Configure Cisco SD-WAN Manager to use push-based health monitoring for fabrics beginning with version 20.3.x.
Beginning with Cisco SD-WAN Release 20.3.1, the system uses a push-based monitoring model. In this model, the monitoring architecture uses Cisco SD-WAN Manager to authenticate with the system and send the health data. Cisco SD-WAN Manager pushes the data rather than the monitoring system logging into the Cisco SD-WAN Manager with the viptelatac user.
For version 20.3.x and later, the Cloud Infra team uses the ciscotacro and ciscotacrw users to log in to the Cisco SD-WAN Manager for additional health checks, to triage issues in response to internally generated alerts, and to assist with your Technical Assistance Center (TAC) cases. The same user also performs automated infrastructure upgrades and certain software updates when prenotified changes are communicated to customer contacts for the fabric.
The ciscotacro user has read-only operator group privilege, while ciscotacrw has read-write netadmin group privilege. The Cloud Infra team uses the ciscotacrw user for certain enhanced debugging functions, cloud infrastructure upgrades, and management.
Before you begin
-
Ensure that vManage is upgraded to version 20.3.1 or later. After Cisco SD-WAN Manager is upgraded to 20.3.1 or later, the
viptelatacuser is no longer required. -
Be prepared to provide consent on the Cisco SD-WAN Manager settings page and configure a one-time password (OTP).
-
Obtain the OTP from the CloudOps team by opening a TAC Support case.
To enable this feature, you must provide consent and configure a one-time password (OTP).
To enable monitoring, log in to Cisco SD-WAN Manager and perform these steps:
Procedure
| 1. | Go to in Cisco SD-WAN Manager. |
|
| 2. | Enter the OTP value provided by the CloudOps team. |
|
| 3. | Leave the Cloud Gateway URL blank. |
|
| 4. | Check the vMonitoring option. |
|
| 5. | Approve permission to collect fabric health status data from Cisco SD-WAN Manager. |
What to do next
To disable this access on any of the Cisco Catalyst SD-WAN fabric control components, remove the user from the configuration. Note that removing any of these users limits the ability of the support team to triage issues.