Onboard a Cisco IOS device

This task enables you to add a Cisco IOS device to your tenant using an on-premises Secure Device Connector and SSH fingerprint validation.

Use this procedure when you need to manage a Cisco IOS device through your tenant and have an active Secure Device Connector deployed. Ensure the device supports the required SSH ciphers for onboarding.

Before you begin

Before you begin, ensure that all prerequisites are met.

  • Your Cisco IOS server must support ciphers that are compatible with Security Cloud Control. Currently, Security Cloud Control supports a limited set of ciphers for onboarding Cisco IOS devices. Supported ciphers are aes128-ctr, aes192-ctr, aes256-ctr, aes128-gcm, aes128-gcm@openssh.com, aes256-gcm, aes256-gcm@openssh.com.

    Log in to your Secure Device Connector (SDC) and run the command SSH -vv <ip_address> to view the ciphers your server supports.

  • You must have an active on-premises Secure Device Connector (SDC) in your network to add a Cisco IOS device.

    For more information about SDCs and deployment scenarios, refer to Secure Device Connector.

Follow these steps to onboard a Cisco IOS device:

Procedure

Step 1

Click Security Devices

Step 2

Click the blue add button Blue add button. to begin onboarding the device.

Step 3

Click the Integrations tile.

If the tile is grayed out, there is no active Secure Device Connector deployed in your network for your Security Cloud Control tenant.

Step 4

Enter these details in the Locate Device page.

  1. Select IOS from the drop-down list under Create Integrations.

  2. Click the Secure Device Connector button and select the SDC in your network that this device will communicate with. The default SDC appears. To choose a different SDC, click the SDC name.

  3. Enter a name for the device.

  4. Enter the device location (FQDN or IPv4).

  5. Enter the port number. The default connection port is 22.

  6. Click Next.

Step 5

Enter these details in the SSH Fingerprint page.

  1. Enter the device administrator name and password.

    Note

    Currently, Security Cloud Control does not support connections using public key authentication.

  2. If you have set an enable password on the device, enter it in the Enable Password field.

  3. Click Next.

    You can download and review the SSH fingerprint by clicking the copy icon.

Step 6

(Optional) Enter a label for the device in the Done page. For more information about labels and label groups, refer to Labels and Label Groups.

Step 7

Click Go to Security Devices to return to the Security Devices page.

After successful onboarding, the Configuration Status changes to 'Synced,' and Connectivity changes to 'Online.'

To write a note about the device, enter it in the Device Notes page for the device. For more information about the notes page, refer to Device Notes.

The device is added and appears on the Security Devices page with Configuration Status set to Synced and Connectivity set to Online.