Appendix A. Cisco CNS Configuration Engine

Table Of Contents

Cisco CNS Configuration Engine

Before You Begin

Setting Up the Cisco Configuration Engine

Configuring the CNS Configuration Engine

Cisco CNS Configuration Engine

This appendix provides information about what you need to do to use the Cisco CNS Configuration Engine (CNS CE) server in conjunction with Cisco BACBA (BACBA).

The Cisco Configuration Engine is a self-contained network management device that acts as a configuration service for automating the deployment and management of network devices and services. The Cisco Configuration Engine series is the hardware platform for the Configuration Engine software.

Each configuration engine manages a group of Cisco IOS devices (routers) and services they deliver, storing their configurations and delivering them as needed. The Configuration Engine automates initial configurations and configuration updates by generating device-specific configuration changes, sends them to the device, executes the configuration change, and logs the results.

The Configuration Engine is a web-based system for automatically distributing configuration files to network devices (Cisco 7200, 7400, and Cisco 10000 series routers) running Cisco IOS software.

This appendix includes the following sections:

• "Before You Begin" section

• "Setting Up the Cisco Configuration Engine" section

• "Configuring the CNS Configuration Engine" section

Before You Begin

Read the following information before you set up the Cisco Configuration Engine:

•To install the Cisco Configuration Engine successfully through the BAC software scripts, check the /etc/system directory to ensure that the following variables and minimum values are present:

SET shmsys:shminfo_shmmax = 131072000
SET semsys:seminfo_semmns = 13500
SET semsys:seminfo_semume = 100
SET semsys:seminfo_semmni = 500

•Make certain that /etc/password directory has root running with sh and not csh shell.

•To integrate the Cisco Configuration Engine with BACBA, read the following sections and perform the steps listed:

– "Setting Up the Cisco Configuration Engine" section

Setting Up the Cisco Configuration Engine

This section describes how to set up the Cisco Configuration Engine and provides prerequisites that you must perform before you set up the Cisco Configuration Engine.

Read these important notes before you begin to set up the Cisco Configuration Engine:

•Before you run the Configuration Engine setup, make certain that you have the following LDAP files in the /usr/bin directory:

–/usr/bin/ldapadd

–/usr/bin/ldapdelete

–/usr/bin/ldapmodify

–/usr/bin/ldapmodrdn

–/usr/bin/ldapsearch

–/usr/bin/ldaplist

Note If your machine does not have these Ldap files then copy them from another machine or find them on the Solaris CD or the Sun web site.

•Using the Cisco Configuration Engine features with BACBA is optional. The Configuration Engine product is not included with the BACBA software.

To set up the Cisco Configuration Engine, follow these steps:

Step 1 Ensure that a CNS Configuration Engine series appliance is running and functioning properly.

Note Before you start rvd or rvrd, you must include the /opt/CSCOesdk/bin directory in your PATH environment variable. If the Cisco Configuration Engine and the Cisco SDK (software development toolkit is is designed to enable Cisco development to develop applications that use Cisco technologies) are located in the same subnet, then you must use rvd and no configuration is required. If they are located in different subnets, then use rvrd.

For information on how to configure TIBCO/Rendezvous rvrd, refer to the Configuration Engine documentation at:

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/cns_note/rel_3_0/index.htm

Step 2 Before you provision an integrated access device (IAD) through HTTP (using the Cisco Configuration Engine), the following IAD configuration is required:

a. cns config partial <Cisco Configuration Engine ip address>

b. cns id <mgmt interface> ipaddress event

c. cns event <Cisco Configuration Engine ip address> keepalive 240 5

Note You can find detailed information on how to set up the Cisco Configuration Engine in the Cisco Configuration Engine Manual. Verify the Cisco Configuration Engine is working. Ensure that the Cisco Configuration Engine device is set up and is pingable with its IP address and hostname.

Configuring the CNS Configuration Engine

BACBA uses the optional Cisco Configuration Engine appliance for aggregator provisioning.To allow these operations to work successfully,ensure that the Cisco Configuration Engine appliance is running and functioning properly.

Refer to the Cisco Configuration Engine Software Installation and Console Setup Guide for detailed information at:

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/cns/ce/rel13/index.htm

Note The Cisco Configuration Engine that BAC is using supports SSH (Secure Shell protocol) 1.5/2.0. Secure Shell (SSH) is a server feature that provides a secure, encrypted remote connection to a router.