- Faults, events and audit log
- User management
- Key management
- Communication management
- Stats management
- Timezone management
- Capability catalog
- License management
Fault, Events and Audit Log
There are only two tabs here where actual configuration can be done; Settings and Syslog.Settings
Flapping Interval - a fault cannot change state until this timer has expired.
There are also length of time to retain cleared faults and a control for the TFTP core exporter.
Syslog
All of the usual logging settings including console, monitor, file and syslog are located here.
The rest of the tabs are logs and files
User management
This tab has the most possible configuration of all of the admin tabs. I'll go from the top down.Authentication
Native Authentication - can set the default and console authentication methods here. Also can create a domain with an authentication method. The domain can be used in subsequent areas.
Authentication Domains - When a domain is created per the instructions above, the domain will should up here
LDAP
LDAP providers - this is the last item listed but the first step. Create a provider and an LDAP group rule. I'll explain each field later and add a screen shot.
LDAP Provider Groups - Map the provider that was created above into a Provider Group.
LDAP Group Maps - This is where the roles and locales are mapped to an LDAP Group DN.
RADIUS
RADIUS Providers - last item but first configured (again). Same concept as above.
RADIUS Provider Groups - same concept as above.
TACACS
Same as RADIUS
User Services - this is the final section in User Management.
Locales - Creates RBAC unique to an Organization (Org)
Locally Authenticated Users - as the title says
Remotely Authenticated Users - as the title says
Roles - Contains the system defined roles and the ability to create custom defined roles
Key management
Key-ring - a key can be created here along with a certificate request.Trusted Point - A trusted point can be entered.
Communication Management
Call Home - All of the Call Home properties are configured here including profiles, polices, etcCommunication Services - Items related to communications to UCSM are here including things like HTTP/HTTPS, SNMP state, SSH/Telnet, etc. For HTTPS, a key-ring created in key management can be used.
DNS Management - DNS servers are added here.
Management IP Pool (ext-mgmt) - Blocks of IP addresses to be used by the KVM are created here.
Management Interfaces - The virtual IP of the clusters as well as the IP's of the primary and secondary FI's are set here.
Stats Management
Collection Policies - There are various policies for different equipment like adapters, chassis, etc. Each policy controls the collection and reporting intervals.Fabric - This is where the default threshold policies are configured for the Fabric and LAN/SAN clouds.
Root - Custom policies are configured here. These policies can also be configured directly under the associated tab. For instance, LAN policies can be configured under the LAN tab using the Threshold Policies under the Policy tab.
Timezone Management
NTP servers and timezones are configured here.Capability Catalog
The Capability Catalog is a set of implementation specific tunable parameters that can be changed without a reboot of UCSM. Other than configuring how the catalog is updated, I doubt there is much else that will be in the CCIE lab.Catalog Update Tasks - The method for the update can be set to either local or remote. If remote, the protocol, IP, username/password, etc can be configured.
