How to Configure Call Home
Configuring Call Home Customer Contact Information
To configure the customer contact information, perform this task:
|
|
|
Step 1 |
Router# configure terminal |
Enters configuration mode. |
Step 2 |
Router(config)# call-home |
Enters Call Home configuration mode. |
Step 3 |
Router(cfg-call-home)# contact-email-addr email-address |
Assigns the customer’s email address. Enter up to 200 characters in email address format with no spaces. |
Step 4 |
Router(cfg-call-home)# phone-number + phone-number |
(Optional) Assigns the customer’s phone number. Note The number must begin with a plus (+) prefix, and may contain only dashes (-) and numbers. Enter up to 16 characters. If you include spaces, you must enclose your entry in quotes (“”). |
Step 5 |
Router(cfg-call-home)# street-address street-address |
(Optional) Assigns the customer’s street address where RMA equipment can be shipped. Enter up to 200 characters. If you include spaces, you must enclose your entry in quotes (“”). |
Step 6 |
Router(cfg-call-home)# customer-id text |
(Optional) Identifies the customer ID. Enter up to 64 characters. If you include spaces, you must enclose your entry in quotes (“”). |
Step 7 |
Router(cfg-call-home)# site-id text |
(Optional) Identifies the customer site ID. Enter up to 200 characters. If you include spaces, you must enclose your entry in quotes (“”). |
Step 8 |
Router(cfg-call-home)# contract-id text |
(Optional) Identifies the customer’s contract ID for the switch. Enter up to 64 characters. If you include spaces, you must enclose your entry in quotes (“”). |
This example shows the configuration of contact information:
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# call-home
Router(cfg-call-home)# contact-email-addr username@example.com
Router(cfg-call-home)# phone-number +1-800-555-4567
Router(cfg-call-home)# street-address "1234 Picaboo Street, Any city, Any state, 12345"
Router(cfg-call-home)# customer-id Customer1234
Router(cfg-call-home)# site-id Site1ManhattanNY
Router(cfg-call-home)# contract-id Company1234
Router(cfg-call-home)# exit
Router(config)#
Configuring Destination Profiles
Destination Profile Overview
A destination profile contains the required delivery information for an alert notification. At least one destination profile is required. You can configure multiple destination profiles of one or more types.
You can use the predefined destination profile or define a profile. If you define a new destination profile, you must assign a profile name.
You can configure the following attributes for a destination profile:
- Profile name—A string that uniquely identifies each user-defined destination profile. The profile name is limited to 31 characters and is not case-sensitive. You cannot use all as a profile name.
- Transport method—The transport mechanism, either email or HTTP (including HTTPS), for delivery of alerts.
–
For user-defined destination profiles, email is the default, and you can enable either or both transport mechanisms. If you disable both methods, email will be enabled.
–
For the predefined Cisco TAC profile, you can enable either transport mechanism, but not both.
- Destination address—The actual address related to the transport method to which the alert should be sent.
- Message formatting—The message format used for sending the alert.
–
For user-defined destination profiles, the format options are long-text, short-text, or XML. The default is XML.
–
The predefined Cisco TAC profile uses XML.
- Message size—The maximum destination message size. The valid range is 50 to 3,145,728 bytes and the default is 3,145,728 bytes.
Note ●
The Call Home feature provides a predefined profile named CiscoTAC-1 that is inactive by default. The CiscoTAC-1 profile is intended for use with the Smart Call Home service, which requires certain additional configuration steps to enable the service with the Call Home feature. For more information about this profile, see the “Using the Predefined CiscoTAC-1 Destination Profile” section.
- If you use the Cisco Smart Call Home service, the destination profile must use the XML message format.
Configuring Call Home to Use VRF
To configure Call Home to use a VRF interface for Call Home email or for HTTP messages, perform this task:
|
|
|
Step 1 |
Router# configure terminal |
Enters configuration mode. |
Step 1 |
Router(config)# interface type |
Selects an interface to configure. |
Step 2 |
Router(config-if)# ip address ip_address mask |
Assigns an IP address and subnet mask to the interface. |
Step 3 |
Router(config-if)# vrf forwarding call_home_vrf_name |
Associates the call_home_vrf_name VRF instance with the interface. |
Step 4 |
Router(config-if)# exit |
Exits interface configuration mode. |
This example shows how to configure Call Home to use a VRF interface:
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# interface gigabitethernet 1/1
Router(config-if)# ip address 10.10.10.10 0.0.0.0
Router(config-if)# vrf forwarding call_home_vrf
Router(config-if)# exit
Router(config)#
Configuring Call Home to Use VRF for Email Messages
To configure Call Home to use a VRF instance for Call Home email messages, perform this task:
|
|
|
Step 1 |
Router# configure terminal |
Enters configuration mode. |
Step 2 |
Router(config)# call-home |
Enters Call Home configuration submode. |
Step 3 |
Router(cfg-call-home)# vrf call_home_vrf_name |
Specifies the VRF instance to use for Call Home email messages. |
This example shows how to configure Call Home to use a VRF interface:
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# call-home
Router(cfg-call-home)# vrf call_home_vrf
Router(cfg-call-home)# exit
Router(config)#
Configuring the Mail Server
To use the email message transport, perform this task:
|
|
|
Step 1 |
Router# configure terminal |
Enters global configuration mode. |
Step 2 |
Router(config)# call-home |
Enters call home configuration mode. |
Step 3 |
Router(cfg-call-home)# mail-server { ipv4-address | ipv6-address | name } priority number |
Specifies an email server and its relative priority among configured email servers, where:
- ipv4-address —Specifies an IPv4 address for the mail server.
- ipv6-address —Specifies an IPv6 address for the mail server.
- name —Specifies the mail server’s fully qualified domain name (FQDN) of 64 characters or less.
- number —Assigns a number between 1 (highest priority) and 100 (lowest priority). Higher priority (lower priority numbers) are tried first.
- Repeat to define backup email servers (maximum four backup email servers, for a total of five email servers.
|
The following example shows the configuration of a primary mail server (named “smtp.example.com”) and secondary mail server at IP address 192.168.0.1:
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# call-home
Router(cfg-call-home)# mail-server smtp.example.com priority 1
Router(cfg-call-home)# mail-server 192.168.0.1 priority 2
Router(cfg-call-home)# exit
Router(config)#
Configuring a Destination Profile for Email
To configure a destination profile for email transport, complete this task:
|
|
|
Step 1 |
Router# configure terminal |
Enters global configuration mode. |
Step 2 |
Router(config)# call-home |
Enters call home configuration mode. |
Step 3 |
Router(cfg-call-home)# sender from email-address |
(Optional) Assigns the email address that will appear in the from field in Call Home email messages. If no address is specified, the contact email address is used. |
Step 4 |
Router(cfg-call-home)# sender reply-to email-address |
(Optional) Assigns the email address that will appear in the reply-to field in Call Home email messages. |
Step 5 |
Router(cfg-call-home)# source-ip-address ip_address |
(Optional) Assigns a source IPv4 or IPv6 address that will be used for Call Home email messages. |
Step 6 |
Router(cfg-call-home)# source-interface interface-name |
(Optional) Specifies the source interface name to send Call Home e-mail messages. If no source interface name or source ip address is specified, an interface in the routing table is used. |
Step 7 |
Router(config-call-home)# profile name |
Enters call home destination profile configuration mode for the specified destination profile name. If the specified destination profile does not exist, it is created. |
Step 8 |
Router(cfg-call-home-profile)# destination transport-method email |
Configures the message transport method for email. (This is the default.) |
Step 9 |
Router(cfg-call-home-profile)# destination address email email_address |
Configures the destination email address to which Call Home messages are sent. |
Step 10 |
Router(cfg-call-home-profile)# destination preferred-msg-format { long-text | short-text | xml } |
(Optional) Configures a preferred message format. The default is XML. |
Step 11 |
Router(cfg-call-home-profile)# destination message-size bytes |
(Optional) Configures a maximum destination message size (from 50 to 3145728 bytes) for the destination profile. The default is 3145728 bytes. |
Step 12 |
Router(cfg-call-home-profile)# active |
(Optional) Enables the destination profile. By default, a user-defined profile is enabled when it is created. |
Step 13 |
Router(cfg-call-home-profile)# exit |
Exits call home destination profile configuration mode and returns to call home configuration mode. |
Step 14 |
Router(cfg-call-home)# end |
Returns to privileged EXEC mode. |
Configuring an HTTP Proxy Server
To specify an HTTP proxy server for Call Home HTTP(S) messages, perform this task:
|
|
|
Step 1 |
configure terminal
Router# configure terminal |
Enters configuration mode. |
Step 2 |
call-home
Router(config)# call-home |
Enters Call Home configuration submode. |
Step 3 |
http-proxy { ipv4-address | ipv6-address | name } port port-number
Router(cfg-call-home)# http-proxy 1.1.1.1 port 1 |
Specifies the proxy server for the HTTP request. |
Configuring a Destination Profile to Send HTTP Messages
Configuring the HTTP Source Interface
To configure an HTTP client source interface, perform this task:
|
|
|
Step 1 |
Router# configure terminal |
Enters global configuration mode. |
Step 2 |
Router(config)# ip http client source-interface type number |
Configures the source interface for the HTTP client. If the interface is associated with a VRF instance, the HTTP messages use the VRF instance. |
Configuring a Destination Profile for HTTP
To configure a destination profile for HTTP transport, perform this task:
|
|
|
Step 1 |
Router# configure terminal |
Enters global configuration mode. |
Step 2 |
Router(config)# call-home |
Enters call home configuration mode. |
Step 3 |
Router(config-call-home)# profile name |
Enters call home destination profile configuration mode for the specified destination profile. If the specified destination profile does not exist, it is created. |
Step 4 |
Router(cfg-call-home-profile)# destination transport-method http |
Enables the HTTP message transport method. |
Step 5 |
Router(cfg-call-home-profile)# destination address http url |
Configures the destination URL to which Call Home messages are sent. Note When entering a destination URL, include either http:// or https://, depending on whether the server is a secure server. If the destination is a secure server, you must also configure a trustpoint CA. |
Step 6 |
Router(cfg-call-home-profile)# destination preferred-msg-format { long-text | short-text | xml } |
(Optional) Configures a preferred message format. The default is XML. |
Step 7 |
Router(cfg-call-home-profile)# destination message-size bytes |
(Optional) Configures a maximum destination message size for the destination profile. |
Step 8 |
Router(cfg-call-home-profile)# active |
Enables the destination profile. By default, a profile is enabled when it is created. |
Step 9 |
Router(cfg-call-home-profile)# exit |
Exits call home destination profile configuration mode and returns to call home configuration mode. |
Step 10 |
Router(cfg-call-home)# end |
Returns to privileged EXEC mode. |
This example shows how to configure a destination profile for HTTP transport:
Router# configure terminal
Router(config)# call-home
Router(config-call-home)# profile test
Router(cfg-call-home-profile)# destination transport-method http
Router(cfg-call-home-profile)# destination address http https://example.url.com
Router(cfg-call-home-profile)# destination preferred-msg-format xml
Router(cfg-call-home-profile)# destination message-size 3,145,728
Router(cfg-call-home-profile)# active
Router(cfg-call-home-profile)# exit
Router(cfg-call-home)# end
Configuring a Trustpoint Certificate Authority
If you are using the HTTP transport method and specifying an HTTPS destination URL, then you will also need to configure a trustpoint certificate authority (CA). See the “Declare and Authenticate a CA Trustpoint” section.
Destination Profile Management
Activating and Deactivating a Destination Profile
Except for the predefined CiscoTAC-1 profile, all Call Home destination profiles are automatically activated when you create them. If you do not want to use a profile right way, you can deactivate the profile. The CiscoTAC-1 profile is inactive by default and must be activated to be used.
To activate or deactivate a destination profile, perform this task:
|
|
|
Step 1 |
Router# configure terminal |
Enters global configuration mode. |
Step 2 |
Router(config)# call-home |
Enters call home configuration mode. |
Step 3 |
Router(config-call-home)# profile name |
Enters call home destination profile configuration mode for the specified destination profile. If the specified destination profile does not exist, it is created. |
Step 4 |
Router(cfg-call-home-profile)# active |
Enables the destination profile. By default, a new profile is enabled when it is created. |
Step 5 |
Router(cfg-call-home-profile)# no active |
Disables the destination profile. |
Step 6 |
Router(cfg-call-home)# end |
Exits call home destination profile configuration mode and returns to privileged EXEC mode. |
This example shows how to activate a destination profile:
Router# configure terminal
Router(config)# call-home
Router(config-call-home)# profile test
Router(cfg-call-home-profile)# active
Router(cfg-call-home)# end
This example shows how to deactivate a destination profile:
Router# configure terminal
Router(config)# call-home
Router(config-call-home)# profile test
Router(cfg-call-home-profile)# no active
Router(cfg-call-home)# end
Copying a Destination Profile
To create a new destination profile by copying an existing profile, perform this task:
|
|
|
Step 1 |
Router# configure terminal |
Enters global configuration mode. |
Step 2 |
Router(config)# call-home |
Enters call home configuration mode. |
Step 3 |
Router(cfg-call-home)# copy profile source_profile target_profile |
Creates a new destination profile with the same configuration settings as the existing destination profile, where:
- source_profile —Specifies the existing name of the profile.
- target_profile —Specifies a name for the new copy of the profile.
|
This example shows how to activate a destination profile:
Router# configure terminal
Router(config)# call-home
Router(config-call-home)# profile test
Router(cfg-call-home-profile)# copy profile profile1 profile2
Renaming a Destination Profile
To change the name of an existing profile, perform this task:
|
|
|
Step 1 |
Router# configure terminal |
Enters global configuration mode. |
Step 2 |
Router(config)# call-home |
Enters call home configuration mode. |
Step 3 |
Router(cfg-call-home)# rename profile source_profile target_profile |
Renames an existing source file, where:
- source_profile —Specifies the existing name of the profile.
- target_profile —Specifies a new name for the existing profile.
|
This example shows how to activate a destination profile:
Router# configure terminal
Router(config)# call-home
Router(config-call-home)# profile test
Router(cfg-call-home-profile)# rename profile profile1 profile2
Using the Predefined CiscoTAC-1 Destination Profile
The CiscoTAC-1 profile is automatically configured in the Call Home feature for your use with the Cisco Smart Call Home service. This profile includes certain information, such as the destination email address and HTTPS URL, and default alert groups for communication with the Smart Call Home service. Some of these attributes, such as the destination email address, HTTPS URL, and message format cannot be modified.
You can use either email or http transport to communicate with the Smart Call Home service backend server. By default, the CiscoTAC-1 profile is inactive and uses email as the default transport method. To use email transport, you only need to enable the profile. However, to use this profile with the Cisco Smart Call Home service secure server (via HTTPS), you not only must enable the profile, but you must also change the transport method to HTTP as shown in the following example:
Router# configure terminal
Router(config)# call-home
Router(config-call-home)# profile CiscoTAC-1
Router(cfg-call-home-profile)# destination transport-method http
Router(cfg-call-home-profile)# active
For more information about additional requirements for Configuring the Smart Call Home service, see the “Smart Call Home Overview” section.
Subscribing to Alert Groups
Overview of Alert Group Subscription
An alert group is a predefined subset of Call Home alerts supported in all switches. Different types of Call Home alerts are grouped into different alert groups depending on their type. These alert groups are available:
- Configuration
- Diagnostic
- Environment
- Inventory
- Syslog
The triggering events for each alert group are listed in the “Alert Group Trigger Events and Commands” section, and the contents of the alert group messages are listed in the “Message Contents” section.
You can select one or more alert groups to be received by a destination profile.
Note
A Call Home alert is only sent to destination profiles that have subscribed to the alert group containing that Call Home alert. In addition, the alert group must be enabled.
Configuring Alert Group Subscription
To subscribe a destination profile to an alert group, perform this task:
|
|
|
Step 1 |
Router# configure terminal |
Enters configuration mode. |
Step 2 |
Router(config)# call-home |
Enters Call Home configuration submode. |
Step 3 |
Router(cfg-call-home)# alert-group { all | configuration | diagnostic | environment | inventory | syslog } |
Enables the specified alert group. Use the keyword all to enable all alert groups. By default, all alert groups are enabled. |
Step 4 |
Router(cfg-call-home)# profile name |
Enters the Call Home destination profile configuration submode for the specified destination profile. |
Step 5 |
Router(cfg-call-home-profile)# subscribe-to-alert-group all |
Subscribes this destination profile to all available alert groups using the lowest severity. Note
- This command subscribes to the syslog debug default severity. This causes a large number of syslog messages to generate. You should subscribe to alert groups individually, using appropriate severity levels and patterns when possible.
- As an alternative, you can subscribe to alert groups individually by specific type, as described in the following steps.
|
Step 6 |
Router(cfg-call-home-profile)# subscribe-to-alert-group configuration [ periodic { daily hh:mm | monthly date hh:mm | weekly day hh:mm }] |
Subscribes this destination profile to the Configuration alert group. The Configuration alert group can be configured for periodic notification, as described in the “Periodic Notification” section. |
Step 7 |
Router(cfg-call-home-profile)# subscribe-to-alert-group diagnostic [ severity { catastrophic | critical | debugging | disaster | fatal | major | minor | normal | notification | warning }] |
Subscribes this destination profile to the Diagnostic alert group. The Diagnostic alert group can be configured to filter messages based on severity, as described in the “Message Severity Thresholds” section. |
Step 8 |
Router(cfg-call-home-profile)# subscribe-to-alert-group environment [ severity { catastrophic | critical | debugging | disaster | fatal | major | minor | normal | notification | warning }] |
Subscribes this destination profile to the Environment alert group. The Environment alert group can be configured to filter messages based on severity, as described in the “Message Severity Thresholds” section. |
Step 9 |
Router(cfg-call-home-profile)# subscribe-to-alert-group inventory [ periodic { daily hh:mm | monthly date hh:mm | weekly day hh:mm }] |
Subscribes this destination profile to the Inventory alert group. The Inventory alert group can be configured for periodic notification, as described in the “Periodic Notification” section. |
Step 10 |
Router(cfg-call-home-profile)# subscribe-to-alert-group syslog [ severity { catastrophic | disaster | fatal | critical | major | minor | warning | notification | normal | debugging } [ pattern string ]] |
Subscribes this destination profile to the Syslog alert group. The Syslog alert group can be configured to filter messages based on severity, as described in the “Message Severity Thresholds” section. You can specify a pattern to be matched in the syslog message, as described in the “Configuring Syslog Pattern Matching” section. If the pattern contains spaces, you must enclose it in quotes (“”). |
Step 11 |
Router(cfg-call-home-profile)# exit |
Exits the Call Home destination profile configuration submode. |
Periodic Notification
When you subscribe a destination profile to either the configuration or inventory alert group (see the “Configuring Alert Group Subscription” section), you can choose to receive the alert group messages asynchronously or periodically at a specified time. The sending period can be one of the following:
- Daily—Specify the time of day to send, using an hour:minute format hh:mm, with a 24-hour clock (for example, 14:30).
- Weekly—Specify the day of the week and time of day in the format day hh:mm, where the day of the week is spelled out (for example, monday).
- Monthly—Specify the numeric date, from 1 to 31, and the time of day, in the format date hh:mm.
Message Severity Thresholds
When you subscribe a destination profile to the Diagnostic, Environment, or Syslog alert group (see the “Configuring Alert Group Subscription” section), you can set a threshold for the sending of alert group messages based on the message’s level of severity. Any message with a value lower than the destination profile’s specified threshold is not sent to the destination.
The severity threshold is configured using the keywords in Table 1-10 , and ranges from catastrophic (level 9, highest level of urgency) to debugging (level 0, lowest level of urgency). If no severity threshold is configured, the default is debugging (level 0).
Note
Call Home severity levels are not the same as system message logging severity levels.
Table 1-10 Severity and Syslog Level Mapping
|
|
|
|
9 |
catastrophic |
N/A |
Network-wide catastrophic failure. |
8 |
disaster |
N/A |
Significant network impact. |
7 |
fatal |
Emergency (0) |
System is unusable. |
6 |
critical |
Alert (1) |
Critical conditions, immediate attention needed. |
5 |
major |
Critical (2) |
Major conditions. |
4 |
minor |
Error (3) |
Minor conditions. |
3 |
warning |
Warning (4) |
Warning conditions. |
2 |
notification |
Notice (5) |
Basic notification and informational messages. Possibly independently insignificant. |
1 |
normal |
Information (6) |
Normal event signifying return to normal state. |
0 |
debugging |
Debug (7) |
Debugging messages. |
Configuring Syslog Pattern Matching
When you subscribe a destination profile to the Syslog alert group (see the “Configuring Alert Group Subscription” section), you can optionally specify a text pattern to be matched within each syslog message. If you configure a pattern, a Syslog alert group message will be sent only if it contains the specified pattern and meets the severity threshold. If the pattern contains spaces, you must enclose it in quotes (“”) when configuring it. You can specify up to five patterns for each destination profile.
Enabling Call Home
To enable the Call Home feature, perform this task:
|
|
|
Step 1 |
Router# configure terminal |
Enters configuration mode. |
Step 2 |
Router(config)# service call-home |
Enables the Call Home feature. |
Configuring Call Home Traffic Rate Limiting
To configure Call Home traffic rate limiting, perform this task:
|
|
|
Step 1 |
Router# configure terminal |
Enters configuration mode. |
Step 2 |
Router(config)# call-home |
Enters Call Home configuration submode. |
Step 3 |
Router(cfg-call-home)# rate-limit number |
(Optional) Specifies a limit on the number of messages sent per minute, from 1 to 60. The default is 20. |
This example shows how to configure Call Home traffic rate limiting:
Router# configure terminal
Router(config)# call-home
Router(config-call-home)# profile test
Router(cfg-call-home-profile)# rate-limit 20
Configuring Syslog Throttling
To enable call-home syslog message throttling, which avoids sending repetitive call-home syslog messages, perform this task:
|
|
|
Step 1 |
configure terminal
Router# configure terminal |
Enters configuration mode. |
Step 2 |
call-home
Router(config)# call-home |
Enters Call Home configuration submode. |
Step 3 |
syslog-throttling
Router(cfg-call-home)# syslog-throttling |
Enables call-home syslog message throttling, which avoids sending repetitive call-home syslog messages. By default, syslog message throttling is enabled. |
Testing Call Home Communications
Sending a Call Home Test Message Manually
To manually send a Call Home test message, perform this task:
|
|
Router# call-home test [ " test-message " ] profile name |
Sends a test message to the specified destination profile. The user-defined test message text is optional, but must be enclosed in quotes (“”) if it contains spaces. If no user-defined message is configured, a default message will be sent. |
Sending a Call Home Alert Group Message Manually
To manually trigger a Call Home alert group message, perform this task:
|
|
|
Step 1 |
Router# call-home send alert-group configuration [ profile name ] |
Sends a configuration alert group message to one destination profile if specified, or to all subscribed destination profiles. |
Step 2 |
Router# call-home send alert-group diagnostic { module number | slot/subslot | slot/bay_number | switch x module number } [ profile name ] |
Sends a diagnostic alert group message to the configured destination profile if specified, or to all subscribed destination profiles. You must specify the module or port whose diagnostic information should be sent. If a virtual switching system (VSS) is used, you must specify the switch and module. |
Step 3 |
Router# call-home send alert-group inventory [ profile name ] |
Sends an inventory alert group message to one destination profile if specified, or to all subscribed destination profiles. |
- Only the configuration, diagnostic, and inventory alert groups can be sent manually.
- When you manually trigger a configuration, diagnostic, or inventory alert group message and you specify a destination profile name, a message is sent to the destination profile regardless of the profile’s active status, subscription status, or severity setting.
- When you manually trigger a configuration or inventory alert group message and do not specify a destination profile name, a message is sent to all active profiles that have either a normal or periodic subscription to the specified alert group.
- When you manually trigger a diagnostic alert group message and do not specify a destination profile name, the command will cause the following actions:
–
For any active profile that subscribes to diagnostic events with a severity level of less than minor, a message is sent regardless of whether the module or interface has observed a diagnostic event.
–
For any active profile that subscribes to diagnostic events with a severity level of minor or higher, a message is sent only if the specified module or interface has observed a diagnostic event of at least the subscribed severity level; otherwise, no diagnostic message is sent to the destination profile.
Sending a Request for an Analysis and Report
To submit a request for report and analysis information from the Cisco Output Interpreter tool, perform this task:
|
|
|
Step 1 |
Router# call-home request output-analysis " show-command " [ profile name ] [ ccoid user-id ] |
Sends the output of the specified show command for analysis. The show command must be contained in quotes (“”). |
Step 2 |
Router# call-home request { config-sanity | bugs-list | command-reference | product-advisory } [ profile name ] [ ccoid user-id ] |
Sends the output of a predetermined set of commands such as the show running-config all, show version, and show module (standalone) or show module switch all (VS system) commands, for analysis. Specifies the type of report requested. |
- If a profile name is specified, the request will be sent to the profile. If no profile is specified, the request will be sent to the Cisco TAC profile. The recipient profile does not need to be enabled for the call-home request. The profile should specify the email address where the transport gateway is configured so that the request message can be forwarded to the Cisco TAC and the user can receive the reply from the Smart Call Home service.
- The ccoid user-id is the registered identifier of the Smart Call Home user. If the user-id is specified, the response will be sent to the email address of the registered user. If no user-id is specified, the response will be sent to the contact email address of the device.
- Based on the keyword specifying the type of report requested, the following information will be returned:
–
config-sanity —Information on best practices as related to the current running configuration.
–
bugs-list —Known bugs in the running version and in the currently applied features.
–
command-reference —Reference links to all commands in the running configuration.
–
product-advisory —Product Security Incident Response Team (PSIRT) notices, End of Life (EOL) or End of Sales (EOS) notices, or field notices (FN) that may affect devices in your network.
This example shows a request for analysis of a user-specified show command:
Router# call-home request output-analysis "show diagnostic result module all" profile TG
Sending the Output of a Command
To execute one or more CLI commands and send the command output through HTTP or e-mail, perform this task:
|
|
Router# call-home send { cli command | cli list } [ email email msg-format { long-text | xml } | http { destination-email-address email }] [ tac-service-request SR# ] |
Executes the CLI or CLI list and sends output via e-mail or HTTP.
- { cli command | cli command list }—Specifies the IOS command or list of IOS commands (separated by ‘;’). It can be any run command, including commands for all modules. The commands must be contained in quotes (“”).
- Without the email or http keywords, the output is sent in long-text format with the specified service request number to the Cisco TAC (attach@cisco.com).
- email email msg-format { long-text | xml }—The email keyword and an e-mail address sends the command output that address.
- http { destination-email-address email }—The http keyword sends the command output the to Smart Call Home backend server (URL specified in TAC profile) in XML format. To have the backend server forward the message to an e-mail address, specify destination-email-address email. The e-mail address, the service request number, or both must be specified.
- tac-service-request SR# —Specifies the service request number. The service request number is required if the e-mail address is not specified or if a Cisco TAC email address is specified.
|
The following example shows how to send the output of a command to a user-specified e-mail address:
Router# call-home send “show diag” email support@example.com
The following example shows the command output sent in long-text format to attach@cisco.com, with the SR number specified:
Router# call-home send “show version; show run” tac-service-request 123456
The following example shows the command output sent in XML message format to callhome@cisco.com:
Router# call-home send “show version; show run” email callhome@cisco.com msg-format xml
The following example shows the command output sent in XML message format to the Cisco TAC backend server, with the SR number specified:
Router# call-home send "show version; show run" http tac-service-request 123456
The following example shows the command output sent to the Cisco TAC backend server through the HTTP protocol and forwarded to a user-specified email address:
Router# call-home send "show version; show run" http destination-email-address user@company.com
Configuring the Smart Call Home Service
Smart Call Home Overview
For application and configuration information of the Cisco Smart Call Home service, see the “Quick Start for Smart Call Home” section of the Smart Call Home User Guide :
http://www.cisco.com/en/US/docs/switches/lan/smart_call_home/SCH31_Ch1.html#Quick_Start_for_Smart_Call_Home
The user guide includes configuration examples for sending Smart Call Home messages directly from your device or through a transport gateway (TG) aggregation point. You can use a TG aggregation point in cases requiring support for multiple devices or in cases where security requirements mandate that your devices may not be connected directly to the Internet.
Because the Smart Call Home service uses HTTPS as the transport method, you must also configure its CA as a trustpoint, as described in the Smart Call Home User Guide.
Tip
From the Smart Call Home website, you can download a basic configuration script to assist you in the configuration of the Call Home feature for use with Smart Call Home service and the Cisco TAC. The script also assists in configuring the trustpoint CA for secure communications with the Smart Call Home service. The script, provided on an as-is basis, can be downloaded from a link under the “Smart Call Home Resources” heading at: https://supportforums.cisco.com/community/netpro/solutions/smart_services/smartcallhome
Smart Call Home Service Prerequisites
- Verify that you have an active Cisco Systems service contract for the device being configured.
- Verify that you have IP connectivity to the Cisco HTTPS server.
- Obtain the latest Cisco Systems server security certificate.
Enabling the Smart Call Home Service
The CiscoTAC-1 profile is predefined in the Call Home feature to communicate using email to the backend server for the Smart Call Home service. The URL to the Cisco HTTPS backend server is also predefined. This profile is inactive by default.
Unlike other profiles that you can configure in Call Home to support both transport methods, the CiscoTAC-1 profile can only use one transport method at a time. To use this profile with the Cisco Smart Call Home HTTPS server, you must change the transport method from email to HTTP and enable the profile. In addition, you must minimally specify a contact email address and enable the Call Home feature.
To enable the Smart Call Home service, perform this task:
|
|
|
Step 1 |
Router# configure terminal |
Enters global configuration mode. |
Step 2 |
Router(config)# call-home |
Enters call home configuration mode. |
Step 3 |
Router(config-call-home)# profile CiscoTAC-1 |
Enters call home destination profile configuration mode for the CiscoTAC-1 destination profile. |
Step 4 |
Router(cfg-call-home-profile)# destination transport-method http |
(Required for HTTPS) Configures the message transport method for http. |
Step 5 |
Router(cfg-call-home-profile)# active |
Enables the destination profile. |
Step 6 |
Router(cfg-call-home-profile)# exit |
Exits call home destination profile configuration mode and returns to call home configuration mode. |
Step 7 |
Router(cfg-call-home)# contact-email-addr customer_email_address |
Assigns the customer’s email address. Enter up to 200 characters in email address format with no spaces. |
Step 8 |
Router(cfg-call-home)# exit |
Exits call home configuration mode and returns to global configuration mode. |
Step 9 |
Router(config)# service call-home |
Enables the Call Home feature. |
Step 10 |
Router(config)# exit |
Exits global configuration mode and returns to privileged EXEC mode. |
Step 11 |
Router# copy running-config startup-config |
Saves the configuration. |
This example shows how to enable the Smart Call Home service:
Router(cfg-call-home-profile)# destination transport-method http
Router(cfg-call-home-profile)# active
Router(cfg-call-home-profile)# exit
Router(cfg-call-home)# contact-email-addr username@example.com
Router(cfg-call-home)# exit
Router(config)# service call-home
Router# copy running-config startup-config
Declare and Authenticate a CA Trustpoint
To declare and authenticate the Cisco server security certificate and establish communication with the Cisco HTTPS server for Smart Call Home service, perform this task:
|
|
|
Step 1 |
Router# configure terminal |
Enters global configuration mode. |
Step 2 |
Router(config)# crypto pki trustpoint trustpoint_name |
Declares a CA trustpoint on your router and enters CA trustpoint configuration mode. |
Step 3 |
Router(ca-trustpoint)# enrollment terminal |
Specifies a manual cut-and-paste method of certificate enrollment. |
Step 4 |
Router(ca-trustpoint)# exit |
Exits CA trustpoint configuration mode and returns to global configuration mode. |
Step 5 |
Router(config)# crypto pki authenticate trustpoint_name Enter the base 64 encoded CA certificate. End with a blank line or the word "quit" on a line by itself |
Authenticates the named CA. The CA name should match the trustpoint_name specified in the crypto pki trustpoint command. At the prompt, paste the security certificate text. |
Step 6 |
quit % Do you accept this certificate? [yes/no]: |
Specifies the end of the security certificate text. |
Step 7 |
yes |
Confirms acceptance of the entered security certificate. |
Step 8 |
Router(config)# end |
Exits global configuration mode and returns to privileged EXEC mode. |
Step 9 |
Router# copy running-config startup-config |
Saves the configuration. |
The example shows how to declare and authenticate the Cisco server security certificate and establish communication with the Cisco HTTPS server for Smart Call Home service:
Router# configure terminal
Router(config)# crypto pki trustpoint cisco
Router(ca-trustpoint)# enrollment terminal
Router(ca-trustpoint)# exit
Router(config)# crypto pki authenticate cisco
Enter the base 64 encoded CA certificate.
End with a blank line or the word "quit" on a line by itself
(CA certificate text not shown)
Certificate has the following attributes:
Fingerprint MD5: A2339B4C 747873D4 6CE7C1F3 8DCB5CE9
Fingerprint SHA1: 85371CA6 E550143D CE280347 1BDE3A09 E8F8770F
% Do you accept this certificate? [yes/no]: yes
Trustpoint CA certificate accepted.
% Certificate successfully imported
Router# copy running-config startup-config
Start Smart Call Home Registration
To start the Smart Call Home registration process, perform this task:
|
|
Router# call-home send alert-group inventory profile CiscoTAC-1 |
Manually sends an inventory alert group message to the CiscoTAC-1 destination profile. |
After the Smart Call Home service is registered, you will receive an email from Cisco Systems. Follow the instructions in the email. The instructions include these procedures:
- To complete the device registration, launch the Smart Call Home web application at the following URL:
https://tools.cisco.com/sch/
- Accept the Legal Agreement.
- Confirm device registration for Call Home devices with pending registration.
For more information about using the Smart Call Home web application, see the Smart Call Home User Guide. This user guide also includes configuration examples for sending Smart Call Home messages directly from your device or through a transport gateway (TG) aggregation point. You can use a TG aggregation point in cases requiring support for multiple devices or in cases where security requirements mandate that your devices must not be connected directly to the Internet.