Release Notes for Industrial Network Director, Release 1.8.0
New Platform and Features Supported
Pre-Configuration Requirements for IE Switches
Prerequisite Configuration Required for ALL IE Switches Running Cisco IOS
Configuration Required for Discovery and Management of Cisco IOS
Device Manager Configuration Required for Discovery and Management of IE 1000 Switches
Bootstrap Configuration for IE Switches
Bootstrap Configuration for IE 1000 Switches
Supported IND Release Upgrades
These release notes contain the latest information about using Release 1.8.0 of the Cisco Industrial Network Director (IND) application that supports configuration and management of Industrial Ethernet switches.
The IND application provides three types of Online Help (OLH): Context-Sensitive Help, Embedded Help such as the Guided Tours, and Tooltips.
Note : IND Release 1.8.0 provides the following language support in addition to English: French, German, Japanese, and Spanish-Latin America.
These release notes include the following sections:
This document uses the following conventions.
Note: Means reader take note. Notes contain helpful suggestions or references to material not covered in the manual.
Caution: Means reader be careful. In this situation, you might perform an action that could result in equipment damage or loss of data.
Cisco Industrial Network Director provides operations teams in industrial networks an easily-integrated management system that delivers increased operator and technician productivity through streamlined network monitoring and rapid troubleshooting. IND is part of a comprehensive IoT solution from Cisco:
■Easy-to-adopt network management system purpose-built for industrial applications that leverages the full capabilities of the Cisco Industrial Ethernet product family to make the network accessible to non-IT operations personnel.
■Creates a dynamic integrated topology of automation and networking assets using industrial protocol (BACnet/IP, CIP, Modbus, PROFINET, OPC UA) discovery to provide a common framework for plant floor and plant IT personnel to monitor and troubleshoot the network and quickly recover from unplanned downtime.
■Rich APIs allow for easy integration of network information into existing industrial asset management systems and allow customers and system integrators to build dashboards customized to meet specific monitoring and accounting needs.
■Integration with existing systems and customization by system integrators.
■Role-based access control with customizable permission mapping – Restrict system access to authorized users on a per feature basis.
■Detailed Audit trails for operational visibility of network changes, additions, and modifications – Record user actions on network devices for change management.
■Search capability integrated with major functions - Easily locate functionality and mine for information.
■Cisco Active Advisor - Free cloud-based service that provides essential network life cycle information to make sure security and product updates are current.
■Guided tours - Step-by-step guidance to maximize productivity and ease adoption.
These Release Notes summarize the new features found within the four primary functions supported by IND:
New Features in IND 1.8.0 lists new platforms and features that are managed in IND 1.8.0.
The Cisco Industrial Network Director is licensed on a per-device, term subscription basis and supports two licensing
models. For details on the supported IND licenses and PIDs for ordering purposes, refer to the: Cisco Industrial Network
The following information describes the CLI configuration required for IND to discover a Supported Device and transition the device from UNLICENSED to LICENSED state in secure mode.
■For IE switches running Cisco IOS, refer to Prerequisite Configuration Required for ALL IE Switches Running Cisco IOS
■For IE1000 switches, refer to Configuration Required for Discovery and Management of Cisco IOS
The following information describes the CLI configuration required for the system to discover a Licensed device and to
transition the device from an Unlicensed to Licensed State.
This section also describes the Device Manager configuration required on IE 1000 switches.
Note: A local account is not needed on the device if TACACS is available.
Follow these steps to configure the switch so that IND can discover the device and transition from UNLICENSED to LICENSED state.
1. Enter global configuration mode:
2. Configure SNMP to allow the system to successfully discover the device:
snmp-server community read-community ro
read-community must match the SNMPv2 read string defined in the system Access Profile that is attached to the
Discovery Profile. the default read community string is “public”.
3. Enter the following command to allow the system to discover a Licensed Device and transition the device from a UNLICENSED to LICENSED state with SNMPv3. The group that you create and the mode are used to associate with the SNMPv3 user that you configure in the next step. Based on the mode that you choose for the group. you can configured the authentication privacy protocols and passwords for the user.
snmp-server group group_name v3 mode
where mode is one of the following:
priv: Enables Data Encryption Standard (DES) packet encryption
auth: Enables the Message Digest (MD5) and the Secure Hash Algorithm (SHA) packet authentication
noauth: Enables the noAuthNoPriv security level. This is the default if no-keyword is specified.
4. Add a new user to the SNMP group:
snmp-server user user_name group_name v3 [auth authentication_type authentication_password [priv privacy_type privacy_password]
Note : Passwords for auth or priv should not exceed 64 characters.
— auth: Specifies an authentication level setting session that can be either the HMAC-MD5-96 (md5) or the HMAC-SHA-96 (sha) authentication level and requires a password sting auth_password. Supported privacy_type values are: {aes | 128 | des}
— priv: Configured a private (priv) encryption algorithm and password string privacy-password
5. Configure the following for the system to successfully transition the device from UNLICENSED to LICENSED state.This should match the device access username and password specified in the system Access Profile.
username username privilege 15 password 0 password
6. Enter the following commands to configure authentication, authorization and accounting (AAA):
aaa authentication login default local
aaa authorization exec default local
7. Configure the Secure Shell (SSH) server:
8. Configure the HTTP/HTTPS server:
ip http authentication aaa login-authentication default
9. Configure the number of Telnet sessions (times) and a Telnet password for the line or lines:
1. Login to the IE 1000 Device Manager.
2. Leave the username field blank and enter cisco as password.
4. Create Device Access User and use the same in Access Profile on IND.
5. Configure SNMP community string for Read Only (ro):
a. Choose Configure > SNMP. Click OK in the pop-up windows to confirm enabling SNMP.
b. Check the check box to enable SNMP Mode globally. Click Submit
6. Select Community Strings tab. Add a public Community String read only access. (By default, this is a Read Only (ro) string)
a. Select the Users tab and add an snmpv3 user with name, security level, authentication protocol, authentication password, privacy protocol, and privacy password. Click OK.
b. Select the Group tab, select the created user, and specify the group name. Click OK.
7. Choose Admin > Access Management.
a. Check the check box to enable either SSH or Telnet. (This option determines how the IE1000 communicates with IND)
The system pushes the following configuration when you move the device to the Licensed state in the system:
Note : In the configuration script below, the {certificate key length} is obtained from the device access profile.
The installation procedure for IND is described in the Installation Guide for Industrial Network Director for Release 1.8.0.
IND Device Packs can only be installed with an IND application that has a matching version number, and the release number must be the same or greater than the IND release number.
For example, in release 1.8.x, 1.8 is the version number and x is the release number.
For Device Pack installation steps, refer to the Installation Guide for Cisco Industrial Network Director, Release 1.8.0.
Cisco recommends that you review this section before you begin working with IoT IND. These are known limitations that will not be fixed, and there is not always a workaround for these issues. Some features might not work as documented, and some features might be affected by recent changes to the software.
■State transition for the devices newly discovered running a Cisco IOS Release lower than 15.2(7)E1a cannot be moved from the Unlicensed state to Licensed State in the secure mode. Metrics collection for the devices already managed by IND running a Cisco IOS Release lower that 15.2(7)E1a would fail due to self-signed certificate expiry in the secure mode. Telnet should work without any issues on a switch that is running a software version lower than 15.2(7)E1a.
■If your switch is running, Cisco IOS Release 15.2(4) software, a weak cipher must be used for secure communication to the device. Weak Ciphers are disabled by default on IND. To enable, go to Settings > System Settings > Security Settings.
■Device Image upgrade in IND: An image upgrade will not be supported for devices with low memory and no SD flash support, if the device is managed on IND in secure mode. Please use Device Manager to upgrade the image.
■SNMPv3 protocol doesn't work in device IE3x00 running with 16.10.1
■PnP process is supported only on single-homed (Single IP) IND servers for Cisco IOS Release 15.2(6)E1.
Note : A PnP Service Error 1410 occurs in Cisco IOS Release 15.2(6)E0a due to the AAA command not working. (CSCvg64039). Caveat currently marked Unreproduceable in CDETs.
IE 5000: Horizontal Stacking is not supported. Stacked devices can be discovered on IND but cannot be licensed.
This section presents open and resolved caveats in this release and information on using the Bug Search Tool to view details on those caveats. Section topics are:
■Accessing the Bug Search Tool
■Accessing the Bug Search Tool
You can use the Bug Search Tool to find information about caveats for this release, including a description of the problems and available workarounds. The Bug Search Tool lists both open and resolved caveats.
To access the Bug Search Tool, you need the following items:
■Cisco.com user ID and password
To access the Bug Search Tool, use the following URL: https://tools.cisco.com/bugsearch/search
To search using a specific bug ID, use the following URL: https://tools.cisco.com/bugsearch/bug/ <BUGID>
Installation Guide for Industrial Network Director Application for Release 1.8.0
Find documentation for the Cisco Industrial Ethernet Switches at: (select the link for the relevant switch to access user guide on the page below):
Cisco Industrial Ethernet 1000 Series Switches
Cisco Industrial Ethernet 4000 Series Switches
Cisco Industrial Ethernet 4010 Series Switches
Cisco Industrial Ethernet 5000 Series Switches
No combinations are authorized or intended under this document.