Cisco IWAN on Cisco APIC-EM Configuration Guide, Release 1.3.x

Username configuration must have privilege level 15.

Configure a username with privilege level 15 on the device.

username username privilege 15 password 0 password

PfR configuration must not be present on the device.

Ensure that Performance Routing (PfR) configuration is not present on the device.

no domain ONE

QoS configuration must not be present on the device.

Ensure that Quality of Service (QoS) configuration is not present on the device.

no class-map match-any nbar-12-cls#VOICE

no policy-map nbar-12-cls

no policy-map IWAN-INTERFACE-SHAPE-ONLY-INTERNET

no service-policy input nbar-12-cls

no service-policy output IWAN-INTERFACE-SHAPE-ONLY-INTERNET

Interface loopback 47233 must not be configured on the device.

Remove interface loopback 47233 from the device.

no interface loopback47233

IWAN trustpoint configuration must not be present on device.

Remove Cisco IWAN trustpoint configuration from the device.

no crypto pki trustpoint sdn-network-infra-iwan

VPN routing and forwarding (VRF) configuration must not be present on the device.

Remove the existing VRFs as VRFs as it will interfere with the Cisco IWAN configuration.

Make sure that the routers do not have any of the following VRFs:

• IWAN-TRANSPORT-1
• IWAN-TRANSPORT-2
• IWAN-TRANSPORT-3
• IWAN-TRANSPORT-4

no ip vrf IWAN-TRANSPORT-4

Please make sure at least two interfaces for WAN and LAN are up and running.

Ensure that the two interfaces for WAN and LAN are up and running.

Verify using the show ip interface brief command.

IWAN related crypto configuration found on the device.

Remove the crypto configuration because the crypto configuration might interfere with the Cisco IWAN configuration.

crypto zeroize mypubkey rsa sdn-network-infra-iwan

Device does not have required license.

Required licenses are not enabled on the device. Enable the licenses for the platform in use. For example, AX (Application Experience K9) “appxk9” is required for Cisco 4000 Series Integrated Services Routers; and Advanced Enterprise K9 (adventerprisek9) or Advanced IP Services K9 (advipservicesk9) is required for Cisco ASR 1000 Series Aggregation Services Routers.

No routing protocol found on device.

Enable one of the following routing protocols on the device.

router ospf AS number

router eigrp AS number

router bgp AS number

EZPM configuration found on the device.

Remove Easy Performance Monitor (EZPM) configuration as EZPM configuration might interfere with the Cisco IWAN configuration.

no class-map match-all Business-Critical-and-default-tcp-only

no performance monitor context IWAN-Context profile application-experience

NBAR configuration found on the device.

Remove the Network Based Application Recognition (NBAR) configuration as NBAR configuration might interfere with the Cisco IWAN configuration.

no ip nbar attribute-map Consumer_App_Prof

no ip nbar attribute-map Other_Custom

no ip nbar attribute-map Net_Admin_Custom

No device information available for validation.

Revalidate and if problem persists, ensure the following:

• Device is up and running.
• Device connectivity is established.

Device does not have valid image version and K9 package.

The Cisco IWAN application does not support the Cisco software image loaded on the device. Boot the device with a 15.5(3) or 15.5(4) image with the K9 feature pack.

asr1000rp1-adventerprisek9.03.16.00.S.155-3.S-ext.bin