Onboard a Cisco IOS Device
Before you begin
Before you begin, make sure you have met these prerequisites:
-
Ensure that the ciphers your Cisco IOS server supports are supported by Security Cloud Control. At this time, Security Cloud Control supports a limited set of ciphers for onboarding Cisco IOS devices. The supported ciphers are:
aes128-ctr, aes192-ctr, aes256-ctr, aes128-gcm, aes128-gcm@openssh.com, aes256-gcm, aes256-gcm@openssh.com
. To determine the ciphers your server supports, log in to your SDC and run this command:ssh -vv <ip_address>
. -
You must have an active on-premises Secure Device Connector (SDC) in your network to onboard a Cisco IOS device. See Secure Device Connector for a discussionof SDCs and links to deployment scenarios.
Procedure
Step 1 | In the left pane, click | ||
Step 2 | Click the blue plus button to begin onboarding the device. | ||
Step 3 | Click the Integrations tile. If it is grayed-out, it means you do not have an active Secure Device Connector deployed in your network and used by your Security Cloud Control tenant. | ||
Step 4 | Click the Secure Device Connector button and select the SDC in your network that this device will communicate with. The default SDC is displayed but you can change it by clicking the SDC name. | ||
Step 5 | Give the device a name. | ||
Step 6 | In the Integrations drop-down menu, select IOS. | ||
Step 7 | Enter the location (IP address, fully qualified domain name, or hostname) of the device. The default connection port is 22. | ||
Step 8 | Click Go. | ||
Step 9 | (Optional) At the Create Integration page, you have an opportunity to download and review the SSH fingerprint. | ||
Step 10 | Enter the device's administrator name and password.
| ||
Step 11 | If you have set an enable password on the device, enter that in the EnablePassword field. | ||
Step 12 | Click Connect. | ||
Step 13 | (Optional) Enter a label for the device. See Labels and Label Groups for more information. | ||
Step 14 | Click Continue. | ||
Step 15 | Onboard another IOS device or click Finish. | ||
Step 16 | Return to the Security Devices page. After the device has been successfully onboarded, you will see that the Configuration Status is "Synced" and the Connectivity state is "Online." | ||
Step 17 | (Optional) If you want you can write a note about the device by typing it in the device's Notes pate. See Device Notes for more information. |