Software Configuration Guide for Cisco IWAN on APIC-EM

Username configuration must have privilege level 15

Configure a user name with privilege 15 on the device.

username username privilege 15 password 0 password

PfR configuration must not be present on the device

Ensure that neither Performance Routing (PfR) configuration nor PfR related configuration is present on the device.

no domain ONE

QoS configuration must not be present on the device

Ensure that neither Quality of Service (QoS) configuration nor QoS related configuration is present on the device.

no class-map match-any nbar-12-cls#VOICE

no policy-map nbar-12-cls

no policy-map IWAN-INTERFACE-SHAPE-ONLY-INTERNET

no service-policy input nbar-12-cls

no service-policy output IWAN-INTERFACE-SHAPE-ONLY-INTERNET

Interface loopback 47233 must not be configured on the device

Remove loopback 47233 from the device.

no interface loopback47233

IWAN trustpoint configuration must not be present on device

Remove IWAN trustpoint configuration from the device.

no crypto pki trustpoint sdn-network-infra-iwan

VPN routing and forwarding (VRF) configuration must not be present on the device

It is recommended removing existing VRFs as VRFs may interfere with the IWAN configuration.

no ip vrf IWAN-TRANSPORT-4

Please make sure at least two interfaces for WAN and LAN are up and running

Ensure that two interfaces are up on the device. Verify using the show ip interface brief command.

IWAN related crypto configuration found on the device

It is recommended removing crypto configuration as crypto configuration might interfere with the IWAN configuration.

crypto zeroize mypubkey rsa sdn-network-infra-iwan

Device does not have required license

Required licenses not enabled on device. Enable the licenses for the platform in use. For example, AX (Application Experience K9) “appxk9” is required for Cisco 4000 Series Integrated Services Routers and Advanced Enterprise K9 (adventerprisek9) or Advanced IP Services K9 (advipservicesk9) is for Cisco ASR 1000 Series Aggregation Services Routers.

Device does not have valid image version

Cisco software image available on the device is not the recommended software image for IWAN. Boot the device with software image Cisco IOS Release 15.5(3)S1 or Cisco IOS XE Release 3.16.1 and above.

No routing protocol found on device

It is recommended enabling one of the following routing protocols on the device.

router ospf AS number

router eigrp AS number

router bgp AS number

In case of BGP, ensure that there are no conflicting routing protocols are configured on the devices. If no routing protocol is configured, the default IWAN protocol will be configured.

EZPM configuration found on the device

It is recommended to remove Easy Performance Monitor (EZPM) configuration as EZPM configuration may interfere with IWAN configuration.

no class-map match-all Business-Critical-and-default-tcp-only

no performance monitor context IWAN-Context profile application-experience

NBAR configuration found on the device

It is recommended to remove Network Based Application Recognition (NBAR) configuration as NBAR configuration may interfere with IWAN configuration.

no ip nbar attribute-map Consumer_App_Prof

no ip nbar attribute-map Other_Custom

no ip nbar attribute-map Net_Admin_Custom

No device information available for validation

Device information for validation failed. Revalidate and if problem persists, ensure the following:

• Device is up and running.
• Device connectivity is be established from the cluster.

Device does not have K9 package in the image

IWAN does not support the Cisco software image loaded on the device. Boot up image with K9 package.

asr1000rp1-adventerprisek9.03.16.00.S.155-3.S-ext.bin

Device does not have valid image version and K9 package

Boot the device with software image Cisco IOS Release 15.5(3)S1 or Cisco IOS XE Release 3.16.1 and above with K9 package