Cisco Prime Infrastructure 3.0 Administrator GuideMarch 4, 2016

Americas HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706 USAhttp://www.cisco.comTel: 408 526-4000

800 553-NETS (6387)Fax: 408 527-0883

Text Part Number:

http://www.cisco.com

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCBs public domain version of the UNIX operating system. All rights reserved. Copyright 1981, Regents of the University of California.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED AS IS WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1721R)

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.

Cisco Prime Infrastructure 3.0 Administrator Guide 2011-2016 Cisco Systems, Inc. All rights reserved.

https://www.cisco.com/go/trademarks

C O N T E N T S

C H A P T E R 1 Introduction to Administering Cisco Prime Infrastructure 1-1

C H A P T E R 2 Administrator Setup Tasks 2-1

Setting Up Operations Center 2-1Before You Begin Setting Up Operations Center 2-2Activating Your Operations Center License 2-2Enabling SSO for Operations Center 2-3Troubleshooting Operations Center SSO Issues 2-4Adding Prime Infrastructure Instances to Operations Center 2-6Disabling Idle User Timeouts for Operations Center 2-6Enabling AAA for Operations Center 2-7Operations Center Next Steps 2-7

Required Software Versions and Configurations 2-8Configuring SNMP 2-8Configuring NTP 2-9

Configuring Data Sources for Prime Infrastructure With Assurance 2-9Supported Assurance Data Sources 2-9Configuring Assurance Data Sources 2-10

Enabling Medianet NetFlow 2-11

Enabling NetFlow and Flexible NetFlow 2-13

Deploying Network Analysis Modules (NAMs) 2-14

Enabling Performance Agent 2-14

Installing Prime Infrastructure Patches 2-15

C H A P T E R 3 Prime Infrastructure Server Settings 3-1

Available System Settings 3-2

Configuring Email Settings 3-6

Configuring Global SNMP Settings 3-7Viewing SNMP Credential Details 3-8Adding SNMP Credentials 3-9Importing SNMP Credentials 3-10

Configuring Proxy Settings 3-11

iiiCisco Prime Infrastructure 3.0 Administrator Guide

Contents

Configuring Server Port and Global Timeout Settings 3-12

Enabling Compliance Services 3-13

Configuring Remote FTP, TFTP, and SFTP Servers 3-14

Accessing ACS View Servers From Prime Infrastructure 3-14

Configuring ISE Servers 3-14

Specifying Administrator Approval for Jobs 3-15

Approving Jobs 3-15

Specifying Login Disclaimer Text 3-15

Adding Device Information to a User Defined Field 3-16

Managing OUIs 3-16Adding a New Vendor OUI Mapping 3-17Uploading an Updated Vendor OUI Mapping File 3-17

Adding Notification Receivers to Prime Infrastructure 3-18Removing Notification Receivers 3-18Sample Log File from North-Bound SNMP Receiver 3-19

Setting Up HTTPS Access to Prime Infrastructure 3-19Generating and Applying Self-Signed Certificates 3-20Obtaining and Importing CA-Signed Certificates 3-20Deleting CA-Signed Certificates 3-21

MIB to Prime Infrastructure Alert/Event Mapping 3-23

Product Feedback Data Collection 3-25

C H A P T E R 4 Maintaining Prime Infrastructure Server Health 4-1

Monitoring Prime Infrastructure Health 4-2

Troubleshooting Prime Infrastructure 4-2Launching the Cisco Support Community 4-3Opening a Support Case 4-3

Evaluating OVA Size and System Resources 4-4Viewing the Number of Devices Prime Infrastructure Is Managing 4-5

Improving Prime Infrastructure Performance 4-6Tuning the Server 4-6

Enabling Server Tuning During Restarts 4-7Modifying VM Resource Allocation Using VMware vSphere Client 4-7

Compacting the Prime Infrastructure Database 4-8Configuring Client Performance Settings 4-8

Enabling Automatic Client Troubleshooting 4-9Enabling DNS Hostname Lookup 4-9Specifying How Long to Retain Client Association History Data 4-10

ivCisco Prime Infrastructure 3.0 Administrator Guide

Contents

Polling Clients When Receiving Client Traps/Syslogs 4-10Saving Client Traps as Events 4-11Saving 802.1x and 802.11 Client Traps as Events 4-11Enabling Enhanced Client Traps 4-11

Optimizing Memory for Assurance Processing 4-13Monitoring Assurance Memory Allocation and Demand 4-14Increasing the Assurance Memory Pool Via CLI 4-14Balancing Assurance Memory Allocation 4-15Resetting Assurance Memory Allocation 4-15Resetting the Assurance Memory Pool 4-16

Managing Data Sources 4-17Viewing Current Data Sources 4-17Deleting Data Sources 4-18

Performing Special Administrative Tasks 4-19Connecting Via CLI 4-20Starting Prime Infrastructure 4-21Checking Prime Infrastructure Server Status 4-21Checking Prime Infrastructure Version and Patch Status 4-22Stopping Prime Infrastructure 4-22Restarting Prime Infrastructure 4-23Removing Prime Infrastructure 4-23Resetting Prime Infrastructure to Defaults 4-24Restoring Physical Appliances to Clean State 4-24Changing the Prime Infrastructure Host Name 4-25Enabling the FTP User 4-25Changing the Root User Password 4-26Recovering Administrator Passwords on Virtual Appliances 4-27Recovering Administrator Passwords on Physical Appliances 4-28Getting the Installation ISO Image 4-29

Keeping Prime Infrastructure Software Updated 4-30Viewing Installed and Available Software Updates 4-30

Getting Software Update Notifications 4-31Configuring Software Update Notifications 4-31Viewing Details of Installed Software Updates 4-32Viewing Installed Updates From the Login Page 4-32Viewing Installed Updates From the About Page 4-32

Installing Software Updates 4-33Installing Software Updates from Cisco.com 4-33Uploading and Installing Downloaded Software Updates 4-34

vCisco Prime Infrastructure 3.0 Administrator Guide

Contents

Using Your Cisco.com Account Credentials with Prime Infrastructure 4-35Saving Cisco.com Account Credentials in Prime Infrastructure 4-35Deleting Cisco.com Account Credentials 4-35

Configuring Support Request Settings 4-36

Managing Disk Space Issues 4-37

C H A P T E R 5 Backing Up and Restoring Prime Infrastructure 5-1

Backup and Restore Concepts 5-1Backup Types 5-2Backup Scheduling 5-2Backup Repositories 5-3Backup Filenames 5-4Validating Backups 5-5Information Contained in Backup Files 5-6Using Backup and Restore to Replace Servers 5-7

Using Automatic Application Backups 5-7Scheduling Automatic Application Backups 5-8Triggering Application Backups 5-8Specifying Automatic Application Backup Repositories 5-9Creating Local Backup Repositories 5-9Deleting Local Backup Repositories 5-10

Using Remote Backup Repositories 5-11Types of Backup Repositories 5-12Using Remote NFS Backup Repositories 5-12

Before You Begin NFS Backup Configuration 5-13Configuring the NFS Backup Server 5-14Configuring Prime Infrastructure to Use the NFS Backup Server 5-15

Using Remote SFTP Backup Repositories 5-16Using Remote FTP Backup Repositories 5-18

Taking Backups From the Command Line 5-19Taking Application Backups 5-19Taking Appliance Backups 5-20

Restoring From Backups 5-21Restoring From Application Backups 5-21Restoring From Appliance Backups 5-23Migrating to Another Virtual Appliance Using Backup and Restore 5-24Migrating to Another Physical Appliance Using Backup and Restore 5-25Recovering From Failed Restores 5-26

Managing Disk Space Issues During Backup and Restore 5-26

viCisco Prime Infrastructure 3.0 Administrator Guide

Contents

Using Backup and Restore with Operations Center 5-27

C H A P T E R 6 Maintaining Network Health 6-1

Configuring Alarm and Event Settings 6-1Specifying A