Configuring the application server and remote device agent after upgrade


This topic describes the tasks that you need to perform after the TrueSight Network Automation upgrade is complete.

Clear the browser cache

Since there have been changes to the software, you must clear the browser cache to ensure that stale downloaded code does not interfere with the presentation of web pages. Refer to the browser's documentation for instructions on clearing the cache. If you neglect to do so, web pages might appear mangled or might behave incorrectly.

Update permissions

If you have changed the OS user name and its details during the application server or remote device agent upgrade, provide the read/write access to this (non-privileged) user account on the TFTP, SCP, and FTP directories that are configured with Network Automation.

Switch the authentication mechanism (SQL Server only)

Starting with version 8.9.04 for enhanced security, Network Automation supports Windows authentication in addition to the default SQL Server authentication for the SQL Server database user. If you were using SQL Server authentication in your existing installation, and you want to switch to Windows authentication for enhanced security, you need to update the BCA-Networks Web Server service and various configuration files, as described in Switching-from-SQL-Server-authentication-to-Windows-authentication. If you want to switch to SQL Server authentication later, see Switching-from-Windows-authentication-to-SQL-Server-authentication.

Update the network span for the Populate End of Life Date external script action

In versions earlier than 21.08, the Populate End of Life Date external script action runs on all Cisco devices in the entire network. Starting with version 21.08, you can run the action on a specific network span. Due to change in network span, after you upgrade to version 21.08 or later, select the network span for any policies, jobs, or predefined jobs that were using this action before upgrade.

(Windows only) Update the traceroute details for the Find Endpoint span action

If you have modified the tracerouteLastLine property in the global.properties file before upgrade, follow these steps to update its value so that the Find endpoint job can locate the managing switch properly (see the related corrected issue, DRCAN-22699):

  1. Open the BCAN_DATA/global.properties file with a text editor.
  2. Search for the word trace.
    The following code snippet is an excerpt of the global.properties file:

    # Following are the values for Windows
    #tracerouteCmd=tracert -d
    #tracerouteRegex=^\\d+[\\s*|\\S*]*?(\\S*)$
    tracerouteLastLine=4
  3. Comment tracerouteLastLine by adding '#' and set its value to 3.
  4. Save the file.
  5. Restart the TrueSight Network Automation web service.

Preserve the device adapter customizations

If you made any modifications to configuration trails, custom actions, device types, or external script actions located on the Admin > Network Admin > Device Adapters page, or if there are changes between your existing adapters and upgraded adapters, the adapters show up as Modified in the Network Automation GUI.

During an upgrade, the latest versions of all the supported device adapters are loaded into your Network Automation system. These might include enhancements and corrections to adapters that you might have previously customized. Your customized version will be active after an upgrade, which will be missing those enhancements and corrections. You must manually merge the two sets of changes.

BMC recommends that you perform the following steps before you start using the system with scheduled job actions:

  1. Navigate to Admin > Network Admin > Device Adapters.
  2. In the State column, filter the adapters in the Modified state.
  3. Expand the hierarchy and find any adapters that contain a Requires Merge MergeFlag.png flag in the State column, as shown in the following figure:

    UpgradeMerge.png
  4. If an adapter has the Requires Merge flag, perform the following actions:
    1. Export the Baseline version of the adapter.
    2. Export the Previous Baseline version of the adapter.
    3. Export the Modified version of the adapter.
    4. Merge your customized changes into the new baseline by performing the following substeps:
      1. Compare your Modified version with the Previous Baseline version to see your changes.
      2. Re-do those changes to the new Baseline version. Now you have the latest Baseline version with your customizations.
    5. Import the updated adapter.

The following video (4:32) demonstrates how to reconcile device adapters after upgrading Network Automation.

icon-play.pnghttps://www.youtube.com/watch?v=vU5TGKDvzM4

Back to top

Enable the Alternate Addresses dynamic field

The find endpoint algorithm uses the traceroute command to find the IP address of the managing router for the endpoint. If the router has multiple IP addresses defined within it, and the IP address output of the traceroute command does not match the IP address stored in the Network Automation server database for the device, the algorithm fails.

To avoid this problem, Network Automation has a Configuration Profiled dynamic field, Alternate Addresses. This field captures additional IP addresses from the configuration of Cisco IOS-based routers.

The alternate addresses are checked during endpoint actions, in addition to the primary address of the device, when searching the database for the router.

The Alternate Addresses dynamic field is created automatically during the installation of the Network Automation application server. However, the field is not created when performing an upgrade on the application server. After the application server upgrade is complete, you need to add this field if it does not exist, and manually enable it.

To add and enable the Alternate Addresses dynamic field

  1. In the Network Automation GUI, go to Admin > System Admin > Dynamic Fields, and click Add.
  2. On the Details tab, enter or select the following values:

    • Component: Select Device.
    • Assignment Mechanism: Select Configuration Profiled.
    • Value Type: Select Capture Attribute Values.
    • Name: Enter Alternate Addresses.
    • Enable: (Optional) Select this option to enable the feature.

    AddDynField.png

  3. On the Spans tab, select Entire Network.
  4. On the Queries tab, click Add and enter the following values:

    • Device Type: Select Cisco, and then select Cisco IOS Switch/Router.
    • Minimum OS Version: Use the default *. *. *
    • Maximum OS Version: Use the default *. *. *
    • Applicable Trails: Select Running.
    • Subject: Select Pattern.
    • Pattern: Enter the following string: 
      ^\s+ip\s+address\s+(\d+\.\d+\.\d+\.\d+)\s+\d+\.\d+\.\d+\.\d+$ s
    • Domain: Select Selected Blocks.
    • Begin: Select Pattern, and then enter the following string: 
      ^interface\s+.*[a-zA-Z].+[0-9].*
    • End: Select Pattern, and then enter the following string: 
      ^!$

    AddQueryDynFields.png

  5. Click Enter, and then click Save.

Back to top

Update device import task formats

Starting with version 8.9.04, the device import task no longer supports the following mapping formats for the BMC Discovery versions that are End of Life (EOL): 

  • BMC Atrium Discovery and Dependency Mapping 8.2+
  • BMC Atrium Discovery and Dependency Mapping 7.5
  • BMC Foundation Discovery 1.5

If you have upgraded from a version earlier than 8.9.04. any device import tasks referring to above formats are automatically upgraded to use the BMC Discovery 11.0+ (XML API) format. If you do not want the automatic upgrade, edit your device import tasks to use any other format other than the above mentioned formats before you start upgrading. If you have not edited these tasks, validate whether these tasks are working as expected after upgrade.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*