Cisco IWAN on Cisco APIC-EM Configuration Guide, Release 1.3.x

Managing Branch Sites

---

After you have configured and setup the hub site, you can add devices to Cisco IWAN and provision them to the sites.

You can add and provision the following two types of devices:

• Greenfield Devices—Discovered by the Cisco Plug-n-Play (Cisco PnP) application. Greenfield devices are brand new out-of-the-box routers.
• Brownfield Devices—Discovered by the Cisco APIC-EM application. Brownfield devices belong to existing sites that are added to Cisco IWAN.

This chapter contains the following sections:

• Basic Workflow for Managing Branch Sites
• Bootstrapping Greenfield Devices
• Adding and Provisioning Greenfield Devices to the Branch Site
• Adding and Provisioning Brownfield Devices to the Branch Site
• Viewing Site Status Information

Basic Workflow for Managing Branch Sites

Bootstrapping Greenfield Devices

You can bootstrap devices discovered by the Cisco PnP application. These devices are called Greenfield devices.

Use this procedure to download a bootstrap file.

Procedure

Step 1 From the Cisco IWAN home page, click Manage Branch Sites. The Sites page opens.

Step 2 Click the Bootstrap tab. The bootstrap files that are available for download are displayed.

Step 3 From the Download column, click the download bootstrap icon to download the bootstrap file to a local directory on your computer. You can use this file as a template for PnP call home.

After the Greenfield devices are provisioned to a site, the appropriate bootstrap file is automatically uploaded on to the device.

For details, see the Cisco Open Plug-n-Play Agent Configuration Guide at: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/pnp/configuration/xe-3e/pnp-xe-3e-book.html.

Adding and Provisioning Greenfield Devices to the Branch Site

Use this procedure to add Greenfield devices that are discovered by the Cisco PnP application and provision them to the branch site.

Note ● Before you use the devices to provision the site, we recommend that you save the running configuration in flash or bootflash in the IWAN_RECOVERY.cfg file so that you can restore the configuration if needed.

• There must be at least 16 VTY lines configured.

Procedure

Step 1 From the Cisco IWAN home page, click Manage Branch Sites. The Sites page opens.

Step 2 Click the Device(s) tab. A list of unclaimed devices are displayed as shown in the following figure:

Step 3 Check the checkbox next to the Greenfield device(s) that you want to use, and then click the Provision Site tab. The Select Topology tab opens and displays the available topologies.

Note To determine if the device is Brownfield or Greenfield, look at the Discovered By column in the Add Devices page. PNP indicates that it is a Greenfield device. APIC indicates that it is a Brownfield device.

Note You can choose a maximum of two devices.

Note Greenfield and Brownfield devices cannot be part of the same site.

Step 4 Click the topology that is appropriate for your network. The L2/L3 options display.

Note The topology options that display are dependent on the number of devices you selected in Step 3.

Step 5 Click the L2 option. The Configure Topology page displays.

Note L3 is not supported on Greenfield devices.

Step 6 From the Configure Topology page, specify the following properties:

Step 7 Configure WAN settings for the branch device. Do the following:

a. Click the + icon next to the WAN cloud. The Configure WAN Cloud dialog box opens. Depending on the WAN type you chose in Step 6. the fields that display in the Configure WAN Cloud dialog box change.

b. For an Public WAN, the Configure WAN Cloud dialog box displays the following fields. Enter the required properties, and then click Save.

c. For a Private WAN, the Configure WAN Cloud dialog box displays the following fields. Enter the required properties, and then click Save.

Step 8 Configure LAN settings. Do the following:

Displays the following for Greenfield devices:

Note You can either create the LAN Greenfield IP address pool during hub provisioning; or you can add it after hub provisioning for Greenfield deployments. When the LAN Greenfield IP address pool is not present, the system automatically uses the generic pool IP address.

a. Click the + icon next to the LAN. If site specific IP address pools are configured for the site, the Configure VLAN dialog box opens.

b. Enter the following properties, and then click Save :

Step 9 From the Provisioning Sites page, click Apply Changes. The Provisioning Site Summary dialog box opens with a summary of the configuration.

Step 10 Review the information, and then do one of the following:

• Click the Apply Now radio button, and then click Submit.
• Click the Schedule radio button, specify a date and time to apply the site provisioning, and then click Submit.

Note The Apply Now option does not check for validations in conflict with future scheduled workflows. You must reevaluate scheduled jobs based on the changes and update the jobs as required. If there is a conflict when the scheduled job is activated, it might fail to provision the site.

Adding and Provisioning Brownfield Devices to the Branch Site

Use this procedure to add Brownfield devices that are discovered by the Cisco APIC-EM application and provision them to the branch site.

Brownfield devices are not automatically displayed on the Devices tab. You must first add them to Cisco IWAN, and then provision them to the branch site.

Note ● Before you use the devices to provision the site, we recommend that you save the running configuration in bootflash in the IWAN_RECOVERY.cfg file so that you can restore the configuration if needed.

• There must be at least 16 VTY lines configured.
• Devices that are configured with SNMP version 2 or version 3 can be used as branch devices.

Procedure

Step 1 From the Cisco IWAN home page, click Manage Branch Sites. The Sites page opens.

Step 2 Click the Device(s) tab. The following page displays.

Step 3 To add a Brownfield device, click the Add Device tab. The Add Device dialog box opens and displays a list of devices discovered by the Cisco APIC-EM application as shown in the following figure:

Note Alternatively, you can add devices using the Cisco APIC EM discovery feature.

Step 4 Do one of the following:

• Choose an existing Cisco APIC-EM discovered device—From the Devices Discovered by APIC-EM area, click the radio button next to the device you want to add to Cisco IWAN, and then click Claim Device (see above figure). The claimed device is added to the Devices page and is available for provisioning.
• Add a new device—Click Adding New Device (see figure above). The Add Device dialog box opens where you specify the IP address for the new device and additional properties as shown in the following figure and the table that follows, and then click Add Device :

The device is verified in the background to determine if the device is suitable for provisioning. The following occurs:

The Cisco IWAN application accesses the router and checks its configuration to determine if it has any configuration that might conflict with the Cisco IWAN application. This is called Brownfield Validation.

If the router does not have conflicting configurations, an orange icon appears on top of the device and the Configure Router Dialog opens.

If the router has conflicting configurations, the Validation Status dialog opens listing all the validation failures, as shown in the following figure:

I

c. The validation status could be either Warning or Must Fix. Do the following:

– If the validation status is Warning, you can fix it or ignore it.

– If the validation status is Must Fix, remove the configurations suggested by the description, and then click Revalidate.

For information about the messages displayed in the Validation Status dialog box, see Appendix A, “Brownfield Validation Messages.”

Step 5 From the Devices page, check the checkbox next to the Brownfield device(s) that you want to provision for a site, and then click the Provision Site tab. The Select Topology tab opens and displays the available topologies.

Note To determine if the device is Brownfield or Greenfield, look at the Discovered By column in the Add Devices page. PNP indicates that it is a Greenfield device. APIC indicates that it is a Brownfield device.

Note You can choose a maximum of two devices.

Step 6 Click the topology that is appropriate for your network. The L2/L3 options display.

Note The topology options that display are dependent on the number of devices you selected in Step 5.

Step 7 Depending on the LAN site configuration, c lick the appropriate L2/L3 option. The Configure Topology page displays.

Note If the VLAN on branch devices are on the same subnet, choose L2. If the VLAN on the branch devices are on different subnets, choose L3.

Step 8 From the Configure Topology page, specify the following properties:

Step 9 Configure WAN settings for the branch device. Do the following:

a. Click the + icon next to the WAN cloud. The Configure WAN Cloud dialog box opens. Depending on the WAN type you chose in Step 8. the fields that display in the Configure WAN Cloud dialog box change.

b. For a Public WAN, the Configure WAN Cloud dialog box displays the following fields. Enter the required properties, and then click Save.

c. For a Private WAN, the Configure WAN Cloud dialog box displays the following fields. Enter the required properties, and then click Save.

Step 10 Configure LAN settings. Do the following:

Click the + icon next to the LAN. If you selected L2 topology and the LAN interface is a physical interface or a switchport interface, the Configure VLAN dialog box opens (see bellow). Choose the LAN interface from the drop-down list, and then click Save.

Note ● If you selected a dual router topology, the common VLANs between devices are displayed.

• Make sure there are no site-specific IP address pools configured for Brownfield sites.
• The VLAN information seen on the Configure VLAN dialog box is auto populated based on the LAN interface that you selected on the router.
• You cannot edit the auto populated information from the Configure VLAN interface dialog box.
• You can either create the LAN Brownfield IP address pool during hub provisioning; or you can add it after hub provisioning for brownfield deployments. When the LAN Brownfield IP address pool is not present, the system automatically creates site-specific pools for the Brownfield devices.

If you selected L3 topology, the following Configure VLAN dialog box opens as shown in the following figure. Do the following:

a. Choose the LAN interface from the drop-down list. The IP address is automatically populated.

b. Click Save.

c. If you have dual routers, choose the LAN interface for that device, and then click Save.

d. Click the + icon above Routing Configuration. The LAN Routing Configuration dialog box opens as shown in the following figure. Enter the properties and then click Save.

Note VLANs are displayed per device.

I

Step 11 From the Provisioning Sites page, click Apply Changes. The Provisioning Site Summary dialog box opens with a summary of the configuration.

Step 12 Review the information and then do one of the following:

• Click the Apply Now radio button, and then click Submit.
• Click the Schedule radio button, specify the date and time to apply the site provisioning, and then click Submit.

Note The Apply Now option does not check for validations in conflict with future scheduled workflows. You must reevaluate scheduled jobs based on the changes and update the jobs as required. If there is a conflict when the scheduled job is activated, it might fail to provision the site.

Viewing Site Status Information

Use this procedure to view the information about the site and determine its overall status.

Procedure

Step 1 From the Cisco IWAN home page, click Manage Branch Sites. The Sites page opens.

Step 2 Click the Site(s) tab. The following properties appear: