1. For initial NFVIS login, the default username is admin and the default password is Admin123#.

   
   NFVIS Version: 3.12.3
   
   Copyright (c) 2015-2020 by Cisco Systems, Inc.
   Cisco, Cisco Systems, and Cisco Systems logo are registered trademarks of Cisco
   Systems, Inc. and/or its affiliates in the U.S. and certain other countries.
   
   The copyrights to certain works contained in this software are owned by other
   third parties and used and distributed under third party license agreements.
   Certain components of this software are licensed under the GNU GPL 2.0, GPL 3.0,
   LGPL 2.1, LGPL 3.0 and AGPL 3.0.
   

2. Immediately after the initial login, the system prompts you to change the default password. All other operations are blocked until default password is changed.

   You must adhere to the following rules to create a strong password:

   • Must contain at least one upper case and one lower case letter.

   • Must contain at least one number and one special character (# _ - * ?).

   • Must contain seven characters or greater. Length should be between 7 and 128 characters.

3. After you change the password you will be at the nfvis prompt.

   

4. After you login to NFVIS, you can see the information about NFVIS version. You can then decide if you want to install or upgrade to a newer version.

   

1. Configure the device management IP address.

   
   configure terminal
   system settings mgmt ip address 10.29.43.84 255.255.255.0
   bridges bridge wan-br no dhcp
   bridges bridge wan2-br no dhcp
   system settings default-gw 10.29.43.1
   commit
   end
   

2. The device management IP address is now set to 10.29.43.84 and you can access NFVIS remotely at this address.

3. Use the show system settings-native command to confirm the settings and display the current values.

4. To logout from the system enter Exit.

To access NFVIS portal:

1. Connect your laptop to the local ethernet management network. Enter https://10.29.43.84 in your web browser's address bar. We recommend that you use Google Chrome.

   

2. To login to NFVIS portal, the username is admin and password is the new generated password. You will see the NFVIS dashboard which provides a summary of activities on the device.

   

To deploy a virtual router on a factory shipped ENCS 5400 device:

1. Chose VM Life Cycle > Image Repository from the navigation tree on the left of the interface. Here you will see all the previously uploaded images in the device.

   For a factory shipped ENCS 5400 device, in Images, the only available image is isrv.tar.gz and in Profiles, you can see isrv-mini, isrv-small and isrv-medium or C8000V-mini, C8000V-small and C8000V-medium.

   

   In Images you can see information about the available images and make a note of the version for an upgrade if required. The ACTIVE state of the image indicates that the image is registered and ready for deployment.

2. Chose VM Life Cycle > Deploy.

   You can a catalog of various VNFs at the top of the page. The default configuration of the device at the center of the page has LAN, WAN, and WAN2 networks.

   

3. To create a router instance with a LAN and WAN connection click and drag ROUTER to the center of the page. To configure a connection to the WAN, click ROUTER on the page and drag it to the wan-net line.

   Select the connected line to view the details. In the vNIC details pane you will see that the interface GigabitEthernet2 is associated with the WAN (wan-net). Record this interface name to use the same name to configure the WAN subnet later.

   

   To configure a LAN connection, click ROUTER again and this time drag it to the lan-net line.

   Select the connected line to view the details. In the vNIC details pane you will see that interface GigabitEthernet3 is associated with the LAN (lan-net). Record this interface name to use this same name to configure the local subnet later.

   

4. Click on ROUTER and enter the VM Details:

   
   Profile: isrv-small
   SSH USERNAME: admin
   SSH PASSWORD: time44Fun
   Port Number: 22
   External Port Range: 2001
   Source Bridge: MGMT
   Deployment Disk: datastore1(internal)
   

   These values indicate that the VM uses isrv-small profile which is has 2 CPUs, 4 GB of memory, and 8 GB of disk space. You can remotely login to this VM through SSH with the credentials specified in SSH USERNAME and SSH PASSWORD. The Port Number and External Port Range values maps port 2001 on the management network IP address to port number 22 in the VM, as required for SSH connectivity into the VM over the management network (Source Bridge = MGMT). This VNF will be stored in the default datastore named as datastore1(internal).

   

5. Click Deploy to deploy the VM and see the progress of the deployment on the right side of the page. A successful deployment is indicated through a pop-up message on the corner of the page.

   

6. To monitor the progress of the router VNF booting, chose VM Life Cycle > Manage.

   The status of the deployment is displayed in VM Status Overview. Click on the refresh button to get the latest status.

   

7. When the router VNF is ready you can see all the data related to it.

   

You have now completed the creation and deployment of ISRv router VNF instance.

After successfully creating and deploying the virtual router, configure the virtual router to enable traffic flow from the LAN network to the WAN. The following image shows the LAN to WAN connectivity through a virtual router:

The traffic flow from the laptop to WAN is through the physical 8-port embedded switch in ENCS and the OVS virtual switch lan-net. The laptop is connected to port GE1/0 on the embedded 8-port switch with an Ethernet cable. The laptop has 10.0.0.3 as static IP address, 10.0.0.1 as gateway IP address and subnet mask as 255.255.255.0.

By default, GE1/0 port is configured to be in access mode with VLAN tag 1, the internal virtual lan-net OVS switch is in trunk mode and the virtual router is configured to accept the untagged traffic.

The gateway IP address 10.0.0.1 is configured on the virtual router. The virtual router is connected to the external WAN port that enables traffic to flow to and from the WAN.

During the router VNF deployment, you need to set external port, and source-bridge pointing out same bridge that is used to provide access to the system, such as wan-br or lan-br. Now you should be able to SSH to this router VNF from your laptop on the management network. To login:

ssh admin@10.29.43.84:2001

Use the same password as what you had specified while creating the VNF instance:

time44Fun

Configure the LAN facing interface of the router to 10.0.0.1/24 subnet:

interface GigabitEthernet3
ip address 10.0.0.1 255.255.255.0

Configure the WAN side of the router:

interface GigabitEthernet2
ip address 172.16.1.10 255.255.255.0

Set the default route:

ip route 0.0.0.0 0.0.0.0 172.16.1.1

Now from the laptop you should be able to reach any destination on the WAN.

You have now successfully deployed a virtual router on a factory shipped ENCS 5400 device. For further configurations, see Cisco Enterprise Network Function Virtualization Infrastructure Software Configuration Guide.