Table of Contents

rn-iot-ind-1-4.fm

Release Notes for Cisco Industrial Network Director, Release 1.4.x

First Published: March 30, 2018

Last Updated: April 6, 2018

This release note contains the latest information about using Release 1.4.x of the Cisco Industrial Network Director (IND) application that supports configuration and management of Industrial Ethernet switches.

The IND application provides three types of Online Help (OLH): Context-Sensitive Help, Embedded Help such as the Guided Tours, and Tooltips.

Organization

This guide includes the following sections:

:

Conventions

Conventions used in this document.

About Cisco IND

Description of the IND application.

New Features

New features in Release 1.4.x.

IND Licenses

Summary of supported licenses for Release 1.4.x.

System Requirements

System requirements for Release 1.4.x.

Pre-Configuration Requirements for IE Switches

Configuration required on Industrial Ethernet (IE) switches before you connect it to the IND application.

Installation Notes

Procedures for downloading software.

Important Notes

Unsupported PIDs, Supported IND Release Upgrades and Supported Cisco IOS software.

Limitations and Restrictions

Known limitations in IND.

Caveats

Open and Resolved caveats in Release 1.4.x.

Related Documentation

Links to the documentation associated with this release.

Conventions

This document uses the following conventions.

Conventions

Indication

bold font

Commands and keywords and user-entered text appear in bold font.

italic font

Document titles, new or emphasized terms, and arguments for which you supply values are in italic font.

[ ]

Elements in square brackets are optional.

{x | y | z }

Required alternative keywords are grouped in braces and separated by vertical bars.

[ x | y | z ]

Optional alternative keywords are grouped in brackets and separated by vertical bars.

string

A nonquoted set of characters. Do not use quotation marks around the string or the string will include the quotation marks.

courier font

Terminal sessions and information the system displays appear in courier font.

< >

Nonprinting characters such as passwords are in angle brackets.

[ ]

Default responses to system prompts are in square brackets.

!, #

An exclamation point (!) or a pound sign (#) at the beginning of a line of code indicates a comment line.

. Notes contain helpful suggestions or references to material not covered in the manual.

About Cisco IND

Cisco Industrial Network Director provides operations teams an easily-integrated system delivering increased operator and technician productivity through streamlined network monitoring and rapid troubleshooting. IND is part of a comprehensive IoT solution from Cisco:

n Easy-to-adopt network management system purpose-built for industrial applications that leverages the full capabilities of the Cisco Industrial Ethernet product family to make the network accessible to non-IT operations personnel.

n Creates a dynamic integrated topology of automation and networking assets using industrial protocol (BACnet/IP, CIP, Modbus, PROFINET) discovery to provide a common framework for plant floor and plant IT personnel to monitor and troubleshoot the network and quickly recover from unplanned downtime.

n Rich APIs allow for easy integration of network information into existing industrial asset management systems and allow customers and system integrators to build dashboards customized to meet specific monitoring and accounting needs.

Cisco IND Features and Benefits

n Purpose-built user experience for non-IT operations personnel - Rapid adoption by operations teams for improved productivity.

n Targeted discovery of plant floor network assets customized for industrial environments – Ensures that automation devices connected to the network are not affected by discovery process.

n Automation endpoint discovery using industrial protocols, including PROFINET, CIP, BACnet/IP, and Modbus Complete automation infrastructure inventory, not solely network inventory details.

n Optimized alarm management with real-time alerting of network events and reporting of effects to automation assets – Allows for operations and plant IT team to consume network events in context of the industrial process to simplify troubleshooting issues.

n User-defined period of monitoring of Supported device metrics, traffic statistics, and network infrastructure status – Increased visibility of network health for the operations team and reduced unplanned downtime.

n Comprehensive RESTful APIs for integration with automation applications and control systems – Rapid adoption and integration with existing systems and customization by system integrators.

n Role-based access control with customizable permission mapping – Restrict system access to authorized users on a per feature basis.

n Detailed Audit trails for operational visibility of network changes, additions, and modifications – Record user actions on network devices for change management.

n Search capability integrated with major functions - Easily locate functionality and mine for information.

n Cisco Active Advisor - Free cloud-based service that provides essential network life cycle information to make sure security and product updates are current.

n Guided tours - Step-by-step guidance to maximize productivity and ease adoption.

New Features

In this release of the product, there are four primary functions supported:

n Design

n Operate (Operations)

n Maintain (Maintenance)

n Settings

Release 1.4.x supports the following new IND features and enhancements summarized in New Features in IND 1.4.x.

.

Table 1 New Features in IND 1.4.x

Feature

Description

First released

Related Documentation

Port Settings

Allows you to view and manage port settings by clicking on a Switch port on the faceplate of the switch. You can manage the following items in the Switch port window:

n Change Port Access VLAN

n Change Port Speed

n Port interface: Shut down or No Shutdown options

n Configure Port Duplex Mode

1.4.0-216

IND Online Help

Share Endpoint information with Cisco ISE

Cisco IND is registered with pxGrid as a publisher and publishes information on endpoint attributes to Cisco Identity Services Engine (ISE) for the IOTASSET Dictionary.

Note: You must register Cisco IND in Cisco ISE as a pxGrid node for the function to work.

Cisco Platform Exchange Grid (pxGrid), allows multiple security products to share data and work together. This open, scalable, and IETF standards-driven platform helps you automate security to get answers and contain threats faster.

Cisco Identity Services Engine (ISE) is a network administration product that enables the creation and enforcement of security and access policies for endpoint devices connected to the company's routers and switches. Integrating pxGrid with IND allows IND to share endpoint information available in the IND inventory with ISE.

Settings > pxGrid

1.4.0-216

Deploying Cisco Industrial Network Director (IND) with Cisco ISE using pxGrid

Cisco pxGrid

Cisco Identity Services Engine

IND Online Help

BACnet Data Communications Protocol Support

Using the BACnet data communications protocol, IND can retrieve and then manage MAC addresses and configured network port information of Building Automation and Control network devices. BACnet Devices devices have a specific group icon that displays within the Topology map.

Operate > Topology

1.4.0-216

IND Online Help

Configuration Backup

Allows you to backup the current device configuration into the IND Configuration Archive.

You can establish both On Demand and Periodic Backups.

Maintain > Configuration Archives

1.4.0-216

IND Online Help

Device Type Tags

You can define tags and then attach those tags to one or more devices on the following pages: Inventory, Device Details and Topology. You cannot delete a tag that is associated with a device.

Settings > Tag

1.4.0-216

IND Online Help

Discover Topology by Group

When you create a group, it displays as an icon in the Topology map. This action occurs even in the absence of assigned assets or subgroups in the Group.

Operate > Topology

1.4.0-216

IND Online Help

VLAN Overlay

Allows you to show or hide configured VLANs for devices that display.

VLAN Overlay > Topology

1.4.0-216

IND Online Help

Plug and Play (PnP) CLI Config and Exec Service

New capability allows you to append additional command line interface (CLI) commands to a Device Configuration.

Design > Plug and Play

1.4.0-216

IND Online Help

IND Device Pack 1.4.0

Cisco Universal IOS images supported:

n Cisco IOS Release 15.2(6)E1

n Cisco IOS Release 15.2(6)E0a

n Cisco IOS Release 15.2(5)E2

n Cisco IOS Release 15.2(5)E1

n Cisco IOS Release 15.2(4)EC2(ED)

n Cisco IOS Release 15.2(4)EA2

n Cisco IOS Release 15.2(4)EA1

n Cisco IOS Release 15.2(3)E3

n Cisco IOS Release 15.2(3)E2
See Limitations and Restrictions for image limitations.
The device pack supports the following Cisco and Rockwell Automation/Allen-Bradley platforms:

Cisco platforms:

n CGS 2520

n IE 1000, IE 2000, IE 2000U

n IE 3000, IE 3010

n IE 4000, IE 4010

n IE 5000

Rockwell Automation/Allen-Bradley platforms:

n Stratix 8000/8300 Modular Managed Ethernet Switches

n Stratix 5700 Industrial Managed Ethernet Switches

n Stratix 5700 Industrial Ethernet Switches

n Stratix 5410 Industrial Distribution Switches

n Stratix 5400 Industrial Ethernet Switches

n Stratix 2500 Lightly Managed Switches

1.4.0-216

IND Online Help

IND Licenses

The Cisco Industrial Network Director is licensed on a per-device, term subscription basis and supports two licensing models. For details on the supported lND licenses, refer to the:

Table 2 System Requirements

Desktop Requirements

Minimum Requirement

Windows Operating System (OS)

Windows 7 Enterprise or Professional with Service Pack 2

Windows 10

Windows 2012 R2 Server

Windows 2016 Server (64-bit version)

Note: When using Windows 2016 Server, you may not be able to select the Uninstall option from the Windows Start program window. If this occurs, do the following:

- Log out of Windows 2016 and then log in again.

- If you do not see the Uninstall option in the Windows menu, then Restart the PC.

Browser

Chrome: Version 50.0.2661.102 or later

Firefox: Version 46.01 or later

CPU

Quad-Core 1.8 GHz

RAM

8 GB

Storage

50 GB

Pre-Configuration Requirements for IE Switches

The following information describes the CLI configuration required for IND to discover a Supported Device and transition the device from UNLICENSED to LICENSED state in secure mode.

n For IE switches running Cisco IOS, refer to Requirements for ALL IE Switches Running Cisco IOS

n For IE1000 switches, refer to Device Manager Configuration Required for Discovery and Management of IE 1000 Switches

Requirements for ALL IE Switches Running Cisco IOS

2. Leave the username field blank and enter cisco as password.

3. Choose Admin > Users.

4. Create Device Access User and use the same in Access Profile on IND.

5. Configure SNMP community string for Read Only (ro):

a. Choose Configure > SNMP. Click OK in the pop-up windows to confirm enabling SNMP.

b. Check the check box to enable SNMP Mode globally. Click Submit

6. Select Community Strings tab. Add a public Community String read only access. (By default, this is a Read Only (ro) string)

For SNMPv3:

a. Select the Users tab and add an snmpv3 user with name, security level, authentication protocol, authentication password, privacy protocol, and privacy password. Click OK.

b Select the Group tab, select the created user, and specify the group name. Click OK.

7. Choose Admin > Access Management.

a. Check the check box to enable either SSH or Telnet. (This option determines how the IE1000 communicates with IND)

b. Click Submit.

Bootstrap Configuration for IE Switches

# Enable traps supported by the system

snmp-server enable traps snmp linkdown linkup coldstart

snmp-server enable traps auth-framework sec-violation

snmp-server enable traps entity

snmp-server enable traps cpu threshold

snmp-server enable traps rep

snmp-server enable traps bridge newroot topologychange

snmp-server enable traps stpx inconsistency root-inconsistency loop-inconsistency

snmp-server enable traps flash insertion removal

snmp-server enable traps envmon fan shutdown supply temperature status

snmp-server enable traps alarms informational

snmp-server enable traps errdisable

snmp-server enable traps mac-notification change move threshold

# Configure SNMP to retain ifindex across reboots

snmp ifmib ifindex persist

# Enable dual-power supply

# Not applicable for S5410, IE5K, CGS2K, IE3010

power-supply dual

# Enable SD card alarm

# Not applicable for S8000, CGS2K, IE2000U, IE3010, IE3K

alarm facility sd-card enable

alarm facility sd-card notifies

# Turn on notifies for selected facility alarms

alarm facility temperature primary notifies

alarm facility temperature secondary notifies

# Following not application for CGS2K, IE3010

alarm facility power-supply notifies

no alarm facility power-supply disable

Bootstrap Configuration for IE 1000 Switches

# Traps for IE1K

snmp.config.trap_source.add coldStart

snmp.config.trap_source.add warmStart

snmp.config.trap_source.add linkDown

snmp.config.trap_source.add linkUp

snmp.config.trap_source.add topologyChange

snmp.config.trap_source.add authenticationFailure

snmp.config.trap_source.add entConfigChange

snmp.config.trap_source.add fallingAlarm

snmp.config.trap_source.add risingAlarm

snmp.config.trap_source.add newRoot

# Trap destination

snmp.config.trap_receiver.add <ind-ip-address> version 2c {snmpv2-read-community} udp-port 30162

# Trap destination for v3 security

snmp.config.trap_receiver.add {ind-ip-address} version 3 {snmpv3_mode} {snmpv3_username}

udp-port 30162

Installation Notes

IND Application Installation

The installation procedure for IND is described in the Installation Guide for Industrial Network Director for Release 1.4.x.

Device Pack Installation

Installation Requirements

IND Device Packs can only be installed with an IND application that has a matching version number, and the release number must be the same or greater than the IND release number.

For example, in release 1.4.0-216, 1.4.0 is the version number and 216 is the release number.

A new Device Pack must be version 1.4.0 and the release must be 216 or higher.

Installation Steps

For Device Pack installation steps, refer to the Installation Guide for Cisco Industrial Network Director, Release 1.4.x.

Important Notes

Please note the following information about Windows OS, Cisco IOS software and PID support on IND.

Supported Cisco IOS Software

IND 1.4.0-216 supports the following Cisco IOS Releases:

n Cisco IOS Release 15.2(6)E1

n Cisco IOS Release 15.2(6)E0a

n Cisco IOS Release 15.2(5)E1

n Cisco IOS Release 15.2(5)E

n Cisco IOS 15.2(4)EC2(ED)

n Cisco IOS Release 15.2(4)EA5

n Cisco IOS Release 15.2(4)EA2

n Cisco IOS Release 15.2(4)EA1

n Cisco IOS Release 15.2(3)E3

n Cisco IOS Release 15.2(3)E2

n Release 1.6 for Industrial Ethernet 1000

Supported IND Release Upgrades

You can perform the following IND upgrades:

n Upgrade from 1.3.1 to 1.4.0

n Upgrade from 1.3.0 to 1.3.1

n Upgrade from 1.2.x to 1.3.0

n Upgrade from 1.1.x to 1.2.0

n Upgrade from 1.0.x to 1.2.0

Limitations and Restrictions

Cisco recommends that you review this section before you begin working with IoT IND. These are known limitations that will not be fixed, and there is not always a workaround for these issues. Some features might not work as documented, and some features might be affected by recent changes to the software.

n After you upgrade from IND 1.3 to IND 1.4, you must re-register with the pxGrid Service.

n Import of PnP profile from IND 1.3 to IND 1.4 is not supported.

n PnP process is supported only on single-homed (Single IP) IND servers for Cisco IOS Release 15.2(6)E1.

n PnP process fails intermittently in Cisco IOS Release 15.2(6)E0a.

n A PnP Service Error 1410 occurs in Cisco IOS Release 15.2(6)E0a due to AAA command not working (CSCvg64039).

n A crash occurs on IE 2000 and Stratix 5700 devices with IOS 15.2(6)E0a if the PnP process is enabled using DHCP option 43 (CSCvg72151).

Caveats

This section presents open caveats in this release and information on using the Bug Search Tool to view details on those caveats.

n Open Caveats

n Accessing the Bug Search Tool

Open Caveats

Table 3 Platform-related caveats

Bug ID

Headline

CSCvi33467

PnP: PnP Error 1410 with Euphrates image [Release 15.2(6)E0a].

CSCvi55460

Cannot SSH to the device after the PnP commissioning with Cauvery Image. [15.2(4)EA5, All IE switches].

CSCvi66102

MRP Mode changes to Client upon Rebooting the device [Release 15.2(6)E1].

CSCvi69546

Tar upgrade from Cauvery or Danube to Winter [Release 15.2(6)E1] is failing for IE3000 or s8000.

Accessing the Bug Search Tool

You can use the Bug Search Tool to find information about caveats for this release, including a description of the problems and available workarounds. The Bug Search Tool lists both open and resolved caveats.

To access the Bug Search Tool, you need the following items:

n Internet connection

n Web browser

n Cisco.com user ID and password

To access the Bug Search Tool, use the following URL: https://tools.cisco.com/bugsearch/search

To search using a specific bug ID, use the following URL: https://tools.cisco.com/bugsearch/bug/<BUGID>

Related Documentation

Installation Guide for Industrial Network Director Application for Release 1.4.x at:

http://www.cisco.com/c/en/us/support/cloud-systems-management/industrial-network-director/tsd-products-support-series-home.html

Find documentation for the Cisco Industrial Ethernet Switches at: (select the link for the relevant switch to access user guide)

http://www.cisco.com/c/en/us/products/switches/industrial-ethernet-switches/index.html