Deploy Cisco Cyber Vision Sensor on Switches and Routers

PDF

Deploy Cisco Cyber Vision Sensor on Switches and Routers

Prepare switches and routers

Want to summarize with AI?

Log in

Outlines the preparation of switches and routers for Cyber Vision Sensor deployment, including storage configuration, clock synchronization, IOx service enablement, verification steps, and prerequisite requirements.


To deploy a Cyber Vision Sensor application in the routers and switches in your network, you must first prepare the devices.

  1. Configure storage

    Note

    This step does not apply to Catalyst 9x00 switches and the IR routers. These devices support IOx applications on internal storage.

    The Cisco Cyber Vision Sensor application requires dedicated and compatible storage to install files, store configuration data, and manage logs. Format or partition storage, such as an SD card or SSD, to create a compatible file system for the Linux-based environment. The sensor application requires ext4. This preparation lets the switch's operating system (IOx) recognize, allocate, and write data to storage. Without this step, you cannot install or run the sensor application.

  2. Synchronize clocks

    The sensor application obtains its time from the host device. We recommend using an NTP server so that the various devices in your network are synchronized.Using an NTP across devices enables accurate monitoring, effective security analysis, and reliable communication with the central Cyber Vision Center. It also ensures the integrity of all data collected by the Cyber Vision Sensor.

    Note
    Synchronize all device and IOx application clocks to UTC.
  3. Enable the IOx service

    IOx is an application hosting framework. It allows applications to run directly on Cisco network devices. Enabling IOx activates a specialized environment on the device and provides the necessary runtime, resources, and isolation. This environment allows the sensor application to operate independently from the device core operating system (IOS XE). Without IOx, there is no platform or dedicated environment for the Cyber Vision Sensor application.

Before you begin

To carry out this taskflow, ensure that:

  • SSH access to the device is available.

  • The device is running a supported IOS XE software version.

  • If you wish to use SD card on a device, the card must be 4 GB or greater.

For instructions on setting up the prerequisites, refer to the configuration guides for the specific device.

Procedure

1.

Configure device storage.

Storage type Commands
IE3x00 SD card
  • Format the card using format sdflash: ext4.

  • Partition the card using partition sdflash: iox.

IE9300 SD card Partition the card using the command partition sdflash: iox.
Catalyst 9x00 using SSD disk Format the disk using the command format usbflash1: ext4.
2.

(Only for switches) Verify storage configuration. In the command response, check that the file system type is ext4.

Switch Command
IE3x00 and IE9300 show sdflash: filesys
Catalyst 9x00 show usbflash1: filesys
3.

Use ntp server <server-ip-address> to add an NTP server.

4.

Enable IOx service:

configure terminal
iox
exit
5.

Use show iox to confirm that the IOx service is running.

If an IOx application does not have the necessary read and write permissions, the application may not initiate or function correctly.