cc/td/doc/product/rtrmgmt/bacbba/bacbba25
hometocprevnextglossaryfeedbacksearchhelp
PDF

Table of Contents

Release Notes for Broadband Access Center Release 2.5
Contents
Introduction
System Requirements
New Software Features
Installation Notes
Limitations and Restrictions
Caveats
Related Documentation
Obtaining Documentation
Obtaining Technical Assistance

Release Notes for Broadband Access Center Release 2.5


May 20, 2003

These release notes are for the Cisco Broadband Access Center (BAC) for Broadband Aggregation, Release 2.5, software. This document describes system requirements, software features, implementation notes, caveats, and related documentation.

Contents

These release notes cover the following topics:

Introduction

Cisco Broadband Access Center (BAC) enables you to provision devices, resources, services, and subscribers easily. You can implement BAC in small to very large scale deployments. The distributed nature of the software supports its deployment in a variety of environments and with a variety of services and technologies.

System Requirements

BAC has the following system requirements:

Hardware Supported

BAC supports the hardware described in Table 1.

Table 1   Supported Devices

Supported Device Cisco IOS Version

Cisco 7206 router

12.2(15)B, offers DES and 3DES security encryption

Cisco 7401 router

12.2(15)B, offers DES and 3DES security encryption

Cisco 10000 router

12.2(15)BZ

Supported Network Servers

BAC integrates with the network servers described in Table 2, although these servers are not bundled with BAC.

Table 2   Supported Network Servers

Server Hardware Platform Software Version

Cisco IE2100 Configuration Engine

IE2100 (IBM X330)

1.3.1

Cisco CNS Access Registrar (RADIUS server)

Netra compatible with Solaris 8

3.0 r2

Interlink Merit (RADIUS server)

Netra compatible with Solaris 8

5.1.3

Cisco CNS Network Registrar (DHCP and DNS server)

Ultra compatible with Solaris 8

6.0

New Software Features

With Broadband Access Center Release 2.5, you can:

Installation Notes

The procedure for installing BAC is documented in the Broadband Access Center Installation and Configuration Guide. This section describes the special circumstance s of extracting the installation script from the Cisco e-kit abd for accessing the Web UI.

Extracting the Installation Script Notes

If you are using the Cisco e-kit, you need to extract the installation script as follows:


Step 1   At the UNIX prompt enter:

> ./RUN_THIS_SCRIPT. sh

The system displays the following message:

This is the
"Broadband Access Center for VOIP, DSL, T1 and Broadband Aggregation v2.5"
Software Distribution unpacking utility.

The fully expanded installer and tar archive will require: 825000KB.

The script checks to see if you have sufficient space for the expanded installer and tar archive.

Step 2   Follow the instructions that the script provides, as show in this example:

To unpack the distribution later, or in a different directory,
enter <CTRL C> now.

Use the following command sequence to unpack the distribution manually.

cd /where_you have_enough_space
/where_this_kit_is/BACBA_25/.gtar -xzvf /where_this_kit_is/BACBA_25/BACBA_25_Solaris gtar.gz

Otherwise, the "BACBA_25" software distribution will be unpacked in 15 seconds.

Unpacking the BACBA_25 electronic software distribution...

The unpacking operation was successful.

The product may now be installed...

Step 3   Enter the installation path for the product; for example:

> /xxxx/BACBA_25/BACBA_25_Solaris/Solaris

Note    If you are installing from CDROM, product path is /cdrom/cdrom0/Solaris.

Step 4   Refer to the Broadband Access Center Installation and Configuration Guide for the installation procedure.



Web Server Notes

When you install the BAC server, you are also installing a Web server. The server starts automatically when you run ./bacStartup all. Before you can access the Web UI, however, if you have installed the Java Virtual Machine, you might need to reconfigure Internet Explorer as follows:


Step 1   Open Internet Explorer.

Step 2   From the Tools menu, select Internet Options. The browser displays the Internet Options dialog box.

Step 3   Click Advanced. The browser displays a list of advanced settings.

Step 4   Scroll through the list to determine if this setting is checked:

Java (Sun): Use Java <some version number> for <applet> (requires restart)

Step 5   If it is checked, then click to disable this setting.

Step 6   Click Apply and OK.

Step 7   Close Internet Explorer and then re-open it.

Step 8   To access the Web UI, in the Address field of the browser enter the URL for BAC; for example, enter the following:

http:// <web_servername>:8888/bac



Limitations and Restrictions

The following are limitations and restrictions with BAC:

In the following example, a router encounters a duplicate VLAN ID and generates the following message:

"%Configureation of multiple subinterfaces of the same main interface with the same VID (xx) is not permitted.
This VID is already configured on interface FastEthernet0/0.xx"

BAC receives this as a warning and treats the operation as a success, but the VLAN ID was not configured on the router. Thus, the operation failed. To fix the problem, update the keyword in the /opt/CSCObacss/common/IOSParser.config file. In the VLAN ID example, the update would appear as follows:

TG_PARSER=ON
TG_SUCCESS_MESSAGE_EXPRESSION=config terminal
TG_SUCCESS_MESSAGE_EXPRESSION=ip multicast-routing
TG_SUCCESS_MESSAGE_EXPRESSION=Not all config
TG_WARNING_MESSAGE_EXPRESSION=Invalid port
TG_WARNING_MESSAGE_EXPRESSION=Invalid ip
TG_WARNING_MESSAGE_EXPRESSION=already exist
TG_ERROR_MESSAGE_EXPRESSION=wrong
TG_ERROR_MESSAGE_EXPRESSION=Incomplete
TG_ERROR_MESSAGE_EXPRESSION=Must remove priority
TG_ERROR_MESSAGE_EXPRESSION=Invalid input
TG_ERROR_MESSAGE_EXPRESSION=Configuring vc
TG_ERROR_MESSAGE_EXPRESSION=Bad mask
TG_ERROR_MESSAGE_EXPRESSION=Inconsistent address and mask
TG_ERROR_MESSAGE_EXPRESSION=Overlaps
TG_ERROR_MESSAGE_EXPRESSION=already in group
TG_ERROR_MESSAGE_EXPRESSION=using old map-list
TG_ERROR_MESSAGE_EXPRESSION=cannot delete
TG_ERROR_MESSAGE_EXPRESSION=No matching route
TG_ERROR_MESSAGE_EXPRESSION=Invalid access list name
TG_ERROR_MESSAGE_EXPRESSION=VID is already configured ---> define keyword treated it as failure!!

The VcSystemProperties.xml file affects the following:

The VcSupportedDeviceList.xml file contains all information related to device creation. The model list field and subtype field obtain their values from this file. This file also determines whether a device supports SSH or discovery.

To refresh servers, follow these steps:


Step 1   Click the Tools tab. The tools page displays in the content area of the main window.

Step 2   Click Refresh Servers.



Caveats

CSCdx59874—The BAC API does not support implementing multiple instances of network address translation (NAT) on the same interfaces, whether they are inside or outside interfaces. While you can add multiple NATs (with different names and ranges) to an interface, you cannot remove them.

The workaround for this situation is to do one of the following:

CSCdx63539—If you download a configuration to a router that contains an incorrect ATM subinterface, then the download configuration pattern through Telnet is wrong. Ultimately, Telnet times out, returning a message that it could not connect to the router.

CSCdy09364—A problem occurs if different roles share the same virtual private dial-up network (VPDN) template. For the PTA-PPPoEoA, PTA-PPPoEoE and PTA-PPPoEoVLAN roles, you can select IPPool or DHCP. For the LAC-PPPoEoA, LAC-PPPoEoE, LAC-PPPoEoVLAN roles, these features are not available, but are still displayed. The same problem exists when you add a virtual template service feature.

You can have only one VPDN on a router regardless of the number roles that you add. Since the router can act as either a PTA or a LAC, VPDN prompts the user to select one of three options:

1) Local Pool
2) DHCP
3) None

You should carefully plan the number of roles you add to a router. For example, you might start with LAC-PPPoEoA. When you create the VPDN, you do not need to provide an IP address. However, you can still select either local pool or DHCP because the IP address might be required later for PTA.

CSCdy19994—When you select the console method of downloading device configuration, the Service Provisioning Manager component of the BAC software clears the console port before performing the download. When you log in to the router, the console displays a considerable amount of garbage characters before displaying the new running configuration.

This is most likely to occur when your terminal server is configured for modem callout. To turn off modem callout, do the following:


Step 1   Establish a Telnet session to the terminal server.

Step 2   At the command line, enter the following:

config t
line 1 16 ---> all available ports
no modem callout
no model ri
no exec
exit
exit
wr mem



CSCdy20943—The Service Provisioning Manager (SPM) component of BAC rolls back download transactions when either the router returns an error or the IE2100 syntax checker returns an error. This is due to a limitation of the CNS Agent, which cannot distinguish between an IE2100 syntax error and a router error.

CSCdy24503—If you create a new profile, be sure to create it in the /Default/ServiceProfiles directory. If you create a profile in a different directory, you cannot see the profile in the Web UI.

CSCdy25967—When you view a service, you need to expand the role folder and then select the service features it contains.

CSCdy40442—When you attempt to download a VLAN range using HTTP, Cisco IOS reports an error. The other download methods operate properly.

CSCdy72787—To use SSH security to communicate with a router, make sure that, when you add the device using the BAC Web UI, the hostname you enter matches the hostname of an SSH-enabled router. SSH uses the hostname to generate an encryption key. If the hostnames do not match, SSH will not authenticate transmissions to the router.

CSCdy88590—The BAC Web UI has a paging feature that enables you to choose whether to display 10 or 20 records at time. You can also pick the column of data BAC uses to sort these records for display. When you choose the column of data that you want to use for the sort, BAC displays it in alphanumeric order; for example:

user1
user10
user11
user12
user2
user3
user4

CSCdz40721—When you are setting up quality of service features, BAC checks the following dependencies:

The BACAdmin user can assign different ISPs to each of these resources. For example, the policy map might be associated with ISP1 and the service might be associated with ISP2. If a user belonging to a group at ISP2 logs in, the policy map field for the service is empty. To avoid this situation, make sure that the same ISP is associated with the service, policy map, class map, and access list.

CSCea01239—The BAC Web UI provides a default value for QoS Rate that is not valid for all device types. You may encounter a download error if the QoS rate is out of range for a particular device. Review the QoS rate ranges for your routers.

CSCea28696—Data files are not required for the templates associated with Cisco and IETF tunnels. When you are working with these templates, however, you might encounter an error message such as :

May 25 10:12:48 PST::999999::ERROR::CSTMExternalIDLImplgetVariables()::The data
file for template /Broadband/aggregator-add-cisco-tunnel does not exist!
May 25 10:12:48 PST::999999::ERROR::CSTMExternalIDLImplget_template_variables_a
nd_data()::The data file for template /Broadband/aggregator-add-cisco-tunnel does not exist!

You can ignore these messages.

CSCea45024—In the following scenario, a user logged in as a CustomerOperator can provision and unprovision devices and subscribers:

1. You create a new user and add the user to these groups:

[sp_jc1]CustomerOperators/bac/example/us/
[sp_jc2]AdvancedOperators/bac/example/us/
[sp_jc3]Operators/bac/example/us

2. You assign all devices to sp_jc1.

3. The new user logs in as a CustomerOperator at sp-jc1 and can provision devices and subscribers.

CSCea66254—When you first run bacStartUp and then call IE2100 setup, you might encounter the following message:

Commit changes (y/n): y
unable to load 'random state'
This means that the random number generator has not been seeded
with much random data.
Consider setting the RANDFILE environment variable to point at a file that
'random' data can be kept in (the file will be overwritten).
25818:error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not seeded:m
d_rand.c:501:You need to read the OpenSSL FAQ, http://www.openssl.org/support/fa
q.html
Following command failed: see /var/log/appliance-setup.log for details
system failed: 256 exit_value = 1 signal_num = 0 dumped_core = 0
do_plutoSupport ...
Shutdown servers ...
/etc/init.d/tibcorvd stop
Configure IMGW ...
Configure DCL ...

...

You can ignore this message.

CSCea79133—If an aggregator is configured with the AAA authentication as local and then a subscriber is provisioned, the subscriber's username and password are not configured on the router during the provisioning process. To correctly authenticate the CPE of the subscriber, add the subscriber's username and password needs to be added manually.

CSCea80432—When you create a service under the Network Services tab, the Session-Timeout and Idle-Timeout fields are mandatory fields. These settings are associated with a subscriber when the service profile is connected to the service and saved in the AAA server. When the subscriber's CPE is brought up, these two settings are sent by the RADIUS server to the aggregator and used to set the session and idle timeout for the subscriber. You can see these settings on the aggregator by entering: >show caller timeouts.

The workaround for this situation is as follows:


Step 1   Open the following file in a text editor:

/opt/CSCObacss/common/templates/Broadband/aggregator-add-service_TMPL_/_TEMPLATE_FILE_.xml

Step 2   Find the Session and Idle Timeout areas which are as follows:

<namelessness-Timeout</name>" and "<displayName>Idle- Timeout</displayName>"

Step 3   Change surrounding <IntegerField> and </IntegerField> tags to <TextField> and </TextField>, respectively.

Step 4   Save the file.

Step 5   Create a service under the Network Services and make the Session-Timeout and Idle-Timeout fields empty.

Step 6   Save the service profile.

Step 7   Provision the subscriber's service profile so it is associated with the service profile you just created.



CSCea65867—If you create a device using the BAC northbound API, BAC does not validate the useSSH variable. Set the useSSH variable to true if device is created using NBAPI even if the property file sets supportsSSH to false.

CSCea81793—When using the Search function to select devices, interfaces, or subscribers, filtering based upon role does not function as expected. For example, if a subscriber is attempting to add a service feature in role ABC, then the device selector only lists devices that have the role ABC provisioned on them. But, the search function lists all devices that match the search criteria whether or not the role is correct.

CSCea86069—If you intend to install BAC using the silent option, before you run the installation make sure the window is allowed to setup connections to the X server. Otherwise, the installation process exits, and you cannot bring up servers when you run the bacStartUp initial command. To avoid the problem, simply run the xhost + command.

CSCea86159—When adding service features, you may encounter an error message that says BAC could not connect to the log server. The log server is not included in this release of the software. BAC moves on and completes adding service features without audit logging.

CSCea86868—BAC does not validate the type of RADIUS servers that you add to a RADIUS group. For example you can add radius1, which might be an Access Registrar server, and radius2, an Interlink Merit server, to the same group. For load balancing purposes, this mixing of servers is unlikely. Make sure all RADIUS servers in a RADIUS group are of the same type.

CSCea87190—You can create multiple Cisco CNS Notification Engine servers using the same IP address. If there are multiple Notification Engine servers with the same IP address, BAC generates an error when you try to add the Basic Service feature. Make sure that all Notification Engine servers have unique IP addresses.

Related Documentation

The BAC documentation consists of the following:

Obtaining Documentation

These sections explain how to obtain documentation from Cisco Systems.

World Wide Web

You can access the most current Cisco documentation on the World Wide Web at this URL:

http://www.cisco.com

Translated documentation is available at this URL:

http://www.cisco.com/public/countries_languages.shtml

Documentation CD-ROM

Cisco documentation and additional literature are available in a Cisco Documentation CD-ROM package, which is shipped with your product. The Documentation CD-ROM is updated monthly and may be more current than printed documentation. The CD-ROM package is available as a single unit or through an annual subscription.

Ordering Documentation

You can order Cisco documentation in these ways:

http://www.cisco.com/cgi-bin/order/order_root.pl

http://www.cisco.com/go/subscription

Documentation Feedback

You can submit comments electronically on Cisco.com. In the Cisco Documentation home page, click the Fax or Email option in the "Leave Feedback" section at the bottom of the page.

You can e-mail your comments to bug-doc@cisco.com.

You can submit your comments by mail by using the response card behind the front cover of your document or by writing to the following address:

Cisco Systems
Attn: Document Resource Connection
170 West Tasman Drive
San Jose, CA 95134-9883

We appreciate your comments.

Obtaining Technical Assistance

Cisco provides Cisco.com as a starting point for all technical assistance. Customers and partners can obtain online documentation, troubleshooting tips, and sample configurations from online tools by using the Cisco Technical Assistance Center (TAC) Web Site. Cisco.com registered users have complete access to the technical support resources on the Cisco TAC Web Site.

Cisco.com

Cisco.com is the foundation of a suite of interactive, networked services that provides immediate, open access to Cisco information, networking solutions, services, programs, and resources at any time, from anywhere in the world.

Cisco.com is a highly integrated Internet application and a powerful, easy-to-use tool that provides a broad range of features and services to help you with these tasks:

If you want to obtain customized information and service, you can self-register on Cisco.com. To access Cisco.com, go to this URL:

http://www.cisco.com

Technical Assistance Center

The Cisco Technical Assistance Center (TAC) is available to all customers who need technical assistance with a Cisco product, technology, or solution. Two levels of support are available: the Cisco TAC Web Site and the Cisco TAC Escalation Center.

Cisco TAC inquiries are categorized according to the urgency of the issue:

The Cisco TAC resource that you choose is based on the priority of the problem and the conditions of service contracts, when applicable.

Cisco TAC Web Site

You can use the Cisco TAC Web Site to resolve P3 and P4 issues yourself, saving both cost and time. The site provides around-the-clock access to online tools, knowledge bases, and software. To access the Cisco TAC Web Site, go to this URL:

http://www.cisco.com/tac

All customers, partners, and resellers who have a valid Cisco service contract have complete access to the technical support resources on the Cisco TAC Web Site. The Cisco TAC Web Site requires a Cisco.com login ID and password. If you have a valid service contract but do not have a login ID or password, go to this URL to register:

http://www.cisco.com/register/

If you are a Cisco.com registered user, and you cannot resolve your technical issues by using the Cisco TAC Web Site, you can open a case online by using the TAC Case Open tool at this URL:

http://www.cisco.com/tac/caseopen

If you have Internet access, we recommend that you open P3 and P4 cases through the Cisco TAC Web Site.

Cisco TAC Escalation Center

The Cisco TAC Escalation Center addresses priority level 1 or priority level 2 issues. These classifications are assigned when severe network degradation significantly impacts business operations. When you contact the TAC Escalation Center with a P1 or P2 problem, a Cisco TAC engineer automatically opens a case.

To obtain a directory of toll-free Cisco TAC telephone numbers for your country, go to this URL:

http://www.cisco.com/warp/public/687/Directory/DirTAC.shtml

Before calling, please check with your network operations center to determine the level of Cisco support services to which your company is entitled: for example, SMARTnet, SMARTnet Onsite, or Network Supported Accounts (NSA). When you call the center, please have available your service agreement number and your product serial number.

This document is to be used in conjunction with the documents listed in the "Related Documentation" section.

CCIP, CCSP, the Cisco Arrow logo, the Cisco Powered Network mark, Cisco Unity, Follow Me Browsing, FormShare, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, the Cisco IOS logo, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Empowering the Internet Generation, Enterprise/Solver, EtherChannel, EtherSwitch, Fast Step, GigaStack, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, LightStream, MGX, MICA, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, RateMUX, Registrar, ScriptShare, SlideCast, SMARTnet, StrataView Plus, Stratm, SwitchProbe, TeleRouter, The Fastest Way to Increase Your Internet Quotient, TransPath, and VCO are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries.

All other trademarks mentioned in this document or Web site are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0304R)

Copyright © 2003, Cisco Systems, Inc.
All rights reserved.


hometocprevnextglossaryfeedbacksearchhelp
Posted: Wed Jun 4 11:50:55 PDT 2003
All contents are Copyright © 1992--2003 Cisco Systems, Inc. All rights reserved.
Important Notices and Privacy Statement.