GENERAL
Q. What is the CiscoWorks Interface Configuration Manager (ICM)?
A. CiscoWorks ICM is a network management application that simplifies the configuration of switch access ports and interfaces. In medium-sized to large networks, CiscoWorks ICM can reduce service deployment and reconfiguration time by performing bulk access-port configuration across the network.
Q. What are the prerequisites for CiscoWorks ICM?
A. CiscoWorks ICM is a functionality extension that can be added to the CiscoWorks LAN Management Solution (LMS) 2.5 (with the December 2005 update applied) or 2.5.1 with a minimum prerequisite of CiscoWorks Resource Manager Essentials (RME) 4.0.2.
Q. What is Layer 2 Network Admission Control (L2 NAC)?
A. L2 NAC is a new technology from Cisco Systems® that can be used to permit network access based on the identity and posture of the client(s). The main functional parts in an L2 NAC system are the switch (the network authentication device), Cisco Secure Access Control Server and the supplicant on the client.
Q. How is CiscoWorks ICM connected with L2 NAC?
A. CiscoWorks ICM can be used to configure L2 NAC on Cisco LAN switches and to deploy consistent L2 NAC configurations across the network.
Q. Does CiscoWorks ICM configure devices individually or in bulk?
A. CiscoWorks ICM has an intuitive GUI to help you configure access ports in bulk. The differences in platforms and command-line interface (CLI) are made transparent through the GUI. CiscoWorks ICM can push consistent bulk configurations across different supported platforms in the network.
Q. What is the difference between Cisco® Network Assistant and CiscoWorks ICM?
A. CiscoWorks ICM is a bulk access-port configuration application that works on several types of platforms such as the Cisco Catalyst® 6000/6500 Series Switches with CATOS, the Cisco Catalyst 3000 Series, Cisco Catalyst 4000 Series, etc. The Cisco Network Assistant, however, only works with the Cisco Catalyst 3000 and 4000 Series on an individual device level. Cisco Network Assistant does not offer a user interface to perform L2 NAC configuration and does not integrate with CiscoWorks LAN Management Solution (LMS).
Q. What are the principal features of CiscoWorks ICM?
A. The principal features in CiscoWorks ICM are:
• Configuration for L2 NAC technologies NAC L2 802.1x and NAC L2 IP
• RADIUS server configuration on switches
• AAA Fail/Open configuration on switches
• MAC exception handling
• Policy-based access control list (ACL) configuration. (Currently supported only on CATOS for the Catalyst 6000/6500 Series. Check for specific supported version.)
• Flexible "ADHOC" configuration user interface
• NAC Readiness Report
Q. Can CiscoWorks ICM be used for generic port configuration, independent of L2 NAC configuration?
A. CiscoWorks ICM 1.0 does not support generic port configuration. However, future releases will support generic port configuration across the network. In CiscoWorks ICM 1.0, you can still use the ADHOC global and interface user interface to do some generic port configuration.
Q. Is the configuration done through the ADHOC user interface validated before being pushed out?
A. The ADHOC user interface is a free-form user interface where users can enter command-line interface (CLI) commands that they want to push out. These CLI configuration instructions will not be validated.
Q. Is configuration validated when done through CiscoWorks ICM?
A. Yes, CiscoWorks ICM will push validated configuration to the device(s) when it is done through the user interface provided for the various L2 NAC technologies.
Q. What is the NAC Readiness Report in CiscoWorks ICM?
A. The NAC Readiness Report is a comprehensive report that takes the device inventory gathered from CiscoWorks Resource Manager Essentials (RME) and categorizes various L2 NAC features and technology supported on the devices based on the platform and OS version. It accelerates network research and planning prior to L2 NAC deployment.
Q. What kind of integration does CiscoWorks ICM have with CiscoWorks LMS?
A. CiscoWorks ICM integrates tightly with CiscoWorks RME, which is part of CiscoWorks LMS. It uses the infrastructure provided by CiscoWorks RME for device inventory and configuration. It integrates with the Device Credential Repository (DCR) functionality provided by CiscoWorks Common Services for device credential information.
Q. What kind of integration does CiscoWorks ICM have with CiscoWorks Campus Manager?
A. CiscoWorks Campus Manager is an optional application with respect to CiscoWorks ICM. If CiscoWorks Campus Manager is installed and has discovered network information, CiscoWorks ICM will integrate automatically with CiscoWorks Campus Manager and use the discovered network information in its user interface and workflows. Some examples of network information used from CiscoWorks Campus Manager are the VLAN name and ID.
Q. What are the supported devices in CiscoWorks ICM?
A. CiscoWorks ICM supports the Cisco Catalyst 6000/6500 Series with CATOS, the Cisco Catalyst 3000 Series, and the Cisco Catalyst 4000 Series of devices. Please see the supported device list in the user guide for the detailed list.
Q. Are all the features provided in CiscoWorks ICM supported on all devices that CiscoWorks ICM supports?
A. The Policy-Based access control list (ACL) feature is only supported in CATOS for the Cisco Catalyst 6000/6500 Series. All other features are supported on all devices.
Q. What are the system requirements for CiscoWorks ICM?
A. CiscoWorks ICM installs over an existing CiscoWorks LMS 2.5 or 2.5.1 installation. Hence the system requirements are determined by the CiscoWorks LMS suite. Please refer to the CiscoWorks LMS system requirements located in the online CiscoWorks LMS 2.5 or 2.5.1 Quick Start Guide: http://www.cisco.com/en/US/products/sw/cscowork/ps2425/prod_installation_guides_list.html.
Q. Does CiscoWorks ICM support Microsoft Windows and Sun Solaris operating systems?
A. Yes, CiscoWorks ICM installs over CiscoWorks LMS running on Windows and Solaris.
Q. Can CiscoWorks ICM install on both restricted and unrestricted versions of CiscoWorks LMS?
A. Yes, CiscoWorks ICM can install on top of both restricted and unrestricted versions of CiscoWorks LMS.
Q. What kind of licensing model does CiscoWorks ICM use?
A. CiscoWorks ICM uses a port-based licensing model. This model allows you to purchase a right-to-use (RTU) license for the appropriate number of ports to begin with and scale the number as your network size increases. Please refer to the CiscoWorks ICM ordering guide for more information.
Q. Are software-support contracts available and how are they ordered?
A. Yes. You can purchase a one (1) year Software Application Support (SAS) contract that provides Cisco Technical Assistance Center (TAC) support, access to software maintenance patches on Cisco.com Software Center, and CiscoWorks ICM minor update releases.
Q. How do I order CiscoWorks ICM?
A. CiscoWorks ICM is available for purchase through regular Cisco sales and distribution channels worldwide.
To place an order, visit the Cisco Ordering Home Page.
FOR MORE INFORMATION
For more information about the CiscoWorks Interface Configuration Manager, visit http://www.cisco.com/go/cwicm or contact your local Cisco account representative or send an e-mail to ciscoworks@cisco.com or to the Product Marketing group at ask-cwicm-pm@cisco.com.