Cisco Cisco Prime Infrastructure 3.0 Weißbuch

Seite von 68
 
 
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. 
Page 34 of 68 
The table view provides all the relevant information for the devices, like the Device IP, IOS version, and so on, and 
also suggests whether these devices are AVC capable or not. The users can also quickly find out whether AVC 
has been enabled on these routers. 
Some of the checks performed include the appropriate hardware, minimum Cisco IOS/IOS-XE Software image, 
active AVC license, latest protocol pack, and so on. 
NBAR2 Protocol Pack Update 
Traditionally, protocols were linked to Cisco operating software and customers had to upgrade Cisco operating 
software to get new protocol support. Protocol Packs are a set of protocols developed and packaged together, and 
provide a means to distribute new protocols, protocol updates, and bug fixes outside the Cisco operating software 
releases, and can be loaded on the network devices without replacing the Cisco operating software. 
Newer protocol packs are often released and now can be easily updated on the routers using Cisco Prime 
Infrastructure. This is a two-step process; that is, the user downloads the appropriate protocol pack and distributes 
it on the routers using Cisco Prime Infrastructure and at the same time the user needs to obtain a UBF file released 
for Cisco Prime Infrastructure, which is a software update file to be added on to the Cisco Prime Infrastructure 
instance so that Cisco Prime Infrastructure can now recognize the newer application’s signatures. The UBF file can 
be downloaded from cisco.com and applied to Cisco Prime Infrastructure by browsing through Administration  
Software Update
Browse to Services  Application Visibility & Control  NBAR2 Protocol Pack Management. Using the 
Import option, you can download the protocol pack of your choice either locally from a file or from a URL. You can 
then schedule a job to download this protocol pack and store it on Cisco Prime Infrastructure’s repository. 
Once you download the protocol pack, there are two options to distribute it. You can choose either to distribute it 
immediately using the Distribute option, during which the current protocol pack becomes the active one on the 
selected device, or to use the Distribute with ISSU option to have this as a standby protocol pack that becomes 
the active one after an image update. 
For more details, please refer to the End User Guide. 
Interface Roles Configuration 
The idea behind the interface role is that you group a set of interfaces according to a set of rules and apply the 
AVC configuration for that group of interfaces. Hence, it is a good practice to assign a meaningful description to all 
interfaces. A good example is to use an interface description such as the following: 
LAN Interfaces: Assign name LAN in the description field: 
interface GigabitEthernet0/0/0 
 description -- 
LAN
 - PARIS -- 
 ip address 10.10.15.1 255.255.255.0 
 service-policy type performance-monitor input PrmAM_AVC_mon_in 
 service-policy type performance-monitor output PrmAM_AVC_mon_out 
WAN Interfaces: Assign name WAN in the description field: 
interface GigabitEthernet0/0/1 
 description -- 
WAN
 - ASR2 - 
 ip address 100.1.2.1 255.255.255.0