Onboarding Methods
OS10 and SONiC Enterprise devices can be onboarded to APEX AIOps Infrastructure Observability through the CloudIQ Collector. CloudIQ Collector is supported on PowerSwitch systems running OS10 10.5.3.0 or later and Enterprise SONiC version 4.1.x and later. CloudIQ Collector has been validated on OS10 Full Switch and SmartFabric Services modes.
Note: CloudIQ Collector has replaced the SupportAssist method of onboarding and collecting data for PowerSwitch systems. Customers currently using SupportAssist are advised to migrate to CloudIQ Collector.
Supported Devices
N3248PXE-ON
N3248X-ON
N3248TE-ON
E3248P-ON
E3248PXE-ON
S5248F-ON
S5296F-ON
S5448F-ON
S5232F-ON
S5224F-ON
S5212F-ON
Z9664F-ON
Z9264F-ON
Z9332F-ON
Z9432F-ON
Z9864-ON
N3248TE-ON
S3048-ON
S4048T
S4112F-ON
S4112T-ON
S4128F-ON
S4128T-ON
S4148F-ON
S4148T-ON
S4148U
S5296F-ON
S5248F-ON
S5232F-ON
S5224F-ON
S5212F-ON
S5448F-ON
Z9100
Z9264F-ON
Z9332F-ON
Z9432F-ON
Z9664F-ON
E3224F-ON
Migrating from SupportAssist to CloudIQ Collector
Existing OS10 SupportAssist customers can migrate to CloudIQ Collector without losing their data in APEX AIOps Infrastructure Observability.
- Remove the SupportAssist configuration.
OS10# configure terminal
OS10(config)# eula-consent support-assist reject
This action will disable Support Assist and erase all configured data. Do you want to proceed ?
[yes/no(default)]:yes
OS10(config)#
-
Once the SupportAssist configuration has been removed in step 1, follow Section 1: Onboarding PowerSwitch systems using CloudIQ Collector.
Onboarding PowerSwitch systems using CloudIQ Collector
CloudIQ Collector
The collector is a small virtual machine distributed as a vApp that enables the collection of data for PowerSwitch, Connectrix, and VMware systems. For PowerSwitch, the CloudIQ Collector communicates with the individual switches using REST API. A single collector can be used for PowerSwitch, Connectrix, and VMware systems. You can set up an integrated gateway or a centralized gateway to connect to the Secure Remote Services server.
Centralized Gateway (Recommended) - CloudIQ Collector communicates with the Secure Remote Services Server by connecting to the Internet through the Secure Connect Gateway (installed independently of the CloudIQ Collector).
![CloudIQ Collector Centrailized Gateway](https://supportkb.dell.com/img/ka06P0000011GLvQAM/ka06P0000011GLvQAM_en_US_1.jpeg)
Figure 1: Centralized Gateway
Integrated Gateway (Use if no Centralized gateway is installed) - CloudIQ Collector communicates with the Dell Secure Remote Services Server by connecting to the Internet through the integrated gateway embedded in the CloudIQ Collector.
![CloudIQ Collector integrated gateway](https://supportkb.dell.com/img/ka06P0000011GLvQAM/ka06P0000011GLvQAM_en_US_2.jpeg)
Figure 2: Integrated Gateway
Prerequisites
The Customer:
The CloudIQ Collector:
- Does not support IPv6
- Must be running at least v1.11.0 (OS10) or v1.15.0 (SONiC 4.1.x)
- Requires read-only access to VMware vCenters
Note: When installed, the CloudIQ Collector is configured with 1 vCPU, 8 GB RAM, and 10 GB hard disk.
For a video Outline of this process, see:
Onboarding PowerSwitch Devices to CloudIQ Using CloudIQ Collector
Download CloudIQ Collector
The CloudIQ Collector can be downloaded from the Dell Support site or the APEX AIOps Infrastructure Observability UI.
Download from the Dell Support site:
- Log in to the Dell Support Page
- Search for CloudIQ Collector
- Download the latest CloudIQ Collector vApp
Download from APEX AIOps Infrastructure Observability UI:
- Log in to the APEX AIOps Infrastructure Observability user interface
- Select Admin > Collectors
- Select Download a Collector at the top of the screen
- Select Download Collector vApp
![CloudIQ Collector Download Screen](https://supportkb.dell.com/img/ka06P0000011GLvQAM/ka06P0000011GLvQAM_en_US_3.jpeg)
Figure 3: Collector Download Screen
Deploying the CloudIQ Collector
- Log in to vCenter
- Select File > Deploy OVF Template
- Select Upload files on the Select an OVA template page in the Deploy OVF template window, browse to and select the OVA file, and then select Next.
- Enter the name of the VM and select the location where it will be installed on the Select a name and folder page, and then select Next.
- Select the Destination compute resource for this operation on the Select a compute resource page, and then select Next.
- Verify the template details on the Review details page, and then select Next.
- Read and select I accept all license agreements on the License agreements page, and then select Next.
- Select the Storage for the configuration on the Select storage page, and then select Next.
- Select a Destination network for each source network in the Select Networks page, and then select Next.
- In the Customized template page, enter the following information, and then select Next.
- Hostname
- IP Address in CIDR format (For example, XX.XX.XX.XX/24)
- Default Gateway
- DNS Server #1
- DNS Server #2 (if applicable)
- Search Domains (Multiple search domains are separated by spaces)
Note: Not entering the IP address in CIDR format allows the vApp to boot, but it is not reachable.
Figure 4: Deployment Screen
- Review the host information in the Ready to Complete page.
- If correct, select Finish to deploy the vApp.
- Once the vApp is fully deployed, close the Deployment Completed Successfully window and power on the VM.
Note: The first boot of the vApp takes several minutes to complete its initial deployment.
Configure the CloudIQ Collector
The CloudIQ Collector must be configured to be a gateway to send data securely back to Dell Technologies.
Option 1 - Centralized Gateway (Recommended)
Option 2 - Integrated Gateway
Note: Only alphanumeric passwords are supported for any connection to the gateway.
Customers should verify that no special characters exist within their Dell support user account password used to configure the collector to the gateway. Once the connection is established, the customer may change the password back to something more secure.
Note: For a centralized gateway, the customer must be running Secure Connect Gateway (SCG) version 5.12 or later. If an integrated gateway is installed, the version does not matter as the installation installs a compatible version.
Option 1: Configure the CloudIQ Collector to a Centralized Gateway.
- Launch the Collector configuration by opening:
https://<collector-hostname>
- Select Get Started.
- The recommendation is to select Configure an existing gateway to use an existing Secure Connect Gateway, and then select Next.
![Get Started Screen](https://supportkb.dell.com/img/ka06P0000011GLvQAM/ka06P0000011GLvQAM_en_US_5.jpeg)
Figure 5: Get Started Screen
- On the Configure Secure Remote Services page, enter the following information, and then select Next.
- Dell Customer Support Username
- Dell Customer Support Password (no special characters)
- Gateway Hostname or IP Address
- Gateway port (9443 by default)
![Configure Remote Services](https://supportkb.dell.com/img/ka06P0000011GLvQAM/ka06P0000011GLvQAM_en_US_6.jpeg)
Figure 6: Configure Remote Services
Note: It is recommended to leave the "Gateway SSL certificate" cleared. Only select this if your Secure Remote Services Gateway uses certificates trusted by standard issuers, and then select Next.
- Create an administrator account for the Collector, and then select Next.
![Create Administrator](https://supportkb.dell.com/img/ka06P0000011GLvQAM/ka06P0000011GLvQAM_en_US_7.jpeg)
Figure 7: Create Administrator
Note: This user account is used to access the CloudIQ Collector user interface.
- If required, select Yes, Configure to configure Active Directory users for the Collector. Otherwise, select No, Skip, and Finish.
![CloudIQ Collector Active Directory](https://supportkb.dell.com/img/ka06P0000011GLvQAM/ka06P0000011GLvQAM_en_US_8.jpeg)
Figure 8: Active Directory
- Upon successful completion of the Collector configuration, select Continue to CloudIQ Collector Management UI.
- Log in to the CloudIQ Collector UI using the credentials configured in step 5 - admin and password.
Option 2: Configure the CloudIQ Collector to an Integrated Gateway
- Select Deploy a new integrated gateway for this collector and then select Next.
- If you use a proxy server to connect to Secure Remote Services, select Yes, Configure, then enter the proxy information, and select OK. Otherwise, select No, and then Skip.
- Enter the Secure Remote Services Authentication information, and then select Next.
Note: This is your Dell Customer Support username and password. (no special characters)
- Select Request Access Code and an access code is sent to the email address that is registered with Dell Support. The access code is good for 30 minutes after it is sent.
- Enter the access code and select Validate Code.
- Select the appropriate Site ID in the Site ID Selection drop-down.
- Select Next. The Secure Remote Services Gateway is now provisioned. This process takes several minutes.
- Return to Step 5 in Option 1: Configure the CloudIQ Collector to a Centralized Gateway section.
Adding PowerSwitch to CloudIQ Collector
Note: It is recommended to add no more than 10 total physical switches.
- Ensure that the switches are properly configured before attempting to discover them with the CloudIQ
Collector
RESTCONF API is enabled by default. Therefore, you do not have to run any commands.
- Enable the RESTCONF API service only on the switches operating in full switch mode.
- To verify the mode
OS10# show switch-operating-mode
Switch-Operating-Mode : Full Switch Mode
- Enter the configuration mode
OS10# configure terminal
OS10(config)#
- Enable the RESTCONF API
OS10(config)# rest api restconf
OS10(config)# exit
- RESTCONF API service is enabled by default on switches operating in SmartFabric Services mode.
- To verify the mode
OS10# show switch-operating-mode
Switch-Operating-Mode : SmartFabric Mode
Note: Rest API RESTCONF is not seen in the running configuration in SmartFabric Services mode, as RESTCONF API Service is enabled by default.
ii. To verify that the RESTCONF API is enabled
show running -configuration | grep rest
If enabled, the output will be rest api restconf
- Create a rest user account for CloudIQ Collector with appropriate privileges (Recommended).
The role operator provides access to EXEC mode to view the current configuration. An operator cannot modify configuration settings on a switch.
sonic(config)# username <username> password <password> role operator
The role netoperator provides access to EXEC mode to view the current configuration with limited access.
A network operator cannot modify any configuration setting on a switch.
OS10(config)# username <username> password <password> role netoperator
- Select PowerSwitch from the left side menu.
Figure 9: Add PowerSwitch
- Select the Add PowerSwitch button to configure access to switches individually.
- Enter the switch details and select Validate and Add
Note: Credentials for RADIUS/TACACS+ can be used when adding a PowerSwitch if the OS10 switch is configured with either of these services. If the password changes or expires, the collector will be unable to connect to the switches.
Figure 10: PowerSwitch Details
Note: After adding a PowerSwitch, it may take up to 24 hours for all system data to appear in APEX AIOps Infrastructure Observability.