Conventions	Indication
bold font	Commands and keywords and user-entered text appear in bold font.
italic font	Document titles, new or emphasized terms, and arguments for which you supply values are in italic font.
[ ]	Elements in square brackets are optional.
{x | y | z }	Required alternative keywords are grouped in braces and separated by vertical bars.
[ x | y | z ]	Optional alternative keywords are grouped in brackets and separated by vertical bars.
string	A nonquoted set of characters. Do not use quotation marks around the string or the string will include the quotation marks.
courier font	Terminal sessions and information the system displays appear in courier font.
< >	Nonprinting characters such as passwords are in angle brackets.
[ ]	Default responses to system prompts are in square brackets.
!, #	An exclamation point (!) or a pound sign (#) at the beginning of a line of code indicates a comment line.

Table 1 New Features in IND 1.8.0

Feature	Description	Related Documentation
Export Asset Inventory	You can set the system attributes at the Settings > Systems Settings > System ID page. Once the system attributes are set, you can export assets in CSV format from the Inventory page with system attributes. You can choose which fields to download from the Inventory page by clicking the Export icon > System Attributes and Asset Attributes. Note: The existing export option in the With Selected menu is removed from all existing listing pages in the user interface (UI) wherever applicable. Settings > System Settings > System ID	IND Online Help
Plug and Play (PnP) Device Authorization	Managed devices support and display the following three states during the authentication process: Authentication Progress, Authentication Success and Authentication Failed Design > Plug and Play > Profiles	IND Online Help
Precision Time Protocol (PTP) Alarms	IND can raise the following new PTP alarms on a device: ■Master Clock Changed: When the master on the PTP node changes, an alarm is raised. ■Grandmaster Offset Threshold Exceeded: An alarm is raised on the PTP node when the aggregated offset from the Grandmaster exceeds the limit set by the user on the Grandmaster node. Operate > Inventory > Device Details > Grand Threshold ■PTP Offset Threshold: At every Grandmaster node, a threshold can be set for time offset. This threshold is used to generate an alarm on the PTP node when the offset calculated from the grandmaster exceeds the threshold that you set. Operate > Inventory > Device Details > PTP	IND Online Help
Topology Optimization	If a topology discovery task is already running for the selected group, the system displays a message to inform you of the existing task and asks if you want to initiate another. Click No to keep the existing (current) task. Click Yes to initiate a new topology
IND Device Pack 1.8	■Cisco IND Release 1.8 Cisco Universal IOS images supported: ■Cisco IOS Release 15.2(7)E1a ■Cisco IOS Release 15.2(7)E ■Cisco IOS Release 15.2(6)E2A, Cisco IOS Release 15.2(6)E2, Cisco IOS Release 15.2(6)E1, Cisco IOS Release 15.2(6)E0a ■Cisco IOS Release 15.2(5)E2, Cisco IOS Release 15.2(5)E1, Cisco IOS Release 15.2(5)E ■Cisco IOS Release 15.2(4)EC2(ED) ■Cisco IOS Release 15.2(4)EA5, Cisco IOS Release 15.2(4)EA2, Cisco IOS Release 15.2(4)EA1 ■Cisco IOS Release 15.2(3)E3, Cisco IOS Release 15.2(3)E2 Note : See Limitations and Restrictions, page 14 for image limitations. The device pack supports the following Cisco and Rockwell Automation/Allen-Bradley platforms: ■Cisco IOS platforms supported: CGS 2520, IE 2000, IE 2000U, IE 3000, IE 3010, IE 4000, IE 4010 and IE 5000 ■Cisco IOS XE platforms supported: IE3200, IE 3300 and IE 3400
IND Device Pack 1.8, continued	Rockwell Automation/Allen-Bradley platforms: ■Stratix 8000/8300 Modular Managed Ethernet Switches ■Stratix 5800 Industrial Managed Ethernet Switches ■Stratix 5400 and 5700 Industrial Ethernet Switches ■Stratix 5410 Industrial Distribution Switches ■Stratix 2500 Lightly Managed Switches

Table 2 System Requirements

Desktop Requirements	Minimum Requirements
Windows Operating System (OS)	Windows 7 Enterprise or Professional with Service Pack 2 Windows 10 Windows 2012 R2 Server
Browser	Chrome: Version 50.0.2661.75, 53.0.2785.116 or above Firefox: 55.0.3, 57.04, 63.0.3 or above
CPU	Quad-Core 1.8 GHz
RAM	8 GB
Storage	50 GB

Prerequisite Configuration Required for ALL IE Switches Running Cisco IOS

The following information describes the CLI configuration required for the system to discover a Licensed device and to

transition the device from an Unlicensed to Licensed State.

This section also describes the Device Manager configuration required on IE 1000 switches.

Note: A local account is not needed on the device if TACACS is available.

Configuration Required for Discovery and Management of Cisco IOS

Follow these steps to configure the switch so that IND can discover the device and transition from UNLICENSED to LICENSED state.

1. Enter global configuration mode:

configure terminal

2. Configure SNMP to allow the system to successfully discover the device:

snmp-server community read-community ro

read-community must match the SNMPv2 read string defined in the system Access Profile that is attached to the

Discovery Profile. the default read community string is “public”.

 

 

3. Enter the following command to allow the system to discover a Licensed Device and transition the device from a UNLICENSED to LICENSED state with SNMPv3. The group that you create and the mode are used to associate with the SNMPv3 user that you configure in the next step. Based on the mode that you choose for the group. you can configured the authentication privacy protocols and passwords for the user.

snmp-server group group_name v3 mode

where mode is one of the following:

priv: Enables Data Encryption Standard (DES) packet encryption

auth: Enables the Message Digest (MD5) and the Secure Hash Algorithm (SHA) packet authentication

noauth: Enables the noAuthNoPriv security level. This is the default if no-keyword is specified.

4. Add a new user to the SNMP group:

snmp-server user user_name group_name v3 [auth authentication_type authentication_password [priv privacy_type privacy_password]

Note : Passwords for auth or priv should not exceed 64 characters.

— auth: Specifies an authentication level setting session that can be either the HMAC-MD5-96 (md5) or the HMAC-SHA-96 (sha) authentication level and requires a password sting auth_password. Supported privacy_type values are: {aes | 128 | des}

— priv: Configured a private (priv) encryption algorithm and password string privacy-password

5. Configure the following for the system to successfully transition the device from UNLICENSED to LICENSED state.This should match the device access username and password specified in the system Access Profile.

username username privilege 15 password 0 password

6. Enter the following commands to configure authentication, authorization and accounting (AAA):

aaa new-model

aaa authentication login default local

aaa authorization exec default local

7. Configure the Secure Shell (SSH) server:

ip ssh version 2

8. Configure the HTTP/HTTPS server:

ip http server

ip http secure-server

ip http authentication aaa login-authentication default

9. Configure the number of Telnet sessions (times) and a Telnet password for the line or lines:

line vty 0 15

login authentication default

transport input all

transport output all

10. Return to privileged EXEC mode:

end

Device Manager Configuration Required for Discovery and Management of IE 1000 Switches

1. Login to the IE 1000 Device Manager.

2. Leave the username field blank and enter cisco as password.

3. Choose Admin > Users.

4. Create Device Access User and use the same in Access Profile on IND.

5. Configure SNMP community string for Read Only (ro):

a. Choose Configure > SNMP. Click OK in the pop-up windows to confirm enabling SNMP.

b. Check the check box to enable SNMP Mode globally. Click Submit

6. Select Community Strings tab. Add a public Community String read only access. (By default, this is a Read Only (ro) string)

For SNMPv3:

a. Select the Users tab and add an snmpv3 user with name, security level, authentication protocol, authentication password, privacy protocol, and privacy password. Click OK.

b. Select the Group tab, select the created user, and specify the group name. Click OK.

7. Choose Admin > Access Management.

a. Check the check box to enable either SSH or Telnet. (This option determines how the IE1000 communicates with IND)

b. Click Submit.

Bootstrap Configuration for IE Switches

The system pushes the following configuration when you move the device to the Licensed state in the system:

Note : In the configuration script below, the {certificate key length} is obtained from the device access profile.

 

 

Bootstrap Configuration for IE 1000 Switches

IND Application Installation

The installation procedure for IND is described in the Installation Guide for Industrial Network Director for Release 1.8.0.

Device Pack Installation

Installation Requirements

IND Device Packs can only be installed with an IND application that has a matching version number, and the release number must be the same or greater than the IND release number.

For example, in release 1.8.x, 1.8 is the version number and x is the release number.

A new Device Pack must be version 1.8.0.

Installation Steps

For Device Pack installation steps, refer to the Installation Guide for Cisco Industrial Network Director, Release 1.8.0.

Important Notes

Please note the following information about Windows OS, Cisco IOS software and PID support on IND.

■All the system Self-Signed Certificates are regenerated upon upgrade to meet the new security requirements for TLS server certificates in iOS 13 and macOS 10.15.

Supported IND Release Upgrades

You can perform the following IND upgrades:

■Upgrade from 1.7.1 to 1.8.0

■Upgrade from 1.7.0 to 1.8.0

■Upgrade from 1.6.1 to 1.8.0

■Upgrade from 1.6.1 to 1.8.0

■Upgrade from 1.6.0 to 1.8.0

■Upgrade from 1.6.x to 1.7.x

Open Caveats

There are no known Open Caveats for IND 1.8.0.

Accessing the Bug Search Tool

You can use the Bug Search Tool to find information about caveats for this release, including a description of the problems and available workarounds. The Bug Search Tool lists both open and resolved caveats.

To access the Bug Search Tool, you need the following items:

■Internet connection

■Web browser

■Cisco.com user ID and password

To access the Bug Search Tool, use the following URL: https://tools.cisco.com/bugsearch/search

To search using a specific bug ID, use the following URL: https://tools.cisco.com/bugsearch/bug/ <BUGID>