Upload
others
View
6
Download
0
Embed Size (px)
Citation preview
May 2019
Smart Accounts, Plug and Play Connect
For Managed Service Providers and their Customers
Managing a Customer’s Network with Cisco Plug and Play
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
This guide provides instructions and system steps to maintain a customer’s network in Cisco Plug and Play Connect.
For Cisco Managed Service Provider Partners.
Roles
More about Smart Accounts
More about Plug and Play
CSW
PnP Plug and Play
Cisco Software Workspace
Systems Used
This guide is a supplemental guide for Managed Service Providers and assumes prior knowledge of Smart Accounts and Plug and Play Connect. If you have not used Cisco Smart Accounts, Smart Software Licensing or Plug and Play Connect, find out more general information below.
Managed Service Provider Network Administrator (Smart Accounts and Plug and Play Connect)
Customer Smart Account Administrator
Access CCW and these 2 apps at software.cisco.com
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
What you will find in this guide
Overview and Context
This Guide is intended for Managed Service Providers and their customers. It covers the high level process for a Managed Service Provider to manage customer networks using Cisco Smart Accounts and Plug and Play Connect. If you are not previously familiar with general Cisco Smart Accounts and Cisco Plug and Play Connect functionality, this guide provides links to other guides that will help you.
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
The Managed Service Provider sets up a Customer Specific Virtual Account (VA) in its MSP Smart Account, ensuring hardware is also in the VA. The MSP will also assign a specific MSP user group to manage the customers’ devices in Plug and Play Connect.
How it works
Managed Service Provider owns the hardware.
The customer owns the hardware.
The customer owns the hardware and has decided to have its MSP manage its devices.
The MSP needs access to the customer Virtual Account to manage the devices in it. The MSP requests access to the customer’s Smart Account. The customer Smart Account Administrator provides Virtual Account Administrative access to the MSP in Cisco Software Workspace. This is a dedicated Virtual Account in which only the devices the MSP will manage are represented.
In Plug and Play Connect the customer allows external access to that Virtual Account. The MSP claims access and gains control of the devices in PnP. All existing controller profiles are removed and replaced during this process. (These systems will be inoperative briefly during this transference.)
The customer has the ability to revoke MSP access at will.
ReleasedIn May 2019
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Prerequisite Steps
Ensure devices are in the Customer Specific Virtual
Account
Overview
Managed Service Provider creates
Customer Specific Virtual Account in Smart Account
End Customer orders service
with MSP
Go to Scenario 1MSP owns devices used for
End Customer
Go to Scenario 2
The MSP may also create a User Group to devices for each customer. (Optional)
Guides to aid you in performing these prerequisite steps can be found on the next page.
Managed Service Provider uses existing or initiates a Cisco Smart Account
A Cisco Smart Account is a prerequisite for Plug and Play Connect. In Scenario 2, where the customer owns the hardware a Smart Account is a prerequisite for the customer and the MSP.
End Customer owns the hardware the MSP will
manage.
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Assumptions and ReferencesThis guide is supplemental for Managed Service Providers and Customers and assumes prior knowledge of ordering in Cisco Commerce Workspace (CCW), Managing Cisco Smart Accounts and Plug and Play Connect. Links to guides related to these basic system functions are below, if needed.
Actions Partner Guide Sales Connect Link
Request and set up a Smart Account (MSP) Cisco Software Smart Account Request and Setup for Partners & Distributors
https://salesconnect.cisco.com/#/content-detail/d11969cd-dabd-4610-b119-c0c56d712ec2
Manage your Smart Account(Create Virtual Account)
Cisco Software Smart Account Administration for Partners & Distributors
https://salesconnect.cisco.com/open.html?c=03f3894e-6399-4acd-88c8-658a07026c6b
Create a User Group to manage your Customer’s Virtual Account
Cisco Software: Smart Account User Groups Quick Guide
https://salesconnect.cisco.com/#/content-detail/daf5b536-02ce-48e0-aae3-e02eb67813ed
Navigating Plug and Play Connect Plug and Play Connect https://salesconnect.cisco.com/#/content-detail/12585aa5-d4d7-49b0-8bd8-eae6c6b048cb
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Scenario 1 The Managed Service Provider owns the hardware the customer will use
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Scenario 1: Managed Service Provider owns the hardware
Send email to the Cloud Ops team
to spin up Controller for devices
PnP
Associate the devices with the Controller Profile
Ensure devices are in the Customer Specific Virtual
Account
PnP
MSP Ownshardware
Follow prerequisite steps first
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Create a Customer Specific Virtual Account, if necessary.
1
1Create a new Customer Specific Virtual Account for your customer in Cisco Software Workspace at software.cisco.com
Cisco Software Smart Account Administration for Partners & Distributors tells you how to “Add a new Virtual Account” to your Smart Account.
Managed Service Provider creates Customer Specific Virtual Account in Smart Account
CSWOverview
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
1
If you chose to create a user group to manage your customer, assign your user group VA Admin access to the Customer Specific Virtual Account. Otherwise, continue to next page.
Assign the User Group to the Customer Specific Virtual Account under“ACTIONS”
1
Access this Smart Account User Groups Quick Reference Guide to create a new User Group.
CSWOPTIONAL Tip in Prerequisite stepsOverview
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
1
2
Check to see if the devices were deposited in the Customer Specific Virtual Account when they were ordered.
Log into Plug and Play Connect at software.cisco.com.Select the Smart Account and Customer Specific Virtual Account to which the devices should be deployed.
In the Devices tab, insure the correct devices are in the Customer Specific Virtual Account.
Use the Plug and Play Connect Guide for help with basic Plug and Play functions.
1
2
2
MSP Ownshardware
Ensure devices are in the Customer Specific Virtual Account
PnP
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
There are two means to moving devices into the Customer Specific Virtual Account A) Use PnP Delete/Add functionality for relatively few devices. B) Request assistance from Cisco
1 Raise a request for the device to be moved to the correct Virtual Account from the Support link in PnP Connect (top right).
2Include the following information:• Sales order • Device names or serial numbers• Number of devices• Exact name of the Smart and Virtual Account in which
they are currently located• Exact name of the Customer Specific Virtual Account
to which they will be moved
3 The CDAP support team SLA is 24 hours. They will keep you informed and update you when the request is complete.
MSP Ownshardware
Ensure devices are in the Customer Specific Virtual Account
PnP
B
If you have only a few devices to move, use the standard delete and add function to delete the devices from their existing virtual account and add them to the Customer Specific Virtual Account.
Use Delete and Add Devices in the Redirect Chapter of the Plug and Play Connect Guide for help with basic Plug and Play functions.
A
We encourage self-serve
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
The green “Provisioned” sign will show in the status when the device association with the new profile is complete.
vEdge device will associate automatically when the controller profile is delivered. SDWAN IOS-XE devices should be associated manually.
1
MSP Ownshardware
Associate the devices with the Controller Profile
PnP
To manually associate devices with vBond Controller Profiles, see Add a Controller Profile under Redirect Capabilities in the Plug and Play Connect Guide.
1
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Scenario 2 The End Customer owns the hardware
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Customer moves devices into
Virtual Account,If required
Customer enables access in PnP so MSP can manage devices
PnP
Customer grants MSP access to the
Virtual Account
MSP requests access to
Customer VA
CSW
Scenario 2 – Customer owns hardware
MSP claims Customer
Virtual Account
CSW
PnP PnP
Customer creates Virtual Account for
MSP managed devices, if required
CSW
Customer owns hardware
Follow prerequisite steps first
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
1
2
The devices the Managed Service Provider will manage should be in a separate Virtual Account from any other devices. Only devices intended for the MSP use should be in this Virtual Account.
Log into Plug and Play Connect at software.cisco.com.Select the Smart Account and MSP Specific Virtual Account to view the devices.
In the Devices tab, ensure only the devices the MSP will manage are in the Virtual Account.
Use the Plug and Play Connect Guide for help with basic Plug and Play functions.
1
2
2
Customer owns hardware
Customer creates Virtual Account for MSP managed devices, if needed
PnP
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
If a separate Virtual Account is needed for the devices the MSP will manage, the Customer Smart Account Administrator should create a Virtual Account. If the devices the MSP will manage are already the only devices in a virtual account that the MSP will manage, skip this step and the next step.
1
1The customer may already have devices the MSP will manage segregated into a Virtual Account. If not, the Customer Smart Account Administrator should create a Virtual Account dedicated to the devices the MSP will manage.
Cisco Software Smart Account Administration for Partners & Distributors tells you how to “Add a new Virtual Account” to your Smart Account.
Customer owns hardware
Customer creates Virtual Account for MSP managed devices, if required
CSW
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
There are two means to moving devices into the Customer Specific Virtual Account A) Use PnP Delete/Add functionality for relatively few devices. B) Request assistance from Cisco
1
2Include the following information:• Sales order• Device names or serial numbers• Number of devices• Exact name of the Smart and Virtual Account in which
they are currently located• Exact name of the Customer Specific Virtual Account
to which they will be moved
3 The CDAP support team SLA is 24 hours. They will keep you informed and update you when the request is complete.
Customer moves devices into Virtual Account, if required
PnP
B
If you have only a few devices to move, use the standard delete and add function to delete the devices from their existing virtual account and add them to the Customer Specific Virtual Account.
Use Delete and Add Devices in the Redirect Chapter of the Plug and Play Connect Guide for help with basic Plug and Play functions.
A
Customer owns hardware
Raise a request for the device to be moved to the correct Virtual Account from the Support link in PnP Connect (top right).
We encourage self-serve
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
2
• OPTIONAL Tip in Prerequisite steps: If you chose to create a user group to manage your customers, create the user group or use an existing one, and request access to the customer’s Smart Account and Virtual Account.
• Otherwise, as an individual you must request access to the Customer’s Smart Account and Virtual Account before you will be able to manage your customer’s hardware in Plug and Play.
Create a User Group, or use an existing one.
1
Access this Smart Account User Groups Quick Reference Guide to create a new User Group.
CSW
2 Request access to the customer’s Smart Account.
Cisco Software Smart Account Administration for Partners & Distributors gives instruction on allowing external access to a Smart Account.
To request individual access use the Request Access to an Existing Smart Account link atSoftware.cisco.com
MSP requests access to Customer VA
Customer owns hardware
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
2
The customer’s Smart Account Administrator must grant the MSP Individual or User Group access to the Smart Account and Virtual Account.
1
The Smart Account Administrator for the MSP will receive an acceptance email when the access is granted.
1
2
The customer SmartAdministrator should grant Virtual Account Administrator access to the MSP User Group or individual.
Granting and receiving confirmation of external access to a Smart Account is covered in the User Groups –External Access chapter of the Smart Account User Groups Quick Reference Guide.
CSWCustomer grants MSP access to the Virtual Account
Customer owns hardware
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
1 The End Customer navigates to the Virtual Account that the MSP will manage and clicks “Enable External Management.”
2 Confirm the action to enable external control.
1
The configurations and Controller Profiles will be cleared and the MSP will set up new ones after receiving access.
The customer must grant access to the Managed Service Provider in Plug and Play Connect.
2
DRAFT Customer enables access in PnP so MSP can manage devices
PnPCustomer owns hardware
To "Enable External Management" for a virtual account with an active Cloud Hosted vBond controller, please reach out to support team, through online form on PnP Portal under support
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
1 The End Customer Plug and Play Administrator will receive notice that the Virtual Account is in the process of being transferred to the MSP.
2
The customer can revoke access at any time by clicking the “Disable External Management” button.
1
Once the customer enables external access, the customer can view the devices in the Virtual Account but cannot control them. The devices will be disabled from production until the MSP accepts control and reconfigures them. MSP access level in the Smart Account is “Virtual Account Administrator”
The Customer PnP Administrator will receive confirmation that the account is in the process of being transferred to the MSP
2
Customer enables access in PnP so MSP can manage devices
PnPCustomer owns hardware
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
1 The MSP Plug and Play Administrator can claim the Customer’s Virtual Account by clicking Manage External Virtual Account
2The MSP should select the correct Customer Smart and Virtual Account(s) for management.
The Managed Service Provider can claim the Customer Virtual Account in Plug and Play Connect, after the Customer has enabled external management.
2
2
2
3 Once the Virtual Accounts are moved to “Selected Virtual Account” click OK
3
1
MSP claims Customer Virtual Account PnPCustomer owns hardware
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
The green “Provisioned” sign will show in the status when the device association with the new profile is complete.
vEdge device will associate automatically when the controller profile is delivered. SDWAN IOS-XE devices should be associated manually.
1
Associate the devices with the Controller Profile
PnP
To manually associate devices with vBond Controller Profiles, see Add a Controller Profile under Redirect Capabilities in the Plug and Play Connect Guide.
1
Customer owns hardware