Enable NETCONF over SSH so that Cisco Optical Site Manager can connect to host devices for configuration and monitoring. Enable NETCONF on each Cisco Optical Site Manager host device.
Before you begin
Follow these steps to enable NETCONF:
Procedure
-
Enter the configuration mode using the configure terminal command.
Example:
RP/0/RP0/CPU0:ios#configure terminal
-
Enable NETCONF-YANG agent over SSH connection using the netconf-yang agent ssh command.
Example:
RP/0/RSP0/CPU0:ios(config)# netconf-yang agent ssh
-
Configure the device to use SSH protocol v2 using the ssh server v2 command.
Note
Only SSH version 2 is supported.
Example:
RP/0/RP0/CPU0:ios(config)# ssh server v2
-
Set the rate limit for incoming SSH connection requests to 600 per minute using the ssh server rate-limit rate-limit command.
Example:
RP/0/RP0/CPU0:ios(config)# ssh server rate-limit 600
-
Set the SSH session limit to 110 using the ssh server session-limit session-limit command.
Example:
RP/0/RP0/CPU0:ios(config)# ssh server session-limit 110
-
Enable SSH server access in the default VRF using the ssh server vrf vrf-name command.
Example:
RP/0/RP0/CPU0:ios(config)# ssh server vrf default
-
Enable NETCONF over SSH in the default VRF using the ssh server netconf vrf vrf-name command.
Example:
RP/0/RP0/CPU0:ios(config)# ssh server netconf vrf default
-
Enable NETCONF protocol over SSH connection using the ssh server netconf command.
Example:
RP/0/RP0/CPU0:ios(config)# ssh server netconf
-
Commit the changes using the commit command.
After you enable NETCONF, Cisco Optical Site Manager can establish a secure communication with the device using the NETCONF protocol over SSH.
This example describes the commands to enable NETCONF over SSH on the host devices:
RP/0/RP0/CPU0:ios# configure terminal
RP/0/RSP0/CPU0:ios(config)# netconf-yang agent ssh
RP/0/RP0/CPU0:ios(config)# ssh server v2
RP/0/RP0/CPU0:ios(config)# ssh server rate-limit 600
RP/0/RP0/CPU0:ios(config)# ssh server session-limit 110
RP/0/RP0/CPU0:ios(config)# ssh server vrf default
RP/0/RP0/CPU0:ios(config)# ssh server netconf vrf default
RP/0/RP0/CPU0:ios(config)# ssh server netconf