Catalyst Center on ESXi Deployment Guide
Catalyst Center on ESXi Deployment Overview
Catalyst Center on ESXi provides Catalyst Center functionality in a virtual form factor. Its straightforward deployment process allows you to quickly deploy Catalyst Center in your network. It also allows you to try out Catalyst Center without having to purchase a physical appliance.
This guide provides the following information:
-
The requirements that need to be met in order to successfully deploy a Catalyst Center on ESXi virtual appliance.
-
Procedures that detail how to create a virtual machine on a VMware ESXi host, configure a virtual appliance, execute the Quick Start workflow, and complete post-deployment tasks that should be carried out before you use Catalyst Center on ESXi.
Deployment Requirements
The following requirements must be met in order to successfully deploy a Catalyst Center on ESXi virtual appliance. For performance tips that cover the most performance-critical areas of VMware vSphere, see:
-
VMware vSphere Client 7.0: Performance Best Practices for VMware vSphere 7.0 (PDF)
-
VMware vSphere Client 8.0: Performance Best Practices for VMware vSphere 8.0 (PDF)
Virtual Machine Minimum Requirements
Feature | Description |
---|---|
Virtualization platform and hypervisor |
VMware vSphere (which includes ESXi and vCenter Server) 7.0.x or later, including all patches. |
Processors |
Intel Xeon Scalable server processor (Cascade Lake or newer) or AMD EPYC Gen2 with 2.1 GHz or better clock speed. 32 vCPUs with 64-GHz reservation must be dedicated to the VM. |
Memory |
256-GB DRAM with 256-GB reservation must be dedicated to the VM. |
Storage |
3-TB solid-state drive (SSD). If you plan to create backups of your virtual appliance, also reserve additional datastore space. For information, see "Backup Server Requirements" in the Cisco Catalyst Center on ESXi Administrator Guide. |
I/O Bandwidth |
180 MB/sec. |
Input/output operations per second (IOPS) rate |
2000-2500, with less than 5 ms of I/O completion latency. |
Latency |
Catalyst Center on ESXi to network device connectivity: 200 ms. |
Scale Numbers
The following tables list the number of devices and site elements that Catalyst Center on ESXi supports.
Network Component | Maximum Number Supported |
---|---|
Access Points |
4000 |
Devices |
1000 |
Endpoints |
25,000 |
Site Elements |
2500 |
Network Component | Maximum Number Supported |
---|---|
Endpoints |
25,000 |
Devices |
2000 |
Access Points |
3000 |
Site Elements |
2500 |
Per-Fabric Site Scale |
|
Fabric Nodes |
500 |
VNs |
64 |
IP Pools |
100 |
For both nonfabric and fabric deployments, up to 10 concurrent user connections are supported for network admins to log in to Catalyst Center on ESXi.
Cisco Catalyst Assurance uses near real-time streaming analytics, which requires additional guarantees on resource availability. When operating Catalyst Center on ESXi close to maximum scale, this functionality may be impacted by uncontrolled external events, such as host resource oversubscriptions and edge use cases that result in a resource usage spike. A number of things can indicate that these events are taking place, such as slow performance, data processing gaps, high I/O latency, and a CPU readiness percentage that's higher than normal.
![]() Note |
Catalyst Center VA Launcher Requirements
If you plan to use the CC VA Launcher to deploy and configure a virtual appliance, the following requirements must be met by the machine on which you'll run the app:
Feature | Description |
---|---|
RAM |
1 GB |
Storage |
|
Supported operating systems |
|
Sleep setting |
Configure the machine to not go to sleep. |
In addition to these requirements, do the following:
-
Ensure that the user who will run the CC VA Launcher has the privileges necessary to deploy the virtual appliance's OVA file and modify the appliance's virtual machine settings.
-
For the system you'll run the app on, configure its HTTP/network proxy settings (if applicable).
Supported Browsers
-
Mozilla Firefox, version 65 or later
-
Google Chrome, version 72 or later
Catalyst Center on ESXi Packages
For a listing of the packages used by the virtual appliance, see the "Package Versions in Cisco Catalyst Center 2.3.7.x on ESXi" topic in Cisco Catalyst Center 2.3.7.x on ESXi Release Notes.
Prepare for Deployment
To prepare for the deployment of a Catalyst Center on ESXi virtual appliance, you'll need to complete the following tasks:
Install VMware vSphere
To run, Catalyst Center on ESXi requires VMware vSphere (which includes ESXi and vCenter Server) 7.0.x or later, including all patches. Click here to access an overview of the VMware vSphere installation and setup process. After you have installed VMware vSphere, confirm that it can be reached from the computer that you will use to deploy the virtual appliance's OVA file.
Reserve Enterprise Interface
Before you set up the virtual appliance, ensure that you reserve one 1-Gbps/10-Gbps Enterprise interface to connect to and communicate with your enterprise network. Write down the IP address for this interface, because you'll need to enter it during appliance configuration.
Optionally, you can also reserve one 1-Gbps/10-Gbps Management network interface to access the Catalyst Center on ESXi GUI. Write down this interface's IP address as well if you plan to configure it.
Note the following points:
-
The intracluster interface's IP address is predefined, so you won't need to enter it when you complete either the Maglev Configuration wizard with default mode selected or the browser-based Install Configuration wizard.
-
Catalyst Center on ESXi supports the configuration of one additional interface for use by the virtual appliance. If you do so, make sure that you choose VMXNET from the Adapter Type drop-down list. Otherwise, appliance configuration will not complete successfully. For more information, see the Add a Network Adapter to a Virtual Machine topic in vSphere Virtual Machine Administration.
Import the IdenTrust Certificate Chain
The Catalyst Center on ESXi OVA file is signed with an IdenTrust CA certificate, which is not included in VMware's default truststore. As a result, the Deploy OVF Template wizard's Review details page will indicate that you are using an invalid certificate while completing the wizard. You can prevent this by importing the IdenTrust certificate chain to the host or cluster on which you want to deploy the OVA file.
Procedure
Step 1 |
On the VMware ESXi host or cluster where your virtual appliance will reside, download trustidevcodesigning5.pem from the same location that Cisco specified to download the Catalyst Center on ESXi OVA file. |
Step 2 |
Unzip this file. |
Step 3 |
Log in to the vSphere Web Client. |
Step 4 |
Choose . |
Step 5 |
In the Trusted Root Certificates field, click Add. |
Step 6 |
In the Add Trusted Root dialog box, click Browse. |
Step 7 |
Navigate to and select the certificate chain that you downloaded in Step 1 (trustidevcodesigning5.pem), then click Open. |
Step 8 |
Check the Start Root certificate push to vCenter Hosts check box, then click Add. A message indicates that the certificate chain was imported successfully. When you complete the Deploy OVF Template wizard, the Review details page's Publisher field should indicate that you are using a trusted certificate. |
Prepare the DNS, NTP, and Proxy Servers
You'll be prompted to specify three items:
-
The Domain Name System (DNS) server that Catalyst Center on ESXi will use to convert domain names to IP addresses.
-
The Network Time Protocol (NTP) server that Catalyst Center on ESXi will use for clock synchronization.
-
(Optional) The proxy server that Catalyst Center on ESXi will use to access internet-bound URLs.
Before you configure your virtual appliance, do the following:
-
Ensure that the servers you want to use are available and running.
-
For an NTP server, obtain its IP address or hostname. And for a proxy server, collect either its URL or hostname and its login credentials.
Enable Access to Required Internet URLs and Fully Qualified Domain Names
The appliance requires secure access to the following table of URLs and Fully Qualified Domain Names (FQDNs).
The table describes the features that make use of each URL and FQDN. You must configure either your network firewall or a proxy server so that IP traffic can travel to and from the appliance and these resources. If you cannot provide this access for any listed URL and FQDN, the associated features will be impaired or inoperable.
For more on requirements for proxy access to the internet, see the "Provide Secure Access to the Internet" topic in the Cisco Catalyst Center Third-Generation Installation Guide.
In order to... | ...Catalyst Center on ESXi must access these URLs and FQDNs | ||
---|---|---|---|
Download updates to the system and application package software; submit user feedback to the product team. |
Recommended: *.ciscoconnectdna.com:4431 Customers who want to avoid wildcards can specify these URLs instead:
|
||
Catalyst Center on ESXi update package. |
|
||
Smart Account and SWIM software downloads. |
|||
Authenticate with the cloud domain. |
|||
Integrate with ThousandEyes. |
|
||
Manage Cisco Enterprise Network Function Virtualization Infrastructure Software (NFVIS) devices. |
*.amazonaws.com |
||
Collect customer behavior telemetry. |
https://data.pendo.io |
||
Allow API calls to enable access to Cisco CX Cloud Success Tracks. Otherwise, the enhancements made to extended configuration-based scanning for the Security Advisories, Bug Identifier, and EOX features that Machine Reasoning Engine (MRE) supports will not operate as expected. |
|||
Integrate with Webex. |
|
||
User feedback. |
|||
Integrate with Cisco Meraki. |
Recommended: *.meraki.com:443 Customers who want to avoid wildcards can specify these URLs instead:
|
||
Check SSL/TLS certificate revocation status using OCSP/CRL. |
|
||
Allow Cisco authorized specialists to collect troubleshooting data when Catalyst Center on ESXi Remote Support functionality is enabled. |
wss://prod.radkit-cloud.cisco.com:443 |
||
Integrate with cisco.com and Cisco Smart Licensing. |
*.cisco.com:443 Customers who want to avoid wildcards can specify these URLs instead:
|
||
Connect to the Network-Based Application Recognition (NBAR) cloud. |
prod.sdavc-cloud-api.com:443 |
||
Render accurate information in site and location maps. |
|
||
For Cisco AI Network Analytics data collection, configure your network or HTTP proxy to allow outbound HTTPS (TCP 443) access to the cloud hosts. |
|
||
Access a menu of interactive help flows that let you complete specific tasks from the GUI. |
|||
Access the licensing service. |
|||
Integrate with Cisco Spaces. |
Enable Storage Input/Output Control
For the datastore in which you are planning to deploy a virtual appliance, complete the following procedure so the appliance's virtual machine input/out (I/O) is prioritized over other virtual machines when the network is experiencing I/O congestion.
Procedure
Step 1 |
In the vSphere Client, navigate to and click the datastore in which you plan to deploy a virtual appliance. |
Step 2 |
Click the Configure tab, then click General. |
Step 3 |
In the Datastore Capabilities area, click Edit. |
Step 4 |
In the Configure Storage I/O Control window, do the following: |
Step 5 |
Click OK. |
Check HA Admission Control Setting
You cannot connect Catalyst Center on ESXi VMs to create three-node clusters. If you want to enable high availability (HA), you'll need to use VMware vSphere's HA functionality and enable strict admission control to ensure that:
-
A virtual machine cannot be powered on if it will result in the violation of availability constraints.
-
Configured failover capacity limits are enforced.
-
HA operates as expected during a failover.
For more information, in the Cisco Catalyst Center on ESXi Administrator Guide, see the "High Availability" section in the "Configure System Settings" chapter.
Prepare for the Quick Start Workflow
After you create a virtual machine on an ESXi host and configure a Catalyst Center on ESXi virtual appliance, you'll be prompted to complete the Quick Start workflow. By completing this workflow, you'll discover the devices that Catalyst Center on ESXi will manage and enable the collection of telemetry from those devices. To complete this workflow successfully, you'll need to perform the following tasks:
-
Decide on the username and password for the new admin user you're going to create. The default admin username and password (admin/maglev1@3) should only be used the very first time you log in to Catalyst Center on ESXi.
Important
Changing this password is critical to network security, especially when the people who set up a Catalyst Center on ESXi virtual appliance are not the same people who will serve as its administrators.
-
Obtain the credentials you use to log in to Cisco.com.
-
Identify the users who need access to your system. For these users, define their roles as well as unique passwords and privilege settings.
You have the option to use an IPAM server and Cisco Identity Services Engine (ISE) with your virtual appliance. If you choose to use one or both of them, you'll also need to obtain the relevant URL and login credentials.
Refer to the following table for the new and changed features available in Catalyst Center 2.3.7.x on ESXi.
Feature |
Description |
---|---|
Default Single Network Interface Card (NIC) |
By default, one NIC is enabled when you install Catalyst Center 2.3.7.x as a virtual appliance on ESXi. For setup instructions, see Deploy a Virtual Appliance. |
Second NIC Installation (Day-N) |
As an option, after you install Catalyst Center 2.3.7.x on ESXi, you can add an additional NIC to your deployment. |
CC VA Launcher Enhancements |
You can configure a virtual appliance using the CC VA Launcher in interactive mode or silent mode. For information, see the following topics: |
Deploy a Virtual Appliance
To set up a Catalyst Center on ESXi virtual appliance, you'll need to complete the following tasks:
If you want to set up your virtual appliance using the CC VA Launcher, you'll first complete the steps described in one of the following topics:
-
Configure a Virtual Appliance Using the Interactive CC VA Launcher
-
Configure a Virtual Appliance Using the CC VA Launcher in Silent Mode
Then you'll complete the Quick Start workflow.
Create a Virtual Machine
Complete the following procedure to create a virtual machine on the VMware ESXi host or cluster where your virtual appliance will reside.
Procedure
Step 1 |
Download the Catalyst Center on ESXi OVA file from the location specified by Cisco. |
Step 2 |
Log in to the vSphere Web Client. |
Step 3 |
In the navigation pane, right-click the IP address of host or cluster on which you want to deploy the OVA file and then click Deploy OVF Template. |
Step 4 |
Complete the Deploy OVF Template wizard: |
Configure an Additional Network Adapter
Complete the following procedure in order to configure an additional network adapter for your virtual appliance, on which the Management interface will reside.
Procedure
Step 1 |
Log in to the vSphere Web Client. |
Step 2 |
In the navigation pane, right-click the virtual machine you've created, then choose . |
Step 3 |
Right-click the virtual machine and then choose . |
Step 4 |
With the Virtual Hardware tab selected, click Add New Device and then choose Network Adapter. |
Step 5 |
In the New Network field's drop-down list, click Browse. |
Step 6 |
In the Select Network dialog box, choose the network that will connect to the virtual appliance's Management interface and then click OK. |
Step 7 |
In the Adapter Type field's drop-down list, choose VMXNET3 and then click OK. |
Step 8 |
In the navigation pane, right-click the virtual machine, then choose . |
Step 9 |
Do one of the following:
|
Step 10 |
After Catalyst Center on ESXi comes up, run the Configuration wizard to configure the settings for the Management interface: |
Configure a Catalyst Center on ESXi Virtual Appliance
Complete one of the following procedures to configure a Catalyst Center on ESXi virtual appliance on a VMware ESXi host:
-
Configure a Virtual Appliance Using the Maglev Configuration Wizard: Default Mode
-
Configure a Virtual Appliance Using the Maglev Configuration Wizard: Advanced Mode
-
Configure a Virtual Appliance Using the Install Configuration Wizard
-
Configure a Virtual Appliance Using the Advanced Install Configuration Wizard
Configure a Virtual Appliance Using the Maglev Configuration Wizard: Default Mode
If you want to configure a virtual appliance as quickly as possible using the Maglev Configuration wizard and are okay with using preset appliance settings, complete the following procedure.
![]() Note |
The Intracluster interface is preconfigured when using this wizard. If you don't want to use the default settings for this interface, you'll need to complete the Maglev Configuration wizard with advanced mode selected. |
Before you begin
Gather the following information for the virtual appliance before you start this procedure:
-
Static IP address
-
Subnet mask
-
Default gateway
-
DNS address
-
NTP server details
-
Proxy server details
![]() Important |
If you plan to configure the appliance's Management interface, also configure an additional network adapter for this interface to reside on before you start this wizard. |
Procedure
Step 1 |
After deployment completes, power on the newly-created virtual machine:
It takes around 45 minutes for the virtual machine to become operational. The actual time will depend on things like available bandwidth, RAM, hard disk space, and the number of vCPUs. You can monitor the progress in the VMware VM Console. |
Step 2 |
Launch either the remote console or web console by clicking the appropriate link. |
Step 3 |
Configure the virtual machine by completing the Maglev Configuration Wizard: |
Step 4 |
Configure a Virtual Appliance Using the Maglev Configuration Wizard: Advanced Mode
If you want to configure a virtual appliance using the Maglev Configuration wizard and need to specify settings that are different from the preset appliance settings, complete the following procedure.
Before you begin
Gather the following information for the virtual appliance before you start this procedure:
-
Static IP address
-
Subnet mask
-
Default gateway
-
DNS address
-
NTP server details
-
Proxy server details
![]() Important |
If you plan to configure the appliance's Management interface, also configure an additional network adapter for this interface to reside on before you start this wizard. |
Procedure
Step 1 |
After deployment completes, power on the newly-created virtual machine:
It takes around 45 minutes for the virtual machine to become operational. The actual time will depend on things like available bandwidth, RAM, hard disk space, and the number of vCPUs. You can monitor the progress in the vSphere Client's Recent Tasks tab. |
Step 2 |
Launch either the remote console or web console by clicking the appropriate link. |
Step 3 |
Configure the virtual machine by completing the Maglev Configuration Wizard: |
Step 4 |
Configure a Virtual Appliance Using the Install Configuration Wizard
If you want to configure a virtual appliance as quickly as possible using the browser-based Install configuration wizard and are okay with using preset appliance settings, complete the following procedure.
![]() Important |
Ensure that all of the IP addresses you enter while completing this procedure are valid IPv4 addresses with valid IPv4 netmasks. Also make sure that the addresses and their corresponding subnets do not overlap. Service communication issues can result if they do. |
Before you begin
Ensure that you collected the following information:
-
Static IP address
-
Subnet mask
-
Default gateway
-
DNS address
-
NTP server details
-
Proxy server details
Ensure that you are using a supported browser. See Deployment Requirements.
Ensure that you enabled ICMP on the firewall between Catalyst Center on ESXi and the DNS servers you will specify in the following procedure. This wizard uses Ping to verify the DNS server you specify. This ping can be blocked if there is a firewall between Catalyst Center on ESXi and the DNS server and ICMP is not enabled on that firewall. When this happens, you will not be able to complete the wizard.
![]() Note |
The Intracluster interface is preconfigured when using this wizard. If you don't want to use the default settings for this interface, you'll need to complete the browser-based Advanced Install configuration wizard. |
Procedure
Step 1 |
After deployment completes, power on the newly-created virtual machine:
It takes around 45 minutes for the virtual machine to become operational. The actual time will depend on things like available bandwidth, RAM, hard disk space, and the number of vCPUs. You can monitor the progress in the vSphere Client's Recent Tasks tab. |
||||
Step 2 |
Launch either the remote console or web console by clicking the appropriate link. |
||||
Step 3 |
Open the Install Configuration wizard: |
||||
Step 4 |
Configure your virtual appliance by completing the Install Configuration wizard: |
||||
Step 5 |
After appliance configuration completes, click the copy icon to copy the default admin superuser password.
|
Configure a Virtual Appliance Using the Advanced Install Configuration Wizard
If you want to configure a virtual appliance using the browser-based Advanced Install configuration wizard and need to specify settings that are different from the preset appliance settings, complete the following procedure.
![]() Important |
Ensure that all of the IP addresses you enter while completing this procedure are valid IPv4 addresses with valid IPv4 netmasks. Also make sure that the addresses and their corresponding subnets do not overlap. Service communication issues can result if they do. |
Before you begin
Ensure that you collected the following information:
-
Static IP address
-
Subnet mask
-
Default gateway
-
DNS address
-
NTP server details
-
Proxy server details
Ensure you are using a supported browser. See Deployment Requirements.
Ensure you enabled ICMP on the firewall between Catalyst Center on ESXi and both the default gateway and the DNS server you specify in the following procedure. The wizard uses ping to verify the gateway and DNS server you specify. This ping might get blocked if a firewall is in place and ICMP is not enabled on that firewall. When this happens, you will not be able to complete the wizard.
Procedure
Step 1 |
After deployment completes, power on the newly-created virtual machine:
It takes around 90 to 120 minutes for the virtual machine to become operational. The actual time will depend on things like available bandwidth, RAM, hard disk space, and the number of vCPUs. You can monitor the progress in the vSphere Client's Recent Tasks tab. |
||||
Step 2 |
Launch either the remote console or web console by clicking the appropriate link. |
||||
Step 3 |
Open the Advanced Install Configuration wizard: |
||||
Step 4 |
Configure your virtual appliance by completing the Advanced Install Configuration wizard: |
||||
Step 5 |
After appliance configuration completes, click the copy icon to copy the default admin superuser password. It can take from 15-30 mins for services to be stabilized before you can login to the UI.
|
Configure a Virtual Appliance Using the Interactive CC VA Launcher
To configure a Catalyst Center on ESXi virtual appliance using the CC VA Launcher, complete the following procedure.
Procedure
Step 1 |
From the location specified by Cisco, download the Catalyst Center on ESXi OVA file. |
Step 2 |
From the same URL, download the CC VA Launcher bundle (DNAC-SW-Launcher-2.3.7.6-VA.tar.gz) and extract it. The bundle contains the following files:
|
Step 3 |
Start the CC VA Launcher in interactive mode by entering the command that's specific to your operating system:
|
Step 4 |
Complete the CC VA Launcher: |
Step 5 |
After the Catalyst Center on ESXi virtual appliance powers on, log in to the host/vCenter server you deployed and open the virtual appliance's VMWare console. A terminal shell opens after the virtual appliance boots up, which can take up to 60 minutes. |
Step 6 |
Log in, using the same Maglev password you entered in Step 4v. The default username is maglev. |
Step 7 |
When all of the Catalyst Center on ESXi services are up, open a supported browser and type in the IP address you entered for the Enterprise interface in Step 4k. If you configured the Management interface, enter the IP address you entered for it in Step 4m. |
Step 8 |
When prompted by the Catalyst Center on ESXi GUI, enter the default credentials (admin/maglev1@3) to log in. |
Configure a Virtual Appliance Using the CC VA Launcher in Silent Mode
The CC VA Launcher's Silent mode allows you to deploy a Catalyst Center on ESXi virtual appliance using the settings specified in the config.json configuration file. This mode is useful when you want to integrate the launcher in your deployment automation workflow. To configure a virtual appliance using the launcher's silent mode, complete the following procedure.
Procedure
Step 1 |
From the location specified by Cisco, download the Catalyst Center on ESXi OVA file. |
||
Step 2 |
From the same URL, download the launcher bundle (DNAC-SW-Launcher-2.3.7.6-VA.tar.gz) and extract it. The bundle contains the following files:
|
||
Step 3 |
Navigate to the directory where the CC VA Launcher bundle files were extracted and open the configuration file in a text editor.
|
||
Step 4 |
For the parameters provided in the configuration file, enter the values specific to your deployment. See Configuration File Parameters for more information.
|
||
Step 5 |
Run the CC VA Launcher using the values you specified in the configuration file:
The CC VA Launcher completes the following tasks after it starts:
The deployment time will vary, depending on the available network bandwidth and target datastore's throughput. |
||
Step 6 |
After the virtual appliance powers on, enter the host/vCenter server's credentials to open the appliance's VMware console. It can take up to an hour for the a terminal shell to open. |
||
Step 7 |
Log in, using maglev as the username and the password you specified in Step 5. |
||
Step 8 |
After all of the Catalyst Center on ESXi services come up, use a supported browser to open the IP address you specified for the Enterprise interface in the configuration file. |
||
Step 9 |
Log in, using admin as the username and maglev1@3 as the password. |
Configuration File Parameters
The following table describes the parameters you need to enter values for in the config.json file.
![]() Note |
For optional parameters you are not using, enter an empty string (""). For example, if you don't want to specify an FQDN for
the virtual appliance, its entry would look like this: |
Category | Configuration Parameter | Description | ||
---|---|---|---|---|
Host/vCenter information (host_info) |
ip (ip)2 |
IP address or FQDN of the vCenter or standalone ESXi host that the OVA will be imported to.
|
||
SSL Port (ssl_port)1 |
Port that HTTPS is configured for on the vCenter or ESXi host. The default port is 443. |
|||
Import configuration (import_info) |
OVA file path (ova_path) 1 |
Directory where the Catalyst Center on ESXi OVA file was downloaded to.
|
||
VM Name (vm_name) 1 |
Name of the VM. |
|||
Datacenter (data_center) 3 |
Name of the datacenter the virtual appliance OVA file will be imported to. This parameter is not applicable to standalone ESXi host deployments. |
|||
Cluster Name (cluster) 4 |
Name of the cluster where the virtual machine will reside. |
|||
Resource Pool (resource_pool)3 |
Resource pool in which the imported VM should be placed. This parameter is not applicable to ESXi host deployments. |
|||
Host Name (host_name)2 |
The ESXi host (managed by vCenter) in which the VM should be placed. This parameter is not applicable to standalone ESXi host deployments. |
|||
Datastore (datastore)1 |
Name of the datastore where the VMDK and other supporting files should be placed. |
|||
Disk Provision (disk_provision)1 |
The virtual disk's provisioning format. The thick provisioned format is set by default, but both thin and thick provisioning formats are supported. |
|||
Enterprise Network (network: enterprise_network)1 |
Name of the host network that will be mapped to the virtual machine's Enterprise network. |
|||
Management Network (network: management_network)5 |
Name of the host network that will be mapped to the virtual machine's Management network, which is used to access Catalyst Center on ESXi's GUI. |
|||
Catalyst Center on ESXi configuration information (dnac_info) |
IP Address (address)1 |
IP address of the virtual appliance's Enterprise network interface. |
||
Subnet mask (netmask) 1 |
Subnet mask for the virtual appliance's Enterprise network interface. |
|||
Gateway (gateway)1,6 |
IP address of the Enterprise network interface's gateway. |
|||
Routes (routes)5 |
Static routes for the Enterprise interface. Enter routes in the following format: <network-IP-address>/<netmask>/<gateway-IP-address>. If you're specifying multiple routes, separate them with a comma (,). |
|||
IP Address (address)4 |
IP address of the virtual appliance's Management interface. |
|||
Subnet mask (netmask) 4 |
Subnet mask for the virtual appliance's Management network interface. |
|||
Gateway (gateway)1,5 |
IP address of the Management network interface's gateway. |
|||
Routes (routes)5 |
Static routes for the Management interface. Enter routes in the following format: <network-IP-address>/<netmask>/<gateway-IP-address>. If you're specifying multiple routes, separate them with a comma (,). |
|||
DNS servers (dns_servers)1 |
DNS servers used by the virtual appliance. Specify at least one server. You can specify a maximum of three servers, separated by commas. |
|||
HTTP Proxy (http_proxy)7 |
HTTP proxy the virtual appliance will use. When specifying the proxy, use the following format: http://IP-address-or-FQDN:port-number
|
|||
NTP server (ntp)1 |
NTP servers used by the virtual appliance. Specify at least one server. You can specify a maximum of three servers, separated by commas. |
|||
FQDN (fqdn)6 |
Fully qualified domain name to be configured for the virtual appliance. Aside from hyphens, this name should not contain any special characters. |
View CC VA Launcher Appliance Configuration Progress
During a silent mode configuration of a Catalyst Center on ESXi virtual appliance, you can monitor the configuration process by viewing the progress.json file. Located in the same directory where the CC VA Launcher resides, this file provides the following information.
Field | Description |
---|---|
stage |
Stage that the appliance configuration process is currently in:
|
status |
Status of the configuration process' current stage:
|
percentage |
Percentage of the Catalyst Center on ESXi OVA file that's been imported. |
error_code |
The error code associated with an operation that failed. Refer to the following table for a description of these codes. |
error_desc |
Description of an error. |
Error Code | Description |
---|---|
0 |
Success |
101 |
Manually terminated |
102 |
Configuration file not found |
103 |
Incorrect configuration file entry |
104 |
Failed to connect to vCenter/ESXi host |
105 |
Import operation failed |
106 |
Specified OVA file path is invalid |
107 |
Datastore field is empty |
108 |
Invalid import information |
109 |
Invalid datastore |
110 |
Invalid datacenter |
111 |
Datastore does not have the required amount of free space |
112 |
Invalid disk provisioning |
113 |
Invalid cluster |
114 |
Virtual machine not found |
115 |
Power on operation failed |
116 |
Chose "No" in the deployment confirmation message |
117 |
Incorrect command line arguments |
118 |
Failed to add Management interface |
119 |
Invalid json file |
120 |
Mandatory silent mode fields are missing information |
121 |
Specified OVA file is a different file type |
122 |
Virtual machine name filed is empty |
123 |
Enterprise network name field is empty |
124 |
Invalid resource pool |
125 |
Invalid management network |
126 |
Virtual name exceeds character limit |
127 |
Maglev password does not meet password requirements |
129 |
Invalid ESXi host |
130 |
Empty datacenter provided for vCenter-based import |
131 |
Empty hostname provided for vCenter-based import |
132 |
Invalid network was specified for the vCenter/ESXi host |
133 |
Virtual machine has insufficient CPU or memory |
134 |
Incorrect Catalyst Center on ESXi information was provided |
135 |
No suitable datacenter was found during discovery |
136 |
Empty OVA file path was provided |
Complete the Quick Start Workflow
After you have deployed and configured a Catalyst Center on ESXi virtual appliance, you can log in to its GUI. Use a compatible, HTTPS-enabled browser when accessing Catalyst Center on ESXi.
When you log in for the first time as the admin superuser (with the username admin and the SUPER-ADMIN-ROLE assigned), the Quick Start workflow automatically starts. Complete this workflow to discover the devices that Catalyst Center on ESXi will manage and enable the collection of telemetry from those devices.
Before you begin
To log in to Catalyst Center on ESXi and complete the Quick Start workflow, you will need:
-
If you completed the Advanced Install configuration wizard, the admin superuser username and password that you specified.
-
The information described in the Cisco Catalyst Center Second-Generation Appliance Installation Guide's "Required First-Time Setup Information" topic.
Procedure
Step 1 |
Do one of the following:
One of the following messages appears (depending on the browser you are using):
|
||
Step 2 |
Ignore the message and click Advanced. One of the following messages appears:
These messages appear because the controller uses a self-signed certificate. For information on how Catalyst Center on ESXi uses certificates, see the "Certificate and Private Key Support" section in the Cisco Catalyst Center Administrator Guide. |
||
Step 3 |
Ignore the message and do one of the following:
|
||
Step 4 |
Click Log In. The Catalyst Center on ESXi login screen appears. |
||
Step 5 |
Do one of the following and then click Login:
In the next screen, you are prompted to configure a new admin user (as the default credentials used to log in for the first time will be deleted). |
||
Step 6 |
Do the following in the resulting dialog box, then click Submit.
|
||
Step 7 |
Click Log In. The Catalyst Center on ESXi login screen appears. |
||
Step 8 |
Enter the username and password you configured for the new admin user, then click Login. |
||
Step 9 |
Enter your cisco.com username and password (which are used to register software downloads and receive system communications) and then click Next.
The Terms & Conditions screen opens, providing links to the software End User License Agreement (EULA) and any supplemental terms that are currently available. |
||
Step 10 |
After reviewing these documents, click Next to accept the EULA. The Quick Start Overview slider opens. Click > to view a description of the tasks that the Quick Start workflow will help you complete in order to start using Catalyst Center on ESXi. |
||
Step 11 |
Complete the Quick Start workflow: |
Postdeployment Configurations
After deploying a virtual appliance, you'll need to complete the following postdeployment tasks to run the appliance.
Enable VM Restart Priority
If VMware vSphere HA is enabled in your environment, complete the following procedure to ensure that the virtual appliance's VM is prioritized to power on first during an HA failover.
Procedure
Step 1 |
In the vSphere Client's navigation pane, click the HA cluster. |
Step 2 |
Click the Configure tab. |
Step 3 |
Choose Add. and then click |
Step 4 |
Click the virtual machine you want to apply overrides to and then click OK. |
Step 5 |
In the vSphere HA area's VM Restart Priority field, do the following:
|
Step 6 |
Click Finish. |
Configure a Reservation for the Recovery Site's VM
If you enable disaster recovery for Catalyst Center on ESXi using vSphere's Site Recovery Manager (SRM), ensure that the required resources are reserved during failover by completing the following procedure. When you configure vSphere replication on the virtual appliance, the recovery site’s VM (also referred to as the placeholder VM) will not have a reservation configured on the main site. You'll need to configure the reservation manually after replication takes place.
Procedure
Step 1 |
In the vSphere Client's navigation pane, click the secondary site's placeholder VM. |
Step 2 |
Click Actions, then choose Edit Settings. |
Step 3 |
With the Virtual Hardware tab selected, configure a 64-GHz reservation for the CPU parameter and a 256-GB reservation for the Memory parameter. |
Step 4 |
Click OK. |
Configure a Reservation for the Recovery Site VM's Resource Pool
If you have deployed a virtual appliance in a resource pool and mapped its primary site resource pool to a secondary site resource pool using vSphere's Site Recovery Manager (SRM), ensure that the secondary site's resource pool reserves the resources required by the virtual appliance.
Enable an Air-Gapped Deployment
An air gap is a security measure that involves isolating a network and preventing it from establishing external connections. The only way data can be transferred into an air-gapped network is by physically inserting removable media (such as a USB drive) or connecting a laptop. If you need to enable an air gap for your Catalyst Center on ESXi deployment, complete the following steps.
Procedure
Step 1 |
Deploy a virtual appliance, ensuring that you don't configure a proxy server. |
Step 2 |
Contact the Cisco TAC, who will enable an air gap for your network. |
Upgrade to Catalyst Center 2.3.7.6 on ESXi
Before you begin
-
Create a backup of your Catalyst Center on ESXi database.
-
If your deployment uses a firewall, allow Catalyst Center on ESXi to access the following location on each cluster node for system and package downloads: https://www.ciscoconnectdna.com:443.
![]() Note |
Only SUPER-ADMIN-ROLE users can complete this procedure. |
Procedure
Step 1 |
In the top-right corner, a pop-up window opens, indicating that a new version of Catalyst Center on ESXi is available. Click the Go to Software Management link.
|
||
Step 2 |
In the Software Management page, click Upgrade. |
||
Step 3 |
In the Upgrade Release dialog box, click Install. |
||
Step 4 |
In the Schedule Upgrade dialog box, specify when you want to start the upgrade, then click Download. You can track the upgrade progress from the Activities page. |
Upgrade to Catalyst Center 2.3.7.6 on ESXi in an Air-Gapped Deployment
Procedure
Step 1 |
Download the *.tar.gz file from the location specified by Cisco. |
Step 2 |
Enter the following command to copy the file to the virtual appliance's /airgap folder:
|
Step 3 |
Log in to the Catalyst Center on ESXi GUI. |
Step 4 |
From the top-left corner, click the menu icon and choose . |
Step 5 |
From the top-right corner, click Scan. |
Step 6 |
After Catalyst Center on ESXi locates the files required to complete the upgrade, choose one of the following options:
|