Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

NCM Training - Part 2 - Automation, Notification, Compliance and Reports

78 views

Published on

In this session, you'll learn how to schedule configuration tasks using configlets for effective configuration management. You'll also learn how to stay compliant to industry standards, configure alerts & notifications with Network Configuration Manager.

Published in: Technology
  • Be the first to comment

  • Be the first to like this

NCM Training - Part 2 - Automation, Notification, Compliance and Reports

  1. 1. Configlets, Compliance, RBAC & Reports Free Network Configuration Manager Training – Part 2
  2. 2. • Configlets & it's uses • Compliance • Role-based access control (RBAC) • Schedules • Configuration search • Reports • Integrations Agenda
  3. 3. We are using NCM build number: 12.3.312 Build Number
  4. 4. What are configlets? • Executable configuration template • Applied to a device configuration Configlets What is it used for? • Fix faulty devices remotely • Execute changes in configurations • Execute network operation tasks
  5. 5. How to add a configlet?
  6. 6. File transfer mode Configlet Device 1 Device 2 Device 3 Device n
  7. 7. Script execution mode Configlet Device 1 Device 2 Device 3 Device n SNMP Enable/disable
  8. 8. Script execution mode - Example config t no snmp-server community public RO no snmp-server community public RW end
  9. 9. Advanced script execution mode • For commands that prompt user confirmation (Y/N) • When prompt changes after a command execution • When command execution takes more time, you may need to extend the timeout for the particular command. • If you want to stop command execution in case of any error in the middle • If you want to change a execution flow based on the device response
  10. 10. Advanced script execution mode <command prompt=']?'>copy flash:%IMAGE_FILENAME% tftp</command> <command prompt=']?'>%TFTP_SERVER_IP%</command> <command timeout='70'>%DESTINATION_FILE_NAME%</command>
  11. 11. Why compliance? • Avoid vulnerabilities & loopholes • Avoid legal consequences Compliance If you think compliance is expensive, try non-compliance. Default compliance policies in NCM: • Cisco IOS Policy • HIPAA • SOX • PCI
  12. 12. Custom policies Custom rule Rule group Policies
  13. 13. Custom rule AddClone
  14. 14. Simple criteria (2 criteria) • Should contain, should'nt contain, exact set , not exact set • Number of times Simple criteria
  15. 15. Advanced criteria (4 criteria) • And/or • Should contain, shouldn't contain • Pattern (RegEx) • Number of times Advanced criteria
  16. 16. RegEx commands http://help.networkconfigurationmanager.com/compliance_v12
  17. 17. Advanced custom criteria (Block-based criteria) • Block criteria (Start & End) • Additional block criteria • And/or • Should contain, shouldn't contain, exact set , not exact set • Pattern (RegEx) • Number of times Advanced custom criteria
  18. 18. Compliance reports
  19. 19. • What is it? Role-based access control (RBAC) Operator Admin • Why does your organization need RBAC? • How NCM helps with RBAC? • User management • User authentication: Local, AD, Radius • Approval notifications
  20. 20. Tools Instant troubleshooting activities. Eg: 1. Terminal 2. Ping 3. Address monitoring 4. Network Monitoring 5. SNMP tools (plots SNMP graph based on the IP Address and SysOID
  21. 21. • Configuration backups • Report generation • Compliance check • Configlets execution • Startup-running configuration sync • PCI Review Schedules
  22. 22. • What is it? • When will it be helpful? • Global search & advanced configuration search in NCM Configuration search
  23. 23. • What is it? • How to do it in NCM? Exclude criteria
  24. 24. • How alarms keep you notified. • Filter based on status, severity, source. Alarms
  25. 25. • What are show commands used for? • How to identify the command for each device? Show commands
  26. 26. • Startup-running conflict report • Configuration change report • EOL/EOS report • And more. Reports
  27. 27. • Customizable dashboards & widgets • Dynamic device groups • User specific retainable filters and column • Real-time UI Dynamic & user - friendly UI
  28. 28. With OpManager: Integrations
  29. 29. With NetFlow Analyzer: Integrations

×