Installation Requirements

This section provides general guidelines and minimum requirements for installing Cisco Crosswork Data Gateway.

This section contains the following topics:

Virtual Machine (VM) Requirements

You can deploy Cisco Crosswork Data Gateway as a VM on a host that meets the following minimum requirements:

Requirement

Hypervisor

  • VMware vCenter 6.5 Update2d

  • VMware ESX 6.5 Update2

  • VMware vCenter 6.7 Update1

  • VMware ESX 6.7 Update1

Memory

32 GB

Disk space

50 GB

Note 

This is the deployment size only. Once started, VM disk space will increase based on the VMware overhead.

vCPU

8 vCPUs

Interfaces

There are three interfaces available. However, only two virtual interfaces (i.e., Management interface and Southbound interface) are applicable for Cloud deployment:

  • (Mandatory) One virtual interface for management network traffic, including SSH access to the VM. The DNS and NTP servers, and the default gateway, must be reachable via this interface.

    Note 

    Management interface is where the outbound TLS connection to Crosswork Cloud is sourced.

  • (Optional) One virtual interface for Southbound data traffic. The devices must be reachable via this interface (routable).

    Note 

    This interface can be optionally used by Cloud Deployment, in which case all devices in the network are expected to be in the same subnet as that of Southbound interface subnet.

IP Addresses

Two IPv4 or IPv6 addresses:

  • (Mandatory) One public IP for the management network virtual interface

  • (Optional) One public or private IP for the Southbound data network virtual interface.

The DNS and NTP servers, and the default gateway, must be reachable via the management network IP address. The managed devices can be reached via Southbound data network IP address.

NTP Servers

The IPv4/IPv6 addresses or host names of the NTP servers you plan to use. If you want to enter multiple NTP servers, separate them with spaces. These should be the same NTP servers you use to synchronize devices, clients, and servers across your network. Confirm that the NTP IP address or host name is reachable from after configuration or installation will fail.

DNS Servers

The IPv4/IPv6 addresses of the DNS servers you plan to use. These should be the same DNS servers you use to resolve host names across your network.

DNS Search Domain

The search domain you want to use with the DNS servers (for example, cisco.com). You can only have one search domain.

Destination Networks

If you are using a single interface (demo or lab install) you will have one destination network (virtual switch).

For live deployments, we recommend one virtual switch for the Data Network (connection between the Crosswork Cloud and the Cisco Crosswork Data Gateway VM) and second virtual switch for all the management traffic (vms to dns, ntp and the network you will use to access and manage the applications).

Important Notes

  • The VM runs Ubuntu Server 18.04.3 (ubuntu-18.04.3-server).

Ports Used

As a general policy, any ports that are not needed should be disabled.

The following table shows the minimum set of ports needed for Cisco Crosswork Data Gateway to operate correctly.

Table 1. Ports to be opened on Cisco Crosswork Data Gateway Management Interface

Port

Protocol

Used for...

Direction

22

TCP

SSH server

Inbound

22

TCP

SCP client

Outbound

123

UDP

NTP Client

Outbound

53

UDP

DNS Client

Outbound

443

TCP

Crosswork Cloud

Outbound

The Interface role to physical name mapping is:

  • Management Interface: eth0

  • Southbound Data Interface: eth1