# Managing Cisco IOS Devices with Cisco Prime Infrastructure

> Markdown source of <https://docs.calebsargeant.com/networking/cisco/core-security/network-security-with-cisco-ios/4.-managing-cisco-ios-devices-with-cisco-prime-infrastructure/>.

## Adding a Device to Cisco Prime Infrastructure

<figure>
![managing cisco ios devices with cisco prime infrastructure](_images/managing-cisco-ios-devices-with-cisco-prime-infrastructure-1.png)
<figcaption>Add a profile</figcaption>
</figure>

<figure>
![managing cisco ios devices with cisco prime infrastructure](_images/managing-cisco-ios-devices-with-cisco-prime-infrastructure-2.png)
<figcaption>Config SSH</figcaption>
</figure>

<figure>
![managing cisco ios devices with cisco prime infrastructure](_images/managing-cisco-ios-devices-with-cisco-prime-infrastructure-3.png)
<figcaption>Config HTTPS</figcaption>
</figure>

<figure>
![managing cisco ios devices with cisco prime infrastructure](_images/managing-cisco-ios-devices-with-cisco-prime-infrastructure-4.png)
<figcaption>Add a device</figcaption>
</figure>

<figure>
![managing cisco ios devices with cisco prime infrastructure](_images/managing-cisco-ios-devices-with-cisco-prime-infrastructure-5.png)
<figcaption>Specify the profile &amp; add device</figcaption>
</figure>

## Using Cisco Prime Infrastructure to Make Changes on IOS Devices

<figure>
![managing cisco ios devices with cisco prime infrastructure](_images/managing-cisco-ios-devices-with-cisco-prime-infrastructure-6.png)
<figcaption>Configure an existing device</figcaption>
</figure>

<figure>
![managing cisco ios devices with cisco prime infrastructure](_images/managing-cisco-ios-devices-with-cisco-prime-infrastructure-7.png)
<figcaption>Device's config</figcaption>
</figure>

``` text
Globo-HQ#show ip int bri
Interface IP-Address 0K? Method Status Protocol
GigabitEthernet0/0 192.168.1.100 YES manual up up
GigabitEthernet0/1 172.20.1.57 YES manual up up
Loopback100 1.1.1.1 YES manual up up
```

## Using Cisco Prime Templates to Make Changes on IOS Devices

**Current config on device:**

``` text
Globo-HQ-MPLS#show run sec aaa
aaa new-model
aaa session-id common
```

<figure>
![managing cisco ios devices with cisco prime infrastructure](_images/managing-cisco-ios-devices-with-cisco-prime-infrastructure-8.png)
<figcaption>Configuring a device template</figcaption>
</figure>

<figure>
![managing cisco ios devices with cisco prime infrastructure](_images/managing-cisco-ios-devices-with-cisco-prime-infrastructure-9.png)
<figcaption>Creating a composite template</figcaption>
</figure>

<figure>
![managing cisco ios devices with cisco prime infrastructure](_images/managing-cisco-ios-devices-with-cisco-prime-infrastructure-10.png)
<figcaption>Deploying config to devices</figcaption>
</figure>

**Config deployed:**

``` text
Globo-HQ-MPLS#show run | sec aaa
aaa new-model
aaa group server tacacs+ GloboISEGroup
server name GloboISE1
ip vrf forwarding Mgmt-intf
ip tacacs source-interface GigabitEthernet0/1
aaa authentication login default group GloboISEGroup local
aaa authentication enable default group GloboISEGroup enable
aaa authorization console
aaa authorization config-commands
aaa authorization exec default group GloboISEGroup local if-authenticated
aaa authorization commands default group GloboISEGroup local if-authenticated
aaa authorization commands default group GloboISEGroup local if-authenticated
aaa authorization commands 4 default group GloboISEGroup local if-authenticated
aaa authorization commands 15 default group GloboISEGroup local if-authenticated
aaa accounting exec default start-stop group GloboISEGroup
aaa accounting commands 0 default start-stop group GloboISEGroup
aaa accounting commands 1 default start-stop group GloboISEGroup
aaa accounting commands 4 default start-stop group GloboISEGroup
aaa accounting commands 15 default start-stop group GloboISEGroup
aaa session-id common
```

## Using Prime to Upgrade IOS Devices

**We want to upgrade this image:**

``` text
sh ver
System image file is "flash:c3750e-universalk9-mz.152-4.E6/c3750e-universalk9-mz.152-4.E6.bin"
```

<figure>
![managing cisco ios devices with cisco prime infrastructure](_images/managing-cisco-ios-devices-with-cisco-prime-infrastructure-11.png)
<figcaption>Downloading software images via Cisco</figcaption>
</figure>

<figure>
![managing cisco ios devices with cisco prime infrastructure](_images/managing-cisco-ios-devices-with-cisco-prime-infrastructure-12.png)
<figcaption>Downloading software from file</figcaption>
</figure>

<figure>
![managing cisco ios devices with cisco prime infrastructure](_images/managing-cisco-ios-devices-with-cisco-prime-infrastructure-13.png)
<figcaption>Distribute the image and follow the wizard</figcaption>
</figure>

<figure>
![managing cisco ios devices with cisco prime infrastructure](_images/managing-cisco-ios-devices-with-cisco-prime-infrastructure-14.png)
<figcaption>Activate the image and follow the wizard</figcaption>
</figure>

**The image is upgraded:**

``` text
sh ver
System image file is "flash:c3750e-universalk9-mz.152-4.E9.bin"
```