The Cisco Prime Infrastructure Asset Load can be used to retrieve the configuration details of TACACS+ servers in a network. TACACS+ is a network protocol that offers centralized authentication, authorization, and accounting (AAA) services for network devices. You can use the Asset Load to retrieve information about the authentication protocol, Server IP, hostname, and key type used by the TACACS+ servers. Additionally, you can create workflows that enable you to manage TACACS+ servers, allowing for tasks such as creating, updating, and deleting servers.
Connect Oomnitza and Cisco Prime Infrastructure in minutes
Get the information and insights that you need to reduce costs and the time that you spend on administration tasks such as:
- Configurable dashboards and list views of key server information
- Configurable reports to share information about your TACACS+ servers with your colleagues and management
- Configurable workflows that you can easily create to automate tasks such as:
- creating, updating, and deleting TACACS+ servers.
- Onboarding and offboarding users.
- Creating and adjusting users as part of a user change or user onboarding workflow
Before you start
Best practice
For the integration with Oomnitza, instead of using an existing user account, create a dedicated user account with its own credentials.
The Cisco Prime Infrastructure API uses basic authentication and requires your username and password to be added to Oomnitza.
You will need at least NBI Read permissions to run this integration. You will need at least NBI Write permissions to run workflows.
You will also need to supply your Prime Server subdomain. Let's say your URL looks like this: https://server.subdomain.com. You enter the part of the URL between https//: and .com.
Add credentials to the vault in Oomnitza
To authorize connections between Oomnitza and Cisco Prime Infrastructure, complete these steps:
- In Oomnitza, go to Configuration>Security>Credentials.
- Click Add new credential (+).
- Search for the integration, and then click the forward button > to select the integration.
- Enter the user name and password of your account
- Click Create.
Integration not in the list? Click Advanced Mode and complete these steps:
- Add the information details.
- Click the AUTHORIZATION tab.
- Ensure that Basic Auth is selected as the authorization type.
- Enter the user name and password of your account.
- Click Create.
Add the Server Subdomain to global settings
To save time entering information when you create the integration, you can create a global variable for the Cisco Prime Infrastructure subdomain.
- In Oomnitza, click Configuration > General > Global Settings.
- Click Add new variable (+).
- Enter Cisco Prime Infrastructure.Server Sub Domain as the variable name.
- Enter your server subdomain, which is the part of the URL between https//: and .com.
- Click SAVE.
Creating the asset integration
To create an asset integration, complete the following steps:
- In Oomnitza, click Configuration> Integrations> Overview.
- Click Block view
- Scroll down to the Extended section for asset integrations.
- Click NEW INTEGRATION.
- Select the integration in the sidebar.
- Click ADD.
Integration details overview
More information is provided about the following fields to help you complete the integration:
Installation type
Select Cloud if you want to store credentials in the Oomnitza cloud.
Select Local if you want to store credentials locally. Local extended integrations do not support AWS and OAuth authentication. If you want to sync Oomnitza with vendor applications that require AWS or OAUTH authentication, select Cloud.
Integration preferences
By default, the option Create & Update option is selected. Select this option when you want to edit records and add new records. If you want to edit records and not add new records, select Update Only. If you only want to add new records, select Create Only.
Integration details
To review or update the integrations details, click Edit .
- Update the integration name if necessary.
- Select an installation type.
- For integration preferences, select an option.
- Enter the name of the integration user.
Credential details
If you selected Cloud as the installation type, choose one of the following options:
- Select the credentials that were created for the integration.
- Edit the credentials that were created for the integration.
- Create new credentials
Schedule
By default, data is streamed to Oomnitza once every day.
You can configure the schedule to meet your needs such as changing the interval or changing the time so that the data is streamed when your system isn't busy.
- Click the Edit
.
- Configure your schedule.
- Click Update.
Mappings
To map the fields to Oomnitza, click Edit .
You can define rules for your integration by selecting Edit integration
on the mapping page. For example, you may only want to run the integration if a certain contact or region exists. See Filtering integration results.
You can add new fields to your integration by selecting Add new field on the mapping page. All you need to do is specify the property name. See Creating custom API fields.
Create custom mappings
Map Prime fields to Oomnitza fields to get the asset information that you need. For the field mapping, it is recommended to follow these steps:
- Click Smart Mapping.
-
To create a custom mapping for fields that are not present in Oomnitza, follow these steps:
- Click the down arrow next to the field you wish to map
- Select Add new Oomnitza assets field.
- Modify the name of the field as desired.
- Click CREATE.
- Map and assign a sync key to a unique field such as the Server Host Name. This property represents the hostname of the TACACS+ server and should be unique for each server in the network.
- Map the Server IP to an Oomnitza field called IP Address
- Map Server Host Name to an Oomnitza field called Server Host Name.
- Click UPDATE.
Cisco Prime Inventory Devices to Oomnitza mappings
Authentication Type
Connector Sync Time
Local Interface IP Address
Number of Tries
Port
Retransmit Timeout
Secret Key
Secret Key Type
Server Host Name
Server IP
Tracking information for asset loads
When the integration is run, you can track the name of the credentials that were used and the source of the data. To do this, you map the following fields to Oomnitza:
- Connect: Credentials
- Connect: Server SubDomain
Launching the integration
Your integration is in Draft mode until the required mandatory fields are added. When added, click Launch to activate your integration.
If you selected Cloud as the installation type when creating the integration, see Running an extended integration
If you selected Local as the installation type when creating the integration, see Running an extended integration locally.
Viewing data ingested by Oomnitza
Viewing ingested asset data
For asset integrations, click Hardware. If the asset integration also ingests software data, click Software.
Viewing ingested user data
For user integrations, click People. If you chose the option to ingest User and SaaS user data, click Software > SaaS, click the SaaS app, and then click the Users tab.
Related Links
Unleash the power of Oomnitza
To get valuable actionable insights that help you manage your assets, learn how to:
- Configure dashboards for your users and software
- Configure custom reports about your users and software
- Create workflows to automate tasks
See Getting started for more information.
Comments
0 comments
Please sign in to leave a comment.