Guest

Cisco Info Center VPN Policy Manager

Release Notes for Cisco Info Center VPN Policy Manager, 3.1

Table Of Contents

Release Notes for Cisco Info Center VPN Policy Manager, 3.1

Contents

Introduction

Cisco Info Center VPN Policy Manager Components

Cisco Info Center Core Components

Cisco Info Center VPN Policy Manager Components

Cisco Info Mediators Used with VPN Policy Manager

System Requirements

Minimum Configuration

Additional Requirements for Webtop

Recommended Configuration for Managing Large Networks

Installation Notes

Prerequisites

Existing Installation of ISC 3.2

Required Patches to ISC 3.2

Existing Version of Cisco Info Center 3.6 or 7.0.3

Preliminary Steps

Special ISC Configuration for ISC 3.2

Installation Steps

(Optional) Installing Webtop 1.2

Downloading the Policy Manager Support Pack

Adding Additional Info Mediators

Running cic_update

Running cic_update to Install Policy Manager with Cisco Info Center 3.6

Running cic_update to Install Policy Manager with Cisco Info Center 7.0.3

Running cic_update to Update Existing Cisco Info Center Components

Licensing Cisco Info Center VPN Policy Manager 3.1

Tips for Configuring Failover

Scenario 1

Scenario 2

Scenario 3

Scenario 4

Product Limitations

Caveats

Known Issues with Related Products

Related Documentation

Obtaining Documentation

Cisco.com

Ordering Documentation

Documentation Feedback

Obtaining Technical Assistance

Cisco Technical Support Website

Submitting a Service Request

Definitions of Service Request Severity

Obtaining Additional Publications and Information


Release Notes for Cisco Info Center VPN Policy Manager, 3.1


June 2005

Contents

This Release Notes document provides information about the Cisco Info Center VPN Policy Manager 3.1 release and contains the following sections:

"Contents"

"Introduction"

"Cisco Info Center VPN Policy Manager Components"

"System Requirements"

"Installation Notes"

"Licensing Cisco Info Center VPN Policy Manager 3.1"

"Tips for Configuring Failover"

"Caveats"

"Known Issues with Related Products"

"Related Documentation"

"Obtaining Documentation"

"Documentation Feedback"

"Obtaining Technical Assistance"

"Obtaining Additional Publications and Information"

For more detailed information, refer to the Cisco Info Center VPN Policy Manager Installation and User Guide, 3.1, the Cisco Info Center Installation and Configuration Guide, 3.6.1, and also to the documentation associated with each respective Cisco Info Center software component, as listed in the "Related Documentation" section.

Introduction

Cisco Info Center VPN Policy Manager is an application that acts as a data source for the Cisco Info Center 3.6or 7.0.3 product by receiving events from the Cisco IP Solutions Center (ISC) ISC 3.2 product and from network devices used to implement Multiprotocol Label Switching (MPLS)-based virtual private networks (VPNs) in the Cisco network environment. The ISC events processed by the Cisco Info Server and Cisco Info Center VPN Policy Manager include notifications that:

A PE or Customer Premises Equipment (CPE) device has come up or gone down.

An interface or subinterface associated with a Virtual Routing and Forwarding (VRF) instance is down.

An interface associated with a VRF has come up.

When it receives ISC events, Cisco Info Center VPN Policy Manager queries the ISC database to obtain additional data about the events. Using predefined processing policies, Cisco Info Center VPN Policy Manager enhances the original events with the information obtained from ISC.

The events produced by Cisco Info Center VPN Policy Manager include information such as:

The VPNs affected due to a fault on a Provider Edge (PE) router.

The VPN customers affected.

Which Customer Edge routers (CEs) are affected.

The enhanced events, along with additional events received from network devices used in the MPLS VPN network, are then placed in the Cisco Info Center database and displayed on the Info Server event list.

The policy-based processing capability provided by Cisco Info Center VPN Policy Manager greatly enhances the ability of network operators to monitor MPLS VPN networks and the operation of Cisco ISC.

Cisco Info Center VPN Policy Manager Components

Cisco Info Center VPN Policy Manager uses the main components of the core Cisco Info Center product, as well as additional components that process Cisco Info Center events and create enhanced Policy Manager events.

Cisco Info Center Core Components

Cisco Info Server—the core of the Cisco Info Center system. An active, main-memory database that stores and manages events. The Cisco Info Server consolidates, associates, and normalizes event data received from Cisco Info Mediators, Cisco Info Gateways, and monitors.

Cisco Info Mediator—an application that acts as a data acquisition agent. Cisco Info Mediators acquire data from events sources such as Cisco WAN Manager, HP Network Node Manager, Cisco IOS Syslog processes, Cisco Element Management System (Cisco EMF)-based applications, the Cisco Transport Manager application, and a variety of SNMP-enabled devices.

Info Gateways—software modules that allow the Cisco Info Server to read events from and write events to third party applications and forward alerts between Cisco Info Servers.

Cisco Info Admin Desktops—an integrated graphical suite of tools used by operators. These tools are the starting points for designing filters and customizing views. Cisco Info Admin Desktop information can be viewed from a UNIX/Motif front-end or a Java-driven Web browser. Event information is delivered in a format that allows operators to quickly respond.

Webtop 1.2—provides the read-only event publication of Wave with the interactive features of JEL for manipulating alerts, combined in one web-based product. Webtop publishes Cisco Info Center alerts for viewing in a web browser, and enables certain users to manipulate them using an active event list launched from a web browser.

For instructions on installing the Webtop component, refer to Chapter 3 of the Cisco Info Center VPN Policy Manager Installation and User Guide, 3.1 "Installing Cisco Info Center VPN Policy Manager." For detailed documentation on the Webtop product, go to the Micromuse support site at the following URL:

http://support.micromuse.com/documentation/webtop.html

Virtual Operator (not supported with Cisco Info Center VPN Policy Manager 3.1)—a product that allows the Cisco Info Server to execute resolution scripts that mimic the actions a Network Operations Center (NOC) operator would take to resolve an alert. Scripts or applications supported by the Virtual Operator can be UNIX shell scripts, PERL scripts, or compiled programs written in C or C++.

For instructions on installing Virtual Operator, refer to Chapter 6 of the Cisco Info Center Installation and Configuration Guide, "Installing the Virtual Operator Component." For detailed documentation on the Virtual Operator product, go to the Micromuse support site at the following URL:

http://support.micromuse.com/documentation/#VO


Note Virtual Operator is not currently supported with Cisco Info Center VPN Policy Manager 3.1.


For detailed information on the Cisco Info Center components and how they interoperate, refer to Chapter 1, "Overview," in the Cisco Info Center Installation and Configuration manual.

Cisco Info Center VPN Policy Manager Components

Policy Manager—The Policy Manager component consists of an Impact 2.3 server, and associated event broker, and data source adapter (DSAs).

The Impact server is an application that processes events received from the Info Server and enhances the events based on predefined processing policies. The events are then sent back to the Info Server to enable viewing on event lists

These event broker and data source adapter modules enable the Cisco Info Center Info Server to communicate with the ISC product, and enable the ISC product to send messages back to the Impact Server.

Cisco Info Mediators Used with VPN Policy Manager

When you purchase Cisco Info Center or Cisco Info Center VPN Policy Manager, you purchase licenses for one or more Cisco Info Mediators. The following Cisco Info Mediators are used with Cisco Info Center VPN Policy Manager.

Cisco Syslog Info Mediator—acquires event data from the syslogd daemon, the UNIX system message logger, by reading from a FIFO that syslogd has been configured to write messages to.

Cisco MTTrapd Info Mediator—multi threaded Cisco Info Mediator that interfaces with a variety of SNMP-enabled devices and event correlation engines such as CiscoWorks2000 (DFM and VHM) and MWFM. This also includes specific enhancements and fixes recommended by the CERT team. The set of rules also includes the best practices set of rules developed by Micromuse.

The Cisco MTTrapd Info Mediator also processes events transmitted by element managers that support the Northbound Event Interface (NEI) included with the Cisco Element Manager System version 3.2 and higher, such as Cisco Media Gateway Manager (CMGM) 2.0 and Cisco Media Gateway Controller Node Manager 2.3.1 and 2.3.1. The NEI allows element managers to send events encapsulated in SNMP messages to network management systems such as Cisco Info Center.

Cisco TIBCO Info Mediator (optional)— interfaces with the ISC product to receive PE events. You can purchase and install this Info Mediator if you want to monitor events that are generated when a PE or CPE is added to an MPLS network.

For information on configuring these Info Mediators, see the "Cisco Info Mediators Used with VPN Policy Manager" section.

Additional Info Mediators that work with a variety of hardware and software can be ordered in addition to Cisco Info Center.

For detailed information on the event sources and Cisco Info Mediators used with Cisco Info Center, refer to Chapter 3 in the Cisco Info Center Mediator Reference, 3.6.

System Requirements

This section provides the hardware, software, and configuration requirements for the Cisco Info Center 3.6.1 VPN Policy Manager product.

The Sun system must have Solaris 7 or 8 with Motif 1.2 or the Common Desktop Environment (CDE) installed.

If you need to run the Webtop application, run the CiscoView application, use the Launch ISC GUI tool on the Cisco Info Center VPN Policy Manager MPLS Troubleshooting Tools menu, or view the Cisco Info Center online documentation on CCO, a supported browser is required.

For current browser requirements for the CiscoView application, refer to the documentation for the CiscoWorks2000 component your Cisco Info Center installation will monitor.

For information on the browser requirements for Webtop, see the "Additional Requirements for Webtop" section.

Minimum Configuration

This section provides the minimum system requirements for Cisco Info Center VPN Policy Manager 3.1.

Info Server— Sun Blade 150 workstation or Sun Fire V120 server with a minimum of 512 MB RAM, and a 512-MB hard drive


Note This does not include additional NMS or add-on requirements. Please read the Release Notes or installation manual for the NMS you will use with each Cisco Info Mediator to determine the installation requirements for that particular NMS.


Info Mediators—Sun Ultra 2 or higher workstation with a minimum of 64-MB RAM and a minimum 100 MB hard drive, for each Cisco Info Mediator

Info Admin Desktops— Sun workstations with a minimum of 48-MB RAM and a minimum of 75-MB hard drive.

Additional Requirements for Webtop

If you will install the Webtop 1.2 component, note the following additional requirements:

A full installation of Webtop requires an additional 150 MB of disk space and 256 MB or more or memory.

Webtop 1.2 requires Java Runtime Environment (JRE) Version 1.3.1 or higher and relevant patches specific to your platform and version.

UNIX hosts or PCs that will monitor events relayed by the Webtop Web server must run one of the following browsers:

Internet Explorer 5.5 or 6.0 (Windows)

Netscape Navigator 6.2 or 7.0 (UNIX, Windows)


Note The browser must be configured to accept all cookies.


Recommended Configuration for Managing Large Networks

This section indicates the minimum system requirements for a large installation.

Cisco Info Server—Sun Fire 280R or Netra 20 server or higher with a minimum of 1 GB of RAM and a 512-MB hard drive disk storage per Info Mediator


Note This does not include additional NMS or add-on requirements. Please read the Release Notes or installation manual for the NMS you will use with each Cisco Info Mediator to determine the installation requirements for the NMS.


Info Mediators—Sun Ultra 2 or higher workstation with a minimum of 64-MB RAM and a minimum 100 MB hard drive, per Info Mediator

Cisco Info Admin Desktops—Sun workstations with a minimum of 48-MB RAM and 75-MB hard drive.

Installation Notes

This section contains important notes about the installation of Cisco Info Center VPN Policy Manager.

Prerequisites

You must have the following software installed before you install Cisco Info Center VPN Policy Manager:

ISC 3.2

Required patches to ISC 3.2


Note You must perform a special configuration step to enable ISC 3.2 to work with Cisco Info Center VPN Policy Manager 3.1. For information on this configuration step, see the "Special ISC Configuration for ISC 3.2" section


An existing installation of Cisco Info Center 3.6 or 7.0.3.

Existing Installation of ISC 3.2

You must have an existing installation of ISC 3.2 or ISC 4.0. If you had a version prior to 3.1 installed, you must upgrade your installation to ISC 3. or 4.0.

For information on installing and upgrading ISC, refer to the Cisco IP Solution Center Installation Guide, 3.2 at the following URL:

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_2/install

Required Patches to ISC 3.2

The latest patch for ISC 3.2 must be applied to your ISC 3.2 installation. To obtain ISC patches, go to the following URL on CCO:

http://www.cisco.com/pcgi-bin/tablebuild.pl/isc

On CCO, the current patch is identified as ISC 3.2.0.2 (SECOND PATCH).

For information on installing the patch, refer to the README file distributed with the ISC patch.

Existing Version of Cisco Info Center 3.6 or 7.0.3

Cisco Info Center VPN Policy Manager must be added to an existing installation of Cisco Info Center 3.6 or 7.0.3 using the cic_update utility.

For general information on the cic_update utility, refer to the "Using the Update Utility" section in the Cisco Info Center Installation and Configuration Guide, 3.6 at the following URL:

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/info_ctr/3_6/install/appb_upd.htm

For detailed information on running cic_update to install Cisco InfoCenter VPN Policy Manager, refer to chapter 3 of the Cisco Info Center VPN Policy Manager Installation and User Guide, 3.1, "Installing Cisco Info Center VPN Policy Manager."

Preliminary Steps

Before you install Cisco Info Center VPN Policy Manager 3.1, complete the following preliminary steps.

Make sure SNMP v2.c is installed

Run ISC Device Collection

Make sure that only Customer policies are defined in ISC

Set the nbi.BackwardCompatible.RecordNumber property in the vpnsc.properties file to true and then start and initialize the ISC database

If DNS is not installed, make sure that the /etc/hosts file contains the name of the ISC host

Install ISC Application Programming Interface (API) Licenses

During your purchase of the ISC product, API licenses will be provided if you have requested them. Contact your API support representative for information on installing the licenses.

Special ISC Configuration for ISC 3.2

To enable ISC 3.2 to work with Cisco Info Center VPN Policy Manager 3.1, you must set the backward compatible record number feature in the vpnsc.properties file. Complete these steps to set this property.


Step 1 Edit the vpnsc.properties file.

Make sure that the line for the nbi.BackwardCompatible.RecordNumber property reads follows:

nbi.BackwardCompatible.RecordNumber=true

Step 2 Save your changes to the vpnsc.properties file.

For detailed information on ISC 3.2 configuration, refer to the Cisco IP Solution Center Installation Guide, 3.2 at the following URL:

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_2/install

Step 3 Restart the ISC database.

Step 4 Initialize the ISC database.


Installation Steps

(Optional) Installing Webtop 1.2

If you want to use the Webtop application to view VPN Policy Manager events, then you must either install Webtop 1.2 or upgrade your existing Webtop 1.1 installation to Webtop 1.2.

To do this, complete these steps:


Step 1 Go to the software download area for Cisco Info Center on Cisco.com at the following URL:

http://www.cisco.com/pcgi-bin/tablebuild.pl/cic

Step 2 Issue the following command to untar the distribution tar file.

tar -xvf cic-webtop-1.2-ga.tar

Step 3 If Webtop 1.1 is installed, make sure that it is running.

Step 4 Issue the following command to start the Webtop installation script:

./install_webtop

For detailed information, refer to the "Updating or Installing the Webtop Component" section in chapter 3 of the Cisco Info Center VPN Policy Manager Installation and User Guide, 3.1, "Installing Cisco Info Center VPN Policy Manager."


For information on licensing Webtop, see the"Licensing Cisco Info Center VPN Policy Manager 3.1" section.

Downloading the Policy Manager Support Pack

The Cisco Info Center VPN Policy Manager 3.1 application is provided as a support pack that can be added to hosts running Cisco Info Center 3.6 components. The support pack consists of two tar files that you install using the cic_update utility, and a failover gateway configuration file.

The Policy Manager support pack is available at the following location on Cisco.com:

http://www.cisco.com/pcgi-bin/tablebuild.pl/cic

The following files are installed using the update utility (cic_update):

PM31_Install.tar—Installs and configures the Policy Manager component.

PM31_CIC_update.tar—Updates an existing Cisco Info Center 3.6 installation with rules, automations, tools, and views used with the Policy Manager application.

The following failover gateway configuration file is provided:

FAIL_GATE.conf

Adding Additional Info Mediators

Cisco Info Center VPN Policy Manager uses three Info Mediators:

Syslog Info Mediator (nco_p_syslog)

MTTrapd Info Mediator (nco_p_mttrapd)

(optional) Tibco Info Mediator (nco_p_tibco)


Note If you want to use the Tibco Info Mediator, then must install and configure it on the same network that ISC is installed on.


See the "Cisco Info Mediators Used with VPN Policy Manager" section for a brief description of these Info Mediators.

If you already have these Info Mediators installed and configured, you only need to run cic_update as described above to update the Info Mediators.

However, if you do not have these Info Mediators installed, you must run the nco_config configuration utility to configure your installation to use them, and then run cic_update to update the configuration as described in the "Running cic_update to Update Existing Cisco Info Center Components" section.

Selecting Info Mediators from the nco_config Device Configuration Menu

When you run the nco_config configuration utility to configure the Info Mediators component, make the following selections from the Device Configuration Menu to select and configure the Info Mediators used with Cisco Info Center VPN Policy Manager:

9. Syslog—Select this option to configure the Syslog Info Mediator

10. SNMP Generic Traps—Select this option to configure the MTTrapd Info Mediator

11. CNS-PE using TIBCO—(optional) Select this option if you want to monitor CNS events that are generated when a PE or CPE is added to an MPLS network.

You must also obtain and install licenses for any new Info Mediators that you configure.

Running cic_update

Before you run cic_update, make sure that:

1. The Info Server and Info Mediator components are running.

2. The Webtop component is not running, if it is installed.

You must run cic_update twice:

To install and configure the Policy Manager component

To update Info Mediators and Info Desktops used with Cisco Info Center VPN Policy Manager

Running cic_update to Install Policy Manager with Cisco Info Center 3.6

To run cic_update the first time, to install the Policy Manager component, enter the following command:

$OMNIHOME/bin/cic_update

When prompted for the update path and filename, provide the path and full filename for the following tar file:

PM31_Install.tar

You will be prompted for configuration information. For detailed information on responding to the prompts, refer to "Installing Cisco Info Center VPN Policy Manager" in the Cisco Info Center VPN Policy Manager Installation and User Guide, 3.1.

After you complete this step, the Policy Manager application will run under control of the Process Control component. that.

Running cic_update to Install Policy Manager with Cisco Info Center 7.0.3

For information on running cic_update to install Cisco Info Center VPN Policy Manager in an installation where Cisco Info Center 7.0.3 is installed, see the README file provided with the ISC 4.0 support patch for Cisco Info Center 7.0.3.

Running cic_update to Update Existing Cisco Info Center Components

To update your existing Cisco Info Center 3.6 components for rules, automation, MPLS tools, etc,. run cic_update as follows.

1. Bring up your Info Server alone (or bring up all Cisco Info Center processes except Webtop).

2. Issue the following command to start cic_update:

$OMNIHOME/bin/cic_update

When prompted for the update path and filename, provide the path and full filename for the following tar file:

PM31_CIC_Update.tar

Licensing Cisco Info Center VPN Policy Manager 3.1

When you install Cisco Info Center VPN Policy Manager 3.1 you must obtain licenses for the following:

1. Any Info Mediators that you have added to the installation for use with Cisco Info Center VPN Policy Manager.

For information on licensing for the Info Mediators, see the "License Keys for Info Mediator Components" section in chapter 3 of the Cisco Info Center VPN Policy Manager Installation and User Guide, 3.1, "Installing Cisco Info Center VPN Policy Manager."

2. VPN Policy Manager components listed in Table 1.

Table 1 License Keys Required for Cisco Info Center VPN Policy Manager

Component
Description

Impact 2.3 Server (nci_server)

Server application that processes events forwarded to it by the Info Server component and generates enhanced events.

ObjectServer DSA (nci_objserv_dsa)

Data source adapter (DSA) for the VPN Policy Manager application.

Event Broker (nci_eventbroker)

Common Object Request Broker Architecture (CORBA) event broker used with Impact.

CORBA DSA (nci_corba_dsa)

The CORBA DSA used with the VPN Policy Manager application.

Note This application does not appear on the Micromuse license key request page. You must request this license key in the email that you send to Micromuse or in the Extra Details message area at the bottom of the Micromuse License request form.


3. If you are using Webtop, licenses for Webtop.

For information on obtaining Webtop licenses, refer to the README file provided with the upgrade package for Webtop 1.2. This upgrade package is available at the following URL:

http://www.cisco.com/pcgi-bin/tablebuild.pl/cic

You must also obtain licenses for any additional Info Mediators for which you add configurations.

You can obtain licenses in two ways:

1. By emailing Micromuse at the following email address:

perm.licensing@micromuse.com

2. By linking to the Micromuse support site at the following URL and then going to the License Request form page:

http://support.micromuse.com/

For detailed information on licensing the Cisco Info Center VPN Policy Manager, see "Licensing Policy Manager" in chapter 3 of the Cisco Info Center VPN Policy Manager Installation and User Guide, 3.1, "Installing Cisco Info Center VPN Policy Manager."


Note You must also install licenses for the ISC API. If you do not have licenses for the ISC API, contact your sales representative.


Tips for Configuring Failover

This section presents several scenarios for configuring failover with Cisco Info Center VPN Policy Manager 3.1.

Scenario 1

1. Install and configure the Info Server, Info Mediators, Info Desktop, Licensing, and Process Control components on Host A. Configure this Info Server as the Primary Info Server.

2. Install and configure the Info Server, Info Mediator, Info Gateway, Info Desktop, Licensing, and Process Control components on Host B. Configure this Info Server as the Backup Info Server.

3. Install and configure Cisco VPN Policy Manager 3.1 (standalone) on Host C. Before you do this you must first install the Cisco Info Center 3.6 Process Control component.

Scenario 2

1. Install and configure the Info Server, Info Mediator, Info Desktop, Licensing, and Process Control components on Host A. Configure this Info Server as the Primary Info Server. Then install and configure Policy Manager 3.1.

2. Install and configure the Info Server, Info Mediator, Info Gateway, Info Desktop, Licensing, and Process Control components on Host B. Configure this Info Server as the Backup Info Server.

Scenario 3

1. Install and configure the Info Server, Info Mediator, Info Desktop, Licensing, and Process Control components on Host A. Configure this Info Server as the Primary Info Server. Configure this Mediator as the Primary Mediator. Install and configure Cisco Info Center VPN Policy Manager 3.1. Configure this Policy Manager host as the Primary Impact Server (Policy Manager).

2. Install and configure the Info Server, Info Mediator, Info Gateway, Info Desktop, Licensing, and Process Control components on Host B. Configure this Info Server as the Backup Info Server. Configure the Info Mediators on this host as the Backup Info Mediator. Install and configure Cisco Info Center VPN Policy Manager 3.1. Configure this Policy Manager host (Impact server host) as the Backup Policy Manager (Impact server) host.

Scenario 4

1. Install and configure the Info Server, Info Mediator, Info Desktop, Licensing, and Process Control components on Host A. Configure this Info Server as the Primary Info Server. Install and configure Policy Manager 3.1. Configure this Policy Manager host (Impact server host) as the Primary Policy Manager host.

2. Install and configure the Info Server, Info Mediator, Info Gateway, Info Desktop, Licensing, and Process Control components on Host B. Configure this Info Server as the Backup Info Server. Install and configure Cisco Info Center Policy Manager 3.1. Configure this Policy Manager host (Impact server host) as the Backup Policy Manager (Impact server) host.

Product Limitations

Note the following product limitations.

VPLS and L2VPN support are not available with Cisco Info Center VPN Policy Manager 3.1.

The Virtual Operator component of Cisco Info Center is not currently supported with Cisco Info Center VPN Policy Manager 3.1.

Caveats

This section contains information about open Document Defect Tracking System (DDTS) bugs.

CSCee42184. VPN events remain green after a main interface is shut down and then restarted but a subinterface is later shut down. The events for VPNs associated with the subinterface that has been restarted should change to red.

CSCee37960. The formats for some Syslog events forwarded by the Syslog Info Mediator from devices in your installation might be different from the formats provided in the default rules files provided with VPN Policy Manager.

To add new event formats, manually edit the rules file for the Syslog Info Mediator to add the formats. The following rules file is used with the Syslog Info Mediator:

/opt/Omnibus/probes/solaris2/syslog.rules

CSCed72554. The Impact server cannot start unless the Info Server has been started, and the Impact server stops when the Info Server stops. This occurs because the Impact server periodically checks to make sure the Admin user for the Info Server is properly authenticated. If the Admin user is not authenticated, then the Impact server shuts down. This is a design feature of the Impact server that was implemented to ensure Impact server security.

CSCee27768.The VPN Policy Manager configuration script does not check for a null password when the user is prompted for an ISC password. This might create a problem if you enter a null (empty password), because ISC will not accept an empty password.

Workaround: When you are prompted for an ISC password, be sure to enter a valid (non-blank) password.

CSCee27771. If you install Cisco Info Center VPN Policy Manager on a single system and later reconfigure it, the configuration utility states that Info Server port 4100 is already in use and prompts you to specify a new port (port 4099). Later, when the update utility is run to configure VPN Policy Manager, the new default port (4099), is not displayed. Instead, port 4100 is again displayed as the default.

Workaround: When the VPN Policy Manager installation scripts displays port 4100, enter the port correct port number for which the Info Center is configured.

CSCee01998. There are some differences between the Desktop MPLS Tools and Extended Tools in Webtop and in the Info Desktop:

In Desktop, when using these tools, you are not required to enter the username if a router is not configured with a username. You just have to give the password and enable password. And it works fine.

But, with Webtop, when using the same tools, you are required to enter the user name even if you did not configure the router with a username. A message is displayed below the prompts asking you to enter "user" if the router is not configured with a username.

Workaround: If no username is specified in the router configuration, just enter "user" when prompted for the username.

CSCee40344. If you run the cic_update utility to update the Info Mediator rules using the PM31_CIC_Update.tar update file and then later run nco_config to configure the Tibco Info Mediator, the Tibco Info Mediator comes up with the original tibco.props file (the properties file that was used BEFORE cic_update was run to update the Info Mediator configuration.

Workaround: After reconfiguration, use a text editor to edit the tibco.props file (located n the $OMNIHOME/probes/solaris2/ directory) and after the reconfiguration to change it to read as follows:

service :7530

Then restart the Info Mediator.

CSCed82090. Editing the Provider Edge router name (PE name) in ISC prevents polices from being triggered. The symptom is that the Actiontree logger displays the message "No SRs found on this interface."

CSCed87764. After rebooting the Cisco Info Center VPN Policy Manager host, the environment variable for the license file on a remote host is not set and an error message appears indicating that no license server is available.

Workaround: After rebooting the server, before starting the VPN Policy Manager components, issue the following command:

setenv LM_LICENSE_FILE 27000@<hostname>

where hostname is the name of the remote host that is running the Licensing component (the FLEXlm license server).

CSCin91898. The patch to Cisco Info Center 7.0.3 for Policy Manager 3.6.1 support is not supported on Solaris 9.

Known Issues with Related Products

Each application contained within the Cisco Info Center product architecture has an associated set of Release Notes containing product-specific issues. This information can be obtained from the Micromuse Support site:

http://support.micromuse.com/documentation/

Related Documentation

Each component contained within the Cisco Info Center product architecture has an associated set of documentation which can be obtained from Cisco Systems at this site:

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/info_ctr/3_6/index.htm

You can also obtain relevant documentation at this site:

http://support.micromuse.com/documentation/

For component-specific information, it is strongly recommended that you obtain and consult these documents. Issues such as licensing, connectivity and integration, and product specific features are described in the respective guides for each application.

This section describes the manuals in the Cisco Info Center documentation set and how to obtain access to them. The online versions of the Cisco Info Center documentation can be found on the Cisco Documentation CD, as well as on the Cisco Connection Online (CCO) at the following URL (unless otherwise noted):

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/info_ctr/3_6/index.htm.

Consult the following documents as required:

1. Cisco Info Center VPN Policy Manager Installation and User Guide, 3.1. This document is available on CCO at:

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/info_ctr/cic_pm31/ins_user/index.htm

2. Documentation Guide for Cisco Info Center, 3.6 (Part Number: 78-15967-01). This document is available in hard and soft copy. It is available on CCO at:

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/info_ctr/3_6/docguide/docguide.htm.

3. Release Notes for Cisco Info Center, 3.6 (this document). This document is available on CCO at:

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/info_ctr/3_6/relnotes/relnotes.htm.

4. Cisco Info Center Installation and Configuration Guide, 3.6 (Part Number: OL-4815-01). This document is available on CCO at:

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/info_ctr/3_6/install/install.htm.

5. Cisco Info Center Adminstrator Reference, 3.6, (Part Number: OL-4814-01). This document is available on CCO at:

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/info_ctr/3_6/admin/index.htm.

6. Cisco Info Center User Guide, 3.6 (Part Number: OL-4816-01). This document is available on CCO at:

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/info_ctr/3_6/user/index.htm.

7. Cisco Info Center Mediator Reference, 3.6 (Part Number: OL-4939-01). This document is available on CCO at:

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/info_ctr/3_6/med_ref/index.htm.

Obtaining Documentation

Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several ways to obtain technical assistance and other technical resources. These sections explain how to obtain technical information from Cisco Systems.

Cisco.com

You can access the most current Cisco documentation at this URL:

http://www.cisco.com/univercd/home/home.htm

You can access the Cisco website at this URL:

http://www.cisco.com

You can access international Cisco websites at this URL:

http://www.cisco.com/public/countries_languages.shtml

Ordering Documentation

You can find instructions for ordering documentation at this URL:

http://www.cisco.com/univercd/cc/td/doc/es_inpck/pdi.htm

You can order Cisco documentation in these ways:

Registered Cisco.com users (Cisco direct customers) can order Cisco product documentation from the Ordering tool:

http://www.cisco.com/en/US/partner/ordering/index.shtml

Nonregistered Cisco.com users can order documentation through a local account representative by calling Cisco Systems Corporate Headquarters (California, USA) at 408 526-7208 or, elsewhere in North America, by calling 800 553-NETS (6387).

Documentation Feedback

You can send comments about technical documentation to bug-doc@cisco.com.

You can submit comments by using the response card (if present) behind the front cover of your document or by writing to the following address:

Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883

We appreciate your comments.

Obtaining Technical Assistance

For all customers, partners, resellers, and distributors who hold valid Cisco service contracts, Cisco Technical Support provides 24-hour-a-day, award-winning technical assistance. The Cisco Technical Support Website on Cisco.com features extensive online support resources. In addition, Cisco Technical Assistance Center (TAC) engineers provide telephone support. If you do not hold a valid Cisco service contract, contact your reseller.

Cisco Technical Support Website

The Cisco Technical Support Website provides online documents and tools for troubleshooting and resolving technical issues with Cisco products and technologies. The website is available 24 hours a day, 365 days a year at this URL:

http://www.cisco.com/techsupport

Access to all tools on the Cisco Technical Support Website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a user ID or password, you can register at this URL:

http://tools.cisco.com/RPF/register/register.do

Submitting a Service Request

Using the online TAC Service Request Tool is the fastest way to open S3 and S4 service requests. (S3 and S4 service requests are those in which your network is minimally impaired or for which you require product information.) After you describe your situation, the TAC Service Request Tool automatically provides recommended solutions. If your issue is not resolved using the recommended resources, your service request will be assigned to a Cisco TAC engineer. The TAC Service Request Tool is located at this URL:

http://www.cisco.com/techsupport/servicerequest

For S1 or S2 service requests or if you do not have Internet access, contact the Cisco TAC by telephone. (S1 or S2 service requests are those in which your production network is down or severely degraded.) Cisco TAC engineers are assigned immediately to S1 and S2 service requests to help keep your business operations running smoothly.

To open a service request by telephone, use one of the following numbers:

Asia-Pacific: +61 2 8446 7411 (Australia: 1 800 805 227)
EMEA: +32 2 704 55 55
USA: 1 800 553 2447

For a complete list of Cisco TAC contacts, go to this URL:

http://www.cisco.com/techsupport/contacts

Definitions of Service Request Severity

To ensure that all service requests are reported in a standard format, Cisco has established severity definitions.

Severity 1 (S1)—Your network is "down," or there is a critical impact to your business operations. You and Cisco will commit all necessary resources around the clock to resolve the situation.

Severity 2 (S2)—Operation of an existing network is severely degraded, or significant aspects of your business operation are negatively affected by inadequate performance of Cisco products. You and Cisco will commit full-time resources during normal business hours to resolve the situation.

Severity 3 (S3)—Operational performance of your network is impaired, but most business operations remain functional. You and Cisco will commit resources during normal business hours to restore service to satisfactory levels.

Severity 4 (S4)—You require information or assistance with Cisco product capabilities, installation, or configuration. There is little or no effect on your business operations.

Obtaining Additional Publications and Information

Information about Cisco products, technologies, and network solutions is available from various online and printed sources.

Cisco Marketplace provides a variety of Cisco books, reference guides, and logo merchandise. Visit Cisco Marketplace, the company store, at this URL:

http://www.cisco.com/go/marketplace/

The Cisco Product Catalog describes the networking products offered by Cisco Systems, as well as ordering and customer support services. Access the Cisco Product Catalog at this URL:

http://cisco.com/univercd/cc/td/doc/pcat/

Cisco Press publishes a wide range of general networking, training and certification titles. Both new and experienced users will benefit from these publications. For current Cisco Press titles and other information, go to Cisco Press at this URL:

http://www.ciscopress.com

Packet magazine is the Cisco Systems technical user magazine for maximizing Internet and networking investments. Each quarter, Packet delivers coverage of the latest industry trends, technology breakthroughs, and Cisco products and solutions, as well as network deployment and troubleshooting tips, configuration examples, customer case studies, certification and training information, and links to scores of in-depth online resources. You can access Packet magazine at this URL:

http://www.cisco.com/packet

iQ Magazine is the quarterly publication from Cisco Systems designed to help growing companies learn how they can use technology to increase revenue, streamline their business, and expand services. The publication identifies the challenges facing these companies and the technologies to help solve them, using real-world case studies and business strategies to help readers make sound technology investment decisions. You can access iQ Magazine at this URL:

http://www.cisco.com/go/iqmagazine

Internet Protocol Journal is a quarterly journal published by Cisco Systems for engineering professionals involved in designing, developing, and operating public and private internets and intranets. You can access the Internet Protocol Journal at this URL:

http://www.cisco.com/ipj

World-class networking training is available from Cisco. You can view current offerings at this URL:

http://www.cisco.com/en/US/learning/index.html