Table Of Contents
Managing Groups
Understanding DFM Groups
Groups and ACS
Working with System Defined Groups
Common Services System Defined Groups
DFM System Defined Groups
Working with Customizable Groups
Using Group Management
Editing and Creating Groups
Editing a Group
Creating a Group
Understanding Rules
Finalizing Group Membership
Viewing the Group Summary
Viewing Group Details
Viewing Membership Details
Refreshing Membership
Deleting Groups
Managing Groups
These topics describe the process for configuring Device Fault Manager (DFM) groups:
•
Understanding DFM Groups
•Using Group Management
•Viewing Group Details
•Viewing Membership Details
•Refreshing Membership
•Deleting Groups
Understanding DFM Groups
DFM groups are created by DFM, and consist of interface, trunk port, and access port groups. Each group has a set of properties (such as a name, description, permission, etc.), and are defined by the group's associated rules.
What you see in the DFM group selector depends on the function you are using. Normally when you view the DFM group selector, some groups are displayed under DFM and other groups under Common Services, as shown in Figure 8-1.
•Common Services groups are created by Common Services when devices are added to the DCR. These are device groups. The group to which a device belongs is determined by Common Services group rules. Common Services groups include objects such as routers, switches, and hubs. All Common Services groups are shared with DFM—in other words, they are shown in the DFM user interface. Groups are only shown when they have members.
•DFM groups are created by DFM. These are interface, access port, and trunk port groups. The group to which a port or interface belongs is determined by DFM group rules. (DFM also provides some device groups, as explained later in this topic.)
Figure 8-1 shows the object selector, with some groups under Common Services and others under DFM.
Figure 8-1 Group Selector Showing Common Services and DFM Groups
As shown in Figure 8-2, the following types of groups are supported:
•System Defined Groups—The factory default groups in CiscoWorks. Common Services system defined groups consist of devices; DFM system defined groups consist of access ports, trunk ports, and interfaces.
You cannot delete a system defined group, nor can you modify the rules that determine the members of system defined groups.
For a description of each DFM and Common Services system defined group, see Working with System Defined Groups.
•User Defined Groups—Groups that you edit or create to reflect the way you manage the network. You can edit or create user defined groups for DFM and determine whether they can be viewed by other CiscoWorks users. User defined groups include the following:
–Customizable groups—Predefined groups that you can modify for your own purposes. DFM provides the four types of customizable groups: access port groups, trunk port groups, interface groups, and device groups. For a detailed description of customizable groups, see Working with Customizable Groups.
–Miscellaneous groups (to use with views in the Alerts and Activities display, or with notification groups in Notification Services). These are the only groups you can create. These appear in the Group Selector under User Defined Groups so you can view the group membership (device groups are created when the devices are added to the DFM inventory).
Figure 8-2 Group Selector Showing DFM Groups
Groups and ACS
The CiscoWorks Access Control Server (ACS) provides device-based filtering for many of the DFM user interfaces that use Group Administration. For more information on ACS, refer to Device-Based Filtering, page 11-8.
Working with System Defined Groups
The group selector displays some groups under DFM and other groups under Common Services. The Common Services groups are created by Common Services and are visible when devices are added to the DCR. These groups include groups such as Routers, Switches and Hubs, and IP Telephony. Refer to Common Services System Defined Groups for more information.
The DFM groups are created by DFM. These groups include Access Port Groups, Trunk Port Groups, and Interface Groups. Refer to DFM System Defined Groups for more information.
You can control the polling and thresholds settings for these groups using Configuration > Polling and Thresholds. Refer to Configuring Polling and Thresholds, page 10-1.
Note These system defined groups can be used when searching for devices using the Advanced Search option in the device selector. The search option is available from some DFM windows. For more information, see Searching for Objects Using the Device Selector, page 2-8.
Common Services System Defined Groups
The Common Services system defined groups, as shown in Figure 8-3, are visible to all CiscoWorks users, and are the factory default groups administered by Common Services. Not all system defined groups are shown in Figure 8-3 because groups only appear in the group selector when they have device members (in other words, devices in the DCR that belong to that group).
Figure 8-3 Group Selector Showing Common Services System Defined Groups
The following are the Common Services system defined groups:
•Broadband Cable
•Content Networking
•DSL and LRE
•Interfaces and Modules
•Network Management
•Optical
•Routers
•Security and VPN
•Server Fabric Switches
•Storage Networking
•Switches and Hubs
•Universal Gateways and Access Servers
•Unknown
•Voice and Telephony
•Wireless
For more information about Common Services system defined groups, refer to the Common Services online help.
DFM System Defined Groups
The DFM system defined groups, as shown in Figure 8-4, are visible to all CiscoWorks users, and are the factory default groups that are administered by DFM.
Figure 8-4 Group Selector Showing DFM System Defined Groups
The following are the DFM system defined groups:
•System defined access port groups:
–1 GB Ethernet
–10MB-100MB Ethernet
–ATM
–Others
•System defined interface groups:
–1 GB Ethernet
–10MB-100MB Ethernet
–ATM
–Backup
–Dial-on-Demand
–FDDI
–ISDN B channel
–ISDN D channel
–ISDN physical interface
–Others
–Serial
–Token Ring
•System defined trunk port groups:
–1 GB Ethernet
–10MB-100MB Ethernet
–ATM
–Others
Working with Customizable Groups
Because you cannot change the rules for system defined groups, DFM provides customizable groups that can contain the devices, ports, or interfaces in which you are interested. Port and interface containment is only seen and used by Polling and Thresholds (refer to Configuring Polling and Thresholds, page 10-1), but device groups will contain members when devices are added to the DFM inventory. Once you edit or create a group, you can determine whether other CiscoWorks users can view the group.
Figure 8-5 Group Selector Showing DFM Customizable Groups
Table 8-1 DFM Customizable Groups
Group Name
|
Use this group to monitor...
|
Settings you can configure for this group:
|
Customizable Access Port Groups
|
Access ports
|
Thresholds
|
Customizable Groups
|
Devices
|
Polling and thresholds
|
Customizable Interface Groups
|
Interfaces
|
Thresholds
|
Customizable Trunk Ports Groups
|
Trunk ports
|
Thresholds
|
For each of the parent groups listed in Table 8-1, DFM provides seven configurable subgroups. Table 8-2 describes the restrictions placed on the subgroups.
Table 8-2 Customizable Groups—Restrictions
Group Name
|
Restrictions
|
Customizable Group A
|
•Use to troubleshoot a single device (but can contain more than one device)
•Cannot be deleted
•Cannot have subgroups
•Cannot have name changed
|
Customizable Group B
|
Customizable Group C
|
Customizable Group 1
|
•Can contain multiple devices
•Cannot be deleted
•Cannot have subgroups
•Cannot have name changed
|
Customizable Group 2
|
Customizable Group 3
|
Customizable Group 4
|
Using Group Management
The Group Administration and Configuration page is where all group management activities take place. To open the Group Administration and Configuration page, from DFM or the CiscoWorks home page, select Configuration > Other Configurations > Group Administration or from the DFM home page select DFM Group administration.
Note If you are connecting to the DFM server for the first time, a Security Alert window is displayed after you select nearly any option. Do not proceed without viewing and installing the security certificate. For more information, see Responding to Security Alerts, page 2-10.
See Editing and Creating Groups for information on how to use Group Administration to create and edit groups. In addition to creating and editing groups, Group Management provides the following functions:
•Refreshing Membership
•Deleting Groups
Figure 8-6 shows an example of the Group Administration and Configuration page.
Figure 8-6 Group Administration and Configuration Page
Table 8-3 describes the fields in the Group Administration and Configuration page.
Table 8-3 Fields on Group Administration and Configuration Page
Field/Button
|
Description
|
Group Selector
|
A hierarchical display of all available groups.
|
Group Info
|
When you select an item from the Group Selector, the Group Info pane displays the following information:
•Group Name—The name of the group you selected.
•Type—The type of objects in the selected group.
•Description—A text description of the group.
•Created By—The person who created the group.
•Last Modified By—The last person to modify the group settings.
|
Create
|
Starts the Group Creation Wizard for creating a group, as described in Editing a Group.
|
Edit
|
Starts the Group Edit Wizard for editing user defined groups, as described in Editing a Group. (Not supported for view groups created from the Alerts and Activities Defaults page.)
|
Details
|
Opens the Properties: Details page, as described in Viewing Group Details.
|
Refresh
|
Refreshes a group's membership, as described in Refreshing Membership. Not supported for port and interface groups.
|
Delete
|
Deletes a group, as described in Deleting Groups.
|
Editing and Creating Groups
The processes for editing and creating groups are similar. Keep these points in mind:
•You can edit user defined customizable subgroups, for example, the subgroup Customizable Group 1 under Customizable Access Port Groups. These subgroups are listed in Working with Customizable Groups.
•You can create or edit user defined miscellaneous groups (to use with, for example, views in the Alerts and Activities display, or with notification groups in Notification Services). For example, you could create a group called test, which would appear directly under DFM User Defined Groups in the DFM group selector. (You cannot edit view groups created from the Alerts and Activities Defaults page.)
DFM uses the Group Creation Wizard to guide you through the steps required to create or edit a group. The wizard consist of four steps:
1. Setting properties (for details, see Editing a Group and Editing a Group).
2. Creating rules (for details, see Understanding Rules).
3. Modifying group membership (for details, see Finalizing Group Membership).
4. Viewing the summary (for details, see Viewing the Group Summary).
Editing a Group
You can edit the properties of user defined customizable port, interface, and device groups. You can also edit miscellaneous user defined groups you created using Group administration. (However, you cannot edit view groups you created using the Alerts and Activities Defaults page.)
Step 1 From DFM or the CiscoWorks home page, select Configuration > Other Configurations > Group Administration, or select DFM Group administration from the DFM home page. The Group Administration and Configuration page appears.
Note If you are connecting to the DFM server for the first time, a Security Alert window is displayed after you select nearly any option. Do not proceed without viewing and installing the security certificate. For more information, see Responding to Security Alerts, page 2-10.
Step 2 In the Group Selector, select the group you want to edit.
Step 3 Click Edit. The Properties: Edit page appears, as shown in Figure 8-7.
Figure 8-7 Properties: Edit Page
Step 4 You can modify the following in the Properties: Edit page:
•Group Name (will be automatically populated when editing customizable subgroups; for example, Customizable Group 1 under Customizable Access Port Groups)
•Description
•Membership update type (not supported for port and interface groups)
Note The parent group is displayed, but it cannot be modified.
•Visibility Scope
Step 5 Click Next. The Rules: Edit page appears. For more information on creating rules, see Understanding Rules.
Note If you need to return to any of the previous pages in the wizard, click Back.
Step 6 You can add new rules or delete existing rules in the Rules: Edit page.
To add a new rule:
a. From the first list, select a logical operator (applicable when there are multiple rule expressions).
Note The list of logical operators is enabled after at least one rule expression is entered.
b. From the Object Type list, select an object type.
Note All object types contain the prefix :DFM:VASA:DFMObject, which sets the domain for the rule. Meaningful object information follows the prefix.
c. From the Variable list, select a variable.
d. From the Operator list, select an operator.
e. In the Value field, enter a value.
f. Click Add Rule Expression. The rule expression appears in the Rule Text box.
Note You can manually add or change any of the text in the Rule Text box. If you enter a single backslash (\), an error is displayed. To enter a single backslash in the Rule Text box, you must type two backslashes (\\) in place of the single backslash. You should always check the syntax after changing a rule expression.
g. If you have added complex rules (containing both AND and OR conditions), you must manually enter parentheses, as in the following example:
(:DFM:VASA:DFMObject:AccessPort.Mode equals "" OR
:DFM:VASA:DFMObject:AccessPort.Mode contains "BACKUP" OR
:DFM:VASA:DFMObject:AccessPort.Mode contains "NORMAL") AND
(:DFM:VASA:DFMObject:AccessPort.DuplexMode contains "HALFDUPLEX" OR
:DFM:VASA:DFMObject:AccessPort.DuplexMode contains "FULLDUPLEX")
h. To verify that the syntax of the rule is correct, click Check Syntax. A dialog box appears, stating that the syntax is valid. Click OK.
i. If you want to view the rules for the parent group, select View Parent Rules.
Note All rules assigned to a parent group also apply to any of its subgroups.
j. Click Next. The Membership: Edit page appears.
To delete a rule:
a. In the Rule Text box, select the entire rule text and press the Delete key.
After deleting the rule, you must click the page so that the page can refresh, removing the list of logical operators.
b. Click Next. The Membership: Edit page appears.
Step 7 You can add or remove specific objects from the group membership (not supported for port and interface groups).
Note The group's rule captures the list of objects that are added to or deleted from the group. The rule will contain an Includelist and/or Excludelist section to reflect this.
Although it is acceptable for a rule to have more than one Includelist or Excludelist, the recommended practice is to consolidate them, forming one Includelist and one Excludelist. Check for duplicates across both lists and ensure that no device is both included and excluded.
To add an object:
a. In the Available Objects from Parent Group column, select the device to add.
b. Click Add.
To remove an object:
a. In the Objects Matching Membership Criteria column, select the device to remove.
b. Click Remove.
Step 8 Click Next. The group's information appears in the Summary: Edit page.
Step 9 Click Finish. A dialog box appears, stating that changes to the group have been saved. Click OK.
Creating a Group
Creating groups is only supported for user defined miscellaneous groups. Once created, you can edit these groups.
Note When you create a group, at least one device must be in the known managed state.
Step 1 From DFM or the CiscoWorks home page, select Configuration > Other Configurations > Group Administration, or select DFM Group administration from the DFM home page. The Group Administration and Configuration page appears.
Note If you are connecting to the DFM server for the first time, a Security Alert window is displayed after you select nearly any option. Do not proceed without viewing and installing the security certificate. For more information, see Responding to Security Alerts, page 2-10.
Step 2 In the Group Selector, select User Defined Groups.
Step 3 Click Create. The Properties: Create page appears, as shown in Figure 8-8.
Figure 8-8 Properties: Edit Page
Step 4 Enter a group name for the new group.
Step 5 If you do not want to copy the attributes of an existing group to your new group, proceed to Step 6. If you want to copy the attributes of an existing group to the new group, do the following:
Note All attributes except the group name are copied to the new group.
a. Click Select Group. The Replicate Attributes page appears.
b. Select the group from which you want to copy the attributes.
c. Click OK.
Step 6 If you want to change the parent group (the location where the group will reside in the Group Selector), do the following:
a. Click Change Parent. The Select Parent page appears.
b. Select the parent group.
c. Click OK.
Step 7 (Optional) Enter a description.
Step 8 Choose how you want the group membership updated (this choice is not displayed for port and interface groups):
•If you want the membership for this group updated automatically, select Automatic.
•If you want the membership for this group updated only when the Refresh button is clicked, select Only upon user request.
Step 9 Select a Visibility Scope:
•Available to Created User Only
•Available to All CiscoWorks Users
Step 10 Click Next. The Rules: Create page appears. (For more information on creating rules, see Understanding Rules.)
Do one of the following:
•To create rules to apply to the group, go to Step 11.
•Click Next and select the objects on the Membership: Create page (not supported for port and interface groups). Then go to Step 12.
Note If you need to return to any of the previous pages in the wizard, click Back.
Step 11 Create all rules that you want to apply to the group:
a. Select a logical operator (applicable when there are multiple rule expressions).
Note The list of logical operators is enabled after at least one rule expression is entered.
b. Select an object type.
Note All object types contain the prefix :DFM:VASA:DFMObject, which sets the domain for the rule. Meaningful object information follows the prefix.
c. Select a variable.
d. Select an operator.
e. In the Value field, enter a value.
f. Click Add Rule Expression. The rule expression appears in the Rule Text box.
Note You can manually add or change any of the text in the Rule Text box. If you enter a single backslash (\), an error is displayed. To enter a single backslash in the Rule Text box, you must type two backslashes (\\) in place of the single backslash. You should always check the syntax after changing a rule expression.
g. If you have added complex rules (containing both AND and OR conditions), you must manually enter parentheses, as in the following example:
(:DFM:VASA:DFMObject:AccessPort.Mode equals "" OR
:DFM:VASA:DFMObject:AccessPort.Mode contains "BACKUP" OR
:DFM:VASA:DFMObject:AccessPort.Mode contains "NORMAL") AND
(:DFM:VASA:DFMObject:AccessPort.DuplexMode contains "HALFDUPLEX" OR
:DFM:VASA:DFMObject:AccessPort.DuplexMode contains "FULLDUPLEX")
h. To verify that the rule syntax is correct, click Check Syntax. A dialog box appears, stating the syntax is valid. Click OK.
i. If you want to view the rules for the parent group, select View Parent Rules.
Note All rules assigned to a parent group also apply to any of its subgroups.
j. Click Next. The Membership: Create page appears.
Step 12 You can add or remove specific objects from the group membership (not supported for port and interface groups).
Note The group's rule captures the list of objects that are added to or deleted from the group. The rule will contain an Includelist and/or Excludelist section to reflect this.
Although it is acceptable for a rule to have more than one Includelist or Excludelist, the recommended practice is to consolidate them, forming one Includelist and one Excludelist. Check for duplicates across both lists and ensure that no object is both included and excluded.
To add an object:
a. In the Available Objects from Parent Group column, select the devices to add.
b. Click Add.
To delete an object:
a. In the Objects Matching Membership Criteria column, select the devices to remove.
b. Click Remove.
Step 13 Click Next. The group's information appears in the Summary: Create page.
Step 14 Click Finish. A dialog box appears, stating that changes to the group have been saved. Click OK.
Understanding Rules
Every group is defined by a set of rules. A rule set contains a Boolean combination of individual rule expressions.
Rules are created to filter in the objects that you want to belong to the group, and to filter out those that you do not want in the group. When determining which objects belong to a group, Group Management compares object information to the rule. If an object's information satisfies all of the rule's requirements, it is placed in the group.
One or more rule expressions can be applied to form a rule. Each rule expression contains the following:
<Object Type>.<Variable> <Operator> <Value>
For example:
:DFM:VASA:DFMObject:Device:Routers.Location equals "San Jose"
Note Complex rules that contain both OR and AND conditions require you to edit the rule manually. For example, all parentheses in the following rule must be added in the Rule Text field:
(:DFM:VASA:DFMObject:AccessPort.Mode equals "" OR
:DFM:VASA:DFMObject:AccessPort.Mode contains "BACKUP" OR
:DFM:VASA:DFMObject:AccessPort.Mode contains "NORMAL") AND
(:DFM:VASA:DFMObject:AccessPort.DuplexMode contains "HALFDUPLEX" OR
:DFM:VASA:DFMObject:AccessPort.DuplexMode contains "FULLDUPLEX")
Rules are defined through the Group Creation Wizard on the Rules: Create and Rules: Edit pages. You can define the Object Type, Variable, Operator, and Value. For multiple rules, you can also define the Logical Operator.
Logical Operators
The logical operator field appears when you are defining multiple rules, which can be the following:
•OR—Include devices that fulfill the requirements of either rule.
For interface, access port, and trunk port groups, this operator can only be used between the variables of the same type, as in the following valid rule:
:DFM:VASA:DFMObject:AccessPort.DuplexMode equals "HALFDUPLEX" OR
:DFM:VASA:DFMObject:AccessPort.DuplexMode equals "FULLDUPLEX"
If you used an AND operator in the previous port rule, it would be invalid.
•AND—Include only objects that fulfill the requirements of both rules.
For interface, access port, and trunk port groups, this operator can only be used between the variables of different types, as in the following example:
:DFM:VASA:DFMObject:AccessPort.Mode equals "" AND
:DFM:VASA:DFMObject:AccessPort.DuplexMode equals "FULLDUPLEX"
If you used an OR operator in the previous rule, it would be invalid.
For device groups, this operator can only be used between variables of the same type, as in the following example:
:DFM:VASA:DFMObject:Device:Routers.Model equals "12816" AND
:DFM:VASA:DFMObject:Device:Routers.Model equals "12810"
The following would be an invalid rule for a device group:
:DFM:VASA:DFMObject:Device:Routers.Model equals "12816" AND
:DFM:VASA:DFMObject:Device:SwitchesAndHubs.Type equals "6509"
In the previous example, you would have to use the OR operator.
•EXCLUDE—Do not include these devices.
Object Type
The Object Type field lists the available objects that you can use to form a group. All rule expressions begin with the same object type, :DFM:VASA:DFMObject, which sets the domain for the rule, and is at the top of the hierarchy.
In the Object Type field you will see the following choices:
:DFM:VASA:DFMObject:AccessPort
:DFM:VASA:DFMObject:TrunkPort
:DFM:VASA:DFMObject:Interface
:DFM:VASA:DFMObject:Device:Cable
:DFM:VASA:DFMObject:Device:ContentNetworking
:DFM:VASA:DFMObject:Device:InterfacesAndModules
:DFM:VASA:DFMObject:Device:NetworkManagement
:DFM:VASA:DFMObject:Device:Optical
:DFM:VASA:DFMObject:Device:Routers
:DFM:VASA:DFMObject:Device:SecurityAndVPN
:DFM:VASA:DFMObject:Device:StorageNetworking
:DFM:VASA:DFMObject:Device:SwitchesAndHubs
:DFM:VASA:DFMObject:Device:UniversalGatewaysAndAccessServers
:DFM:VASA:DFMObject:Device:VoiceAndTelephony
:DFM:VASA:DFMObject:Device:Wireless
:DFM:VASA:DFMObject:DSLAndLRE
:DFM:VASA:DFMObject:Group
Variable
The Variable field lists the possible attributes for the selected object type to be used for the rule. The list of possible variables changes based on the object type that is selected. Some variables for port and interface groups are described in Table 8-4.
Operator
The Operator field defines the operator to be used in the rule. The list of possible operators changes based on the object type and the variable selected.
Note When using the equals operator, the rule is case-sensitive.
Value
The Value field describes the value of the rule expression. The possible values depend upon the object type, variable, and operator selected. Depending on the operator selected, the value may be free-form text or a list of values.
Most of the values that can be entered in the Value field of the Rules: Edit page are self-evident, but some of the objects in the Variables field have special meanings or restrictions on how to enter the related attribute in the Value field.
Table 8-4 describes the objects that appear in the Variable field of the Rules: Edit page that might need further explanation.
Table 8-4 Explanations for the Values of Special Variables
Variable
|
Explanation
|
DuplexMode
|
Duplex mode (FULLDUPLEX, HALFDUPLEX, or UNSPECIFIED).
|
InterfaceCode
|
Interface types, protocols, or encapsulations.
|
MaxSpeed
|
Maximum speed, in bits per second.
|
MaxTransferSpeed
|
Speed of the largest datagram that can be sent or received, specified in octets. For interfaces that use transmitting network datagrams, speed of the largest network datagram that can be sent.
|
Mode
|
Intended purpose (for example, for interfaces, backup, dial-on-demand, and so forth).
|
Name
|
Name of object.
|
SystemModel
|
Name by which system is generally known.
|
SystemName
|
Name of system containing this element.
|
SystemObjectID
|
System Object Identifier associated with vendor of system.
|
SystemVendor
|
Name of system's supplier.
|
Type
|
Type of element (for example, interface), distinguished according to the physical/link protocol(s) immediately below the network layer in the protocol stack.
|
Note After you have defined the rule, you should verify the syntax. You can do this on the Rules: Edit page.
Figure 8-9 shows an example of the Rules: Edit page.
Figure 8-9 Rules: Edit Page
Table 8-5 describes the remaining fields on the Rules: Edit page of the Group Creation Wizard.
Table 8-5 Fields on the Rules: Edit Page
Field/Button
|
Description
|
Add Rule Expression
|
Used to add the rule expression to the group rules.
|
Rule Text
|
Displays the rule. For complex rules (which contain both OR and AND conditions), you must manually add parentheses in this field. (In Editing a Group, see Step 11; in Editing a Group, see Step 6.)
|
Check Syntax
|
Verifies that the rule syntax is correct.
|
View Parent Rules
|
Used to view the parent group rules.
Note All parent group rules apply to the subgroups.
|
Examples of Rules
You want to create a group that contains all interfaces using full duplex mode in the Dallas location. Form the following rule:
:VASA:DFMObject:Interface.Duplex.Mode contains "FULLDUPLEX" AND Location contains "Dallas"
•:Object Type—DFM:VASA:DFMObject:Interface
•Variable—Duplex.Mode
•Operator—Contains
•Value—"FULLDUPLEX"
•Logical Operator—And
•Variable—Location
•Operator—contains
•Value—"Dallas"
You want to create a group that contains all of the security and VPN devices in the San Jose location. Form the following rule:
:DFM:VASA:DFMObject:Device:SecurityAndVPN.Location contains "SanJose"
•Object Type—DFM:VASA:DFMObject:Device:SecurityAndVPN
•Variable—Location
•Operator—Contains
•Value—"San Jose"
Note To help you to better understand group rules, you may want to look at the rules used for system defined groups. These rules appear in the Properties: Details page. For a description of the Properties: Details page, see Viewing Group Details.
Finalizing Group Membership
After the group rules have been defined, they are evaluated, and you can view the group's members (except for port and interface groups, which are only used for polling and threshold purposes). In addition, the group membership can be modified by adding or removing specific objects. The group rule will be automatically modified to reflect the objects that were added or removed from the group. You add or remove specific objects from a group's membership in the Membership: Edit page of the Create Group Wizard.
Viewing the Group Summary
The final step in the Create Group Wizard is a summary page that displays the new group's definition. Figure 8-10 shows an example of the Summary: Edit page.
Figure 8-10 Summary: Edit Page
Table 8-6 describes the fields on the Group Summary page of the Group Creation Wizard.
Table 8-6 Fields on the Group Summary Page
Heading/Button
|
Description
|
Group Name
|
Name of the group you are creating.
|
Parent Group
|
The parent group of the group you are creating.
|
Description
|
A text description of the group.
|
Membership Update
|
How group membership is updated. Membership updates can be automatic (updated every time the group is accessed) or can be upon user request only (updated only when you click the Refresh button).
|
Rules
|
The rules used to filter group membership.
|
Visibility Scope
|
Setting that determines whether all CiscoWorks users or only the created user can view the group.
|
Viewing Group Details
A group's information is displayed on the Properties: Details page.
Step 1 From DFM or the CiscoWorks home page, select Configuration > Other Configurations > Group Administration, or select DFM Group administration from the DFM home page. The Group Administration and Configuration page appears.
Note If you are connecting to the DFM server for the first time, a Security Alert window is displayed after you select nearly any option. Do not proceed without viewing and installing the security certificate. For more information, see Responding to Security Alerts, page 2-10.
Step 2 In the Group Selector, select the group for which you want to view details.
Step 3 Click Details. The Properties: Details page appears (see Figure 8-11).
Figure 8-11 Properties: Details Page
Table 8-7 describes the fields on the Properties: Details page.
Table 8-7 Fields on the Properties: Details Page
Heading/Button
|
Description
|
Group Name
|
Name of the group you are viewing.
|
Parent Group
|
The parent group of the group you are viewing.
|
Type
|
The type of the objects that belong to the group.
|
Description
|
A text description of the group.
|
Membership Update
|
How group membership is updated. Membership updates can be automatic (updated every time the group is accessed) or can be upon user request only (updated only when you click the Refresh button).
|
Created By
|
The person who created the group.
|
Last Modified By
|
The last person to modify the group.
|
Rules
|
The rules used to filter group membership.
|
View Parent Rules
|
Used to view the parent group rules.
Note All parent group rules apply to the subgroups.
|
Membership Details
|
Used to view the list of devices that belong to the group. Does not apply to port and interface groups.
|
Cancel
|
Closes the page and takes you back to the Group Administration and Configuration page.
|
Viewing Membership Details
You can view a list of the objects that belong to a group by accessing the Properties: Details page. Membership is not displayed for port and interface groups, which are used only for polling and threshold purposes.
Step 1 From DFM or the CiscoWorks home page, select Configuration > Other Configurations > Group Administration, or select DFM Group administration from the DFM home page. The Group Administration and Configuration page appears.
Note If you are connecting to the DFM server for the first time, a Security Alert window is displayed after you select nearly any option. Do not proceed without viewing and installing the security certificate. For more information, see Responding to Security Alerts, page 2-10.
Step 2 In the Group Selector, select the group for which you want to view details.
Step 3 Click Details. The Properties: Details page appears.
Step 4 Click Membership Details. The Membership: Details page appears.
Table 8-8 describes the fields on the Membership: Details page.
Table 8-8 Fields on the Membership: Details Page
Heading/Button
|
Description
|
Name
|
Name of the device for which you want to view membership details.
|
Object Type
|
The type of object for which you want to view details.
|
Property Details
|
Takes you back to the Properties: Details page.
|
Cancel
|
Closes the page and takes you back to the Group Administration and Configuration page.
|
Refreshing Membership
Refreshing a group's membership forces the group to recompute its membership by reevaluating its rules and obtaining membership information from the data collectors. Port and interface group membership listings are not supported, because these groups are only used for polling and threshold purposes.
Step 1 From DFM or the CiscoWorks home page, select Configuration > Other Configurations > Group Administration, or select DFM Group administration from the DFM home page. The Group Administration and Configuration page appears.
Note If you are connecting to the DFM server for the first time, a Security Alert window is displayed after you select nearly any option. Do not proceed without viewing and installing the security certificate. For more information, see Responding to Security Alerts, page 2-10.
Step 2 In the Group Selector, select the group you want to refresh.
Step 3 Click Refresh.
Step 4 In the confirmation dialog box, click Yes. In the next dialog box, click OK.
Deleting Groups
You can only delete user defined groups that are not one of the seven customizable groups.
Step 1 From DFM or the CiscoWorks home page, select Configuration > Other Configurations > Group Administration, or select DFM Group administration from the DFM home page. The Group Administration and Configuration page appears.
Note If you are connecting to the DFM server for the first time, a Security Alert window is displayed after you select nearly any option. Do not proceed without viewing and installing the security certificate. For more information, see Responding to Security Alerts, page 2-10.
Step 2 In the Group Selector, select the group you want to delete.
Step 3 Click Delete.
Step 4 In the confirmation dialog box, click Yes. In the next dialog box, click OK.
Edit, Refresh, and Delete cause internal processes to start. For this reason, DFM could experience a period of high CPU utilization after these processes are triggered.
