Feedback
Table Of Contents
Release Notes for Cisco Enhanced Device Interface 2.1
CatOS to Cisco IOS Command Translation Rule
Known Caveats With This Release
Devices Supported by Cisco E-DI
Devices Not Supported by Cisco E-DI
Cisco Product Security Overview
Reporting Security Problems in Cisco Products
Obtaining Technical Assistance
Cisco Technical Support & Documentation Website
Definitions of Service Request Severity
Obtaining Additional Publications and Information
Release Notes for Cisco Enhanced Device Interface 2.1
September 25, 2007
These release notes support the release of Cisco Enhanced Device Interface 2.1.
Contents
This document includes the following topics:
•
Known Caveats With This Release
•
•
•
•
•
Introduction
Cisco E-DI provides a comprehensive management interface for configuration of Cisco devices.
Cisco E-DI offers interfaces for two categories of users - the human user interacting with network devices through the command line interface (CLI) or a Graphical User Interface (GUI), and management applications interacting with network devices through an XML programmatic interface (see Cisco Enhanced Device Interface Programmer's Guide, 2.1).
A Cisco CatOS to Cisco IOS conversion tool is provided in Cisco E-DI 2.1 to help Cisco Catalyst 6500 users migrate their CatOS devices to Cisco IOS. The tool is available in the CLI console and the GUI.
IP aliasing enables Cisco E-DI 2.1 to listen on multiple IP addresses and automatically map an IP address to a Cisco E-DI device context or group context. The XML interfaces in Cisco E-DI 2.1 are enhanced to work with the IP aliasing feature. An XML client can use the DNS name to set the context to the device directly instead of having to establish a connection to Cisco E-DI, and then setting the context.
Cisco E-DI 2.1 includes the option to customize the CLI prompts.
In Cisco E-DI 2.1, the Pluggable Authentication Module (PAM) configuration is extended to make use of an AAA server based authentication policy for users. The AAA server must have TACACS+ and RADIUS capabilities.
Cisco E-DI includes the L2 data reporting feature to help the user debug various L2 connectivity issues, including debugging VLAN, VTP, STP and ARP.
Cisco E-DI 2.1 also includes tools to find a given host in the network.
Cisco E-DI 2.1 includes a Visual Configuration Editor. This is a Graphical User Interface (GUI) in addition to the existing primary user interfaces, the CLI, and the NETCONF compliant XML interface. The Visual Configuration Editor provides a convenient ways of editing configuration commands and applying them to the device.
In Cisco E-DI 2.1, IDUs are provided in an encrypted format. The IDUs are decrypted when loaded. Backward compatibility with older (unencrypted) IDUs is maintained.
Cisco E-DI 2.1 supports the following Cisco PIX Firewall devices:
•
•
•
•
•
Cisco E-DI 2.1 is enhanced to support a higher number of devices per instance of Cisco E-DI server.
Cisco E-DI 2.1 enables the user to configure the polling interval to synchronize inventory data.
In Cisco E-DI 2.1, a user can show the results of the last inventory synchronization tasks.
Installation
Refer to the Cisco E-DI Quick Start Guide 2.1 for details to install, configure and start using Cisco E-DI.
Incremental Device Updates
IDUs allow Cisco E-DI to be updated with support for new device packages.
The device packages listed in Table 3 are included in this build.
To add device packages from CCO, the Cisco E-DI administrator can login to CCO, specify the Cisco E-DI version, and download the files for the device packages. See http://www.cisco.com/kobayashi/sw-center/sw-netmgmt.shtml. Once the required device package files are downloaded, they can be copied to Cisco E-DI, and installed using the maintenance shell. Refer to Cisco E-DI Quick Start Guide 2.1 for details of the installation process.
Important Notes
CatOS to Cisco IOS Command Translation Rule
The CatOS to Cisco IOS command translation feature from CatOS : 7.6(6) to Cisco IOS : 12.2(17d)SXB6 ships with a limited sample translation rule. The following groups of commands have some translation (first 1 or 2 keywords after set):
•
•
•
•
The CatOS 8.5.1 to Cisco IOS 12.2(18)SXF translation rule targeted for actual CatOS to Cisco IOS migration use will be released in the future as a Cisco E-DI IDU file downloadable from CCO.
XML get-config Operation
Cisco E-DI does not retrieve/synchronize the configuration from the device when an XML get-config operation is performed. Cisco E-DI will use the latest configuration from the configuration archive for the get-config response. Currently, there is no XML operation provisioned to synchronize device configuration on Cisco E-DI.
Known Caveats With This Release
Open Caveats
Resolved Caveats
Table 2 lists the caveats that were resolved between Cisco Enhanced Device Interface 2.0.1 and Cisco Enhanced Device Interface 2.1.
Known Limitations with IDUs
Cisco IOS Devices
The following are known limitations with the Incremental Device Updates (IDUs) for the Cisco IOS devices listed in Table 3:
1.
2.
a.
b.
c.
d.
e.
3.
a.
b.
c.
d.
e.
4.
a.
b.
5.
6.
CatOS Devices
The following are known limitations with the Incremental Device Updates (IDUs) for the Cisco CatOS devices listed in Table 3:
1.
2.
a.
b.
c.
3.
a.
b.
c.
d.
e.
f.
g.
h.
4.
a.
b.
5.
6.
7.
–
–
Devices Supported by Cisco E-DI
Complete device support can be accessed using the Cisco E-DI server command show server known-devices.
Cisco E-DI 2.1 supports the following Cisco PIX Firewall devices:
•
•
•
•
•
The device packages listed in Table 3 are included in this build.
Note
Devices Not Supported by Cisco E-DI
Not all the devices in a customer network may have IDU support. An asterisk (*) next to the device IP address in the show devices output indicates that IDU support is not available for that device.
Related Documentation
Refer to the following publications for additional information:
•
•
•
•
Obtaining Documentation
Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several ways to obtain technical assistance and other technical resources. These sections explain how to obtain technical information from Cisco Systems.
Cisco.com
You can access the most current Cisco documentation at this URL:
http://www.cisco.com/techsupport
You can access the Cisco website at this URL:
You can access international Cisco websites at this URL:
http://www.cisco.com/public/countries_languages.shtml
Product Documentation DVD
The Product Documentation DVD is a comprehensive library of technical product documentation on a portable medium. The DVD enables you to access multiple versions of installation, configuration, and command guides for Cisco hardware and software products. With the DVD, you have access to the same HTML documentation that is found on the Cisco website without being connected to the Internet. Certain products also have .PDF versions of the documentation available.
The Product Documentation DVD is available as a single unit or as a subscription. Registered Cisco.com users (Cisco direct customers) can order a Product Documentation DVD (product number DOC-DOCDVD= or DOC-DOCDVD=SUB) from Cisco Marketplace at this URL:
http://www.cisco.com/go/marketplace/
Ordering Documentation
Registered Cisco.com users may order Cisco documentation at the Product Documentation Store in the Cisco Marketplace at this URL:
http://www.cisco.com/go/marketplace/
Nonregistered Cisco.com users can order technical documentation from 8:00 a.m. to 5:00 p.m. (0800 to 1700) PDT by calling 1 866 463-3487 in the United States and Canada, or elsewhere by calling 011 408 519-5055. You can also order documentation by e-mail at tech-doc-store-mkpl@external.cisco.com or by fax at 1 408 519-5001 in the United States and Canada, or elsewhere at 011 408 519-5001.
Documentation Feedback
You can rate and provide feedback about Cisco technical documents by completing the online feedback form that appears with the technical documents on Cisco.com.
You can submit comments about Cisco documentation by using the response card (if present) behind the front cover of your document or by writing to the following address:
Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883We appreciate your comments.
Cisco Product Security Overview
Cisco provides a free online Security Vulnerability Policy portal at this URL:
http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html
From this site, you will find information about how to:
•
•
•
A current list of security advisories, security notices, and security responses for Cisco products is available at this URL:
To see security advisories, security notices, and security responses as they are updated in real time, you can subscribe to the Product Security Incident Response Team Really Simple Syndication (PSIRT RSS) feed. Information about how to subscribe to the PSIRT RSS feed is found at this URL:
http://www.cisco.com/en/US/products/products_psirt_rss_feed.html
Reporting Security Problems in Cisco Products
Cisco is committed to delivering secure products. We test our products internally before we release them, and we strive to correct all vulnerabilities quickly. If you think that you have identified a vulnerability in a Cisco product, contact PSIRT:
•
An emergency is either a condition in which a system is under active attack or a condition for which a severe and urgent security vulnerability should be reported. All other conditions are considered nonemergencies.
•
In an emergency, you can also reach PSIRT by telephone:
•
•
Tip
Never use a revoked or an expired encryption key. The correct public key to use in your correspondence with PSIRT is the one linked in the Contact Summary section of the Security Vulnerability Policy page at this URL:
http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html
The link on this page has the current PGP key ID in use.
If you do not have or use PGP, contact PSIRT at the aforementioned e-mail addresses or phone numbers before sending any sensitive material to find other means of encrypting the data.
Obtaining Technical Assistance
Cisco Technical Support provides 24-hour-a-day award-winning technical assistance. The Cisco Technical Support & Documentation website on Cisco.com features extensive online support resources. In addition, if you have a valid Cisco service contract, Cisco Technical Assistance Center (TAC) engineers provide telephone support. If you do not have a valid Cisco service contract, contact your reseller.
Cisco Technical Support & Documentation Website
The Cisco Technical Support & Documentation website provides online documents and tools for troubleshooting and resolving technical issues with Cisco products and technologies. The website is available 24 hours a day, at this URL:
http://www.cisco.com/techsupport
Access to all tools on the Cisco Technical Support & Documentation website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a user ID or password, you can register at this URL:
http://tools.cisco.com/RPF/register/register.do
Note
Submitting a Service Request
Using the online TAC Service Request Tool is the fastest way to open S3 and S4 service requests. (S3 and S4 service requests are those in which your network is minimally impaired or for which you require product information.) After you describe your situation, the TAC Service Request Tool provides recommended solutions. If your issue is not resolved using the recommended resources, your service request is assigned to a Cisco engineer. The TAC Service Request Tool is located at this URL:
http://www.cisco.com/techsupport/servicerequest
For S1 or S2 service requests, or if you do not have Internet access, contact the Cisco TAC by telephone. (S1 or S2 service requests are those in which your production network is down or severely degraded.) Cisco engineers are assigned immediately to S1 and S2 service requests to help keep your business operations running smoothly.
To open a service request by telephone, use one of the following numbers:
Asia-Pacific: +61 2 8446 7411 (Australia: 1 800 805 227)
EMEA: +32 2 704 55 55
USA: 1 800 553-2447For a complete list of Cisco TAC contacts, go to this URL:
http://www.cisco.com/techsupport/contacts
Definitions of Service Request Severity
To ensure that all service requests are reported in a standard format, Cisco has established severity definitions.
Severity 1 (S1)—An existing network is down, or there is a critical impact to your business operations. You and Cisco will commit all necessary resources around the clock to resolve the situation.
Severity 2 (S2)—Operation of an existing network is severely degraded, or significant aspects of your business operations are negatively affected by inadequate performance of Cisco products. You and Cisco will commit full-time resources during normal business hours to resolve the situation.
Severity 3 (S3)—Operational performance of the network is impaired, while most business operations remain functional. You and Cisco will commit resources during normal business hours to restore service to satisfactory levels.
Severity 4 (S4)—You require information or assistance with Cisco product capabilities, installation, or configuration. There is little or no effect on your business operations.
Obtaining Additional Publications and Information
Information about Cisco products, technologies, and network solutions is available from various online and printed sources.
•
•
http://www.cisco.com/go/marketplace/
•
•
•
http://www.cisco.com/go/iqmagazine
or view the digital edition at this URL:
http://ciscoiq.texterity.com/ciscoiq/sample/
•
•
http://www.cisco.com/en/US/products/index.html
•
http://www.cisco.com/discuss/networking
•
http://www.cisco.com/en/US/learning/index.html
This document is to be used in conjunction with the documents listed in the "Related Documentation" section.
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
© 2003 - 2006 Cisco Systems, Inc. All rights reserved.
