Use this procedure to add a device in Cisco Optical Site Manager. Cisco Optical Site Manager automatically detects and onboards directly connected peer devices on the network.
Use this task to add a device.
Onboard a NCS 1000 or NCS 2000 device so it can be tracked, monitored, and managed within Cisco Optical Site Manager.
Wait for the current device to complete synchronization before you add the next device to Cisco Optical Site Manager.
Before you begin
-
Use an authorization group with an IOS XR administrative account that has write-capable NETCONF access, such as a
root-lruser or equivalent, for device onboarding. Cisco Optical Site Manager requires these privileges because it performs configuration changes on the XR device after onboarding. -
Before onboarding an NCS 1001 device, verify that the device has a COSM-supported ECDSA crypto key. Cisco Optical Site Manager uses SSH/SFTP/SCP for device operations such as database backup, SOR file download, device diagnostics, and device software download or activation.
On the IOS XR device, run:RP/0/RP0/CPU0:ios# show crypto key mypubkey ecdsa Key label: the_default Type : ECDSA General Curve Nistp256 Degree : 256 Created : <timestamp> Data : <key-data>The output must include one of these supported key types:Type : ECDSA General Curve Nistp256 Type : ECDSA General Curve Nistp384 Type : ECDSA General Curve Nistp521If no supported ECDSA key is displayed, configure one of the following on the IOS XR device:
RP/0/RP0/CPU0:ios# configure RP/0/RP0/CPU0:ios(config)# crypto key generate ecdsa nistp256 RP/0/RP0/CPU0:ios(config)# commitYou can configure one of these keys on the IOS XR device:crypto key generate ecdsa nistp256 crypto key generate ecdsa nistp384 crypto key generate ecdsa nistp521In Cisco Optical Site Manager R25.1.1 and R26.1.1, ED25519 keys are not supported for these COSM device operations. For NCS 1001 devices, ED25519 is the default key type, but a supported ECDSA key is required.
-
For Cisco Optical Site Manager device management, we strongly recommend to configure the authorization group with credentials for a local IOS XR user account on the managed device. The account must have write-capable NETCONF access, such as a
root-lruser or equivalent.Use IOS XR credentials in this order of preference:
-
A local IOS XR user account.
-
If a TACACS+ account is required, configure a local user account with the same username, password, and privileges to ensure seamless management of the device even if TACACS server is not available.
-
If TACACS+ authentication fails, Cisco Optical Site Manager can manage the device only when the TACACS+ and local user credentials match.
-
Procedure
The device is added to Cisco Optical Site Manager and displayed in the Devices section.
In an NCS 1000 HA deployment, the Name column displays an A icon for the active node and an S icon for the standby node.
Do not perform any cross-connection-related changes through the IOS XR CLI once the device is managed by Cisco Optical Site Manager.