Navigate to Administration>Device Profile to open the Device Profile window where you can:
Set up or modify the device list for the liveNetwork profile. The device IP address (if not already discovered) and the PCEP IP address for each device are required. The PCEP IP address is the local address of the PCC located in the PCE statement stanza block.
Supply a hostname for each router for OSPF networks. This is necessary because the TED does not contain hostnames for OSPF networks.
Specify an MD5 key to secure PCEP communication between the NorthStar Controller and the PCC.
Figure 1 shows the Device Profile window.
The Device Profile window consists of the following panes:
Profile Names (left pane)—Lists all the device profiles that have been created. Initially, only liveNetwork is included in the list. liveNetwork cannot be renamed or deleted.
Device List (right pane)—Lists all the devices that are part of the profile selected in the profile names list.
Device Detail (bottom pane)—Displays detailed information about the device selected in the device list.
Profile Names Pane
The liveNetwork profile is always present in the profile names list and contains all the devices discovered from the TED. The devices are shown in the corresponding device list. The buttons across the top of the Profile Names pane perform the functions described in Table 1.
Table 1: Profile Names Pane Button Functions
Reloads the selected profile.
Adds a new profile.
Modifies (renames) the selected profile (not available for liveNetwork).
Deletes the selected profile (not available for liveNetwork).
To add a new profile, click the Add button to display the Add Profile window shown in Figure 2.
Enter a name for the new profile and click Submit. The new profile name is added to the profile names list. You can then populate the profile with devices using functions available in the Device List pane.
To rename a profile, click the Modify button to display the Rename Profile window shown in Figure 3.
Enter the new name for the profile and click Submit. The new name for the profile appears in the profile names list.
Device List Pane
The Device List pane shows all the devices in each profile along with many of their properties. You can change the order of the devices in the list by clicking and dragging rows. Sorting, column selection, and filtering options are available when you hover over a column heading and click the down arrow that appears. Figure 4 shows these options.
You can filter the devices that are included in the display by activating a filter on any column. See Sorting and Filtering Options for a description of the column filtering functionality, along with an example.
The buttons across the top of the Device List pane perform the functions described in Table 2. Button labels are displayed when you hover over the buttons.
Table 2: Device List Button Functions
Saves the profile devices changes. The icon turns red when modifications or edits have been made to entries or fields in the device list. When the icon is red, you must click the Save icon to complete your changes.
Tests connectivity on the selected devices.
Adds a device.
Modifies the selected devices.
Deletes the selected devices.
Copies the selected devices.
Pastes the copied devices
Synchronizes profile devices with the live network.
Imports devices from a CSV file.
You can perform many of these functions on multiple devices simultaneously. To select multiple devices, Ctrl-click or Shift-click the device rows and then click the button for the function you wish to perform.
The Test Connectivity button opens the Profile Connectivity window shown in Figure 5.
In this example, multiple devices were selected for testing. Select the Use Management IP check box if the devices to be tested have management IP addresses specified for out-of-band use. Click Options to open the Test Connectivity Options window shown in Figure 6.
In the Test Connectivity Options window, you can:
Specify which test methods you want to use (Ping, SSH). Multiple methods are allowed (by default, both methods are tested). To select methods, select the corresponding check boxes.
Allow for concurrent access of a number of devices by specifying a simultaneous access limit from 1 to 16.
Click OK to submit your option selections.
In the Profile Connectivity window, click Start to begin the connectivity test. You can click Stop if the test fails to complete quickly. The test is complete when the green or red status icons are displayed as shown in Figure 7. In this example, the devices were not reachable using any method.
To display the detailed test results for an individual device, click the device row in the upper portion of the window, even if you only tested the connectivity for one device.
The Start button remains unavailable after test completion until you close the window and reopen it to begin a new connectivity test.
The Add button opens the Add New Device window shown in Figure 8.
Table 3 describes the data entry fields under the Access Parameters tab.
Table 3: Add New Device Access Field Descriptions
Autofill device from the selected profile entry
Select a device on which to model the new device using the drop-down menu. The properties of the selected device populate the new device window. You can modify the imported fields.
Name of the network device, which should be identical to the hostname. During configuration collection, the software uses this name as part of the name of the collected configuration file. The configuration filename uses the format ip.name.cfg. If the device name is left blank, the configuration filename uses the format ip.cfg.
Required field: IP address of the network device.
Management IP address for the device. NorthStar Controller first attempts connection using the management IP address if it is specified, and then the IP address.
Note: The management IP address is required for out-of-band management access.
The local address of the PCC located in the PCE statement stanza block.
Note: We highly recommend that this field be populated.
Select the device vendor from the drop-down menu. The default is GENERIC. The vendor is displayed in the Device List under the column heading Type.
Model number of the device.
Type of operating system installed on the device.
Version number of the operating system build installed on the network device. The default value is > 14.2x.
Note: For routers configured with PCEP using Junos OS Release 14.2x and earlier, select <= 14.2x for this parameter.
Number of milliseconds after which a connection attempt times out. The default is 300. To enter a different value, type the number of milliseconds in the field or use the up and down arrows to increment or decrement the displayed value.
Number of times a connection to the device is attempted. The default is 3. To enter a different value, type the number of retries in the field.
Command to use for SSH connection. The default is ssh. To enter a different value, type the command in the field. Include the full path of the command and options used for ssh, such as /usr/bin/ssh -1 -p 8888.
Login ID for the network device.
Password for the network device.
Message Digest 5 Algorithm (MD5) key string, also configured on the router. Configuring MD5 provides information on configuring MD5 authentication.
Note: All the routers in the network must have their PCEP IP addresses in the profile. This is especially important if any router in the network is configured with an MD5 authentication key.
Login ID for situations that require a higher-security login.
Password for situations that require a higher-security login.
Additional fields are available under the SNMP Parameters tab.
Click Submit to complete the device addition. The new device appears in the device list.
The Modify button opens the Modify Device window, which has the same fields as the Add New Device window. Edit the fields you want to change and click Submit. Click the Save button to complete the modification. You can wait until you have completed all your device modifications to click the Save button, which will have turned red to indicate there are unsaved changes.
As an alternative to opening the Modify Device window, you can change some of the device properties directly in the Device List pane by double-clicking the fields.
To delete a device, select the device row in the Device List and click the Delete button. A confirmation window is displayed as shown in Figure 9.
Click Yes to complete the deletion.
If you delete a device from the liveNetwork profile, you are not deleting it from the live network itself. You can restore the device to the profile using the Sync with Live Network button.
Copy and Paste Device
Use the Copy and Paste buttons to copy devices and paste them into the device list. You can then use the Modify Device function to edit the properties of the copy as appropriate.
To copy a device, select the device row and click the Copy button. Click the Paste button to add the copy to the device list. Select the added row and click the Modify button to modify the copy. You can copy and paste multiple rows at once.
Sync with Live Network
To synchronize profile devices with the live network, click the Sync with Live Network button. This function does not delete devices from the selected profile that do not exist in the live network, but it does add devices that are missing from the live network, and it synchronizes all devices with a corresponding live network device.
The Import button opens the Import Devices from CSV window shown in Figure 10. This function is particularly useful when there are a large number of devices to add.
Click Browse to specify the CSV file that contains the devices to be added, and indicate the appropriate delimiter by selecting the corresponding radio button. A preview of the data appears in the Data Preview box.
Click Import to complete the import. The imported devices appear in the device list.
Device Detail Pane
The Device Detail pane displays the properties of the device that is highlighted in the Device List pane. There are two ways to minimize this pane:
Click the down arrow at the top center of the pane. Click the up arrow to maximize the pane.
Click the down arrow in the top right corner of the pane. Click the up arrow to maximize the pane.
Click and drag the top margin of the pane to resize the pane.
MD5 can be used to secure PCEP sessions as described in RFC 5440, Path Computation Element (PCE) Communication Protocol (PCEP). MD5 authentication must be configured on both the NorthStar Controller (in the Device Profile window) and on the router (using the Junos OS CLI). The authentication key must be the same in both configurations. The device profile acts as a “white list” when MD5 is configured. The NorthStar Controller does not report LSPs or provision LSPs for the routers not included in the device profile.
The first time MD5 is enabled on the router, all PCEP sessions to routers are reset to apply MD5 at the system level. Whenever the MD5 enabled status on a router or the MD5 key changes, that router resets the PCEP connection to the NorthStar Controller.
In the NorthStar Controller Device Profile window, perform the following steps to configure MD5 for the PCEP session to a router.
- Select a router in the Device List pane.
- Click to open the Modify Device(s) window.
- In the MD5 String field, enter the MD5 key string. Click Modify.
- Click to save your changes.
The PCEP MD5 Configured field for the router changes from no to yes.
All the routers in the network must have their PCEP IP addresses in the profile. When you save your changes, you might receive a warning, reminding you of this.
In the Junos OS CLI on the router, perform the following step to configure MD5 for the PCEP session to the NorthStar Controller.
- Use the set authentication-key command at the [edit protocols pcep pce] hierarchy level to configure the MD5 authentication key.user@pcc# set protocols pcep pce pce-id authentication-key md5-key