Sensor Management 25.7 Release Notes

Overview

These general availability release notes cover the features and enhancements that will be introduced in Sensor Management (formerly Legacy Orchestrator) version 25.7.

For further information, questions, or clarifications regarding this release, please contact the Technical Assistance Center (TAC) at skylight_tac@cisco.com

The following topics are addressed in this document:

• New Features: Covers the new features introduced in this release.

• Corrected Issues: Lists issues that have been corrected in this version of the software.

• Technology Support: Covers the applicable product information.

• Operational Considerations: Covers general limitations and considerations of the current release.

• Release Lifecycle: Lists the planned lifecycle dates of this software release. Includes table with milestones.

For more information, see the Sensor Management documentation.

New Features

Sensor Management 25.7 introduces the following features and enhancements.

Integration into Provider Connectivity Assurance and Name Change

Legacy Orchestrator has been renamed and integrated into Sensor Management, a capability within Provider Connectivity Assurance, rather than existing as a standalone product.

Command Line Interface Updates

Sensor Management includes an updated set of CLI commands, enhancing user interaction. To provide a consistent and familiar interface while reducing training and management efforts, a climanager service is installed on the host.

This update streamlines command execution within the Sensor Management CLI environment.

Support for Multi-Factor Authentication with ZITADEL Integration

During the onboarding process for a new device, it is required to retrieve a service account from ZITADEL and send it to the device being onboarded.

Support for Service Activation Test Notifications

Sensor Management 25.7 incorporates Service Activation Test (SAT) notifications for state change events. The following are scenarios when the notifications are generated for these events:

• When a SAT service is created or deleted

• When a SAT service is initiated and the various state changes it undergoes until execution is complete

• When the associated UNI/NNI port goes down, triggering notifications for all SAT services on that port

• When the managed entity (ME) to which the SAT is assigned is deleted

Enhanced Device Backup Information

The Sensor Management Backup & Restore tab for devices includes additional information for increased clarity; the firmware version of each device is visible at the time the backup was taken, providing users with essential data for system management and troubleshooting.

Application-Level Password Policy Enhancement

To enhance security, default passwords at the application level are not permitted beyond the installation phase. Authentication requires unique credentials, either created by the customer or generated randomly upon request.

Additionally, users must change their passwords immediately following a fresh system installation, enforcing a first-time password change requirement to ensure secure access.

Provider Connectivity Assurance Sensor Compatibility

Sensor Management has been enhanced to be backward compatible with Provider Connectivity Assurance Sensors, including release 25.07 for Assurance Sensors LT, LX, and GT as well as release 24.08 for Assurance Sensors F100 and F25.

See the Assurance Sensor Release Notes 25.07 for more information.

Provider Connectivity Assurance Sensor Control Compatibility

Sensor Management has been enhanced to operate with Assurance Sensor Control release 25.07.2. Please note that Sensor Management (Sensor Management) releases prior to release 23.04 are unable to provide RTT values for TWAMP and ETH-DM using Sensor Control releases 22.12 or later.

If you intend to deploy Sensor Control 22.06 or later to your network, please ensure you have upgraded to Sensor Management release 25.7.

See the Assurance Sensor Control Release Notes 25.07.2 for more information.

Reflector Configuration API Enhancements

Sensor Management supports expanded API requests for reflector configuration on Assurance Sensor Control. Users can retrieve reflector configurations and filter these configurations by peer type or protocol.

Additionally, the API allows updating the status and port for single or multiple reflector configurations, improving management flexibility and control.

Enhanced Stop Action for Northbound API Sessions

The stop action has been updated to perform both the stop and terminate action. Previously, users needed to issue the stop action twice to properly transition the session into the terminated state.

Getting a Signed Certificate Procedure Update

The procedure required to deploy a signed certificate to the Sensor Management has been updated. By default, the product ships with a self-signed certificate produced by Cisco. If your organization prefers to use a trusted certificate from a third-party Certificate Authority (CA), see Getting a Signed Certificate for Sensor Management for more information.

Assurance Sensors Certificate Management Update

This release removes the use of default device certificates (pre-generated private CA certificates). Users must generate self-signed certificates or import their own certificates for each device. This change enhances security and affects the Sensor Management reverse proxy functionality.

Corrected Issues

The following key issues have been addressed in Sensor Management 25.7.

SKD-6306 Some Specific Characters Are Not Allowed When Running a CLI Set Job

It has been noted that some characters are not allowed when running a job.

Technology Support

The following table lists key functionality of Assurance Sensors, Assurance Sensor Control, Assurance Sensor Modules, and Assurance Sensor SFPs supported by Sensor Management 25.7.

Supported in Sensor Management Version 25.7

* CLI step support for Device Commissioning
** Y.1564 with flow template support

Operational Considerations

Device Interoperability

The following section details the firmware releases that are known to interoperate with this release of Sensor Management. Please refer to the Sensor Management Administrative Operations documentation for a listing of supported functions for each firmware version.

For the releases mentioned below, support for maintenance releases is also included.

HTTP Interface Deprecation

The HTTP interface for Sensor Management is no longer supported for GUI operations or REST and XML APIs. Web service clients must transition to the secure HTTPS protocol.

Customers currently using HTTP on port 6080 will be automatically redirected to HTTPS on the same port, meaning no firewall changes are required.

To ensure a secure and seamless experience, access Analytics directly via the Open Provider Connectivity Assurance button located within the Sensor Management interface. Please update any existing bookmarks or client applications to utilize the HTTPS protocol to maintain full security and functionality.

Browser Support Limitations

The minimum recommended screen resolution to operate Sensor Management is 1360 x 768. Lower resolutions will not provide an optimal experience.

Performing a zoom on your display is not recommended due to incompatible implementations with browsers. If a zoom must be applied, please use a Firefox browser as it has the most standard support for this function.

Due to issues with browser compatibility mode and web sockets, Internet Explorer is no longer supported. Please use Google Chrome (version 70 or higher) or Firefox (version 52 or higher) to access the Sensor Management web interface.

IMPORTANT: On some devices running Ubuntu 22.04, Google Chrome may not allow you to interact with the user interface after login due to a known compatibility issue. It is highly recommended that you use Mozilla Firefox in this environment. Alternatively, you can launch Chrome from the terminal using the following command to restore full functionality:

google-chrome --ozone-platform=x11

For Windows users, it is also recommended to leave the scale and layout option of the Display settings at a value of 100%.

Metrics Collection CSV Filename Timestamp

In order to align with the CSV filename convention of all other Cisco Provider Connectivity Assurance products (Assurance Sensor Control and Assurance Sensors), this naming strategy is changed in Sensor Management. The timestamp in the CSV filename represents the time when the file was created.

In all cases, the timestamps of the metrics themselves (present within the content of the file) represent the time of when the metric was produced. Only the timestamp contained in the CSV filename is impacted by this change.

Vision Collect Streaming Limitations on 6.4.1.2 and 6.4.2

When using release firmware 6.4.1.2 with Vision Collect, a disconnection from Sensor Management may incur data loss. The data retention periods are not respected and data loss can occur after a few seconds of disconnection.

When using firmware release 6.4.2 in Skylight elements in high resolution mode with packet loss greater than 10% of the management network, some reporting periods may be lost. Please ensure a reliable management network is in place.

These issues are corrected in Skylight element firmware releases 6.4.3 and higher.

The First Result Records for a New Session Are Skipped by CSV Export

When the CSV producer detects a new performance session, it marks its data for extract from the first time it views the session. If the CSV producer is configured to run every five (5) minutes, this can mean that the first five minutes of result data for a new session will not be exported.

This is expected behavior; all performance data after this initial detection phase will be captured by the CSV producer.

Result Records for Sync Sessions Are Not Exported in Real Time

Sync sessions are not properly aligned with CSV export. Results are not being exported in real time as Assurance Sensor Control is delivering measurement results and Sensor Management is generating CSV files at the exact same time.

If the CSV producer is configured to run every five (5) minutes and sync session has five (5) minute interval, this can indicate that result data for that session will be exported five minutes late.

Zitadel Interoperability

A login failure occurs on the Sensor Management GUI if Zitadel sends both valid and invalid roles during the authentication process. Ensure that only valid roles are assigned to users in Zitadel before attempting to log in to the Sensor Management GUI.

Device Password Management

When supporting or upgrading devices, be aware of password management requirements and potential limitations that may affect device access and integration.

• When supporting Assurance Sensor Control 24.09 or later and Assurance Sensors 24.07 or later, users may not be aware when a device password change is required. As a result, the device may remain in-service but not function properly because most commands are disabled in Sensor Management. To change the password, users must either manually access the device(s) via Web GUI or CLI or follow the procedure in Changing Default Password for Devices to update the password via CLI set on Sensor Management.

• It is not possible to change the password for Assurance Sensor Control or Assurance Sensors running version 25.7 or later during the first login if accessing through a reverse proxy. To change the password, access the device directly (via Web GUI or CLI) or follow the procedure in Changing Default Password for Devices to update the password via CLI set on Sensor Management.

Device Onboarding Limitation

When onboarding devices with firmware version 25.7 or later, do not onboard more than 200 devices at a time. Onboarding more than 200 devices concurrently may result in intermittent failures for some of these devices. To avoid issues, split large onboarding operations into batches of 200 devices or fewer.

Data Rewinds

When performing a data rewind operation in Sensor Management, ensure that Analytics has fully processed the current data before initiating another rewind.

For optimal results, avoid performing multiple large rewinds in quick succession.

For small deployments, it is recommended to limit rewinds to a single 7-day period at a time as this helps ensure system stability.

Refer to the sizing guidelines for details.

Authentication and Session Management

When a session timeout occurs, the authentication token may not be properly released. If you reload the page, you may still be logged in.

To ensure session termination and maintain system security, always logout before leaving your workstation unattended.

25.7 Lifecycle

This section lists the planned lifecycle dates of this software release. See the table below outlining the following milestones: