Professional Documents
Culture Documents
Cloud Monitoring Detailed Device Configurations
Cloud Monitoring Detailed Device Configurations
Learn more with these free online training courses on the Meraki Learning Hub:
Sign in with your Cisco SSO or create a free account to start training.
System Services
Enable NETCONF.
IP routing is required for NETCONF and Telemetry streaming to function on Catalyst devices and is part of the device configuration pre-check
process.
netconf-yang
lldp run
ip ssh version 2
ip ssh server algorithm authentication publickey password keyboard
Create local authentication group for Dashboard device access for SSH CLI and NETCONF through the TLS tunnel.
1
aaa authorization exec MERAKI local
Create ACL for cloud ingress VTY access via SSH and allow only port 2222 for SSH.
Create ACL for cloud telemetry egress. Allow only port 2022 for SFTP to the cloud.
Configure a SSH rotary for the Dashboard VTY lines to listen on port 2222 for Dashboard initiated SSH sessions.
Create 4 VTY lines dedicated to device access from Dashboard and enable SSH to those VTY lines. Use the ACL and AAA groups configured to secure
Dashboard connections.
line vty 32 35
access-class MERAKI_VTY_IN in
access-class MERAKI_VTY_OUT out
authorization exec MERAKI
login authentication MERAKI
rotary 50
transport input ssh
exit
username meraki-user privilege 15 secret 9 < unique hashed secret password >
ip ssh pubkey-chain
username meraki-user
key-string <string>
TLS Tunnel
Import the Dashboard TLS tunnel endpoint certificate authority for SSL certificate verification.
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIQBtjZBNVYQ0b2ii+nVCJ+xDANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
QTAeFw0yMTA0MTQwMDAwMDBaFw0zMTA0MTMyMzU5NTlaME8xCzAJBgNVBAYTAlVT
2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-----END CERTIFICATE-----
quit
yes
View the certificate details of the TLS Root Certificate Authority here.
Configure a trustpoint for SSL verification of the Dashboard TLS tunnel endpoint.
Create a Loopback interface for the crypto TLS tunnel overlay connection.
interface Loopback1000
description Meraki TLS Connection
ip address <cloud assigned local device ip address> 255.255.255.255
Configure the TLS tunnel for Cloud Connectivity to Dashboard. Selecting the local source interface based on the current next-hop interface of the default route.
3
Additional Telemetry Configuration Applied by Dashboard
Once the Catalyst device is securely connected the Cisco cloud infrastructure, additional configuration to support cloud monitoring functions will be managed by
Meraki dashboard and communicated to the device through the secure tunnel. The following are the additional configuration that may be sent to the device.
SNMP
Add Dashboard as an SNMP server to receive traps from the device.
Logging
Add Dashboard as a logging server.
Device Tracking
The device tracking policy is applied to all interfaces on the device to provide connected client data (MAC address, IP Address)
Netflow
Flow record, monitor, and exporter configurations are set on the device to enable traffic analytics. The flow monitor is applied to all interfaces.
Netflow configuration is applied only to devices that have a DNA Advantage license.
4
collect datalink mac source address input
collect datalink mac source address output
collect flow direction
collect timestamp absolute first
collect timestamp absolute last
5
file max-size 10
file max-count 2
file max-create-interval 5
Interfaces
The device tacking policy and flow monitors are applied to all interfaces on the device.
interface Gx/x/x
device-tracking attach-policy MERAKI_POLICY
ip flow monitor MERAKI_AVC_IPV4 input
ip flow monitor MERAKI_AVC_IPV4 output
ipv6 flow monitor MERAKI_AVC_IPV6 input
ipv6 flow monitor MERAKI_AVC_IPV6 output
interface PoXXX
device-tracking attach-policy MERAKI_POLICY
ip flow monitor MERAKI_AVC_IPV4 input
ip flow monitor MERAKI_AVC_IPV4 output
ipv6 flow monitor MERAKI_AVC_IPV6 input
ipv6 flow monitor MERAKI_AVC_IPV6 output
6
Dashboard TLS Tunnel Endpoint Root Certificate Authority Details
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d8:d9:04:d5:58:43:46:f6:8a:2f:a7:54:22:7e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
Validity
Not Before: Apr 14 00:00:00 2021 GMT
Not After : Apr 13 23:59:59 2031 GMT
Subject: C=US, O=DigiCert Inc, CN=DigiCert TLS RSA SHA256 2020 CA1
7
receiver ip address <cloud ip address> 25103 protocol cloud-native
telemetry ietf subscription 1012
encoding encode-tdl
filter tdl-uri /services;serviceName=sessmgr_oper/session_context_data
stream native
update-policy periodic 360000
receiver ip address <cloud ip address> 25103 protocol cloud-native
telemetry ietf subscription 1013
encoding encode-tdl
filter tdl-uri /services;serviceName=iosevent/sisf_mac_oper_state
stream native
update-policy on-change
receiver ip address <cloud ip address> 25103 protocol cloud-native
telemetry ietf subscription 1014
encoding encode-tdl
filter tdl-uri /services;serviceName=ios_oper/sisf_db_wired_mac
stream native
update-policy periodic 360000
receiver ip address <cloud ip address> 25103 protocol cloud-native
telemetry ietf subscription 1015
encoding encode-tdl
filter tdl-uri /services;serviceName=ios_oper/poe_port_detail
stream native
update-policy periodic 30000
receiver ip address <cloud ip address> 25103 protocol cloud-native
telemetry ietf subscription 1016
encoding encode-tdl
filter tdl-uri /services;serviceName=ios_oper/poe_module
stream native
update-policy periodic 60000
receiver ip address <cloud ip address> 25103 protocol cloud-native
telemetry ietf subscription 1018
encoding encode-tdl
filter tdl-uri /services;serviceName=ios_oper/cdp_neighbor_detail
stream native
update-policy periodic 360000
receiver ip address <cloud ip address> 25103 protocol cloud-native
telemetry ietf subscription 1020
encoding encode-tdl
filter tdl-uri /services;serviceName=stkmevent/stkmevent
stream native
update-policy on-change
receiver ip address <cloud ip address> 25103 protocol cloud-native
telemetry ietf subscription 1021
encoding encode-tdl
filter tdl-uri /services;serviceName=ios_oper/switch_oper_info
stream native
update-policy on-change
receiver ip address <cloud ip address> 25103 protocol cloud-native
telemetry ietf subscription 1030
encoding encode-tdl
filter tdl-uri /services;serviceName=iosevent/platform_component_state_update
stream native
update-policy on-change
8
receiver ip address <cloud ip address> 25103 protocol cloud-native
telemetry ietf subscription 1031
encoding encode-tdl
filter tdl-uri /services;serviceName=ios_emul_oper/entity_information
stream native
update-policy periodic 30000
receiver ip address <cloud ip address> 25103 protocol cloud-native
telemetry ietf subscription 2002
encoding encode-tdl
filter tdl-transform MERAKI_PORTCHANNEL_STATS_DELTA
stream native
update-policy periodic 30000
receiver ip address <cloud ip address> 25103 protocol cloud-native
telemetry transform MERAKI_INTF_STATS_DELTA
input table tbl_interfaces_state
field ipv4
field name
field speed
field if_index
field description
field oper_status
field admin_status
field phys_address
field interface_type
field statistics.rx_pps
field statistics.tx_pps
field statistics.in_octets
field statistics.out_errors
field ether_state.media_type
field statistics.in_errors_64
field statistics.out_discards
field statistics.in_crc_errors
field statistics.out_octets_64
field intf_ext_state.error_type
field statistics.in_discards_64
field statistics.in_unicast_pkts
field statistics.out_unicast_pkts
field ether_stats.in_jabber_frames
field statistics.in_broadcast_pkts
field statistics.in_multicast_pkts
field statistics.out_broadcast_pkts
field statistics.out_multicast_pkts
field ether_stats.in_fragment_frames
field ether_stats.in_oversize_frames
field ether_stats.in_mac_pause_frames
field statistics.in_unknown_protos_64
field ether_stats.out_mac_pause_frames
field intf_ext_state.port_error_reason
field ether_state.negotiated_port_speed
field ether_state.negotiated_duplex_mode
field ether_stats.dot3_counters.dot3_error_counters_v2.dot3_fcs_errors
field ether_stats.dot3_counters.dot3_error_counters_v2.dot3_duplex_status
field ether_stats.dot3_counters.dot3_error_counters_v2.dot3_symbol_errors
field ether_stats.dot3_counters.dot3_error_counters_v2.dot3_frame_too_longs
9
field ether_stats.dot3_counters.dot3_error_counters_v2.dot3_late_collisions
field ether_stats.dot3_counters.dot3_error_counters_v2.dot3_alignment_errors
field ether_stats.dot3_counters.dot3_error_counters_v2.dot3_carrier_sense_errors
field ether_stats.dot3_counters.dot3_error_counters_v2.dot3_excessive_collisions
field ether_stats.dot3_counters.dot3_error_counters_v2.dot3_single_collision_frames
field ether_stats.dot3_counters.dot3_error_counters_v2.dot3_multiple_collision_frames
field ether_stats.dot3_counters.dot3_error_counters_v2.dot3_internal_mac_receive_errors
field ether_stats.dot3_counters.dot3_error_counters_v2.dot3_internal_mac_transmit_errors
join-key name
logical-op and
type mandatory
uri /services;serviceName=ios_emul_oper/interface
operation 1
output-field 1
field tbl_interfaces_state.name
output-field 2
field tbl_interfaces_state.if_index
output-field 3
field tbl_interfaces_state.interface_type
output-field 4
field tbl_interfaces_state.description
output-field 5
field tbl_interfaces_state.admin_status
output-field 6
field tbl_interfaces_state.oper_status
output-field 7
field tbl_interfaces_state.speed
output-field 8
field tbl_interfaces_state.ipv4
output-field 9
field tbl_interfaces_state.phys_address
output-field 10
field tbl_interfaces_state.statistics.in_unknown_protos_64
output-field 11
field tbl_interfaces_state.statistics.in_octets
output-field 12
field tbl_interfaces_state.statistics.out_octets_64
output-field 13
field tbl_interfaces_state.statistics.in_errors_64
output-field 14
field tbl_interfaces_state.statistics.out_errors
output-field 15
field tbl_interfaces_state.statistics.in_unicast_pkts
output-field 16
field tbl_interfaces_state.statistics.out_unicast_pkts
output-field 17
field tbl_interfaces_state.statistics.in_multicast_pkts
output-field 18
field tbl_interfaces_state.statistics.out_multicast_pkts
output-field 19
field tbl_interfaces_state.statistics.in_broadcast_pkts
output-field 20
field tbl_interfaces_state.statistics.out_broadcast_pkts
output-field 21
10
field tbl_interfaces_state.statistics.in_discards_64
output-field 22
field tbl_interfaces_state.statistics.out_discards
output-field 23
field tbl_interfaces_state.statistics.tx_pps
output-field 24
field tbl_interfaces_state.statistics.rx_pps
output-field 25
field tbl_interfaces_state.ether_state.media_type
output-field 26
field tbl_interfaces_state.ether_stats.dot3_counters.dot3_error_counters_v2.dot3_single_collision_frames
output-field 27
field tbl_interfaces_state.ether_stats.dot3_counters.dot3_error_counters_v2.dot3_multiple_collision_frames
output-field 28
field tbl_interfaces_state.ether_stats.dot3_counters.dot3_error_counters_v2.dot3_late_collisions
output-field 29
field tbl_interfaces_state.ether_stats.dot3_counters.dot3_error_counters_v2.dot3_excessive_collisions
output-field 30
field tbl_interfaces_state.ether_stats.dot3_counters.dot3_error_counters_v2.dot3_frame_too_longs
output-field 31
field tbl_interfaces_state.ether_stats.dot3_counters.dot3_error_counters_v2.dot3_alignment_errors
output-field 32
field tbl_interfaces_state.ether_stats.dot3_counters.dot3_error_counters_v2.dot3_fcs_errors
output-field 33
field tbl_interfaces_state.ether_stats.dot3_counters.dot3_error_counters_v2.dot3_carrier_sense_errors
output-field 34
field tbl_interfaces_state.ether_stats.dot3_counters.dot3_error_counters_v2.dot3_internal_mac_receive_errors
output-field 35
field tbl_interfaces_state.ether_stats.dot3_counters.dot3_error_counters_v2.dot3_internal_mac_transmit_errors
output-field 36
field tbl_interfaces_state.ether_stats.dot3_counters.dot3_error_counters_v2.dot3_symbol_errors
output-field 37
field tbl_interfaces_state.ether_stats.dot3_counters.dot3_error_counters_v2.dot3_duplex_status
output-field 38
field tbl_interfaces_state.ether_stats.in_mac_pause_frames
output-field 39
field tbl_interfaces_state.ether_stats.out_mac_pause_frames
output-field 40
field tbl_interfaces_state.ether_stats.in_oversize_frames
output-field 41
field tbl_interfaces_state.ether_stats.in_jabber_frames
output-field 42
field tbl_interfaces_state.ether_stats.in_fragment_frames
output-field 43
field tbl_interfaces_state.ether_state.negotiated_duplex_mode
output-field 44
field tbl_interfaces_state.ether_state.negotiated_port_speed
output-field 45
field tbl_interfaces_state.statistics.in_crc_errors
output-field 46
field tbl_interfaces_state.intf_ext_state.error_type
output-field 47
field tbl_interfaces_state.intf_ext_state.port_error_reason
specified
11
telemetry transform MERAKI_PORTCHANNEL_STATS_DELTA
input table tbl_interfaces_state
field ipv4
field name
field speed
field if_index
field description
field oper_status
field admin_status
field phys_address
field interface_type
field interface_class
field statistics.rx_pps
field statistics.tx_pps
field statistics.in_octets
field statistics.out_errors
field statistics.in_errors_64
field statistics.out_discards
field statistics.out_octets_64
field statistics.in_discards_64
field statistics.in_unicast_pkts
field statistics.out_unicast_pkts
field statistics.in_broadcast_pkts
field statistics.in_multicast_pkts
field statistics.out_broadcast_pkts
field statistics.out_multicast_pkts
field statistics.in_unknown_protos_64
join-key name
logical-op and
type mandatory
uri /services;serviceName=ios_emul_oper/interface
operation 1
filter 1
condition operator eq
condition value INTF_CLASS_UNSPECIFIED
field tbl_interfaces_state.interface_class
logical-op and
logical-op next and
filter 2
event on-change
field tbl_interfaces_state.name
logical-op next or
logical-op or
output-field 1
field tbl_interfaces_state.name
output-field 2
field tbl_interfaces_state.if_index
output-field 3
field tbl_interfaces_state.interface_type
output-field 4
field tbl_interfaces_state.description
output-field 5
field tbl_interfaces_state.admin_status
output-field 6
12
field tbl_interfaces_state.oper_status
output-field 7
field tbl_interfaces_state.speed
output-field 8
field tbl_interfaces_state.ipv4
output-field 9
field tbl_interfaces_state.phys_address
output-field 10
field tbl_interfaces_state.statistics.in_unknown_protos_64
output-field 11
field tbl_interfaces_state.statistics.in_octets
output-field 12
field tbl_interfaces_state.statistics.out_octets_64
output-field 13
field tbl_interfaces_state.statistics.in_errors_64
output-field 14
field tbl_interfaces_state.statistics.out_errors
output-field 15
field tbl_interfaces_state.statistics.in_unicast_pkts
output-field 16
field tbl_interfaces_state.statistics.out_unicast_pkts
output-field 17
field tbl_interfaces_state.statistics.in_multicast_pkts
output-field 18
field tbl_interfaces_state.statistics.out_multicast_pkts
output-field 19
field tbl_interfaces_state.statistics.in_broadcast_pkts
output-field 20
field tbl_interfaces_state.statistics.out_broadcast_pkts
output-field 21
field tbl_interfaces_state.statistics.in_discards_64
output-field 22
field tbl_interfaces_state.statistics.out_discards
output-field 23
field tbl_interfaces_state.statistics.tx_pps
output-field 24
field tbl_interfaces_state.statistics.rx_pps
specified
13