- Preface
- Cisco Broadband Access Center Overview
- Broadband Access Center Architecture
- Configuration Workflows and Checklists
- CPE Management Overview
- Configuration Templates Management
- Firmware Management
- Parameter Dictionaries
- CPE History and Troubleshooting
- Managing Broadband Access Center
- Database Management
- Monitoring Broadband Access Center
- Configuring CWMP Service
- Configuring CWMP Service Security
- CWMP Device Operations
- Understanding the Administrator User Interface
- Using the Administrator User Interface
- Configuring Broadband Access Center
- Scripting Framework
- RDU and DPE Connection Management
- Cisco BAC Support Tools and Advanced
- Troubleshooting Broadband Access Center
- Glossary
- Index
A -
B -
C -
D -
F -
G -
I -
K -
L -
M -
N -
O -
P -
R -
S -
T -
U -
V -
W -
Index
A
ACS
definition GL-1
URL, configuring 3-9
URL, discovery 2-6
administrator user interface
accessing 15-2
ACS URL, configuring 3-9
BAC architecture, and 9-4
configuring 15-1
connection request 12-5
device's provisioning group, correcting 14-8
device faults, viewing 8-7
device history, configuring 8-4
icons (table) 15-4
logging in 15-2
HTTP transport 15-3
SSL transport 15-3
logging out 15-4
parameter dictionaries, managing 7-5
adding 7-5
deleting 7-6
replacing 7-6
viewing 7-6
performance statistics, collecting
enabling, disabling 11-14
RDU extensions, managing
required points (table) 17-23
server, monitoring 11-12
advanced concepts
See tools and advanced concepts
agent, SNMP
BAC architecture, and 9-6
MIB support 11-6
alert messages11-1to ??, 11-5
alerts, definition GL-1
message format 11-1
relating to
DPE 11-2
RDU 11-2
watchdog process 11-4
API, definition GL-1
about DPEs 2-4
about provisioning groups 2-6
about RDU 2-4
administrator user interface 9-4
agents
SNMP 9-6
watchdog process agent 9-2
command line interface 9-5
deployment 2-1
watchdog process 2-7
audit logs, definition GL-1
authentication
about 13-13
available options 13-17
client certificate, configuring 13-16
external client certificate, configuring 13-16
autoconfiguration server
B
backup and recovery of database10-4to 10-6
C
caching, definition GL-1
cautions
regarding
custom properties, deleting 17-5
disk space requirement figures 10-3
network deployment with an evaluation license key 17-20
template files, deleting 17-19
troubleshooting devices 8-10
cipher suites
definition GL-1
classes of service
about 4-3
configuring
adding 17-3
deleting 17-4
modifying 17-3
client certificate authentication
configuring 13-16
command line interface
DPE, accessing 9-5
configuration history
configuration template
about 5-1
administrator user interface, using 17-15, 17-19
authoring 5-14
conditionals, using 5-19
includes, using 5-17
parameter substitution, using 5-16
configuration utility
about 5-22
template, adding 5-23
template processing, testing 5-25, 5-26, 5-27
template syntax, validating 5-24
using 5-23
features 5-4
access control 5-9
notification 5-8
parameters, schema (figure) 5-6
prerequisites, schema (figure) 5-10
schema (figure) 5-4
template processing files (table) 5-2, 6-4
configuration workflows and checklists
component workflows
DPE checklist (table) 3-2
RDU checklist (table) 3-1
technology workflows
DPE configuration (tables) 3-5
provisioning group configuration 3-8, 3-9
RDU configuration (table) 3-3
RDU configuration, preregistering device data 3-4
configuring BAC
class of service
adding 17-3
deleting 17-4
modifying 17-3
connection requests 12-2
authentication 12-3
disabling 12-10
methods, discovered 12-5
methods, use FQDN 12-5
reachability 12-11
CWMP service
DPE ports 12-2
defaults
configuration options, selecting 17-6
CWMP 17-7
RDU 17-10
system 17-11
device history
enabling, disabling 8-4
number of entries 8-5
viewing 8-4
discovering device data
about 12-11
files, managing
adding 17-17
deleting 17-19
exporting 17-19
replacing 17-18
viewing 17-18
adding a license 17-21
modifying a license 17-21
provisioning data, publishing
Datastore changes 17-26
plug-in settings, modifying 17-26
RDU extensions, managing
custom extension points, installing 17-25
new class, writing 17-24
viewing 17-26
connection request service
about 12-2
authentication 12-3
disabling 12-10
discovered 12-5
use FQDN 12-5
use IP 12-6
reachability 12-11
workflow (figure) 12-3
CPE management
authentication 13-13
available options 13-17
client certificate, configuring 13-16
external load balancer, configuring 13-16
device assignment to provisioning groups 4-20
automatic 4-20
explicit 4-20
explicit and automatic approach 4-20
device configuration synchronization 4-15
device deployment options 4-16
preregistered 4-17
unregistered 4-17
discovering CPE parameters 4-4
default parameters (table) 4-5
instruction generation, and 4-14
overview 4-1
customer premises equipment, definition GL-1
custom properties
configuring 17-5
overview 5-15
CWMP
about 1-3
definition GL-1
connection request 12-2
authentication 12-3
disabling 12-10
method, discovered 12-5
method, use FQDN 12-5
reachability 12-11
discovering device data
about 12-11
troubleshooting 12-13
DPE keystore, using keytool 13-3
certificates for client authentication, importing 13-10
certificate signing request, generating 13-7
existing signed server certificate, importing 13-4
keytool commands 13-5
self-signed certificate, displaying 13-7
server certificate and private key, generating 13-6
signed certificate, verifying 13-8
signed certificate into server certificate, importing 13-9
signing authority certificate into cacerts, importing 13-8
DPE ports 12-2
about 13-1
key and certificate management 13-2
SSL, configuring 13-3
D
database management
backup and recovery
backing up 10-4
recovering 10-5
restoring 10-6
disk space requirements 10-3, 10-4
caution regarding 10-3
handling out 10-4
failure resiliency, understanding 10-1, 10-2
automatic log management 10-3
DB_VERSION 10-3
history log 10-3
storage 10-2
transaction log 10-2
location, changing 10-7
defaults, configuring
CWMP 17-7
RDU 17-10
system 17-11
device diagnostics
configuration history, viewing 8-4
overview 4-21
performance statistics, monitoring 11-14
runStatAnalyzer.sh tool, using 11-15
Device Export
deviceExport.sh tool, using 20-1
device faults
about 8-6
device history
about 8-1
enabling, disabling 8-4
number of entries, configuring 8-5
records, logging 8-5
supported records (table) 8-1
viewing 8-4
device management
about 16-10
administrator user interface, using
adding 16-11
deleting 16-11
devices menu 16-4
displaying live data 16-16
forcing configuration synchronization 16-17
forcing firmware upgrade 16-17
modifying 16-11
performing a Ping test 16-16
rebooting 16-15
regenerating instructions 16-12
relating, unrelating 16-13
requesting a connection 16-15
resetting to factory settings 16-16
searches supported (table) 16-6
setting operations timeout 16-18
controls 16-7
device details, viewing 16-7
Manage Devices page 16-4
searching for devices 16-7
device object model
overview 4-2
relationships (figure) 4-2
relationships (table) 4-3
device operations
about 14-1
conditional execution 14-6
connection modes
asynchronous 14-5
asynchronous workflow (figure) 14-5
immediate 14-2
immediate workflow (figure) 14-3
on-connect 14-3
on-connect workflow (figure) 14-4
device's provisioning group, managing 14-6
correcting 14-8
sample files, accessing 14-1
supported operations (table) 14-1
device troubleshooting
about 8-9
configuring 8-10
disabling 8-11
enabling 8-10
troubleshooting log, viewing 8-12
viewing devices in troubleshooting mode 8-11
log entries 8-12
discovered connection request 12-5
disk space monitoring
disk_monitor.sh tool, using 20-4
documentation
audience 2-xv
related to this product 2-xviii
DPE (Device Provisioning Engine)
about 2-4
alert messages 11-2
command line interface 9-5
component workflow checklist (table) 3-2
definition GL-2
dpe.log file, viewing 21-8
keystore configuring, using keytool 13-3
certificates for client authentication, importing 13-10
certificate signing request, generating 13-7
existing signed server certificate, importing 13-4
self-signed certificate, displaying 13-7
server certificate and private key, generating 13-6
signed authority certificate into cacerts, importing 13-8
signed certificate into server certificate, importing 13-9
license keys 2-5
load balancing
DNS round robin, using 12-17
hardware load balancer, using 12-17
performance statistics, collecting 11-14, 11-19
runStatAnalyzer.sh tool, using 11-15
ports, configuring 12-2
RDU synchronization 19-3
SSL
about 13-11
authentication options 13-17
configuring 13-11
configuring CWMP service, example 13-11
configuring HTTP file service, example 13-12
defaults (table) 13-11
device authentication, configuring 13-13
states 19-4
technology workflow checklist
CWMP service (table) 3-6
HTTP file service (table) 3-7
viewing
currently registered DPEs 16-22
F
firmware
about 6-1
files, managing
administrator user interface, using 17-15, 17-19
file service 6-5
firmware image 6-5
firmware rules template 6-5
firmware rules template
authoring 6-6
constructs 6-13
expressions 6-7
internal, external files 6-10
regular expressions 6-7
sample 6-11
management mechanisms 6-1, 6-4
direct firmware 6-4
policy based 6-2
upgrade
bypassing, example 6-15
forcing 16-17
FQDN
definition GL-2
use FQDN, connection request 12-5
G
group, managing
group types
deleting 16-20
groups, managing
about 16-20
adding 16-20
deleting 16-21
details, viewing 16-22
group types 16-18
adding 16-19
modifying 16-20
modifying 16-21
relating, unrelating groups 16-22
GUI (see administrator user interface)
I
icons, administrator user interface (table) 15-4
instructions
generation, definition GL-2
generation and processing overview 4-14
IP address
definition GL-2
use IP, connection request 12-6
K
key, certificate management 13-2
keystore
about cacerts 13-2
about server certificates 13-2
configuring, using keytool 13-3
certificates for client authentication, importing 13-10
certificate signing request, generating 13-7
self-signed certificate, displaying 13-7
server certificate and private key, generating 13-6
signed certificate, verifying 13-8
signed certificate into server certificate, importing 13-9
signing authority certificate into cacerts, importing 13-8
keytool commands, using 13-5
sample server certificates 13-3
L
license keys, managing 17-20, 17-21
adding a license 17-21
DPE licensing 2-5
modifying a license 17-21
logging
about 2-7
BAC architecture, and 21-2, 21-3
log file, sample 21-3
log files, rotating 21-4
log levels, configuring 21-4
log levels and structures 21-3
log level tool 21-5
current log level, viewing 21-7
setting 21-6
using 21-6
viewing log files
audit.log 21-5
dpe.log 21-8
perfstat.log 11-15
rdu.log 21-5
troubleshooting.log 8-12
logging into BAC 15-2
M
Multi-Instance Object Support 4-5
Configuration Template 4-6
Display Live Data Operation 4-13
Firmware Rules Template 4-10
Parameter Discovery 4-13
N
NAT, definition GL-2
network address translation
Network Time Protocol, definition GL-2
O
overview
configuration management 1-2
device diagnostics and troubleshooting 4-21
features and benefits 1-1
firmware management 1-2
scalability 1-2
security 1-2
technology supported 1-3
P
parameter dictionary
administrator user interface, using 7-5
adding 7-5
deleting 7-6
replacing 7-6
viewing 7-6
custom 7-3
default 7-2
overview 7-1
schema (figure) 7-2
syntax 7-3
preregistered devices 4-16
preregistering device data 3-4
property hierarchy 4-4
provisioning API, definition GL-3
provisioning data, publishing
Datastore changes 17-26
plug-in settings, modifying 17-26
initial configuration
preregistered devices 4-18
unregistered devices 4-19
initial configuration (figure) 4-18
provisioning groups
about 2-6
ACS URL, configuring 3-9
adding a DPE 12-18
definition GL-3
device faults, viewing 8-7
devices, assigning 4-20
automatic 4-20
explicit 4-20
explicit and automatic 4-20
redundancy 12-16
DNS round robin, using 12-17
hardware load balancer, using 12-17
local 12-16
regional 12-16
publishing, definition GL-3
R
RDU (Regional Distribution Unit)
about 2-4
alerts 11-2
component workflow checklist (table) 3-1
definition GL-3
details, viewing 16-27
extensions, managing
custom extension points, installing 17-25
new class, writing 17-24
viewing 17-26
current log level, viewing 21-7
setting 21-6
using 21-6
performance statistics, collecting 11-14, 11-19
runStatAnalyzer.sh tool, using 11-15
server, monitoring 11-12
technology workflow checklist (table) 3-3
local 12-16
regional 12-16
redundancy, definition GL-3
S
schema (figures)
configuration 5-4
parameter 5-6
parameter dictionary 7-2
prerequisite 5-10
Scripting Framework 18-1
Adding to the Device Property 18-3
Extensions for Unknown Devices 18-4
Integrating in BAC 18-3
Verifying in DPE Cache 18-5
Verifying Status in DPE 18-5
Secure Sockets Layer
security
DPE
administrator user interface, using 11-12
CLI, using 11-12
performance statistics collection
monitoring 11-14
perfstat.log, understanding 11-14
runStatAnalyzer.sh tool, using 11-15
RDU
administrator user interface, using 11-12
SNMP agent 11-5
servers, viewing 16-22
DPEs 16-22
RDU details 16-27
service classes
shared secret
configuring
device password, changing 13-14
device password, correcting 13-15
definition GL-3
SNMP agent
about 2-7
MIB support 11-6
snmpAgentCfgUtil.sh tool
community, adding 11-8
community, deleting 11-9
contacts, setting up 11-10
hosts, adding 11-7
hosts, deleting 11-7
listening port, identifying 11-10
location, changing 11-10
notification types, specifying 11-11
settings, displaying 11-11
starting 11-9
stopping 11-9
SSL
CWMP service, example 13-11
DPE keystore, keytool commands (table) 13-5
DPE keystore, using keytool 13-3, 13-10
HTTP file service, example 13-12
definition GL-3
synchronization
configuration synchronization instruction 4-15
data synchronization instruction 4-15
device configuration 4-15
DPE-RDU 19-3
T
template files, developing
template file definition GL-3
templates
configuration utility
running 5-23
template, adding 5-23
template processing, testing 5-25, 5-26, 5-27
template syntax, validating 5-24
constructs
conditionals 5-19
authoring 6-6
constructs 6-13
TLS
definition GL-3
tools and advanced concepts
configuration utility
adding template file 5-23
running 5-23
testing template processing 5-25, 5-26, 5-27
validating template file 5-24
deviceExport.sh tool 20-1
disk_monitor.sh tool 20-4
keytool utility 13-3
list of tools 9-7
current log level, viewing 21-7
setting 21-6
using 21-6
SNMP agent, starting 11-9
SNMP agent, stopping 11-9
SNMP agent community, adding 11-8
SNMP agent community, deleting 11-9
SNMP agent hosts, adding 11-7
SNMP agent hosts, deleting 11-7
SNMP agent location, changing 11-10
SNMP agent settings, displaying 11-11
SNMP contacts, setting up 11-10
SNMP listening port, identifying 11-10
SNMP notification types, specifying 11-11
watchdog agent tool 9-2
TR-069, definition GL-3
Transport Layer Security
troubleshooting
alert messages
DPE 11-2
message format 11-1
RDU alerts 11-2
watchdog process 11-4
devices
configuration history, viewing 8-4
data discovery 12-13
in troubleshooting mode 8-9
recurring faults, viewing 8-7
performance statistics collection
monitoring 11-14
perfstat.log 11-15
runStatAnalyzer.sh tool, using 11-15
U
unregistered devices 4-16
users
about 16-1
administrator 16-1
managing
adding 16-2
deleting 16-4
modifying 16-3
read-only user 16-2
read-write user 16-2
using BAC
devices, managing
about 16-10
adding 16-11
controls 16-7
deleting 16-11
details, viewing 16-7
modifying 16-11
regenerating instructions 16-12
relating, unrelating 16-13
groups, managing
adding 16-20
deleting 16-21
details, viewing 16-22
modifying 16-21
relating, unrelating 16-22
servers, viewing
DPEs details 16-22
provisioning groups details 16-26
RDU details 16-27
user management
adding a new user 16-2
deleting users 16-4
modifying users 16-3
V
VoIP, definition GL-4
W
watchdog process
agent, definition GL-4
alerts 11-4
command line, using 9-2
Feedback