In Cisco VNMC, there is a default profile that exists. Default profiles are system generated and can be modified, but they cannot be deleted. The administrator can add syslog policies, core policies, fault policies, log policies, and the time zone. DNS and NTP policies can be created also. Configured policies can be assigned to the VNMC profile.
In the VNMC profile, there is a pre-configured DNS domain name when the system is configured at boot configuration. That domain is displayed in the Cisco VNMC instance. New DNS domains cannot be created. However the domain name description can be modified.
Cisco VNMC does not support the creation of additional VNMC profiles.
You can create multiple policies and assign them to the VNMC profile. Policies for the VNMC profile are created and deleted on the VNMC Profile tab. Policies can be assigned to the VNMC profile. VNMC profile uses name resolution to resolve policy assignments. For details, see Name Resolution in a Multitenancy Environment.
The following policies created under root only, in the Device Policies area, will be visible in the VNMC profile:
Core file policy
Fault policy
Logging policy
Syslog policy
Policies created under root are visible to both the VNMC profile and the Device profile.
DNS server, NTP server and domain names can be assigned as inline policies. A time zone setting can also be assigned to the profile.
When the system boots up, the following policies already have existing default policies:
Fault policy
Logging policy
Syslog policy
The default policies cannot be deleted but may be modified.
Configuring Policies
Configuring a Core File Policy
Adding a Core File Policy for VNMC Profile
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand root > Policies > Core File.
Step 4
In the Work pane, click Add Core File Policy.
Step 5
In the Add Core File Policy dialog box, complete the following fields:
Name
Description
Name field
A user-defined name for the core file policy.
This name can be between 1 and 511 alphanumeric characters. You cannot use spaces or any special characters, and you cannot change this name after the object has been created.
Description field
A user-defined description of the core file.
Admin State drop-down list
This can be:
enabled—Enables the core file policy. TFTP is used.
disabled—Disables the core file policy.
Hostname field
The hostname or IP address to connect using TFTP.
Note
If you use a hostname rather than an IP address, you must configure a DNS server in Cisco VNMC.
Port field
The port number to use when exporting the core dump file using TFTP.
Protocol field
The protocol used to export the core dump file.
Path field
The path to use when storing the core dump file on the remote system.
The default path is /tftpboot. To mention a sub folder under tftpboot, use, for example, /tftpboot/test.
Step 6
Click
OK.
Editing a Core File Policy for VNMC Profile
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand root > Policies > Core File.
Step 4
In the Work pane, click on the core_file_policy_name you want to edit.
Step 5
In the Work pane, go to the General tab, and modify the following fields as appropriate:
Name
Description
Name field
A user-defined name for the core file policy.
Description field
A user-defined description of the core file.
Admin State drop-down list
This can be:
enabled—Enables the core file policy. TFTP is used.
disabled—Disables the core file policy.
Hostname field
The hostname or IP address to connect using TFTP.
Note
If you use a hostname rather than an IP address, you must configure a DNS server in Cisco VNMC.
Port field
The port number to use when exporting the core dump file using TFTP.
Protocol
Displays the protocol used to export the core dump file.
Path check box
The path to use when storing the core dump file on the remote system.
The default path is /tftpboot. To mention a sub folder under tftpboot, use, for example, /tftpboot/test.
Step 6
Click
OK.
Deleting a Core File Policy for VNMC Profile
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand root > Policies > Core File.
Step 4
In the Work pane, click on the core_file_policy_name you want to delete.
Step 5
In the Work pane, click Delete.
Step 6
In the Confirm dialog box, click Yes.
Configuring a Fault Policy
Adding a Fault Policy for VNMC Profile
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand the root node.
Step 4
Click the Fault node.
Step 5
In the Work pane, click the Add Fault Policy link.
Step 6
In the Add Fault Policy dialog box, complete the following fields:
Name
Description
Name field
A user-defined name for the fault policy.
This name can be between 1 and 32 identifier characters. You can use alphanumeric characters including hyphen, underscore, dot, and colon. You cannot change this name after it is saved.
Description field
A user-defined description of the fault policy.
Flapping Interval spinbox
Flapping occurs when a fault is raised and cleared several times
in rapid succession. To prevent this, the system does not allow a
fault to change its state until this amount of time has elapsed
since the last state change.
If the condition reoccurs during the flapping interval, the
fault returns to the active state. If the condition does not
reoccur during the flapping interval, the fault is cleared. What
happens at that point depends on the setting in the Clear Faults Retention Action field.
The number of hours, minutes, and seconds that should pass
before the system allows a fault to change its state.
The default flapping interval is 10 seconds.
Clear Faults Retention Action drop-down list
This can be:
retain—Retains the cleared
faults
section.
delete—The system immediately deletes all fault messages as soon as they
are marked as cleared.
Clear Faults Retention Interval radio-button
This can be:
forever—The system leaves all
cleared fault messages regardless of how
long they have been in the system.
other—The system displays the dd:hh:mm:ss
spinbox for selection of the number of days, hours, minutes, and seconds that should pass
before the system deletes a cleared fault message.
The default retention interval is 1 hour.
Step 7
Click
OK.
Editing a Fault Policy for VNMC Profile
Note
When the system boots up, a default policy already exists. The default policy cannot be deleted but may be modified.
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand root > Fault.
Step 4
In the Work pane, click the Fault Policy_name you want to edit.
Step 5
In the Work pane, click the Edit link.
Step 6
In the Edit Fault Policy dialog box, edit the appropriate fields:
Name
Description
Name field
A user-defined name for the fault policy.
Description field
A user-defined description of the fault policy.
Flapping Interval spinbox
Flapping occurs when a fault is raised and cleared several times
in rapid succession. To prevent this, the system does not allow a
fault to change its state until this amount of time has elapsed
since the last state change.
If the condition reoccurs during the flapping interval, the
fault returns to the active state. If the condition does not
reoccur during the flapping interval, the fault is cleared. What
happens at that point depends on the setting in the Clear Faults Retention Action field.
The number of hours, minutes, and seconds that should pass
before the system allows a fault to change its state.
The default flapping interval is 10 seconds.
Clear Faults Retention Action drop-down list
This can be:
retain—Retains the cleared
faults
section.
delete—The system immediately deletes all fault messages as soon as they
are marked as cleared.
Clear Faults Retention Interval radio-button
This can be:
forever—The system leaves all
cleared fault messages regardless of how
long they have been in the system.
other—The system displays the dd:hh:mm:ss
spinbox for selection of the number of days, hours, minutes, and seconds that should pass
before the system deletes a cleared fault message.
The default retention interval is 1 hour.
Step 7
Click OK.
Deleting a Fault Policy for VNMC Profile
Note
When the system boots up, a default policy already exists. The default policy cannot be deleted but may be modified.
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand root > Fault.
Step 4
In the Work pane, click the Fault Policy_name you want to delete.
Step 5
In the Work pane, click the Delete link.
Step 6
In the Confirm dialog box, click OK.
Configuring a Logging Policy
Adding a Logging Policy for VNMC Profile
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand root > Policies > Log File.
Step 4
In the Work pane, click Add Logging Policy.
Step 5
In the Add Logging Policy dialog box, complete the following fields:
Name
Description
Name field
A user-defined name for the logging policy.
This name can be between 1 and 32 identifier characters. You can use alphanumeric characters including hyphen, underscore, dot, and colon. You cannot change this name after it is saved.
Description field
A user-defined description of the logging policy.
Log Level drop-down list
The policy is logged upto or equal to the level based on this profile. This can be:
debug0
debug1
debug2
debug3
debug4
info
warn
minor
major
crit
The default log level is info.
Backup Files Count field
The number of backup files that are filled before they are overwritten.
The range is 1-9 files. The default is 2 files.
File Size (bytes) field
The backup file size.
The range is 1MB-100MB. The default file size is 5MB.
Step 6
Click
OK.
Editing a Logging Policy for VNMC Profile
Note
When the system boots up, a default policy already exists. The default policy cannot be deleted but may be modified.
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand root > Policies > Log File.
Step 4
In the Work pane, click on the logging_file_policy_name you want to edit.
Step 5
In the Work pane, click Edit.
Step 6
In the Edit Logging Policy dialog box, modify the appropriate fields:
Name
Description
Name field
A user-defined name for the logging policy.
Description field
A user-defined description of the logging policy.
Log Level drop-down list
The policy is logged upto or equal to the level based on this profile. This can be:
debug0
debug1
debug2
debug3
debug4
info
warn
minor
major
crit
The default log level is info.
Backup Files Count field
The number of backup files that are filled before they are overwritten.
The range is 1-9 files. The default is 2 files.
File Size (bytes) field
The backup file size.
The range is 1MB-100MB. The default file size is 5MB.
Step 7
Click
OK.
Deleting a Logging Policy for VNMC Profile
Note
When the system boots up, a default policy already exists. The default policy cannot be deleted but may be modified.
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand root > Policies > Log File.
Step 4
In the Work pane, click on the logging_file_policy_name you want to delete.
Step 5
In the Work pane, click Delete.
Note
You cannot delete the system-defined default logging policy
Step 6
In the Confirm dialog box, click Yes.
Configuring Syslog Policy
Adding a Syslog Policy for VNMC Profile
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand root > Policies.
Step 4
Click the Syslog Policies node.
Step 5
In the Work pane, click the Add Syslog link.
In the General tab area, complete the following fields:
Name
Description
Name field
A user-defined name for the syslog policy.
Description field
A user-defined description of the syslog policy.
Admin State drop-down list
This can be:
enabled
disabled
Note
Syslog policy is enabled if at least one syslog server is enabled. If all syslog server children are disabled, then this policy is disabled.
Port field
The TCP or UDP port where syslog messages should be sent.
In the Local Destinations tab area, complete the following fields in the Console area:
Name
Description
Admin State radio button
This can be:
enabled
disabled
Note
Syslog policy is enabled if at least one syslog server is enabled. If all syslog server children are disabled, then this policy is disabled.
Level radio button
If the
Admin State
is
enabled, select the lowest message level that you want displayed. The
system displays that level and above on the console.
This can be:
alerts
critical
emergencies
In the Local Destinations tab area, complete the following fields in the Monitor area:
Name
Description
Admin State radio button
This can be:
enabled
disabled
Note
Syslog policy is enabled if at least one syslog server is enabled. If all syslog server children are disabled, then this policy is disabled.
Level drop-down list
If the
Admin State
is
enabled, select the lowest message level that you want displayed. The
system displays that level and above on the console.
This can be:
emergencies (0)
alerts (1)
critical (2)
errors (3)
warnings (4)
notifications (5)
information (6)
debugging (7)
In the Local Destinations tab area, complete the following fields in the File area:
Name
Description
Admin State radio button
This can be:
enabled
disabled
Note
Syslog policy is enabled if at least one syslog server is enabled. If all syslog server children are disabled, then this policy is disabled.
Level drop-down list
If the
Admin State
is
enabled, select the lowest message level that you want displayed. The
system displays that level and above on the console.
This can be:
emergencies (0)
alerts (1)
critical (2)
errors (3)
warnings (4)
notifications (5)
information (6)
debugging (7)
File Name field
The name of the file in which the messages are logged.
Size (KB) field
The maximum size, in Kilobytes, the file can be before Cisco VNMC begins to write over the oldest messages with the newest ones.
Step 6
Click
OK.
Editing a Syslog Policy for VNMC Profile
Note
When the system boots up, a default policy already exists. The default policy cannot be deleted but may be modified.
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand root > Policies.
Step 4
Click the Syslog Policies node.
Step 5
In the Work pane, click the Syslog Policy_name you want to edit.
Step 6
Click the
Edit link.
Step 7
In the Edit Syslog dialog box, do the following:
In the General tab area, edit the appropriate fields:
Name
Description
Name field
A user-defined name for the syslog policy.
Description field
A user-defined description of the syslog policy.
Admin State drop-down list
This can be:
enabled
disabled
Note
Syslog policy is enabled if at least one syslog server is enabled. If all syslog server children are disabled, then this policy is disabled.
Port field
The TCP or UDP port where syslog messages should be sent.
In the Local Destinations tab area, edit the appropriate fields in the Console area:
Name
Description
Admin State radio button
This can be:
enabled
disabled
Note
Syslog policy is enabled if at least one syslog server is enabled. If all syslog server children are disabled, then this policy is disabled.
Level radio button
If the
Admin State
is
enabled, select the lowest message level that you want displayed. The
system displays that level and above on the console.
This can be:
alerts
critical
emergencies
In the Local Destinations tab area, edit the appropriate fields in the Monitor area:
Name
Description
Admin State radio button
This can be:
enabled
disabled
Note
Syslog policy is enabled if at least one syslog server is enabled. If all syslog server children are disabled, then this policy is disabled.
Level drop-down list
If the
Admin State
is
enabled, select the lowest message level that you want displayed. The
system displays that level and above on the console.
This can be:
emergencies (0)
alerts (1)
critical (2)
errors (3)
warnings (4)
notifications (5)
information (6)
debugging (7)
In the Local Destinations tab area, edit the appropriate fields in the File area:
Name
Description
Admin State radio button
This can be:
enabled
disabled
Note
Syslog policy is enabled if at least one syslog server is enabled. If all syslog server children are disabled, then this policy is disabled.
Level drop-down list
If the
Admin State
is
enabled, select the lowest message level that you want displayed. The
system displays that level and above on the console.
This can be:
emergencies (0)
alerts (1)
critical (2)
errors (3)
warnings (4)
notifications (5)
information (6)
debugging (7)
File Name field
The name of the file in which the messages are logged.
Size (KB) field
The maximum size, in Kilobytes, the file can be before Cisco VNMC begins to write over the oldest messages with the newest ones.
Step 8
Click
OK.
Deleting a Syslog Policy for VNMC Profile
Note
When the system boots up, a default policy already exists. The default policy cannot be deleted but may be modified.
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand root > Policies.
Step 4
Click the Syslog Policies node.
Step 5
In the Work pane, click the Syslog Policy_name you want to delete.
Step 6
Click the
Delete link.
Step 7
In the Confirm dialog box, click
OK.
Adding a Syslog Server for VNMC Profile
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand root > Policies.
Step 4
Click the Syslog Policy_name where you want to add a Syslog server.
Step 5
In the Work pane Servers tab area, click the Add Syslog Server link.
Step 6
In the Add Syslog Server dialog box, complete the following fields:
Name
Description
Server Type column
This can be:
primary
secondary
tertiary
Hostname column
The hostname or IP address on which the syslog file resides.
Admin State column
This can be:
enabled
disabled
Note
Syslog policy is enabled if at least one syslog server is enabled. If all syslog server children are disabled, then this policy is disabled.
Severity column
The severity level. This can be:
emergencies (0)
alerts (1)
critical (2)
errors (3)
warnings (4)
notifications (5)
information (6)
debugging (7)
Forwarding Facility column
This can be:
auth
authpriv
cron
daemon
ftp
kernel
local0
local1
local2
local3
local4
local5
local6
lpr
mail
news
syslog
user
uucp
Step 7
Click
OK.
Editing a Syslog Server for VNMC Profile
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand root > Policies > Syslog Policies > Syslog Policy_name where you want to edit a Syslog server.
Step 4
In the Work pane, click the
server you want to edit.
Step 5
Click the
Edit link.
Step 6
In the Edit Syslog Server dialog box, edit the appropriate fields:
Name
Description
Server Type column
This can be:
primary
secondary
tertiary
Hostname column
The hostname or IP address on which the syslog file resides.
Admin State column
This can be:
enabled
disabled
Note
Syslog policy is enabled if at least one syslog server is enabled. If all syslog server children are disabled, then this policy is disabled.
Severity column
The severity level. This can be:
emergencies (0)
alerts (1)
critical (2)
errors (3)
warnings (4)
notifications (5)
information (6)
debugging (7)
Forwarding Facility column
This can be:
auth
authpriv
cron
daemon
ftp
kernel
local0
local1
local2
local3
local4
local5
local6
lpr
mail
news
syslog
user
uucp
Step 7
Click
OK.
Deleting a Syslog Server for VNMC Profile
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand root > Policies > Syslog Policies.
Step 4
Click the Syslog Policy_name where you want to delete a Syslog server.
Step 5
In the Work pane, Servers tab area, click the appropriate server you want to delete.
Step 6
Click the
Delete link.
Step 7
In the Confirm dialog box, click
OK.
Configuring the Default Profile
Editing the VNMC default Profile
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the Access Control subtab.
Step 3
In the Navigation pane, expand root > Profile.
Step 4
Click the default profile node .
Step 5
In the Work pane, General tab area, change the following fields as appropriate:
Name
Description
Name field
A system-defined name for this default profile.
Description field
A user-defined description of the profile.
Time Zone drop-down list
A list of time zones for user selection.
Step 6
In the Work pane Policy tab area, do the following:
In the DNS Servers area, change the following fields as appropriate:
Name
Description
Add DNS Server link
Opens a dialog box that allows you to specify a new DNS server.
Delete link
Deletes the DNS server IP address selected in the IP Address table.
Up and Down arrows
Changes the priority of the selected DNS Server IP address.
IP Address table
Contains the IP addresses for the DNS servers configured in the system.
VNMC uses the DNS servers in the order they appear in the table.
In the NTP Servers area, change the following fields as appropriate:
Name
Description
Add NTP Server link
Opens a dialog box that allows you to specify a new NTP server.
Delete link
Deletes the NTP server hostname selected in the Hostname table.
Up and Down arrows
Changes the priority of the selected NTP Server hostname.
Hostname table
Contains the NTP server hostnames configured in the system.
VNMC uses the NTP server hostnames in the order they appear in the table.
In the DNS Domains area, change the following fields as appropriate:
Name
Description
Edit link
Edits the DNS domain name selected in the DNS Domains table.
The default DNS name cannot be edited.
DNS Domains table
Contains the default DNS domain name and domain in the system.
In the Log area, change the following fields as appropriate:
Name
Description
Core File area
The core file policies associated with this profile can be selected, added, or edited.
Log File area
The log file policies associated with this profile can be selected, added, or edited.
Syslog area
The syslog policies associated with this profile can be selected, added, or edited.
Fault area
The fault policies associated with this profile can be selected, added, or edited.
Step 7
Click
Save.
Configuring a DNS Server
Adding a DNS Server
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand root > Profile.
Step 4
In the Work pane, choose the default profile in the Profile area.
Step 5
Click the Edit link.
Step 6
In the Edit Profile dialog box, click the Policy tab.
Step 7
In the DNS area, click the Add DNS Server link.
Step 8
In the Add DNS Server dialog box, complete the following field:
Name
Description
DNS IP Address field
The DNS server IP address to use.
Note
Up to four DNS IP addresses are accepted. Rearrange the addresses using the Up and Down arrows in the DNS Area. The address on top is the primary address.
Step 9
In the Add DNS Server dialog box, click
OK.
Step 10
In the Edit Profile dialog box, click OK.
Deleting a DNS Server
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand root > Profile.
Step 4
In the Work pane, choose the default profile in the Profile area.
Step 5
Click the Edit link.
Step 6
In the Edit Profile dialog box, click the Policy tab.
Step 7
In the DNS area, click the DNS_IP_address you want to delete.
Step 8
Click the Delete link.
Step 9
In the Confirm dialog box, click Yes.
Step 10
In the Edit Profile dialog box, click OK.
Configuring an NTP Server
Adding an NTP Server
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand root > Profile.
Step 4
In the Work pane, choose the default profile in the Profile area.
Step 5
Click the Edit link.
Step 6
In the Edit Profile dialog box, click the Policy tab.
Step 7
In the NTP area, click the Add NTP Server link.
Step 8
In the Add NTP Server dialog box, complete the following field:
Name
Description
Host Name field
The NTP server hostname to use.
Note
Up to four NTP server host names are accepted. Rearrange the names using the Up and Down arrows available in the NTP Area. The name on top is the primary host name.
Step 9
In the Add NTP Server dialog box, click
OK.
Step 10
In the Edit Profile dialog box, click OK.
Deleting an NTP Server
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand root > Profile.
Step 4
In the Work pane, choose the default profile in the Profile area.
Step 5
Click the Edit link.
Step 6
In the Edit Profile dialog box, click the Policy tab.
Step 7
In the NTP area, choose the NTP_server_name you want to delete.
Step 8
In the NTP area, click the Delete link.
Step 9
In the Confirm dialog box, click
Yes.
Step 10
In the Edit Profile dialog box, click OK.
Configuring a DNS Domain
Editing a DNS Domain
Caution
Changing the DNS domain will cause connectivity loss.
Procedure
Step 1
In the Navigation pane, click the Administration tab.
Step 2
In the Navigation pane, click the VNMC Profile subtab.
Step 3
In the Navigation pane, expand root > Profile.
Step 4
In the Work pane, choose the default profile in the Profile area.
Step 5
Click the Edit link.
Step 6
In the Edit Profile dialog box, click the Policy tab.
Step 7
In the DNS Domains area, select the DNS_Domains_name you want to edit.
Step 8
In the DNS Domains area, click the Edit link.
Step 9
In the Edit DNS Domains dialog box, edit the description field as appropriate:
Name
Description
Name field
A name for the DNS Domain.
Note
You cannot edit the Name field for the default domain.