- Preface
- Cisco Broadband Access Center Overview
- Broadband Access Center Architecture
- Configuration Workflows and Checklists
- CPE Management Overview
- Configuration Templates Management
- Firmware Management
- Parameter Dictionaries
- CPE History and Troubleshooting
- Managing Broadband Access Center
- Database Management
- Monitoring Broadband Access Center
- Configuring CWMP Service
- Configuring CWMP Service Security
- CWMP Device Operations
- Understanding the Administrator User Interface
- Using the Administrator User Interface
- Configuring Broadband Access Center
- RDU and DPE Connection Management
- Cisco BAC Support Tools and Advanced
- Troubleshooting Broadband Access Center
- Glossary
- Index
A -
B -
C -
D -
F -
G -
I -
K -
L -
N -
O -
P -
R -
S -
T -
U -
V -
W -
Index
A
ACS
definition GL-1
URL, configuring 3-9
URL, discovery 2-5
administrator user interface
accessing 15-2
ACS URL, configuring 3-9
BAC architecture, and 9-3
configuring 15-1
connection request 12-5
device's provisioning group, correcting 14-7
device faults, viewing 8-7
device history, configuring 8-4
icons (table) 15-4
logging in 15-2
HTTP transport 15-3
SSL transport 15-3
logging out 15-4
parameter dictionaries, managing 7-5
adding 7-5
deleting 7-6
replacing 7-6
viewing 7-6
performance statistics, collecting
enabling, disabling 11-14
RDU extensions, managing
required points (table) 17-22
server, monitoring 11-12
advanced concepts
See tools and advanced concepts
agent, SNMP
BAC architecture, and 9-4
MIB support 11-6
alerts, definition GL-1
message format 11-1
relating to
DPE 11-2
RDU 11-2
watchdog process 11-4
API, definition GL-1
about DPEs 2-3
about provisioning groups 2-5
about RDU 2-3
administrator user interface 9-3
agents
SNMP 9-4
watchdog process agent 9-2
command line interface 9-3
deployment 2-1
watchdog process 2-6
audit logs, definition GL-1
authentication
about 13-13
available options 13-17
client certificate, configuring 13-16
external client certificate, configuring 13-16
autoconfiguration server
B
backup and recovery of database10-4to 10-6
C
caching, definition GL-1
cautions
regarding
custom properties, deleting 17-5
disk space requirement figures 10-3
network deployment with an evaluation license key 17-20
template files, deleting 17-19
troubleshooting devices 8-10
cipher suites
definition GL-1
classes of service
about 4-3
configuring
adding 17-3
deleting 17-4
modifying 17-3
client certificate authentication
configuring 13-16
command line interface
DPE, accessing 9-3
configuration history
configuration template
about 5-1
administrator user interface, using17-15to 17-19
authoring 5-12
conditionals, using 5-18
includes, using 5-16
parameter substitution, using 5-15
configuration utility
about 5-20
template, adding 5-22
template processing, testing 5-24, 5-25
template syntax, validating 5-22, 5-23
using 5-21
features 5-3
access control 5-8
notification 5-7
parameters, schema (figure) 5-5
prerequisites, schema (figure) 5-9
schema (figure) 5-3
template processing files (table) 5-2, 6-3
configuration workflows and checklists
component workflows
DPE checklist (table) 3-2
RDU checklist (table) 3-1
technology workflows
DPE configuration (tables) 3-5
provisioning group configuration 3-8, 3-9
RDU configuration (table) 3-3
RDU configuration, preregistering device data 3-4
configuring BAC
class of service
adding 17-3
deleting 17-4
modifying 17-3
connection requests 12-2
authentication 12-3
disabling 12-10
methods, discovered 12-5
methods, use FQDN 12-5
reachability 12-11
CWMP service
DPE ports 12-2
defaults
configuration options, selecting 17-6
CWMP 17-7
RDU 17-9
system 17-10
device history
enabling, disabling 8-4
number of entries 8-5
viewing 8-4
discovering device data
about 12-11
files, managing
adding 17-17
deleting 17-19
exporting 17-19
replacing 17-18
viewing 17-18
adding a license 17-21
modifying a license 17-21
provisioning data, publishing
Datastore changes 17-25
plug-in settings, modifying 17-25
RDU extensions, managing
custom extension points, installing 17-24
new class, writing 17-23
viewing 17-25
connection request service
about 12-2
authentication 12-3
disabling 12-10
discovered 12-5
use FQDN 12-5
use IP 12-6
reachability 12-11
workflow (figure) 12-3
CPE management
authentication 13-13
available options 13-17
client certificate, configuring 13-16
external load balancer, configuring 13-16
device assignment to provisioning groups 4-11
automatic 4-12
explicit 4-12
explicit and automatic approach 4-12
device configuration synchronization 4-7
device deployment options 4-8
preregistered 4-8
unregistered 4-8
discovering CPE parameters 4-4
default parameters (table) 4-5
instruction generation, and 4-5
overview 4-1
customer premises equipment, definition GL-1
custom properties
configuring 17-5
overview 5-14
CWMP
about 1-3
definition GL-1
connection request 12-2
authentication 12-3
disabling 12-10
method, discovered 12-5
method, use FQDN 12-5
reachability 12-11
discovering device data
about 12-11
troubleshooting 12-13
DPE keystore, using keytool 13-3
certificates for client authentication, importing 13-10
certificate signing request, generating 13-7
existing signed server certificate, importing 13-4
keytool commands 13-5
self-signed certificate, displaying 13-7
server certificate and private key, generating 13-6
signed certificate, verifying 13-8
signed certificate into server certificate, importing 13-9
signing authority certificate into cacerts, importing 13-8
DPE ports 12-2
about 13-1
key and certificate management 13-2
SSL, configuring 13-3
D
database management
backup and recovery
backing up 10-4
recovering 10-5
restoring 10-6
disk space requirements10-3to 10-4
caution regarding 10-3
handling out 10-4
failure resiliency, understanding10-1to 10-2
automatic log management 10-3
DB_VERSION 10-3
history log 10-3
storage 10-2
transaction log 10-2
location, changing 10-7
defaults, configuring
CWMP 17-7
RDU 17-9
system 17-10
device diagnostics
configuration history, viewing 8-4
overview 4-13
performance statistics, monitoring 11-14
runStatAnalyzer.sh tool, using 11-15
Device Export
deviceExport.sh tool, using 19-1
device faults
about 8-6
device history
about 8-1
enabling, disabling 8-4
number of entries, configuring 8-5
records, logging 8-5
supported records (table) 8-1
viewing 8-4
device management
about 16-10
administrator user interface, using
adding 16-11
deleting 16-11
devices menu 16-4
displaying live data 16-16
forcing configuration synchronization 16-17
forcing firmware upgrade 16-17
modifying 16-11
performing a Ping test 16-16
rebooting 16-15
regenerating instructions 16-12
relating, unrelating 16-13
requesting a connection 16-15
resetting to factory settings 16-16
searches supported (table) 16-6
setting operations timeout 16-18
controls 16-7
device details, viewing 16-7
Manage Devices page 16-4
searching for devices 16-7
device object model
overview 4-1
relationships (figure) 4-2
relationships (table) 4-3
device operations
about 14-1
conditional execution 14-5
connection modes
immediate 14-3
immediate workflow (figure) 14-3
on-connect 14-4
on-connect workflow (figure) 14-4
device's provisioning group, managing 14-5
correcting 14-7
sample files, accessing 14-1
supported operations (table) 14-1
device troubleshooting
about 8-9
configuring 8-10
disabling 8-11
enabling 8-10
troubleshooting log, viewing 8-12
viewing devices in troubleshooting mode 8-11
log entries 8-12
discovered connection request 12-5
disk space monitoring
disk_monitor.sh tool, using 19-4
documentation
audience 2-xiii
related to this product 2-xvi
DPE (Device Provisioning Engine)
about 2-3
alert messages 11-2
command line interface 9-3
component workflow checklist (table) 3-2
definition GL-2
dpe.log file, viewing 20-8
keystore configuring, using keytool 13-3
certificates for client authentication, importing 13-10
certificate signing request, generating 13-7
existing signed server certificate, importing 13-4
self-signed certificate, displaying 13-7
server certificate and private key, generating 13-6
signed authority certificate into cacerts, importing 13-8
signed certificate into server certificate, importing 13-9
license keys 2-4
load balancing
DNS round robin, using 12-17
hardware load balancer, using 12-17
performance statistics, collecting 11-14, 11-19
runStatAnalyzer.sh tool, using 11-15
ports, configuring 12-2
RDU synchronization 18-3
SSL
about 13-11
authentication options 13-17
configuring 13-11
configuring CWMP service, example 13-11
configuring HTTP file service, example 13-12
defaults (table) 13-11
device authentication, configuring 13-13
states 18-4
technology workflow checklist
CWMP service (table) 3-6
HTTP file service (table) 3-7
viewing
currently registered DPEs 16-22
F
firmware
about 6-1
files, managing
administrator user interface, using17-15to 17-19
file service 6-4
firmware image 6-5
firmware rules template 6-5
firmware rules template
authoring 6-6
constructs6-13to ??
expressions 6-7
internal, external files 6-9
sample 6-11
management mechanisms6-1to 6-4
direct firmware 6-4
policy based 6-2
upgrade
bypassing, example 6-14
forcing 16-17
FQDN
definition GL-2
use FQDN, connection request 12-5
G
group, managing
group types
deleting 16-20
groups, managing
about 16-20
adding 16-20
deleting 16-21
details, viewing 16-22
group types 16-18
adding 16-19
modifying 16-20
modifying 16-21
relating, unrelating groups 16-22
GUI (see administrator user interface)
I
icons, administrator user interface (table) 15-4
instructions
generation, definition GL-2
generation and processing overview 4-5
IP address
definition GL-2
use IP, connection request 12-6
K
key, certificate management 13-2
keystore
about cacerts 13-2
about server certificates 13-2
configuring, using keytool 13-3
certificates for client authentication, importing 13-10
certificate signing request, generating 13-7
self-signed certificate, displaying 13-7
server certificate and private key, generating 13-6
signed certificate, verifying 13-8
signed certificate into server certificate, importing 13-9
signing authority certificate into cacerts, importing 13-8
keytool commands, using 13-5
sample server certificates 13-3
L
license keys, managing17-20to 17-21
adding a license 17-21
DPE licensing 2-4
modifying a license 17-21
logging
about 2-7
BAC architecture, and20-2to 20-3
log file, sample 20-3
log files, rotating 20-4
log levels, configuring 20-4
log levels and structures 20-3
log level tool 20-5
current log level, viewing 20-7
setting 20-6
using 20-6
viewing log files
audit.log 20-5
dpe.log 20-8
perfstat.log 11-15
rdu.log 20-5
troubleshooting.log 8-12
logging into BAC 15-2
N
NAT, definition GL-2
network address translation
Network Time Protocol, definition GL-2
O
overview
configuration management 1-1
device diagnostics and troubleshooting 4-13
features and benefits 1-1
firmware management 1-2
scalability 1-2
security 1-2
technology supported 1-3
P
parameter dictionary
administrator user interface, using 7-5
adding 7-5
deleting 7-6
replacing 7-6
viewing 7-6
custom 7-3
default 7-2
overview 7-1
schema (figure) 7-2
syntax 7-3
preregistered devices 4-8
preregistering device data 3-4
property hierarchy 4-4
provisioning API, definition GL-3
provisioning data, publishing
Datastore changes 17-25
plug-in settings, modifying 17-25
initial configuration
preregistered devices 4-10
unregistered devices 4-11
initial configuration (figure) 4-10
provisioning groups
about 2-5
ACS URL, configuring 3-9
adding a DPE 12-18
definition GL-3
device faults, viewing 8-7
devices, assigning 4-11
automatic 4-12
explicit 4-12
explicit and automatic 4-12
redundancy 12-16
DNS round robin, using 12-17
hardware load balancer, using 12-17
local 12-16
regional 12-16
publishing, definition GL-3
R
RDU (Regional Distribution Unit)
about 2-3
alerts 11-2
component workflow checklist (table) 3-1
definition GL-3
details, viewing 16-27
extensions, managing
custom extension points, installing 17-24
new class, writing 17-23
viewing 17-25
current log level, viewing 20-7
setting 20-6
using 20-6
performance statistics, collecting 11-14, 11-19
runStatAnalyzer.sh tool, using 11-15
server, monitoring 11-12
technology workflow checklist (table) 3-3
local 12-16
regional 12-16
redundancy, definition GL-3
S
schema (figures)
configuration 5-3
parameter 5-5
parameter dictionary 7-2
prerequisite 5-9
Secure Sockets Layer
security
DPE
administrator user interface, using 11-12
CLI, using 11-12
performance statistics collection
monitoring 11-14
perfstat.log, understanding 11-14
runStatAnalyzer.sh tool, using 11-15
RDU
administrator user interface, using 11-12
SNMP agent 11-5
servers, viewing16-22to ??
DPEs 16-22
RDU details 16-27
service classes
shared secret
configuring
device password, changing 13-14
device password, correcting 13-15
definition GL-3
SNMP agent
about 2-6
MIB support 11-5
snmpAgentCfgUtil.sh tool
community, adding 11-8
community, deleting 11-9
contacts, setting up 11-10
hosts, adding 11-7
hosts, deleting 11-7
listening port, identifying 11-10
location, changing 11-10
notification types, specifying 11-11
settings, displaying 11-11
starting 11-9
stopping 11-9
SSL
CWMP service, example 13-11
DPE keystore, keytool commands (table) 13-5
DPE keystore, using keytool13-3to 13-10
HTTP file service, example 13-12
definition GL-3
synchronization
configuration synchronization instruction 4-7
data synchronization instruction 4-6
device configuration 4-7
DPE-RDU 18-3
T
template files, developing
template file definition GL-3
templates
configuration utility
running 5-21
template, adding 5-22
template processing, testing 5-24, 5-25
template syntax, validating 5-22, 5-23
constructs
conditionals 5-18
constructs6-13to ??
TLS
definition GL-3
tools and advanced concepts
configuration utility
adding template file 5-22
running 5-21
testing template processing 5-24, 5-25
validating template file 5-22, 5-23
deviceExport.sh tool 19-1
disk_monitor.sh tool 19-4
keytool utility 13-3
list of tools 9-5
current log level, viewing 20-7
setting 20-6
using 20-6
SNMP agent, starting 11-9
SNMP agent, stopping 11-9
SNMP agent community, adding 11-8
SNMP agent community, deleting 11-9
SNMP agent hosts, adding 11-7
SNMP agent hosts, deleting 11-7
SNMP agent location, changing 11-10
SNMP agent settings, displaying 11-11
SNMP contacts, setting up 11-10
SNMP listening port, identifying 11-10
SNMP notification types, specifying 11-11
watchdog agent tool 9-2
TR-069, definition GL-3
Transport Layer Security
troubleshooting
alert messages
DPE 11-2
message format 11-1
RDU alerts 11-2
watchdog process 11-4
devices
configuration history, viewing 8-4
data discovery 12-13
in troubleshooting mode 8-9
recurring faults, viewing 8-7
performance statistics collection
monitoring 11-14
perfstat.log 11-15
runStatAnalyzer.sh tool, using 11-15
U
unregistered devices 4-8
users
about 16-1
administrator 16-1
managing
adding 16-2
deleting 16-4
modifying 16-3
read-only user 16-2
read-write user 16-2
using BAC
devices, managing
about 16-10
adding 16-11
controls 16-7
deleting 16-11
details, viewing 16-7
modifying 16-11
regenerating instructions 16-12
relating, unrelating 16-13
groups, managing
adding 16-20
deleting 16-21
details, viewing 16-22
modifying 16-21
relating, unrelating 16-22
servers, viewing
DPEs details 16-22
provisioning groups details 16-26
RDU details 16-27
user management
adding a new user 16-2
deleting users 16-4
modifying users 16-3
V
VoIP, definition GL-4
W
watchdog process
agent, definition GL-4
alerts 11-4
command line, using 9-2
Feedback