Cisco ASR 5500 Instruction Manual

ASR 5500 System Administration Guide, StarOS Release 19
First Published: September 30, 2015
Last Modified: June 30, 2016
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version
of the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://
www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)
©2016 Cisco Systems, Inc. All rights reserved.

CONTENTS
Preface About this Guide xxv
Conventions Used xxv
Related Documentation xxvi
MIOs and DPCs xxvi
Contacting Customer Support xxvii
CHAPTER 1 System Operation and Configuration 1
System Management Overview 1
Terminology 3
Contexts 3
Ports 3
Logical Interfaces 3
Management Interface 4
Bindings 4
Services 4
AAA Servers 5
Subscribers 5
How the System Selects Contexts 6
Context Selection for Context-level Administrative User Sessions 6
Context Selection for Subscriber Sessions 8
Understanding the ASR 5500 Boot Process 8
Understanding Configuration Files 10
IP Address Notation 11
IPv4 Dotted-Decimal Notation 11
IPv6 Colon-Separated-Hexadecimal Notation 12
CIDR Notation 12
Alphanumeric Strings 13
ASR 5500 System Administration Guide, StarOS Release 19
iii

Character Set 13
Quoted Strings 14
CHAPTER 2 Getting Started 15
ASR 5500 Configuration 15
Using the ASR 5500 Quick Setup Wizard 15
Using the CLI for Initial Configuration 21
Configuring the System for Remote Access 23
Configuring SSH Options 25
SSH Keys 25
Setting SSH Key Size 26
Specifying SSH Encryption Ciphers 26
Generating SSH Keys 27
Setting SSH Key Pair 27
Authorized SSH User Access 28
Authorizing SSH User Access 28
SSH User Login Authentication 28
Configuring the Management Interface with a Second IP Address 29
CHAPTER 3 System Settings 31
Configuring a Second Management Interface 31
Verifying and Saving Your Interface and Port Configuration 32
Configuring System Timing 33
Setting the System Clock and Time Zone 33
Verifying and Saving Your Clock and Time Zone Configuration 33
Configuring Network Time Protocol Support 34
Configuring NTP Servers with Local Sources 35
Using a Load Balancer 35
Verifying the NTP Configuration 35
Enabling CLI Timestamping 37
Configuring CLI Confirmation Prompts 37
Enabling Automatic Confirmation 37
Requiring Confirmation for autoconfirm and configure Commands 38
Requiring Confirmation for Specific Exec Mode Commands 38
Configuring System Administrative Users 39
ASR 5500 System Administration Guide, StarOS Release 19
iv
Contents

Configuring Context-level Administrative Users 40
Configuring Context-level Security Administrators 40
Configuring Context-level Administrators 40
Configuring Context-level Operators 41
Configuring Context-level Inspectors 41
Verifying Context-level Administrative User Configuration 41
Configuring Local-User Administrative Users 42
Verifying Local-User Configuration 42
Updating Local-User Database 43
Restricting User Access to a Specified Root Directory 43
Configuring an SFTP root Directory 43
Associating an SFTP root Directory with a Local User 43
Associating an SFTP root Directory with an Administrator 44
Associating an SFTP root Directory with a Config Administrator 44
Configuring TACACS+ for System Administrative Users 44
Operation 44
User Account Requirements 45
TACACS+ User Account Requirements 45
StarOS User Account Requirements 45
Configuring TACACS+ AAA Services 46
Configuring TACACS+ for Non-local VPN Authentication 47
Verifying the TACACS+ Configuration 47
Configuring a Chassis Key 48
Overview 48
Configuring a New Chassis Key Value 48
CLI Commands 48
Quick Setup Wizard 49
Configuring MIO/UMIO Port Redundancy 50
Configuring MIO/UMIO Port Redundancy Auto-Recovery 52
Verifying Port Redundancy Auto-Recovery 53
Configuring Data Processing Card Availability 53
Verifying Card Configurations 54
Enabling Automatic Reset of FSC Fabric 54
Configuring ASR 5500 Link Aggregation 54
LAG and Master Port 55
ASR 5500 System Administration Guide, StarOS Release 19
v
Contents

LAG and Port Redundancy 55
LAG and Multiple Switches 55
Multiple Switches with L2 Redundancy 55
Port States for Auto-Switch 56
Hold Time 56
Preferred Slot 56
Auto-Switch Criteria 57
Link Aggregation Control 57
Minimum Links 58
Redundancy Options 59
Horizontal Link Aggregation with Two Ethernet Switches 59
Non-Redundant (Active-Active) LAG 59
Link Aggregation Status 60
Configuring a Demux Card 61
Overview 61
MIO Demux Restrictions 61
Configuration 62
CHAPTER 4 Management Settings 63
ORBEM 63
Configuring ORBEM Client and Port Parameters 64
Configuring IIOP Transport Parameters 64
Verifying ORBEM Parameters 65
SNMP MIB Browser 65
SNMP Support 68
Configuring SNMP and Alarm Server Parameters 68
Verifying SNMP Parameters 69
Controlling SNMP Trap Generation 70
CHAPTER 5 Verifying and Saving Your Configuration 71
Verifying the Configuration 71
Feature Configuration 71
Service Configuration 72
Context Configuration 72
System Configuration 72
ASR 5500 System Administration Guide, StarOS Release 19
vi
Contents

Finding Configuration Errors 72
Synchronizing File Systems 73
Saving the Configuration 73
CHAPTER 6 System Interfaces and Ports 75
Contexts 75
Creating Contexts 75
Viewing and Verifying Contexts 76
Ethernet Interfaces and Ports 76
Creating an Interface 77
Configuring a Port and Binding It to an Interface 77
Configuring a Static Route for an Interface 77
Viewing and Verifying Port Configuration 78
CHAPTER 7 System Security 81
Per-Chassis Key Identifier 81
MIO Synchronization 82
Protection of Passwords 82
Secure Password Encryption 82
Support for Non-Current Encryptions and Decryptions 83
Support for ICSR Configurations 83
Encrypted SNMP Community Strings 84
Lawful Intercept Restrictions 84
LI Server Addresses 84
Modifying Intercepts 85
Adding, Modifying and Removing Users 85
Notification of Users Being Added or Deleted 85
Notification of Changes in Privilege Levels 85
User Access to Operating System Shell 85
Test-Commands 86
Enabling cli test-commands Mode 86
Enabling Password for Access to CLI-test commands 86
Exec Mode cli test-commands 87
Configuration Mode cli test-commands 87
ASR 5500 System Administration Guide, StarOS Release 19
vii
Contents

CHAPTER 8 Software Management Operations 89
Understanding the Local File System 89
File Types Used by the Local File System 89
Understanding the boot.sys File 90
Maintaining the Local File System 90
File System Management Commands 90
Synchronizing the File System 91
Creating Directories 91
Renaming Files and Directories 91
Copying Files on the ASR 5500 Chassis 92
Deleting Files 92
Removing Directories 92
Formatting Local Devices 92
Applying Pre-existing CLI Configuration Files 93
Viewing Files on the Local File System 93
Viewing the Contents of a Local Device 93
Viewing CLI Configuration and boot.sys Files 94
Validating an Operating System File 94
Configuring the Boot Stack 95
System Boot Methods 95
Viewing the Current Boot Stack 95
Adding a New Boot Stack Entry 97
Deleting a Boot Stack Entry 97
Network Booting Configuration Requirements 97
Configuring the Boot Interface 97
Configuring the Boot Network 98
Configuring Boot Network Delay Time 99
Configuring a Boot Nameserver 99
Upgrading the Operating System Software 99
Identifying OS Release Version and Build Number 100
Verify Free Space on the /flash Device 100
Download the Software Image from the Support Site 100
Transfer StarOS Image to /flash on the Chassis 101
Saving a Copy of the Current Configuration File 101
ASR 5500 System Administration Guide, StarOS Release 19
viii
Contents

Downgrading from Release 15.0 to 14.0 101
Off-line Software Upgrade 102
Configure a Newcall Policy 102
Configure a Message of the Day Banner 102
Back up the Current CLI Configuration File 103
Create a New Boot Stack Entry 103
Synchronize File Systems 103
Save the Running Configuration 103
Reboot the Chassis 104
Verify the Running Software Version 104
Restoring the Previous Software Image 104
Upgrading ICSR Chassis 104
Performing Dynamic Software Updates 104
Managing License Keys 105
New System License Keys 105
Session Use and Feature Use Licenses 105
Installing New License Keys 105
Cutting and Pasting the Key 106
Adding License Keys to Configuration Files 106
License Expiration Behavior 107
Requesting License Keys 107
Viewing License Information 108
Deleting a License Key 108
Management Card Replacement and License Keys 108
Managing Local-User Administrative Accounts 108
Configuring Local-User Password Properties 108
Configuring Local-User Account Management Properties 109
Local-User Account Lockouts 109
Local-User Account Suspensions 109
Changing Local-User Passwords 109
CHAPTER 9 Monitoring the System 111
SNMP Notifications 111
Monitoring System Status and Performance 111
Clearing Statistics and Counters 113
ASR 5500 System Administration Guide, StarOS Release 19
ix
Contents

Monitoring ASR 5500 Hardware Status 113
CHAPTER 10 Bulk Statistics 115
Configuring Communication with the Collection Server 115
Configuring Standard Settings 115
Configuring Optional Settings 116
Configuring Bulk Statistic Schemas 116
Using show bulkstats Commands 116
Verifying Your Configuration 117
Saving Your Configuration 118
Viewing Collected Bulk Statistics Data 118
Manually Gathering and Transferring Bulk Statistics 118
Clearing Bulk Statistics Counters and Information 118
Bulkstats Schema Nomenclature 118
Statistic Types 119
Data Types 119
Bulk Statistics Event Log Messages 119
CHAPTER 11 System Logs 121
System Log Types 121
Configuring Event Logging Parameters 122
Configuring Event Log Filters 122
Exec Mode Filtering 122
Global Configuration Mode Filtering 123
Configuring syslog Servers 124
Configuring Active Logs 124
Specifying Facilities 125
Configuring Trace Logging 134
Configuring Monitor Logs 134
Enabling Monitor Logs 134
Disabling Monitor Logs 134
Viewing Logging Configuration and Statistics 135
Viewing Event Logs Using the CLI 135
Configuring and Viewing Crash Logs 136
Crash Logging Architecture 136
ASR 5500 System Administration Guide, StarOS Release 19
x
Contents