Cisco ASR 5500 Mode d’emploi

ASR 5500 System Administration Guide, StarOS Release 19

First Published: September 30, 2015

Last Modified: June 30, 2016

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://

www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership

relationship between Cisco and any other company. (1110R)

CONTENTS

Preface

About this Guide xxv

Conventions Used xxv

Related Documentation xxvi

MIOs and DPCs xxvi

Contacting Customer Support xxvii

CHAPTER 1

System Operation and Configuration 1

System Management Overview 1

Terminology 3

Contexts 3

Ports 3

Logical Interfaces 3

Management Interface 4

Bindings 4

Services 4

AAA Servers 5

Subscribers 5

How the System Selects Contexts 6

Context Selection for Context-level Administrative User Sessions 6

Context Selection for Subscriber Sessions 8

Understanding the ASR 5500 Boot Process 8

Understanding Configuration Files 10

IP Address Notation 11

IPv4 Dotted-Decimal Notation 11

IPv6 Colon-Separated-Hexadecimal Notation 12

CIDR Notation 12

Alphanumeric Strings 13

ASR 5500 System Administration Guide, StarOS Release 19

iii

Character Set 13

Quoted Strings 14

CHAPTER 2

Getting Started 15

ASR 5500 Configuration 15

Using the ASR 5500 Quick Setup Wizard 15

Using the CLI for Initial Configuration 21

Configuring the System for Remote Access 23

Configuring SSH Options 25

SSH Keys 25

Setting SSH Key Size 26

Specifying SSH Encryption Ciphers 26

Generating SSH Keys 27

Setting SSH Key Pair 27

Authorized SSH User Access 28

Authorizing SSH User Access 28

SSH User Login Authentication 28

Configuring the Management Interface with a Second IP Address 29

CHAPTER 3

System Settings 31

Configuring a Second Management Interface 31

Verifying and Saving Your Interface and Port Configuration 32

Configuring System Timing 33

Setting the System Clock and Time Zone 33

Verifying and Saving Your Clock and Time Zone Configuration 33

Configuring Network Time Protocol Support 34

Configuring NTP Servers with Local Sources 35

Using a Load Balancer 35

Verifying the NTP Configuration 35

Enabling CLI Timestamping 37

Configuring CLI Confirmation Prompts 37

Enabling Automatic Confirmation 37

Requiring Confirmation for autoconfirm and configure Commands 38

Requiring Confirmation for Specific Exec Mode Commands 38

Configuring System Administrative Users 39

ASR 5500 System Administration Guide, StarOS Release 19

Contents

Configuring Context-level Administrative Users 40

Configuring Context-level Security Administrators 40

Configuring Context-level Administrators 40

Configuring Context-level Operators 41

Configuring Context-level Inspectors 41

Verifying Context-level Administrative User Configuration 41

Configuring Local-User Administrative Users 42

Verifying Local-User Configuration 42

Updating Local-User Database 43

Restricting User Access to a Specified Root Directory 43

Configuring an SFTP root Directory 43

Associating an SFTP root Directory with a Local User 43

Associating an SFTP root Directory with an Administrator 44

Associating an SFTP root Directory with a Config Administrator 44

Configuring TACACS+ for System Administrative Users 44

Operation 44

User Account Requirements 45

TACACS+ User Account Requirements 45

StarOS User Account Requirements 45

Configuring TACACS+ AAA Services 46

Configuring TACACS+ for Non-local VPN Authentication 47

Verifying the TACACS+ Configuration 47

Configuring a Chassis Key 48

Overview 48

Configuring a New Chassis Key Value 48

CLI Commands 48

Quick Setup Wizard 49

Configuring MIO/UMIO Port Redundancy 50

Configuring MIO/UMIO Port Redundancy Auto-Recovery 52

Verifying Port Redundancy Auto-Recovery 53

Configuring Data Processing Card Availability 53

Verifying Card Configurations 54

Enabling Automatic Reset of FSC Fabric 54

Configuring ASR 5500 Link Aggregation 54

LAG and Master Port 55

ASR 5500 System Administration Guide, StarOS Release 19

Contents

LAG and Port Redundancy 55

LAG and Multiple Switches 55

Multiple Switches with L2 Redundancy 55

Port States for Auto-Switch 56

Hold Time 56

Preferred Slot 56

Auto-Switch Criteria 57

Link Aggregation Control 57

Minimum Links 58

Redundancy Options 59

Horizontal Link Aggregation with Two Ethernet Switches 59

Non-Redundant (Active-Active) LAG 59

Link Aggregation Status 60

Configuring a Demux Card 61

Overview 61

MIO Demux Restrictions 61

Configuration 62

CHAPTER 4

Management Settings 63

ORBEM 63

Configuring ORBEM Client and Port Parameters 64

Configuring IIOP Transport Parameters 64

Verifying ORBEM Parameters 65

SNMP MIB Browser 65

SNMP Support 68

Configuring SNMP and Alarm Server Parameters 68

Verifying SNMP Parameters 69

Controlling SNMP Trap Generation 70

CHAPTER 5

Verifying and Saving Your Configuration 71

Verifying the Configuration 71

Feature Configuration 71

Service Configuration 72

Context Configuration 72

System Configuration 72

ASR 5500 System Administration Guide, StarOS Release 19

Contents

Finding Configuration Errors 72

Synchronizing File Systems 73

Saving the Configuration 73

CHAPTER 6

System Interfaces and Ports 75

Contexts 75

Creating Contexts 75

Viewing and Verifying Contexts 76

Ethernet Interfaces and Ports 76

Creating an Interface 77

Configuring a Port and Binding It to an Interface 77

Configuring a Static Route for an Interface 77

Viewing and Verifying Port Configuration 78

CHAPTER 7

System Security 81

Per-Chassis Key Identifier 81

MIO Synchronization 82

Protection of Passwords 82

Secure Password Encryption 82

Support for Non-Current Encryptions and Decryptions 83

Support for ICSR Configurations 83

Encrypted SNMP Community Strings 84

Lawful Intercept Restrictions 84

LI Server Addresses 84

Modifying Intercepts 85

Adding, Modifying and Removing Users 85

Notification of Users Being Added or Deleted 85

Notification of Changes in Privilege Levels 85

User Access to Operating System Shell 85

Test-Commands 86

Enabling cli test-commands Mode 86

Enabling Password for Access to CLI-test commands 86

Exec Mode cli test-commands 87

Configuration Mode cli test-commands 87

ASR 5500 System Administration Guide, StarOS Release 19

vii

Contents

CHAPTER 8

Software Management Operations 89

Understanding the Local File System 89

File Types Used by the Local File System 89

Understanding the boot.sys File 90

Maintaining the Local File System 90

File System Management Commands 90

Synchronizing the File System 91

Creating Directories 91

Renaming Files and Directories 91

Copying Files on the ASR 5500 Chassis 92

Deleting Files 92

Removing Directories 92

Formatting Local Devices 92

Applying Pre-existing CLI Configuration Files 93

Viewing Files on the Local File System 93

Viewing the Contents of a Local Device 93

Viewing CLI Configuration and boot.sys Files 94

Validating an Operating System File 94

Configuring the Boot Stack 95

System Boot Methods 95

Viewing the Current Boot Stack 95

Adding a New Boot Stack Entry 97

Deleting a Boot Stack Entry 97

Network Booting Configuration Requirements 97

Configuring the Boot Interface 97

Configuring the Boot Network 98

Configuring Boot Network Delay Time 99

Configuring a Boot Nameserver 99

Upgrading the Operating System Software 99

Identifying OS Release Version and Build Number 100

Verify Free Space on the /flash Device 100

Download the Software Image from the Support Site 100

Transfer StarOS Image to /flash on the Chassis 101

Saving a Copy of the Current Configuration File 101

ASR 5500 System Administration Guide, StarOS Release 19

viii

Contents

Downgrading from Release 15.0 to 14.0 101

Off-line Software Upgrade 102

Configure a Newcall Policy 102

Configure a Message of the Day Banner 102

Back up the Current CLI Configuration File 103

Create a New Boot Stack Entry 103

Synchronize File Systems 103

Save the Running Configuration 103

Reboot the Chassis 104

Verify the Running Software Version 104

Restoring the Previous Software Image 104

Upgrading ICSR Chassis 104

Performing Dynamic Software Updates 104

Managing License Keys 105

New System License Keys 105

Session Use and Feature Use Licenses 105

Installing New License Keys 105

Cutting and Pasting the Key 106

Adding License Keys to Configuration Files 106

License Expiration Behavior 107

Requesting License Keys 107

Viewing License Information 108

Deleting a License Key 108

Management Card Replacement and License Keys 108

Managing Local-User Administrative Accounts 108

Configuring Local-User Password Properties 108

Configuring Local-User Account Management Properties 109

Local-User Account Lockouts 109

Local-User Account Suspensions 109

Changing Local-User Passwords 109

CHAPTER 9

Monitoring the System 111

SNMP Notifications 111

Monitoring System Status and Performance 111

Clearing Statistics and Counters 113

ASR 5500 System Administration Guide, StarOS Release 19

Contents

Monitoring ASR 5500 Hardware Status 113

CHAPTER 10

Bulk Statistics 115

Configuring Communication with the Collection Server 115

Configuring Standard Settings 115

Configuring Optional Settings 116

Configuring Bulk Statistic Schemas 116

Using show bulkstats Commands 116

Verifying Your Configuration 117

Saving Your Configuration 118

Viewing Collected Bulk Statistics Data 118

Manually Gathering and Transferring Bulk Statistics 118

Clearing Bulk Statistics Counters and Information 118

Bulkstats Schema Nomenclature 118

Statistic Types 119

Data Types 119

Bulk Statistics Event Log Messages 119

CHAPTER 11

System Logs 121

System Log Types 121

Configuring Event Logging Parameters 122

Configuring Event Log Filters 122

Exec Mode Filtering 122

Global Configuration Mode Filtering 123

Configuring syslog Servers 124

Configuring Active Logs 124

Specifying Facilities 125

Configuring Trace Logging 134

Configuring Monitor Logs 134

Enabling Monitor Logs 134

Disabling Monitor Logs 134

Viewing Logging Configuration and Statistics 135

Viewing Event Logs Using the CLI 135

Configuring and Viewing Crash Logs 136

Crash Logging Architecture 136

ASR 5500 System Administration Guide, StarOS Release 19

Contents

Autres manuels pour ASR 5500

Table des matières

Autres manuels Cisco Matériel réseau

Cisco

Cisco Linksys NSLU2 Manuel utilisateur

Cisco

Cisco Mc3810 - 16MB Flash Memory Guide rapide

Cisco

Cisco Octal-Port DMT ATU-C Line Card Manuel technique

Cisco

Cisco 6500 - Catalyst Series 10 Gigabit EN Interface Module... Manuel utilisateur

Cisco

Cisco ONS 15454 SDH E1-75 Manuel utilisateur

Cisco

Cisco Remote PHY Shelf 7200 Manuel d'installation

Cisco

Cisco NCS 1004 Manuel utilisateur

Cisco

Cisco ME 1200 Series Manuel

Cisco

Cisco MGX 8260 Guide de démarrage rapide

Cisco

Cisco ONS 15310-CL Manuel utilisateur

Cisco

Cisco Meraki MX68 Manuel

Cisco

Cisco NM-1FE-TX - Interface Module Ethernet Manuel utilisateur

Cisco

Cisco CX-FEIP-1FX= Installation and con?guration Manuel utilisateur

Cisco

Cisco NCS 1004 Manuel utilisateur

Cisco

Cisco OL-6109-01 Manuel utilisateur

Cisco

Cisco CPS-MSP-1RU-K9 Manuel utilisateur

Cisco

Cisco Aironet 1400 Series Manuel utilisateur

Cisco

Cisco Firepower 1010 Series Manuel

Cisco

Cisco Engine 611 Manuel utilisateur

Cisco

Cisco Firepower 1010 Manuel utilisateur

Cisco

Cisco Firepower 9300 Guide de maintenance et de service

Cisco

Cisco NCS 1002 Mise à jour du firmware

Cisco

Cisco NCS 2006 Manuel

Cisco

Cisco ONS 15454 Manuel utilisateur

Manuels Matériel réseau populaires d'autres marques

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Manuel utilisateur

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Manuel utilisateur

Yudor

Yudor YDS-16 Manuel utilisateur

D-Link

D-Link ShareCenter DNS-320L Manuel utilisateur

Samsung

Samsung ES1642dc Instructions d'utilisation

Honeywell Home

Honeywell Home LTEM-PV Instructions de montage

evertz

evertz 7700 Series Manuel utilisateur

D-Link

D-Link ShareCenter DNS-343 Manuel utilisateur

Asante

Asante AsanteBridge 1012 Manuel utilisateur

FireBrick

FireBrick FB2700 Manuel utilisateur

Audiovox Electronics

Audiovox Electronics ARWH2T Manuel utilisateur

ADC

ADC DSX-1 Manuel

NetComm

NetComm NF2 Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 5620 Manuel utilisateur

Dell EMC

Dell EMC XC6420 Series Manuel utilisateur

Lanner

Lanner NCA-1020A Manuel utilisateur

Allied Telesis

Allied Telesis AT-TN121-A Manuel utilisateur

Arista

Arista CCA-ETM-Q12 Manuel utilisateur