Use this procedure to install the Cisco ACI plugin for
Panorama. The plugin allows Panorama to retrieve endpoint information
from ACI.
| Where Can I Use This? | What Do I Need? |
|---|
|
|
- VM-Series plugin
- Panorama
- VM-Series licenses
- Cisco ACI Fabric
- Panorama plugin for Cisco ACI
|
To get started with endpoint monitoring on
Cisco ACI, download and install the Cisco ACI plugin on Panorama.
If you have a Panorama HA configuration, repeat this installation process on each Panorama peer.
When installing the plugin on Panoramas in an HA pair, install the plugin on the
passive peer before the active peer. After installing the plugin on the passive
peer, it will transition to a nonfunctional state. Installing the plugin on the
active peer returns the passive peer to a functional state.
If you have a standalone Panorama or two Panorama appliances installed in an HA pair with
multiple plugins installed, the plugins might not receive updated IP-tag information
if one or more of the plugins isn't configured. This occurs because Panorama won't
forward IP-tag information to unconfigured plugins. Additionally, this issue can
occur if one or more of the Panorama plugins isn't in the Registered or Success
state (positive state differs on each plugin). Ensure that your plugins are in the
positive state before continuing or executing the commands described below.
If you encounter this
issue, there are two workarounds:
Uninstall the unconfigured plugin or plugins. It's recommended that you don't install a plugin
that you don't plan to configure right away
You can use the following commands to work around this issue. Execute the following command
for each unconfigured plugin on each Panorama instance to prevent Panorama
from waiting to send updates. If you don't, your firewalls could lose some
IP-tag information.
request plugins dau plugin-name
<plugin-name> unblock-device-push yesYou can cancel this
command by executing:
request plugins dau plugin-name
<plugin-name> unblock-device-push no
The commands described are not persistent across reboots and must be used again for any
subsequent reboots. For Panorama in the HA pair, the commands must be executed on
each Panorama.
Verify that your virtual Panorama has
enough memory to support the number of endpoints in your ACI environment.
