Creating and Managing Device Common Settings

Use the Manage Device Common Settings page to create new device common settings for routing devices and to manage the existing device common settings.

This topic describes:

Managing Device Common Settings

From the Manage Device Common Settings page, you can:

Create a new Device Common Settings profile by clicking Add. For directions, see Creating a Device Common Settings Profile.
Modify an existing Device Common Settings profile by selecting it and clicking Edit.
Assign a Device Common Settings profile to a device by selecting a profile and clicking Assign. For directions, see Assigning Device Common Settings to Devices.
Modify an existing assignment of a Device Common Settings profile by selecting the profile and clicking Edit Assignment.
View information about a Device Common Settings profile by either double-clicking the profile name or by selecting the profile and clicking Details.
Delete a Device Common Settings profile by selecting a profile and clicking Delete.
Tip
You cannot delete common settings profiles that are in use—that is, assigned to devices or used by other profiles. To see the current assignments for a profile, select the profile and click Details.
Clone a Device Common Settings profile by selecting a profile and clicking Clone.

Table 1 describes the device information available on the Manage Device Common Settings page. This page lists all Device profiles defined for your network, regardless of your current selected scope in the network view.

Table 1: Manage Device Common Settings Settings

Field Name	Action
Profile Name	Name given to the profile when the profile was created.
Family Type	The device family; ACX Series router, M Series router, MX Series router, and PTX Series router.
Description	Description of the Device profile entered when the profile was created.
Assignment State	Displays the assignment state of the profile. A profile can be: Unassigned—When the profile is not assigned to any device Deployed—When the profile is assigned to a device and is deployed from Deploy mode Pending Deployment—When the profile is assigned to a device, but not yet deployed in the network. For deployment directions, see Deploying Configuration to Devices.
Assigned to	Displays the number of devices to which the profile assignment is done.
Creation Time	Date and time when the profile was created.
Last Updated Time	Date and time when the profile was last modified.
User Name	The username of the person who created or modified the profile.

Tip

All columns might not be displayed. To show or hide fields listed in the Manage Authorization Profiles table, click the down arrow on the field header, select Columns, and select or clear the check box adjacent to the field that you want to show or hide.

Creating a Device Common Settings Profile

In Connectivity Services Director, as an administrator, you can configure Device Common Settings profiles by using the Create Device Profile page for devices. You can view the summary of the configurations before saving the Device profile.

At minimum, you must specify the Device profile and profile name in the workflow. You can include additional configuration such as:

Device users
Management services
Multicast, spanning-tree protocol (STP)
Domain Name Server
DHCP servers, DHCP Relay servers, Login Banner, and Global PoE settings for switches

You can create profiles on the basis of the device family and each Device profile is specific to a device family. After you create a Device profile, you assign the profiles to different devices.

Note

You can assign only one profile to a device. However, you can assign the same profile to multiple devices.

To create a Device profile:

Under Views, select one of these options: Logical View, Device View or Custom Group View.Tip
Do not select Dashboard View or Topology View.
Click in the Connectivity Services Director banner.
From the Tasks pane, select the type of network, the appropriate functional area, and select the name of the profile that you want to create. For example, to create a QoS profile for a device, click Wired > Profiles > CoS. The appropriate Manage Profile page opens.
Click Add to add a new profile.
If you chose to create a profile for the wired network, Connectivity Services Director opens the Device Family Chooser window.
1. From the Device Family Chooser, select the device family for which you want to create a profile. The available device families are Switching (EX), Campus Switching ELS (Enhanced Layer 2 Software), Data Center Switching Non-ELS and Data Center Switching ELS.
2. Click OK.
  The Create Device Common Settings wizard for the selected device family is displayed. It consists of four sections, Basic Settings, Management Settings, Protocol Settings, and Review.
If you chose to create a profile for the wireless network, Connectivity Services Director opens the Create Device Common Settings for Wireless wizard.
Specify the basic settings. Complete the Basic Setting wizard page as described in both the online help and in Specifying Basic Settings for Device Common Settings.
When you have completed the basic settings, either click Next or click Management Settings at the top of the wizard window.
Complete the Management Settings described in both the online help and in the section Specifying Management Settings for Routing Device Common Settings.
When you have completed the management settings, click Next.
Complete the protocol settings.
When you have completed the protocol settings, either click Next or click Review at the top of the wizard window.
You can either save your profile or make changes to your profile from the Review page. For more information, see Reviewing and Saving a Device Common Settings Configuration.
Click Finish to save the Device profile configuration.
The system saves the Device profile and displays the Manage Device Common Settings page. Your new or modified Device profile is listed in the table.

Specifying Basic Settings for Device Common Settings

To configure the basic settings for any Device Common Settings profile, enter the settings described in Table 2. Mandatory settings are indicated by a red asterisk (*) that appears next to the field label in the user interface.

Table 2: Device Profile Basic Settings

Field	Action
Profile Name	Type a name for the profile.
Description	Type a description of the profile containing up to 256 characters.
Login Banner for EX Series switches, Campus Switching ELS, and Data Center Switching	Enter the banner text—this text is displayed in the banner when you log in to the device.
Country Code for wireless LAN controllers only	Select the country code for the wireless LAN controllers. Country code settings are required on the primary wireless seed controller. Tip: Do not set the country code if you plan to provision the Device profile for active secondary and member nodes that will be part of a cluster.
Device Users
Task: Add a Device User	To add a device user: Click Add under Device Users. The Add User window opens. Provide a username and password. Confirm the password. Enter a combination of 6 through 128 alphanumeric characters and special characters. The password is case sensitive and must be a combination of at least two different types of characters or a combination of upper case and lower case letters. Tip: Do not create a user with the name root. Select a role for the user: For switches, the role options are: Operator, Read-only, Super-user, or Unauthorized. Operators have clear, network, reset, trace, and view privileges. Super-Users have all privileges. For wireless controllers, the role options are: Framed, Administrative, or NAS-Prompt. Framed users have network user access only. Administrative users have access to the controller, including the enabled (configuration) mode. NAS-Prompt users have administrative access to the controller, excluding enabled mode. Click OK. The user is added to the list of Device Users. Tip: To edit an entry, select a row from the Device Users table and click Edit to modify the information. To delete an entry select a row from the Device Users table and click Delete to delete the user.
Time Settings Time settings apply to all platforms. However, the setting for offset applies exclusively to wireless.
Time Zone	Select a country and time zone from the list. For wireless, you can also change the setting for Offset.
Add a Time Server	To add a time server: Click Add under Time Server. The Add Time Server window opens. Provide an IP address and, optionally for switches only, mark the corresponding time server as Preferred. Tip: Valid IP addresses are 1.0.0.1 through 255.255.255.254 excluding 127.x.x.x and 224.0.0.0 through 239.255.255.255.255 Click OK. The server is added to the list of Time Servers. Tip: To edit the settings of a time server, select it and then click Edit.

To configure management settings, click Next or click Management Settings at the top of the wizard window. To skip the management settings and protocol settings, click Review at the top of the wizard window.

Specifying Management Settings for Routing Device Common Settings

To configure the management settings for an Routing Device profile:

Enter the settings described in Table 3. All settings are optional. Default values are applied to the configuration if you skip the management settings configuration.

Table 3: Device Profile Management Settings for Routing

Task	Action
Enable Services	You can enable one or more network protocol services for this Device profile: FTP, TELNET, HTTPS, or HTTP.
Configure PoE	To add Power over Ethernet (PoE) configuration for Routing, enable Configure PoE and provide these settings: Note: PoE configuration will be added only to switches that support PoE. Using the arrows, adjust the Guard Band value from 0 through 19 watts. A guard band reserves a specified amount of power from the PoE power budget for the router or line card in case of a spike in PoE consumption. For routers with multiple PoE line cards, the guard band wattage is set to the specified value on all line cards, unless a line card has been explicitly configured with a different value. Select a Management Mode for PoE, either Class or Static: Class Management—In class PoE management mode, the maximum power for an interface is determined by the class of the connected powered device. Static Management—In the static PoE management mode, you specify the maximum power for each PoE interface. The PoE controller then allocates this amount of power to the interface from its total budget. For PoE Global, you can indicate Enable All, Disable All, or None. Note: If you deselect Configure PoE, PoE is disabled and the global PoE settings supported by this profile (poe guard-band, poe fpc all guard-band, poe management, poe fpc all management, and poe interface all) are deleted from the switch when the profile is deployed on the switch.
Syslog Settings Optionally, expand the Syslog Settings and provide the following system logging settings.
Enable Device Logging for Switches	To enable device logging for switches: Under Enable Device Log, click Add. The Add Log window opens. Select the log type for switching, either Console, File, User, or Host. Console logging sends system log messages to the console. File logging sends system log messages to the file you specify in File Name. User logging sends system log messages to the terminal session of the user specified in User Name. You will also need to provide the name of the user. Host logging sends system log messages to the server specified in Host. Host can be either an IP address or host name. Under Services, click Add. The phrase Click to enter value appears in both the Service column and Severity Filter column. Click the phrase Click to enter value in the Service column. A list box replaces the phrase in the Service column. From the Service list, select a logging service: Any, Authorization, Change-log, Conflict-log, Daemon, DFC, External, Firewall, FTP, Interactive-commands, Kernel, NTP, PFE, Security or User. Click the phrase Click to enter value in the Severity Filter column. A list box replaces the phrase in the Severity Filter column. Select an available severity filter from the list, either Alert, Any, Critical, Emergency, Error, Info, None, Notice, or Warning. The filter is added to the list of Severity Filters. The filter is activated when the corresponding service is triggered. Click OK. The log is added to the Enable Device Log list.
Edit Logging Settings	Select a Log Type from the Enable Device Log list and click Edit to change the configuration.
Delete Logging Settings	Select a Log Type from the Enable Device Log list and click Delete to remove the server configuration.

To configure protocol settings, either click Next or click Protocol Settings. To use the default protocol settings, skip to final review by clicking Review at the top of the wizard window.

Specifying Protocol Settings for Routing Device Common Settings

To configure the protocol settings for an Routing Device profile, enter the settings described in Table 4. All settings are optional.

Table 4: Device Profile Protocol Settings for Routing

Field	Action
Enable Storm Control
Select this option to enable storm control on a switch.
Spanning Tree Settings
Spanning Tree Protocol Settings for switches only	Select one of spanning-tree protocol (STP) settings for switches: STP, RSTP (default), MSTP, or None of these. Spanning Tree Protocol—With STP configured, the switches use the IEEE 802.1D 2004 specification, force version 0. This configuration runs a version of RSTP that is compatible with classic, basic STP as defined in the 802.1D 1998 specification. Rapid Spanning Tree Protocol—RSTP provides faster reconvergence time than the original STP both by identifying certain links as point-to-point and by using protocol handshake messages rather than fixed timeouts. VLAN Spanning Tree Protocol (VSTP) and RSTP can be configured concurrently. You can selectively configure up to 253 VLANs by using VSTP; the remaining VLANs will be configured by using RSTP. VSTP and RSTP are the only spanning-tree protocols that can be configured concurrently on a switch. Multiple Spanning Tree Protocol—MSTP enables multiple VLANs to be mapped to the same spanning-tree instance, reducing the number of spanning-tree instances needed to support a large number of VLANs. MSTP provides multiple forwarding paths for data traffic and enables load-balancing. It improves the fault tolerance of the network because a failure in one instance, or forwarding path, does not affect other instances. You can also select the Enable VSTP check box to enable VSTP.
Multicast Settings
Enable IGMP	Selecting this option enables Internet Group Management Protocol (IGMP) on all the interfaces for the selected device. Default is disabled. IGMP is a communications protocol used by both hosts and adjacent routers on IP networks to establish multicast group memberships.
Enable IGMP Snooping	Enables IGMP snooping on all VLANs. Default is enabled.
Enable DHCP Relay Select this option to display the DHCP Relay settings.
Add DHCP Relay to Device Profile	To add DHCP Relay to this Device Profile: Select Legacy DHCP Relay (default). Add one or more DHCP servers to the Device Common Settings profile: Click Add under DHCP Servers. The Add Server window opens. Type an IP Address. Click OK. The server is added to the list of DHCP Servers.
Add Extended DHCP Relay to a Device Profile	To add Extended DHCP Relay to this Device Profile: Select Extended DHCP Relay instead of Legacy DHCP Relay. Add one or more DHCP Server Groups to the Device Common Settings profile: Click Add under Add DHCP Servers Group. The Add Server Group window opens. Provide a name for the server group. Optionally, make this an active server group by checking Active Group. Add servers to the group by clicking Add under DHCP Servers. The phrase Click to enter value appears in the IP Address column. Select Click to enter value and then enter an IP Address. Click OK. The server is added to the DHCP server group list. Add a relay interface group by clicking Add under Add Relay Interface Group. The Add DHCP Relay Interface window opens. Type a DHCP interface group name. Select a server group from the Server Group list. Click OK. The group is added to the Relay Interface Group list.

Click either Next or Review, to see the Review page. For review directions, see Reviewing and Saving a Device Common Settings Configuration.

Reviewing and Saving a Device Common Settings Configuration

From this page, you can save or make changes to Device Common Settings:

To make changes to the settings, click the Edit associated with the configuration you want to change.
Alternatively, you can also click appropriate sections of the workflow at the top of the page that corresponds to the configuration you want to change.
When you have completed your modifications, click Review to return to this page.
To save a new profile or to save modified settings to an existing profile, click Finish.
The Manage Device Common Settings page is displayed with the new or modified profile listed

What to Do Next

Once the Device Common Settings profile is created, you must assign the profile to the required device by using the Manage Device Profile page and then deploy the Device profile by using the Deploy mode. To assign a Device Common Settings profile to a device, see Security Director Release Notes.