Table of Contents

Logging On
Configuration Tasks

Configuring System-Wide Parameters
Configuring the Management Interfaces

Viewing Management Interface Parameters
Changing Management Interface Parameters

Synchronizing the System Clock

Viewing Clock Parameters
Setting the Primary or Secondary Clock Source
Switching the Clock Source

Configuring SNMP Communities

Viewing Community Strings
Adding Community Strings
Deleting Community Strings
Viewing SNMP Trap Registrations
Adding SNMP Trap Subscriptions
Changing SNMP Trap Subscriptions
Deleting SNMP Trap Registrations

Working with User Profiles

Viewing User Accounts
Adding New Users
Changing User Accounts
Changing Passwords
Deleting Users

Upgrading Software

Node Management

System management screens configure the overall parameters of an Cisco MGX 8260 node and define its interactions with other nodes and servers.

Logging On

Before you can configure the Cisco MGX 8260, you must log on as a user with the privilege to change system parameters. You need SuperUser privileges to change most system-level settings.

To log on, follow these steps:

Step 2 Connect to the MGX 8260 HTTP server using the conventional http:// notation. You need to know the host name or IP address for the desired MGX 8260 node.

Step 3 The logon screen is displayed.

Step 4 In the User Id field, enter SuperUser.

Step 5 In the Password field, enter cisco or the new password you assigned to this account.

The Cisco MGX 8260 displays the chassis view (see Figure 14-1).

Configuration Tasks

See the following sections for configuration tasks for nodes:

• Configuring System-Wide Parameters

• Configuring the Management Interfaces

• Synchronizing the System Clock

• Configuring SNMP Communities

• Configuring SNMP Communities

• Working with User Profiles

• Upgrading Software

Configuring System-Wide Parameters

To view or change system-wide parameters, follow these steps:

Step 2 Click System.

The system form opens, displaying existing settings (see Figure 14-2).

Configuring the Management Interfaces

You configure the MGX 8260 management interface for local or remote operation by setting the appropriate IP addresses and management paths. Assign management IP addresses for each of the following management interfaces that you plan to use:

• Ethernet 10BaseT management interface

• In-band management path

Note If you change the IP address of the port the WebViewer is using, you will interrupt the session.

Viewing Management Interface Parameters

To view management interface parameters, follow these steps:

Step 2 Click Management IP.

The Management IP Settings form opens, displaying existing settings.

Step 3 Interpret the information as follows:

Displayed Information	Description
Management Ethernet IP Address	The IP address for the 10BaseT port, expressed in standard IP dot notation
Management Ethernet IP Mask	The IP address mask for the 10BaseT port, expressed in standard IP dot notation
Management Gateway IP Address	The gateway for IP traffic to this node
Management Ethernet Mac Address	The MGX 8260 MAC address
In-band Management IP Address	The IP address for the inband management virtual port, expressed in standard IP dot notation
In-band Management IP Mask	The IP address mask for the inband management virtual port, expressed in standard IP dot notation

Changing Management Interface Parameters

To change the Ethernet parameters, follow these steps:

Step 2 Click Management IP.

The Management IP form opens.

Step 3 On the Management IP form, click Change Ethernet Setting.

The Management Ethernet IP Setting form opens.

Step 4 Enter the management Ethernet parameters:

Parameter	Description
Management Ethernet IP Address	The IP address for the 10BaseT port, expressed in standard IP dot notation.
Management Ethernet IP Mask	The IP address mask for the 10BaseT port, expressed in standard IP dot notation.

Step 5 Click Modify. The system updates the management IP interface.

Step 6 Click Back.

Step 7 If your system uses redundant management networks, click Change Ethernet IP2 Setting.

The Management Ethernet IP Setting 2 form opens.

Step 8 Enter the Ethernet IP address and subnet mask for the second management interface.

To change the in-band IP address, follow these steps:

Step 2 Click Management IP.

The Management IP form opens.

Step 3 On the Management IP form, click Change In-band Setting.

The Management In-band IP Setting form opens.

Step 4 Enter the in-band parameters:

Parameter	Description
In-band Management IP Address	The IP address for the inband management virtual port, expressed in standard IP dot notation
In-band Management IP Mask	The IP address mask for the inband management virtual port, expressed in standard IP dot notation

Step 5 Click Modify. The system updates the management IP interface.

Synchronizing the System Clock

The MGX 8260 clock module has three synchronization options:

• Building Integrated Timing Source (BITS)---A high quality timing source that synchronizes all equipment in the building

• Line---A clock derived from the receive line signal

• Local---An internal MGX 8260 timing source

You assign one clock source as the primary source and another as the secondary source. When using the line clock source, specify both the line and slot associated with the source.

During normal operation, the primary clock is the active source and the secondary clock is the backup source. If the active source fails, the Cisco MGX 8260 switches to the backup clock and reports an alarm. You can also switch to the backup source manually. This section explains how to set primary and secondary clocks and view clock status.

Viewing Clock Parameters

You view clock status with a single command. The clock parameters include:

• Status of the primary and secondary clocks

• The current clock source

• The lowest stratum level of the current clock source

To view clock source information, follow these steps:

Step 2 Click Clock Source.

The Clock Source screen opens.

Step 3 Interpret clock settings as follows:

Setting	Description
Primary and Secondary Clock Source Slot	The slot number for the clock source
Primary and Secondary Clock Source Line	The line number for the clock source
Primary and Secondary Clock Source Type	The clock source type: broadBandClk narrowBandClk externalClk internalClk
Primary and Secondary Clock Status	The clock status: OK noClock inaccurate
Current Clock	The current clock source: primary secondary internal
Current Clock Stratum	The level of Stratum clock: level 3 level 4
Clock Source Card Type	The type of card for the clock source: bits oc3

Note The selected clock source may not be the active clock source if the selected clock fails.

Setting the Primary or Secondary Clock Source

To set the clock source, follow these steps

Step 2 Click Clock Source.

The Clock Source screen opens.

Step 3 Click either Primary Setting or Secondary Setting, as appropriate.

The corresponding clock source setting dialog box opens.

The form displays the following read-only values:

Parameter	Description
Current Clock	The current clock source: primary secondary
Primary (or Secondary) Clock Status	The operational status of the primary clock source: OK noClock inaccurate
Current Clock Stratum	The level of Stratum clock: level 3 level 4

Step 4 Change the clock parameters as follows:

Table 14-1

Parameter	Description
Primary (or Secondary) Clock Source Slot	The slot supplying the clock. This argument is ignored if the clock source type is external (BITS) or internal. Valid entries: 1 to 16
Primary (or Secondary) Clock Source Line	The line number for the clock source. This argument is ignored if the clock source type is external (BITS) or internal. Valid entries: DS1 line: 1 to 16. DS3 line 501 to 506.
Primary (or Secondary) Clock Source Type	The clock source type: broadBandClk narrowBandClk externalClk internalClk
Clock Source Card Type	The type of card for the clock source: bits oc3

Step 5 Click Modify.

The system updates the clock settings.

Switching the Clock Source

You can force the system to switch between the primary and secondary clock. During normal operation, the current clock is the primary clock. Typically you switch clocks to restore the primary clock source after an automatic switchover to the secondary clock.To switch to the secondary clock, follow these steps:

Step 2 Click Clock Source.

The Clock Source screen opens.

Step 3 On the Clock Source screen, click Switch Clock Source and confirm your action.

Configuring SNMP Communities

When managing the Cisco MGX 8260 from a SNMP manager, security is enforced with password-like community strings. SNMP communities are groupings of workstations and servers (or gateways) that can manage the Cisco MGX 8260. Community strings are important when managing the Cisco MGX 8260 from a Network Management System, like HP Openview. You can configure up to 15 community strings.

Viewing Community Strings

To view all community strings, follow these steps:

Step 2 Click SNMP.

Step 3 From the SNMP options, click Community String.

The Community String screen opens.

Step 4 Interpret the table as follows:

Table Entry	Description
Manager IP Address	The IP address of the manager associated with this string
Community String	The name of the community string
Privilege	The manager's privilege, either read-write or read-only

Adding Community Strings

To add a community string, follow these steps:

Step 2 Click SNMP.

Step 3 From the SNMP options, click Community String.

The Community String screen opens.

Step 4 Click the "+" icon.

.The Add Community String form opens.

Step 5 Enter the following parameters:

Parameter	Description
Manager IP Address	The IP address of an SNMP manager, expressed in standard IP dot notation. When set to 0.0.0.0, the community string applies to all IP addresses.
Community String	The SNMP community, expressed as a text string of up to 20 characters. Typical strings are Public and Private.
Access Level	The privilege assigned to this community string: read-only read-write

Step 6 Click the Add button.

The system adds the community string.

Deleting Community Strings

To delete a community string, follow these steps:

Step 2 Click SNMP.

Step 3 From the SNMP options, click Community String.

The Community String screen opens.

Step 4 Click the "-" icon of the community string you want to delete and confirm your action.

The system deletes the community string.

Viewing SNMP Trap Registrations

To view trap registrations, follow these steps:

Step 2 Click Trap Registration.

The Trap Registration screen opens.

Step 3 Interpret the table as follows:

Table Entry	Description
Manager IP Address	The address of the SNMP manager you want to receive trap event messages.
UDP Port Num	Port to which the traps are transmitted.
Interface	The default interface for initially sending traps if the routing table has no trap manager: scc-eth-if scc-inband-if
Community String	SNMP community string for the trap. For more information, see the "Setting and Viewing SNMP Communities" section.
Subscribed Bitmap	A bitwise specification of trap subscription categories (see Table 14-2).
Latest Seq. Num	Latest sequence number.

Table 14-2: Trap Subscription Bits

Bit	Description
0	Major (trap severity selection)
1	Minor (trap severity selection)
2	Information (trap severity selection)
3	Shelf
4	Card
5	SNMP
6	Dsx1 Line
7	Dsx3 Line
8	Sonet Line
9	Ether Line
10	Voice Port
11	Ether Channel
12	Voice Channel
13	EMM
14	Clock
15	DSP
16	DMCMAP

Adding SNMP Trap Subscriptions

To add SNMP trap subscriptions, follow these steps:

Step 2 Click Trap Registration.

The Trap Registration screen opens.

Step 3 Click the "+" icon.

The Add Trap Registration form opens.

Step 4 Enter the trap parameters:

Parameter	Description
Manager IP Address	The address of the SNMP manager you want to receive trap event messages.
Mgr. UDP Port Num	Port to which the traps are transmitted. The default is 162.
Interface	The default interface for initially sending traps if the routing table has no trap manager: scc-eth-if scc-inband-if
Community String	SNMP community string for the trap. For more information, see "Setting and Viewing SNMP Communities" section.
Severity Selection	Checkbox selections for the alarm severity that triggers a notification: Major Minor Information
Type Selection	Checkbox selections for the type of alarm that triggers a notification: Shelf Card SNMP Dsx1 Line Dsx3 Line Sonet Line Ether Line Voice Port Ether Channel Voice Channel EMM Clock DSP DMCMAP

Step 5 Click Add.

The system registers the traps for the specified manager.

Changing SNMP Trap Subscriptions

To change SNMP trap subscriptions, follow these steps:

Step 2 Click Trap Registration.

The Trap Registration screen opens.

Step 3 Click the "i" icon.

The Modify Trap Registration form opens.

Step 4 Modify the trap parameters:

Parameter	Description
Manager IP Address	The address of the SNMP manager you want to receive trap event messages.
Mgr. UDP Port Num	Port to which the traps are transmitted. The default is 162.
Interface	The default interface for initially sending traps if the routing table has no trap manager: scc-eth-if scc-inband-if
Community String	SNMP community string for the trap. For more information, see the "Setting and Viewing SNMP Communities" section.
Trap Subscription Setting	Checkbox selections for trap registration: Major Minor Information Shelf Card SNMP Dsx1 Line Dsx3 Line Sonet Line Ether Line Voice Port Voice Channel EMM Clock DSP DMCMAP

Step 5 Click Modify.

The system modifies the trap registration for the specified manager.

Deleting SNMP Trap Registrations

To delete SNMP trap registrations, follow these steps:

Step 2 Click Trap Registration.

The Trap Registration screen opens.

Step 3 Click the "-" icon of the trap registration you want to delete and confirm your action.

The system deletes the registration.

Working with User Profiles

The Cisco MGX 8260 enforces security with user accounts and access levels. Users must log onto the Cisco MGX 8260 before performing any task, and authenticated users can perform only those tasks permitted by their access level. The Cisco MGX 8260 supports up to 20 user accounts, each with access privileges ranging from full control to guest.

Table 14-3: User Accounts and Access Privileges

Access Level	Account type	Command groups
1	SuperUser	Access all features
2	Administrator	Configure and view all features except user profiles and community strings
3	Provisioning	Configure and view system, port, lines, end points, and connections
4	Maintenance	Access selected level 3 commands
5	Operator	View system, port, lines, end points, and connections
6	Guest	View system, common lines and ports

Viewing User Accounts

To view all user accounts, follow these steps:

Step 2 Click User Profile.

The User Profile screen opens.

Step 3 Interpret the table as follows:

Table Entry	Description
User Num	The table entry for the user.
User Name	The user logon name.
Access Level	The security level for the account. See Table 14-3.

Adding New Users

To add a new user, follow these steps:

Step 2 On the Navigation pane, click Node.

Step 3 Click User Profile.

The User Profile screen opens.

Step 4 On the User Profile screen, click the"+" icon.

The Add User form opens.

Step 5 Enter the new user parameters:

Parameter	Description
User Name	The name for the new user, expressed as a case-sensitive alphanumeric string of four to ten characters. Special characters such as @, #, and $ are allowed.
Set Password	The account password, expressed as a case-sensitive alphanumeric string of one to ten characters. Special characters such as @, #, and $ are allowed.
Retype Password	Password verification.
Access level	The access privilege for the user. See Table 14-3.

Step 6 Click Add.

The system adds the new user account.

Step 7 Repeat these steps for other users you want to authorize.

Changing User Accounts

To change a user account, follow these steps:

Step 2 On the Navigation pane, click Node.

Step 3 Click User Profile.

The User Profile screen opens.

Step 4 On the User Profile screen, click the "i" icon for the account you want to modify.

The Modify User form opens.

Step 5 Change the user parameters:

Parameter	Description
User Name	The name for the user, expressed as a text string.
Set Password	The account password, expressed as an alphanumeric text string of one to ten characters. Special characters such as @, #, and $ are allowed.
Retype Password	Password verification.
Access level	The access privilege for the user. See Table 14-3.

Step 6 Click Modify.

The system applies the changes to the user account.

Changing Passwords

You can always change your own password, but you need SuperUser privilege to change the password of others.

To change a password, follow these steps:

The Change Password form opens.

Step 2 Enter the following parameters:

Parameters	Description
User Name	The account you want to change.
Original Password	The old password.
Set Password	The new password, expressed as an alphanumeric text string of one to ten characters. Special characters such as @, #, and $ are allowed.
Retype Password	Password verification.

Step 3 Click Modify Password. The system changes the account password.

Deleting Users

To delete a user, follow these steps:

Step 2 On the Navigation pane, click Node.

Step 3 Click User Profile.

The User Profile screen opens.

Step 4 On the User Profile screen, click the "-" icon on the row of the user you want to delete and then confirm your action.

The system removes the user from the database. Level 1 users return to their original SuperUser account.

Upgrading Software

Use this procedure to upgrade the software image for an MGX 8260 card. To upgrade software, you must conform to the Cisco file-naming convention and supply a security key. The security system disables tftp file transfers if the key is not configured or does not match. You can download up to 10 software images per card type.

Warning This is a service-affecting action. Perform this task during light traffic periods or in a pre-arranged maintenance window.

To download files to the Cisco MGX 8260, follow these steps:

Step 2 Click the File Download submenu.

The File Download screen opens.

Step 3 Type the complete path and filename for the file to download.

Step 4 Set the following parameters:

Parameters	Description
Card Image Type	The name of the card to restore: scc nsc bsc
Rev	A configuration revision number expressed as a hexadecimal number, such as 1A or 3F
File Type	The type of file: image---software image config---configuration data
Security Key	The six-character alphanumeric security key for the target Cisco MGX 8260 (reserved for future use)
File Name	The fully-qualified path and file name of the file to download. File names typically identify the card type, version, and file type. The following is an example of a software image file: SCC_R01.01.01.IMG

Step 5 Click Start Download.

The system loads the new software image and reboots the card.

Posted: Thu Mar 30 20:29:03 PST 2000
Copyright 1989 - 2000©Cisco Systems Inc.