[an error occurred while processing this directive]

Cisco Videoscape Distribution Suite for Internet Streaming

Release Notes for Cisco CDA Visual Quality Experience Application, Release 3.0

 Feedback

Table Of Contents

Release Notes for Cisco CDA Visual Quality Experience Application, Release 3.0

Contents

Introduction

New and Changed Features and Functionality

System Requirements

Important Notes

Significant Changes to Be Aware of When Upgrading to VQE Release 3.0

Significant Changes to the Set of Parameters Used to Configure VQE

Configuring Trusted Channel-Provisioning Servers for VQE-S Is Required

Security Restrictions for Logins and Root Privileges

Limitations and Restrictions

VQE SDP Channel Information Compatibility

Changing System Time Causes Unicast Retransmission and RCC Disruptions

Performing a Date and Time Change with NTP

Performing a Date and Time Change with the Linux date Command

Routes May Not Be Carried Forward from VQE Release 2.1 to Release 3.0

Open Caveats

Resolved Caveats

Known Problems

Random "rtc: lost some interrupts at 8192Hz." Messages Displayed on Serial Console

Deprecated sysctl Message Displayed on Serial Console

Upgrading VQE Software from Release 2.1 to Release 3.0

Backing Up Files Before Upgrading or Installing Software

Using an ISO Upgrade Installation

Using an ISO Clean Installation

Migrating Channel-related Files from VQE Release 2.1 to VQE Release 3.0

Creating VCPT Configuration Files for Release 3.0

Creating VQE-S and VQE-C Channel Configuration Files for Release 3.0

Supporting Software Hardening Guides and VQE

Linux Security Checklist

The 60 Minute Network Security Guide

Notices

OpenSSL/Open SSL Project

License Issues

GNU General Public License Information

Related Documentation

Obtaining Documentation and Submitting a Service Request


Release Notes for Cisco CDA Visual Quality Experience Application, Release 3.0


Revised: September 2, 2008, OL-17351-01

CDC Date September 2, 2008

Contents

These release notes contain the following sections:

"Introduction" section

"New and Changed Features and Functionality" section

"System Requirements" section

"Important Notes" section

"Limitations and Restrictions" section

"Open Caveats" section

"Resolved Caveats" section

"Known Problems" section

"Upgrading VQE Software from Release 2.1 to Release 3.0" section

"Supporting Software Hardening Guides and VQE" section

"Notices" section

"Related Documentation" section

"Obtaining Documentation and Submitting a Service Request" section

Introduction

Cisco CDA Visual Quality Experience Application (VQE), Release 3.0, offers service providers a set of technologies and products associated with the delivery of IPTV video services. VQE is designed to improve the quality of IPTV services and subscribers' viewing experiences. VQE is part of a Cisco end-to-end solution that builds video awareness into the network infrastruture. For Release 3.0, VQE technology is intended for wireline operators who offer managed broadcast (multicast) IPTV services using xDSL.

Cisco Content Delivery Application (CDA) Visual Quality Experience Application, Release 3.0, includes these major software components:

VQE Server (VQE-S)—Software that runs on a Linux-based Cisco Content Delivery Engine 110 (CDE110) appliance located in the intelligent edge of the service-provider's network.

VQE Client (VQE-C)—Software embedded in the subscriber's CPE—typically a set-top box.

These release notes cover VQE Server software and two related software components: VQE Channel Provisioning Tool (VCPT) and VQE Client Channel Configuration Delivery Server (VCDS).

For information on VQE Server, VQE Channel Provisioning Tool, and VQE Client Channel Configuration Delivery Server, see the Cisco CDA Visual Quality Experience Application User Guide, Release 3.0.

For information on VQE Client, see the documentation that is provided in the TAR file containing the VQE Client software.

New and Changed Features and Functionality

The new features and functionality in VQE Release 3.0 include the following:

Rapid Channel Change (RCC)

RCC support in VQE Channel Configuration Tool (VCPT) and VQE Application Monitoring Tool (AMT)

VQE Configuration Management System (CMS) including:

VQE Configuration Database (VCDB)

VQE Configuration Tool and VQE Configuration Engine

VCDB Parser

vqe_cfgtool command

Support for Differentiated Services Code Point (DSCP) values on IPTV-related packets

Support for RTP Control Protocol (RTCP) Extended Reports and the Extended Report (XR) packet type. Three XR report block types are supported:

Loss RLE (run-length encoded)

Statistics Summary

Post-Repair Loss RLE

The changed functionality in VQE Release 3.0 includes the following:

The set of VQE parameters have been simplified and enhanced with the addition of system and network parameters. See the "Significant Changes to the Set of Parameters Used to Configure VQE" section.

The Cisco VQE Startup Configuration Utility for VQE-S and VQE Tools initial configuration has been improved to make use of VQE CMS functionality and includes new configuration capabilities.

For security purposes, Cisco VQE Release 3.0 requires that the VQE-S host be configured with the IP addresses of the trusted channel-provisioning servers (for example, VCPT). See the "Configuring Trusted Channel-Provisioning Servers for VQE-S Is Required" section.

The major VQE and system processes are implemented as Linux services. The services are managed using the Linux service command. The /etc/inittab file is no longer used for starting the process_monitor process. See the "Significant Changes to Be Aware of When Upgrading to VQE Release 3.0" section.

System Requirements

VQE Server runs on one Content Delivery Engine 110 (CDE110) appliance. VQE Channel Provisioning Tool and VQE Client Channel Configuration Delivery Server run on a separate CDE110 appliance.

The Cisco CDE110 comes with the required software pre-installed—either VQE Server software or Tools (VQE Channel Provisioning Tool and VQE Client Channel Configuration Delivery Server) software. In each case, the required Linux, Apache web server, and other software is also pre-installed.

To access the VQE-S Application Monitoring Tool (VQE-S AMT or AMT) or the VQE Channel Provisioning Tool, you need a web browser. For these tools, the following web browsers are supported:

Microsoft Internet Explorer version 6.0 or later

Mozilla Firefox version 2.0 or later

The minimum screen resolution required for VQE-S AMT and VCPT is 1024 x 768 pixels.

To display the Channels Status Summary graph of active, inoperative, and inactive channels in the AMT VQE-S Status window, Adobe Flash Player must be installed on the computer that hosts the browser accessing AMT. Adobe Flash Player is free and can be found at this URL:

http://get.adobe.com/flashplayer/

Important Notes

The important notes are on these topics:

Significant Changes to Be Aware of When Upgrading to VQE Release 3.0

Significant Changes to the Set of Parameters Used to Configure VQE

Configuring Trusted Channel-Provisioning Servers for VQE-S Is Required

Security Restrictions for Logins and Root Privileges

Significant Changes to Be Aware of When Upgrading to VQE Release 3.0

If you are upgrading from Cisco VQE Release 2.1 to Release 3.0, be aware of these significant changes in Cisco VQE Release 3.0.

The mechanisms used for configuring the Cisco Content Delivery Engine 110 (CDE110) servers that host VQE Server and VQE Tools have changed:

Starting with VQE Release 3.0, the VQE Configuration Management System (CMS) is used to configure VQE, system, and network parameters on both the VQE Server and VQE Tools hosts. For information on the VQE Configuration Management System (CMS), see Chapter 6, "Configuring VQE Server and VQE Tools," in the Cisco CDA Visual Quality Experience Application User Guide, Release 3.0.

The vqes.conf file is no longer used on the VQE Server host. (This file was not used on the VQE Tools host.) The vqes.conf file has been replaced by the VQE Configuration Database (VCDB) and vcdb.conf file, which is used on both the VQE Server and VQE Tools hosts. For information on VCDB and the vcdb.conf file, see Chapter 6, "Configuring VQE Server and VQE Tools," in the Cisco CDA Visual Quality Experience Application User Guide, Release 3.0.

The set of VQE-S options that were used in the Release 2.1 vqes.conf file have been replaced by the set of VCDB parameters that are used in Release 3.0 vcdb.conf file.

For information on the correspondence between the VQE Release 2.1 options and Release 3.0 parameters, see the "Significant Changes to the Set of Parameters Used to Configure VQE" section.

For complete information on the set of VCDB parameters, see Appendix A, "VQE, System, and Network Parameters," in the Cisco CDA Visual Quality Experience Application User Guide, Release 3.0, and see also the /etc/opt/vqes/vcdb.conf.sample file.

In Cisco VQE Release 3.0, the major VQE and system processes are implemented as Linux services. Table 1 lists these services. The services are managed using the Linux service command. The /etc/inittab file is no longer used for starting the process_monitor process. For information on configuring, starting, and monitoring the VQE and system services, see Appendix D, "Manual Initial VQE System Configuration," in the Cisco CDA Visual Quality Experience Application User Guide, Release 3.0.

Table 1 Cisco VQE Release 3.0: VQE and System Services  

Service
Description

vqes

Used on the VQE Server host only, VQE-S service (process_monitor process) starts and monitors the other VQE-S processes—Control Plane, Data Plane, Multicast Load Balancer, and STUN Server.

vcds

Used on the VQE Tools host only, VQE Client Channel Configuration Delivery Server (VCDS) service

sshd

Secure Shell daemon.

httpd

HyperText Transfer Protocol daemon (the Apache web server).

tomcat5

Apache Tomcat application server.

snmpd

(Optional) SNMP daemon.

snmpsa

(Optional) SNMP subagent.

ntpd

(Optional) Network Time Protocol (NTP) daemon.


Significant Changes to the Set of Parameters Used to Configure VQE

In VQE Release 3.0, the number of parameters used to configure the VQE-S and VQE Tools servers has been simplified and enhanced to make the configuration tasks easier to accomplish. In previous VQE releases, the vqes.conf options included many internal options that are useful for Cisco engineering testing but are unlikely to be useful in a deployment. These internal options are not available in the VQE Release 3.0 vcdb.conf file.


Note If you use an ISO upgrade installation to upgrade from VQE Release 2.1 to VQE Release 3.0, these internal options are not carried over into your VQE Release 3.0 configuration.


Table 2 lists the vqes.conf options that were used in VQE Release 2.1 and the corresponding VCDB parameters that are used in VQE Release 3.0. If you use an ISO upgrade installation to upgrade from VQE Release 2.1 to VQE Release 3.0, the vqes.conf options in Table 2 are translated into VCDB parameters and carried over into your VQE Release 3.0 configuration.

If a vqes.conf option is not shown in Table 2, no VCDB (vcdb.conf) parameter is available for this option in VQE Release 3.0.

Table 2 Old vqes.conf Options and Corresponding VCDB Parameters  

Old vqes.conf Option
Corresponding VCDB Parameter

                               VQE-S Control Plane Options

burst-rate

vqe.vqes.excess_bw_fraction

client-er-policing

vqe.vqes.client_er_policing

client-er-tb-depth

vqe.vqes.client_er_tb_depth

client-er-tb-rate-ratio

vqe.vqes.client_er_tb_rate_ratio

er-cache-time

vqe.vqes.er_cache_time

exporter-enable

vqe.vqes.exporter_enable

log-level

vqe.vqes.log_priority (In VQE Release 3.0, this parameter specifies the logging level for all VQE-S processes.)

rtp-hold-time

vqe.vqes.rtp_hold_time

vqm-host

vqe.vqes.vqm_host

vqm-port

vqe.vqes.vqm_port

                           VQE-S Data Plane Process Options

rtp-inactivity-tm

vqe.vqes.rtp_inactivity_timeout

                     Multicast Load Balancer Process Options

interface

vqe.vqes.vqe_interfaces

unicast-reservation

vqe.vqes.unicast_reservation


In VQE Release 2.1, the STUN Server was enabled by specifying run = true; in the STUN Server process definition in vqes.conf. In VQE Release 3.0, the STUN Server is enabled by default, and the VCDB parameter vqe.vqes.stun_enable is used to enable or disable the STUN Server.

For complete information on the set of VCDB parameters, see Appendix A, "VQE, System, and Network Parameters," in the Cisco CDA Visual Quality Experience Application User Guide, Release 3.0 and also see the /etc/opt/vqes/vcdb.conf.sample file.

Configuring Trusted Channel-Provisioning Servers for VQE-S Is Required

For security purposes, Cisco VQE Release 3.0 requires that the VQE-S host be configured with the IP addresses of the trusted channel-provisioning servers (for example, VCPT). This configuration can be accomplished with the Cisco VQE Startup Configuration Utility or with the VCDB parameter vqe.iptables.trusted_vcpt. For information on VQE-S host configuration, see the Cisco CDA Visual Quality Experience Application User Guide, Release 3.0.


Note If the IP address of the trusted channel-provisioning server is not configured on the VQE-S host, VQE-S will reject attempts by the channel-provisioning server to send channel information to the VQE-S host.


Security Restrictions for Logins and Root Privileges

For security reasons, the following restrictions apply to VQE.

The root user cannot use Secure Shell (SSH) to log in to a CDE110 that hosts VQE-S or VCPT. Also, the root user cannot log in to VQE-S AMT or VCPT. The vqe user should be used instead. The vqe user is a pre-created Linux user ID and has its password set during CDE110 initial system configuration.

Only users in the wheel group can use the su or sudo commands. By default, the vqe user is in the wheel group.

If you want to add user accounts to the wheel group so that additional users can use su and sudo, log in as root and issue the following command:

usermod -G wheel username

In the preceding, username specifies the user who will be added to the wheel group.

Limitations and Restrictions

Cisco CDA Visual Quality Experience Application, Release 3.0, technology is intended for wireline operators who offer managed broadcast (multicast) IPTV services using xDSL.

See the following sections for information on other limitations and restrictions in Cisco VQE, Release 3.0:

"VQE SDP Channel Information Compatibility" section

"Changing System Time Causes Unicast Retransmission and RCC Disruptions" section

"Routes May Not Be Carried Forward from VQE Release 2.1 to Release 3.0" section

VQE SDP Channel Information Compatibility

Cisco VQE channel configuration information in Session Description Protocol (SDP) format is sent to VQE Servers and VQE Clients. VQE-S and VQE-C create channel configuration files from the information received.

Set-top boxes with VQE-C Release 2.1 and 3.0 can be used in the same deployment. Both VQE-C Release 2.1 and 3.0 can read Release 2.1 and 3.0 channel configuration files.

Table 3 and the notes that follow the table provide the SDP channel configuration compatibility requirements for VQE Release 2.1 and 3.0.

Table 3 SDP Channel Information Compatibility Requirements

VQE Version SDP
VQE-S 2.1
VQE-C 2.1
VQE-S 3.0
VQE-C 3.0

VQE 2.1 SDP

     Yes

     Yes

     Yes **

     Yes ** 

VQE 3.0 SDP

     Yes *

     Yes *

     Yes

     Yes


* When VQE-S or VQE-C Release 2.1 receives a channel configuration for a VQE Release 3.0 feature that it does not support, the new feature is ignored, but all Release 2.1 functionality will operate without change.

** Release 2.1 channel configuration files created with VCPT are usable with the Release 3.0 version of VQE-S, VCDS, and VQE-C. When a Release 2.1 channel configuration file is used, new VQE Release 3.0 functionality will not be used because it is not configured.


Note Release 3.0 VQE Channel Provisioning Tool (VCPT) opens and automatically converts Release 2.1 SDP to Release 3.0 SDP.


For information on the migrating channel-related files from VQE Release 2.1 to Release 3.0, see the "Migrating Channel-related Files from VQE Release 2.1 to VQE Release 3.0" section.

Changing System Time Causes Unicast Retransmission and RCC Disruptions

When the system time is changed on a VQE-S server that is actively repairing network errors, all Unicast Retransmissions will stop indefinitely, and output gaps will be seen on the VQE Clients.

When the system time is moved forward, the VQE-S receives requests for Unicast Retransmission and Rapid Channel Change (RCC) but does not send the repairs/RCCs to the VQE Clients on the set-top boxes.

When the system time is moved backward, all channels go to an inactive state and no Unicast Retransmission and RCC operations are performed.

For a VQE-S server that is actively repairing network errors, an explicit system time change (that is, by using the date command) will always result in the failure of Unicast Retransmission and RCC operations until corrective action is taken.

Workaround: Any time change performed on the VQE-S system should be done during a maintenance window. The procedures for changing the date and time vary depending on whether Network Time Protocol (NTP) or the Linux date command is used. See one of the following sections:

"Performing a Date and Time Change with NTP" section

"Performing a Date and Time Change with the Linux date Command" section


Note Using the local clock is not the recommended procedure for running with accurate time. Using NTP is recommended to keep the VQE-S services operational.


Performing a Date and Time Change with NTP

When performing a date and time change with NTP, do the following:


Step 1 Log in as root.

Step 2 Stop the VQE-S services by issuing the following command:

[root@system]# service vqes stop

Step 3 Stop the ntpd service by issuing the following command:

[root@system]# service ntpd stop 

Step 4 If needed, set the time zone with the vqe_cfgtool command's -config option. Use the Configuration Tool's System Parameters menu and the Timezone choice.

Step 5 Set the system date and time to a date and time close to the NTP server date and time by issuing the following command:

date -s "date_time_string"

For example:

[root@system]# date -s "16:55:30 July 7, 2008"

Step 6 Synchronize the clock to the configured NTP servers by issuing the following command:

[root@system]# ntpd -q

If the system clock is off by a lot, the command will take considerable time to return.

Step 7 Start the ntpd service by issuing the following command:

[root@system]# service ntpd start 

Step 8 Synchronize the hardware clock by issuing the following command:

[root@system]# /sbin/hwclock --systohc 

Step 9 Check NTP synchronization

[root@system]# ntpq -p 

Step 10 Reboot the VQE-S server by issuing the following command:

[root@system]# init 6 


Performing a Date and Time Change with the Linux date Command

When performing a time/date change with the Linux date command only, perform the following commands:


Step 1 Log in as root.

Step 2 Stop the VQE-S services by issuing the following command:

[root@system]# service vqes stop

Step 3 If needed, set the time zone with the vqe_cfgtool command's -config option. Use the Configuration Tool's System Parameters menu and the Timezone choice.

Step 4 Set the system date and time by issuing the following command:

date -s "date_time_string"

For example:

[root@system]# date -s "16:55:30 July 7, 2008"

Step 5 Synchronize the hardware clock by issuing the following command:

[root@system]# /sbin/hwclock --systohc 

Step 6 Reboot the VQE-S server by issuing the following command:

[root@system]# init 6 


Routes May Not Be Carried Forward from VQE Release 2.1 to Release 3.0

When upgrading from VQE Release 2.1 to Release 3.0 with an ISO upgrade installation for a VQE-S host or a VQE Tools host, some or all of the routes, including the management route, may not be carried forward from Release 2.1 to Release 3.0.

Since there are many ways routes could possibly have been configured on a Release 2.1 system, such as using multiple route files, the VQE ISO upgrade installations cannot support all possible configurations. The VQE ISO upgrade installations do carry forward to VQE Release 3.0 the routes that were configured through the VQE 2.1 Startup Configuration Utility. All other route configurations are considered best effort.


Note This is a one-time issue when upgrading from VQE Release 2.1 to Release 3.0. When the Release 3.0 VQE Configuration Database (VCDB) is used, VQE supports upgrade of routes configured with VCDB.


Workaround: Add any missing routes using the VQE CMS system and VCDB. For information on the VQE CMS, see Chapter 6, "Configuring VQE Server and VQE Tools," in the Cisco CDA Visual Quality Experience Application User Guide, Release 3.0.

Open Caveats

VQE Release 3.0 contains the following open caveats:

CSCsi67816

Manual startup or restart of tomcat5 service daemon fails.

The symptom is that the VQE-S Application Management Tool (AMT) does not work and simple restarts of the tomcat5 service fail to clear the problem. The tomcat 5 service is required for the VQE-S AMT to operate.

In some conditions, an attempt to restart the tomcat5 service fails and leaves tomcat5 in an inoperable state even though the process itself may appear to be running. The root cause of the problem is not known. However, the issue only seems to occur when the tomcat5 service has been started, or restarted, from within a Linux shell environment that has been reached with the su command rather than through a direct login.

Workaround: Perform the following:

1. Login to the VQE-S system directly as root. For example, use the following command:

ssh -l root vqes-system

2. Restart the tomcat5 service with the following command:

service tomcat5 restart

CSCs142168

A java exception is thrown at the console when tomcat is restarted.

If tomcat is currently not running and the command to restart tomcat is issued from the console, a java exception is thrown.

Workaround: No workaround is needed. The exception can be safely ignored.

CSCsl75266

In VCPT, a validation error is displayed when all fields have correct data.

When a channel is cloned and all data is updated so that it is unique, VCPT displays a validation error.

Workaround: When the error is displayed, position the cursor in the field that is highlighted as red. The validation error will be removed, and the Create button will be accessible.

CSCs177161

The error provided for a VQE-S misconfiguration is missing details about what is invalid in the configuration file.

When a newline is entered at the end of a string for a variable in the vqes.conf file, the invalid configuration error occurs.

Workaround: Remove the newline and ensure that any modifications to string variables in the vqes.conf file for do not have a newline in the string.

CSCsl65623

In a channel lineup where two different channels share the same multicast address (but different ports), one or both of the channels fail to receive data on the VQE-S, or only receive packets intermittently.

Multiple channels with the same multicast address but different RTP ports can be sent to VQE-S and will be accepted. This configuration causes errors within the Multicast Load Balancer, which in turn may cause one or both of the channels to fail to be received on the VQE-S.

Workaround: Change the channel configuration so that each channel uses a unique multicast address.

CSCsj70513

An "Invalid module format" error is thrown on ipmi/imb.ko.

The following errors are shown on the CDE110 system console and saved in first_boot_addon.log file during VQE-S installation first boot phase:

+ /usr/local/ism/driver/imbload start
insmod: error inserting '/usr/local/ism/driver/imb.ko': -1 Invalid module format
/bin/mknod: missing operand after `0'
Try `/bin/mknod --help' for more information.

The error always occurs during the first boot phase of initial VQE-S install. The VQE-S installation patches the Linux kernel during first boot phase, and installs the Intel IPMI driver for the new kernel. The IPMI driver tries to load before the new kernel is loaded and causes the error messages shown on console and in first_boot_addon.log.

Workaround: No work around is required. The system will function correctly since the patched kernel will be used once the installation is complete and system is reloaded.

CSCsj95844

The ifup command produces a core dump of the arping process.

The ifup command used to activate an Ethernet interface executes a system utility named arping to do duplicate address detection on the network. In certain cases, the arping utility may stop unexpectedly while running an interface up or interface down operation. A message indicating that the duplicate address detection check has failed is displayed. However, the interface up operation will continue to run and apply configuration changes as expected. A second message to the console will indicate that arping has segfaulted. A core dump file of the arping process will be found in /var/core.

This failure can occur whenever an interface is started using the /sbin/ifup command and the VQE-S application is running.

Workaround: Retry the interface up operation by first issuing the interface down command /sbin/ifdown ethX. Then issue the interface up command /sbin/ifup ethX again.

CSCsr81644

In VCPT, channel update details are not provided in the "Status of Last Send" column.

This issue occurs in the following situations:

When the VQE system (VQE-S and/or VCDS) is Release 2.1 and the VCPT is Release 3.0

When the VQE system (VQE-S and/or VCDS) is Release 3.0 and the VCPT is Release 2.1.

Workaround: Last send details can be seen in the syslog location for the system being used:

VQE-S 2.1—/var/log/vqes/vqes.log

VCDS 2.1—/var/log/messages

VQE-S 3.0—/var/log/vqe/vqe.log

VCDS 3.0—/var/log/vqe/vqe.log

Or update one of the systems to the same VQE version as the other system.

CSCsr78421

Trusted channel-provisioning servers are not restricted to the defined VCPT server configuration on VQE-S initial configuration.

This issue occurs when a VQE Server host uses the default VQE-S Domain Name System (DNS) or host definition configuration. (The default DNS configuration is to have no DNS server defined.)

Workaround: Use an IP address (not a host name) when configuring the trusted channel-provisioning server on the VQE Server host, for example, with the VQE Startup Configuration Utility or with the VCDB parameter vqe.iptables.trusted_vcpt.

Resolved Caveats

These caveats have been resolved in VQE Release 3.0 for VQE Server and VQE Tools: none.

These caveats have been resolved in VQE Release 3.0 for VQE Client:

CSCsr21130 (VQE-C)

The setting of the VQE-C reorder delay and repair trigger point has previously been supported using the "repair_trigger_point" and "reorder_delay" system configuration parameters, with the units being in terms of percentage of jitter buffer size. As a result of these units the reorder delay and repair trigger point parameters would be modified following any change to the jitter buffer size.

This fix decouples of reorder delay and repair trigger point parameters from the "jitter_buff_size" parameter.

VQE-C may be configured using two system configuration parameters: repair_trigger_point_abs and reorder_delay_abs.

The new parameters allow configuration of the repair trigger point and reorder delay via specification of an amount of time in absolute form (having units of milliseconds). The existing parameters (non "abs" forms) require configuration of the repair trigger point and reorder delay as a relative percentage of the "jitter_buff_size".

Workaround (prior to this release): Modify the reorder_delay and repair_trigger_point parameters in conjunction with any changes to the jitter_buff_size parameters to maintain the appropriate settings.

Further Problem Description: It is recommended that the new forms of the system configuration parameters be used whenever possible.

CSCso50781 (VQE-C)

Unable to specify the VQE-C CLI interface (for example, the target platform's loopback interface).

This fix allows the VQE-C to be configured to provide telnet CLI access from an user specified interface using the new system configuration parameter "cli_ifname". The default is the target platform's loopback interface.

There is a security risk in enabling the VQE-C CLI in deployment scenarios. This fix addresses the issue by allowing the integrator to restrict access of the CLI port to the loopback interface (127.0.0.1). Thus allowing the target platform's existing security measures to be employed to access to the VQE-C CLI (that is, ssh).

Workaround (prior to this release): Disable VQE-C CLI for real deployments.

Further Problem Description: As the default configuration is to use the loopback interface existing integrations will need to first log into the target platform and then access the VQE-C CLI via a local loopback telnet session (i.e. telnet 127.0.0.1 8182).

Known Problems

These known problems exist in Cisco VQE, Release 3.0.

Random "rtc: lost some interrupts at 8192Hz." Messages Displayed on Serial Console

A message or block of messages indicating "rtc" has lost some interrupts can appear sporadically on the serial console, usually after entering a command, but the message is unrelated to any specific command.

No workaround is needed. This does not appear to have any operational impact and is believed to be informational only related to an underlying Linux process.

Deprecated sysctl Message Displayed on Serial Console

On the serial console, the system will occasionally display a message of the form:

process `sysctl' is using deprecated sysctl (syscall) 
net.ipv6.neigh.eth4.retrans_time; Use net.ipv6.neigh.eth4.retrans_time_ms instead.

No workaround is needed. This has no known operational impact and is a Red hat Linux binary message.

Upgrading VQE Software from Release 2.1 to Release 3.0

To upgrade from VQE Release 2.1 to Release 3.0 requires that you perform either an ISO clean installation or ISO upgrade installation of the VQE Release 3.0 software on the Cisco CDE110 that hosts VQE-S and on the (optional) CDE110 that hosts the VQE Tools (VCPT and VCDS). Red Hat Package Manager (RPM) installations are not supported for the Release 2.1 to 3.0 upgrade.

An ISO clean installation does not backup or restore your current VQE 2.1 configurations. Use an ISO clean installation only if your deployment does not require that the VQE 2.1 configurations be preserved.

An ISO upgrade installation does backup and restore your VQE 2.1 configurations in files under /etc if the parameter will be under the control of the VQE Configuration Management System (CMS) in Release 3.0. Use an ISO upgrade installation if your deployment does require that these VQE 2.1 configurations be preserved.


Note If you want to preserve your current VQE 2.1 configurations for VQE Release 3.0, you must use an ISO upgrade installation.


When using an ISO clean installation to install VQE Release 3.0, read each of the following sections, in the order shown:

1. "Backing Up Files Before Upgrading or Installing Software" section

2. "Using an ISO Clean Installation" section

When using an ISO upgrade installation to upgrade from VQE Release 2.1 to Release 3.0, read each of the following sections, in the order shown:

1. "Backing Up Files Before Upgrading or Installing Software" section

2. "Using an ISO Upgrade Installation" section

The software for Cisco VQE Release 3.0, Redhat Linux, Apache web server, and other required facilities is distributed on one CD for VQE-S, and on one CD for VQE Tools.


Note ISO clean and upgrade installations must be performed using the CDE110 serial port (not the CDE110 video and keyboard ports). For these installations, the serial port connection can be through a terminal server or through a directly connected PC. For terminal emulation software configuration, see "Configuring Terminal Emulation Software" in Chapter 2 of the Cisco CDA Visual Quality Experience Application User Guide, Release 3.0.


Backing Up Files Before Upgrading or Installing Software


Caution An ISO clean installation or ISO upgrade installation will format the hard disk on the CDE110. Formatting causes all data on the hard disk to be erased.

Before upgrading the software on a CDE110, be sure to backup all needed files to a safe location (for example, on a server separate from the CDE110s being upgraded).

Before the hard disk is formatted, an ISO upgrade installation does a backup of configuration files under the /etc directory. After the hard disk is formatted, an ISO upgrade installation restores your VQE 2.1 configurations in the files under /etc—but only configuration items for which a VCDB parameter exists are restored. Nevertheless, it is recommended that you manually backup these files to another server before proceeding with an ISO upgrade installation in case of a catastrophic failure.

Table 4 shows the files that must be backed up for the CDE110 that hosts VQE-S.

Table 5 shows the files that must be backed up for the CDE110 that hosts VQE Tools (VCPT and VCDS).

The easiest way to back up the /etc configuration files is to use the tar command to create a TAR file archive of all directories and files under /etc.


Note In addition to the files listed in these tables, there may be backup or alternate files in the /etc/opt/vqes directory or another location. These files must be backed up if you want them available on the upgraded CDE110.

If additional functions are enabled on the CDE110, there may be additional files not listed in these tables that need to be backed up.


Table 4 VQE-S CDE110: Files That Must Be Backed Up  

File
Notes

/etc/hosts

--

/etc/ntp.conf

If additional Network Time Protocol configuration has been enabled, files in other locations may need to be backed up.

/etc/resolv.conf

--

/etc/sysconfig/network

--

/etc/sysconfig/network-scripts/ifcfg-eth#

There are four of these files, where # is the number of the Ethernet interface. For example: ifcfg-eth1.

/etc/sysconfig/network-scripts/route-eth#

There are four of these files, where # is the number of the Ethernet interface. For example: route-eth1

/etc/opt/vqes/vqes.conf

VQE-S configuration file.

/etc/opt/vqes

There may be additional backup or alternate files in the vqes directory (or another location).

/etc/opt/vqes/vqe_channels.cfg

VQE-S channel configuration file.

/etc/opt/vqes/vqes_syslog.conf

VQE-S syslog configuration file.

/usr/share/tomcat5/webapps/ems/WEB-INF/vqe.conf

VQE-S AMT configuration file with XML-RPC port numbers for management servers. If your deployment has not changed the default XML-RPC port numbers, the vqe.conf file does not have to be backed up.

/usr/share/tomcat5/webapps/ems/WEB-INF/classes/log4j.properties

VQE-S AMT log4j logging configuration file. If your deployment has not changed the default log4j configuration, the log4j.properties file does not have to be backed up.


Table 5 VQE Tools CDE110: Files That Must Be Backed Up  

File
Notes

/etc/hosts

--

/etc/ntp.conf

If additional Network Time Protocol configuration has been enabled, files in other locations may need to be backed up.

/etc/resolv.conf

--

/etc/sysconfig/network

--

/etc/sysconfig/network-scripts/ifcfg-eth#

There are four of these files, where # is the number of the Ethernet interface. For example: ifcfg-eth1.

/etc/sysconfig/network-scripts/route-eth#

There are four of these files, where # is the number of the Ethernet interface. For example: route-eth1.

VCPT configuration files in /etc/opt/vcpt/data

VCPT configuration files are in this directory. Filenames are user-defined and vary.

/etc/opt/vqes

There may be additional backup or alternate files in the vqes directory (or another location).

/etc/opt/vqes/VCDServer.cfg

VCDS configuration file.

/etc/opt/vqes/vqec_channels.cfg

VQE-C channel configuration file.

/usr/share/tomcat5/webapps/vcpt/WEB-INF/classes/log4j.properties

VCPT log4j logging configuration file. If your deployment has not changed the default log4j configuration, the log4j.properties file does not have to be backed up.


Using an ISO Upgrade Installation

This section explains how to use an ISO upgrade installation to upgrade from VQE Release 2.1 to Release 3.0 and preserve your VQE Release 2.1 configurations.


Note ISO upgrade installations must be performed using the CDE110 serial port (not the CDE110 video and keyboard ports). For these installations, the serial port connection can be through a terminal server or through a directly connected PC.

For terminal emulation software configuration, see "Configuring Terminal Emulation Software" in Chapter 2 of the Cisco CDA Visual Quality Experience Application User Guide, Release 3.0.



Note When using an ISO upgrade installation, there is a known problem related to route configurations. See "Routes May Not Be Carried Forward from VQE Release 2.1 to Release 3.0" section.


To perform an ISO upgrade installation, do the following:


Caution An ISO upgrade installation will format the hard disk on the CDE110. Formatting causes all data on the hard disk to be erased.

Backup configuration files as described in the "Backing Up Files Before Upgrading or Installing Software" section.


Step 1 Insert the ISO CD in the CDE110 CD/DVD Combo drive.

Step 2 Power on or power cycle the CDE110.

Changing the Boot Sequence to Start from the CD/DVD Combo Drive


Note Changing the boot sequence to start with the CD/DVD drive is a one-time operation for changing the boot sequence.


Step 3 When the system boots and displays "Press <F2> to enter SETUP," press F2 to go into enter BIOS Setup.

Step 4 When the BIOS Setup utility is displayed, use the arrow keys to move to the Boot Options menu (Figure 1).

Figure 1 Boot Options Menu

Step 5 So that the CD/DVD Combo drive is first in the boot order, you need to change the boot sequence to the following:

1. IDE PM: SlimType COMBO SSC-2485

2. #0440 ID01 LUN0 FUJITSU MAY203

3. IBA GE Slot 0600

4. [EFI SHELL]


Note Because the components used in the CDE110 can vary, the name of the CD/DVD Combo drive may be different from what is shown in the preceding list.


To change the boot sequence, use the arrow keys to move to the boot option you will change (for example, Boot Option #1) and press Enter. Then use the arrow keys to move to the required boot device and press Enter.

The updated Boot Option is displayed.

Step 6 To save and exit the BIOS Setup, press F10. (As an alternative to pressing F10, use the arrow keys to move to Exit in the BIOS Setup menu and select Save Changes and Exit.)

The Setup Confirmation message "Save Configuration Changes and exit now?" is displayed.

Step 7 Select Yes and press Enter.

The CDE110 restarts.

Loading the VQE Software

When the VQE installation software runs, the boot: prompt is displayed.

Step 8 Type upgrade and then press Enter. For example:

boot: upgrade 


Note If you enter invalid input at the boot: prompt, the installer displays "Could not find kernel image" and your input.

This message is harmless. Enter correct input (upgrade) and proceed with the installation.


The installation software checks that VQE software and configuration files exist. If either of these checks fail, the installation is terminated.

If the VQE software and configuration files exist, the following message is displayed before the actual upgrade process starts.

You are performing VQE upgrade from 2.1.0 to 3.0.x. If this is incorrect, please power 
off the server within 30 seconds.

You can power off the server to stop the ISO upgrade installation if the wrong CD has been used for the installation.

When you select an ISO upgrade installation and the installation begins, no further user input is required or possible.


An ISO upgrade installation does the following:

Backs up the /etc configuration files to the vqe-release-hostname-timestamp.tar.gz file by creating a tar file archive of the following files: all files under /etc, vqes.conf, the password file, Session Description Protocol (SDP) file, and so forth. Saves the tar file archive in a temporary set of files.

Formats the hard drive.

Installs the Linux operating system and add-on RPMs of VQE packages and configuration files.

Restores the following files from the tar file archive:

On a VQE-S host, the channel configuration file (/etc/opt/vqes/vqe_channels.cfg)

On a VQE Tools host, the channel configuration file (/etc/opt/vqes/vqec_channels.cfg) and all VCPT configuration files in /etc/opt/vcpt/data

On both VQE-S and VQE Tools hosts, all files in the /etc/opt/certs directory (files related to Secure Sockets Layer certificates)


Note Except for the preceding files, all other /etc configuration files from a Release 2.1 VQE host are not copied to the directories under /etc.


Table 6 shows additional files that are saved to the CDE110 hard drive.

Table 6 ISO Upgrade Installation: Restored Files  

File in the Tar File Archive
Directory Location Where Saved

backed up /etc files

/vqe-etc/etc-save/

vqe-release-hostname-timestamp.tar.gz (tar file)

/vqe-etc/


Examines configuration files under /etc that in Release 3.0 will be configurable by the VQE CMS and VCDB parameters, and generates VCDB contents for these files.

If a VCDB parameter exists for a configuration option that was in the Release 2.1 /etc files, that configuration item will be preserved in the Release 3.0 /etc files.

If a VCDB parameter does not exist for a configuration option that was in the Release 2.1 /etc files, that configuration item will not be preserved in the Release 3.0 /etc files.

Performs installation post processing

Installs a new vcdb.conf.sample file in the /etc/opt/vqes/ directory.

Saves the factory default configuration files under /etc to the directory /vqe-etc/etc-pristine.

Performs a final reboot. As part of the final reboot, runs the VQE Configuration Engine to apply the VCDB values (which the installation software generated earlier) to the VQE 3.0 configuration files under /etc.

Step 9 When the final reboot is finished, you must login as root and reset the password for root, and reset the password for the vqe user name. If there were other user accounts, they are not carried forward to VQE Release 3.0. It is possible for you to manually recreate the other user accounts. However, making manual changes in this manner is not supported or recommended.

Step 10 When the final reboot is finished, check the /var/log/vqe/vqe.log file to ensure that no significant errors occurred during the ISO upgrade installation.

Step 11 Remove the ISO CD from the CDE110 CD/DVD Combo drive and close the CD/DVD tray.


Note Leave the BIOS settings set so that the CDE110 boots first from the CD/DVD Combo drive.


Step 12 If you have made changes to Release 2.1 /etc configuration parameters that are not now under the control of the VQE CMS, the ISO upgrade installation does not preserve the changes in Release 3.0. It is possible for you to manually recreate the customized configurations in the Release 3.0 /etc configuration files. However, making manual changes in this manner is not supported or recommended.

You can examine the /vqe-etc/etc-diff file to determine the /etc file parameters (beyond the control of the VQE CMS) that have been changed.

For information on migrating channel-related files from VQE Release 2.1 to VQE Release 3.0, see the "Migrating Channel-related Files from VQE Release 2.1 to VQE Release 3.0" section.


Using an ISO Clean Installation


Caution If you use an ISO clean installation for installing VQE Release 3.0, your VQE Release 2.1 configurations will not be backed up or restored. Use an ISO clean installation only when there is no requirement to preserve VQE Release 2.1 configuration values.

An ISO clean installation reformats the hard drive and reinstalls the operating system and other packages, such as the VQE software. All old configurations are removed.

After the ISO clean installation is complete, the system automatically reboots and allows you to log in as root. Next the VQE Startup Configuration Utility automatically runs. This utility allows you to specify initial configuration values for the CDE110 server and the VQE software. Using this input, the startup utility generates initial VQE Configuration Database (VCDB) contents and reboots the CDE110 server. When the server comes back up, VQE Configuration Engine applies the changes in VCDB to the configuration files under the /etc directory.


Note ISO clean installations must be performed using the CDE110 serial port (not the CDE110 video and keyboard ports). For these installations, the serial port connection can be through a terminal server or through a directly connected PC.

For terminal emulation software configuration, see "Configuring Terminal Emulation Software" in Chapter 2 of the Cisco CDA Visual Quality Experience Application User Guide, Release 3.0.


To perform an ISO clean installation, do the following:


Caution An ISO clean installation will format the hard disk on the CDE110. Formatting causes all data on the hard disk to be erased.

Backup configuration files as described in the "Backing Up Files Before Upgrading or Installing Software" section. With this backup of the configuration files, you will have the VQE 2.1 configuration files available for reference if you need them after the ISO clean installation is complete.


Step 1 Insert the ISO CD in the CDE110 CD/DVD Combo drive.

Step 2 Power on or power cycle the CDE110.

Changing the Boot Sequence to Start from the CD/DVD Combo Drive


Note Changing the boot sequence to start with the CD/DVD drive is a one-time operation for changing the boot sequence.


Step 3 When the system boots and displays "Press <F2> to enter SETUP," press F2 to go into enter BIOS Setup.

Step 4 When the BIOS Setup utility is displayed, use the arrow keys to move to the Boot Options menu (Figure 1).

Figure 2 Boot Options Menu

Step 5 So that the CD/DVD Combo drive is first in the boot order, you need to change the boot sequence to the following:

1. IDE PM: SlimType COMBO SSC-2485

2. #0440 ID01 LUN0 FUJITSU MAY203

3. IBA GE Slot 0600

4. [EFI SHELL]


Note Because the components used in the CDE110 can vary, the name of the CD/DVD Combo drive may be different from what is shown in the preceding list.


To change the boot sequence, use the arrow keys to move to the boot option you will change (for example, Boot Option #1) and press Enter. Then use the arrow keys to move to the required boot device and press Enter.

The updated Boot Option is displayed.

Step 6 To save and exit the BIOS Setup, press F10. (As an alternative to pressing F10, use the arrow keys to move to Exit in the BIOS Setup menu and select Save Changes and Exit.)

The Setup Confirmation message "Save Configuration Changes and exit now?" is displayed.

Step 7 Select Yes and press Enter.

The CDE110 restarts.

Loading the VQE Software

When the VQE installation software runs, the boot: prompt is displayed.

Step 8 Type clean and then press Enter. For example:

boot: clean 


Note If you enter invalid input at the boot: prompt, the installer displays "Could not find kernel image" and your input.

This message is harmless. Enter correct input (clean) and proceed with the installation.


When you select an ISO clean installation and the installation begins, no further user input is required or allowed until the initial configuration of the CDE110 server.

An ISO clean installation does the following:

1. Formats the hard disk.

2. Installs the Linux operating system and all packages.

3. Reboots.

4. Installs the add-on RPM of VQE packages and configuration files.

5. Performs installation post processing.

a. Installs a new vcdb.conf.sample file in the /etc/opt/vqes/ directory.

b. Saves the factory default configuration files under /etc to the directory /vqe-etc/etc-pristine.

6. Reboots the server.

Step 9 Remove the ISO CD from the CDE110 CD/DVD Combo drive and close the CD/DVD tray.


Note Leave the BIOS settings set so that the CDE110 boots first from the CD/DVD Combo drive.


Step 10 When the CDE110 completes the final reboot, you are required to log in as root and change the password for root:

localhost.localdomain login: root
You are required to change your password immediately (root enforced)

You can now choose the new password or passphrase.

A valid password should be a mix of upper and lower case letters,
digits, and other characters.  You can use an 8 character long
password with characters from at least 3 of these 4 classes, or
a 7 character long password containing characters from all the
classes.  An upper case letter that begins the password and a
digit that ends it do not count towards the number of character
classes used.

A passphrase should be of at least 3 words, 12 to 40 characters
long and contain enough different characters.


Enter new password: 
Re-type new password: 

Step 11 Enter the new password for root.

When you change the root password, the VQE Startup Configuration Utility runs:

Welcome to the Cisco VQE startup configuration utility.  This utility is
intended to facilitate the initial setup of the VQE system.  This is not
intended as a complete configuration tool, but merely to assist in the most
common configuration needs, therefore you may still need to customize the VQE
configuration for your specific needs after this utility is complete.

The VQE Startup Configuration Utility allows you to specify initial configuration values for the CDE110 server and the VQE software. Using this input, the startup utility generates initial VQE Configuration Database (VCDB) contents and reboots the CDE110 server. When the server comes back up, VQE Configuration Engine applies the changes in VCDB to the configuration files under the /etc directory.

For information on using the startup utility, see Chapter 2, "Getting Started with the VQE Startup Configuration Utility" in the Cisco CDA Visual Quality Experience Application User Guide, Release 3.0.

For information on the VQE Configuration Database and Configuration Engine, see Chapter 6, "Configuring VQE Server and VQE Tools" in the Cisco CDA Visual Quality Experience Application User Guide, Release 3.0.

For information on migrating channel-related files from VQE Release 2.1 to VQE Release 3.0, see the "Migrating Channel-related Files from VQE Release 2.1 to VQE Release 3.0" section.


Migrating Channel-related Files from VQE Release 2.1 to VQE Release 3.0

VQE can use three types of channel-related configuration files:

One or more VCPT configuration files in /etc/opt/vcpt/data on the CDE110 that hosts VCPT. These are XML files with user-defined filenames.

One VQE-S channel configuration file in /etc/opt/vqes/vqe_channels.cfg on the CDE110 that hosts VQE-S.

One VQE-C channel configuration file in /etc/opt/vqes/vqec_channels.cfg on the CDE110 that hosts VCPT.

The following sections provide information on migrating channel-related files from VQE Release 2.1 to VQE Release 3.0:

"Creating VCPT Configuration Files for Release 3.0"

"Creating VQE-S and VQE-C Channel Configuration Files for Release 3.0"


Note VQE-S and VQE-C channel configuration files have some compatibility restrictions. For information on these restrictions, see the "VQE SDP Channel Information Compatibility" section.


Creating VCPT Configuration Files for Release 3.0

VCPT Release 3.0 is able to open and use valid VCPT 2.1 configuration files. When VCPT Release 3.0 opens a VCPT 2.1 configuration file, the fields for new Release 3.0 functionality items related to Rapid Channel Change and Extended RTCP Reports are blank. When you save the Release 2.1 file, VCPT converts the files to the Release 3.0 format, updating the file so that any changed channel values (including those related to Rapid Channel Change and Extended RTCP Reports) are saved.

Creating VQE-S and VQE-C Channel Configuration Files for Release 3.0

Release 2.1 channel configuration files created with VCPT are usable with the Release 3.0 version of VQE-S and VQE-C. When a Release 2.1 channel configuration file is used, new VQE Release 3.0 functionality will not be used because it is not configured.

When migrating from VQE Release 2.1 to VQE Release 3.0, the easiest way to create a valid Release 3.0 channel configuration file for VQE-S and VQE-C is to open a 3.0 channel-provisioning server configuration file and send the channel information to the Release 3.0 VQE Servers and VQE Client Channel Configuration Delivery Servers (VCDS). For example with VCPT, do the following:

1. Create a VCPT Release 3.0 configuration file for the channel lineup. (See the previous section "Creating VCPT Configuration Files for Release 3.0").

2. With that VCPT Release 3.0 configuration file open in VCPT, use VCPT to send the channel information to the VQE Servers and to VCDS.

When VQE-S and VCDS receive the channel information, VQE-S and VCDS use it to create valid Release 3.0 channel configuration files for VQE-S or VQE-C, respectively.

As an alternative to the above method for creating a Release 3.0 channel configuration file, you can use VCPT to create a new VCPT Release 3.0 configuration file by manually entering your existing VQE Release 2.1 channel, server, and association information into the new VCPT configuration file.

Supporting Software Hardening Guides and VQE

Customers who wish to apply the security recommendations published by SysAdmin, Audit, Network, Security Institute (SANS) or National Security Agency (NSA), as described in the documents referenced in the following sections, should be aware of some issues in using these recommendations that may affect the correct operation of the VQE-S.

The following sections describe the particular areas where customers should exercise care in following the security recommendations in these hardening guides:

Linux Security Checklist

The 60 Minute Network Security Guide

Linux Security Checklist

Document: Linux Security Checklist, Version 2

Document URL:

http://www.sans.org/score/checklists/linuxchecklist.pdf

For the Linux operating system, the following are SANS requirements where it appears that if the user were to follow the specific recommendations of the guide it would likely break behavior that VQE implements.

Page 2, item 2: "System Patches". Customers should obtain all system patches through Cisco support, and not directly from RedHat. Cisco will provide timely patches and notifications to customers to address security concerns that may arise within the components of the linux distribution.

Page 3, item 3: "Disabling Unnecessary Services". All unnecessary services have been disabled on the shipped product. VQE customers should not normally need to disable any of the services that are enabled by default after the product is installed.

Page 3, item 5: "Default Password Policy". The default password settings for the VQE-S are set in /etc/pam.d/system-auth-ac rather than in /etc/login.defs See 'man pam_passwdqc' for more information.

Page 7, item 13: "System Logging". The VQE-S includes a modified version of syslogd, which is customized in order to support certain VQE-S functions. VQE customers must therefore not replace syslog with syslog-ng, as suggested in this item.

Page 11, item 20: "Selinux". Selinux functionality is disabled on the VQE-S in its factory configuration, and it should not be enabled. Enabling the Selinux functions on the VQE-S may have unexpected consequences.

The 60 Minute Network Security Guide

The NSA's The 60 Minute Network Security Guide has guidance relevant to the Apache web server and the VQE Server software.

Document: The 60 Minute Network Security Guide, Version 2.1

Document URL:http://www.nsa.gov/ia/_files/support/I33-011R-2006.pdf

If VQE customers follow instructions in the "Unix Web Servers" section of The 60 Minute Network Security Guide, it will not break the VQE web application system.

The following guidance applies to VQE Server software except for the Apache web server, which was discussed in the preceding paragraph.

Page 10 and 40: "Follow The Concept Of Least Privilege". This section recommends reducing the privileges of common system utilities such as configuration tools and script interpreters. Some of these utilities may be used by the VQE-S software and their permissions should not be modified.

Page 35, item 2: "Services and Port". All unnecessary services have been disabled on the shipped product. VQE customers should not normally need to disable any of the services that are enabled by default after the product is installed.

Page 36, item 2: "Permissions". Some VQE-S services require SUID/SGID permissions. The permissions of these files, along with every other VQE-S related file, should not be modified.

Page 37, "Core Dumps". The VQE-S stores crash related information in the core dump files. By removing the core file, valuable debugging information is discarded. Settings related to the creation and storage of core dumps should not be modified. Additionally, core dumps should only be removed after consultation with your Cisco Technical Support Contact.

Page 39, "Logs". The VQE-S uses a customized version of syslogd in order to log VQE related messages. Using a remote host to log syslog messages from the VQE-S is not supported at this time.

Page 39, "Chroot Environment". The VQE-S application requires a specific level of permissions and should not be set to run in a chroot environment.

Notices

The following notices pertain to this software license.

OpenSSL/Open SSL Project

This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).

This product includes cryptographic software written by Eric Young (eay@cryptsoft.com).

This product includes software written by Tim Hudson (tjh@cryptsoft.com).

License Issues

The OpenSSL toolkit stays under a dual license, i.e. both the conditions of the OpenSSL License and the original SSLeay license apply to the toolkit. See below for the actual license texts. Actually both licenses are BSD-style Open Source licenses. In case of any license issues related to OpenSSL please contact openssl-core@openssl.org.

OpenSSL License:

Copyright © 1998-2007 The OpenSSL Project. All rights reserved.

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the copyright notice, this list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions, and the following disclaimer in the documentation and/or other materials provided with the distribution.

3. All advertising materials mentioning features or use of this software must display the following acknowledgment: "This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/)".

4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to endorse or promote products derived from this software without prior written permission. For written permission, please contact openssl-core@openssl.org.

5. Products derived from this software may not be called "OpenSSL" nor may "OpenSSL" appear in their names without prior written permission of the OpenSSL Project.

6. Redistributions of any form whatsoever must retain the following acknowledgment:

"This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/)".

THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT "AS IS"' AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software written by Tim Hudson (tjh@cryptsoft.com).

Original SSLeay License:

Copyright © 1995-1998 Eric Young (eay@cryptsoft.com). All rights reserved.

This package is an SSL implementation written by Eric Young (eay@cryptsoft.com).

The implementation was written so as to conform with Netscapes SSL.

This library is free for commercial and non-commercial use as long as the following conditions are adhered to. The following conditions apply to all code found in this distribution, be it the RC4, RSA, lhash, DES, etc., code; not just the SSL code. The SSL documentation included with this distribution is covered by the same copyright terms except that the holder is Tim Hudson (tjh@cryptsoft.com).

Copyright remains Eric Young's, and as such any Copyright notices in the code are not to be removed. If this package is used in a product, Eric Young should be given attribution as the author of the parts of the library used. This can be in the form of a textual message at program startup or in documentation (online or textual) provided with the package.

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the copyright notice, this list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

3. All advertising materials mentioning features or use of this software must display the following acknowledgement:

"This product includes cryptographic software written by Eric Young (eay@cryptsoft.com)".

The word `cryptographic' can be left out if the routines from the library being used are not cryptography-related.

4. If you include any Windows specific code (or a derivative thereof) from the apps directory (application code) you must include an acknowledgement: "This product includes software written by Tim Hudson (tjh@cryptsoft.com)".

THIS SOFTWARE IS PROVIDED BY ERIC YOUNG "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

The license and distribution terms for any publicly available version or derivative of this code cannot be changed. i.e. this code cannot simply be copied and put under another distribution license [including the GNU Public License].

GNU General Public License Information

Cisco CDA Visual Quality Experience (VQE) Application, Release 3.0, includes Cisco-modified software derived from the following packages that are licensed under version 2 of the GNU General Public License (GPLv2):

irqbalance

logrotate

syslogd

Cisco will make the source code of these modified packages available upon request, in accordance with the terms of the GPLv2 license. Interested parties may obtain the source code by making a written request to:

Cisco Legal Department
300 E. Tasman Drive,
San Jose, California 95134

Please include the product name, version number, date of purchase, and specifics regarding the code you are requesting.

Related Documentation

Refer to the following documents for additional information about Cisco VQE and the Cisco CDE110 appliance:

Cisco CDA Visual Quality Experience Application User Guide, Release 3.0 (OL-14115-03)

http://www.cisco.com/en/US/docs/video/cds/cda/vqe/3_0/user/guide/vqe_userguide3_0.pdf

Cisco Content Delivery Engine 110 Hardware Installation Guide (OL-14114-01)

http://www.cisco.com/en/US/docs/video/cds/cde/cde110/installation/guide/cde110_install.html

Regulatory Compliance and Safety Information for the Cisco Content Delivery Engine 110 (78-18228-01)

http://www.cisco.com/en/US/docs/video/cds/cde/regulatory/compliance/cde110_rcsi.pdf

The entire Content Delivery Systems documentation suite is available on Cisco.com at:

http://www.cisco.com/en/US/products/ps7191/Products_Sub_Category_Home.html

The VQE Client (VQE-C) documentation is included in the VQE-C software TAR file. If you are a registered Cisco.com user, the file can be downloaded from the following location:

http://www.cisco.com/public/sw-center/content-delivery/cda.shtml

Table 7 lists the VQE Client documentation that is provided.

Table 7 VQE Client Documentation

VQE-C Document
Description

VQE-C Release Notes

Provides release-specific information for VQE-C.

VQE-C System Integration Reference

Provides information on VQE-C components, architecture, integration, and APIs. Also includes a VQE-C quick-start guide.

VQE-C System Configuration Guide

Explains certain factors to consider when configuring and deploying VQE-C. Also provides reference information on the VQE-C configuration file parameters.

VQE-C CLI Command Reference

Provides reference information on the VQE-C command-line interface.


Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:

http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html

Subscribe to the What's New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS version 2.0.


This document is to be used in conjunction with the documents listed in the "Related Documentation" section.


[an error occurred while processing this directive]