does not prompt you for a web username and password, then at least one web administrator was previously configured.
Step 3 Enter the username of the web administrator. Otherwise, press Enter to use the default web administrator username admin.
The NAM requests a password for the web administrator, then requests the password to be entered again to ensure accuracy.
New password: <adminpswd>
Confirm password: <adminpswd>
Step 4 Enter the password for the web administrator and confirm it. Otherwise, press Enter to use the default web administrator password adminpswd.
Note Because this document is available to the public by way of Cisco.com, it is a good idea to change this and all default passwords as soon as possible.
Step 5 To check the NAM web server functionality, launch an approved internet browser and enter the IP address or host and domain name in the browser address field.
Note For a list of supported browsers, see the NAM software release notes.
If the Cisco Prime NAM 2300 series appliance web server is properly configured, you should access the NAM login window.
At this point, the only user able to log in to the NAM web server is the administrative user you configured when you enabled the web server.
Configuring a Monitored Device
After you connect an output interface of a monitored (or managed) device to the monitoring ports of the Cisco Prime NAM 2300 series appliance, you must also configure the monitored device to send data to that interface. You do this in two steps:
Configuring a Monitored Device Interface
At the monitored device, configure the connection to the Cisco Prime NAM 2300 series appliance as a trunk port, but use the no negotiate option. Using the no negotiate option on the monitored device, precludes the switch or router from performing dynamic trunk protocol (DTP) with the appliance monitoring port.
The following example shows how to configure a switch port connected to the appliance monitoring port as Te 7/29.
From the monitored device command line, enter a CLI command like the following:
show run interface Te 7/29
C7600_SUP720_69# show run interface Te 7/29
Building configuration...
Current configuration : 178 bytes
description connected to pilot unit NAM2204
switchport trunk allowed vlan 10-20
Creating a SPAN Session
A SPAN session is required to you can SPAN the monitored device’s traffic to the port connected to the monitoring port of the appliance. You can create a SPAN session using the monitored device’s CLI or using the NAM appliance GUI.
For information about how to use the NAM GUI to set up the SPAN session, see the Cisco Prime Network Analysis Module Software User Guide.
Opening and Closing a Telnet or SSH Session to the NAM
This procedure opens and closes a Telnet or SSH session to the NAM. This procedure is not commonly performed, because you would typically use the NAM GUI to monitor and maintain the NAM. If, however, you cannot access the NAM GUI, you might want to use Telnet or SSH to troubleshoot from the NAM CLI.
If your Cisco Prime NAM 2300 series appliance is not properly configured for Telnet or SSH access (see the following Prerequisites section), you can open a Telnet session to the managed device to which the Cisco Prime NAM 2300 series appliance is connected, then open a NAM console session from the managed device.
Prerequisites
- Configure the NAM system IP address. Optionally, set the NAM system hostname.
- Verify NAM network connectivity by performing one of the following ping tests:
– From a host beyond the gateway, ping the NAM system IP address.
– From the NAM CLI, ping the NAM system default gateway.
Telnet Prerequisites
- Enter the exsession on NAM CLI command.
SSH Prerequisites
- Enter the exsession on ssh NAM CLI command.
Summary Steps
1. telnet { ip-address | hostname }
or
ssh { ip-address | hostname }
2. At the login prompt, enter root.
3. At the password prompt, enter your password.
or
If you have not changed the password from the factory-set default, enter root as the root password.
4. Perform the tasks that you need to perform in the NAM CLI. When you want to end the Telnet or SSH session to the NAM and return to the Cisco IOS CLI, complete Step 5 and Step 6.
5. exit
6. logout
Detailed Steps
|
|
|
Step 1 |
telnet { ip-address | hostname } or ssh { ip-address | hostname }
host.domain# telnet 10.20.30.40
host.domain# ssh 10.20.30.40 |
Logs in to a host that supports Telnet. or Starts an encrypted session with a remote networking device.
- Use the NAM system IP address or NAM system hostname.
|
Step 2 |
At the login prompt, enter root.
login: root |
Accesses the root (read/write) level of NAM. |
Step 3 |
At the password prompt, enter your password. or If you have not changed the password from the factory-set default, enter root as the root password.
Password: root |
|
Step 4 |
Perform the tasks that you need to perform in the NAM CLI. When you want to end the Telnet or SSH session to the NAM and return to the Cisco IOS CLI, complete Step 5 and Step 6. |
For help using NAM CLI commands. |
Step 5 |
exit
root@localhost(sub-custom-filter-capture)# exit root@localhost# |
Leaves a subcommand mode.
|
Step 6 |
logout
root@localhost# logout Connection closed by foreign host. |
Logs out of the NAM system. |
Opening and Closing a Telnet Session to the NAM Using the NAM System IP Address
nam_host> telnet 172.20.105.215
Trying 172.20.105.215... Open
Cisco Prime NAM Appliance 2304 ("NAM2304-RJ45-K9") Console, 5.1(3)
Copyright (c) 1999-2012 by Cisco Systems, Inc.
Cisco Prime NAM Appliance 2304 ("NAM2304-RJ45-K9") Console, 5.1(3)
Copyright (c) 1999-2012 by Cisco Systems, Inc.
WARNING! Default password has not been changed!
root@nam.company.com# logout
[Connection to 172.20.105.215 closed by foreign host]
Opening and Closing an SSH Session to the NAM Using the NAM System Hostname
host [/home/user] ssh -l root@namappl
root@namappl’s password: <password>
Cisco Prime NAM Appliance 2304 ("NAM2304-RJ45-K9") Console, 5.1(3)
Copyright (c) 1999-2012 by Cisco Systems, Inc.
WARNING! Default password has not been changed!
root@namappl.company.com#
root@namappl.company.com# logout
Connection to namappl closed.
Shutting Down and Starting Up the Appliance
To shut down a Cisco Prime NAM 2300 series appliance, issue the NAM CLI shutdown command.
The Cisco Prime NAM 2300 series appliance reboots after you press the Power button.