Step 1

Click the menu icon () and choose System > System 360.

Step 2

On the System 360 dashboard, review the following displayed data metrics:

Step 1

Click the menu icon () and choose System > System 360.

Step 2

In System 360 window, click Service Explorer tab.

Step 3

Click the service to launch the Service 360 view, which displays the following details:

Step 4

Enter the service name in the Search field to search the services listed in the table.

Step 5

Click the filter icon in the services table to filter services based on app stack name, service status (Up, Down, or In Progress), or managed service.

Step 1

Click the menu icon () and choose System > Settings > Trust & Privacy > Anonymize Data.

Step 2

In the Anonymize Data window, check the Enable Anonymization check box.

Step 3

Click Save.

Step 1

Click the menu icon () and choose System > Settings > External Services > Authentication and Policy Servers.

Step 2

From the Add drop-down list, choose AAA or ISE.

Step 3

To configure the primary AAA server, enter the following information:

Step 4

To configure a Cisco ISE server, enter the following details:

Step 5

Click Advanced Settings and configure the settings:

Step 6

Click Add.

Step 7

To add a secondary server, repeat the preceding steps.

Step 1

Click the menu icon () and choose System > Settings.

Step 2

Scroll down to External Services and choose Cisco AI Analytics.

The AI Network Analytics window opens.

Step 3

Do one of the following:

• If you have an earlier version of Cisco AI Network Analytics installed in your appliance, do the following:

  1. Click Recover from a config file.

     The Restore AI Network Analytics window opens.

  2. Drag-and-drop the configuration files in the area provided or choose the files from your file system.

  3. Click Restore.

     Cisco AI Network Analytics might take a few minutes to restore, and then the Success dialog box opens.

• For the first-time configuration of Cisco AI Network Analytics, do the following:

  1. Click Configure.

  2. In the Where should we securely store your data? area, choose the location to store your data. Options are: Europe (Germany) or US East (North Virginia).

     The system starts testing cloud connectivity as indicated by the Testing cloud connectivity... tab. After cloud connectivity testing completes, the Testing cloud connectivity... tab changes to Cloud connection verified.

  3. Click Next.

     The terms and conditions window opens.

  4. Click the Accept Cisco Universal Cloud Agreement check box to agree to the terms and conditions, and then click Enable.

     Cisco AI Network Analytics might take a few minutes to enable, and then the Success dialog box opens.

     

Step 4

In the Success dialog box, click Okay.

The AI Network Analytics window opens, and the Enable AI Network Analytics toggle button displays .

Step 5

(Recommended) In the AI Network Analytics window, click Download Configuration file.

Step 1

Click the menu icon () and choose System > Settings.

Step 2

Scroll down to External Services and choose Machine Reasoning Knowledge Base.

Step 3

(Recommended) Check the AUTO UPDATE check box to automatically update the Machine Reasoning Knowledge Base.

Step 4

To manually update the Machine Reasoning Knowledge Base in Cisco DNA Center, do one of the following:

• Under AVAILABLE UPDATES, click Update. A Success pop-up window appears with the status of the update.
• Manually download the Machine Reason Knowledge Base to your local machine and import it to Cisco DNA Center. Do the following:

  1. Click Download.

     The Opening mre_workflow_signed dialog box appears.

  2. Open or save the downloaded file to the desired location in your local machine, and then click OK.

  3. Click Import to import the downloaded Machine Reasoning Knowledge Base from your local machine to Cisco DNA Center.

Step 5

Check the CISCO CX CLOUD SERVICE FOR NETWORK BUG IDENTIFIER AND SECURITY ADVISORY check box to enable Cisco CX Cloud connection with network bug identifier and security advisory.

Step 6

In the Security Advisories Settings area click the RECURRING SCAN toggle button to enable or disable the weekly recurring scan.

Step 7

Click the CISCO CX CLOUD toggle button to enable or disable the Cisco CX cloud.

Step 1

Click the menu icon () and choose System > Settings > Cisco Accounts > Cisco.com Credentials.

Step 2

Enter your Cisco username and password.

Step 3

Click Save.

Step 1

Click the menu icon () and choose System > Settings > Cisco Accounts > SSM Connection Mode.

Step 2

Choose Direct to enable a direct connection to the Cisco SSM cloud.

Step 3

If your organization is security sensitive, choose On-Prem CSSM. The on-prem option lets you access a subset of Cisco SSM functionality without using a direct internet connection to manage your licenses with the Cisco SSM cloud.

1. Before you enable On-Prem CSSM, confirm that the satellite is deployed, up, and running in your network site.

   If the satellite is configured with FQDN, the call-home configuration of satellite FQDN is pushed instead of the IP address.

2. Enter the details for the On-Prem CSSM Host, Smart Account Name, Client ID, and Client Secret.

   Do not use a space or an underscore in the Smart Account name.

   For information about how to retrieve the client ID and client secret, see the Cisco Smart Software Manager On-Prem User Guide.

3. Click Test Connection to validate the Cisco SSM connection.

4. Click Save and then Confirm.

5. If there are devices that need to be registered again with the changed SSM, the Need to Re-Register Devices dialog box appears. Click OK in the dialog box.

6. In the Tools > License Manager > Devices window, choose the devices that you want to register again and click Finish Connection Mode Changes.

7. In the Resync Devices dialog box, do the following:

   • Enter the Smart Account.

   • Enter the Virtual Account.

   • Click Now to start the resync immediately or click Later to schedule the resync at a specific time.

   • Click Resync.

   The Recent Tasks window shows the resync status of the devices.

Step 4

Choose Smart proxy to register your smart-enabled devices with the Cisco SSM cloud through Cisco DNA Center. With this mode, devices do not need a direct connection to the Cisco SSM cloud. Cisco DNA Center proxies the requests from the device to the Cisco SSM cloud through itself.

Step 1

Click the menu icon () and choose System > Settings > Cisco Accounts > PnP Connect.

Step 2

Click Register to register a virtual account.

Step 3

In the Register Virtual Account window, the Smart Account you configured is displayed in the Select Smart Account drop-down list. You can select an account from the Select Virtual Account drop-down list.

Step 4

Click the required IP or FQDN radio button.

Step 5

Enter the IP address or FQDN (Fully Qualified Domain Name) of the controller.

Step 6

Enter the profile name. A profile is created for the selected virtual account with the configuration that you provided.

Step 7

Check the Use as Default Controller Profile check box to register this Cisco DNA Center controller as the default controller in the Cisco PnP Connect cloud portal.

Step 8

Click Register.

Step 1

Click the menu icon () and choose System > Settings > Cisco Accounts > Smart Account.

Step 2

Click the Add button. You are prompted to provide Smart Account credentials.

1. Enter your Smart Account username and password.

2. Click Save.

   Your Smart Account is configured.

Step 3

If you want to change the selected Smart Account Name, click Change. You will be prompted to select the Smart Account that will be used for connecting to your Smart Licensing Account on Cisco SSM cloud.

1. Choose the Smart Account from the drop-down list.

2. Click Save.

Step 4

Click View all virtual accounts to view all the virtual accounts associated with the Smart Account.

Step 5

(Optional) If you want to register smart license-enabled devices automatically to a virtual account, check the Auto register smart license enabled devices check box. A list of virtual accounts associated with the smart account is displayed.

Step 6

Select the required virtual account. Whenever a smart license-enabled device is added in the inventory, it’s automatically registered to the selected virtual account.

Step 7

If you want to remove the licensed smart account users and their associated historical data, click Delete historical information.

Step 8

In the Smart Account list area check the check box next to the smart account that you want to delete.

Step 9

Click Delete.

Step 10

Click Delete in the subsequent confirmation window.

Step 11

Check the Delete the associated license historical information check box to delete the historical information of the associated license.

Step 1

Click the menu icon () and choose System > Settings > Cisco Accounts > Smart Licensing.

Step 2

Choose a virtual account from the Search Virtual Account drop-down list to register.

Step 3

Click Register.

Step 4

After successful registration, click the View Available Licenses link to view the available Cisco DNA Center licenses.

Step 1

Click the menu icon () and choose System > Settings > Device Settings > SNMP.

Step 2

Configure the following fields:

Step 3

Click Save.

Step 4

(Optional) To return to the default settings, click Reset and Save.

Step 1

Click the menu icon () and choose System > Settings > Device Settings > ICMP Ping.

Step 2

Check the Enable ICMP ping for unreachable access points in FlexConnect mode check box.

Step 3

Click Save.

Step 1

Click the menu icon () and choose System > Settings > Device Settings > PnP AP Location.

Step 2

Check the Configure AP Location check box.

Step 3

Click Save.

Step 1

Click the menu icon () and choose System > Settings > Device Settings > Image Distribution Servers.

Step 2

In the Image Distribution Servers window, click Servers.

Step 3

Click Add to add a new image distribution server.

Step 4

Configure the following image distribution server settings:

Step 5

Click Save.

Step 6

Because some legacy wireless controller software versions support only weak ciphers (such as SHA1-based ciphers) for SFTP, Cisco DNA Center should enable SFTP compatibility mode for SFTP connections from wireless controllers for software image management and wireless assurance. You can temporarily enable support for weak ciphers on the Cisco DNA Center SFTP server for up to 90 days. To allow weak ciphers:

1. Hover over the i icon next to the IP address of the SFTP server and click Click here.

2. In the Compatibility Mode slide-in pane, check the Compatibility Mode check box and enter a duration (from 1 minute to 90 days).

3. Click Save.

Step 7

(Optional) To edit the settings, click the Edit icon next to the corresponding image distribution server, make the required changes, and click Save.

Step 8

(Optional) To delete an image distribution server, click the Delete icon next to the corresponding image distribution server and click Delete.

Step 1

Click the menu icon () and choose System > Settings > Device Settings.

Step 2

From the Device Settings drop-down list, choose PnP Device Authorization.

Step 3

Check the Device Authorization check box to enable authorization on the device.

Step 4

Click Save.

Step 1

Click the menu icon () and choose System > Settings > Configuration Archive.

Step 2

In the Configuration Archive window, click the Internal tab.

Step 3

Click the Number of config drift per device drop-down list and choose the number of config drifts to save per device.

Step 4

Choose the backup day and time.

Step 5

Click Save.

Step 6

Click the External tab to configure an external server for archiving the device configuration. For more information, see Configure an External Server for Archiving Device Configuration.

Step 1

Click the menu icon () and choose System > Settings > Configuration Archive.

Step 2

In the Configuration Archive window, click the External tab.

Step 3

Click Add to add an External Repository.

Step 4

In the Add New External Repository slide-in pane, complete the following details:

1. Host: Enter the host IP address.

2. Root Location: Enter the location of the root folder.

   Note	Ensure the root location path is absolute and not relative. The external server root location must be empty.

3. Server Protocol: Enter the username, password, and port number of the SFTP server.

4. Choose the Backup Format:

   • RAW: A full running configuration will be disclosed. All sensitive/private configurations are unmasked in the backup data. Enter a password to lock the backup file.

     Note	File passwords are not saved on Cisco DNA Center. You must remember the password to access the files on the SFTP server.

   • Sanitized (Masked): The sensitive/private configuration details in the running configuration will be masked.

     The password is applicable only when the raw backup format is selected.

5. Schedule the backup cycle.

   Enter the backup date, time, time zone, and recurrence interval.

Step 5

Click Save.

Step 6

To edit the SFTP server details, click the edit button under the Action column.

Step 7

To remove the SFTP server, click the delete button under the Action column.

Step 1

Click the menu icon () and choose System > Settings > Cloud Access Keys.

Step 2

Click Add.

Step 3

Enter the Access Key Name and choose the Cloud Platform from the drop-down list. Enter the Access Key ID and Secret Key obtained from the AWS console.

Step 4

Click Save and Discover.

Step 1

Click the menu icon () and choose System > Settings > External Services > IP Address Manager.

Step 2

In the Server Name field, enter the name of the IPAM server.

Step 3

In the Server URL field, enter the URL or IP address of the IPAM server.

1. Click the warning icon.

   A Certificate Warning dialog box appears.

2. Verify the issuer, serial number, and validity dates for the certificate.

3. If the information is correct, click the check box to allow Cisco DNA Center to access the IP address and add the untrusted certificate to the trustpool.

4. Click Allow.

Step 4

In the Username and Password fields, enter the IPAM credentials.

Step 5

From the Provider drop-down list, choose a provider.

Step 6

From the View drop-down list, choose a default IPAM network view. If you only have one view configured, only default appears in the drop-down list. The network view is created in the IPAM and is used as a container for IP address pools.

Step 7

Click Save.

Step 1

Click the menu icon () and choose System > Settings > External Services > Webex Integration.

Step 2

Click Authenticate to Webex.

Step 3

In the Cisco Webex pop-up window, enter the email address and click Sign In.

Step 4

Enter the password and click Sign In.

Step 5

Under Default Email Domain for Webex Meetings Sign-In, enter the Webex user’s email domain and click Save.

Step 6

(Optional) Under Authentication Token, click Delete to delete Webex authentication.

Step 1

Click the menu icon () and choose System > Settings > External Services > Cisco DNA - Cloud.

Step 2

From the Region drop-down list, choose the desired region.

Step 3

Click the icon, search by name, and locate AppX MS-Teams.

Step 4

Click Activate.

Step 5

In the Cisco DNA - Cloud window, do the following:

1. In the Activate application on your product window, click the consent flow link and do the following:

   • In the Sign in to your account window, enter the Microsoft admin username and password, and click Sign In.

   • Click Accept.

2. In the Activate application on your product window, choose the product that you want to activate and click Next.

   To register a new product, click the here link and do the following:

   • In the Host Name/IP field, enter IP address of the product.

   • In the Name field, enter name of the product.

   • In the Type field, enter the type of the product.

   • Click Register.

3. Cisco DNA - Cloud synchronizes with Cisco DNA Center automatically; you are redirected to the Choose the Scope for your Cisco DNA Center window. Click Next.

4. In the Summary window, review the configuration settings. To make any changes, click Edit. Otherwise, click Activate.

5. Click Exit.

   The product is shown in the Applications window.

   Note	If you want to deactivate the product or disconnect from AppX MS-Teams application, see Configure an AppX MS-Teams Integration Through Cisco DNA - Cloud.

Step 1

Log in to Cisco DNA - Cloud with your cisco.com credentials.

Step 2

Click the menu icon () and choose Applications.

Step 3

From the Region drop-down list, choose the desired region.

Step 4

Click the icon, search by name, and locate AppX MS-Teams.

Step 5

In the AppX MS-Teams tile, click Activate Product. For details, see Configure an AppX MS-Teams Integration.

Step 6

After the product is activated, click Exit.

Step 7

You are redirected to the Applications window. A green check mark in the tile indicates that the application is connected.

Step 8

Click the AppX MS-Team tile to view the details in the App 360 window.

Step 9

(Optional) To activate products from the App 360 window, do the following:

1. In the Product Activations table, click Add.

2. Choose the product that you want to activate and click Next.

   Note	You cannot select more than one product at a time.

3. In the Summary window, review the configuration settings. To make any changes, click Edit. Otherwise, click Activate.

Step 10

(Optional) To deactivate the product, do the following:

1. Click the AppX MS-Teams tile.

2. In the Product Activations table, check the check box next to the product that you want to deactivate.

3. From the More Action drop-down list, choose Deactivate.

4. In the confirmation window, click Deactivate.

Step 11

(Optional) To disconnect the product from AppX MS-Teams application, do the following:

1. Click the AppX MS-Teams tile to view the details in the App 360 window.

2. In the top menu bar, click View all details.

   The Details slide-in pane is displayed.

3. Click Disconnect now.

Step 1

Click the menu icon () and choose System > Settings > External Services > ThousandEyes Integration.

Step 2

In the Insert new token here field, enter the authentication token.

Step 3

Click Save.

Step 1

Click the menu icon () and choose System > Settings > System Configuration > Debugging Logs.

Step 2

From the Services drop-down list, choose a service to adjust its logging level.

Step 3

Enter the Logger Name.

Step 4

From the Logging Level drop-down list, choose the new logging level for the service.

Step 5

From the Timeout field, choose the time period for the logging level.

Step 6

Review your selection and click Apply.

Step 1

Click the menu icon () and choose System > Settings > Device Settings > Network Resync Interval.

Step 2

In the Resync Interval field, enter a new time value (in minutes).

Step 3

(Optional) Check the Override for all devices check box to override the existing configured polling interval for all devices.

Step 4

Click Save.

Step 1

Click the menu icon () and choose Activities > Audit Logs.

Step 2

Click the timeline slider to specify the time range of data you want displayed on the window:

Step 3

Click the arrow next to an audit log to view the corresponding child audit logs.

Step 4

(Optional) From the list of audit logs in the left pane, click a specific audit log message. In the right pane, click Event ID > Copy Event ID to Clipboard. With the copied ID, you can use the API to retrieve the audit log message based on the event ID.

Step 5

(Optional) Click Filter to filter the log by User ID, Log ID, or Description.

Step 6

Click Subscribe to subscribe to the audit log events.

Step 7

Check the syslog server check box that you want to subscribe to and click Save.

Step 8

In the right pane, use the Search field to search for specific text in the log message.

Step 9

Click the menu icon () and choose Activities > Scheduled Tasks to view the upcoming, in-progress, completed, and failed administrative tasks, such as operating system updates or device replacements.

Step 10

Click the menu icon () and choose Activities > Work Items tab to view the in-progress, completed, and failed work items.

Step 1

Click the menu icon () and choose Activities > Tasks.

Step 2

Click the task link to open a slide-in pane that shows Starts, Status, Last updated, and additional information about upcoming, in progress, completed, and failed tasks.

Step 3

In the failed task slide-in pane, click the Download Error Report link to download an error report of the respective task.

Step 4

At the top of the window, click Work Items to view the in-progress, completed, and failed work items.

Step 1

Click the menu icon () and choose System > Settings > System Configuration > High Availability.

Step 2

Click Activate High Availability.

Step 1

Click the menu icon () and choose System > Settings > Integration Settings.

Step 2

Enter the Callback URL Host Name or IP Address that the third-party app needs to connect to when communicating with the Cisco DNA Center platform.

Step 3

Click Apply.

Step 1

Click the menu icon () and choose System > Settings > System Configuration > Login Message.

Step 2

In the Login Message text box, enter the message.

Step 3

Click Save.

Step 1

Click the menu icon () and choose System > Settings > System Configuration.

Step 2

From the System Configuration drop-down list, choose Proxy > Outgoing Proxy.

Step 3

Enter the proxy server's URL address.

Step 4

Enter the proxy server's port number.

Step 5

(Optional) If the proxy server requires authentication, click Update and enter the username and password for access to the proxy server.

Step 6

Check the Validate Settings check box to have Cisco DNA Center validate your proxy configuration settings when applying them.

Step 7

Review your selections and click Save.