Cisco Systems 4.1 Dust Collector User Manual


 
9-31
User Guide for Resource Manager Essentials 4.1
OL-11714-01
Chapter 9 Making and Deploying Configuration Changes Using NetConfig
Using System-defined Tasks
For the cable devices, you can apply a task only to a single device at a time, because cable templates
configure interfaces on devices.
Also, for the cable tasks to work correctly, you must have valid SNMP credentials in Device and
Credential Repository (DCR). See
Adding and Troubleshooting Devices Using Device Management for
more information on setting valid SNMP credentials.
Therefore, if you have selected more than one cable device and selected tasks for them, the task may not
appear in the Applicable Tasks pane of the Add Tasks dialog box. For the tasks that are applicable to
cable devices, see
Table 9-3.
Understanding the NetConfig Credentials Configuration Tasks
NetConfig provides for tasks to configure credentials on devices. These tasks are:
Enable Password (See Enable Password Task.)
Local Username (See Local Username Task.)
Radius Server (See RADIUS Server Configuration Task.)
TACACS TACACS Configuration Task
TACACS+ (See TACACS+ Configuration Task.)
SNMP Community (See SNMP Community Configuration Task.)
SNMP Security (See SNMP Security Configuration Task.)
The credential store allows only one set of login credentials per device - Primary username and primary
password, irrespective of the authentication type.
Hence, this imposes certain limitations on the NetConfig templates, especially, when you are
configuring/modifying the authentication method on the device.
To overcome this, an option to specifically update the credential store is provided in the credential tasks.
The credential store is updated only when this option is chosen with the values specified.
The usage of NetConfig credentials tasks to configure the credentials on a device should be based on the
active credentials (e.g. Telnet, TACACS, etc.) in the device. For example if the device is configured with
TACACS+, you should use only TACACS+ template to configure the credentials.
Example
When you remove the TACACS+ authentication for the device, the device reverts to the authentication
method that was earlier configured on it. For example, the local username.
However, RME is unaware of the fallback authentication method, and the respective credentials. If
Device and Credential Repository is not updated with the right credentials, the subsequent device
operations from RME will fail.
In this case, you should select the option to update the local credential store and specify the local
username credentials. When the job runs, NetConfig updates Device and Credential Repository with this
set of credentials, so that for subsequent devices, access from RME will be successful.
Button Action
Save Saves the information that you have entered in the fields in the task dialog box.
Reset Clears all the fields.
Cancel Cancels your changes, and closes the task dialog box.