Table of Contents
Installing and Uninstalling QPMSetup for Working with ACS Device Groups and User Permissions
Verifying QPM Installation
Troubleshooting QPM Installation
Troubleshooting Problems Starting Common Services
Troubleshooting Problems Starting QPM
Obtaining System Status Information for Troubleshooting
Installing and Uninstalling QPM
This chapter contains the following topics:
- Installing QPM
- Setup for Working with ACS Device Groups and User Permissions
- Verifying QPM Installation
- Troubleshooting QPM Installation
- Uninstalling QPM
Installing QPM
QPM is automatically installed in the CiscoWorks Common Services installation folder.
During the QPM installation process, you will be asked for the following information:
- QPM database password—The QPM database password is required internally by the system to ensure database security. You do not need to use the password. You can change the password through Common Services in the CiscoWorks2000 desktop. Select VPN/Security Management Solution > Administration > Configuration > Database Credentials.
- Percentage of free disk space—QPM keeps a percentage of the disk free for database backups. If you intend to perform QPM monitoring tasks, your QPM database will be larger, and will need more free disk space for backup purposes. When you run out of available disk space, QPM notifies you and you can compact your database using the QPM Rebuild Database utility on the QPM server. Before using this utility you must backup your QPM database.
Procedure
Step 1 Insert the QoS Policy Manager CD-ROM into your CD-ROM drive.
 |
Note We do not recommend installing QPM from a network CD-ROM drive. |
Step 2 Select Start>Run, and enter d:\QPM-K9.exe, where d is your CD-ROM drive. The Welcome window opens.
Step 3 Click Next to continue. The Select Program Folder window opens.
Step 4 In the Select Program Folder window, specify or select a program group, if you do not want to use the default name. Click Next.
Step 5 Enter the password for the QoS Policy Manager Database, and confirm your password. Click Next.
Step 6 In the Setup Type window, enter the percentage of disk space to keep free on the current partition. If you intend to perform QPM monitoring tasks, we recommend that you keep a larger amount of disk space free for backup purposes. Click Next.
Step 7 Review your selections in the Start Copying Files window. If you are satisfied, click Next. If you are not satisfied, click Back until you come to the window that has selections you want to change.
After you click Next, QPM is installed on your machine. This process takes a few minutes.
After QPM is installed, the Wizard Complete window opens.
Step 8 Select whether you want to restart your computer now or later, and click Finish to complete the setup. You must restart your computer before you begin to work with QPM.
The QPM services start automatically whenever you start your computer.
|
Note Remove the QPM CD-ROM before you restart your computer. |
Step 9 If you intend to work with ACS device groups and user permissions, configure settings in ACS and CiscoWorks2000 as described in Setup for Working with ACS Device Groups and User Permissions. For more information about QPM user permissions, see "QPM User Permissions."
Step 10 After setup is complete, verify the QPM installation. See Verifying QPM Installation for details.
If you encounter problems starting QPM, see Troubleshooting QPM Installation.
Setup for Working with ACS Device Groups and User Permissions
To work with ACS device groups and user permissions, you must configure CiscoWorks Common Services to use ACS authorization and authentication. See Table 2-1 for details of the steps required.
|
Note Even if you use ACS authentication, CiscoWorks Common Services uses local authorization for all CiscoWorks Common Services-based tasks. To perform these tasks, the user must also be defined in CiscoWorks Common Services, and be given the appropriate privilege level. |
For more information about configuring ACS authorization authentication, see the user guide or online help for CiscoWorks Common Services.
Table 2-1: Steps Required to Work with ACS Device Groups and User Permissions
| Task | Procedure |
|---|---|
|
Define the QPM server in ACS. |
1. In ACS, select Network Configuration. 2. Add the QPM server to a device group, or add it as an individual device, depending on the ACS setup. 3. Enter the ACS shared key in the Key field. |
|
Define the Login Module in CiscoWorks as TACACS+. |
1. In the CiscoWorks2000 desktop, select Server Configuration > Setup > Security > Select Login Module. 2. Select TACACS+, if it is not already selected. Click Next. 3. Enter the ACS server name. Change the default port, if required. You do not need to enter a key. 4. Click Finish. |
|
Synchronize CiscoWorks Common Services with the ACS server configuration. |
1. In the CiscoWorks2000 desktop, select 2. In the AAA Server Information dialog box, click Synchronize. 3. Add Login details. Enter the ACS shared key that you defined for QPM server in ACS. 4. Click Register. 5. Select qpm, and click the Add button, to add the QPM permission roles in ACS. Click OK. 6. Click Finish. |
|
Define usernames, device groups and user groups in ACS. |
1. In ACS, select User Setup to define usernames. You must define the same username and password as you define for CiscoWorks authentication. 2. Select Group Setup to define permissions for device groups. |
|
Note To remove the QPM permission roles from an ACS server, click Unregister in the AAA Server Information dialog box. To add QPM permission roles to ACS after they were removed using the Unregister button, click Register in the AAA Server Information dialog box |
|
Note To change the authorization and authentication mode back to CiscoWorks permissions, you must configure CiscoWorks Common Services to use local authorization and authentication. For details of this procedure, see the user guide or online help for CiscoWorks Common Services. |
Verifying QPM Installation
QoS Policy Manager is accessed from the CiscoWorks2000 desktop.
Procedure
Step 1 In your web browser, start CiscoWorks2000. The default URL is http://< QPMinstall>:1741, where <QPMinstall> is the name of the computer with the QPM installation.
The CiscoWorks2000 desktop is displayed.
|
Note The first time you start CiscoWorks2000 on a CiscoWorks2000 server or a client machine, the Java Runtime Environment is automatically installed. |
Step 2 Verify on the front page that Java, JavaScript, and cookies are enabled. If they are not enabled, change your browser preferences to enable them, then continue to the next step.
Step 3 Log into CiscoWorks2000 with your username and password.
The CiscoWorks2000 navigation tree appears in the left pane.
Step 4 Click QoS Policy Manager in the navigation tree.
Step 5 Click QPM under the QoS Policy Manager drawer.
A Security Alert window opens. Click Yes to proceed.
QPM opens in a separate browser window.
If you encounter problems starting QPM, see Troubleshooting QPM Installation, for possible causes and solutions.
Troubleshooting QPM Installation
The following topics can help you troubleshoot problems you might encounter while installing QPM, or starting QPM:
- Troubleshooting Problems During Installation
- Troubleshooting Problems Starting Common Services
- Troubleshooting Problems Starting QPM
- Obtaining System Status Information for Troubleshooting
Troubleshooting Problems During Installation
Problem—Installation process fails. An error message appears telling you that you cannot install QPM because the "qpm" installation subdirectory already exists under the Common Services installation directory.
Explanation—The "qpm" installation directory was not completely deleted during a previous uninstall operation.
Recommended Action—Delete the "qpm" installation directory and start the installation process again. If some of the files are locked and cannot be deleted, restart the computer, and then delete.
Troubleshooting Problems Starting Common Services
Common Services might not start for any of the following reasons:
Changing Windows Account
Problem—If you install Common Services and QPM using a specific admin account/password, everything works as planned. However, if you change the password to this Windows account, then installed services fail to start.
Recommended Action—Change the password for all services to match the current password of the account which they were installed. Common Services include Tomcat, fms, lm, and da-framework services.
Port Conflict
Problem—You cannot start Common Services because port 1741, which is used by Common Services, is in use by another application.
Recommended Action—Try the following:
- Restart the QPM server.
- To run CiscoWorks, enter http:// <QPMinstall>:1741/login.html, where <QPMinstall> is the name or IP address of the QPM server.
Troubleshooting Problems Starting QPM
QPM might not start for any of the following reasons:
Changed Database Password
Problem—If you change the QPM database password and then try to start QPM without restarting the QPM server, the connection to the database is lost.
Recommended Action—Restart the QPM server after changing the QPM database password.
Old Version of Java Plug-In
Problem—QPM might not start if there is a older version of the Java plug-in than the one required by QPM.
Recommended Action—Uninstall the old Java plug-in. When you start CiscoWorks, it automatically installs the new Java plug-in.
Incorrect User Permissions
Problem—Many buttons in the user interface are grayed out because you might not have the correct user permissions to perform those tasks.
Recommended Action—Verify your user permissions in the CiscoWorks2000 desktop (Server Configuration > Setup > Security), or in ACS (depending on the method you are using for user authentication). For more information about working with ACS user permissions, see Setup for Working with ACS Device Groups and User Permissions.
Unknown Cause
Recommended Action—Restart the QPM server.
Obtaining System Status Information for Troubleshooting
If QPM does not run after installation, or if unusual exceptions occur or error windows are displayed while running QPM, you can obtain system status information by running the QPM Diagnostic Tool on the QPM server. This tool generates a report in a browser window of the system status with its diagnostics and suggests possible solutions where applicable.
If you want to send the diagnostics results to a TAC representative, you can run the MDCSupport.exe command-line utility, which collects configuration and system information in a zip file called MDCSupportInformation.zip. This zip file includes any problems that occurred during the installation or the running of QPM. You can send this file to the Cisco Technical Assistance Center (TAC) support staff to assist in diagnosing the problems.
Procedure
Step 1 On the QPM server, select Start > Programs > Cisco Systems > QoS Policy Manager > Diagnostic Tool.
A report is generated and displayed in a browser window for you to view.
Step 2 To send the diagnostics results to a TAC representative:
a. At the command line, enter MDCSupport.exe and press Enter.
A zip file named MDCSupportInformation.zip is created under c:\Program Files\CSCOpx\MDC\etc.
b. Email this file to the TAC representative.
Uninstalling QPM
You can uninstall QPM directly from the QPM setup or from the CiscoWorks Common Services setup. If you are uninstalling only QPM, it is easier to uninstall from the QPM setup. If you want to uninstall QPM and CiscoWorks Common Services, use the CiscoWorks Common Services setup to uninstall both applications in a single procedure.
|
Note Uninstalling QPM does not remove your deployed policies from the network devices. |
Procedure from QPM Setup
Step 1 Select Start > Settings > Control Panel > Add/Remove Programs. The Add/Remove Programs window opens.
Step 2 Select QoS Policy Manager 3.0, and click Change/Remove.
The QPM uninstallation process starts, and QPM is removed from your computer.
Step 3 Restart your computer.
Step 4 Ensure that the QPM directory under the CiscoWorks Common Services installation directory has been completely deleted.
|
Note You cannot reinstall QPM if the QPM installation directory exists. |
Procedure from CiscoWorks Common Services Setup
Step 1 Select Start > Settings > Control Panel > Add/Remove Programs. The Add/Remove Programs window opens.
Step 2 Select CiscoWorks2000, and click Change/Remove.
Step 3 In the Uninstallation dialog box, clear the check boxes for the applications you do not want to uninstall. Leave QoS Policy Manager selected. Click Next.
The QPM uninstallation process starts, and QPM is removed from your computer.
Step 4 Restart your computer.
Step 5 Ensure that the QPM directory under the CiscoWorks Common Services installation directory has been completely deleted.
|
Note You cannot reinstall QPM if the QPM installation directory exists. |