Cruz Operation Center (CruzOC) v10.0.3x Release Notes March 16, 2023 Rev. A01
Overview
Cruz Operations Center (CruzOC)* version 10.0.3 was released on Mar 16 2023.
Software Upgrades- ALERT! 10.0.3 upgrade ***************************************************************************
CruzOC v10.0.3 includes a DB upgrade to Mysql 8 and requires additional manual steps when upgrading. Failure to perform these additional step will result in an corrupted db. Please refer to the 10.0.3 upgrade documentation before upgrading
***************************************************************************
New Functionality and Feature Enhancements
NOTE: Version 10.0.2, referenced in this release note, refers to a limited release that was not GA (Generally Available) to for existing customers. The 10.0.3 release contains all of the features of 10.0.2
Cruz Fabric Controller
The Cruz fabric Controller was initially released in a limited 10.0.2 release. The 10.0.2 Cruz fabric Controller is an add-on suite that provides the ability onboard and deploy and support full lifecycle management for CLOS leaf and spine fabrics. Fabric device support includes SONiC and Dell OS10 with and BGP EVPN Fabrics and well as 2 Tier VLT. Not only does the controller deploy Spine and leaf nodes and underlay, but it also deploys and manages the overlay for host access and attached servers and workloads.
The 10.0.3 release builds on the 10.0.2 features with the specific new items listed below. In summary enhancements have been made to improve workflow, resource pooling and host access configurations. There is also a new Fabric deployment guide that provides detail description and instructions and process for fabric deployment. The guide is is available on request via email to sales@doradosoftware.com.
Key Fabric features at a glance:
- Onboard, Design and Deploy Leaf and Spine infrastructure
- Direct support for Dell enterprise SONiC and Dell OS10
- Manage fabric consistency and state
- Fabric updates - add/remove spines, leaf nodes , racks, leaf pairs , border leafs
- Add servers / hosts
- Fabric Host configurations - Add, remove, update Host connectivity - VLAN, VXLAN, VRF's
- Fabric Views
- Fabric Performance /Monitoring /Alarm events and notifications
- Fabric Day 2 operations
- Fabric member Lifecycle Management - backup , Restore and OS image deployment
- Fabric Change detection and Compliance policies
- Fabric Flow insight
- Fabric Advanced automations
- Fabric Reports
New Functionality / Feature Enhancements in 10.0.3
Fabric Controller
- Support has been enhanced to support 2 Tier VLT fabrics for OS10 (PV-71346)
- Support has been added for 4 Byte ASN (PV-71313)
- Fabric search capabilities have been enhanced allow locating VTEP access information by MAC address (PV-71311)
- 2 new portlets have been added to expose VLAN Setting and Port Channels (PV-71309)
- Graceful shutdown and Graceful startup options have been added to facilitate switch isolation when taking a member out of a fabric for maintenance. Refer to the CruzOC Fabric Deployment guide. (PV-71299)
- A Check Consistency (Compliance) action has been added to fabric and fabric member (PV-71208)
- Support for had been added for iBGP within the Vxlan EVPN BGP Template vs existing support eBGP (PV-71198)
- Support has been added for importing fabric JSON from REST API (PV-71197)
- Support has been added for importing fabric from a JSON file (PV-71189)
- Added ability to import/export fabric templates/discrete templates and sample JSON file for templates (PV-71188)
- A Fabric Connectivity Check has been added to report and validate fabric connectivity pre and post fabric deployment. The check will detect transceivers, L2 and L3 links on the designated fabric ports. (PV-71158)
- New RBAC permission have been added These are the new entity level (ADD/WRITE/READ/DELETE/EXECUTE) permissions that we added (PV-71531)
FabricTemplate
Fabric
FabricMember
FabricHost
VTEPConfig
As with other entity level permissions they control what you can do with the portlet, to see the portlet you need the EXECUTE permission, to create a new element you need the ADD permission, to edit a record and save changes the WRITE permission and to delete an element the DELETE permission. These are the new execute permissions that we added -
FabricConnCheck
FabricDecommission
FabricDiagnostics
FabricHostDecommission
FabricHostMarkAsDecommission
FabricHostMarkAsProvision
FabricHostPreview
FabricHostProvision
FabricMarkAsDecommission
FabricMarkAsProvision
FabricMember
FabricMemberCfgPortAttachedResource
FabricMemberCfgPortChannel
FabricMemberCfgPortRole
FabricMemberDecommission
FabricMemberGracefulShutdown
FabricMemberGracefulStartup
FabricMemberMarkAsDecommission
FabricMemberMarkAsProvision
FabricMemberPreview
FabricMemberProvision
FabricPreview
FabricProvision
VTEPConfigBulkAddHost
VTEPConfigBulkRemoveHost
VTEPConfigDecommission
VTEPConfigMarkAsDecommission
VTEPConfigMarkAsProvision
VTEPConfigPreview
(PV-71531) - Added support for ability to provision the underlay only from the fabric controller and from the fabric resource portlet (PV-71534)
- Fabric host access configurations may be automated via NSX. For example, when new segment detected an automation action will create a new host access configuration on the relevant leaf port. ( PV-71524)
- Fabric host access configurations may be automated via NSX. For example, when new VM detected an automation action will create a new VLAN host access configuration on the relevant leaf port. (PV-71514)
- Fabric Controller: Fabric templates now have ability to set external connectivity for the fabric. For example uplink configuration to a Gateway (PV-71486)
- Fabrics now support ability to configure attached hosts in bulk from the fabric or fabric member (PV-71475)
- In some cases the spine nodes of a fabric may not be under management from the Fabric Controller. In this case only the leaf nodes (TOR switches) are managed. Support has been added for TOR Controller behavior where the spine nodes are not configured (PV-71428)
- Support has been added for border leaf peering (PV-71491)
- Support has been added for route leaking via Bgp Neighbor configuration from Border Leaf to Gateways devices (PV-71456)
- Support has been added to allow for configuration of port channels in bulk (PV-71472)
- Support port groups and host access configuration groups to support group-to-group host access configuration ( PV-71738)
- Supports ability to reconcile a host access config group against a port or group of ports (PV-71744)
- The prior version relied on L3 VRF with a combined L2 VLAN . in 10.0.3 a Simple VLAN / L2 Workload host access configuration have been added. ( PV-71612)
- Usability has been enhanced to allow assignment of host access configuration to multiple ports within a single action (PV-71464)
- Fabric search has been enhanced to allow identification of VXLAN/VLAN /VNI given an IP or identifying VXLAN/VLAN /VNI given a MAC (PV-71151)
- The fabric Controller Portlet had a new "Additional Fabric Services" The list of "Additional Fabric Services" is configurable using the wrench icon at the upper left corner of the portlet. (PV-71145)
- Managed Configuration templates have been integrated into the fabric Controller templates. Refer to the Fabric Controller guide for details. (PV-71167)
- In some cases a fabrics Spines are not under the same network administrators (or groups ) control as the leaf nodes. These spines may be "untouchable". The Cruz Fabric template now allows a fabric to be deployed by specifying the spine nodes and then marking the Spines as ""Managed externally"". When the fabric get deployed or updated, any Spine configuration that would other wise be applied to the spine, is ignored. (PV-71598)
Devices and Device Onboarding
- Inventory resources may now be created through a Basic JSON import capability. (PV-71184)
- Various resync options have been organized under a single resync menu item. This can be seen on the Managed Resources right click menu. (PV-71142)
- The ports portlet has new Port Config menu that allows port level services for Show Port, Disable port and set bandwidth. Not all device may be supported. (PV-70932)
- A new warranty portlet has added (Resource License and Warranty Information). This portlet can be added to any page and a provide visibility to Warranty and License information across the entire inventory or resource. Prior to adding this portlet this information could only be obtained device by device form the detail panel or by running a warranty report. (HD-1126051)
- Support has been added for onboarding, management and integration to VMware NSX-T (PV-28358)
- The Dell OS6 switch model N3224T-ON with sysobjectID 1.3.6.1.4.674.10095.3110 was added (HD-1176568)
Action and Automation
- Actions and Action buttons on a portlet are now supported for Port/Interface/Card/Equipment actions (PV-71799)
- Automation Actions - Support NSX BGP peering configurations between the NSX Edge and the attached border leaf (PV-71584)
- All Managed configurations are now exposed in new Managed Configurations portlet (PV-71177)
- Groups portlet will now allow creation of static and dynamic group membership filtering for ports/cards/interfaces (PV-71782)
ARUBA | Aruba 6200F 24G 4SFP+ |
ARUBA | Aruba 6200F 24G CL4 4SFP+370W |
ARUBA | Aruba 6200F 48G 4SFP+ |
ARUBA | Aruba 6200F 48G CL4 4SFP+370W |
ARUBA | Aruba 6200F 48G CL4 4SFP+740W |
ARUBA | Aruba 6300M 248G /4SFP56 |
ARUBA | Aruba 6300M 24G /4SFP56 |
ARUBA | Aruba 6300M 24G PoE CLS 4 /4SFP56 |
ARUBA | Aruba 6300M 24SFP+/4SFP56 |
ARUBA | Aruba 6300M 24SR PoECLS 6 /4SFP56 |
ARUBA | Aruba 6300M 48G PoE CLS 4 /4SFP56 |
ARUBA | Aruba 6300M 48SR PoE CLS6 /4SFP56 |
ARUBA | Aruba 6405 |
BROCADE | MXG610S |
Cisco | ME-3600X-24FS-M |
Cisco | C9200L |
Cisco | C9300L |
Cisco | IE-2000-4TS-G |
Cisco | IE-2000-8TC-G-L |
Cisco | Cisco Wireless Controller 8540 |
Cisco | NCS-5500 |
Cisco | C9200L |
Cisco | C9300L |
Cisco | IE-2000-4TS-G |
Cisco | IE-2000-8TC-G-L |
Cisco | NCS-540 |
Ciscowireless | Cisco Wireless Controller 8540 |
DELL EMC | Dell EMC Networking OS10 EE Z9432F-ON |
DELL EMC | Dell EMC Networking Enterprise Sonic |
DELL EMC | Dell EMC Networking Enterprise Sonic 3.0 |
DELL EMC SONiC | S5232f-C32 |
DELL EMC SONiC | S5232f-P-10G |
DELL EMC SONiC | S5248f-P-10G |
DELL EMC SONiC | S5232f-P-25G |
DELL EMC SONiC | S5232f-P-100G |
DELL EMC SONiC | S5248f-P-25G |
DELL EMC SONiC | S5248f-P-25G-DPB |
DELL EMC SONiC | S5296f-P-10G |
DELL EMC SONiC | S5296f-P-25G |
DELL EMC SONiC | S5296f-P-25G-DPB |
DELL EMC SONiC | Z9264f-C64 |
DELL EMC SONiC | Z9264f-Q64 |
DELL EMC SONiC | Z9264f-C8D112 |
DELL EMC SONiC | Z9332f-O32 |
DELL EMC SONiC | Z9332f-O16C64 |
DELL EMC SONiC | Z9332f-O16C64SH |
DELL EMC SONiC | Z9332f-C32 |
DELL EMC SONiC | Z9332f-C64O16SH |
DELL EMC SONiC | S5212f-P-10G |
DELL EMC SONiC | S5212f-P-25G |
DELL EMC SONiC | S5224f-P-10G |
DELL EMC SONiC | S5224f-P-25G |
DELL EMC SONiC | S5224f-P-25G |
DELL EMC SONiC | force10-S6000 |
DELL EMC SONiC | force10-S6000-Q32 |
DELL EMC SONiC | force10-S6100 |
DELL EMC SONiC | force10-Z9100-C32 |
DELL EMC SONiC | force10-Z9100-C8D48 |
DELL EMC SONiC | dellEMC-Z9432f-O32 |
DELL EMC SONiC | dellemc-N3248TE |
DELL EMC SONiC | dellemc-N3248X |
DELL EMC SONiC | dellemc-N3248PXE |
DELL EMC SONiC | dell-E3248PXE |
DELL EMC SONiC | dell-E3248P |
DELL EMC SONiC | dellEMC-S5448f-C48O8 |
DELL EMC SONiC | dellEMC-Z9664f-O64 |
FORTINET | FGT-200E |
FORTINET | FGT-300E |
FORTINET | FGT-4201F |
FORTINET | FGT-800D |
FORTINET | FS-124F-POE |
HP/3com | 1910 24G PoE 365W |
HP/3com | A7503 |
HP/3com | A7510 |
HP/3com | H3C S3100-EI |
HP/3com | JD377A |
HP/3com | MSR 50-40 |
HP/3com | MSR20-11 |
HP/3com | MSR20-12 |
HP/3com | MSR20-13 |
SONICWALL | SonicWALL TZ 350 |
Velocloud | Velocloud VC KVM |
Velocloud | Velocloud VC VMDK |
VMware | NSX Unified Appliance |
Platform and Security Enhancements
- The embedded Mysql database has been upgraded from 5.7.19 to version 8.0.23 This upgrade between 10.0.0.1 and 10.0.0.3 resolves a number of vulnerabilities present in the earlier versions. There was also a limited release of of Cruz 10.0.02 that also contained this upgrade. (PV-32066)
- Beta - As of the the 10.0.3 release there are no known issues installing or running Cruz on Windows 2022 server although has had limited regression testing. Full release support is expected in the 10.0.4 release
- The Cruz Linux platform supports Centos/ RHEL version up to v7.9. The platform also supports version Centos/RHEL 8.0 with some additional instruction. Contact Dorado support if OS upgrade or installation on RHEL/Centos 8.0 or later is required.
- OVA - The prebuilt Cruz OVA has been upgraded to CENTOS v7.9
- SMTP - Protocol upgraded and now utilizes tls 1.2 (HD-1176635)
Resolved defects
- Not receiving performance information against the interfaces using default interface monitor (HD-1182548)
- Action script attributes for integer was not allowing a range designation as tool tip indicated. You may now enter 1-100 and the valid values will auto populate every value from 1 to 100 as a selectable entry. (PV-71798)
- ACLI monitor is not generating condition alarm (HD-1176719)
- Issue with alarm suppression for certain event - entSensorThresholdNotification' (HD-1176670)
- Missing support for Fortinet for FS-124F-POE model (HD-1176571)
- If an action has value extraction configured the action does not execute at all (HD-1176566)
- New SNMP Monitor - 'Update Network status' checkbox is not working (HD-1176556)
- Dell Warranty -- API production credentials expired and causing warranty updates to fail (HD-1126366)
- Topology View Issues- Unable to unhide the hidden nodes using Unhide option (HD-505015)
- NPE deploying SOAP web services (PV-71805)
- Hide preview and advanced preview buttons when executing against a group (PV-71800)
- Action script attributes for integer was not allowing a range designation as tool tip indicated. You may now enter 1-100 and the valid values will auto populate every value from 1 to 100 as a selectable entry. (PV-71798)
- HP Aruba J9850A switch OS upgrade was failing (HD-1176655
Known issues
- Upgrade to 10.0.3 requires Critical / required manual intervention - Please refer to the 10.0.3 upgrade documentation before upgrading
- Prior to Cruz v10.0.2 the OVA may have MySQL db issues if the user upgrades the Centos operating system. You may encounter.. ERROR 2002 (HY000): Can't connect to local MySQL server through socket '/tmp/mysql.sock' ERROR 2002 (HY000): Can't connect to local MySQL server through socket '/tmp/mysql.sock'. This issue has been resolved. Please contact Dorado support at tsc@doradosoftware.com for a patch (HD-1176662)
- The Dell API that allows Cruz to query a Dell dB and obtain fresh warranty data may be expired in versions prior to 10.0.3 You may see alerts or log messages indicating a warranty authentication or other failure indicating that Cruz cannot connect. A patch is available for Cruz versions 9.0,,10.0.0,10.0.1 and 10.0.2. Upgrading to 10.0.3 will also resolve the issue. Please contact tsc@dordosoftware (HD-1126366)
- The Map Context application that provides a google map and tagged locations, may not show a visible tag. There may be changes from Google that affect the way the API behaves in Cruz. this will be resolve in the next release or a patch may be available when resolved, Please contact tsc@dordosoftware (PV-72061)