Overview

You can set up the first appliance in a cluster using the Maglev Configuration wizard.

Do the steps in this procedure to configure the first installed appliance as the primary node. You must always configure the first appliance as the primary node, whether it will operate standalone or as part of a cluster.

If you are configuring the installed appliance as a secondary node for an existing cluster that already has a primary node, follow the steps described in Configure a secondary node using the Maglev wizard instead.

Verify that all of the IP addresses you enter while completing this procedure are valid addresses with valid netmasks. Also verify that the addresses and their corresponding subnets do not overlap. Service communication issues can result if they do.

Before configuring the appliances in a three-node cluster, log out of those appliances. If you remain logged in, the Quick Start workflow—which you use to discover network devices and enable telemetry—does not start after you configure your cluster’s appliances and log in to Catalyst Center for the first time.

Before you begin

Ensure that you have done these prerequisites:

Collected all of the information specified in Required IP addresses and subnets and Required configuration information.
Installed the first appliance, as described in Appliance installation workflow.
Configured Cisco IMC browser access on the primary node, as described in Enable browser access to the Cisco Integrated Management Controller.
Checked that the ports of the primary node appliance, and the switches they use, are properly configured, as described in Execute preconfiguration tasks.
Confirmed that you are using a compatible browser. For a list of compatible browsers, see the Release Notes document for the release of Catalyst Center you are installing.
Enabled ICMP on the firewall between Catalyst Center and both the default gateway and the DNS server you specify in this procedure. The Maglev Configuration wizard uses ping to verify the gateway and DNS server you specify.

Caution

If ICMP is not enabled and a firewall is in place, the ping may be blocked, which will prevent you from completing the wizard.

Procedure

Point your browser to the Cisco IMC IP address you set during the Cisco IMC GUI configuration you did, and log in to the Cisco IMC GUI as the Cisco IMC user (see Enable browser access to the Cisco Integrated Management Controller).

After you log in, the appliance displays the Cisco Integrated Management Controller Chassis Summary window with a hyperlinked menu at the top.

From the hyperlinked menu, select Launch KVM and then select HTML-based KVM.

The KVM console opens in a separate window or tab automatically. Use it to monitor the progress of the configuration and respond to the Maglev Configuration wizard prompts.

With the KVM displayed, reboot the appliance by making one of these selections:

In the main Cisco IMC GUI browser window: Choose Host Power > Power Cycle, and switch to the KVM console to continue.
In the KVM console: Choose Power > Power Cycle System (cold boot).

If you are asked to confirm your choice to reboot the appliance, click OK.

After displaying reboot messages, the KVM console displays the Static IP Configuration screen.

The KVM console displays the Static IP Configuration screen. The Skip button is in the bottom-right corner.

Click Skip.

The KVM console displays the Maglev Configuration wizard welcome screen.

The Maglev Configuration wizard displays two Cisco DNA Center cluster options for how you would like to configure the primary node.

Note

Only users that want to configure their appliance using one of the browser-based wizards without using the IP address, subnet mask, and default gateway assigned to the appliance's Enterprise interface by a DHCP server need to complete this screen.

Click Start a Catalyst Center Cluster to begin configuring the primary node.

The Maglev Configuration wizard displays two options for how you would like to start configuring the primary node.

Select one of these options:

Start using DNAC pre manufactured cluster: Select this option to configure an appliance with its default settings in place:
- Intracluster interface IP address: 169.254.6.66
- Intracluster interface subnet mask: 255.255.255.128
- Container subnet: 169.254.32.0/20
- Cluster subnet: 169.254.48.0/20
- IPv4 addressing
- Admin superuser's password: P@ssword9
You will not be able to change any of these settings, so select this option only if you want to use them.

This option is only available if you are configuring a new Catalyst Center appliance. If you are reimaging your appliance, the wizard continues with the Start configuration of DNAC in advanced mode option selected.
Start configuration of DNAC in advanced mode: Select this option to configure an appliance that doesn't use one or more of the default settings listed in the previous bullet. Also select this option if you want to use IPv6 addressing on your appliance.

The screen updates.

The Maglev Configuration wizard displays the step to choose the IP addressing mode to be used for services and applications.

Do these steps, then click next>> to continue:

Specify whether the applications and services running on your Catalyst Center appliance will use IPv4 or IPv6 addressing.
(Optional) Check the Enable FIPS Mode check box to enable FIPS mode on your Catalyst Center appliance.

See FIPS mode support for things to keep in mind when enabling FIPS mode on an appliance.

In the next wizard screen, you can enable the VLAN mode feature, which creates a single bonded interface that connects to your network using both the primary and secondary instance of your appliance's Enterprise interface. This feature is not commonly used. Enable it only if your Catalyst Center deployment requires it.

If this is the case, complete the next step.

Otherwise, click next>> in the next wizard screen without making any selections. You can enable the NIC bonding functionality that was described previously in this guide in the wizard's Enterprise and Intracluster interface configuration screens.

(Optional) Follow the onscreen instructions to enable Layer 2 port channel mode (with VLAN tagging) for the appliance. After making your selections, click next>> to continue.

The Maglev Configuration wizard displays the optional step of enabling Layer 2 port channel mode.

Select the VLAN mode option to enable dot1q/VLAN trunking and convert your appliance's Enterprise, Cluster, Management, and Internet interfaces into VLAN subinterfaces that reside on the bonded interface (as illustrated in this figure). By default, this interface operates in Active-Backup mode (which enables HA).
If you want this interface to operate in LACP mode instead (which enables load balancing and higher bandwidth), you must also select the LACP option.
When you enter the settings for your appliance's Enterprise and Cluster interfaces, ensure that you enter a unique VLAN ID in the VLAN ID of Interface field for the subinterfaces you want to configure on the virtual bonded interface.

Even though one physical appliance interface (the Enterprise interface) is connected, you can configure all of the subinterfaces that reside on the virtual bonded interface.

The wizard discovers all of the ports on the appliance and presents them to you one by one, in separate screens, in this order:

(Required) 10 Gbps Enterprise port—network adapter #1
(Required) 10 Gbps Cluster port—network adapter #2
(Optional) 1 Gbps/10 Gbps Management port—network adapter #3
(Optional) 1 Gbps/10 Gbps Internet port—network adapter #4

If the wizard fails to display either or both of the Enterprise and Cluster ports during the course of configuration, it might indicate that these ports are nonfunctional or disabled. These two ports are required for Catalyst Center functionality. If you discover that they are nonfunctional, select cancel to exit the configuration wizard immediately. Be sure that you have completed all of the steps provided in Execute preconfiguration tasks before resuming the configuration or contacting the Cisco Technical Assistance Center.

The wizard first presents the 10 Gbps Enterprise port as NETWORK ADAPTER #1. As explained in Interface cable connections, this is a required port used to link the appliance to the enterprise network. Apply the host IP address, netmask, and other values that are appropriate for this purpose (see Required IP addresses and subnets and Required configuration information for the values to enter).

The Maglev Configuration wizard displays the step to enter the network settings for the first network adapter.

This table lists the configuration values for NETWORK ADAPTER #1 to enter.

Table 1. Primary node entries for network adapter #1: 10 Gbps Enterprise port
Host IPv4/IPv6 Address field	Enter the IP address for the Enterprise port. This is required.
IPv4 Netmask/IPv6 Prefix Length field	Do one of these tasks: If you selected IPv4 addressing, enter the netmask for the port's IP address. This is required. If you selected IPv6 addressing, enter the prefix length (in bits). Valid values range from 10 through 127.
Default Gateway IPv4/IPv6 Address field	Enter a default gateway IP address to use for the port. Ensure that you enter a default gateway IP address for at least one of your appliance's interfaces. Otherwise, you will not be able to complete the configuration wizard.
IPv4/IPv6 DNS Servers field	Enter the IP address of the preferred DNS server. If you are entering multiple DNS servers, separate the IP addresses in the list with spaces. For each appliance in your cluster, configure a maximum of three DNS servers. Problems can occur if you configure more than three DNS servers for an appliance.
IPv4/IPv6 Static Routes field	Enter one or more static routes in this format, separated by spaces: <network>/<netmask>/<gateway>. This is usually required on the Catalyst Center Management port only.
VLAN ID of Interface field	Enter the VLAN ID for the bonded interface you enabled in the previous step. If you didn't enable it, this field will not be displayed.
Cluster Link field	Leave this field blank. It is required on the Cluster port only.
LACP Mode field	Do one of these tasks: Leave this field blank and the port will operate in Active-Backup mode. This mode provides fault tolerance by aggregating two Ethernet interfaces into a single logical channel. When the interface that's currently active goes down, the other interface takes its place and becomes active. Check the check box to enable LACP mode on this port. This mode aggregates two Ethernet interfaces that share the same speed and duplex settings into a single logical channel. This provides load balancing and higher bandwidth. For more information about Catalyst Center's implementation of NIC bonding, see NIC bonding overview. Note This field is displayed if you didn't select any of the options in the previous step.

After you finish entering the configuration values, click next>> to continue. The wizard validates the values you entered and issues an error message if any are incorrect. If you receive an error message, check that the value you entered is correct, then reenter it. If needed, click <<back to reenter it.

10.

After successful validation of the Enterprise port values you entered, the wizard presents the 10 Gbps Cluster port and presents it as NETWORK ADAPTER #2. As explained in Interface cable connections, this port is used to link the appliance to the cluster, so apply the host IP address, netmask, and other values that are appropriate for this purpose (see Required IP addresses and subnets and Required configuration information for the values to enter).

The Maglev Configuration wizard displays the step to enter the network settings for the second network adapter.

This table lists the configuration values for NETWORK ADAPTER #2 to enter.

Table 2. Primary node entries for network adapter #2: 10 Gbps Cluster port
Host IPv4/IPv6 address field	Enter the IP address for the Cluster port. This is required. You cannot change the address of the Cluster port later. Note If you selected the Start using DNAC pre manufactured cluster option previously, 169.254.6.66 will already be set in this field and you will not be able to enter a different address.
IPv4 Netmask/IPv6 Prefix Length field	Do one of these tasks: If you selected IPv4 addressing, enter the netmask for the port's IP address. This is required. Note If you selected the Start using DNAC pre manufactured cluster option previously, 255.255.255.128 will already be set in this field and you will not be able to enter a different netmask. If you selected IPv6 addressing, enter the prefix length (in bits). Valid values range from 10 through 127.
Default Gateway IPv4/IPv6 address field	Enter a default gateway IP address to use for the port. Ensure that you enter a default gateway IP address for at least one of your appliance's interfaces. Otherwise, you will not be able to complete the configuration wizard.
IPv4/IPv6 DNS Servers field	Enter the IP address of the preferred DNS server. If you are entering multiple DNS servers, separate the IP addresses in the list with spaces. For each appliance in your cluster, configure a maximum of three DNS servers. Problems can occur if you configure more than three DNS servers for an appliance.
IPv4/IPv6 Static Routes field	Enter one or more static routes in this format, separated by spaces: <network>/<netmask>/<gateway>. This is usually required on the Management port only.
Cluster Link field	Check the check box to set this port as the link to a Catalyst Center cluster. This is required on the Cluster port only.
LACP Mode field	Do one of these tasks: Leave this field blank and the port will operate in Active-Backup mode. This mode provides fault tolerance by aggregating two Ethernet interfaces into a single logical channel. When the interface that's currently active goes down, the other interface takes its place and becomes active. Check the check box to enable LACP mode on this port. This mode aggregates two Ethernet interfaces that share the same speed and duplex settings into a single logical channel. This provides load balancing and higher bandwidth. For more information about Catalyst Center's implementation of NIC bonding, see NIC bonding overview. Note This field is displayed if you didn't select any of the options in Step 8. You can only enable LACP mode on your appliance's Intracluster interface during the initial configuration of your appliance.

After you provide the necessary information, click next>> to continue. Correct validation errors, if any, as you did in previous screens. The wizard validates and applies your network adapter configurations.

11.

After successful validation of the Cluster port values you entered, the wizard presents the 1 Gbps/10 Gbps Management port and presents it as NETWORK ADAPTER #3. As explained in Interface cable connections, this port is used to access the Catalyst Center GUI from your management network. Apply the host IP address, netmask, and other values that are appropriate for this purpose (see Required IP addresses and subnets and Required configuration information for the values to enter).

The Maglev Configuration wizard displays the step to enter the network settings for the third network adapter.

This table lists the configuration values for NETWORK ADAPTER #3 to enter.

Table 3. Primary node entries for network adapter #3: 1 Gbps/10 Gbps Management port
Host IPv4/IPv6 address field	Enter the IP address for the Management Port. This is required only if you are using this port to access the Catalyst Center GUI from your management network; otherwise, you can leave it blank.
IPv4 Netmask/IPv6 Prefix Length field	Do one of these tasks if you entered an IP address: If you selected IPv4 addressing, enter the netmask for the port's IP address. This is required. If you selected IPv6 addressing, enter the prefix length (in bits). Valid values range from 10 through 127.
Default Gateway IPv4/IPv6 address field	Enter a default gateway IP address to use for the port. Ensure that you enter a default gateway IP address for at least one of your appliance's interfaces. Otherwise, you will not be able to complete the configuration wizard.
IPv4/IPv6 DNS Servers field	Enter the IP address of the preferred DNS server. If you are entering multiple DNS servers, separate the IP addresses in the list with spaces. For NTP, ensure port 123 (UDP) is open between Catalyst Center and your NTP server. For each appliance in your cluster, configure a maximum of three DNS servers. Problems can occur if you configure more than three DNS servers for an appliance.
IPv4/IPv6 Static Routes field	Enter one or more static routes in this format, separated by spaces: <network>/<netmask>/<gateway>.
Cluster Link field	Leave this field blank. It is required on the Cluster port only.

12.

After successful validation of the Management port values you entered, the wizard presents the 1 Gbps/10 Gbps Internet port as NETWORK ADAPTER #4. As explained in Interface cable connections, this is an optional port used to link the appliance to the Internet when you cannot do so through the 10 Gbps Enterprise port. Apply the host IP address, netmask, and other values that are appropriate for this purpose (see Required IP addresses and subnets and Required configuration information for the values to enter).

The Maglev Configuration wizard displays the optional step of entering the network settings for the fourth network adapter.

This table lists the configuration values for NETWORK ADAPTER #4 to enter.

Table 4. Primary node entries for network adapter #4: 1 Gbps/10 Gbps Internet port
Host IPv4/IPv6 address field	Enter the IP address for the Internet port. This is required only if you are using the Internet port for internet connection; otherwise, you can leave it blank.
IPv4 Netmask/IPv6 Prefix Length field	Do one of these tasks if you entered an IP address: If you selected IPv4 addressing, enter the netmask for the port's IP address. This is required. If you selected IPv6 addressing, enter the prefix length (in bits). Valid values range from 10 through 127.
Default Gateway IPv4/IPv6 address field	Enter a default gateway IP address to use for the Internet port. Ensure that you enter a default gateway IP address for at least one of your appliance's interfaces. Otherwise, you will not be able to complete the configuration wizard.
IPv4/IPv6 DNS Servers field	Enter the IP address of the preferred DNS server. If you are entering multiple DNS servers, separate the IP addresses in the list with spaces. For each appliance in your cluster, configure a maximum of three DNS servers. Problems can occur if you configure more than three DNS servers for an appliance.
IPv4/IPv6 Static Routes field	Enter one or more static routes in this format, separated by spaces: <network>/<netmask>/<gateway>. This is usually required on the Management port only.
Cluster Link field	Leave this field blank. It is required on the Cluster port only.

13.

After the network adapter configuration is complete, the wizard prompts you to enter configuration values for the NETWORK PROXY that you are using, as shown.

The Maglev Configuration wizard displays the step to enter the network proxy configuration settings.

Enter the configuration values for the NETWORK PROXY, as shown in this table.

Table 5. Primary node entries for network proxy
HTTPS Proxy field	Enter the URL or host name of an HTTPS network proxy used to access the Internet. Note Connection from Catalyst Center to the HTTPS proxy is supported only through HTTP in this release. If you enter an IPv6 URL that contains a port number, enclose the IP address portion of the URL in square brackets. In this example, 443 is the port number: http://[2001:db8:85a3:8d3:1319:8a2e:370:7348]:443/
HTTPS Proxy Username field	Enter the user name used to access the network proxy. If no proxy login is required, leave this field blank.
HTTPS Proxy Password field	Enter the password used to access the network proxy. If no proxy login is required, leave this field blank.

After you provide the necessary information, click next>> to continue. Correct validation errors, if any, as you did in previous screens.

14.

After network proxy configuration completes, the wizard prompts you to enter virtual IP addresses for the primary node, in MAGLEV CLUSTER DETAILS, as shown.

The Maglev Configuration wizard displays the step to enter the Maglev cluster details configuration settings.

Enter a space-separated list of the virtual IP addresses used for traffic between the cluster and your network. This is required for both three-node clusters and single-node clusters that will be converted into a three-node cluster in the future. If you have a single-node cluster setup and plan to stick with it, skip this step and continue to the next step.

You must enter one virtual IP address for each configured network interface. You will not be able to complete the wizard unless you do so. These addresses are tied to the cluster link's status, which must be in the UP state.

You can also specify a fully qualified domain name (FQDN) for your cluster. Catalyst Center uses this domain name to do these tasks:

It uses this hostname to access your cluster’s web interface and the Representational State Transfer (REST) APIs used by devices in the enterprise network that Catalyst Center manages.
In the Subject Alternative Name (SAN) field of Catalyst Center certificates, the FQDN defines the Plug and Play server used for device provisioning.

After you provide the necessary information, click next>> to continue. Correct validation errors, if any, as you did in previous screens.

15.

After you have entered the cluster details, the wizard prompts you to enter USER ACCOUNT SETTINGS values, as shown.

The Maglev Configuration wizard displays the step to enter the user account settings values.

This table lists the configuration values for USER ACCOUNT SETTINGS to enter.

Table 6. Primary node entries for user account settings
Linux Password field	Enter a Linux password for the maglev user that complies with the Password requirements.
Re-enter Linux Password field	Confirm the Linux password by entering it a second time.
Password Generation Seed field	To generate a Linux password automatically, enter a seed phrase in this field and then press <Generate Password>.
Auto Generated Password field	(Optional) The generated password includes the seed phrase. You may use this password or edit the auto-generated password. Press <Use Generated Password> to save the password.
Administrator Password field	Enter a password for the default admin superuser, used to log in to Catalyst Center for the first time. Ensure that this password complies with the Password requirements. Note If you select the Start using DNAC pre manufactured cluster option previously, the default password (P@ssword9) has already been set for the appliance and cannot be changed in the configuration wizard. As a result, this and the next field are not displayed in this screen.
Re-enter Administrator Password field	Confirm the administrator password by entering it a second time.

After you provide the necessary information, click next>> to continue. Correct validation errors, if any, as you did in previous screens.

16.

After you have entered the user account details, the wizard prompts you to enter NTP SERVER SETTINGS values.

The Maglev Configuration wizard displays the step to enter the NTP server settings values.

This table lists the configuration values for NTP SERVER SETTINGS to enter.


NTP Servers field	Enter one or more NTP server addresses or hostnames, separated by spaces. At least one NTP address or hostname is required. For a production deployment, we recommend that you configure a minimum of three NTP servers.
NTP Authentication check box	To enable the authentication of your NTP server before it's synchronized with Catalyst Center, check this check box and then enter this information: The NTP server's key ID. Valid values range between 1 and 4294967295 (2^32-1). This value corresponds to the key ID that's defined in the NTP server's key file. The SHA-1 key value associated with the NTP server's key ID. This 40-character hex string resides in the NTP server's key file. Note Ensure that you enter a key ID and key value for each NTP server that you configured in the previous field.

17.

After you have specified the appropriate NTP servers, the wizard prompts you to enter MAGLEV ADVANCED SETTINGS values, as shown.

Note

If you chose the Start using DNAC pre manufactured cluster option previously, the default Container and Cluster subnets have already been set for the appliance and cannot be changed in the configuration wizard. As a result, you will not see this wizard screen. Continue to Step 17.

The Maglev Configuration wizard displays the step to enter the Maglev advanced settings values.

This table lists the configuration values for MAGLEV ADVANCED SETTINGS to enter.

Table 7. Primary node entries for Maglev advanced settings
Container Subnet field	A dedicated, non-routed IP subnet that Catalyst Center uses to manage internal services. By default, this is already set to 169.254.32.0/20, and we recommend that you use this subnet. If you decide to enter another subnet, ensure that it does not conflict with or overlap any other subnet used by the Catalyst Center internal network or an external network. For more information, see the Container Subnet description in Required IP addresses and subnets.
Cluster Subnet field	A dedicated, non-routed IP subnet that Catalyst Center uses to manage internal cluster services. By default, this is already set to 169.254.48.0/20, and we recommend that you use this subnet. If you decide to enter another subnet, ensure that it does not conflict with or overlap any other subnet used by the Catalyst Center internal network or an external network. For more information, see the Cluster Subnet description in Required IP addresses and subnets.
Enable Intracluster IPSec check box	Check to enable IPsec connections between the nodes in a three-node high HA cluster.

When you are finished, click next>> to continue. Correct validation errors, if any, as you did in previous screens.

18.

After you have entered the Maglev advanced settings, a final message appears, stating that the wizard is ready to apply the configuration (as shown).

The Maglev Configuration wizard displays the message that it's ready to apply the configuration on the controller.

Click proceed>> to complete the configuration wizard.

The host will reboot automatically and display messages on the KVM console as it applies your settings and brings up services. This process can take several hours. You can monitor its progress using the KVM console.

At the end of the configuration process, the appliance power cycles again, then displays a CONFIGURATION SUCCEEDED! message.

The Maglev Configuration wizard displays the message that the configuration succeeded with optional next steps.

What to do next

If you are deploying this appliance in standalone mode only, do the first-time setup: First-time setup workflow.
If you are deploying this appliance as the primary node in a cluster, configure the second and third installed appliances in the cluster: Configure a secondary node using the Maglev wizard.

Configure the primary node using the Maglev wizard

Overview

Before you begin

Procedure

What to do next

FIPS mode support

Need help?