Catalyst Center Assurance advance

Oh, we can start off hard. Yes, sure. Good morning, everyone, and welcome to our expert insight.00:00Webinar?00:20Today we will have a session on cater center you can say advanced assurance features. We are having a two fantastic presenter today on one the Madhura, and.00:22And Lassia and we all are a part of our customer experience, you can say organizations, and within the customer organizations, we, we are specifically for a customer success specialist.00:42We help customers to give the knowledge about the Cisco Catalyst Center features, ok, and we help them to basically adopt those features so that you, you all can able to use it in a very optimum manner.00:55If if I introduced Madhura, then Madhura is the customer success specialist for enterprise in APJC region. She has around ten plus years of experience working on Cisco's network management solutions, automations, routing, switching technology.01:15At the various customer engagements.01:33Madhura also carries several industry certificates like CCNP and have worked with multiple enterprise customers and service providers. Lusia, customer success specialist for APJC region and she has also.01:36Have a certifications, Cisco certification in hand, ok? She is also certified a devnet specialist and the network associate specialist. Okay, Russia also have the vast knowledge and experience in the catalyst centers and the automations of Cisco technologies.01:54Over to the next slide. Yeah, thank you. I'm sorry guys. So in the, if if you if you see in today's I would say webinar, right? We are, if you have any questions, you can go to the, you can say.02:16Right side bottom corner, you will have a three dots, ok? Or if you click on that three dots, you will have maybe a Slido question and answer. So click on that Slido and then you can put your questions. We are having a fantastic panelist panelist team, right? Who will answer those questions.02:35And some of the answers we may take it in the session as well, right? Over to you, Madhura and good luck. Thank you, Hardik for the moderating today's session. Now, before we start the actual session.02:55Let's go ahead and discuss about something which is a very hot topic, Cisco IQ. If you are looking out for the Cisco announcements or over LinkedIn, you can see Cisco IQ is a new portfolio or a new platform that has come in. So if you have onboarded on it.03:14Great, if not, there is always a scope, you can reach out to us for help. So quickly one slider discussion what it is just to give you the glimpses and keep you ahead in the queue. You manage your entire network infrastructure, most likely you will be generating.03:35Massive amount of data every single day, but data is not enough. It's just scattered, right? You need some intelligence over it.03:54Now this is exactly where the Cisco IQ as a platform comes in. Cisco IQ is Cisco's dedicated digital hub, which is solely designed to turn your network data into some clear and actionable insights. So think it as a personal advisor from your Cisco.04:03Environment Instead of guessing where to optimize in your network, the Cisco IT will provide you the roadmap for it. So it can help you in benchmarking your current performance for the network. You you can identify specific optimization opportunities.04:23Then you can apply the industry proven best practices which will be as a part of Cisco IQ. IQ will have visibility for your inventory. It can suggest few things and everything of this can happen in a centralized dashboard. So whether you are looking to improve your network stability, if you want to reduce the operation.04:42Friction or simply get more value out of the existing investments that you have from cisco's side.05:02Cisco IQ will help you to bridge this gap because it can connect to those technologies and bring all the data together in one screen. So, obviously, I can vouch for it that Cisco IQ will bridge the gap between having the cisco's technology into your network and.05:09Mastering it and getting the value out of it. Now coming back to the today's topic, what we are going to discuss today is related to Catalyst Center Advanced assurance feature. So this session is second session of a series that we are running for Catalyst Center advanced.05:29Features.05:49Oh, sorry, assurance features. Now, we will be touching upon few of the, few of the features which are really important from troubleshooting aspect or from the observability standpoint. So we have a couple of use cases also for you that we are gonna discuss on how to navigate through.05:50Atlas center assurance pages while we are doing that.06:10So, let's do a quick recap. Last Thursday we had this session where we touched upon the basics ones. So what exactly is the catalyst center assurance at a high level we saw? So just to let you remind.06:14These are the assurance features that we have. We touched base upon what is network health, client health, application health, how we can modify it and, use it for our understanding to gauge how your network is.06:31Performing, how optimal your network is designed. Now we will go to the device three 60, client three 60 and we'll focus more on a demo. Last year we'll do the demo. So when you come to any device detail page, you can like you might have some 500 switches.06:48Just into your network. You can get to know.07:08All this information for each and every switch. This is my lab switch from where from where I have taken the snapshot. You can get on a granular port level basis as well once you open this device details. So you can land here from your inventory page. You have to go into the inventory.07:12All devices and then click on the device, say device details. Once you have these device details, you will get to know about the hardware, about the software, about the system that you have some of the configuration. This feature is introduced from 23710 version, which is the current.07:31Recommended release for catalyst center. You will get to know there are configurations for devices that get stored as well. So you can see the clear text configurations as well as there is something called config drift, might get covered in the demo.07:51Where you can see if there is any configuration on particular switch that has been changed, you will see that as a part of a config drift. Most of the times for network outages, human error is the culprit.08:10I would say 9090 95 % time it's a human intervention that causes the outage. So you will get to know who did what in that conflict drift. Now, if you see, let's go back here. If you see in the device details itself, you have this view three 60 view. So this three 60.08:26Is this looks like something like this. Once you go into the device three 60 view, which is a advantage license level feature.08:46You will get to see a graph which is coordinated with the health score of your device. So if you hover over that, what you see is what is the device health, what is the telemetry status? You see the amber.here, that one.08:55What are the device like system resources, where do we stand at Memory and CPU utilization. This is a switch wired network, that's why you can see these parameters. Same goes for all the access points WLC, any component that you have.09:11Physical component in your infrastructure or logical component as in virtual switches as well, whichever are compatible. Now, what it gives here is just focus on the red.small one, it will give you the events happening into your switch and those events you will be able to scroll down and see.09:28See in depth. You will get to see the topology as well.09:48Where are your switches connected? The links you can click on them as well. Now, similar to this, there is a client three 60. How it can help you? Let's say there is, one particular client that raises a ticket, comes and lands in your bucket saying that I have a.09:52The issue yesterday.10:12E.g.. Now, what you can do is go into this particular client. This is where you will land called as client three 60. You will see again graphical representation. It can be shown for last 14 days, one four days officially.10:15So you can see whichever time zone it happened because assurance is all about when it happened, what were the situational things at that time and then how we can troubleshoot, what all data I have.10:32Corresponding to that time. So what all things you will see is what if there are any issues for this client, for this particular switch, for this particular, let's say if it is wireless access point and the WLC ongoing. Then there will be some onboarding summary that will be given.10:49It means for how many times there were onboarding attempts?11:09How many times it was successful and failed? If you dig into this by view details, you will get to know more and more granular information. Demo will cover it. Then we will see the events happening, the small red, green dots you see here, those are the events. The blue line that you see, it's a.11:13Traffic utilization, how exactly the traffic was consumed, ok?11:34Then there are some tools that can help you. Application experience, if you have enabled the n bar and C bar, and put on the application telemetry, you will see how each and every client can see this application experience. Then you will see.11:39Device related particular info. So there are few features like Intel analytics, which do cover like device related granular details like drivers, which are drivers you have. So we recommend to.11:57Implement that feature. It's a part of advantage license and for that there are few prerequisites. The documentations are available for this on Cisco's like user guides, you can refer them as well. Then we will see the connectivity related.12:12Parameters like what was the RSSI and SNR graphical representation. If it is iOS device, you have the iOS analytics for Samsung also you will get to see what it shows basically is let's say if a mobile is roaming.12:33How far, how far are the APs, what is the strength of the signal and stuff and how why this particular AP is chosen, likewise, even the roaming events do get captured. So we will see this in.12:48Demo. Now coming to the applications, we have something called as application three 60 because, just connection connecting to the internet is not the bare minimum nowadays. Bare minimum is I should be able to run.13:04The calls, the applications with good throughput. To know that you would like to understand how any one particular application is doing in my network. So once you have this application experience enabled, you will get to see this application three 60 where again, you can see.13:21Select some filters, timeline.13:41And then you can see the particular application's health, how it is going. Same goes for the, like these parameters, you will be able to see the application health details. If something is scoring to why, you can see this.13:45From here. Now I'll be handed over to please go ahead with the demo. Thank you for that explanation like now I hope we got a theoretical understanding of how.14:01Device details device three 60 trying to 60 looks like. But now let's get a visual understanding. Now, as you might already know and have seen several times that this is a home dashboard of catalyst center.14:20Now the if we want to go to device details, there are two ways in which we can go through. It can be through inventory, so provision inventory and here you can we'll just filter out switches and find out one switch.14:36Which is reachable. So you can click on this view details and it will take you to a new tab which will be the device details page or else if you don't want to go through several pages, all you need to do is click on the search bar that is available on the top of the catalyst center.14:51And give either device name, MAC address or IP address, and you will be able to see all these options for that particular device. Topology, device dashboard, device details, inventory device three 60, so if you want to go to any of these pages, all you need to do is click here and it will take you directly to that specific page.15:08Now I'll just click on the device details and this one. Now this is the summary. As you can see, this is a stack switch, so you see there are two switches here and we have the four portal.15:28All the ports like if they are connected or admin disabled error disabled, whatever is the status of the port that is seen here. And not only that, you will be able to get granular information about that code, which we'll see in a few seconds.15:43Now you see this system and layer two since this is a summary, we are getting a high level view of the device like image version, how many fan race power supplies, SFT modules, and then if you there is this layer two configuration.16:00And there is this edit option which is available from 23710 version, but 1st let's work on this thing and then we'll go to that part also. So as you can see there are two ports which are up current which are connected currently.16:18And you get all this information, the speed MPU, last input output, Mac address, administrators, so basically the whole port status along with its details, and if I scroll further down I'll be able to see this allocated power and maximum allocated power as well.16:34Along with the neighbor details and here in the end of the page, you will be able to see the layer to configuration for this particular switch. And if you click on this edit option, it will take you to edit that layer to configuration, which we will see in just some seconds.16:53But 1st, when I clicked on this port actions, you are, you can see that there are two options here. Port shut your Mac address. Now what these will do is it will help you to shut the port directly from catalyst center without you logging into PLM.17:10You just need to come to this device details if you want to shut the port to do some troubleshooting or just to shut the code, then you just come to the device details enter the name, come to device details and shut the port directly. Now I'll just do that.17:26And within few yeah, you'll also get this warning saying that the port status change might be leading to device configuration change within few seconds the port shut will be done. And then you it will also be.17:41It will also be reflecting on this page as well as you can see this gigabit 203 is now shut. And again, if you want to bring it up, all you need to do is put NO shut and within just one or 2 s it will be up.17:58And then, so this is an access port by the way, so we are able to do all these options for an access port. Now let's go to a port which is a, which is not a layer two port. Now that is this 10 gb two/one/one.18:13And similar kind of information is available for this particular port as well. And if I click on this expand, there is some warning here, more information alerts on this page. And if I click on this expand, I am seeing four information, four points here, which mentions that port access.18:30Port action access VLAN update is not supported on the selected port. That is because port actions are only supported on user facing or access. And since this is not a layer to port, we are not able to make any changes. Even though we have this port actions option, this port shut and clear matter.18:49So, I just want to emphasize that these four actions are only available for now if we go to the system, we will be able to see hardware and software information like what is the device type PDs.19:10Serial number, so now let's say you open a case for this particular device and then the tech engineer is asking you for the version and the device model, then all you need to do is come here and copy everything and share it with them.19:27And then you will also be able to see the provisioning status, so this is from the center perspective when if the last provisioning is success or not and the and then you will be also able to see the power supply status for each of the switches.19:42We have two switches here.20:03And then there is this fans, like the operational status of the fans and the SFP models as well. Like now we have three SFP models and to which interface these are connected and the serial numbers. Now, this is the interfaces like all the VLAN VLANs that are created on this particular device will.20:05Be available here. Now the I want to mention that is this very useful tool which is this configuration drift, which is mentioned in the presentation. Yeah. It will be available in browse configurations, but 1st there are two in this browse configurations. One is configuration that is.20:25The current running configuration on the device and if you want to do some, if you want to just search for a particular VLAN or something, all you need to do is just come here and then you'll be able to search it with the search option, and if you want to export the CLI, you can do that as well.20:44But yeah, this is a very useful one, as you already mentioned, let's say you make some changes and suddenly you are seeing issues on this particular device. Now, obviously the 1st thing that engineer would be asking is what is the running configuration and what was the configuration previously.21:03Running on that particular device before the change. Then you can just come here and see what is the configuration change, like what are the commands added or removed and who have actually done it because if you observe here, I'll.21:22Yeah, so we just need to give the start date and end date and the between those two dates, whatever changes, whatever drifts that have been happened, all that information will be captured here. Now, I just go to this 1st dot, it's mentioned that this is an in band conflict drift.21:38Which means this configuration change has been done by catalyst center. Now you see this is lines added zero lines 01:27 and now if you want to see that one, all you just need to click on that and it will show you the previous configuration and the count.21:57Configuration. From device tracking or device tracking configuration has been added. So that is the that has been occurred. Now there is this out of band config also. Now that is let's say you make the changes through CLI.22:17And some issues started happening like maybe memory or what or something else then if you want to understand what is that conflict change and who made that, you come here and click on hover over this.and then you'll be able to see that the username of this particular.22:33I mean, who have done this change? You see username is SDA admin. So that means this is done by somebody, somebody who has the username SDA admin. And then if I click on that, I'll also be able to see the change that has been made. What is the configuration pushed?22:53Or removed. And then if let's say you want to change the dates like now as of now the configuration is December 18 at 2025 and February 2820 26. Now let's say you want to make some changes here, like you want to compare exactly.23:11Only one drift change, then you can just change the date and time. You will be able to see all the dates that are there in between these two or between the times that we have set. All you need to do is just select that particular time and you'll be able to see what is the actual change that has been happened.23:30Now that is about and if we go down, we have some more information like user defined fields tag information, but what I want to concentrate here is this layer two information. So I came to this VLAN and I'll be able to see all the.23:49That are created on this particular device.24:09And the VLAN name and the status of this particular VLAN. Now, if you can edit this VLAN, just click on this edit and it will take you to a page where you can change whatever layer to configuration that you want to. Now let's say you want to make changes.24:12Based on discovery protocol, you can do that. I'll just take you to that page. Yeah, so you see discovery protocols, let's say you want to change the administrators of the, you just want to disable CDP, you can do that or change the whole timer, you can do that.24:32So that means like you can change all the layer to configuration that you would like to do and just do the provisioning. Now if I select a particular VLAN, I can edit it, make some changes on that VLAN or but for now I'll just create a new VLAN VLAN ID eleven and the name would be VLAN eleven.24:48And then I'll just enable it. For that I need to add configurations and add this administrators into the configuration part and now it's enabled. Leave it. Now if you observe this pencil icon orange amber color pencil icon was previously not present.25:08And if I hover over that pencil icon, I will be getting some information about it. It sees that this configuration has some changes that have not been provisioned yet, which means if the change that you made, that is the that we have added.25:28It is only added on catalyst center, but it's not actually pushed to the device. So to push the device, push it to the device, we have to provision it. Now I'll just click on next and it will start the provisioning workflow. So this is the new workflow that has been.25:45Added in 23710 which will give you which will ensure that there are NO pending operations that are happening on the device and then all the device complaints are either acknowledged or resolved. Now, once that is done, we have few device compli complaints I'll just ignore those.26:02And then click on next. Now it will give me the configuration which will be deployed so that you can check if the configuration that which will be deployed is good for you is I mean, ok, you see that it's gonna do this. You want to check that right before you actually.26:20You make the changes. So we have that option. We will be able to preview the configuration and once you feel that this configuration is ok, well and good, then you can click on deploy and within few seconds the deployment will be done. So you can go to this view activities and you will be able to see that.26:40Provisioning status. You see this provision device it's successfully provisioned and if you scroll more down, you'll be able to see the provisioning details as well, like what are all the steps that have been taken in this provisioning process.27:01Now I'll just go back to the device and check if these are actually added. So I'll just again go to that device details and in the VLAN part I'll check if this has been added or not.27:16Yeah in the layer two, let's go back to this VLAN and we see there is this which we have created. So which means successfully whatever configuration we have changed please push it to the device and is reflecting successfully. Now the next thing is we understood what is device details and.27:33Now we'll go to device three 60 which we could have gone from device details which was mentioned in presentation, but I want to show you other options also. So you can go to assurance health and here you can find you can you'll be getting all the assurance, all the network health.27:53Now I'll go to this view network health and we'll find one device which we can understand in the deeper level. I'll just find the same switch that's an access switch, so this one. This is how you can go. If let's say you get a notification that this particular.28:12Building is not working fine, then you can come to this assurance page, network health and understand what all the devices that are not working fine and then come to this through that part as well or else as already mentioned, you can just click on this search option and directly come to this devices if you already know which which is causing the issue.28:33And now if you observe there are these red color blocks and green color blocks. And if I can hover over this, I'm able to see these KPIs. Now, you might already know.28:52That there is a health score for each and every device on. Now how that health score is calculated, that is through some KPIs. Now these KPIs different variation varied between device device to device.29:08So now let's say if it's an wired device, then the KPS would be memory utilization, CPU utilization metrics, but if it's on wireless, then RF also will be added basically. Now, if I just selected the path where there is this.29:24Which mentions.29:45So those red color and green color blocks are nothing but events. So whatever events that have been occurred on their device, those will be reflected on that particular graph in red or green. So now red means that particular event has failed.29:47I'll just yeah what I'll do is I'll just move this bar just to I want to only understand what happened during that particular figure. Now when I do when I move this box, right, all this information, all these device details.30:07Will be only for that particular time. Now you see this is the issue. There is this PKI cert which renewal has been failed. So now to have connection between catalyst center and the device, there is a certificate which is.30:24SDN network infra I one, so that has been failed, that renewal has been failed, so it should be always valid to have the connection Since it's failed, we are getting that event. Now, that is how you will be able to get now let's say you get an onboarding failure issue.30:41Then what you can do is you just move these bars to that particular point and will be able to get granular details about why that onboarding fail has been failed so that we can understand in a very detailed manner. I just I just reset it.31:00Now I'll just go a little down and then yeah so these are the and we'll also be able to get the telemetry status. Now you see just like how we got that.31:16Hardware and software information on the device details, we'll be able to see that information also here in the devices. Now we will go to these tools which will be helpful in the troubleshooting. So now we have a separate issues and events page where we'll be able to see all.31:33The issues that are there that are detected by now let's say you know that this issue device is causing some issue.31:53But you want to understand that issue in a detailed manner. So then you come here and go to these issues and you'll be able to see all the issues that are happening on that device. And when you click on a specific issue, you'll be able to get a detailed information like why that issue occurred and what are the suggested actions.32:01And now it's mentioned that there is this excessive lag between this center and the device and we have all the satisfactions like check time on the device, if NTP is enabled, check whether the servers are reachable from Atlas Center and the device.32:19Now, if you want to up check these, then usually we'll have to go to the device login to the device and run the commands that are relevant to this service direction. But with catalyst center, what we can also do is we can just use this run button.32:35And it will automatically run the command on the device and will be able to give us the output as well. So in this way you do not at all need to log into CLI to troubleshoot the issue. Then we have this physical neighbor topology, so this part is only the neighbors. So now we have that.32:51So only the neighbor information will be available here. So let's say you have to.33:12You are 1st you have this device but it's causing some issue. Now you want to understand what other what might be the devices that might affect because of this particular issue. So then obviously you want to understand their neighbors, right? So all you need to do is just come here to this physical neighbor topology and you'll be able to see the interface status.33:16Of that particular device's interfaces like.33:36How many of them are up and the other side as well, the neighbors also. So in this way you'll be able to get the neighbor topology. So this is just a neighbor one, but if you want to see the whole topology, then that will be available in tools option in catalyst center.33:39Now you see these are all the events that have occurred, so events can be of three times one is red, which means it has failed, that event has failed. Blue is just a notice that is an event has occurred and green is that event has occurred and it successfully done.33:56So in that manner, we categorize this particular events and now this parties, so mostly let's says that there is NO reachability between these two obviously we try to get this part race rate so for that you don't need to go to CLI, we just.34:13Do the destination to which you want to take the reachability and then back it. So immediately if the if there is a path, you'll be able to see all the L three hops in between those two devices, host and destination. So this is the.34:32There are, there is only one device in between that is one switch and then we have the destination. So along with the parts, we'll also be able to see this health score. Now let's say there is some packet loss between these two devices, then we can understand which might be causing that based on the health.34:49That's good.35:09Which might be causing that packet loss based on the health score. Now, there is this application experience which I will show you. So, just go to that.35:11This notes and show the next part. So we have this detailed information.35:30Like CPU utilization memory utilization and then reachability. So as of now only one core one core is selected, you can select the other course as well and understand the CPU utilization. No, it's like all the time you'll be able to see the history. Now let's say issue has occurred yesterday evening you can go back in the time and get that information.35:36And then we have this interfaces as of now I selected two and you see there are two graphs interfaces and you can select these interfaces based on the port types as of now that one interface is selected gigabit ethernet 101.35:56And you'll you'll be able to see the interface description, operational status, administrators, and the port type. Yeah, since this is down, we're not able to see much information about it. We just select one interface which is up, just forward to that part.36:15Now I have this/one/one. You see that one now we are able to see this information and just back Yep.36:36Just select this one. You just need to check that box and whatever interfaces that you select, like whatever checkboxes you select all that information will be there. All those interfaces information. So as of now the utilization is percentage is zero because this is a lab environment and not much utilization is there.36:54But I'll just move to rate and there should be some kilobits per second, yeah. So this is the utilization over time. You move the graph, you move your mouse over the graph and you'll be able to see that. And you'll also be able to see the TX errors RX errors, TX discards, RX discards.37:12And along with this, you will also be able to see, yeah, based on four type you can categorize these, the next part is stack wise. So since this is stack switch, we will be able to see the stack information like which switches and which is.37:32Right, and also PoE information like what is the allocated power and what is the remaining power like that and also the power supply just to move to that part like you can see like what is the allocated power for each switch.37:52And the remaining power. Power supply information also will be available here. Now let's move to client three 60 again for client three 60 you do not need to go to all these pages. You can just use the search bar and either give MAC address or device client name and you.38:09To be able to go to the client. So I'll just go to one client which is available. Yeah, as I move hover over this bar right this is client health overall client health. I'll be able to see overall wireless client health by your client health. Now just go to view details.38:29And there is only one client. I'll just select the part where there is a good client, good connectivity, so this is basically the connectivity information. Now, so here we are, we are in the client three 60.38:48As I hover over this graph, right, you are able to see that there are many KPIs. So for if you remember for that switch we have utilizing utilization, but since this is a client wireless client, we are showing onboarding.39:05Connectivity which has and connection details. So similarly how we have the events part for which is you'll be able to see that with the clients as well. You see this very small green blocks, so that represents events and mostly all these events are.39:22Access, so we are only able to see those three blocks, but I'll just show how, a failed one looks because that's what we want. If everything's up and running, we don't want to do anything to disturb it.39:42But if it's down that's when we want to troubleshoot, right? So if you see, this is how the summary looks like, you'll be able to see.39:57When an onboarding failed and why it actually failed. So it's mentioned the reason why this has failed and if I click on this, I'll also be able to get this exchange timeout as the reason why has failed and yeah.40:12I should be getting more information but it is not visible here because it's a lab environment, but yeah, so that's how you will be able to get the granular information and then you will be able to similarly since all these are success, we are only able to see the green pile chart.40:28I'll just move this one and we'll also be able to see the connectivity connectivity stats like traffic information and then yeah even all the events that has occurred and.40:44I just move this one. So there is this client tools and tools where you will be able to collect client data client data. So I'll just launch it and then within few seconds, we will be able to collect all the debug logs, pcaps, whatever the logs that you.41:01Mostly tech engineers would be asking to troubleshoot. Those can be directly collected from here. You don't need to start the debug by going to the CLI. All you need to do is just select the WLC IP address, I mean interface and the APs. And there will be an MRI engine which is it will understand what all commands.41:21Have to be executed to get this information so that will be started and within few seconds all that information will become. So if I scroll more down, that is this device info which will be giving me the operating status, device type and the connectivity.41:41So this connectivity it will be having TX RX data rate retries and then like some RF information also, which is RSSI, so again everything is over time. You can view it.42:00Aggregatedly or then there is this app three 60 which I will just so yeah now there is another feature in this detailed information.42:15We were not able to see that for other client because it's a normal client, but if your client is an iOS or Intel should device, then you will be able to see this iOS analytics and Intel analytics where you'll be able to see the neighbor APs and the channels at which they are working and the RSS at which.42:31You are able to get that AP information and also client dissociation details. Let's say the client is complaining that they are getting this frequency, then you can come here and understand the reason why that disassociation happened.42:51And then there is this, yeah, application information which will give you all the business relevant all the applications that are running on a particular client along with the packet loss, network latency jitter. I'll just show the application three 60 part. Yeah, so in this applications you will be able to get.43:08Like the business relevant application health usage and this executive summary along with the application three 60. So I'll just go to this MS teams let's say MS client is complaining that they're having some issue. Then you can come here and understand the metrics like latency packet loss jitter.43:28Between the client and the app and within those two as well along with the exporters information. Now there might be many exporters that might be exporting this traffic, right? So all those metrics, all those exporters metrics also will be available here. So that is about the device three 60. Now I hand it over to.43:47Capture.44:08Thank you so much. So coming to the intelligent capture, it's one of the feature that you have for assurance advanced assurance topic. So 1st of all, let's understand why do we need it? So in a wireless environment, reproducing.44:11The wireless issue is very difficult because it happens sometime in the night maybe whenever it happens.44:29To have that, acknowledge, you have to reproduce it, right? So that is one major challenge. We have too many like high overload of the troubleshooting. Often it requires in person packet capture, Sometimes the client is not available, sometimes the situations do change on the flow.44:37Can we do that automatically from controller side? Because we do have a catalyst center as a controller. Then we have the lack of visibility. The environment do change. So, some of the solutions available, they do offer only the trend monitoring, but the RF, the radio frequency related information still.44:59Lacks the visibility. So that is exactly what the intelligent capture, does. Let's understand the topology of it, ok? 1st.45:18So you have a catalyst center, you have the WLC and the access point. Now what happens in the backend? When I, when I say there is an intelligent packet capture, that is happening, it is still Catalyst Center doing it through WLC. Now we have the automation features which tell WLC wo.45:27What to do WLC does that automation to AP when it is bringing up, but what is happening different here is if we have normal controller, it's always going through WLC. So the.45:47Intelligence that application that the access point has, it's getting missed. Now, we have built a tunnel back from AP to directly a controller, which is a GRPC tunnel. For that we have a requirement of a TCP port 32626 opening. So those requirements and everything there.45:59And they are clearly mentioned in the deployment guide for intelligent capture. So we open one data path directly from access point and then.46:19This is how we get to get what access point is seeing directly instead of going through WLC for the clients related information. So now the access point related client like access point sees client data, it passes to WLC and it comes to the catalyst center. The correlation happens here.46:29For the both the channels. And that makes more intelligence.46:50If you have DNA spaces, it adds on one more layer of intelligence. Now let's see how it looks. So this is the client dashboard that I have when I have the intelligent capture. So you see in client three 60 on the right hand side, top side, there will be intelligent capture.46:55Blue blue sort of a button. Once you click on that, you will come into something like this. So we have options to do data packet capture. We have options to do live packet capture. We have the map of client coming in.47:15Where we can see the real time client location if you have the Cisco spaces integrated. Then we can have 14 days time travel. You can see 1 h 3 h 5 h window for the capture, and there is something very useful feature which is called as anomaly packet capture.47:32Which is sort of always on we will double click on it as we go, which shows if there is any anomaly for the onboarding event, which shows what is the RF statistics exactly at this 02:00 or 2 min scenario. And this helps us to understand.47:50What was the scenario? Again, there will be a PK file that can be generated as well.48:10Now, you can see the client statistics that can help you to exactly reproduce the scenario that client was facing. This is the power of this intelligent capture. Now let's drill into the type of available packet captures. As I mentioned earlier, there are, like.48:16Majorly three types we'll touch two types here. 1st is the anomaly capture where you see there will be all the events logged while doing the onboarding of the client. Red means it's an anomaly event Green means it's a healthy event, NO need of attention.48:34Now how to enable it? You have to go into the access point. You see anomaly capture, you can select those, you can put it on a global, you can put it on a location or on an access bas access point basis as well.48:53So we highly recommend you do this as a pilot for one floor or some things. You see all the client logs, and it is stable in your network and then only go for enablement later for the network wide. Now how you see the packet anomaly packet capture is here. So it's a red.49:11There is some issue. What is the anomaly type? It's key exchange. So some key exchange is failing because of which client is not able to get onboarded. Now this is the packet capture file and auto packet analyzer. So you don't have to really open a file to understand.49:31Where exactly it is, going wrong. You can see the packet coming from client is a upward triangle. Packet going from AP to client is a downward triangle. Then there is, then there will be some inter packet gaps.49:51You can see this pink line, it's a RSSI that is getting offered from network to that client. And now you see the red zone where it says that from AP, the EAP is not happening because there is a key exchange problem. Now, if I still want to download the packet, I can click.50:06On here, download packet, you can have IPv for IPv six both downloads and it will look something like that. You have to open a wireshark, get that PCAP file opened and then you can see, oh, ok.50:26There is a issue between the four way handshake which is getting timed out. Now, how awesome is that? Because, if without this you have to go into client, you have to chase the client specifically for VVIP clients to get this packet capture done.50:41Now, this packet capture, we can enable, it can have unlimited concurrent captures for the management frames that are happening. So do try out this feature. Now coming to, let's say if particular VVIP is facing some issue.50:58During, a particular time of the day and nobody understands why. You can always have the live or scheduled captures, ok? Now let's see how you can do it. So you can do this scheduled client captures for 30 min to 8 h. You can.51:16Just click on enable now here and it will start.51:36Again it will show healthy as well as anomaly packets, auto packet analyzer will be there. You will be able to download the packets. The, what changes here is earlier we were were able to see the management frames. Now you will be able to see the eight.two.eleven packets captured as well. This can be.51:39This can be run concurrently on 16 clients, and there can be like different spaces from where you can enable it. You can enable it from the client intelligent capture dashboard as well as intelligent capture settings as well.51:59Now this summarizes the intelligent capture as a feature. Let's get into some of the scenarios that we usually face. So the 1st use case is wireless clients health. Now, I want to understand how many, how, how are my wireless clients in general? Let's say a leader or my.52:18My manager asks the report about the wireless clients. I'll go to the assurance dashboard, then go to the health, then go to the client tab, select for maybe last week. That's the reporting that my manager wants. So I'll give that. Then you can see there are different wireless clients wired clients.52:36This is very basic, but you you you can use this information as a.52:56Dashboard publishing as well. This is what I wanted to convey. Now, this is about the whole location level wireless clients. What you get to see there is onboarding times like all the clients, they are getting good onboarding time or not.53:04What is the RSSI given from network side? What is the signal to noise ratio? You can filter this on SSID basis. Let's say you have some project related ssids and you want to filter on that, definitely you can do it. You run only 5 ghz, not 2.4, you can filter out that as well. This so this is all in.53:20All giving you the executive summary. What is the another use case? Let's say there is some wireless network wide issue. So how do I get the visibility into the issues that are happening? There is a assurance page.53:40Under dashboards, you can see issues and events. I think this will get covered in depth in the next session that we have on next Thursday. Just touch basing here that all these issues that are happening again can be seen for different, different time zones. You can have different channels like email.53:57For APIs or Webex syslogs that you can use for the notifications. What issue covers is basically this. Now let's say there is a high radio utilization happening on someone, one particular radio for access point. So.54:15This issue comes up. Now I click on the issue, it gives me the problem details when the problem occurred, what is the location, how many clients got impacted? This is the bigger one. Then we have problem details, the impact details, what troubleshooting I can do and there.54:33There are some suggested actions that are coming as well. So now let's say.54:53We saw what was the problem, we see the impact, then we see what is the troubleshooting that can be done. So it's a high radio utilization, so you have channel overlap maybe how many rogues are there in your network?54:58How many neighboring APs are impacting for the interference, even that can contribute to your radio utilization. So all these factors which takes time to gather manually and correlate are coming here to to help.55:16Help you to find out the root cause. And then comes the suggested action where it says that consider adding more APs for 5 ghz radios because it has that map in the, like fed it to already and it can see the real real time SSID and RSSI values.55:36Now it is telling me that, ok, neighboring APs, they are on the same channel, there is a high traffic on their client, maybe that is causing the higher interference. Now it is asking me to check the rogue APs and you can see there is a run button here. It means.55:55This issue comes real time you can check this. If you've hit the run, it will check the rogues related commands, rogue client related commands from the access points that that is getting managed. So this is how the suggested actions are coming in from.56:10The controller itself. Oh, now let's come to the 3rd one, which is the favorite part of this entire segment I would say. Let's say there is a client onboarding issue, very real time issue, everybody who is handling wireless.56:27Network here would have faced this. How we can do the reactive troubleshooting for this client. Now, this particular client came in, said every day I face some glitch, not like there is NO particular time.56:47But sometime it fetches glitched, what can be the problem? How can I avoid it going forward? So, that's a proactive, but then now I'm facing issue. How can I see what is the issue? You have all these tools at your disposal.57:05You open the client three 60 that we discussed. You see, what was the health for that client across the timeline? What were the events generated? Are they repetitive? Is there any pattern in it? From intelligent capture, we can generate the captures.57:22You can see for MS Teams three 60 I'll not touch on it, but it's one of the integration that we can do. Client health is available for each and every minute that client is connected. And then this is onboarding and roaming related summary. Now, how I'll I'll use it is basically.57:43We go into the client three 60, see the client a roaming status and the connectivity status. Is client roaming from anywhere? Even that will help me to understand if there is any glitch.58:01If there are any client issues, that will also help me, which we saw in the demo, right? Again, if there is any data client data collection which is needed or path trace needed, we can always use these tools. Under event viewer, we can see the connectivity information.58:13So which WLC it was connected, what was the Mac WLAN, what was the AP, and client application experience. Now, having said that, I have intelligent capture also with me, so I can see the field events under anomaly capture under red. And I have this, which onboarding.58:32Stage it failed, ok. So there are so many like association, they did eight.two eleven, then it gets IP DHCP and then EAP happens and then it.58:52Does the association again. So, all these stages are happening and I can see which stage, at which stage the client is failing to connect or to get onboarded because of this packet analyzer.59:02So, another thing that we missed is RF statistics. When you have the intelligent capture enabled, you have the spectrum analysis facility also that you can do, which can state you if if you are from wireless and background, you understand spectrum is basically.59:19A physical like physics related wave structure overlapping. Let's say if you have channels from from neighboring APs and a rogue AP overlapping on each other. However, effectful your signal is, it is gonna get.59:40Negated and that's where the spectrum analysis comes into the picture or let's say you are operating into some spectrum which is dedicated to the military environment, radar channels. So even that we will get to know from here. RF statistics basically tells you.59:56How the radio frequency is for your entire environment based on your radio and the SSID basis. So all these things you can use for the reactive as well as proactive cap proactive troubleshooting for the client.01:00:14So now, I think we are on the top of the hour, but we have one demo, so I'll pass this total. Just a small request from my side I know that the screen is a little small, so what you can do is you can just zoom in and then.01:00:31You'll be able to see this. So we are again back in this case and I just want to show how those packets are visible. Now you see this one we have the onboarding events, all the onboarding events will be available here, but we want to concentrate once.01:00:51So that is let's say an onboarding is failed. Why it has failed? So we understood that there is a packet analyzer also. So how that can be visible? So all you need to do is just come to this anomaly and then select the left where the onboarding has failed.01:01:10So then it will show you the client location if the client is moving during that particular onboarding. Now, again, this is automatic thing like let's say you enable this onboarding capture, then whenever there is an.01:01:26Anomaly it will automatically detect and start taking the capture. It's not on demand. And then you see we have this error. So at the each stage, the onboarding has failed. And we'll also be able to see at which time this has failed and what is the packet count as well.01:01:42Along with that, we'll also be able to see some RF statistics, like at that particular point, what are the RF statistics? You see, it will highlight that particular time where the where the onboarding has failed. So we'll be able to see all these RF statistics like average data rate.01:02:01Packets from client packets to the client packet right from client, which will be helpful for troubleshooting mostly for client onboarding. Now let's say you have a client who has this, who has onboarding issues and then you have done some troubleshooting and want to understand if it has really taken effect or not. Then you can start this onboarding.01:02:19Captured and then if there is any anomaly it will automatically show them.01:02:39Now, I'll just show you how to run a data capture. Now this onboarding will only be having onboarding events, but you can get the full packet capture for the 8 h. So minimum is 30 min and maximum is 8 h and you can stop it whenever you want.01:02:43So I'll just start the packet capture, you can start the onboarding capture as well packet capture and the WLC at which the through which the configuration of this packet trace should be sending and then again the.01:02:59Provisioning flow will be visible. You will be able to see the configuration which will be deployed. So you see this is the configuration which will be deployed, we are able to see that the full packet trace is will be enabled.01:03:15And within few seconds, this packet trace will be enabled and you will also be able to see that that stop packet capture because since now we have started, it's up to us to stop it. So I'll yeah, I'm back here to see the stop full packet capture, I I click on that and.01:03:30Then I'll be able to stop it and you can download those packet captures and analyze them yourself or you can just leave them there and you'll be able to sender will be able to analyze those as well. So that is how the data capture.01:03:50Works here and then there is this OPA capture for that yeah I just I'm just showing you how you can download, click on this download and you'll be able to see all the packet captures that have been taken, and when you click on that the PCAP will be downloaded and you can open it from.01:04:08So that is how you take a data capture for a particular client and then for OTS snipper. So now what it will do is it will convert it can this can be done on two by the way, so it will convert the radio to snipper mode.01:04:26And will take the capture so this will not only be onboarding, it will be from it will be onboarding and data capture and from all the things that are from I mean not from all cases, all the data will be available.01:04:43So that is like now let's say there is some channel utilization in that channel that we select, all that will be available here. And then it's mentioning that the changing radio mode will result in us of connectivity for the associated clients.01:04:59That is fine because we do not have any clients on this. So I'll just started and then within few seconds you'll be able to see that OTA capture enabled you see stop OTA capture and you'll be able to see on which channel it has been enabled as well along with the radio.01:05:16So I'll just stop it and similarly how we have downloaded it for the data capture, we can do it for the as well. Now that is for data and OTA onboarding, but now I want to show you more like these are stats and the spectrum analysis.01:05:35That we discussed.01:05:55So for that we can we need to go to AP three 60 and then go to intelligent capture which will be available in the top right. Now here you will be able to see all those and this RF statistics by the way is always on. If you want to disable it, you can disable it but by default it's always on if you.01:05:57Now you'll be able to see client data like for now if you observe here, this one, this is the channel utilization and if you observe.01:06:16Does AP is having very less channel utilization because this green represents this channel this AP utilization, whereas the red represents non Wi Fi. Now let's say any client which is connected to this AP is complaining that they are having disconnection issues or Wi Fi issues, then that is mostly because of this non.01:06:31Wi Fi and it is important to locate those non wi Fi resources.01:06:51Process and then remove those. And this way there are other dashboards as well. Now in the spectrum analysis, again, this is on demand. If you want to start it, you have to start it. Yeah, again this is this will start provisioning window, which will.01:06:55Show us the configuration which will be pushed to the device to start this spectrum analysis. So that is what it's gonna do and within few seconds, you'll be seeing the spectrum stats. I just refreshed it to see, yeah.01:07:13In 2.4 ghz we're not able to see much but in 5 ghz we will be able to see the spectrum analysis. It will be amplitude versus channel and time versus and along with that, we'll also be able to see the interference and duty cycle for the spectrum as well.01:07:31So this is how you can let's say you have some non Wi-Fi interference sources here. You'll be able to understand in which channels they are mostly working. So this is how you can run the intelligent captures on AP.01:07:49And get the directly from the devices. I now hand over to. Yeah, thank you so much Lassia. We are into the Q and A now. I see there are many questions coming in. I hope all are answered.01:08:04If there are any unanswered, Hardik can you check on them? Yeah, so there is one unanswered one question which is on the Cisco IQ. It's about how long we will, will the health analysis data will be stored on the Cisco IQ portal?01:08:25And where will you be able to take this question? Sure so depends on the kind of deployment that we do, which is model then it will be we are not you know.01:08:44Taking in any of the PIA information that the customer has, it is all anomalizing encrypted information, so within Cisco cloud, we'll have.01:09:04So within Cisco model, we'll take it take in the information from the Cisco IQ link that you have deployed and we'll do the analysis and based on that we'll give you the analysis back. In terms of how long we take the information from this portal, I'll share.01:09:14The link with here and you can you can check, you know, what is the kind of data that is being sent from the customer premises to Cisco IQ SAS platform and how long we take the data from.01:09:34I'll share the link here. Okay, thanks Rahul. So if there are any unanswered questions, we can get back to you over mail also. We will be in the meeting for five more minutes, five to ten more minutes. So keep your questions flowing.01:09:46So that we acknowledge your questions also. As a part of this webinar, as a next step, you will receive a survey invite, just 2 min, you can let us know which all topics you want to get covered next. I hope there is a registration link that is given already for the upcoming sessions. Lasay has a.01:10:03Just put in now. So there is one more session coming in as a part of this assurance series, which is on next Thursday where we will be covering the day two operations. So.01:10:23Please join in that session, and please fill in the survey for from your end as well. Thank you. So if there are any more questions, we are here. Ok. Why don't we acknowledge that plug and play related and automation related.01:10:34Things we will get covered into this session. There are previous recordings as well, so please glance through it. High chances you might find it, but then we do cover those requirements for the newer releases as well.01:10:56So keep an eye out from CSS side means and and one more thing, if you, if you look out for any features, right? Feature knowledge or something, just give just post it on the chat so that we can able to cover it in our.01:11:11Next upcoming sessions. So I think we covered plug and play and the template feature sets back in the previous sessions as well. So you should be able to find the recordings for the ones I think last year has just posted the links are the same, so you can just have a look.01:11:31Yeah, and and we are at the end of the session. We are just staying back here for question answers so keep your question answers flowing in and if not.01:11:56See you in the next session and please feel free to drop off. Thank you. Hope this was a helpful session for you. Let us know over chat.01:12:10Yeah, thanks for sharing the plug and play related recording. So we are trying to cover this all topics in the expert insight series from last like few years. So there will be.01:12:40Already recordings available for the plain vanilla flavor features. If you have any specific feature related ask, do let us know and we can involve that as well in the webinars.01:12:57Anyone wants to take this question that the question is, I assume that it is not a good idea to keep spectrum analysis and RF statistics for each WAP running or is it best to just run or deploy it when it is there is a problem?01:13:21Anyone would like to take it? Yeah, so if it is it is always better to run this advanced, I would say tools, right? Whenever you are having issues, ok? Because that that consumes much of the resources.01:13:42Within the cat center, right? So ideal way is to only enable those tools when you are, when you are having some wireless related issues.01:14:02Okay, once that issue is resolved, you should disable that tool so that it will not consume your resources. Okay, thank you for the answer.01:14:12