Alcatel-Lucent

This guide covers Alcatel-Lucent (and Nokia) platforms running AOS, AOS7, ISAM, SR OS (formerly TiMOS), and the OmniAccess wireless controllers.

AOS

AOS runs on OmniSwitch campus switches such as the 6250, 6450, and 6850 series.

Create a backup account. Create a read-only user with visibility of all command families:

user netwatch-backup password <password> read-only all

Read-only access to all families is sufficient to display the running configuration.

Enable SSH access. Ensure the SSH service is enabled and that local authentication is configured for SSH sessions. AOS supports restricting management services to authorized manager addresses — add the collector's IP to the allowed addresses for SSH.

AOS7

AOS7 (and AOS8) runs on later OmniSwitch models such as the 6860, 6900, and 9900 series.

Create a backup account. The user model is the same as AOS: create a netwatch-backup user with the read-only privilege across all command families, using the same user command syntax shown above for AOS.

Enable SSH access. Enable the SSH service, confirm local authentication applies to SSH, and restrict management access to the collector's IP using the switch's authorized-manager / management ACL feature.

Notes. On virtual-chassis deployments, back up the master management address; the configuration shown there covers the whole chassis group.

ISAM

ISAM covers the 7302 and 7330 fiber access platforms.

Create a backup account. Create a dedicated netwatch-backup operator in the ISAM's security settings and assign a profile whose privileges permit displaying the full configuration. Prefer a read-only operator profile; ISAM profiles are granular, so verify the profile includes the show/info commands for all configuration areas you want captured.

Enable SSH access. Enable SSH on the management interface in the system security settings and permit TCP port 22 from the collector's IP in your DCN filtering.

Notes. ISAM configurations can be large on fully populated shelves; the first backup may take noticeably longer than on other platforms.

SR OS (formerly TiMOS)

SR OS runs on the service router families, including the 7750 SR, 7450 ESS, and 7210 SAS.

Create a backup account. Create a netwatch-backup user under the system security configuration with console (CLI) access, and assign a profile that permits show commands and the admin display-config command, which QUARK uses to retrieve the full configuration. A restrictive custom profile that allows only those commands is ideal; no configuration-mode rights are needed.

Enable SSH access. SSH is the standard management method for SR OS. Confirm the SSH server is enabled and, where you use management-access filters (MAFs), permit TCP port 22 from the collector's IP address.

Notes. On systems running in model-driven configuration mode, ensure the account's profile still permits displaying the configuration from the CLI.

Wireless

This covers the OmniAccess WLAN controllers.

Create a backup account. In the controller's management users settings, create a netwatch-backup management user and assign the read-only role. Read-only management users can display the running configuration.

Enable SSH access. SSH is enabled by default on the controller management interface. If you use a management access policy or firewall rules in front of the controller, permit TCP port 22 from the collector's IP.

Notes. Back up the controller itself; access points receive their configuration from the controller and do not need individual backups.

Enable backup in Netwatch

Once the device is prepared, open its host in Netwatch (Data collection > Hosts) and add the Config Backup macros — the supported status flag, the model code for this platform, and the credentials you created. See Getting started for the full macro list and values.