The following details how to remove the Learning Network License deployment from your network.
Uninstalling the Learning Network License system involves removing Learning Network License-related configuration from the Network Element on which an agent is deployed, removing the agent from the host Network Element, and removing the controller from the ESXi host.
From the controller web UI, delete all mitigations. This directs the agents to remove the QoS policy configuration from the host Network Element. Then, disable PBC/DPI on all interfaces. This directs the agent to remove the IP traffic export configuration from the interfaces. Disable the agents to halt controller/agent communications. Finally, deregister Smart Licensing.
Next, from the controller VM command line, modify install configuration files, and use the install script to remove the agents from the Network Elements. This also removes the Learning Network License-related Flexible NetFlow flow record, flow monitor, and flow exporter configuration.
Finally, delete the controller from the ESXi host.
| Step 1 | From the controller web UI, delete the mitigation policies from the mitigation table. See Deleting All Mitigations for more information. |
| Step 2 | From the controller web UI, disable PBC/DPI for every Network Element interface. See Disabling PBC/DPI on an Interface for more information. |
| Step 3 | From the controller web UI, disable every agent. See Disabling All Agents for more information. |
| Step 4 | From the controller web UI, deregister Smart Licensing. See Deregistering a Controller from Smart Licensing for more information. |
| Step 5 | From the controller VM command line interface, modify the install.yaml agent install and upgrade properties file to include all agents. See Modifying the Install Properties File for more information. |
| Step 6 | From the controller VM command line interface, rename the aa_summary file to aa_summary_backup. See Renaming an Install Log File for more information. |
| Step 7 | From the controller VM command line interface, run installation_auto.py -c install.yaml --clean_only to remove all agents from the host Network Elements, as well as the SLN-NF-RECORD flow record, SLN-NF-EXPORTER flow exporter, and SLN-NF-MONITOR flow monitor Flexible NetFlow configuration. See Uninstalling Agents Using the Install Script for more information. |
| Step 8 | From the ESXi host hosting the controller, remove the controller VM. See Removing a VM from an ESXi Host for more information. |
To uninstall the Learning Network License system, perform the following tasks from the controller web UI in order:
Delete all mitigations
Disable PBC/DPI on all Network Element interfaces
Disable all managed agents
Deregister Smart Licensing
Ensure that the agents that enforce the mitigation policies are enabled.
| Step 1 | Select Mitigation. |
| Step 2 | Click Delete all mitigations to delete all mitigations. |
Ensure that the agent on the Network Element is enabled.
| Step 1 | Select AGENTS. |
| Step 2 | Click Configure next to an agent. |
| Step 3 | Uncheck Enable PBC/DPI on each interface to disable raw packet capture. |
| Step 4 | Uncheck Enable PBC. |
| Step 5 | Uncheck Enable DPI/DPS. |
| Step 6 | Click Submit. |
| Step 7 | Click Submit. |
If you registered your controller with the Smart Licensing Authority, then disable an agent, the system frees the license entitlement allocated to that agent.
Log into the controller web UI.
| Step 1 | Select AGENTS. |
| Step 2 | Check the select all checkbox at the top of the list to select all agents. |
| Step 3 | Click Disable. |
Unregister your controller from the Licensing Authority, as described in the next section.
Deregistering your controller from Smart Licensing also frees the controller license entitlement.
Log into the controller web UI.
| Step 1 | Select Dashboard. |
| Step 2 | Click Smart Licensing. |
| Step 3 | Choose Deregister from the Actions drop-down menu. |
| Step 4 | Click Deregister to confirm the deregistration. |
Removing an agent deployed as a virtual service from a Network Element involves modifying the install and upgrade configuration settings file, renaming an install log file, then running the install and upgrade script with a command line option to remove the agent.
Modify the install.yaml install properties file so the install script can locate and remove the agents from the Network Elements.
Log into the controller VM console.
| Command or Action | Purpose | |
|---|---|---|
| Step 1 | cd /opt/cisco/sln/install_upgrade/container Example: user@host:~$ cd /opt/cisco/sln/install_upgrade/container
|
Navigate to the /install_upgrade/container directory. |
| Step 2 | vi install.yaml Example: user@host:~/opt/cisco/sln/install_upgrade/container$ vi install.yaml
|
Open the install.yaml properties file in the vi text editor. |
| Step 3 | Verify that each of your Network Elements and agents has a per-branch setting entry. See the Cisco Stealthwatch Learning Network License Release Notes for more information. |
Ensure that your install.yaml properties file has a per-branch setting entry for each Network Element and agent. |
| Step 4 | Press Esc, then enter :wq! and press Enter. | Save your changes and close the file. |
When you deployed the agents as virtual services, you configured the install.yaml properties file with deployment settings. If you plan on deploying the Learning Network License system again, you can log into the controller, save the properties file, and upload it to the controller to redeploy your agents. See https://www.vmware.com/support/ws3/doc/ws32_running9.html for more information.
Rename the aa_summary install log file so the install script does not reference it and only attempt to clean up those agents which failed to properly install.
Log into the controller VM console.
| Command or Action | Purpose | |
|---|---|---|
| Step 1 | cd /opt/cisco/sln/install_upgrade/container Example: user@host:~$ cd /opt/cisco/sln/install_upgrade/container
|
Navigate to the /install_upgrade/container directory. |
| Step 2 | mv aa_summary aa_summary_backup Example: user@host:~/opt/cisco/sln/install_upgrade/container$ mv aa_summary aa_summary_backup
|
Rename the aa_summary file to aa_summary_backup. |
Run the installation_auto.py install script, referencing the install.yaml install properties file, to remove all agents deployed as virtual services.
Log into the controller VM console.
| Command or Action | Purpose | |
|---|---|---|
| Step 1 | cd /opt/cisco/sln/install_upgrade/container Example: user@host:~$ cd /opt/cisco/sln/install_upgrade/container
|
Navigate to the /install_upgrade/container directory. |
| Step 2 | installation_auto.py -c install.yaml --clean_only Example: user@host:~/opt/cisco/sln/install_upgrade/container$ installation_auto.py -c install.yaml --clean_only
|
Run the installation_auto.py install script with the --clean_only command line option to remove the agents from the host Network Elements referenced in install.yaml. |
Removing a controller from an ESXi host requires connecting to the ESXi host and deleting the controller VM.
Feedback