Installing Cisco Prime Network Services Controller

Installing Cisco Prime Network Services Controller
Installing Cisco Prime Network Services
Controller
This chapter contains the following sections:
• Information About the Cisco PNSC , page 1
• Installation Requirements, page 1
• ESXi Server Requirement, page 7
• VMware Installation Overview, page 7
• Installing Prime Network Services Controller Using the OVA Image, page 7
• Installing Prime Network Services Controller Using an ISO Image, page 9
Information About the Cisco PNSC
The Cisco Prime Network Services Controller (Cisco PNSC) is a virtual appliance that provides centralized
device and security policy management for Cisco virtual services. Designed to support enterprise and
multiple-tenant cloud deployments, the Cisco PNSC provides transparent, seamless, and scalable management
for securing virtualized data center and cloud environments.
Installation Requirements
Cisco PNSC System Requirements
Requirement
Description
Virtual Appliance
Four Virtual CPUs
1.8 GHz for each virtual CPU
Memory
4 GB RAM
Cisco VSG for VMware vSphere, Release 5.2(1)VSG2(1.4) and Cisco Prime NSC, Release 3.4.1d Installation and
Upgrade Guide
1
Installing Cisco Prime Network Services Controller
Cisco PNSC System Requirements
Requirement
Description
Disk Space
One of the following, depending on InterCloud
functionality:
• With InterCloud functionality, 220 GB on
shared network file storage (NFS) or storage
area network (SAN), and configured on two
disks as follows:
◦Disk 1: 20 GB
◦Disk 2: 200 GB
• Without InterCloud functionality, 40 GB on
shared NFS or SAN, and configured on two
disks as follows:
◦Disk 1: 20 GB
◦Disk 2: 20 GB
Management interface
One management network interface
Processor
x86 Intel or AMD server with 64-bit processor listed
in the VMware compatibility matrix.
Note
You can find VMware compatibility guides
at http://www.vmware.com/resources/
compatibility/search.php.
VMware
VMware vSphere
5.1, 5.5, and 6.0 with VMware ESXi (English only)
VMware vCenter
5.1, 5.5, and 6.0 (English only)
Interfaces and Protocols
HTTP/HTTPS
—
Lightweight Directory Access Protocol (LDAP)
—
Intel VT
Intel Virtualization Technology (VT)
Enabled in the BIOS
Cisco VSG for VMware vSphere, Release 5.2(1)VSG2(1.4) and Cisco Prime NSC, Release 3.4.1d Installation
and Upgrade Guide
2
Installing Cisco Prime Network Services Controller
Hypervisor Requirements
Hypervisor Requirements
Cisco PNSC is a multi-hypervisor virtual appliance that can be deployed on VMware vSphere.
For more information on VMware compatibility with your hardware platform, see the VMware Compatibility
Guide.
Table 1: Hypervisor Requirements
Requirement
Description
VMware
Note
VMware vSphere
5.1, 5.5, and 6.0 with VMware ESXi (English only)
VMware vCenter
5.1, 5.5, and 6.0 (English only)
Cisco PNSC running as a virtual machine with version 3.4.1b and later can be hosted on VMware vSphere
ESXi 6.0 hosts that are managed by VMware vCenter Server 6.0.
Web-Based GUI Client Requirements
Requirement
Description
Operating system
Any of the following:
• Microsoft Windows
• Apple Mac OS
Cisco VSG for VMware vSphere, Release 5.2(1)VSG2(1.4) and Cisco Prime NSC, Release 3.4.1d Installation and
Upgrade Guide
3
Installing Cisco Prime Network Services Controller
Firewall Ports Requiring Access
Requirement
Description
Browser
Any of the following browsers:
• Internet Explorer 10.0 or higher
• Mozilla Firefox 26.0 or higher
• Google Chrome 32.0 or higher
Note
Note
Flash Player
If you are running Firefox or IE and do not
have Flash, or you have a version of Flash
that is older than 11.9, a message displays
asking you to install Flash and provides a
link to the Adobe website.
Before using Google Chrome with Cisco
PNSC, you must disable the Adobe Flash
Players that are installed by default with
Chrome. For more information, see
Configuring Chrome for Use with Cisco
PNSC.
Adobe Flash Player plugin 11.9 or higher
Firewall Ports Requiring Access
Requirement
Description
22
TCP
80
HTTP/TCP
443
HTTPS
843
Adobe Flash
Information Required for Configuration and Installation
Before installation, collect the following information:
Required Information
Your Information/Notes
For Preinstallation Configuration
ISO or OVA image location
ISO or OVA image name
Cisco VSG for VMware vSphere, Release 5.2(1)VSG2(1.4) and Cisco Prime NSC, Release 3.4.1d Installation
and Upgrade Guide
4
Installing Cisco Prime Network Services Controller
Shared Secret Password Criteria
Required Information
Your Information/Notes
Network / Port Profile for VM management 1
VM name
VMware datastore location
For Prime Network Services Controller Installation
IP address
Subnet mask
Hostname
Domain name
Gateway IP address
DNS server IP address
NTP server IP address
Admin password
Shared secret password for communication between
Prime Network Services Controller and managed
VMs. (See Shared Secret Password Criteria, on page
5.)
1 The management port profile is the same port profile that is used for Cisco Virtual Supervisor Module (VSM). The port profile is configured in VSM and used
for the Prime Network Services Controller management interface.
Shared Secret Password Criteria
A shared secret password is a password that is known to only those using a secure communication channel.
Passwords are designated as strong if they cannot be easily guessed for unauthorized access. When you set a
shared secret password for communications between , VSG, ASA 1000V, and VSM, adhere to the following
criteria for setting valid, strong passwords:
• Do not include special characters or spaces.
• Make sure your password contains the characteristics of strong passwords and avoids the characteristics
of weak passwords as described in the following table:
Cisco VSG for VMware vSphere, Release 5.2(1)VSG2(1.4) and Cisco Prime NSC, Release 3.4.1d Installation and
Upgrade Guide
5
Installing Cisco Prime Network Services Controller
Configuring Chrome for Use with Prime Network Services Controller
Strong Passwords
• At least eight characters.
• Contain characters from at least three of the
following classes: lowercase letters, uppercase
letters, and numbers.
Weak Passwords
• Consecutive alphanumeric characters, such as
abcd or 123.
• Characters repeated three or more times, such
as aaabbb.
• A variation of the word Cisco, such as cisco,
ocsic, or one that changes the capitalization of
letters in the word Cisco.
• The username or the username in reverse.
• A permutation of characters present in the
username or Cisco.
Examples of strong passwords are:
• If2CoM18
• 2004AsdfLkj30
• Cb1955S21
• Es1955Ap
Configuring Chrome for Use with Prime Network Services Controller
To use Chrome with Prime Network Services Controller, you must disable the Adobe Flash Player plugins
that are installed by default with Chrome.
Note
Because Chrome automatically enables Adobe Flash Player plugins each time the system reboots, you
must perform this procedure each time your client machine reboots.
Procedure
Step 1
In the Chrome URL field, enter chrome://plugins.
Step 2
Step 3
Step 4
Step 5
Click Details to expand all the files associated with each plugin.
Locate the Adobe Flash Player plugins, and disable each one.
Download and install Adobe Flash Player plugin version 11.9 or higher.
Close and reopen Chrome before logging in to Prime Network Services Controller.
Cisco VSG for VMware vSphere, Release 5.2(1)VSG2(1.4) and Cisco Prime NSC, Release 3.4.1d Installation
and Upgrade Guide
6
Installing Cisco Prime Network Services Controller
ESXi Server Requirement
ESXi Server Requirement
You must set the clock to the correct time on all ESXi servers that will run Cisco PNSC, ASA 1000V instances,
Cisco VSG, or VSM. If you do not set the correct time on the server, the Cisco PNSC CA certificate that is
created when the Cisco PNSC VM is deployed might have an invalid time stamp. An invalid time stamp can
prevent you from successfully registering ASA 1000V instances to the Cisco PNSC.
After you set the clock to the correct time on all ESXi servers that run the Cisco PNSC, you can, as an option,
set the clock on the Cisco PNSC as follows:
• If you set the clock manually, be sure to enter the correct time zone as a Coordinated Universal Time
(UTC) offset.
• If you set the clock by synchronizing with the Network Time Protocol (NTP), you can select the UTC
time zone.
VMware Installation Overview
You can install Prime Network Services Controller on VMware by using either an ISO or an OVA image.
The installation time varies from 10 to 20 minutes, depending on the host and the storage area network load.
To install Prime Network Services Controller on VMware, complete the following tasks:
Task
Comments
1. Configuring VMware for Prime Network Services Required for ISO installations only.
Controller, on page 10
2. Installing Prime Network Services Controller
Use the procedure appropriate for your environment:
• Installing Prime Network Services Controller
Using the OVA Image, on page 7
• Installing Prime Network Services Controller
Using an ISO Image, on page 9
3. Performing VMware Post-Installation Tasks
Required for all installations.
Installing Prime Network Services Controller Using the OVA
Image
This procedure describes how to deploy the Prime Network Services Controller OVA image on VMware.
Before You Begin
• Set your keyboard to United States English.
Cisco VSG for VMware vSphere, Release 5.2(1)VSG2(1.4) and Cisco Prime NSC, Release 3.4.1d Installation and
Upgrade Guide
7
Installing Cisco Prime Network Services Controller
Installing Prime Network Services Controller Using the OVA Image
• Confirm that the Prime Network Services Controller OVA image is available from the VMware vSphere
Client.
• Make sure that all system requirements are met as specified in System Requirements.
• Gather the information identified in Information Required for Configuration and Installation, on page
4.
Procedure
Step 1
Step 2
Step 3
Step 4
Using the VMware vSphere Client, log in to the vCenter server.
Choose the host on which to deploy the Prime Network Services Controller VM.
Choose File > Deploy OVF Template.
In the wizard, provide the information as described in the following table:
Screen
Action
Source
Choose the Prime Network Services Controller OVA.
OVF Template Details
Review the details.
End User License
Agreement
Review the agreement and click Accept.
Name and Location
Enter a name and choose a location for the template.
Deployment Configuration Choose Installer.
Datastore
Select the data store for the VM. The storage can be local or shared remote,
such as NFS or SAN.
Disk Format
Choose either Thin provisioned format or Thick provisioned format to store
the VM virtual disks.
Network Mapping
Choose the management network port group for the VM.
Properties
Address any errors that are indicated in red colored text below a selection box. You can enter placeholder
information as long as your entry meets the field requirements.
A. IP Address
VM management IP address.
B. IP Netmask
VM subnet mask.
C. Gateway
Gateway IP address.
Cisco VSG for VMware vSphere, Release 5.2(1)VSG2(1.4) and Cisco Prime NSC, Release 3.4.1d Installation
and Upgrade Guide
8
Installing Cisco Prime Network Services Controller
Installing Prime Network Services Controller Using an ISO Image
Screen
Action
D. DNS
• VM hostname
• VM domain
• DNS server IP address
E. NTP
NTP server IP address.
F. Operation Mode
• Standalone—Operates as a standalone VM.
• Orchestrator—Integrates through an orchestrator with a northbound
application.
Note
G. Passwords
Prime Network Services Controller does not support Orchestrator
mode.
• Administrator password
• Shared secret password
H. Restore
You can safely ignore the Restore fields.
Ready to Complete
Review the deployment settings.
Caution
Step 5
Step 6
Step 7
Any discrepancies can cause VM booting issues. Carefully review
the IP address, subnet mask, and gateway information for accuracy.
Click Finish.
A progress indicator shows the task progress until Prime Network Services Controller is deployed.
After Prime Network Services Controller is successfully deployed, click Close.
Power on the Prime Network Services Controller VM.
Installing Prime Network Services Controller Using an ISO
Image
To install Prime Network Services Controller in a VMware environment using an ISO image, complete the
tasks described in the following topics:
1 Configuring VMware for Prime Network Services Controller, on page 10
2 Installing Prime Network Services Controller Using the ISO Image, on page 11
Cisco VSG for VMware vSphere, Release 5.2(1)VSG2(1.4) and Cisco Prime NSC, Release 3.4.1d Installation and
Upgrade Guide
9
Installing Cisco Prime Network Services Controller
Configuring VMware for Prime Network Services Controller
Configuring VMware for Prime Network Services Controller
Before you install Prime Network Services Controller on VMware using an ISO image, you must configure
a VM for Prime Network Services Controller. This procedure describes how to configure the VM so that you
can install Prime Network Services Controller on it.
Before You Begin
• Confirm that the system requirements have been met (see Requirements Overview).
• Gather the information required for configuration as identified in Information Required for Configuration
and Installation, on page 4.
Procedure
Step 1
Step 2
Step 3
Step 4
Download a Prime Network Services Controller ISO image to your client machine.
Open the VMware vSphere Client.
Right-click the host on which to install the ISO image, and then choose New Virtual Machine.
Create a new VM by providing the information as described in the following table:
Screen
Action
Configuration
Choose Custom.
Name and Location
Enter a name and choose a location for the VM.
Storage
Choose the data store.
Virtual Machine
Version
Choose Version 8.
Guest Operating
System
Choose Linux and Red Hat Enterprise Linux 5 (64-bit).
CPUs
Set the number of virtual sockets to 4.
Memory
Set the memory to 4 GB.
Network
1 Set the number of NICs to 1. A single NIC is required for Prime Network Services
Controller.
2 Choose a NIC.
3 From the Adapter drop-down list, choose E1000. Prime Network Services
Controller supports only E1000 adapters.
SCSI Controller
Choose LSI Logic Parallel.
Select a Disk
Choose Create a new virtual disk.
Cisco VSG for VMware vSphere, Release 5.2(1)VSG2(1.4) and Cisco Prime NSC, Release 3.4.1d Installation
and Upgrade Guide
10
Installing Cisco Prime Network Services Controller
Installing Prime Network Services Controller Using the ISO Image
Screen
Action
Create a Disk
Advanced Options
Step 5
Step 6
Step 7
Step 8
Step 9
1 Disk Size—Enter a minimum of 20 GB.
2 Disk Provisioning—Choose Thin Provision or Thick Provision.
3 Location—Specify the location of the data store.
Specify options as needed.
In the Ready to Complete screen, review the information for accuracy, check the Edit the Virtual Machine
Settings Before Completion check box, and then click Continue.
In the Virtual Machine Properties dialog box in the Hardware tab, do the following:
a) Click Memory and in the Memory Size field, choose 4 GB.
b) Click CPUs and in the Number of Virtual Sockets field, choose 4.
c) Click New Hard Disk and then click Add to create a new hard disk. The disk requires a minimum of
20 GB.
d) After you supply the information in the Add Hardware Wizard, click Finish to create the new disk and to
return to the Virtual Machine Properties dialog box.
In the Options tab, choose Boot Options, check the Force BIOS Setup checkbox, and then click Finish.
After the new VM is created, power it on.
Mount the ISO to the VM CD ROM drive as follows:
a) Right-click the VM and choose Open Console.
b) From the VM console, click Connect/Disconnect the CD/DVD Devices of the virtual machine.
c) Choose CD/DVD Drive 1.
d) Choose Connect to ISO Image on Local Disk.
e) Choose the ISO image that you downloaded in Step 1.
What to Do Next
Install Prime Network Services Controller as described in Installing Prime Network Services Controller Using
the ISO Image, on page 11.
Installing Prime Network Services Controller Using the ISO Image
This procedure describes how to install the ISO image on a VM that has been configured for Prime Network
Services Controller.
Before You Begin
Confirm the following items:
• All system requirements are met as specified in System Requirements.
• You have the information identified in Information Required for Configuration and Installation, on
page 4.
Cisco VSG for VMware vSphere, Release 5.2(1)VSG2(1.4) and Cisco Prime NSC, Release 3.4.1d Installation and
Upgrade Guide
11
Installing Cisco Prime Network Services Controller
Installing Prime Network Services Controller Using the ISO Image
• You have configured the hypervisor for the Prime Network Services Controller installation procedure.
• A VM has been created for Prime Network Services Controller and has network access.
• You can access the VM console.
Procedure
Step 1
Step 2
Step 3
Step 4
Open the VM console if it is not already open.
If you have just finished configuring the hypervisor, the Prime Network Services Controller installer displays
within a few minutes.
In the Network Configuration screen, click Edit in the Network Devices area, enter the IP address and netmask
for the Prime Network Services Controller VM, and click OK.
In the Network Configuration area, enter the hostname, domain name, and IP addresses for the gateway, DNS
server, and NTP server.
In the Modes screen, choose the required modes, and click Next:
• Prime Network Services Controller Operation Mode: Choose Standalone. This release of Prime Network
Services Controller is available in Standalone mode only.
• Prime Network Services Controller Configuration:
◦Prime Network Services Controller Installation—Choose if this is the initial Prime Network Services
Controller installation on the VM.
◦Restore Prime Network Services Controller—Choose to restore a previous Prime Network Services
Controller installation.
Step 5
In the Administrative Access screen, enter the administrator and shared secret passwords with confirming
entries.
For information on creating a strong password, see Shared Secret Password Criteria, on page 5.
If you configure a weak shared secret password, no error message is generated during entry here, but
the shared secret password is not usable when the VM is started during the installation process.
In the Summary screen, confirm that the information is accurate, and then click Finish.
Prime Network Services Controller installs on the VM. This takes a few minutes.
When prompted, disconnect from the media source and then click Reboot.
Prime Network Services Controller is then installed on the VM.
To confirm that Prime Network Services Controller is accessible, connect to Prime Network Services Controller
through the console for the CLI or a browser for the GUI.
Note
Step 6
Step 7
Step 8
Cisco VSG for VMware vSphere, Release 5.2(1)VSG2(1.4) and Cisco Prime NSC, Release 3.4.1d Installation
and Upgrade Guide
12
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertising