About Onboard ASAs in Bulk
Cisco Defense Orchestrator (CDO) allows you to onboard a list of ASAs. As the ASAs are being onboarded, you can use the filter pane to show which onboarding attempts are queued, loading, complete, or have failed.
Prepare a .csv file with the connection information of the ASAs you want to onboard. Add the information about one ASA on its own line. You can use a # at the beginning of a line to indicate a comment.
- ASA location (either IP address or FQDN)
- ASA administrator username
- ASA administrator password
- (Optional) Device name for CDO
- (Optional) Specify the Secure Device Connector (SDC) the device will connect to. If you do not specify an SDC, all devices will be associated with the default SDC.
- (Optional) Device labels for CDO
- To add one label, add the label name to the last CSV field.
- To add more than one label to a device, surround the values with quotes. For example, "alpha,beta,gamma"
- To add a category and choice label, separate the two values with a colon ( : ). For example, Rack:50
Sample of the configuration file:
#Location,Username,Password,DeviceName,SDCName,DeviceLabel 192.168.3.2,admin,CDO123!,ASA3,sdc1,"HA-1,Rack:50" 192.168.4.2,admin,CDO123!,ASA4,sdc1,"HA-1,Rack:50" ASA2.example.com,admin,CDO123!,ASA2,sdc2,Rack:51 asav.virtual.io,admin,CDO123!,ASA-virtual,sdc3,Test
Caution: CDO does not validate any of the data in the .csv file. You need to ensure the accuracy of the entries.
Onboard ASAs in Bulk
To onboard ASAs in bulk, follow this procedure:
- From the navigation bar, click Devices & Services and click the blue plus button .
- On the Onboarding page, click the Multiple ASAs tile.
- Select the Secure Device Connector (SDC) that this device will communicate with. The default SDC is displayed but you can change it by clicking the SDC name.
- Click Browse to locate the .csv file containing your ASA entries. The devices you specified are now queued in the ASA Bulk Onboarding table ready to be onboarded.
Caution: Do not navigate away from the ASA Bulk Onboarding page until the onboarding process is complete. Navigating away stops the onboarding process.
- Click Start. You will see the progress of the onboarding process in the status column of the ASA Bulk Onboarding table. After the device have been successfully onboarded you will see their status change to "Complete."
Pausing and Resuming Bulk Onboarding
If you need to pause the onboarding process, click Pause. CDO finishes onboarding any device it started onboarding. To resume the bulk onboarding process, click Start. CDO will start onboarding the next queued device.
If you click Pause and navigate away from this page, you will need to return to the page and follow the bulk onboarding procedure again from the beginning. However, CDO recognizes the devices it has already onboarded, marks the devices from this new onboarding attempts as duplicates, and quickly moves through the list to onboard the queued devices.