Catalyst Center Day 2 network operation

Oh good morning, good afternoon, everyone. Thank you for joining us today. We'll wait for a couple of minutes, we'll give the team to join.00:00From time.00:20Second I think I think we can start off for now. Thank you, thank you again team for joining us today for this expert inside series session on network operations. This is the day two network operations and how we.00:24You handle your day two operations, right? Before we start off, I would like to give a quick introduction to our panelists and our presenters today. So we have is a customer success specialist at Cisco with eleven years of experience in networking, specializing in wireless and SD wan.00:42And technologies. She's dedicated to delivering seamless solutions and empowering customers to achieve their goals. We have Lassia or Sai Lassia.01:02She's a CSS working on catalyst center Meraki. She is definitely Associate and Network associate certified and has a keen interest in automation and network. A quick slide.01:12But now if you can quick pointers, housekeeping pointers rather. This meeting is being recorded, right? So you will be getting a link at after the end of the session over an email with the recording link and the details as well with the previous record.01:28Things also included in that. When the meeting ends, the you will be presented with a survey, so after that you can simply complete the survey and give us your feedback on how we can improve and how this session works for you.01:48Yeah, next slide. So before we start right into the product itself, we would like to understand our audience 1st, right? We would also try to launch a quick poll if that is possible on how many of you have catalyst centers on.02:03How Many of you are planning to deploy it in the future and and understanding how do you manage your inventory currently and moving forward? What's your plan for that? Yeah. Next slide now.02:23So, as you manage your infrastructure or your network infrastructure, you are likely generating massive amounts of data every single day. But, the data alone is not en enough, right? So you need intelligence. That is exactly where Cisco IQ comes in.02:36Cisco IQ is a dedicated digital hub designed to turn your network data into clear actionable insights. Think of it as a personalized advisor for your Cisco environment instead of guessing where to optimize, Cisco IQ provides you with the roadmap. It helps you benchmark your parent performance.02:53Identify specific optimization opportunities and apply industry proven best practices all in one centralized data. We've had a couple of these EIS sessions before on the same topic. I will be sharing the link to the community page where you can find all of the recordings for our previous sessions as well.03:13So with that over to you. Thank you, Akshay. Good morning, everyone. So following and starting off from where actually said this would be day two session. So to give you a quick recap of what we what we saw in the previous session as well as what we'll be seeing in the current session.03:32Previously we had introduction about catalyst center maintaining and monitoring and all of that. Today in Catalyst Center assurance recap, what we'd be seeing is like these are the features which we discussed in the previous session about the assurance, how beneficial assurance in case of monitoring and.03:50Network or network having a deep insight because more on the advanced feature and the intelligent capture, the iOS analytics and all of that.04:10So following that, this was about one, this is one part of what we discussed and in the day two operations, we have categorized, we all we'll be taking today's session in, in two models, 1st of which we are calling it a configuration and a configuration overview, starting off from what we can see.04:19What we can do starting from a single device view, what you can do by going into a single device view, what all details that you can see about an individual device, how you can do a config in an order check and all of this will be covered in the 1st half.04:37While 2nd half of it, what we call is troubleshooting and modeling, we'll do a deep dive on the assurance and the AI analytics part. With that, as mentioned, so this is how the device view would look like. So, so this you can see when you go into the.04:53Single device view, you will see a plenty of options or plenty of details about in every single device. This three 60 view provides you a centralized real time health and compliance dashboard for an individual asset, so which you like you will be able to see a list of your devices in inventory to deal with a specific device or to know more about.05:11Device, you can get to this view.05:30And like this device here, the 9800 wireless controller, it automatically monitors and this dashboard, right? It automatically monitors the critical operation metrics, including the end of life status, the configuration drift between the startup and the running files and the overall network setting compliance.05:32Like by serving these insights alongside the direct accommodation tools, you can quickly address the potential violations and ensure your infrastructure remains standard and fully optimized. Now being here, you also see something that says compliance check.05:50This compliance check dashboard provides a network wide summary of a device compliance. When I say compliance categories or compliance by itself, you have configuration compliance, hardware and software compliance, vulnerability compliance. The compliance checks identify the deviation from the intended configuration software images in the hard status.06:06Violations can be acknowledged, reviewed and remediated via the dashboard manual compliance runs can be triggered per device or in a bulk device basis. Scheduled compliance check can also run on a daily basis to ensure the ongoing compliances.06:27From here in this tab I'm saying. So what you see right now is config drift in this config drift tab, so what you'll be seeing is the catalyst center provides a granular visibility into the device configuration changes allowing the team to track.06:43The conflict drift that effectively and conflict effectively and maintains a consistent authorized authorized network state. So in the upcoming snapshot, you will be seeing, you know, set of configuration running configuration highlighted in think and one in green. So what you see highlighted be.06:59Link is the out of band config and what you see in the green here is the inbound config drift is what we say. So to make it or to make it even more simpler, what you do from a local CLI and what gets pushed from the bulk configuration through the web UI is what we call it, we call it as outbound config and the inbound config.07:19Respectively. So this is about the port management. So in terms of port management, when you handle devices like switch in specific I'm saying, all you can do is you can get into that device details in specific X how we saw.07:39This is an added point when it comes to like when you're working on the switch ports, you can, you will have the option to highlight the switch ports itself individually, you can click on it where that will take you to this individual port configuration tab. Now this port configuration from here, you can change the port status.07:56You can monitor or any changes to the configurations like the LDAP or any AD support or centralized user authentication, any of this configuration with respect to the ports can be done from here.08:12So this is the audit logs as most of us are well aware, like when it comes to troubleshooting or any kind of changes that takes place, the 1st place or the 1st tab that we would go into is audit logs. So simply to show you the timestamp, the user information, the details of every actions that was performed, we can check this from the audit logs.08:30Audit log also helps us to detect the unauthorized or a suspicious activity and support compliance audits. So super admins can use the audit logs to block the suspicious user act or remediate the security issues. And now while you're trying to keep this entire session and demo for this session, I'm keeping the.08:50Presentation part very short and quickly handing over this to last year for demo about what all we've just discussed. Over to you Lacia. Thank you but now on explaining how the device details section work. Let me share my screen.09:08I hope my screen is visible. Now, the 1st section that we will be going here is the device details. So how do you do that? Go to hamburger. This is the whole menu, and this is the provision inventory.09:30And from here, you click on any of the device. I am going to one of the switch that is 9300 4082, click on that and then you'll be able to see this new device details and there it will load all the information that catalyst center has about the device in.09:46Sections based on like configuration, the details and security and compliance. So you see these are all the ports that are there on this device and you'll be able to see what our ports are connected, disabled error disabled, not connected.10:08So based on the port status, the color of the port also changes. And since this is a stack switch, there are two switches. Now what we'll see what all we can do on a particular port from catalyst center. Now we do have two ports which are.10:25Connected and there is also. I will go to one of the ports and you see these are all the details of a particular port. That is this operational status connected administrators. And then we also have layer two information about a specific interface.10:43And we have gone into a little deep in the previous session which is which recording is available in the community page. If you would like to know what all configuration changes that you can do on a particular interface through catalyst center GUI.11:00Please go through that recording. Now let's go to this port management part. Now if I click on this port actions, you can click on port shut that is you can shut the port directly from catalyst center. Obviously you will be given a warning saying that change in the port status will impact the device configuration.11:17And once you hit ok, within few seconds, the port shut will be done. You do not need to go to CLI anymore for shutting the normal port and you can do shut NO shut directly from here. Now, it will automatically be reflected here and in that summary page as well.11:36We'll go to that all ports and if you remember this particular port was connected and now it's been disabled. And now I'll just show you how you do a port motion again go to port actions and port NO shut. Again, you'll get the same warning because you're changing some port.11:56Status here for configurations here. Now that is for a access port. This is a layer two port and it's an access port. And that information also will be visible here only team, so if you see this is the layer two information and if you observe this.12:12Which port mode is accessed. So that is a reason why you can make this actions. You will be able to know why am I mentioned this seemly in a bit. So I just go to another port here.12:29We'll go to yeah I'll just go to another port, this 10 gb two/one/one and you are getting all this information and it says that it's not a layer two port, so there's NO layer two configuration here but again port details are there.12:46All is there, but when you click on this port actions, you'll not be able to do any actions here. That is because you click on this expand and I'll be able to see this from alerts that are port action port shirt, NO shirt is not supported on the selected port.13:07Reason is port actions are only supported on user facing or access ports. This is not either of those ports port type, that's why we are not able to make any actions here. So what I want to make clear here is that.13:25These port actions such as check NO shut can only be done on the access or user facing port. Now that is about port management and then there is configuration. You can view the whole configuration directly from this browse configuration configuration.13:41And you can even export it. But what we are going to look here today is this. Now, mostly more than 90 % of the issues are because of this human errors that is.14:00Need it while we make the configuration changes. Now let's say you made a configuration change and since then there is an issue happening in the network. What would we will be doing? You would be going through the previous configuration and finding what is the difference.14:16Between this configuration and the current one. So that we are giving directly here and not only previous and current we are giving you past 50 drifts. Now, all you need to do is select the drift date range as of now it is selected January 14 to August 20.14:32But again you can change the date and you'll be able to see all the depths that have been made between these two dates. That is all the configuration changes that have been made between these two dates. Now, you see the dots are in different colors.14:52One of that is blue color and pink color. So what blue color represents is these blue color changes are actually done by catalyst center, whereas the pink color ones, they are done through CLI that is outside of catalyst center. So now.15:08When we go that take that particular pink color one, we will be able to see who has made that change. I'll just show that this so that is available here.15:25Now if I click on this big color.here you see this particular out of by a conflict change event and it is done by a user whose username is SDA admin and the conflict method is console. So since this is made outside of catalyst center, we are able.15:40To see all this information so that as soon as let's say this particular change has been made and then there is an issue, you can go to this particular version and roll back to that version. Now, that is conflict drift and again you can select any of these two drifts.16:00Two versions and find what is the difference between two, those two versions. Now I selected this one and this one and you see previously service meraki connect was enabled but now it is not. So that is the change that has been made. And similarly you can check.16:19Change any of the versions. Now SNMP server has been enabled here for traps, but again it has been disabled. So in this way you'll be able to see all the changes that have been made on a particular device configuration. Now we have also discussed compliance, which is very important for most of the customers because.16:36Let's say you have to find what are all the devices that have to be upgraded. What are all my 9300 devices that have to be upgraded to the recommended release? Then obviously you need to run this compliance check which will give you all the compliance information, non compliant devices, compliant devices in one report.16:56We also have advisories, field notices potential field notices for a specific device in this case. But again, all the advisories for apart for all the devices can be viewed in another section of this center. We will look into that in a moment and similarly field notices as well, but now we.17:15With focus on compliance.17:34Now you see these are all the compliance checks that have been done on this particular device. There is network settings. I will take a few minutes to mention all these. So network settings are the catalyst center network settings which have to be pushed to the device. Now what comes under those are.17:37DHCP server, DNS server, SNMP server as SNMP server, and all the network settings that you may create in the design network settings of the catalyst center.17:55So all the network settings that you have created are they present on the device? Are they compliant? Are my catalyst center network settings and the ones that are there on my device same. So that will be checked in this network settings page.18:11And then end of life, we all know that software, hardware module, all these end of life scans will be done and will be shown here. If any of the, any of these have already passed their end of life or end of day or last date of support, those will be highlighted here.18:27And then we have startup courses running configuration which is if the startup and running configuration is different, that will be highlighted here. And then we have network profiles which will tell us about the configuration. Now we have, you might already know that there is an option to create.18:44Configurations and push that configuration to multiple devices from catalyst center. So now what this network profile will be doing is if there are any templates associated to the network profiles in this particular device type, are all those templates present on my device?19:02Is there any device that is not compliant with that particular template? In that case, that will be highlighted here. And then we, yeah, I'll just go to this end of life. You see there are NO hardware end of life alerts, but there is software end of life because.19:19End of sale is already passed for this particular device and last day of support is sometime in future. But yeah, it is highlighting us that the end of sale is already passed. And similarly, if the modules.19:35If any of the modules are also end of life, that also will be highlighted here. Now, how this will be going is like since it's a software issue, once you upgrade to a recommended release, obviously this will be.19:50Result. Now I'll just go to compliance summary again and now if we scroll more down it will, yeah, we have startup versus running configurations and then if there is any difference like between startup and running configuration that will be highlighted here like how many lines have been added, how many lines have been removed.20:06And then network profiles which I already mentioned, Software image. Now it will also check how many of the, what I mean if this device is compliant on software image side, how this will do is we select the golden image on catalyst center.20:24For this particular device model for 9300 switch it's as of now seventeen.fifteen.six on catalyst center that you can select in image repository on catalyst center from design part and then the device is running on seventeen.fifteen.five.20:41Since both are not same, it is highlighting. So it's like if your golden image and your running image are different, it will highlight it. It might be an it might require an upgrade or downgrade, whatever it might be, but it will be highlighted here.20:59And if there are any critical security advisories, those also will be highlighted here along with advisory ID, title, previous and what is the work around. Now that is about compliance check, and I will go to audit log because.21:14We have made this port shut and loop shut, right? Let's say that is because of port shut, there might be some issue. Now, how do we find all the audit logs? So for that some hamburger icon, you can go to task, so this is tasks now if you're.21:33I have recently changed updated the telemetry settings task, so that information is available here with all the activities done on that particular task. Now, if we go, I mean again you can filter these tasks based on the.21:52Different filters. Now I'll go to audit logs and yeah. So these audit logs are all the catalyst center audit logs like whatever changes that have been made on catalyst center through catalyst center, everything is loaded here.22:09I selected the severity of the audit log as info and now I'm able to see few here. So what I'll do is I'll filter based on user ID, so I have made this, right? So I'll just select my user ID and apply and if you observe.22:26So around this time seven 02:00 P.M., there is a NO shutdown on this particular interface. This is what we have done for previously. So it is highlighting everything that we are doing and.22:43We'll be able to show us all the logs directly from here and similarly we have done a shut also, so we have done shut and NO shut so everything will be logged here. I just want to highlight one more thing here team.22:59So now the compliance part that we have seen is for a specific device, right? Now let's say you want to see the whole compliance for all the one to again hamburger icon and report templates.23:15Sorry from hamburger icon go to reports and report templates and here in the compliance, you'll be able to see one report template that is network device compliance and you will be able to get all the compliance checks that has been done on a particular device.23:32And how many are met? So click on this generate and you can select the site, and what are all the compliance checks that you want to do. There are several compliance checks that we have shown, right? So if you want to get all the compliance information, you can do that or else you just want to get software image, one compliant images.23:48Select non compliant compliance category as software image and next. And again, you can filter based on device family, device site, device type. Based on your requirement, you can filter and generate the report. It will give you since I have selected non compliant and only software image.24:07All the image devices in my catalyst center which are non compliant according to software images will be generated in this particular report. Yeah, so that is for configure part team for today.24:26I will now hand it over back to cover monitoring and troubleshooting. So that was about the 1st demo. Going from here, our next topic is about monitoring and troubleshooting. So herein we will be seeing.24:42A bit of introductions about the events and security vulnerabilities from there we'll do a deep dive into assurance AI analytics. So starting off with, so the screen that you see right now is the event notification. So even notification is enabled automatically and it gives you a real time alert.25:01Across multiple channels like your Webex, your email, your syslog, and this ensuring your critical network issues are addressed immediately. With the even catalog, you can proactively monitor the little infrastructure health metrics such as AP disconnects, your coverage holds, the license status.25:21Before they impact your users or your your entire network. So this would come under the developer toolkit and it simplifies your operation workflows by allowing you to build custom integration flows which reduces the manual oversight significantly accelerates your mean time too.25:40Reduces your mean time to the resolutions. The next is security vulnerabilities here, now this security vulnerability, the screen that you see, this is an, this is how the overview screen would look like. So this, this Cisco Catalyst Center provides.25:57The Centralized and automated view for identifying managing your security vulnerabilities.26:17Across your entire network infrastructure. By scanning the device against the real time security advisory, the tool helps you to pinpoint a specific software version and a critical CV that requires your immediate attention. And this proactive visibility allows you to prioritize and execute.26:22Remediation steps effectively, and this helps you also in strengthen your entire network and your overall network security posture. So that was about security vulnerability from here. So going to the next screen real quick.26:39Yeah, so we're starting with issues and events. I'll take one or two issue one issue here for an instance which we'll cover more in demo. So this is under the issue assurance where you'll see issues and events. Now, what you see in this dashboard is a single issue where this issue type that you see here is configurable, there are like.26:56Set of predefined issues that you will have and this issue that you see is also configurable under the issue settings.27:16Any net any issue which is primarily happening only on your network is configurable under the assurance assurance dashboard. Now what you see here is the interface connecting connectivity down issue. How catalyst center can help you fix and drill down this issue is what we'll be seeing in the upcoming slides.27:22Now by clicking on this issue, what as a next step, what you see here is you will get to this once you the pre in the previous screen what you saw here is the issue summary or the issue name. Once you click on it, in the next tab, what you're seeing here is a list of such issues happen in a different sites or different device at a different instance.27:40Now drilling down to it even more further, by clicking on that specific incident, it will take you to a screen like this, where it is going to give you a detailed description of what you see is about on which port, on which device it's happening, like what is the peer device and all of that.27:59So as you see something we have highlighted here is called run mission reasoning. So mission reasoning, like once you click on mission reasoning, right? This would run a check on its own and would execute a set of commands to find out what, where exactly this issue is happening.28:16What could be the possible cause and how we can fi fix this issue? And it's going to also give you the list of activities that it performed while analyzing these issues like the list of commands that it ran and the list of details that it had captured.28:33The outputs that it had validated to give you like the conclusion, and it also it's going to give you a recommendation with the solution as to how you can fix it. So what you see here is is fetched after doing a run MRE which is machine reasoning and how the root cause analysis screen would look like.28:48It'll do an analysis on the interface flap, it will get you the platform details. All of this check would be performed, and what are the details that it collected? You can see it on the extreme right, under the detail activity details tab. So this is how it would look like once the mission reasoning is completed and once you click view details.29:07You'd be taken to a screen like this, where it is going to give you the description, the reasoning activity and the conclusion. So you see two of it highlighted, one is the reasoning activity, that's the previous screen. That's how it would look once the mission reasoning is completed. The next screen which is highlighted here is the conclusion.29:26Conclude it provides you a set of conclusions. So in this scenario, for this interface down scenario it says that the link speed configuration on this device for this interface specific interface is auto speed and the link speed config on this device gives you specific IP address, says they are mismatched, and this can cause the interface to go down.29:44So it's giving you the possible or the relevant activities or the relevant course, and once you, like if you feel that it is relevant, you can take this conclusion and you can also go ahead and apply the resili apply the solution at it as it gives, like.30:04You can see the suggestions that it and you can also cross check that by clicking this view activity and it is going to show you the list of commands that it has run to fetch you this out. A more of this detailed scenario, we'll have last year to demonstrate this in the demo part.30:20Yes, expanding the activity details is how it would look, like you see a icon here which says a small blue coloride, clicking on that would expand it and would show you the command which it is used to find out and it will also show you the output from the specific device itself.30:38So from there, so what we've seen, what we saw in the previous session was assurance. Now what we'll be doing a deep dive in this current session is the AI network analytics. Under the AI network analytics, we have few topics, few interesting topics you would cover I can say. We'll be starting off with baselines as.30:58That is the 1st step. Then we'll covering the trends and insight.31:18And the network heat map comparison and all of this will be covered. So what you see here is a baseline. What is a baseline in specific is that? So once you have the AI network, AI network analytics enabled, it is going to monitor your network, not it is not going to take effect immediately. It is going to monitor your.31:21Your network for a while, it is going to understand the trend of your network. It is going to read and understand what is the peak hours, which is the peak business hours, how is your trend looking like? How's your entire network trend looking like?31:41In the peak hours, what is the normal hours gonna look like, when is the best time to perform or give you suggestions to perform any activities? It is going to observe your network for a while, it is going to give you a comprehensive and a real time visibility into your entire network health by performing this base right check.31:53Once this baseline check is performed, it is going to allow you to proactively identify the issue considering your baseline, like it is going to have and set a baseline saying this is your baseline, and I can see a deviation of AP health or a controller CPU health.32:11Or a client drop, any of this, it is going to keep your baseline test from your network and any deviation is gonna be highlighted by the AI network analytics. With having that in mind, the next tab that we see or that we'll be seeing here is trends and insight. This is one such example. So keeping the base.32:26So you will have something that says trends and insight. Each you have a separate tab for each of it. Like each incident you can pick and you can see a detailed view or more granular view of it I can say. So for here we have taken the reference of a co channel interference at 2.4. I've taken that tab.32:47What you see here is, those that are highlighted like if you see 2nd picture here in the extreme right, says interference distribution and utilization distribution. Those are the graph that you see in ping, the radios in the group exhibitor ping are the high core channel interference more often.33:04And the green or the blue that you see here, the reference that is fetched from your baseline. So it is going to give you that graphic or like a more granular view I can say where it is going to show you the graph as how it would look like in a normal or a basic operating hours.33:22And what is the deviation that you see with specific to the 2.4 gig alone? Likewise, just gonna show you for the utilization, those graphs that are in blue are the reference one and the one that are highlighted in the pink of the actual performance.33:39For that specific timing, so for whatever timing that you would like to see, if you'll be able to see the specific time in which you are seeing the spike in the graph and all of that. So this is how the baseline would basically look like. So in the baseline page or this will be the overview summary where you will see.33:55I've chosen this for global. You have the option to choose for individual site or an individual building.34:15You have the option to choose it for for a specific like for 24 h or for one day or for seven days and you can choose each KPI like whichever baseline that you want. If you click down the, if you click on the dropdown menu next to the KPIs, you'll be given more options like for a specific building, for an access point and all of this. It's gonna show the individual baseline.34:21And observed and created for each of these metrics.34:40So what you see here is the onboarding time. This is what I've taken for reference. So, all of that are highlighted in the blue are are the buildings. So the one that is red would be the building with AI issue or the AI driven issue showing in.34:44Higher in number. The one that in blue would be the group of buildings that is available in this specific region or inside. So as you click on each of this like either a specific building or a specific device, if you click on it, it is gonna take you deep dive. You'll get an even granular view of it and you can hold over to find out each of this device.35:01You can get a detailed view of it.35:21Next is the heat map. The network heat map in the catalyst center is going to offer a comprehensive visual view of your wireless environment, allowing you to monitor your client density across multiple points over time. And also what I'm seeing here or what I've taken here is.35:26For a specific access point. Again, from the dropdown you can choose the client count or for whatever you would like to see this heat map. You'll be able to see here and you can go ahead and increase the number. So again, for each of this band is visible here. Maybe in this snapshot we have.35:45Zero issues for a client but once you click on it, once you go to a specific access point for a specific band, you'll be able to see in this specific time that you're chosen, how many number of users have been connected to that access point, how many number of users have been connected to this specific band in each of these ssids?36:02All of this detail, you will be getting a complete view of it. More like a three 60 degree view. So that is about the heat map. To have all of this mostly covered in the demo part, I'll quickly hand it over to Lassia.36:20What do you guys say? Thank you to explain all the troubleshooting features features, I'll just share my screen.36:36So this is a recording demo team. 1st we will start with how we get even notifications and then how do we resolve issues? I'll show you one or two to three issues and then we will go to AI analytics and then we will be looking at the security that I was mentioning previously.36:55Now, this is the home dashboard. Let's go to platform and developer toolkit here you get event notifications. Now these are all the notifications that have been created on my pod.37:15Where we have created several notifications for several issues and when you click on this actions dropdown, what happens is you can edit that particular notification, disable it such that you will not be able to get any notifications for them and then delete it.37:29Now these are the actions that you can take on a particular notification that has been created and event catalog, when you go to this event catalog, you'll be able to see almost 02:50 plus events that can send as a notification to.37:45Several channels like rest, Webex, email, so these are the channels that are available as of now to get notifications and now we will be focusing on interface down. So I'll work on this interface connecting network devices down.38:01And now when I click on this particular event, I'll be getting event details of this particular event. Now this is the description and then there are channels where through which I can get this particular notification. And now.38:19Let's go and create a notification quickly, click on create new and workflow will be started automatically. So you can select the site from which you want the notification. I will select global and I'll just select for that particular issue connecting network devices down.38:35And here you can see the channel supported and now is where you select the channel through which the notification you want, you need to receive. I'll select email and next. Now you can either select an existing instance. Now, how do you create an instance?38:53You can either go to, settings and in that setting system settings destination and there is an option to create email instances there and we have shown this in depth in one of our previous sessions integrating center with 3rd party platforms.39:12And or else you can create a new instance directly from here. I just give a name to this like EIS testing email notifications and there should be a valid. I'm giving my CEC ID and I want this particular notification to come on my outlook. So I'll give the same.39:28And the interface would be interface is down.39:49And I'll also add this other tag sent by Cathy so that I know that this notification is actually sent by Cathy. Now next, this requires this notification requires a name, so I'll just give that and it also requires a description.39:52Now I'll just give it as yes, this thing, even notifications and description. And then next, so here you will be able to see the summary of this notification creation and once you hit finish, that notification will be created.40:09And automatically whenever this interface is down, we'll be able to get that notification through email. We'll check that out also. So I'll just shut down one of the ports. Yep. So this is the device where I'm shutting down that is 9300 408E even E two.40:24And the interface that I'm shutting down is 10 gb Ethernet 2112/one/one. And now it should automatically be popped up on catalyst center assurance issues and events page.40:44Yeah, this we will go a little deep in the next few seconds. Yeah, now you'll see there are two interface connecting network devices is down. This is the time at which it happened August 1926 10:12 P.M..40:59Now there are two issues by you might ask, we'll come to that later. Now this is the description of one of the issues that is this interface is down on network device 9300 even E two and you'll be getting description also.41:15And as mentioned by that is MRI engine also. We'll look at that briefly in some time, but yeah, there is another issue also that is interface 2420 5 gb ethernet one/zero/one is also down.41:32On this particular network guys, that is because obviously when we shut down one interface, one interface, other side also would be down, right? So that is this issue. So if you observe this is a note where we have shut down the issue and interface and this is the interface.41:49And now what I'll do is I'll just go to my email and check if actually I'm able to see this notification. Yep. So I'll go to outlook. So here you see there are two.42:05Interface is downstand by and the one is at today at 10:12 p.m., which is the same time at which center is able to was able to detect the issue. And if you observe the assurance issue details are interface 10 gb internet to/one/one connecting the following two network west.42:24This is down. So in this way you'll be able to get the email notifications and when you click on this blue in Cisco catalyst center, it will automatically take us to the issue page which I have shown previously. Similarly, the other issue also is here because.42:44Again it is interface connecting network devices is down. So that is how we can get email notifications, but you can get these notifications through other channels like Webex, and now we'll go to issues and events for that assurance.43:02Issues and events so this is to show you how to resolve the issues that is able to detect. You can, this is the whole issues that are there on your network. If you want to get.43:22Issues on a single device, you need to go to device three 60 that we have discussed in the previous session again. Now, I'll filter this based on the location. I can do that and then I can also filter based on time range, but as of now I'll keep it 24 h.43:37And now again there are categories in prior issues also P1P2P3. So based on your, if you are looking only for P one issues, you select P one and there is this AI driven issues which are detected by AI in catalyst center, but these are not actual issues but.43:54That these are like the trends that we have mentioned which we'll be discussing. So those trends.44:14If they are persistent trends, then they are highlighted as issues here. Now, we go to one of the issues there to look systems and if you observe, we are getting all this information where this happened on which device it happened.44:19What is the device platform and when it has occurred 1st time and last one. Once I go to this particular issue, I get details about this problem. It says that there is 1st Mac address flats that are detected along with other events.44:34Which is indicating that there might be a specific along with where when at which location this issue has occurred. Now, yep so again initial assessment it is giving you the assessment through which it has detected this particular issue.44:50And the problem details and also all the relevant events that have led to this particular issue. Now we get all that information and when we click on this root cause analysis, it will take us to this machine reasoning engine. Now, this machine reasoning engine is like a.45:08Technical expert in troubleshooting. So what we have done here is we have put cisco's 40 years of knowledge base into a automation workflow which will be able to automate which will be able to automatically help you with root cause analysis for recurring issues.45:29Now this STP issue is a recurring is a frequent issue in most of the networks, right? So since we have been troubleshooting all those issues for so long, we have made an automation which will automatically do some troubleshooting like.45:48Check some steps before actually giving you the conclusion and also will give you the actions that you can take to resolve this particular issue. Now it is giving the reasoning activity which is, it is telling you why this what are all the things that are happening while this machine design engine is running for a STP loop.46:03And this machine is in different issue to issue. Now when I check on this conclusions, I understand that loop is detected on VLAN 1902, so there are two interfaces where the.46:22My address is being learned. So the suggested action is to enable VLAN one and two STP instance on these devices. So now in this way you can find the issue resolve the issue, find the root cause and.46:37Resolve the issue as soon as possible. Now let's say if you had to do this by yourself it would at least take you 30 to 1 h based on the commands that you have to run and all, but center is doing it automatically for you. And that will in like one to 2 min.46:53Now that is for one wired issue. I'll just show you from one wireless issue as well. So you see this wireless clients failed to connect server rejected client. Now we got to know that there is a wireless client onboarding issue and also.47:08To which SSID this is connecting and to which APS connecting at which location this issue is happening, and how many impacted sites is just impacting one floor or is impacting the whole building? So in this way you'll be able to get all these.47:24Within I mean once these occur, these are reactive issues by the way. So you see we have this MRE again so we have few steps, right? Like while we onboard from client to wireless network wired network. So here it is the onboarding is failing at the radius server.47:41And if you click on this run machine reasoning, it will again do some troubleshooting and will give you a conclusion on how to resolve this issue. So that is about issues and events. I will just show you one of the other issue.47:59So yeah, there is this excessive timeline between Cisco Center and network device. Now, if I go to this particular issue, it will tell me a little bit detail about this issue. So now it's mentioned that the time on this device on center has too far apart.48:15And Atlas Center cannot process the date, device data accurately if the time difference is more than 10 min. Now, ok, this is telling me that there is an issue. It is also telling me the suggested actions. So it is telling me to check time on the device and along with that, it is giving me the command.48:34Which has to be executed to find the time on the device show clock and it is giving me the output. And similarly there is other command also that has to be executed for others. And if I click on this run on it will automatically run all the commands and will give you the output.48:53So as an engineer, you don't need to go to CLI and get all these outputs you can run directly from catalyst center and find what is the issue here. So these are all the suggested actions for this particular issue. Similarly, if you have any other issues like interface down, then it will show.49:09Ask you to check the error counters and what is the, if the other device is connected is up if the other neighbor interface is up or not. So in this way it will give you other few steps which you can take to resolve the issue.49:28Now that is about issues and events. Now I'll go to this MRE workflows for that tools and network reasoner. So if you observe, we have many MRE tools here, like the one that we have run for SVP, right? So similarly you can run it for different.49:44Issues here. So this is for assurance telemetry analysis. So now mostly when it comes to catalyst center, the issue that we see is that device is not having any health score and that would mostly because of telemetry.50:04Issue. So what happens is while we find a device to assign a device to a site, some telemetry settings will be pushed like and the control certificate. And if they are not updated time to time, then the.50:23Device data will not be flowing to catalyst center and will not be able to get any health score on catalyst center. So for that reason, what we have done is we have created a tool which will automatically tell you why that particular assurance data is not coming to catalyst center. So you select that device and click on troubleshoot.50:39So usually this is most this is one of the tag cases frequent tag cases that we see and once you hit on this troubleshoot, it will give you the root cause analysis why this is happening. I'll just pass forward maybe like it will take two to 3 min.50:57And it will give you all the activities that it has done like is the device controllability enabled because only and only if it's enabled, that's when the telemetry settings will be pushed when the device is assigned to a site. And then.51:14You'll also be able to see if the center is the syslog server. So in this way to give you all the activities that it has run and the conclusion is that the time on this catalyst center and device has rejected too far apart and again similarly the other issue that we have seen, right?51:29The same issues here because it's the same device. So this action is to check time on device and make sure and enabled on the device. Now, that is how you find if your assurance telemetry is coming through the center or not is flowing or not.51:49Now that is for MRI engine and similarly we have for CPU utilization so you can find if there are any devices that are having high utilization as of now there are NO, there are none. I'll just give a CPU utilization thresh threshold as 80 and find if there are any.52:07Devices that are exceeding this utilization threshold and obviously it will tell me that this device is currently not showing any CPUs usage above 80 percentage, and it will just give me the processes that are using most people.52:26Processing. Now, that is and there are some other as well like power supply ones, interface down. So you can go to each of these MRIs and try it yourself and you'll be able to get this in two to 3 min.52:41Now that is about MRE workflows. I will go to baselines now, the ones that we have mentioned. Now, let's assume that you have set a threshold for onboarding failures. That that's that is like say if the onboarding failures in a particular site is more than five percentage.53:00Then you have to get notified and you set it, that is static threshold for whole day in all that site. Now, let's say during the daytime that threshold has increased to six percentage Since it's daytime and the clients are.53:18Roaming re onboarding, that is common issue, right? Like it doesn't need to be addressed immediately because it is acceptable since it's real time. But let's say if there is some onboarding failures by during nighttime around four percentage.53:37That is not a expected issue, right? Because why? When there are NO clients in light, why are we able to see onboarding spike, onboarding failure spike? So what this will do is what do is it will.53:53Remove that static threshold part and convert it into dynamic threshold. That is these baselines so based on your network and your time, it will and the day and time, it will change these thresholds based on the learning that it has been doing for the last one month.54:10And this keeps on continuing. Now what information in that case like what happens let's say during daytime it is 6 % it has set to six percentage based on the learning and if the onboarding failure spike has increased to seven percentage and it is continuing.54:28It's like 10 %, let's say 10 % and it's continuously there for like 4 h, then it will mention not 4 h maybe for 2 h, then in that case it will highlight you that you see this is the issue. You have to address it because it is a persistent issue.54:46And many APs and finds are getting affected, that information also will be available here. So the summary, you'll be able to see all the buildings. So now you just come here and find what all buildings that needs to be worked on today because you'll be able to see all the issues that are there.55:03On the buildings. So now one of the buildings has an issue, you come to that and troubleshoot that. And this again you can filter based on location, time range, and kps. As of now only three kps are selected, but again you can add other kps also.55:21So, as of now, you see these dots, right? Like yep so you see these dots, the, so these dots represent buildings. The higher the client count, the bigger the building. Now if let's say these big buildings, they might be.55:36Having more clients and the small dots might be having less. So that is what it's representing and the blue building blue colored.represents building with NO issues and orange represents building with AI driven issues but in other KPIs. And red represents.55:56Issues within this KPI. Now we have this particular red one. We go to that to open baseline details and it is showing that around 05:00 P.M. to 930pM. We have some onboarding failures. It is.56:14This is a predicted range. All these green color is the predicted range and if you observe it is fluctuating because it is based on your network and the time. So since during this time it is only expecting this particular green part and that onboarding failures has spiked is more than that being shared.56:29It is highlighting as the issue. Now you will also be able to get this percentage failed onboarding sessions unique clients and a sankey chart which will tell you on how many of the I mean what type of device types have experienced onboarding failures.56:49And the most impacted flows by AP and the device. Now, since this has occurred in evening, mostly not many clients would be complaining, but this is flagging you so that you are you address it immediately.57:06And it won't be like a persistent issue because if it continues every day obviously comp users will be complaining saying that their Wi Fi is slow. So instead of me letting users complain, we proactively work on the issues that are there.57:23On the network. Now, instead of just users complaining that Wi Fi is slow, you have an actual issue here that is this particular these APs. Now mostly all these APs, you see these we have all the APs that are having this issue.57:38And most of the AP sequence the radios is 2.4 ghz. So since mostly 2.4 ghz radios are having this onboarding failures, particularly for Apple iPhones and Apple iPads when compared to other devices.57:54We have a concrete issue and we can start troubleshooting. So instead of starting from scratch and letting the users complain, we have a proactive issue and an concrete issue. So this is the baselining that we create for the network according to your infrastructure.58:11Now we go to trends and insights, we have these AP performance advisories which are mentioning the APs that have four client experience. So now what it will do is for the last four weeks, if you observed this four weeks, we have, it has been learning that there are few radios that are.58:28Providing poor client experience and then it has grouped those radios with the ones that are not having any issues and is giving us that these radios are causing bad client experience because there is interference distribution and utilization distribution.58:47So will monitor many KPIs like SNR RSSI, onboarding failures. So many KPIs it will track and will give you this comparison between reference radios and the radios that are impacting client experience, and when you go to any of the AP, it will give you other KPI.59:02Comparison as well. I'm sorry team we are at the top of our but we will finish this and we'll be waiting till for some more time for Q and A please do not worry and I'm so sorry for being late. So yeah. Now we'll also go to trend deviations.59:22And there, yeah, you will be able to see other AP performance advisories as well. So trend deviations and here I just go to one of the trend deviations and it's mentioned that this particular AP radio, high girls radio is experiencing time deviation.59:39And it is also giving you the inside summary. Now if I scroll more, yeah, the client count and if I scroll more down, it will give me the client count per week. So for the last four weeks it has been noticing.59:58And it has given me this information. So you see in the week one the client count is 43 and in week two it is 19 and in week 03:17, and in week four it is 62. So it is up to us now like it has flagged you the trend deviation but it's up to us to find.01:00:14What could be the reason because of.01:00:34For this. Is it because this AP is that conference conferences huge conferences are only around week one and week four or is it because the neighboring APs are down in week one and week four? If it's 2nd case, then we have to address why the name.01:00:36Delivering AP is.01:00:56Going down in week one and week four. So in this way it is flagging you the trend deviations and we have to troubleshoot it. And now we also have some other analytics. Yeah, I'll just go to this part again because there is this troubleshooting part. Now you go to network heat map, you can either go to network heat map.01:00:58Directly from here or you can go from assurance and network. So what this will give you is it will give you client count and there are other KPIs also, ok, but we are seeing client count as of now and this client count will be per day.01:01:18And per radio, it will give you daily average and per day and all the average aspect. So in this way and also one good thing here is you can use this export option and export all this client count directly from network heatment. So let's say you want the last one month client count per day per.01:01:34For all the APs, you can just hit on this export and it will be able to give you all that information.01:01:54So that is about network heat map, and then I will show you the peer comparison and network comparison as well. So this is the peer comparison again you have to go to assurance and peer comparison. You'll be able to compare different RSSI S.01:02:00But as of now it is RSSA and for all days. So we are able to see that the.01:02:20Comparison between your network and the other networks which are of similar sizes and again this data is anonymous only the metadata is sent to AI cloud and everything is encrypted. So it is mentioning that you see most of the most of your band is having high RSN.01:02:26And it could lead to SNR or any other issue. So it is important that we check why.01:02:46The issue is happening. Let me compare your network with peer network and will tell you where you have to work to ensure that your network is up to date. And then, yeah, these are all the KPIs you can compare your network with other peer networks.01:02:52And you can compare it with all the days or based on several days. And then there is network comparison also where you can compare your buildings or your network within itself. So let's say you have a very good building which doesn't have any issues and you have a building which have lot of issues.01:03:09Issues. Or there is a new building which have you which I have deployed recently.01:03:29So you can compare the good one with the issues one or the new one and find out why that particular building is good and this is not good. And there are different KPIs you can compare these with. So now as of now it is radio throughput and you can see that there is lower radio throughput.01:03:33What medium radio throughput, higher radio throughput, and it will show you what is the percentage of this throughput and how many APs are having these and it will also compare with within the buildings. So this is how it will compare and will tell you like what could be the reason why you have issues in the.01:03:53Buildings with issues. And that is about network comparison. I will quickly go to security. So you go for security for all the devices, go to tools.01:04:13And next security so when you go to security advisories you have and it will give you all the advisory based on your configuration software version and operational data.01:04:31So as of now these are all the advisories and it will give you all this information like if the scans is success or not and when I click on each of the advisory, it will also tell me if I upgrade to sixteen.twelve.three, this particular advisory will be resolved.01:04:46And again, if I click on this, it will directly take me to that particular piece. So you can, if you would like to deep dive into this particular workaround, you can do that. Vulnerability, you can do that. So this is about security vulnerabilities. The.01:05:03Yeah, so you can also find the field notices in the stimular page tools and field notices. So go to tools and field notices and all the devices field notices will be appearing here.01:05:18Oh yeah. So since this is lab it is not able to show any, but yeah, once you connect your to CX cloud you will be able to see the field notices for all the devices. And similarly, you will be able to see the all the bugs on your devices in this network bug identifier.01:05:38So that is about the monitoring and troubleshooting team. So now I'll hand it over back to Akshay for concluding the session. Hello Akshay.01:05:55Hey hi, sorry, sorry, I was speaking on mute I guess. Thank you, thank you Padma and for the wonderful session. The wonderful demo as well. We are opening up for Q and A we've got a few more few questions in the Q and A most of them have been answered. I'm just responding to one more question.01:06:13Question now regarding nine a rumor that 9300 has gone end of life, which is not true. I'm just responding to your question there.01:06:33Got up so we we we are selling a 9300 beer short of that. I don't see any more questions in the Q and A We'll wait for a couple more minutes.01:06:44That's just in case if we have any more questions, but if you can just bring the deck.01:07:04I've already pasted the link for our community page where you will be able to find all the previous recordings and also a link to, the current or ongoing sessions and the upcoming.01:07:18Sessions as well. So please do have a look at those as well.01:07:31Seems like we don't have questions. So this brings us to the end of the session. Thank you all for joining us. Thank you for giving us your time and apologies that we went a little overboard with I think 09:10 minutes.01:07:36So this should be, goodbye from us. Just a quick note before we dropdown, at the end of the session, you should be getting a survey from us, once you log off the session and please do send us your feedbacks, what we can do better.01:07:53What was good, what was not so good, you would love to hear from you guys.01:08:12Thank you, thank you so much we have a question there. Let me just quickly bring that up.01:08:16Could you please help understand how to configure an issue setting and configure an issue where a switch port is going to going into error disabled state due to look back or storm storm good? New one.01:08:34Okay yeah so for the issue settings you always have option to go from menu assurance and you have the issue settings option where you can select which issues.01:08:52Can be notified to you. Maybe let's say if you have.01:09:10It open, you can quickly show and if you want any particular issue to be sent or for particular switch ports, you can always see that in the system defined issue if it is not available, what last is showing is you can create a user defined issue from that syslog. So.01:09:13Particular syslog, can be put in, in the description for this issue.01:09:33And you can get the user defined issue created. Or if you see that event, particularly in the event or issues and events, there is a direct link from where you can create the.01:09:38Issues out of it. Hope that answers your question. Maybe I can find a link or and share here on how to do that process is taking us through.01:09:56So I have gone to events page team and this particular I let's say I want to create an issue this particular event. I just given name, give it as test description and whenever this particular event with this particular message.01:10:18Appears on any of the device, it will be notified as a it will be alerted here. So this is how you can create an issue that is from issue settings. You can either go to issues and events or you can go.01:10:35Through this page or else let's say you have an issue on a particular device that is an event on a particular device, there also there will be an option to create an issue. I hope that answers your question.01:10:50Great great thanks last year, thanks. I think we are close to the end of this session. Thank you all for joining us today. Hope you have a good day and a wonderful weekend ahead. Thank you, bye.01:11:09