Feedback
|
Table Of Contents
Release Notes for
Cisco IP Solution Center, 3.1Documentation Road Map for Cisco IP Solution Center, 3.1
What Is New in Release 3.1 of ISC
Firewall Service Module (FWSM) Support for Catalyst 6500 and Cisco 7600
MPLS VPN Carrier Supporting Carrier (CSC) Support
Virtual Private LAN Services (VPLS) Provisioning
VPN Service Module (VPNSM) Support for Catalyst 6500 and Cisco 7600
Known Problems in Cisco IP Solution Center, Release 3.1
Obtaining Technical Assistance
Obtaining Additional Publications and Information
Release Notes for
Cisco IP Solution Center, 3.1
May 29, 2007
Note
All documentation, including this Release Notes for Cisco IP Solution Center, 3.1 document and any or all of the parts of the Release 3.1 documentation set, may be upgraded.
The Cisco IP Solution Center software is referred to as ISC.
The information in this Release Notes for Cisco IP Solution Center, 3.1 document gives you an overview of this release and helps you understand it at a high level. Please read this document prior to reading any other manual for ISC.
All ISC patches are available at: http://www.cisco.com/cgi-bin/tablebuild.pl/isc (where in tablebuild.pl, the last character is the lower-case letter "l").
Note
To download and upload configuration files to and from the VPN 3000 concentrator, the only supported mechanism is SSH.
Note
If one or more users is logged into a VPN 3000 concentrator through a web interface or through telnet, ISC cannot download to the VPN 3000. Prior to deploying a service request in ISC for a VPN 3000, you need to log out of all active sessions to this VPN 3000.
Note
The supported Sybase and Oracle databases behave differently. All GUI queries are case insensitive for Sybase and case sensitive for Oracle.
Contents
The information in this release note is organized into the following sections:
•
Documentation Road Map for Cisco IP Solution Center, 3.1
•
What Is New in Release 3.1 of ISC
•
Known Problems in Cisco IP Solution Center, Release 3.1
•
Obtaining Technical Assistance
•
Obtaining Additional Publications and Information
Introduction
Cisco IP Solution Center (ISC), 3.1 is a follow-on release to Cisco IP Solution Center (ISC), 3.0.
This product uses the web-based GUI introduced in ISC 3.0 to improve usability. This product also uses the four-tiered architecture introduced in ISC 3.0 and designed for modularity, reusability, front-end scalability, back-end scalability, and high availability. All the ISC solutions: L2VPN Management (including the new feature Virtual Private LAN Services (VPLS)), MPLS VPN Management, and Security Management, as well as Quality of Service (QoS) are distributed on the same product CD. Security Management is a combination of IPsec, Firewall, and Network Address Translation (NAT), all of which are individually licensed. The types of IPsec are all licensed as one: IPsec Site-to-Site; IPsec Remote Access; and Network-based IPsec VPN Management (the mapping of IPsec to MPLS).
The ISC solutions all continue to provide features such as provisioning, auditing, and service level agreement (SLA) monitoring. These solutions provide network and service management for service providers. They allow service providers to seamlessly provision and manage intranet and extranet VPNs. The MPLS VPN Management and Security Management focus on provisioning, auditing, and monitoring the links between a customer's edge routers through the service provider's network.
For more details, please see the "What Is New in Release 3.1 of ISC" section.
Materials
When you order the Cisco IP Solution Center product, you receive the following:
•
Cisco IP Solution Center, 3.1 product CD-ROM
•
Right to Use (RTU) documents that each contain a license key
•
The Documentation Guide for Cisco IP Solution Center, 3.1 is printed and distributed with all services.
For more information about ISC, see the following.
•
Documentation Guide for Cisco IP Solution Center, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/docguide
•
This document - Release Notes for Cisco IP Solution Center, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/relnotes
•
Cisco IP Solution Center Installation Guide, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/install
•
Cisco IP Solution Center Infrastructure Reference, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/infrastr
•
Cisco IP Solution Center System Error Messages, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/mess
•
Cisco IP Solution Center, 3.1: L2VPN Management User Guide, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/l2vpn
•
Cisco IP Solution Center, 3.1: MPLS VPN Management User Guide, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/mpls
•
Cisco IP Solution Center, 3.1: Network-Based IPsec VPN Management User Guide, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/netbased
•
Cisco IP Solution Center, 3.1: Quality of Service Management User Guide, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/qos
•
Cisco IP Solution Center, 3.1: Security Management User Guide, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/secmgmt
•
Cisco IP Solution Center, 3.1: API Programmer Guide, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/api/apipg
•
Index: Cisco IP Solution Center, 3.1: API Programmer Reference, 3.1 http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/api/apiref
Note
All documentation may be upgraded.
Documentation Road Map for Cisco IP Solution Center, 3.1
This section describes documentation resources to help you find information about the Cisco IP Solution Center (ISC).
We recommend you refer to the documentation in the following order:
1.
Documentation Guide for Cisco IP Solution Center, 3.1. The printed version of this document is shipped with the product. (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/docguide)
The contents of this document are:
- Product Documentation Set - URLs for all the documentation in this documentation set.
- Obtaining Documentation
- Obtaining Technical Assistance
- Obtaining Additional Publications and Information
2.
Release Notes for Cisco IP Solution Center, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/relnotes)
The contents of this document are:
–
Introduction
–
Materials
–
Documentation Road Map for Cisco IP Solution Center, 3.1
–
What is New in Release 3.1 of ISC
–
System Recommendations
–
Known Problems in Cisco IP Solution Center, Release 3.1
–
Obtaining Documentation
–
Obtaining Technical Assistance
–
Obtaining Additional Publications and Information
3.
Cisco IP Solution Center Installation Guide, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/install)
The contents of this document are:
–
System Recommendations
–
Installing and Logging Into ISC
–
Setting Up Oracle for ISC
–
Setting Up Cisco CNS IE2100 Appliances Running Cisco CNS Configuration Engine 1.3.x Software with ISC
–
Backup and Restore of ISC Repository and Standby System
4.
Cisco IP Solution Center Infrastructure Reference, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/infrastr)
The contents of this document are:
–
Getting Started
–
WatchDog Commands
–
Structural Overview
–
Service Inventory > Inventory and Connection Manager
–
Service Inventory > Inventory and Connection Manager > Inventory Manager
–
Service Inventory > Deployment Flow Manager and Service Inventory > Device Console
–
Service Design
–
Monitoring
–
Administration
–
Cisco CNS IE2100 Appliances
–
Property Settings
–
Glossary
5.
Cisco IP Solution Center System Error Messages, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/mess)
The contents of this document are:
–
API Message Format
–
System Error Messages
The following documents are listed alphabetically. They are specific to services for which you purchase licenses.
•
Cisco IP Solution Center, 3.1: L2VPN Management User Guide, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/l2vpn)
The contents of this document are:
–
ISC L2VPN and VPLS Concepts
–
Setting up the ISC Service
–
Creating an L2VPN Policy
–
Managing an L2VPN Service Request
–
Creating a VPLS Policy
–
Managing a VPLS Service Request
–
Auditing and Reports
•
Cisco IP Solution Center, 3.1: MPLS VPN Management User Guide, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/mpls)
The contents of this document are:
–
IP Solution Center—MPLS VPN
–
Inventory Management
–
MPLS VPN Service Policies
–
MPLS VPN Service Requests
–
Provisioning Regular PE-CE Links
–
Provisioning MVRFCE PE-CE Links
–
Provisioning Management VPN
–
Provisioning Cable Service
–
Provisioning Carrier Supporting Carrier
–
Provisioning Multiple Devices
–
Setting Up the Network
–
Service Request Transition States
•
Cisco IP Solution Center, 3.1: Network-Based IPsec VPN Management User Guide, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/netbased)
The contents of this document are:
–
ISC Network-Based IPsec VPN Concepts
–
Preparing for Network-Based IPsec VPN Provisioning
–
One-Box Solution for IPsec to MPLS Mapping
–
Two-Box Solution for IPsec to MPLS Mapping
–
Provisioning Network-Based IPsec VPN Services
•
Cisco IP Solution Center, 3.1: Quality of Service Management User Guide, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/qos)
The contents of this document are:
–
ISC Quality of Service Concepts
–
Network Architecture
–
QoS Service Model Overview
–
Prerequisites and Assumptions
–
Provisioning Process for IP QoS
–
QoS Policy Parameters
–
Applying QoS Policies to VPN Services
–
Auditing and Reports
–
Sample Configurations
•
Cisco IP Solution Center, 3.1: Security Management User Guide, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/secmgmt)
The contents of this document are:
–
ISC Security Concepts
–
Preparing for Security Provisioning
–
Site-to-Site VPN Services
–
Remote Access VPN Services
–
NAT Services
–
Firewall Services
–
Provisioning Services
–
Updating and Modifying Pre-shared Keys
The following are the Application Program Interface (API) documents:
•
Cisco IP Solution Center, 3.1: API Programmer Guide, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/api/apipg)
The contents of this document are:
–
Introduction
–
Getting Started
–
Common APIs
–
Using Templates
–
MPLS Provisioning
–
L2VPN Provisioning
–
QoS Provisioning
–
GUI to API Mapping
•
Index: Cisco IP Solution Center, 3.1: API Programmer Reference, 3.1 (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_1/api/apiref)
The contents of this index are:
–
XML Examples
–
Keywords List
What Is New in Release 3.1 of ISC
The following topics (listed alphabetically) are new or the implementation was changed dramatically from ISC Release 3.0 to this ISC Release 3.1. Additionally, bug fixes are included in this release.
•
Firewall Service Module (FWSM) Support for Catalyst 6500 and Cisco 7600
•
MPLS VPN Carrier Supporting Carrier (CSC) Support
•
Virtual Private LAN Services (VPLS) Provisioning
•
VPN Service Module (VPNSM) Support for Catalyst 6500 and Cisco 7600
API Support
ISC API support now includes the following:
•
IPsec provisioning support, including service policies and service requests for the following policy types:
–
Site-to-Site VPN (IPsec; IPsec + GRE; DMVPN; Easy VPN)
–
Network-based VPN (IPsec; IPsec + GRE)
–
Remote Access VPN
•
Creation of a Firewall Service Module (FWSM) device
•
Asynchronous notifications for database change events
•
Support for multi-VRFCE (MVRFCE) networks (managing the PE to MVRFCE to CE link). The policy types added are:
–
PE_MVRFCE_CE
–
PE_MVRFCE_NO_CE
•
Support for Service Request Wait Flag (Block until Service Request completes)
•
Support for output XML to a file in comma separated (CSV) format
•
Support for Exec Query (SQL like queries for any database information)
•
Support for View of Configuration Files
•
Improved support for templates including template formatting and Template Definition support.
•
Improved Task Support, including full audit support.
•
SLA features (SLA probes; SLA collections; and SLA reporting) are unsupported.
Additionally, Corba API backward compatibility to VPNSC is not available.
Backup and Restore
To protect your data against operating system crashes, file corruption, disk failures, and total machine failure, ISC 3.1 provides the capability to make backups of your database and to restore data from a backup. ISC 3.1 also provides a procedure to set up a cold stand-by system. Note that a cold stand-by system is different from a hot stand-by (High Availability) system, which is based on Sun™ Cluster architecture.
Firewall Service Module (FWSM) Support for Catalyst 6500 and Cisco 7600
ISC now supports the high throughput Firewall Service Module (FWSM) 1.1 that can connect to the Catalyst 6500 bus or the switch fabric module or to the Cisco 7600 router. The same mechanisms that were used in ISC 3.0 to support the provisioning of security policies on PIX Firewall will be used for the FWSM. Provisioning of network address translation (NAT) on a FWSM is also supported in ISC 3.1.
ISC prepares the Catalyst 6500 switch and Cisco 7600 router for use by other ISC modules, for example VLAN management and VLAN interface assignment. ISC supports the application of Firewall Policies on FWSM 1.1.
High Availability Support
ISC supports Sun™ Cluster Release 3.0 with Update 3 in Failover mode. Sun™ Cluster offers mainframe-class reliability and availability. It is designed to deliver high availability through automatic fault detection recovery, ensuring that your mission-critical applications and services are available when you need them.
ISC supports two nodes in this High Availability (HA) cluster. This support is only for the control tier, known as the Master server and to get this support, you must choose HA Master as your first server when installing ISC.
Metro Ethernet QoS
In ISC 3.1, there is a GUI implementation to deploy an Ethernet QoS policy to the 3550, and 4x00 Catalyst switches in a provider's network, features required for these platforms in the Metro Ethernet (ME) Release 2.1 Solution. The ME QoS Application Program Interface (API) is unsupported.
MPLS VPN Carrier Supporting Carrier (CSC) Support
MPLS supports the Carrier supporting Carrier (CSC) deployment scenario using LDP/IGP and BGP/MPLS.
Ring Topology
Previously, Named Physical Circuits (NPCs) could only support linear connectivity between CE, CLEs, and PE. In ISC 3.1, support is now available for ring connectivity. A ring is three or more nodes, and the nodes in a ring can be PE_CLE, PE_POP, or MVRF_CE. Ring creation using the Ring Editor is needed before using this ring while creating an NPC.
Virtual Private LAN Services (VPLS) Provisioning
ISC 3.1 provides Virtual Private LAN Services (VPLS) support in addition to point-to-point L2VPN service. The VPLS architecture provides Ethernet Multipoint Service (EMS) that uses a virtual forwarding instance (VFI) to bridge endpoints together. VPLS is the connection of multiple sites in a single bridged domain over a managed IP/MPLS network. VPLS presents an Ethernet interface to customers, simplifying the LAN/WAN boundary for Service Providers and customers, and enabling rapid and flexible service provisioning, because the service bandwidth is not tied to the physical interface. All services in a VPLS appear to be on the same LAN, regardless of location.
VPLS uses edge routers that can learn, bridge, and replicate on a VPN basis. These routers are connected by a full mesh of tunnels, enabling any-to-any connectivity.
Auto Discovery of VPLS services is supported.
VPN Service Module (VPNSM) Support for Catalyst 6500 and Cisco 7600
ISC now supports the VPN Service Module (VPNSM) 2.0 that is an IPsec and IKE accelerator card for the Catalyst 6500 and Cisco 7600 platforms. Provisioning of IPsec Site-to-Site, IPsec with GRE and IPsec, and IPsec Remote Access on VPNSM are also supported in ISC 3.1.
System Recommendations
The system recommendations and requirements are listed in Chapter 1, "System Recommendations" of the Cisco IP Solution Center Installation Guide, 3.1. The recommendation is to thoroughly review this list before even planning your installation, to be sure you have all the hardware and software you need to successfully install.
Known Problems in Cisco IP Solution Center, Release 3.1
To find known problems in Cisco IP Solution Center, use the following URL:
http://www.cisco.com/cgi-bin/Support/Bugtool/launch_bugtool.pl
You need to log in to CCO.
You can search for specific bugs or search for a range by product name. This tool enables you to query for keywords, severity, range, or version.
The results display bug ID and title, found-in version, fixed-in version, and status. The bug ID is a hyperlink to detailed information for the bug ID's product, component, severity, first found-in, and release notes.
The results could be displayed in a feature matrix or spreadsheet.
Obtaining Documentation
Cisco provides several ways to obtain documentation, technical assistance, and other technical resources. These sections explain how to obtain technical information from Cisco Systems.
Cisco.com
You can access the most current Cisco documentation on the World Wide Web at this URL:
http://www.cisco.com/univercd/home/home.htm
You can access the Cisco website at this URL:
International Cisco websites can be accessed from this URL:
http://www.cisco.com/public/countries_languages.shtml
Ordering Documentation
You can find instructions for ordering documentation at this URL:
http://www.cisco.com/univercd/cc/td/doc/es_inpck/pdi.htm
You can order Cisco documentation in these ways:
•
Registered Cisco.com users (Cisco direct customers) can order Cisco product documentation from the Networking Products MarketPlace:
http://www.cisco.com/en/US/partner/ordering/index.shtml
•
Nonregistered Cisco.com users can order documentation through a local account representative by calling Cisco Systems Corporate Headquarters (California, USA) at 408 526-7208 or, elsewhere in North America, by calling 800 553-NETS (6387).
Documentation Feedback
You can submit e-mail comments about technical documentation to bug-doc@cisco.com.
You can submit comments by using the response card (if present) behind the front cover of your document or by writing to the following address:
Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883We appreciate your comments.
Obtaining Technical Assistance
For all customers, partners, resellers, and distributors who hold valid Cisco service contracts, the Cisco Technical Assistance Center (TAC) provides 24-hour-a-day, award-winning technical support services, online and over the phone. Cisco.com features the Cisco TAC website as an online starting point for technical assistance. If you do not hold a valid Cisco service contract, please contact your reseller.
Cisco TAC Website
The Cisco TAC website provides online documents and tools for troubleshooting and resolving technical issues with Cisco products and technologies. The Cisco TAC website is available 24 hours a day, 365 days a year. The Cisco TAC website is located at this URL:
Accessing all the tools on the Cisco TAC website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a login ID or password, register at this URL:
http://tools.cisco.com/RPF/register/register.do
Opening a TAC Case
Using the online TAC Case Open Tool is the fastest way to open P3 and P4 cases. (P3 and P4 cases are those in which your network is minimally impaired or for which you require product information.) After you describe your situation, the TAC Case Open Tool automatically recommends resources for an immediate solution. If your issue is not resolved using the recommended resources, your case will be assigned to a Cisco TAC engineer. The online TAC Case Open Tool is located at this URL:
http://www.cisco.com/tac/caseopen
For P1 or P2 cases (P1 and P2 cases are those in which your production network is down or severely degraded) or if you do not have Internet access, contact Cisco TAC by telephone. Cisco TAC engineers are assigned immediately to P1 and P2 cases to help keep your business operations running smoothly.
To open a case by telephone, use one of the following numbers:
Asia-Pacific: +61 2 8446 7411 (Australia: 1 800 805 227)
EMEA: +32 2 704 55 55
USA: 1 800 553-2447For a complete listing of Cisco TAC contacts, go to this URL:
http://www.cisco.com/warp/public/687/Directory/DirTAC.shtml
TAC Case Priority Definitions
To ensure that all cases are reported in a standard format, Cisco has established case priority definitions.
Priority 1 (P1)—Your network is "down" or there is a critical impact to your business operations. You and Cisco will commit all necessary resources around the clock to resolve the situation.
Priority 2 (P2)—Operation of an existing network is severely degraded, or significant aspects of your business operation are negatively affected by inadequate performance of Cisco products. You and Cisco will commit full-time resources during normal business hours to resolve the situation.
Priority 3 (P3)—Operational performance of your network is impaired, but most business operations remain functional. You and Cisco will commit resources during normal business hours to restore service to satisfactory levels.
Priority 4 (P4)—You require information or assistance with Cisco product capabilities, installation, or configuration. There is little or no effect on your business operations.
Obtaining Additional Publications and Information
Information about Cisco products, technologies, and network solutions is available from various online and printed sources.
•
The Cisco Product Catalog describes the networking products offered by Cisco Systems, as well as ordering and customer support services. Access the Cisco Product Catalog at this URL:
http://www.cisco.com/en/US/products/products_catalog_links_launch.html
•
Cisco Press publishes a wide range of general networking, training and certification titles. Both new and experienced users will benefit from these publications. For current Cisco Press titles and other information, go to Cisco Press online at this URL:
•
Packet magazine is the Cisco quarterly publication that provides the latest networking trends, technology breakthroughs, and Cisco products and solutions to help industry professionals get the most from their networking investment. Included are networking deployment and troubleshooting tips, configuration examples, customer case studies, tutorials and training, certification information, and links to numerous in-depth online resources. You can access Packet magazine at this URL:
•
iQ Magazine is the Cisco bimonthly publication that delivers the latest information about Internet business strategies for executives. You can access iQ Magazine at this URL:
http://www.cisco.com/go/iqmagazine
•
Internet Protocol Journal is a quarterly journal published by Cisco Systems for engineering professionals involved in designing, developing, and operating public and private internets and intranets. You can access the Internet Protocol Journal at this URL:
http://www.cisco.com/en/US/about/ac123/ac147/about_cisco_the_internet_protocol_journal.html
•
Training—Cisco offers world-class networking training. Current offerings in network training are listed at this URL:
http://www.cisco.com/en/US/learning/index.html
Feedback
