In an environment managed by Network Protocol Manager for EIGRP and Network Protocol Manager for IS-IS, you, as the Network Protocol Manager administrator, must create a CLI access group for each group of managed Cisco routers configured with a different access protocol or a different set of CLI login credentials.

The assumption is that all routers that are using a particular access protocol are configured with the same set of credentials (and time-out value). If, in fact, there are two groups of routers that are using a particular access protocol, each configured with its own set of credentials, you would create two CLI access groups for that particular access protocol; for example, create two CLI access groups named Telnet_S1 and Telnet_S2. The matching criteria defined for each of the groups limits the group’s members to the appropriate routers.

The basic steps for creating and configuring CLI access groups are:

  1. In a Polling and Thresholds Console that is attached to an IP Availability Manager or IP Performance Manager, click the Device Access tab to display the device access group tree.

  2. In the device access group tree, use the CLI Access Group to create a CLI access group for each group of routers that have a different access protocol or a different set of CLI login credentials. One way to create a new CLI access group is to right-click CLI Access Group and select Copy. (The procedure for creating groups is given in “Creating new groups” on page 147.)

  3. Edit the parameters as appropriate in each of the CLI access groups.

  4. Define matching criteria for each of the CLI access groups to limit each group’s membership to the router or group of routers for which the parameters that are specified in step 3 apply.

    Start by defining Vendor = <vendor _name>. For example, 

    Vendor = Cisco
Name = R1*

  5. Change the priority of the CLI access group as needed. Typically, the default CLI Access Group is placed at the bottom of the priority list. (The procedure for changing the priority of groups is given in “Modifying the priority of groups” on page 145.)

    Modify the properties of a CLI access group in the same way that you modify the properties of a polling or threshold group: through the Settings, Priorities, and Matching Criteria tabs, available when the group name is selected in the left panel of the Polling and Thresholds Console. After customizing the properties of a group, click Apply to save the changes. Click Reconfigure or select Reconfigure from the Group menu to make the configuration changes take effect.

    Upon adding the IP Availability Manager as a source, Network Protocol Manager imports the CLI access groups and the EIGRP or IS-IS object set from IP Availability Manager. For each Cisco router in the object set, Network Protocol Manager searches through the prioritized list of CLI access groups for a router match, finds a match, and then uses the associated access protocol and credentials to log in to the Cisco router and gather EIGRP or IS-IS information from the router. If no match is found, Network Protocol Manager writes an error to its log file.