Cisco Prime Nerk 43 User Guide
Have a look at the manual Cisco Prime Nerk 43 User Guide online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 53 Cisco manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
15-17 Cisco Prime Network 4.3.2 User Guide EDCS-1524415 Chapter 15 Monitoring AAA Configurations Viewing AAA Configurations 3GPP SGSN MCC MNCIndicates whether RADIUS accounting attribute for 3GPP SGSN MCC MNC is enabled. 3GPP Charging CharacteristicsIndicates whether RADIUS accounting attribute for 3GPP charging characteristics is enabled. 3GPP Rat Type Indicates whether RADIUS accounting attribute for 3GPP RAT type is enabled. 3GPP IMEISV Indicates whether RADIUS accounting attribute for 3GPP imeisv is enabled. 3GPP MS Timezone Indicates whether RADIUS accounting attribute for 3GPP ms timezone is enabled. 3GPP User Location InformationIndicates whether RADIUS accounting attribute for 3GPP user location information is enabled. 3GPP Session Stop IndicatorIndicates whether RADIUS accounting attribute for 3GPP Session Stop Indicator is enabled. 3GPP Charging ID Indicates whether RADIUS accounting attribute for 3GPP charging ID is enabled. Input Octets Indicates whether RADIUS accounting attribute for accounting input octets is enabled. Output Octets Indicates whether RADIUS accounting attribute for accounting output octets is enabled. Session Time Indicates whether RADIUS accounting attribute for accounting session time is enabled. Input Packets Indicates whether RADIUS accounting attribute for accounting input packets is enabled. Output Packets Indicates whether RADIUS accounting attribute for accounting output packets is enabled. Event Timestamp Indicates whether RADIUS accounting attribute for event timestamp is enabled. Session ID Indicates whether RADIUS accounting attribute for session id is enabled. Status Type Indicates whether RADIUS accounting attribute for status type is enabled. Authentication Indicates whether RADIUS accounting attribute for authentication is enabled. Delay Time Indicates whether RADIUS accounting attribute for delay time is enabled. Table 15-15 RADIUS Accounting Attributes Configuration details Field Name Description
15-18 Cisco Prime Network 4.3.2 User Guide EDCS-1524415 Chapter 15 Monitoring AAA Configurations Viewing AAA Configurations Viewing the RADIUS Authentication Attributes Configuration Details for an AAA Group To view the radius authentication attributes configuration details: Step 1Right-click on the required device and choose the Inventory option. Step 2In the Inventory window, choose Logical Inventory>Context>AAA> AAA Groups>AAA Group>Radius Configuration>Authentication Attributes Configuration. The configuration details are displayed in the content pane. Table 15-16 describes the attributes configuration details. Table 15-16 RADIUS Authentication Attributes Configuration details Field Name Description NAS IP Address Indicates whether RADIUS authentication attribute for NAS IP Address is enabled. NAS Identifier Indicates whether RADIUS authentication attribute for NAS Identifier is enabled. IMSI Indicates whether RADIUS authentication attribute for IMSI is enabled. Service Type Indicates whether RADIUS authentication attribute for service type is enabled. Framed IP Address Indicates whether RADIUS authentication attribute for Framed IP Address is enabled. Framed IPv6 Prefix Indicates whether RADIUS authentication attribute for Framed IPv6 Prefix is enabled. Called Station ID Indicates whether RADIUS authentication attribute for called station id is enabled. Calling Station ID Indicates whether RADIUS authentication attribute for calling station id is enabled. Chap Challenge Indicates if the Challenge Handshake Authentication Protocol challenge sent by the network access server to a PPP CHAP user, is enabled. Nas Port Type NAS-Port-Type (RADIUS IETF attribute 61) indicates the type of physical port the network access server (NAS) is using to authenticate the user. NAS Port ID NAS-Port-ID (RADIUS IEFT attribute 87) contains a text string that identifies the NAS port that is authenticating the user. User Name Indicates enabled status for - name of the user being authenticated by the RADIUS server. 3GPP PDP Type Indicates whether RADIUS authentication attribute for 3GPP PDP type is enabled. 3GPP CG Address Indicates whether RADIUS authentication attribute for 3GPP CG address is enabled. 3GPP GPRS QoS Negotiated ProfileIndicates whether RADIUS authentication attribute for 3GPP GPRS QoS negotiated profile is enabled. 3GPP SGSN Address Indicates whether RADIUS authentication attribute for 3GPP SGSN address is enabled.
15-19 Cisco Prime Network 4.3.2 User Guide EDCS-1524415 Chapter 15 Monitoring AAA Configurations Viewing AAA Configurations Viewing the Radius Authentication Configuration Details for an AAA Group To view the radius authentication configuration details for an AAA group: Step 1Right-click on the required device and choose the Inventory option. Step 2In the Inventory window, choose Logical Inventory>Context>AAA> AAA Groups>AAA Group>Radius Configuration>Authentication Configuration. The authentication configuration details are displayed in the content pane. Table 15-17 describes the radius authentication configuration details. 3GPP GGSN Address Indicates whether RADIUS authentication attribute for 3GPP GGSN address is enabled. 3GPP GGSN MCC MNCIndicates whether RADIUS authentication attribute for 3GPP GGSN MCC MNC is enabled. 3GPP IMSI MCC MNC Indicates whether RADIUS authentication attribute for 3GPP select mode is enabled. 3GPP Select Mode Indicates whether RADIUS authentication attribute for 3GPP NSAPI is enabled. 3GPP NSAPI Indicates whether RADIUS authentication attribute for 3GPP NSAPI is enabled. 3GPP SGSN MCC MNCIndicates whether RADIUS authentication attribute for 3GPP SGSN MCC MNC is enabled. 3GPP Charging CharacteristicsIndicates whether RADIUS authentication attribute for 3GPP charging characteristics is enabled. 3GPP Rat Type Indicates whether RADIUS authentication attribute for 3GPP RAT type is enabled. 3GPP IMEISV Indicates whether RADIUS authentication attribute for 3GPP imeisv is enabled. 3GPP MS Timezone Indicates whether RADIUS authentication attribute for 3GPP ms timezone is enabled. 3GPP User Location InformationIndicates whether RADIUS authentication attribute for 3GPP user location information is enabled. Table 15-16 RADIUS Authentication Attributes Configuration details Field Name Description
15-20 Cisco Prime Network 4.3.2 User Guide EDCS-1524415 Chapter 15 Monitoring AAA Configurations Viewing AAA Configurations Viewing the Charging Configuration Details for an AAA Group To view the radius charging configuration details for an AAA group: Step 1Right-click on the required device and choose the Inventory option. Step 2In the Inventory window, choose Logical Inventory>AAA>AAA Groups>AAA Group>Radius Configuration>Charging Configuration. The charging configuration details are displayed in the content pane. Table 15-18 describes the charging configuration details. Table 15-17 Radius Authentication Configuration Field Name Description Server Selection AlgorithmThe algorithm to select the RADIUS accounting server(s) to which accounting data must be sent. Values are: first-server round-robin Server Deadtime The time period after which the status of the authentication server must be changed from Down to Active. Maximum Outstanding MessagesThe maximum number of outstanding messages that can be queued with the AAA manager. Authentication Maximum RetriesThe maximum number of attempts with the AAA server, before it is declared Not Responding and the detected dead server’s consecutive failures count is incremented. Authentication Maximum TransmissionsThe maximum number of transmissions attempted for a RADIUS authentication message, before it is declared FAILED. Authentication Response TimeoutThe time period to wait for a response from the RADIUS server, before resending the message. This value is displayed in seconds. APN To Be Included The APN associated with the RADIUS authentication. Authenticate Null User NameIndicates whether the authentication of user names that are blank or empty is enabled. Modify NAS IP Indicates whether the RADIUS authentication is attempted after NAS IP is modified. Probe Interval The time interval (in seconds) before sending another probe authentication request to a RADIUS server. Probe Timeout The time period (in seconds) to wait for a response from a RADIUS server before resending the authentication probe. Probe Maximum RetriesThe number of retries for RADIUS authentication probe response before the authentication is declared as failed.
15-21 Cisco Prime Network 4.3.2 User Guide EDCS-1524415 Chapter 15 Monitoring AAA Configurations Viewing AAA Configurations Viewing the Charging Trigger Configuration Details for an AAA Group To view the radius charging trigger configuration details for an AAA group: Step 1Right-click on the required device and choose the Inventory option. Step 2In the Inventory window, choose Logical Inventory>Context>AAA>AAA Groups>AAA Group>Radius Configuration>Charging Trigger. The charging configuration details are displayed in the content pane. Table 15-19 describes the charging trigger configuration details. Table 15-18 Radius Charging Configuration Field Name Description Authentication Server Selection AlgorithmThe algorithm to select the RADIUS server(s) for active charging service to ensure proper load distribution amongst the available servers used for authentication requests. Value could be one of the following: first-server round-robin Accounting Server Selection AlgorithmThe algorithm to select the RADIUS server(s) for active charging service to ensure proper load distribution amongst the available servers for accounting requests. Value could be one of the following: first-n n Default first-server round-robin Server Deadtime The time period after which the status of the RADIUS server must be changed from Down to Active. Maximum Outstanding MessagesThe maximum number of outstanding messages that can be queued with the AAA manager. Maximum Retries The maximum number of attempts with the AAA server, before it is declared Not Responding and the detected dead server’s consecutive failures count is incremented. Response Timeout The maximum number of retransmissions for RADIUS authentication requests. Detect Dead Server Consecutive RetriesThe number of consecutive failures for an AAA manager, before the status of an charging server is changed from Active to Down.
15-22 Cisco Prime Network 4.3.2 User Guide EDCS-1524415 Chapter 15 Monitoring AAA Configurations Viewing AAA Configurations Table 15-19 Radius Charging Triggers Configuration Field Name Description Serving Node Change Indicates whether RADIUS trigger for serving node is enabled. Radio Access Technology ChangeIndicates whether RADIUS trigger for radio access technology change is enabled. User Location Information ChangeIndicates whether RADIUS trigger for user location information change is enabled. Routing Area Information ChangeIndicates whether RADIUS trigger for routing area information change is enabled. Quality of Service ChangeIndicates whether RADIUS trigger for quality of service change is enabled. Mobile Station Timezone ChangeIndicates whether RADIUS trigger for mobile station time zone change is enabled.
15-23 Cisco Prime Network 4.3.2 User Guide EDCS-1524415 Chapter 15 Monitoring AAA Configurations Viewing AAA Configurations Viewing TACACS+ Group Configuration Details for an AAA Group To view the TACACS+ group configuration details for a AAA group: Step 1Right-click on the required device and choose the Inventory option. Step 2In the Inventory window, choose Logical Inventory>AAA> AAA Groups.The configuration details are displayed on the content pane. (The attributes that are displayed depend on the device type .) Step 3Expand a specific TACACS+ Group node and then choose TACACS+ Configuration under a specific AAA group node. Table 15-20 describes the TACACS+ group configuration details and its associated TACACS+ Servers details. Table 15-20 TACACS+ group Configuration Field Name Description Group Name The AAA group name. Group Type The AAA group type. Source Interface Specifies that the IP address of this specified interface is used for all outgoing TACACS+ packets. VRF The VRF used in this TACACS+ server group. Acknowledge Broadcast AccountingSpecifies if accounting information can be broadcast to one or more AAA servers simultaneously. Cache Expiry Time Specifies the length of time, in hours, for a cache database profile entry to expire. Cache Expiry Rule Specifies how the expired cached database profile entries in this TACACS+ server group are to be used: Enforce—Indicates not to use expired entries. Failover—Indicates to use an expired entry if all other methods fail. Cache Authentication Profile NameThe name of the cache authentication profile used in this TACACS+ server group. Cache Authorization Profile NameThe name of the cache authorization profile used in this TACACS+ server group. Associated TACACS+ Servers Server Address The IP address or hostname of the TACACS+ server. Port The TCP port used to communicate with the TACACS+ server. Server Name The name of the associated TACACS+ Server. Status Specifies the operational state of the interface with the TACACS+ server.
15-24 Cisco Prime Network 4.3.2 User Guide EDCS-1524415 Chapter 15 Monitoring AAA Configurations Configuring AAA Groups Configuring AAA Groups The following commands can be launched from the inventory by right-clicking and AAA group and choosing Commands > Configuration. Your permissions determine whether you can run these commands (see Permissions for Vision Client NE-Related Operations, page B-4). To find out if a device supports these commands, see the Cisco Prime Network 4.3.2 Supported Cisco VNEs. Command Navigation Description Create Diameter Accounting ServerRight-click the AA group> Commands> group dialog box, select a group name and then choose Commands > Configuration > Create Diameter Accounting Server Right-click the AA group> Commands> group dialog box, select a group name and then choose Commands > Configuration > Create Diameter Authentication Server Right-click the AA group> Commands> group dialog box, select a group name and then choose Commands > Configuration > Delete AAA Group Right-click the AA group> Commands> group dialog box, select a group name and then choose Commands > Configuration > Modify AAA GroupUse this command to create a new diameter accounting server. Create Diameter Authentication ServerUse this command to create a new diameter authentication server. Delete AAA GroupUse this command to delete an AAA group. Modify AAA GroupUse this command to modify the attributes of an AAA group.
CH A P T E R 16-1 Cisco Prime Network 4.3.2 User Guide 16 Managing DWDM Networks The Cisco IP over dense wavelength division multiplexing (IPoDWDM) solution enables the convergence of the IP and DWDM core networks of the service providers. It increases service flexibility, operational efficiency and reliability while lowering operating expenses (OpEx) and capital expenditures (CapEx). Prime Network discovers and displays the following DWDM attributes in the Physical Inventory tree of the Vision client: DWDM controllers. The controller location is same as the DWDM interface. Loopback information for the DWDM controller. DWDM controller status. DWDM port properties—Wavelength, Laser Status, Tx Power, and Rx Power. DWDM controller card status (G.709 status). Prime Network also provides commands that support DWDM and Synchronous Optical Network (SONET) controllers. These commands help in configuring the device and in displaying device details. The commands are described in Configuring and Viewing DWDM, page 16-14. (For information on the SONET commands, see Configuring Clock, page 26-55.) The following topics describe how you can view and monitor IP over dense wavelength division multiplexing (DWDM) properties configured on network elements by using the Vision client. If you cannot perform an operation that is described in these topics, you may not have sufficient permissions; see Permissions for Managing DWDM, page B-16. Viewing DWDM in Physical Inventory, page 16-2 Viewing G.709 Properties, page 16-4 Viewing Performance Monitoring Configuration, page 16-10 Configuring and Viewing DWDM, page 16-14
16-2 Cisco Prime Network 4.3.2 User Guide Chapter 16 Managing DWDM Networks Viewing DWDM in Physical Inventory Viewing DWDM in Physical Inventory The Vision client enables you to monitor a variety of DWDM properties in physical inventory, including forward error correction (FEC), G.709 status, and performance monitoring parameters. To view DWDM properties in physical inventory: Step 1In the Vision client, double-click the device on which DWDM is configured. Step 2In the Inventory window, choose Physical Inventory > Chassis and navigate to the interface configured for DWDM. DWDM details are displayed in the DWDM area in the content pane as shown in Figure 16-1. Figure 16-1 DWDM Properties in Physical Inventory