lab guide for cisco prime ncs ver1.1

1 Copyrights reserved© Global Knowledge Network

Cisco Prime NCS 1.1 Wireless Monitoring Solution


Table of Contents Accessing the Lab .......................................................................................................................................... 3

Lab Topology ................................................................................................................................................. 7

Prime NCS ................................................................................................................................................. 7

WLC User Credential ................................................................................................................................. 7

EXSi User Credential .................................................................................................................................. 7

Exercise 1: Deploying Cisco Prime NCS ......................................................................................................... 7

Exercise 2: Adding Users ............................................................................................................................. 14

Exercise 3: Add a Controller and Access Point to the NCS .......................................................................... 18

Exercise 4: Create a Controller Template ................................................................................................... 20

Exercise 5: Create AP Templates ................................................................................................................. 23

Exercise 6: Create a WLAN Template .......................................................................................................... 29

Exercise 7: Audit Configurations ............................................................................................................... 355

Exercise 8: Add a Lobby Ambassador Account to the NCS ..................................................................... 3737

Exercise 9: Customize the Lobby Ambassador View .................................... Error! Bookmark not defined.1

Exercise 10: Create an Individual Guest Account ....................................................................................... 42

Exercise 11: Schedule a Guest Account to be Active at a Future Date or Time .......................................... 44

Exercise 12: Monitor Wireless Devices ....................................................................................................... 46

Exercise 13: Create a Customize Report ..................................................................................................... 49

Exercise 14: Using WCS to Create Trend Reports ....................................................................................... 52


Accessing the Lab

1. Launch Remote Desktop Connection by clicking on Start-> All Programs ->Accessories ->

Remote Desktop Connection or alternatively Press “ + R ” key together and type in

“mstsc“ without the quotes.

2. Click on the OPTIONS button in the RDP window.


3. Prior to starting, an option on the LOCAL RESOURCES tab of the Remote Desktop Program

must be set in order for calls to be placed within the lab.

4. To conserve resources on the host machine, set the following options on the EXPERIENCE and

DISPLAY tabs.


5. On the GENERAL tab, enter the IP address of your assigned pod and the username provided to you.

Then click on the CONNECT button.


Lab Topology

Prime NCS

WLC User Credential Table 1.0

Username admin

Password C1sc0123

ESXi User Credential

Table 2.0

Username root

Password cisco123


Exercise 1: Deploying Cisco Prime NCS

Step 1. Click on the VMware vSphere Client icon, the short cut will open a dialog box.

Fill in the details accordingly:-

i) IP address – 172.16.X0.254

ii) Username – root

iii) Password – cisco123

Press the login button to connect to Esxi Server.

Step 2. After pressing the login button, you will be asked for the security certificate verification.

Click Ignore button to continue with the currently ssl certificate.


Step 3. On vSphere client. Select File > Deploy OVF Template

Step 4. Click the Browse button to select the file to deploy, select the file name

WCS-VA-1.1.0.58-small.ova inside the folder NCS located on DESKTOP.

Press the OPEN button to select the file.


Step 5. For OVF Template details, Click Next button

Step 6. Keep the default value under Name and Location, continue with Next button.

Step 7. Under Disk Format, choose Thin Provision and click Next.

Step 8. Click Next for Network Mapping.

Step 9. Under the ready to complete page, press the Finish button to start deploying the NCS on

VM Machines.

Step 10. During the deployment of NCS, dialog box below will appear to show time needed for

completion. Once finished click the closed button.


Step 11. After step 10, you will notice the EXSi server ip address in the red column is expandable.

Expand the server, right click the image “Cisco Prime Network Control System Virtual

Appliance”. Select Power > Power On to power up the virtual NCS

Step 12. Soon after the VM boot up, right click VM name “Cisco Prime Network Control System

Virtual Appliance” and select Open Console. You will now see the console shown in the dialog

box below, type SETUP to configure NCS.


Step 13. Inside the setup menu, fill in the following details (x refers to your pod number)

Hostname: NCS1

IP address: 172.16.x0.12

IP default netmask: 255.255.255.0

IP default gateway: 172.16.x0.1

Default DNS domain: Globalknowledge

Primary nameserver: 10.1.0.1

Add/Edit another nameserver: no

Enter primary NTP server: time.nist.gov

Add/Edit secondary NTP server: no

System timezone: UTC

Username: admin

Password: TrustM3

Note: When you finish configure the info above, NCS will try to test the network connectivity to

gateway. You will see the message “Bringing up network interface” appear during this stage.

Step 14. Following next will be High Availability, type NO.

Web interface root password: TrustM3

Ftp Password: TrustM3

Finally for summary section, apply these settings? (y/n): y


Exercise 2: Adding Users

Step 1. Login to Cisco NCS by typing https://172.16.X0.10 on the browser. Using following

credentials

Username: root

Password : TrustM3

Step 2. To add user, drag your mouse to Administration > AAA


Step 3. Select Users from the left panel

Step 4. Select Add User from the drop-down-list located in the upper right corner and click Go


Step 5. Enter the following information from table 1 for the User information and select ‘Admin’

Table 1

User Name: Staff

Password: gkTrustM3

Groups Assigned to this user: Admin

Step 6. Click the save button at the bottom of the page.

Step 7. Box 1.show the status of the user added successfully. Press the virtual domain tab.


Step 8. Check if the ROOT-Domain is in the “Selected Virtual Domains”

Step 9. Now Logout the NCS and Login using the Staff username and password created.

Activity Verification

User has been successfully added to the NCS

You can login to NCS using the username and password created.


Exercise 3: Add a Controller and Access Point to the NCS

Step 1. Launch the browser and enter HTTPS://172.16.X0.10 in the address bar.

Step 2. Login NCS with credential from Table 1.0

Username Password

root TrustM3

Step 3. Choose Configure > Controllers

Step 4. From the drop down menu, select Add Controllers and press the Go button

Step 5. Add the controller using the following details.

Ip Address: 172.16.10.20

Community: private

Password: C1sc0123

After you fill in the details press the Add button to add controller into NCS.


Step 6. Choose Monitor> Controllers to verify the controller is added successfully.

Step 7. You will notice the controller with ip address 172.16.10.20 is added.


Exercise 4: Create a Controller Template


credentials

Username: root

Password : TrustM3

Step 2. To create a controller template, go to Configure > Controller Template Launch Pad

Step 3. At left panel of Controller Template Launch Pad, expand Management tab follow by

selecting Local Management Users.


Step 4. Choose Add Template from the drop down panel located on the right. Press Go button

to continue.

Step 5. Key in the credentials below with the info from Table 1, next press the save button to

create a new controller template.

Table 1

Template Name : Management_Users

User Name: PodXmu (X is the pod number)

Password: gkTrustM3

Access Level: Read Only

Step 6. Click Apply to Controllers


Step 7. On the page you will be able to see a list of WLC available, choose the wlc with ip

address 172.16.10.20 by checking the check box. Continue by pressing the save button.

Step 8. If the operation successful you will see the print screen below.

Step 9. Open your browser and enter https://172.16.10.20. Login to WLC using the following

details.

Username: PodXmu ( X is the pod number)

Password: gkTrustM3


You have created a template called Management_Users and can see it listed in the local

Management User templates page

The template has been applied to WLC and you can login using the new user name and

password created by the template.


Exercise 5: Create AP Templates


credentials

Username root

administrator TrustM3

Step 2. Expand the Configure tab, and choose Lightweight AP Configuration Templates.

Step 3. Select the Add Template option from drop down list, click Go button to add AP

template.

Step 4. Fill in the template using the details below, press the save button to create AP template.

Template Name APX (X is your pod number)

Description APX Template


Step 5. At AP Parameters page

1. Check the Controllers option

2. Select WLC1 from the list of controller.

3. Enable Admin Status and check on the Enable check box.

4. Check the Status Collection Interval and configure the time to 120 seconds.

5. Proceed to configure parameters at 802.11a SubBand tab

Step 6. On 802.11a SubBand

1. Check Admin Status and make sure it is Enable.

2. Select 802.11b/g/n tab


Step 7. On 802.11b/g/n tab

1. Click Admin Status and verify it is Enable.

2. Enable the Power Assignment option, choose Custom and select power level 3.

3. Continue to Select APs tab

Step 8. On the drop down list, choose All and press the Search button.


Step 9. Under the AP list, select only the Ap belongs to you (Controller is 172.16.X0.20). Switch

to Apply/Schedule tab.

Step 10. Click Apply button to apply the AP template to AP selected.

Step 11. After you click apply button, the Report tab will appear and shows you:

1. Apply status is completed

2. Operation status is successful for the specific AP


Step 12. Choose Monitor > Access Point

Step 13. The AP is listed twice, one is for 802.11b/g/n the other is for 802.11a/n. Click on

802.11a/n to see the general details of selected AP.


Step 14. You can check the values of AP here.


You have configured the AP Template and can see it listed in the AP Configuration template

page.

You have applied the template to selected AP.


Exercise 6: Create a WLAN Template


credentials

Username root


Step 2. Expand the Configure tab, and choose Controller Template Launch Pad.

Step 3. From the left sidebar menu, choose WLANs and then WLAN Configuration.


Step 4. Select the Add Template option from drop down list, click Go button to add WLAN

template.

Step 5. Fill in the template using the details below and set the Status to Enable:

Template Name WPA2TempX

Profile Name NCSwpa2authX

SSID NCSwpa2authX

Step 6. Set the interface to VLAN2X.


Step 7. Click the Security tab. From Layer 2 tab, select your Layer 2 Security options to be

WPA+WPA2.

Step 8. Under WPA+WPA2 Parameters, Enable both WPA and WPA2. Check that TKIP (under

WPA) and AES (under WPA2) are also enabled.

Step 9. Under AuthenticationKeyManagement, Enable PSK. Enter cisco123 as the Shared Key.

Select ASCII from the drop down list. Click Save.


Step 10. After saving, click Apply to Controllers.

Step 11. Select your controller (172.16.X0.20), Save Config to Flash after apply and click OK.

Step 12. Return to the Controllers page.

Step 13. Click on your controller’s IP address (172.16.X0.20).


Step 14. From the left sidebar menu, choose WLANs and then WLAN Configuration.

Step 15. Click on the WLAN ID number.

Step 16. Check that proper VLAN is selected to support this WLAN. Click Save after you have

checked the configuration.


Step 17. After saving, click on Audit. Close the popup window.


You have created a WLAN template and can see it listed in the WLAN Configuration page.

You have applied the template to the selected controller.


Exercise 7: Audit Configurations


credentials

Username root


Step 2. Expand the Configure tab, and choose Controllers.

Step 3. Click on your controller’s IP address (172.16.X0.20).


Step 4. From the left sidebar menu, choose System and then Commands.

Step 5. Under Configuration Commands, choose Audit Config from the drop down menu and

click Go.

Step 6. Review the Audit report. Notice that the items are different on the controller and in the

Cisco NCS.

Step 7. Choose the Refresh Config from Controller option which will provide the most accurate

view of the controller configuration in Cisco NCS.

Step 8. After auditing, run another audit report.


You have completed an audit and received audit results.


Exercise 8: Add a Lobby Ambassador Account to the NCS


credentials

Username root


Step 2. To add user, drag your mouse to Administration > AAA

Step 3. Select Users from the left panel



Step 5. Enter the following information for the User information and select ‘Lobby Ambassador’

User Name: LobbyAdmin

Password: Lo66y123

Groups Assigned to this user: Lobby Ambassador


Step 6. Select the Lobby Ambassador Defaults tab. Select ANY PROFILE from the drop down list

for ‘Profile’. Select Controller List from the drop down menu for ‘Apply To’. Select your

controller (172.16.X0.20, WLCX). Enter [email protected] in the text field for ‘Email Id’.

Enable Defaults editable and click Save.


Step 7. Select the Users from the left panel to view the list of registered users (including the

new username that you have just created).


The username LobbyAdmin appears in the user list as a member of the Lobby Ambassador

group.


Exercise 9: Customize the Lobby Ambassador View


credentials


Password: Lo66y123

Step 2. Select User Preferences from the left column.

Step 3. Select 10 for the Items Per List Page drop down menu (under List Pages). Checked the

Logout idle user box and select 15 min for the Logout idle user after drop down menu (under

User Idle Timeout).

Step 4. Select Save and select List Guest Users to return to the Guest Users Window.


You have configured the LobbyAdmin user to show 10 items per page and be logged off after 15

minutes of inactivity.


Exercise 10: Create an Individual Guest Account


credentials


Password: Lo66y123


Step 3. Enable Make this Disclaimer default and enter the following information:

User Name: GuestX

Password: gu3stX


Step 4. Select the Advanced tab. Select ANY PROFILE from the drop down menu for ‘Profile’.

Select Unlimited from the radio button for ‘Life Time’.

Select Controller List from the drop down menu for ‘Apply to’.

Select your controller (172.16.X0.20, WLCX) and click Save.


You have configured a guest user account with the NCS and applied it to the controller.

You can log on to a wireless network using guest credentials created.


Exercise 11: Schedule a Guest Account to be Active at a Future Date or Time


credentials

Step 2. Select Schedule Guest User from the drop-down-list located in the upper right corner

and click Go

Step 3. Enter GuestX in the text field for ‘User Name’.

Select Generate new password on every schedule.

Enter [email protected] in the text field for ‘Email credentials to’.


Password: Lo66y123


Step 4. Select the Advanced tab. Select Unlimited from the radio button for ‘Life Time’.

For the ‘Start Time’, select a future date and time (at least 5 minutes in the future) for

this account to become active. Click Save.


You have configured a guest user account which will become active at a future time and applied

it to your controller.


Exercise 12: Monitor Wireless Devices


credentials

Username root


Step 2. The controllers can be monitored using Monitor > Controllers

Step 3. Choose the controller you want to monitor by selecting the ip address of Controller (172.16.X0.11).


Step 4. You are now at the Summary page of WLC, from here you can check the port connected from WLC to switch is active or down.

Step 5. First expand the Ports > CDP Interface Neighbors From the table you will be able to tell what is connected to your controller. The info tell you that on WLC port 1 is connected to a switch (Gi1/0/11)


Step 6. Choose General tab for more information regarding the port connected to switch. From the table you can conclude port 1 connected to switch is running at full duplex 1000mbps and is currently up.

Step 7. Expand the Monitor tab, click Controller.

Step 8. Expand the Monitor tab, click Controller. Select 802.11a/n and click on RRM Grouping.


Exercise13: Create a Customize Report


credentials

Username root


Step 2. Expand the Reports tab, and choose Report Launch Pad.

Step 3. From the left sidebar menu, choose Device and then AP Summary.

Step 4. Click New.


Step 5. Enter PodX_AP_Summary in the text field for ‘Report Title’. Select AP By Controller from the drop down list for ‘Report By’. Click Customize.

Step 6. From the left column, click Serial Number. While holding down the ‘Shift ’ key on your keyboard, click AP Type (both the serial number and AP type should now be highlighted). Select Add > to move these two entries to the right column and click Apply.


Step 7. Select PDF from the drop down list for the ‘Export Format’. Click Run and Save.


You have created, saved and executed an AP summary report.


Exercise14: Using WCS to Create Trend Reports


credentials

Username root



Step 3. From the left sidebar menu, choose Client and then Client Count.

Step 4. Click New.


Step 5. Enter Client Count in the text field for ‘Report Title’. Select SSID from the drop down list for ‘Report By’. Select Last 2 Days from the drop down list for ‘Reporting Period’. Click Run.

Step 6. After running the report, the results will be displayed. Step 7. Expand the Reports tab, and choose Report Launch Pad. Step 8. From the left sidebar menu, choose Performance and then Network Utilization. Click

New.


Step 9. Enter Radio Utilization in the text field for ‘Report Title’. Select Last 2 Days from the

drop down list for ‘Reporting Period’. Select Run and Save.

Step 10. After running the report, the results will be displayed in the Report Run Results section.


Step 12. From the left sidebar menu, choose Performance and then Tx Power and Channel. Click

New.


Step 13. Enter TX Power in the text field for ‘Report Title’. Select AP by Controller from the drop

down list for ‘Report By’. Select Last 2 Days from the drop down list for ‘Reporting Period’.

Select both 802.11a/n and 802.11b/g/n for ‘Protocol’. Click Run and Save.

Step 14. After running the report, the results will be displayed in the Report Run Results section.


Step 16. From the left sidebar menu, choose CleanAir and then Air Quality vs Time. Click New.


Step 17. Enter AQ v Time in the text field for ‘Report Title’. Select AP by Controller from the drop down list for ‘Report By’. Select Last 2 Days from the drop down list for ‘Reporting Period’. Click Run and Save.

Step 18. After running the report, the results will be displayed in the Report Run Results section. Activity Verification

You have created trend reports using the Report Launch Pad.

lab guide for cisco prime ncs ver1.1

Documents