Table Of Contents - Cisco ASR 5000 Series Administration Manual

Table Of Contents

About This Guide29
Conventions Used29
Related Documentation30
Contacting Customer Support31
System Management Overview33
Chapter34
Terminology35
Logical Interfaces36
Aaa Servers37
Trusted Builds38
How The System Selects Contexts39
Asr 5500 System Administration Guide, Staros Release 21.440
Context Selection For Subscriber Sessions42
Understanding Configuration Files43
Ip Address Notation45
Alphanumeric Strings46
Quoted Strings48
Asr 5500 Configuration49
The Quick Setup Wizard50
Using The Cli For Initial Configuration56
Configuring System Administrative Users58
Configuring The System For Remote Access59
Configuring Ssh Options61
Ssh Host Keys62
Specifying Ssh Encryption Ciphers63
Generating Ssh Keys64
Authorizing Ssh User Access65
Ssh User Login Authentication66
Secure Session Logout67
Ssh Client Login To External Servers68
Setting Preferred Authentication Methods69
Generating Ssh Client Key Pair70
Enabling Netconf71
Configuring A Second Management Interface74
Configuring System Timing75
Verifying And Saving Your Clock And Time Zone Configuration76
Configuring Ntp Servers With Local Sources77
Verifying The Ntp Configuration78
Configuring Sf Boot Configuration Pause79
Configuring Cli Confirmation Prompts80
Requiring Confirmation For Specific Exec Mode Commands81
Configuring Context-Level Administrative Users83
Configuring Context-Level Administrators84
Configuring Li Administrators85
Verifying Context-Level Administrative User Configuration86
Configuring Local-User Administrative Users87
Updating Local-User Database88
Provisioning Lawful Intercept89
Restricting User Access To A Specified Root Directory90
Configuring An Sftp Root Directory91
Configuring Tacacs+ For System Administrative Users92
User Account Requirements93
Configuring Tacacs+ Aaa Services94
Configuring Tacacs+ For Non-Local Vpn Authentication95
Separating Authentication Methods96
Disable Tacacs+ Authentication At The Context Level97
Limit Console Access For Aaa-Based Users98
Configuring A New Chassis Key Value99
Quick Setup Wizard100
Configuring Mio/Umio/Mio2 Port Redundancy Auto-Recovery103
Verifying Port Redundancy Auto-Recovery104
Verifying Card Configurations105
Lag And Master Port106
Multiple Switches With L2 Redundancy107
Preferred Slot108
Minimum Links109
Redundancy Options110
Faster Data Plane Convergence111
Mio Demux Restrictions113
Configuration114
Requesting An Exclusive-Lock116
Effect Of Config Lock On Url Scripts117
Saving A Configuration File118
Show Administrators Command119
Management Settings121
Configuring Orbem Client And Port Parameters122
Verifying Orbem Parameters123
Snmp Support126
Verifying Snmp Parameters127
Controlling Snmp Trap Generation128
Verifying And Saving Your Configuration129
Synchronizing File Systems131
System Interfaces And Ports133
Viewing And Verifying Contexts134
Creating An Interface135
Viewing And Verifying Port Configuration136
Vlans137
System Security139
Mio Synchronization140
Secure Password Encryption141
Support For Icsr Configurations142
Modifying Intercepts143
User Access To Operating System Shell144
Exec Mode Cli Test-Commands145
Secure System Configuration File147
Feature Description148
Validate The Digital Signature149
Enable Or Disable Signature Verification150
Software Management Operations151
Understanding The Boot.sys File152
Synchronizing The File System153
Copying Files154
Applying Pre-Existing Cli Configuration Files155
Viewing Cli Configuration And Boot.sys Files156
Configuring The Boot Stack157
Adding A New Boot Stack Entry159
Configuring The Boot Network160
Configuring Boot Network Delay Time161
Verify Free Space On The /Flash Device162
Transfer Staros Image To /Flash163
Downgrading From Release 20.0164
Configure A Message Of The Day Banner165
Synchronize File Systems166
Verify The Running Software Version167
New System License Keys168
Adding License Keys To Configuration Files169
License Expiration Behavior170
Management Card Replacement And License Keys171
Local-User Account Suspensions172
Smart Licensing173
Smart Software Licensing174
Cisco Smart Software Manager175
Software Tags And Entitlement Tags176
Configuring Smart Licensing177
Monitoring And Troubleshooting Smart Licensing178
Monitoring The System181
Monitoring Asr 5500 Hardware Status183
Clearing Statistics And Counters185
Bulk Statistics187
Configuring Communication With The Collection Server188
Configuring Optional Settings189
Configuring A Separate Bulkstats Config File190
Verifying Your Configuration191
Saving Your Configuration192
Clearing Bulk Statistics Counters And Information193
Data Types194
Bulk Statistics Event Log Messages196
Feature Summary And Revision History197
System Log Types198
Configuring Event Logging Parameters199
Configuring Event Log Filters200
Global Configuration Mode Filtering202
Configuring Syslog Servers203
Specifying Facilities204
Configuring Trace Logging213
Viewing Logging Configuration And Statistics214
Configuring And Viewing Crash Logs215
Configuring Software Crash Log Destinations216
Viewing Abridged Crash Log Information Using The Cli217
Reducing Excessive Event Logging218
Configuring Log Source Thresholds219
Saving Log Files220
Event Severities229
Troubleshooting231
Licensing Issues232
Checking The Leds On The Mio Card234
Mio Active Led States235
Mio Redundancy Led States236
Mio Busy Led States237
Mio – Interface Activity Led States238
Dpc Run/Fail Led States239
Dpc Active Led States240
Dpc Redundancy Led States241
Fsc Run/Fail Led States242
Fsc Active Led States243
Fsc Drive N Activity Led States244
Checking The Leds On The Ssc245
Ssc Active Led States246
Ssc Redundancy Led States247
Ssc System Service Led States248
Switching Mios249
Migrating A Dpc250
Initiate A Card Halt251
Verifying Network Connectivity252
Using The Traceroute Or Traceroute6 Command253
Viewing Ip Routes254
Using The System Diagnostic Utilities255
Using The Protocol Monitor For A Specific Subscriber256
Generating An Ssd258
Feature Information261
Configuring The Hexdump Module263
Configuring The Hexdump File Parameters265
Enabling Or Disabling Hexdump268
Monitoring And Troubleshooting Pcap Trace269
Show { Hexdump-Module | Cdr } File-Space-Usage270
Show Hexdump-Module Statistics271
Accessing The Boot Cli276
Enter Cli Mode277
Boot Using A Specified Configuration File278
Access Control Lists279
Understanding Acls280
Rule Order282
Configuring Action And Criteria For Subscriber Traffic283
Verifying The Acl Configuration284
Applying The Acl To An Interface286
Verifying The Acl Configuration On An Interface287
Applying An Acl To All Traffic Within A Context288
Applying An Acl To A Radius-Based Subscriber289
Applying An Acl To An Individual Subscriber290
Applying An Acl To The Subscriber Named Default291
Verifying The Acl Configuration To The Subscriber Named Default292
Applying An Acl To Service-Specified Default Subscriber293
Applying A Single Acl To Multiple Subscribers294
Applying An Acl To Multiple Subscriber Via Apns295
Verifying The Acl Configuration To Apns296
Overview297
Configuring Congestion Control298
Configuring Service Congestion Policies299
Enabling Congestion Control Redirect Overload Policy300
Routing Policies303
Creating Ip Prefix Lists304
Creating Route Maps305
Adding Static Routes To A Context306
Ospf Version 2 Overview307
Basic Ospfv2 Configuration308
Confirming Ospf Configuration Parameters309
Enabling Ospfv6 Over A Specific Interface310
Bgp-4 Routing311
Configuring Bgp312
Bgp Communities And Extended Communities313
Setting The Community Attribute314
Setting The Extended Community Attribute315
Configurable Bgp Route Advertisement Interval For Icsr316
Confirming Bgp Configuration Parameters318
Overview Of Bfd Support319
Configuring A Bfd Context320
Configuring Bfd For Single Hop321
Scaling Of Bfd322
Enabling Bfd On Ospf Interfaces323
Enable Primary Chassis Bfd Monitoring324
Enable Bfd Multihop Fall-Over325
Ip Routev6 Command326
Saving The Configuration328
Overlapping Ip Address Pool Support – Ggsn332
Apn Support – Pdn Gateway (P-Gw)333
Configuring Subscriber Vlan Associations334
Verify The Subscriber Profile Configuration335
Bgp Mpls Vpns339
Mpls-Ce Connected To Pe340
Ipv6 Support For Bgp Mpls Vpns343
Sample Configuration344
Vpn-Related Cli Commands346
Content Service Steering351
Configuring Internal Content Service Steering352
Applying An Acl To An Individual Subscriber (Optional)353
Session Recovery355
Additional Asr 5500 Hardware Requirements358
Enabling Session Recovery359
Disabling The Session Recovery Feature360
Viewing Recovered Session Information361
Recovery Control Task Statistics362
Show Rct Stats Command363
Interchassis Session Recovery365
Interchassis Communication367
Show Commands368
Aaa Monitor369
Icsr Operation371
Chassis Initialization374
Configuring Icsr375
Configuring The Service Redundancy Protocol (Srp) Context376
Configuring Srp Context Parameters377
Srp Redundancy, Aaa And Diameter Guard Timers378
Dscp Marking Of Srp Messages379
Allow Non-Volte Traffic During Icsr Switchover380
Allow All Data Traffic382
Optimization Of Switchover Control Outage Time383
Configuring Nack Generation For Srp Checkpoint Messaging Failures384
Selective Disabling Of Nack Messaging385
Verifying Srp Configuration386
Configuring Bgp Router And Gateway Address387
Modifying The Destination Context For Icsr388
Verifying Bgp Configuration In Destination Context389
Configuring Subscriber State Management Audit Process390
Updating The Operating System391
Both Icsr Systems396
Standby Icsr System397
Performing Bgp Checks398
Updating The Configuration File399
Waiting For Session Synchronization400
Completing The Software Update401
Fallback Procedure402
Support Data Collector403
Configuring Sdr Collection404
Collecting And Storing The Sdr Information405
Using Sdrs To Diagnose Problems407
Configuration Commands (Global Configuration Mode)408
Exec Mode Commands409
Engineering Rules411
Packet Data Network (Pdn) Interface Rules412
Subscriber Rules415
Access Control List (Acl) Engineering Rules416
Staros Tasks417
Primary Task Subsystems418
Controllers And Managers419
Subsystem Tasks420
High Availability Subsystem421
Resource Manager Subsystem422
Network Processing Unit Subsystem424
Session Subsystem426
Platform Processes435
Management Processes438
Netconf And Confd441
Configuring Confd444
Netconf Protocol Configuration Mode445
Netconf Notifications Events446
Rest Auth-Policy447
Rest Hostname448
Verifying The Configuration449
Clear Confdmgr Confd Cdb456
Yang Models457
Confd Examples458
Bulkstats459
Exec Cli Model461
Cli Based Yang Model For Ecs Commands462
Seeding And Synchronizing The Cdb463
Cdb Maintenance464
Save Configuration Confd465
Overview Of Checkpointing467
Ggsn_Apn Id Mapping468
Vpnmgr_Id Mapping469
Uncategorized470
Dcca Category471
Sess_Uchkpt_Cmd_Acs_Gx_Li_Info472
Sess_Uchkpt_Cmd_Del_Acs_Sess_Info473
Sess_Uchkpt_Cmd_Dynamic_Chrg_Del_Qg_Info474
Sess_Uchkpt_Cmd_Dynamic_Rule_Info475
Sess_Uchkpt_Cmd_Update_Epdg_Peer_Addr476
Firewall/Ecs Category477
Ggsn Category478
Sess_Uchkpt_Cmd_Ggsn_Update_Stats479
Gx Interface Category480
Sess_Uchkpt_Cmd_Gr_Update_Nat_Realms481
Sess_Uchkpt_Cmd_Nat_Sip_Alg_Contact_Ph_Info482
P-Gw Category483
Sess_Uchkpt_Cmd_Pgw_Ubr_Mbr_Info484
Sess_Uchkpt_Cmd_Pgw_Update_Pdn_Common_Param485
Sess_Uchkpt_Cmd_Acs_Accounting_Type_Qci_Rf_With_Fc486
S6B Interface Category487
Sess_Uchkpt_Cmd_Cgw_Update_Bearer_Qos488
Sess_Uchkpt_Cmd_Samog_Acct_Start_Info489
Sess_Uchkpt_Cmd_Samog_Gtpv1_Update_Pdn_Info490
Sess_Uchkpt_Cmd_Samog_Li_Prov_Info491
Cisco Secure Boot507
Secure Boot Overview508