Cisco Catalyst Center Third-Generation Appliance Installation Guide, Release 3.1.x

PDF

Configure the primary node using the Advanced Install configuration wizard

Want to summarize with AI?

Log in

Overview

You can set up the first appliance in a cluster using the Advanced Install configuration wizard.

Whether standalone or part of a cluster, always configure the first appliance as the primary node.

If you are configuring the installed appliance as a secondary node for an existing cluster that already has a primary node, follow the steps in Configure a secondary node using the Advanced Install configuration wizard instead.

To configure the first installed appliance as the primary node using the Advanced Install configuration wizard:

  • These third-generation Catalyst Center appliances support configuration using this wizard:

    • 32-core appliance: Cisco part number DN3-HW-APL

    • 56-core appliance: Cisco part number DN3-HW-APL-L

  • You can only use this wizard to complete the initial configuration of a new Catalyst Center appliance. To reimage an appliance that was configured previously, you must use the Maglev Configuration wizard (see Configure the Appliance Using the Maglev Wizard).

  • Before you configure the appliances in a three-node cluster, ensure that you have logged out of those appliances. Otherwise, the Quick Start workflow (which discovers your network's devices and enables telemetry) will not start after you have configured your cluster's appliances and log in to Catalyst Center for the first time.

  • Ensure that the IP addresses you enter while completing this procedure are valid addresses with valid netmasks. Also make sure that the addresses and their corresponding subnets do not overlap. Service communication issues can result when they do.

Before you begin

Ensure that you:

Procedure

1.

Start the Advanced Install configuration wizard:

  1. Point your browser to the Cisco IMC IP address that you set during the Cisco IMC GUI configuration you performed, then log in to the Cisco IMC GUI as the Cisco IMC user (see Enable browser access to the Cisco Integrated Management Controller).

    After successful login, the appliance displays the Cisco Integrated Management Controller Chassis Summary window, with a blue link menu at the upper right.
  2. In the blue link menu, select Launch KVM and then select HTML based KVM.

    The KVM console opens in a separate browser window or tab automatically. Use it to monitor the progress of the configuration and respond to Maglev Configuration Wizard prompts.

  3. With the KVM displayed, reboot the appliance by making one of these selections:

    • In the main Cisco IMC GUI browser window: Choose Host Power > Power Cycle. Then switch to the KVM console to continue.

    • In the KVM console: Choose Power > Power Cycle System (cold boot).

    If asked to confirm your choice to reboot the appliance, click OK.

    After displaying reboot messages, the KVM console displays the Static IP Configuration screen.

    The KVM console displays the Static IP Configuration screen with the Skip and Configure options in the bottom-right corner.

    Remember the URL listed in the Web Installation field.

  4. Do one of these tasks:

    • If you want a DHCP server to assign an IP address, subnet mask, and default gateway to your appliance's Enterprise interface, click Skip.

    • If you want to assign your own IP address, subnet mask, and default gateway to your appliance's Enterprise interface, enter the information that this table describes and then click Configure.

    Note

    Only specify an IP address, subnet mask, and default gateway for your appliance's Enterprise interface.

    IPv6 Mode check box

    If you want to configure an IPv6 address, check this check box.

    IP Address field

    Enter the static IP address that you want to use.

    Netmask field

    Enter the netmask for the IP address you specified in the previous field:

    • If you entered an IPv4 address, you can enter either a netmask or CIDR address.

    • If you entered an IPv6 address, you can only enter a CIDR address.

    Default Gateway Address field

    Specify the default gateway that will be used to route traffic.

    Static Routes field

    Enter one or more static routes in this format, separated by spaces: <network>/<netmask>/<gateway>. This is usually required on the Management port only.

    The KVM console displays the Maglev Configuration wizard welcome screen.

    The Maglev Configuration wizard displays two Cisco DNA Center cluster options for how you would like to configure the primary node.
  5. To bring up the Appliance Configuration screen, open the URL that was displayed in the Static IP Configuration screen.

  6. Click the Start a Cisco Catalyst Center Cluster radio button, then click Next.

    The Appliance Configuration screen displays two appliance configuration workflow options.
  7. Click the Advanced Install radio button, then click Start.

    The Overview slider opens. Click > to view a summary of the tasks that the wizard helps you complete.

    The Advanced Install Overview slider displays a summary of the workflow with the Start Workflow button in the bottom-left corner.
  8. Click Start Workflow to start the wizard.

    The Appliance Interface Overview screen opens, providing a description of the four appliance interfaces that you can configure.

    The Appliance Interface Overview screen summarizes the four configurable interfaces on your appliance.

    At a minimum, configure the interfaces on your appliance's Enterprise and Cluster ports, as they are required for Catalyst Center functionality. If the wizard fails to display either or both of these ports during configuration, they may be nonfunctional or disabled. If you discover that they are nonfunctional, click Exit to exit the wizard immediately. Be sure you have completed the steps that are provided in Execute preconfiguration tasks before resuming configuration or contacting the Cisco Technical Assistance Center (TAC).

2.

Complete the Advanced Install configuration wizard:

  1. Click Next.

    The How would you like to set up your appliance interfaces? screen opens.

    The How would you like to set up your appliance interfaces? screen displays the step to choose if you want to configure dedicated Management and Internet Access interfaces.

    If your network resides behind a firewall, do these tasks:

    • Click the allow access to these URLs link to view a pop-up window that lists the URLs that Catalyst Center must be able to access.

    • Click the open these ports link to view a pop-up window that lists the network service ports that must be available for Catalyst Center to use.

  2. Indicate whether you want to configure dedicated Management and Internet Access interfaces, then click Next.

    The Configure Your Enterprise Network Interface screen opens.

    The Configure Your Enterprise Network Interface screen displays the step to enter configuration values for the Enterprise interface.
  3. Enter the configuration values for the Enterprise interface, then click Next.

    As explained in Interface cable connections, this is a required interface that is used to link the appliance to the enterprise network. See Required IP addresses and subnets and Required configuration information for a more detailed description of the values that you must enter.

    Table 1. Primary node entries for the Enterprise interface

    LACP Mode slider

    Select one of these network interface controller (NIC) bonding modes for the Enterprise interface:

    • Active-Backup mode: This mode provides fault tolerance by aggregating two Ethernet interfaces into a single logical channel. When the interface that's currently active goes down, the other interface takes its place and becomes active.

    • LACP mode: This mode aggregates two Ethernet interfaces that share the same speed and duplex settings into a single logical channel. This provides load balancing and higher bandwidth.

    For more information about Catalyst Center's implementation of NIC bonding, see NIC bonding overview.

    Host IP Address field

    Enter the IP address for the Enterprise interface. This is required.

    Subnet Mask field

    Enter the netmask for the interface's IP address. This is required.

    Default Gateway IP Address field

    Enter a default gateway IP address to use for the interface.

    Default Gateway: Enter an IP address for at least one interface. Failure to do so prevents completion of the configuration wizard.

    Note

    You designated this interface to use the default gateway assigned to it by a DHCP server. Complete these steps to specify a different gateway:

    1. Delete the IP address that is currently listed in this field and then click Exit.

      This will bring you back to the first wizard screen.

    2. Return to the Enterprise port's wizard screen and enter the gateway IP address you want to use.

    DNS field

    Enter the IP address of the preferred DNS server.

    To enter additional DNS servers, click the Add (+) icon.

    • For each node in your cluster, configure a maximum of three DNS servers. Problems can occur if you configure more than three DNS servers for an appliance.

    • For NTP, ensure port 123 (UDP) is open between Catalyst Center and your NTP server.

    The wizard validates the information that you have entered, confirms that the port is up, and notifies you of any settings that must be changed before you can continue with the wizard. If the settings that you have entered are valid and the port is up, the wizard's Configure Your Intracluster Interface screen opens.

    The Configure Your Intracluster Interface screen displays the step to enter configuration values for your Intracluster interface.
  4. Enter the configuration values for your Intracluster interface, then click Next.

    As explained in Interface cable connections, this required port is used to link the appliance to your cluster. See Required IP addresses and subnets and Required configuration information for a more detailed description of the values you must enter.

    Note
    • If you opted to configure the Enterprise and Internet Access interfaces on the same port, complete this step and then continue to Step 2e (which describes how to configure your Management interface).

    • If you opted to configure the Enterprise and Management interfaces on the same port, complete this step and then skip ahead to Step 2f (which describes how to configure your Internet Access interface).

    • If you opted to configure the Enterprise, Management, and Internet Access interfaces on the same port, complete this step and then skip ahead to Step 2g.

    Table 2. Primary node entries for the Intracluster interface

    LACP Mode slider

    Select one of these NIC bonding modes for the Intracluster interface:

    • Active-Backup mode: This mode provides fault tolerance by aggregating two Ethernet interfaces into a single logical channel. When the interface that's currently active goes down, the other interface takes its place and becomes active.

    • LACP mode: This mode aggregates two Ethernet interfaces that share the same speed and duplex settings into a single logical channel. This provides load balancing and higher bandwidth.

      If you want to enable LACP mode on your appliance's Intracluster interface, do so now. You won't be able to after you complete this wizard.

    For more information about Catalyst Center's implementation of NIC bonding, see NIC bonding overview.

    Host IP Address field

    Enter the IP address for the Intracluster interface. This is required.

    Note

    You cannot change the address of the Intracluster interface later.

    Subnet Mask field

    Enter the netmask for the interface's IP address. This is required.

    The wizard validates the information that you have entered, confirms that the port is up, and notifies you of any settings that must be changed before you can continue with the wizard. If the settings that you have entered are valid and the port is up, the wizard's Configure Your Management Network Interface screen opens.

    The Configure Your Management Network Interface screen displays the optional step to enter configuration values for the Management port.
  5. (Optional) Enter the configuration values for the Management interface, then click Next.

    As explained in Interface cable connections, this port is used to access the Catalyst Center GUI from your management network. If you chose to configure a dedicated Management interface, enter the information described in this table. (See Required IP addresses and subnets and Required configuration information for a more detailed description of the values you must enter.)

    Note

    If you opted to configure the Enterprise and Internet Access interfaces on the same port, complete this step and then skip ahead to Step 2g.

    Table 3. Primary node entries for the Management interface

    Host IP Address field

    Enter the IP address for the Management interface.

    Subnet Mask field

    Enter the netmask for the interface's IP address.

    Default Gateway IP Address field

    Enter a default gateway IP address to use for the interface.

    Ensure that you enter a default gateway IP address for at least one of your appliance's interfaces. Otherwise, you will not be able to complete the configuration wizard.

    DNS field

    Enter the IP address of the preferred DNS server.

    To enter additional DNS servers, click the Add (+) icon.

    • For each node in your cluster, configure a maximum of three DNS servers. Problems can occur if you configure more than three DNS servers for an appliance.

    • For NTP, ensure port 123 (UDP) is open between Catalyst Center and your NTP server.

    The wizard validates the information that you have entered, confirms that the port is up, and notifies you of any settings that must be changed before you can continue with the wizard. If the settings that you have entered are valid and the port is up, the wizard's Configure Your Internet Access Interface screen opens.

    The Configure Your Internet Access Interface screen displays the optional step to enter configuration values for the Internet Access interface.
  6. (Optional) Enter the configuration values for the Internet Access interface, then click Next.

    As explained in Interface cable connections, this is an optional port used to link the appliance to the Internet when you cannot do so through the Enterprise port. If you chose to configure a dedicated Internet Access interface, enter the information described in this table. (See Required IP addresses and subnets and Required configuration information for a more detailed description of the values you must enter.)

    Table 4. Primary node entries for the Internet Access interface

    Host IP Address field

    Enter the IP address for the Internet Access interface.

    Subnet Mask field

    Enter the netmask for the interface's IP address. This is required if you entered an IP address in the previous field.

    Default Gateway IP Address field

    Enter a default gateway IP address to use for the interface.

    Ensure that you enter a default gateway IP address for at least one of your appliance's interfaces. Otherwise, you will not be able to complete the configuration wizard.

    DNS field

    Enter the IP address of the preferred DNS server.

    To enter additional DNS servers, click the Add (+) icon.

    • For each node in your cluster, configure a maximum of three DNS servers. Problems can occur if you configure more than three DNS servers for an appliance.

    • For NTP, ensure port 123 (UDP) is open between Catalyst Center and your NTP server.

    The wizard validates the information that you have entered, confirms that the port is up, and notifies you of any settings that must be changed before you can continue with the wizard. If the settings that you have entered are valid and the port is up, the wizard's Interface to Port Configuration screen opens.

  7. Review the settings that you have entered for the primary node's interfaces.

    If you must make any changes, click the Edit link for the relevant interface.

  8. When you are happy with the interface settings, click Next.

    After initial interface configuration has completed, the Configure Proxy Server Information screen opens.

    The Configure Proxy Server Information screen displays the step to choose if you want your network to use a proxy server to access the internet.
  9. Do one of these tasks and then click Next:

    • If your network does not use a proxy server to access the internet, click the No radio button.

    • If your network does use a proxy server to access the internet, enter the values described in this table:

    Table 5. Primary node entries for proxy server settings

    Proxy Server field

    Enter the URL or host name of an HTTPS network proxy used to access the Internet.

    Note
    Connection from Catalyst Center to the HTTPS proxy is supported only via HTTP in this release.

    Port field

    Enter the port your appliance used to access the network proxy.

    Username field

    Enter the user name used to access the network proxy. If no proxy login is required, leave this field blank.

    Password field

    Enter the password used to access the network proxy. If no proxy login is required, leave this field blank.

    The wizard validates the information that you have entered and notifies you of any settings that must be changed before you can continue with the wizard. If the settings that you have entered are valid and the port is up, the wizard's Advanced Appliance Settings screen opens.

  10. Enter the configuration values for your cluster, then click Next.

    Table 6. Primary node entries for advanced appliance settings

    Cluster virtual IP addresses

    To access from Enterprise Network, For Intracluster Access, To access from Management Network, and For Internet Access fields

    Note

    If you configured the Management or Internet Access interface on the same port as the Enterprise interface, its corresponding field is not displayed in this section.

    Enter the virtual IP address that will be used for traffic between the cluster and the interfaces that you have configured on your primary node. This is required for both three-node clusters and single-node clusters that will be converted into a three-node cluster in the future. If you have a single-node cluster setup and don't plan to move to a three-node cluster setup, you can leave the fields in this section blank.

    If you decide to configure a virtual IP address, you must enter one for each configured network interface. You will not be able to complete the wizard unless you do so. These addresses are tied to the cluster link's status, which must be in the UP state.

    Fully Qualified Domain Name (FQDN) field

    Enter the fully qualified domain name (FQDN) for your cluster. Catalyst Center does these tasks with this hostname:

    • It uses this hostname to access your cluster’s web interface and the Representational State Transfer (REST) APIs used by devices in the enterprise network that Catalyst Center manages.

    • In the Subject Alternative Name (SAN) field of Catalyst Center certificates, it uses the FQDN to the define the Plug and Play server that should be used for device provisioning.

    CLI credentials

    Enter and confirm the password for the maglev user.

    Ensure that this password complies with the Password requirements.

    Cisco Catalyst Center admin credentials

    Enter a password for the default admin superuser, used to log in to Catalyst Center for the first time.

    Ensure that this password complies with the Password requirements.

    NTP server settings

    NTP Server field

    Enter at least one NTP server address or hostname. To enter additional NTP server addresses or hostnames, click the Add (+) icon.

    For a production deployment, Cisco recommends that you configure a minimum of three NTP servers.

    Turn On NTP Authentication check box

    To enable the authentication of your NTP server before it's synchronized with Catalyst Center, check this check box and then enter this information:

    • The NTP server's key ID. Valid values range between 1 and 4294967295 (2^32-1).

      This value corresponds to the key ID that's defined in the NTP server's key file.

    • The SHA-1 key value associated with the NTP server's key ID. This 40-character hex string resides in the NTP server's key file.

    Note

    Ensure that you enter a key ID and key value for each NTP server that you configured in the previous field.

    Subnet settings

    Container Subnet field

    A dedicated, non-routed IP subnet that Catalyst Center uses to manage internal services. By default, this is already set to 169.254.32.0/20, and we recommend that you use this subnet.

    Cluster Subnet field

    A dedicated, non-routed IP subnet that Catalyst Center uses to manage internal cluster services. By default, this is already set to 169.254.48.0/20, and we recommend that you use this subnet.

    The wizard validates the information that you have entered. It also notifies you of any settings that require changes before you can continue with the wizard. If the settings that you have entered are valid, the wizard's Summary screen opens.

    The Summary screen displays the step to review all the entered settings before starting the configuration.
    Note

    To download the appliance configuration as a JSON file, click the here link.

  11. Review the settings that you have entered while completing the wizard. If necessary, click the appropriate Edit link to open the wizard screen in which you want to make updates.

  12. To complete the configuration of your Catalyst Center appliance, click Start Configuration.

    The wizard screen continuously updates during the process. It indicates the tasks that Catalyst Center is completing and their progress. It also indicates any errors that have occurred. To save a local copy of this information as a text file, click the download icon.

    The Appliance Configuration In Progress screen informs you how long the configuration should take and displays a progress bar.

What to do next

When this task is complete: