Hide thumbs Also See for SH060:
Table of Contents

Advertisement

Quick Links

Cisco Prime Network Registrar 9.1 Installation Guide
First Published: 2017-12-21
Last Modified: 2017-12-21
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the SH060 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for Kvik SH060

  • Page 1 Cisco Prime Network Registrar 9.1 Installation Guide First Published: 2017-12-21 Last Modified: 2017-12-21 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883...
  • Page 2 THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS. THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE.
  • Page 3 C O N T E N T S Installation Overview C H A P T E R 1 Overview About Cisco Prime Network Registrar Configuration Options C H A P T E R 2 Mixed DHCP and DNS Scenarios One-Machine Mixed Configuration Two-Machine Mixed Configuration Three-Machine Mixed Configuration Four-Machine Mixed Configuration...
  • Page 4 Contents Running Other Protocol Servers Backup Software and Virus Scanning Guidelines Server Event Logging Modifying ACLs in Windows Installations Installing and Upgrading Cisco Prime Network Registrar C H A P T E R 5 Installing Cisco Prime Network Registrar Upgrade Considerations DNS Upgrade Considerations Upgrading on Windows Upgrading on Linux...
  • Page 5 Contents Booting and Configuring Cisco Prime Network Registrar Virtual Appliance Deploying the Regional Cluster or Local Cluster on a KVM Hypervisor Deploying the Regional Cluster or Local Cluster on OpenStack Upgrading the Cisco Prime Network Registrar Virtual Appliance Upgrading a Cisco Prime Network Registrar Installation to run on a Cisco Prime Network Registrar Virtual Appliance Upgrading to a new Version of the Virtual Appliance Operating System Upgrading the Cisco Prime Network Registrar Application...
  • Page 6 Contents Configuring Network Access on CentOS 7.3 Using nmcli Changing the IP Address using nmcli A P P E N D I X G Changing the IP Address Using nmcli Cisco Prime Network Registrar 9.1 Installation Guide...
  • Page 7: Chapter

    C H A P T E R Installation Overview This chapter contains the following sections: • Overview, page 1 • About Cisco Prime Network Registrar, page 1 Overview This guide describes how to install Cisco Prime Network Registrar Release 9.1 on Windows and Linux operating systems, and how to install the Cisco Prime Network Registrar Virtual Appliance.
  • Page 8 Installation Overview About Cisco Prime Network Registrar You can install Cisco Prime Network Registrar in either local or regional mode: • Local mode is used for managing local cluster protocol servers. • Regional mode is used for managing multiple local clusters through a central management model. A regional cluster centrally manages local cluster servers and their address spaces.
  • Page 9: Chapter

    C H A P T E R Configuration Options Cisco Prime Network Registrar DHCP, Authoritative DNS, and Caching DNS components are licensed and managed from the regional server. You need to have a regional server and all services in the local clusters are licensed through the regional cluster.
  • Page 10: Three-Machine Mixed Configuration

    Configuration Options Three-Machine Mixed Configuration • Configure one machine as primary DHCP and Auth DNS server, and the second machine as a secondary Auth DNS server. Then configure a zone distribution and DNS access controls on the first machine and optionally access controls on the second machine.
  • Page 11: One-Machine Dhcp Configuration

    Configuration Options One-Machine DHCP Configuration One-Machine DHCP Configuration Initially configure only DHCP, skip the class-of-service and failover options, and revisit the setup to enable class-of-service and policy options. Two-Machine DHCP Configuration Configure the first machine as a DHCP main and the second machine as a backup, with minimal backup configuration (changing password, enabling DHCP, and selecting the backup role), and set up the first machine with failover load balancing, optionally scheduling failover synchronization tasks.
  • Page 12 Configuration Options Three-Machine DNS Configuration Cisco Prime Network Registrar 9.1 Installation Guide...
  • Page 13: Chapter

    C H A P T E R Installation Requirements This chapter contains the following sections: • System Requirements, page 7 • Installation Modes, page 9 • License Files, page 9 System Requirements Review the system requirements before installing the Cisco Prime Network Registrar 9.1 software: •...
  • Page 14 Installation Requirements System Requirements Include a network time service in your configuration to avoid time differences between the local and regional clusters. This method ensures that the aggregated data at the regional server appears consistently. The maximum allowable time drift between the regional and local clusters is five minutes. If the time skew exceeds five minutes, then the installation process will not be able to correctly register the server with the regional.
  • Page 15: Recommendations

    Installation Requirements Recommendations To know the kind of Linux system you are on, use the following command: Note more /etc/redhat-release Recommendations When Cisco Prime Network Registrar is deployed on virtual machines, review the following recommendations: • Do NOT deploy HA DNS or DHCP failover partners on the same physical server (in separate VMs). This will not provide high availability when the server goes down.
  • Page 16 Installation Requirements License Files • count-dhcp—Licenses an incremental number of active leases • count-dns—Licenses an incremental number of RRs • count-cdns—Licenses an incremental number of caching server instances The different services provided by Cisco Prime Network Registrar are associated with the different license types as follows: •...
  • Page 17 Installation Requirements License Files To learn about obtaining the license files for Cisco Prime Network Registrar, see Obtaining Cisco Prime Network Registrar License Files, on page Market Segment Specific Licensing Cisco Prime Network Registrar license types are offered specific to market segments. Market specific licensing generates license keys for use by market segments, that is, Service Provider, Smart Grid, and so on.
  • Page 18 Installation Requirements License Files • BYOD Prime IP Express—NETREG-ENT To know the list of features supported by Prime IP Express—NETREG-ENT licenses see IP Express Installation Guide. Cisco Prime Network Registrar 9.1 Installation Guide...
  • Page 19: Preparing For The Installation

    C H A P T E R Preparing for the Installation This chapter covers any tasks that you have to perform before installing Cisco Prime Network Registrar. • Installation Checklist, page 13 • Before You Begin, page 14 • Obtaining Cisco Prime Network Registrar License Files, page 14 •...
  • Page 20: Before You Begin

    Preparing for the Installation Before You Begin Task Checkoff Do I have the proper software license? (See the License Files, on page 9 section.) ☐ Am I authorized for the administrative privileges needed to install the software? ☐ Does the target installation server have enough disk space? ☐...
  • Page 21: Running Other Protocol Servers

    Preparing for the Installation Running Other Protocol Servers To obtain a license file: 1 Read the Software License Claim Certificate document packaged with the software. 2 Note the Product Authorization Key (PAK) number printed on the certificate. 3 Log into one of the websites described on the certificate, and follow the registration instructions. The PAK number is required for the registration process.
  • Page 22: Server Event Logging

    Preparing for the Installation Server Event Logging install-path\data (for example, C:\NetworkRegistrar\Local\data and C:\Network Registrar\Regional\data) install-path\logs (for example, C:\NetworkRegistrar\Local\logs and C:\Network Registrar\Regional\logs) • Linux— install-path/data (for example, /var/nwreg2/local/data and /var/nwreg2/regional/data) install-path/logs (for example, /var/nwreg2/local/logs and /var/nwreg2/regional/logs) Server Event Logging System activity begins logging when you start Cisco Prime Network Registrar. The server maintains all the logs by default in the following directories: •...
  • Page 23: Installing Cisco Prime Network Registrar

    C H A P T E R Installing and Upgrading Cisco Prime Network Registrar This chapter contains the following sections: • Installing Cisco Prime Network Registrar, page 17 • Upgrade Considerations, page 23 • Reverting to an Earlier Product Version, page 25 •...
  • Page 24 Installing and Upgrading Cisco Prime Network Registrar Installing Cisco Prime Network Registrar Step 3 If you are not configuring secure login to the web UI, skip to Step 4. If you are configuring secure login, you must create a keystore file by using the Java keytool utility, which is located in the bin subdirectory of the Java installation (see Step 2).
  • Page 25 Installing and Upgrading Cisco Prime Network Registrar Installing Cisco Prime Network Registrar • Windows—The cpnr_version-windows.exe file is a self-extracting executable file that places the setup file and other files in the directory where you run it. (If you are not configured for Autostart, run the setup.exe file in that directory.) The Welcome to Cisco Prime Network Registrar window appears.
  • Page 26 Installing and Upgrading Cisco Prime Network Registrar Installing Cisco Prime Network Registrar privileges to run the Cisco Prime Network Registrar services. When running Cisco Prime Network Registrar as a non-root user (nradmin), some changes occur in the CLI operation of the product . Though it is still possible to run as root, it is not recommended.
  • Page 27 Installing and Upgrading Cisco Prime Network Registrar Installing Cisco Prime Network Registrar ◦Log files— /var/nwreg2/regional/logs ◦Temporary files— /var/nwreg2/regional/temp Step 8 If there are no defined administrators, create an administrator by providing the username and password. You have to confirm the password entered. If you are installing a regional, continue;...
  • Page 28 Installing and Upgrading Cisco Prime Network Registrar Installing Cisco Prime Network Registrar Step 14 Enter CCM management SCP port number that the server agent uses for internal communication between servers. The default value is 1234 for local cluster and 1244 for regional cluster. Step 15 Enter the location of the Java installation (JRE) 1.7 or JDK selected in Step 2.
  • Page 29: Upgrade Considerations

    Installing and Upgrading Cisco Prime Network Registrar Upgrade Considerations • HTTPS local cluster—8443 • HTTPS regional cluster—8453 For Web services user have an option to enter a different port number. Note Step 21 Select the security mode to be configured. Optional. Allow fallback to unsecure connection is selected by default. Click Next.
  • Page 30: Dns Upgrade Considerations

    Installing and Upgrading Cisco Prime Network Registrar DNS Upgrade Considerations • If you are running the Authoritative DNS server, the upgrade process (from Cisco Prime Network Note Registrar pre-8.2 to 9.1) could take a while depending on the number of zones and resource records because of the database changes made to Cisco Prime Network Registrar 8.2.
  • Page 31: Upgrading On Linux

    Installing and Upgrading Cisco Prime Network Registrar Upgrading on Linux Step 5 Install Cisco Prime Network Registrar 9.1 on the Windows Server 2012 R2 machine. For installation instructions, see Installing Cisco Prime Network Registrar, on page 17. Ensure that you specify the path where your existing data can be found, for example, C:\NetworkRegistrar\{Local | Regional}, to run the upgrade.
  • Page 32 Installing and Upgrading Cisco Prime Network Registrar Reverting to an Earlier Product Version If you chose this option, and the upgrade process fails, use the following procedure to revert to the earlier product version and configuration: To complete this process, you must have access to the product installer and license key or license file for Caution the earlier Cisco Prime Network Registrar version.
  • Page 33: Moving An Installation To A New Machine

    Installing and Upgrading Cisco Prime Network Registrar Moving an Installation to a New Machine b) Using the fully qualified path to the archive directory, extract the archive. These examples assume the default archive location provided during installation. • Windows—Copy the C:\NetworkRegistrar\{Local.sav|Regional.sav}\cnr_data_archive\ contents to the target Cisco Prime Network Registrar data directory.
  • Page 34: Moving A Regional Cluster To A New Machine

    Installing and Upgrading Cisco Prime Network Registrar Moving a Regional Cluster to a New Machine To move an existing Cisco Prime Network Registrar installation to a new machine on the same platform: Step 1 Stop the server agent on the old machine. •...
  • Page 35: Troubleshooting The Installation

    Installing and Upgrading Cisco Prime Network Registrar Troubleshooting the Installation To move an existing Cisco Prime Network Registrar installation to a new machine: Step 1 Stop the server agent on the old regional server: • Windows: net stop nwregregion • Linux: # etc/init.d/nwregregion stop Step 2 Zip up the data directory on the old regional server.
  • Page 36: Troubleshooting Local Cluster Licensing Issues

    Installing and Upgrading Cisco Prime Network Registrar Troubleshooting Local Cluster Licensing Issues If the installation or upgrade does not complete successfully, first check the contents of these log files to help determine what might have failed. Some examples of possible causes of failure are: •...
  • Page 37: Starting Cisco Prime Network Registrar

    C H A P T E R Next Steps This chapter contains the following sections: • Starting Cisco Prime Network Registrar, page 31 • Starting and Stopping Servers, page 32 • Starting and Stopping Servers using the Regional Web UI, page 34 Starting Cisco Prime Network Registrar To administer the local and regional clusters that you have installed, you must enter the appropriate license file (web UI) or the filename (CLI).
  • Page 38: Starting And Stopping Servers

    Next Steps Starting and Stopping Servers ◦On a regional cluster—Choose Start > Programs > Network Registrar 9.1 > Network Registrar 9.1 regional Web UI (or Network Registrar 9.1 regional Web UI (secure) if you enabled secure login). • To start the CLI: ◦Windows—Navigate to the install-path\bin directory and enter this command: nrcmd -C cluster-ipaddress -N <username>...
  • Page 39: Starting And Stopping Servers On Windows

    Next Steps Starting and Stopping Servers on Windows Starting and Stopping Servers on Windows To start and stop servers on Windows: Step 1 Choose Start > Settings > Control Panel > Administrative Tools > Services. Step 2 From the Service list, choose Network Registrar Local Server Agent or Network Registrar Regional Server Agent. Step 3 Click Restart or Stop, as required, and then click Close.
  • Page 40: Starting Or Stopping Servers Using The Local Web Ui

    Next Steps Starting or Stopping Servers using the Local Web UI # /etc/init.d/nwreglocal stop for the RHEL/CentOS 6.x local cluster # systemctl stop nwreglocal for the RHEL/CentOS 7.x local cluster # /etc/init.d/nwregregion stop for the RHEL/CentOS 6.x regional cluster # systemctl stop nwregregion for the RHEL/CentOS 7.x regional cluster Starting or Stopping Servers using the Local Web UI To start or stop servers in the local Web UI:...
  • Page 41 Next Steps Starting and Stopping Servers using the Regional Web UI • Click the Stop Server button stop the server. Step 3 To reload the BYOD server, click the Restart Server button. You can only stop and start the SNMP server. Reload is not possible for SNMP servers. Note Cisco Prime Network Registrar 9.1 Installation Guide...
  • Page 42 Next Steps Starting and Stopping Servers using the Regional Web UI Cisco Prime Network Registrar 9.1 Installation Guide...
  • Page 43: Uninstalling On Windows

    C H A P T E R Uninstalling Cisco Prime Network Registrar The uninstallation procedure differs based on the operating system you are using. You must have administrator or superuser privileges to uninstall Cisco Prime Network Registrar, just as you must to install it. To back up your database before uninstalling Cisco Prime Network Registrar, see Cisco Prime Network Registrar 9.1 Administrator Guide for the procedure.
  • Page 44: Uninstalling On Linux

    Uninstalling Cisco Prime Network Registrar Uninstalling on Linux Uninstalling on Linux To uninstall Cisco Prime Network Registrar on Linux: Run the uninstall_cnr program from the install-path/usrbin directory: ./uninstall_cnr Stopping Server Agent... Deleting startup files... Removing Network Registrar... cannot remove /opt/nwreg2/usrbin - directory not empty cannot remove /opt/nwreg2/conf - directory not empty package optnwreg2 not found in file index Note that any files that have been changed (including your database) have _not_ been...
  • Page 45: System Requirements

    C H A P T E R Cisco Prime Network Registrar Virtual Appliance The Cisco Prime Network Registrar virtual appliance includes all the functionality available in a version of Cisco Prime Network Registrar 9.1 installed on any Linux operating system. This chapter describes how to install Cisco Prime Network Registrar virtual appliance and includes the following sections: •...
  • Page 46: Installing And Upgrading Cisco Prime Network Registrar Virtual Appliance

    Cisco Prime Network Registrar Virtual Appliance Installing and Upgrading Cisco Prime Network Registrar Virtual Appliance • Memory: 12 GB • Disk: 100 GB or greater For a regional cluster running on the same Jumpstart as a local cluster: • CPU: 1 socket, 7 CPUs •...
  • Page 47: Deploying The Regional Cluster Ova Or Local Cluster Ova On Vmware

    Cisco Prime Network Registrar Virtual Appliance Deploying the Regional Cluster OVA or Local Cluster OVA on VMware • Any proxy values necessary for the virtual appliance to access the Internet (if you want the virtual appliance to have access to the Internet). •...
  • Page 48: Booting And Configuring Cisco Prime Network Registrar Virtual Appliance

    Cisco Prime Network Registrar Virtual Appliance Booting and Configuring Cisco Prime Network Registrar Virtual Appliance Step 2 To deploy the OVA file, click Browse and navigate to select the OVA file (.ova) available on the local machine where vSphere is running. Note You cannot browse for URLs and you must enter the full path to the file.
  • Page 49: Deploying The Regional Cluster Or Local Cluster On A Kvm Hypervisor

    Cisco Prime Network Registrar Virtual Appliance Deploying the Regional Cluster or Local Cluster on a KVM Hypervisor The End User License Agreement window appears on the first boot. Read the license agreement in its entirety, and only if you understand and accept the license terms, enter y (Yes). Step 3 Log into the server as the root user.
  • Page 50: Deploying The Regional Cluster Or Local Cluster On Openstack

    Cisco Prime Network Registrar Virtual Appliance Deploying the Regional Cluster or Local Cluster on OpenStack Once the installation is complete, see Configuring Network Access on CentOS 7.3 Using nmcli, on page Deploying the Regional Cluster or Local Cluster on OpenStack To install the Cisco Prime Network Registrar virtual appliance, you must first download the correct installation file.
  • Page 51 Cisco Prime Network Registrar Virtual Appliance Deploying the Regional Cluster or Local Cluster on OpenStack Option 2 If you wish to deploy the Cisco Prime Network Registrar virtual appliance instance in a way that is more in accordance with the usual practice for OpenStack instance deployment, you can configure the Cisco Prime Network Registrar OpenStack instance to not allow root logins with a password, and require an SSH key-pair to login.
  • Page 52: Upgrading The Cisco Prime Network Registrar Virtual Appliance

    Cisco Prime Network Registrar Virtual Appliance Upgrading the Cisco Prime Network Registrar Virtual Appliance address allocated to this instance. Then the DHCP server will return the configured IP address (which will be the externally visible IP address of this instance) instead of the IP address that the DHCP server can detect from examining the interface that it is using for communications with clients (which is the fixed IP address).
  • Page 53 Cisco Prime Network Registrar Virtual Appliance Upgrading a Cisco Prime Network Registrar Installation to run on a Cisco Prime Network Registrar Virtual Appliance This procedure upgrades a current version of Cisco Prime Network Registrar running on a Linux operating Note system to a current version of the Cisco Prime Network Registrar virtual appliance.
  • Page 54: Upgrading To A New Version Of The Virtual Appliance Operating System

    Cisco Prime Network Registrar Virtual Appliance Upgrading to a new Version of the Virtual Appliance Operating System Step 9 Rename the existing database to .orig using the command: mv /var/nwreg2/local/data /var/nwreg2/local/data.orig Step 10 Untar the latest database, transferred in Step 4, using tar xvf tarfile.tar. Step 11 Reboot the Cisco Prime Network Registrar virtual appliance using VMware vSphere.
  • Page 55: Next Steps: Cisco Prime Network Registrar Virtual Appliance

    Cisco Prime Network Registrar Virtual Appliance Next Steps: Cisco Prime Network Registrar Virtual Appliance Next Steps: Cisco Prime Network Registrar Virtual Appliance Configuring Cisco Prime Network Registrar with the CLI on Virtual Appliance The Cisco Prime Network Registrar command line interpreter (CLI) can be used to configure the virtual appliance in two ways: •...
  • Page 56: Managing The Cisco Prime Network Registrar Virtual Appliance

    Cisco Prime Network Registrar Virtual Appliance Managing the Cisco Prime Network Registrar Virtual Appliance Step 5 Check the Allow virtual machines to start and stop automatically with the system check box. Step 6 Select the virtual machine running the Cisco Prime Network Registrar virtual appliance and use the Move Up button on the right to move it up into the group labelled Automatic Startup Step 7 Click OK...
  • Page 57: Performing A Silent Installation

    A P P E N D I X Performing a Silent Installation This appendix contains the following section: • Performing a Silent Installation , page 51 Performing a Silent Installation This appendix describes how to perform a silent installation, upgrade, or uninstallation of the Cisco Prime Network Registrar product.
  • Page 58 Performing a Silent Installation Performing a Silent Installation Create a text silent-response file that includes the entries listed in the table below. Table 3: Silent-Response File Entries for Linux Silent-Response File Entry Description BACKUPDIR= Path where to store the current Cisco Prime Network Registrar installation files, but only if PERFORM_BACKUP=y CCM_LOCAL_SERVICES=...
  • Page 59 Performing a Silent Installation Performing a Silent Installation Silent-Response File Entry Description CNR_SECURITY_MODE= Security mode configuration: • required - Fail if the connection cannot be secured. • optional - Allow fallback to insecure connection. • disabled - Do not load security modules at startup. DATADIR= Fully qualified path to the data directory JAVADIR=...
  • Page 60 Performing a Silent Installation Performing a Silent Installation Silent-Response File Entry Description WEBUI_PORT= Port number that the web UI uses for HTTP traffic; default value is: • 8080 if CNR_CCM_MODE=local • 8090 if CNR_CCM_MODE=regional WEBUI_SEC_PORT= Port number that the web UI uses for HTTPS traffic; default value is: •...
  • Page 61 Performing a Silent Installation Performing a Silent Installation • Linux—Invoke the silent uninstallation (this command is noninteractive except during an error): uninstall_cnr Cisco Prime Network Registrar 9.1 Installation Guide...
  • Page 62 Performing a Silent Installation Performing a Silent Installation Cisco Prime Network Registrar 9.1 Installation Guide...
  • Page 63: Lab Evaluation Installations

    A P P E N D I X Lab Evaluation Installations This appendix contains the following sections: • Lab Evaluation Installations, page 57 • Installing Cisco Prime Network Registrar in a Lab, page 58 • Testing the Lab Installation, page 58 •...
  • Page 64: Installing Cisco Prime Network Registrar In A Lab

    Lab Evaluation Installations Installing Cisco Prime Network Registrar in a Lab Installing Cisco Prime Network Registrar in a Lab To install Cisco Prime Network Registrar on a single machine for evaluation purposes: Step 1 Check whether the machine has enough disk space to accommodate two separate installations of Cisco Prime Network Registrar.
  • Page 65: Installing On Linux

    A P P E N D I X Installing the Cisco Prime Network Registrar This section documents how to install the Cisco Prime Network Registrar SDK on the Linux and Windows platforms. Before installing the SDK, ensure that you have Java Runtime Environment (JRE) 1.7 or later, or the equivalent Java Development Kit (JDK), installed on your system.
  • Page 66: Installing On Windows

    Installing the Cisco Prime Network Registrar SDK Installing on Windows Installing on Windows To install the Cisco Prime Network Registrar SDK on a Windows platform: Step 1 Extract the contents of the distribution .tar file. a) Create the SDK directory: >...
  • Page 67 Installing the Cisco Prime Network Registrar SDK Compatibility Considerations No changes are required for client code that adds or removes reservations using the addReservation or removeReservation methods. However, these methods are now deprecated because the edit functionality is replaced and extended by the general addObject, modifyObject, removeObject, addObjectList, modifyObjectList, and removeObjectList methods.
  • Page 68 Installing the Cisco Prime Network Registrar SDK Compatibility Considerations Cisco Prime Network Registrar 9.1 Installation Guide...
  • Page 69: Enhancing Security For Web Ui

    A P P E N D I X Enhancing Security for Web UI This appendix contains the following section: • Enhancing Security for Web UI, page 63 Enhancing Security for Web UI When connected through the Secured Socket Layer (SSL) protocol using HTTPS, the web UI uses the default ciphers for the Java Virtual Machine (JVM).
  • Page 70 Enhancing Security for Web UI Enhancing Security for Web UI ciphers="SSL_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA" keystoreFile="conf/.keystore" keystorePass="changeit" sslProtocol="TLS" /> The ciphers attribute can carry a comma-separated list of encryption ciphers that this socket is allowed to use. By default, the web UI uses the default ciphers for the Java Virtual Machine (JVM).
  • Page 71: Hardening Guidelines

    A P P E N D I X Hardening Guidelines This appendix contains the following section: • Hardening Guidelines, page 65 Hardening Guidelines Cisco does not recommend any specific set of hardening guidelines. However, if you consider hardening the system, the following hardening guidelines should be considered for each host platform: •...
  • Page 72 Hardening Guidelines Hardening Guidelines Cisco Prime Network Registrar 9.1 Installation Guide...
  • Page 73: Configuring Network Access On Centos 7.3 Using Nmcli

    A P P E N D I X Configuring Network Access on CentOS 7.3 Using nmcli This appendix contains the following section: • Configuring Network Access on CentOS 7.3 Using nmcli, page 67 Configuring Network Access on CentOS 7.3 Using nmcli The NetworkManager command-line tool (nmcli) provides a command line way to configure networking by controlling NetworkManager.
  • Page 74 Configuring Network Access on CentOS 7.3 Using nmcli Configuring Network Access on CentOS 7.3 Using nmcli not need to perform this procedure unless the interface is listed as unmanaged. Follow the steps below to allow it to be managed by NetworkManager: a) Remove the line NM_CONTROLLED-no from the file /etc/sysconfig/network-scripts/ifcfg-<interface>, where is the interface name listed in the command.
  • Page 75 Configuring Network Access on CentOS 7.3 Using nmcli Configuring Network Access on CentOS 7.3 Using nmcli Step 6 Use the following command to examine information about a connection. You may examine information about a connection by using this command: nmcli -p con show <config> This will typically scroll off of the console screen, leaving the beginning unreadable.
  • Page 76 Configuring Network Access on CentOS 7.3 Using nmcli Configuring Network Access on CentOS 7.3 Using nmcli Cisco Prime Network Registrar 9.1 Installation Guide...
  • Page 77: Changing The Ip Address Using Nmcli

    A P P E N D I X Changing the IP Address using nmcli This appendix contains the following section: • Changing the IP Address Using nmcli, page 71 Changing the IP Address Using nmcli If you need to change the IP address of a local or regional cluster, you can make these changes very easily using nmcli.
  • Page 78 Changing the IP Address using nmcli Changing the IP Address Using nmcli Cisco Prime Network Registrar 9.1 Installation Guide...
  • Page 79 I N D E X Add License page error logging 16, 38 web UI;Web UI:Add License page archive directories archiving gtar gtar utility gzip certificate file gzip utility importing;keytool utility ciphers adjusting 1, 7, 31, 32 license set key command HTTP connection requirements HTTPS connection...
  • Page 80 Index installation (continued) logging 16, 38 overview server events 16, 38 processing messages startups 16, 38 secure login Windows silent system privileges troubleshooting types upgrade market segement specific license keys upgrade process Web UI port Network Registrar about; noninteractive Java 7, 22 nwreglocal and nwregregion 33, 34...
  • Page 81 Index server-client installation upgrade (continued) servers 2, 15, 16, 32, 38 JRE/JDK requirements DHCP lab evaluation network distribution logging events overview 16, 38 running with other processing messages starting/stopping secure login setup.exe file silent silent installations system privileges Start menu types 19, 31 access...
  • Page 82 Index Cisco Prime Network Registrar 9.1 Installation Guide IN-4...

This manual is also suitable for:

Sh470

Table of Contents