Skip to end of metadata
Go to start of metadata

You are viewing an old version of this content. View the current version.

Compare with Current View Version History

« Previous Version 7 Next »

AmpCon™-DC simplifies the management of PicOS software switches, including configuration management, switch inventory, software updates, and more.

9.png

Configuration management


AmpCon-DC includes native configuration management capabilities, which you can use to push an update to a single switch or to an entire group of switches. By using AmpCon-DC, you don’t need to edit and push switch configurations one by one. In this way, the likelihood of errors can be reduced, the switch configuration process can be simplified , and you don’t need to deal with the added expense or headache of a third-party tool.
In practice, the configuration management feature can greatly simplify the job of updating switches to deal with a new class of devices, such as security devices to protect Internet of Things (IoT) sensors. Your network administrators can detail how the network needs to treat the security devices (perhaps putting them on your own VLAN), and detail where traffic from devices is allowed to go. By adding only one configuration in the AmpCon-DC UI, you can push the update to appropriate switches.
AmpCon-DC greatly simplifies the job of detailing network access level and priority each class of devices should get and then pushing the update at once to all relevant switches.


Configuration backup, compliance, and rollback


Once the desired configurations are set and the network is stable, you might want to make sure accidental changes don’t disrupt operations. When you make a configuration change such as adding devices or a VLAN, it is important to back up your configuration.

AmpCon-DC makes configuration backup simple by automating and scheduling configuration backup on a specifed date and time, and saving the last n backups as you need. You can use the backup configuration to recover quickly from a crash or corruption of a switch. In addition, you can mark a specific backup instance as the Golden Config. The Golden Config will never be deleted and used by default as the configuration to roll back a switch to a stable configuration when the switch operation is compromised. The Golden Config can also be used as the basis to run an automated compliance check to verify that the network is operating as designed.


Switch inventory


AmpCon-DC also supports switch inventory features. Though third-party tools also support this capability, but they add expense to your company. In addition, such tools typically run on a Windows Server Enterprise Edition machine, which also adds additional server licensing costs. In contrast, AmpCon-DC can be deployed in minutes on a virtual machine.

AmpCon-DC provides detailed inventory of all switches, including switch hardware details, software version, configurations, and more.

License updates


AmpCon-DC can automate the process of checking and updating the switch licenses with new Support entitlements. A License Audit task checks the (group of specified) switches for a valid license and created a report of their license status (showing the support expiration date and other details). Running “License Update (or Action)” automatically updates the license keys on all switches whose support is due to expire in the next 30 days, and logs the result in a report that can be examined or downloaded.


RMA replacements


AmpCon-DC incorporates a unique workflow to help with return merchandise authorization (RMA) replacements. When hardware fails and is replaced with new hardware, the RMA module takes the config from the failed hardware, updates it with the serial number of the replacement hardware, and pushes out this config to the switch to bring it up seamlessly in the network.

Simplified software switch upgrades


Finally, the nature of PicOS® itself makes it simpler to manage vs. any legacy switch/router network operating system (NOS). Because it’s Linux-based, PicOS® is compartmentalized, which means you can update or change one component or aspect without affecting the other components. For example, if you’re pushing out a security patch, that affects only the security component of the NOS; you don’t have to replace the entire software/firmware image.
If you’re familiar with legacy NOSs such as Cisco IOS, you know that’s not the case. Any update requires a wholesale software/firmware change, with all the attendant disruption that comes with it: putting the change through a qualification cycle, lab testing, the works.

By contrast, if you’re making a change to PicOS that has nothing to do with the movement of data, such as a security change, you don’t need to go through all of those steps.
AmpCon-DC makes it easy and error-free to upgrade your switches to the latest PicOS® version. When you are ready to go, you simply schedule a job identifying the group of switches, the new software image, and the time window when you want the upgrades to be executed. The task executes automatically in the background and captures the results in a logfile that can be checked for the details and updates the task status on completion.


Additional Features


• RBAC (Role Based Access Control for users)
User logins are authenticated via a TACACS+ server which also determines their access permissions based on their role; users can also be defined for local fallback

• Parking Lot
Manage switches that have shown up in the network and registered with AmpCon-DC, but not yet setup with configs by the admin

• Setting Up Groups (of switches)
Switches can be organized in groups by region, location, building etc. for performing lifecycle operations

• Importing Switches
Helps incorporate and manage switches that were not originally deployed through AmpCon-DC

• Decommission Workflow
Used for temporarily taking a switch down and then redeploying it in another location

• Operational Logs
Track all activity in AmpCon-DC, and can be used for troubleshooting to drill down and analyze issues

• Monitoring
Allows drilling down into a switch to look at its current status, port statistics, etc.

• SDN Applications
Centralized controller for setting up VXLAN tunnels - Endpoint controller to manage host access and assignment to VLAN on a specific port

  • No labels