ThousandEyes Documentation
Search…
What's New
Product Documentation
Cisco Devices
ThousandEyes provides customers with a 360-degree view of their digital ecosystem. The ThousandEyes - Cisco integration allows Cisco customers to install and configure ThousandEyes Enterprise Agent vantage points on Cisco switches and routers, and to access this real-time map of how their customers and employees experience critical services. For more information about ThousandEyes, see ThousandEyes Platform.
This article outlines the supported Cisco devices, setup and installation instructions, and next steps for Cisco DNA license holders.
Overview
What is Cisco DNA?
Cisco DNA Center is the command and control center for Cisco DNA-based networks. For more information, see Cisco DNA Center.
Embedded vs. Non-Embedded Solutions
In this article, we will refer at times to "embedded" instances. The terms are defined below for clarity:
- Embedded refers to the ThousandEyes capacity entitlement that comes with the purchase of a Cisco DNA Advantage or DNA Premier license. This entitlement does not require the purchasing of ThousandEyes licenses, but is limited to the use of Enterprise Agent vantage points.
- Non-embedded refers to ThousandEyes licenses purchased directly from the Cisco Global Price List (GPL). These licenses can be purchased in addition to the embedded entitlements in order to gain access to the use of Cloud Agent and Endpoint Agent vantage points, Internet Insights, and to expand your use of ThousandEyes.
While this article primarily focuses on embedded entitlements, the support matrix, setup/installation instructions, and next steps are all applicable to non-embedded licenses as well.
Entitlements
ThousandEyes is a consumption-based SaaS product. Any test run from or to a Cloud or Enterprise Agent vantage point incurs a cost in "units", which are the currency used when data is gathered. When a test is run, the test's cost is deducted from the monthly units your organization has purchased. For more information on how unit consumption is calculated, see How Unit Consumption Works.
Cisco DNA Advantage and DNA Premier embedded license holders are entitled to 22 units per license, which is the equivalent of one test run at a five minute interval with default timeouts set. This can be enhanced with non-embedded licenses.
Existing legacy metered customers will receive 22,000 units, which is the equivalent of 22 usage-based units.
Organization entitlements are limited to 5,000 licenses.
Security, Reliability, and Performance
ThousandEyes Enterprise Agents running on Cisco Catalyst 9000 series switches, Catalyst 8000 series routers, and ISR 4000 series routers make use of the same containerized application framework supported by the Cisco IOS XE kernel and Cisco Application Framework. This framework leverages control groups (cgroups) and user namespaces to provide flexible control and total isolation from the main operating system.
Security
The application container is configured to use a user namespace that provides additional isolation and security. User namespaces separate the user IDs between the host operating system and containers, as shown in the image below. A privileged user (known as a root user) in a container cannot be mapped to a privileged user on the host operating system.
In addition, the ThousandEyes Enterprise Agent container is a Cisco signed application, which ensures the authenticity of the applications running on bootflash for Cisco switches and routers.
Reliability & Performance
To ensure reliable performance, the Cisco Application Framework will only allow applications to be activated and installed if there are sufficient resources to do so. If there are not, the installation will fail. In addition, the figure below shows how cgroups limit access to physical resources such as CPU and memory.
The image below shows the results of our performance testing on Cisco 9300 and 9400 devices. No material CPU or memory impacts on the core switching and routing functions were observed during these tests:
We also measured for test result accuracy by fully saturating the browser queue of the Enterprise Agent running on a Catalyst 9000 series switch and comparing that to a benchmark Cloud Agent that we expect to give us reliable results. The results can be viewed in the share links below:
Getting Started
Access Your Entitlements
Existing Cisco DNA Advantage or Premier License Holders
For customers with existing Cisco DNA Advantage or Premier licenses (purchased before April 6th, 2021), see the Requisition Guide to access your embedded Cisco ThousandEyes entitlements included in your subscription.
New Cisco DNA Advantage or Premier License Holders
When DNA Advantage or DNA Premier licenses are purchased, or additional ThousandEyes licenses are purchased through the Cisco GPL, all Cisco Smart Account administrators associated with the organization will receive a welcome email, similar to the one shown below:
If no Smart Account administrator receives a welcome email, the units went to an existing ThousandEyes organization, rather than the one connected to the new licenses. In this case, or if you are having other issues, you can contact ThousandEyes Support.
The account can be activated by following the "Activate your account" link in the email. Once the account is active, you can install an Enterprise Agent vantage point on each licensed device. See the Support Matrix below for a list of supported devices.
Deploy Agents on Cisco Devices
Once you have activated your account, review the Support Matrix below to identify the devices you wish to install Enterprise Agent vantage points on, the system requirements (hardware/software etc), and the available installation methods.
Support Matrix
The table below outlines which Cisco products are supported:
Device
Installation Methods
Supported Test Types
Hardware Requirements
OS Requirements
Management Requirements
Entitlement
Catalyst 9300
All tests
SSD required to run browser tests
- All Tests: IOS-XE 17.6.1 and later
- Non-Browser Tests: IOS-XE 17.3.3 and later
DNA Center 2.2.2.3 or above
22 units per DNA license
Catalyst 9400
All tests
SSD required to run browser tests
- All Tests: IOS-XE 17.6.1 and later
- Non-Browser Tests: IOS-XE 17.5.1 and later
DNA Center 2.2.2.3 or above
22 units per DNA license
ISR 4221X
- Docker: All non-browser tests
- KVM: All tests
- Docker:Requires 8GB RAM and 8GB Flash
- KVM: Requires an SSD
- Docker: IOS-XE 17.6.1 and later
- KVM: IOS-XE 16.1 and later
vManage 20.6 for ThousandEyes Agent feature template
Non-embedded only. No DNA license entitlement.
ISR 4321
- Docker: All non-browser tests
- KVM: All tests
- Docker:Requires 8GB RAM and 8GB Flash
- KVM: Requires an SSD
- Docker: IOS-XE 17.6.1 and later
- KVM: IOS-XE 16.1 and later
vManage 20.6 for ThousandEyes Agent feature template
Non-embedded only. No DNA license entitlement.
ISR 4331
- Docker: All non-browser tests
- KVM: All tests
- Docker:Requires 8GB RAM and 8GB Flash
- KVM: Requires an SSD
- Docker: IOS-XE 17.6.1 and later
- KVM: IOS-XE 16.1 and later
vManage 20.6 for ThousandEyes Agent feature template
Non-embedded only. No DNA license entitlement.
ISR 4351
- Docker: All non-browser tests
- KVM: All tests
- Docker:Requires 8GB RAM and 8GB Flash
- KVM: Requires an SSD
- Docker: IOS-XE 17.6.1 and later
- KVM: IOS-XE 16.1 and later
vManage 20.6 for ThousandEyes Agent feature template
Non-embedded only. No DNA license entitlement.
ISR 4400
- Docker: All non-browser tests
- KVM: All tests
- Docker:Requires 8GB RAM and 8GB Flash
- KVM: Requires an SSD
- Docker: IOS-XE 17.6.1 and later
- KVM: IOS-XE 16.1 and later
vManage 20.6 for ThousandEyes Agent feature template
Non-embedded only. No DNA license entitlement.
ISR 4431
- Docker: All non-browser tests
- KVM: All tests
- Docker:Requires 8GB RAM and 8GB Flash
- KVM: Requires an SSD
- Docker: IOS-XE 17.6.1 and later
- KVM: IOS-XE 16.1 and later
vManage 20.6 for ThousandEyes Agent feature template
Non-embedded only. No DNA license entitlement.
ISR 4451
- Docker: All non-browser tests
- KVM: All tests
- Docker:Requires 8GB RAM and 8GB Flash
- KVM: Requires an SSD
- Docker: IOS-XE 17.6.1 and later
- KVM: IOS-XE 16.1 and later
vManage 20.6 for ThousandEyes Agent feature template
Non-embedded only. No DNA license entitlement.
ISR 4461
- Docker: All non-browser tests
- KVM: All tests
- Docker:Requires 8GB RAM and 8GB Flash
- KVM: Requires an SSD
- Docker: IOS-XE 17.6.1 and later
- KVM: IOS-XE 16.1 and later
vManage 20.6 for ThousandEyes Agent feature template
Non-embedded only. No DNA license entitlement.
Catalyst 8200L
All non-browser tests
Requires 8GB RAM and 8GB Flash
IOS-XE 17.6.1 and later
vManage 20.6 for ThousandEyes Agent feature template
Non-embedded only. No DNA license entitlement.
Catalyst 8200
All non-browser tests
No additional hardware required (16GB M.2 SSD drive is included by default)
IOS-XE 17.6.1 and later
vManage 20.6 for ThousandEyes Agent feature template
Non-embedded only. No DNA license entitlement.
Catalyst 8300
All non-browser tests
No additional hardware required (16GB M.2 SSD drive is included by default)
IOS-XE 17.6.1 and later
vManage 20.6 for ThousandEyes Agent feature template
Non-embedded only. No DNA license entitlement.
Nexus 9300
All non-browser tests
No additional hardware required
NXOS version 9.3.7 or higher, excluding version 10.1
DCNM version 11.5.3 or higher (for switches managed via DCNM)
Non-embedded only. No DNA license entitlement.
Nexus 9500
All non-browser tests
No additional hardware required
NXOS version 9.3.7 or higher, excluding version 10.1
DCNM version 11.5.3 or higher (for switches managed via DCNM)
Non-embedded only. No DNA license entitlement.
Next Steps
Once your Enterprise Agent vantage points have been installed, you can start to build out the tests, alerts, dashboards, and reports, that will allow you to monitor your entire environment. The articles below provide information on where to get started, and your next steps.
Previous
Enterprise Agent Support Lifecycle
Next
Installing Enterprise Agents on Cisco Catalyst 9000 Series Switches
Last modified 27d ago