Review and complete the required prerequisites to allow the NFM-P to discover the required devices using ADP; see 7705 SAR-Hm discovery prerequisites.

For the NEs in a cellular domain that are assigned a unique administrator password, create an XML file that maps each chassis serial number to each unique password, as described in To create an ADP password mapping file.

If you want to automatically apply a specific configuration to discovered NEs in a cellular domain, create a post-discovery action. See Post-discovery actions on discovered NEs in Chapter 9, Device discovery for information.

Create an SNMPv3 NE user account; see the procedure to configure a user account on a manage device in the NSP System Administrator Guide.

Note: The user requires console, FTP, SNMP, and NetConf access.

Note: If enhanced NE security mode is enabled, or you intend to enable the function, the user password must adhere to the password criteria specified in To enable enhanced NE security mode.

Note: You must not specify AES-256 as the Privacy Protocol in the user SNMPv3 configuration.

Create a software upgrade policy in which the Software Download and Activate Image parameters are enabled, and the Software Upgrade parameter is disabled; see To configure a software upgrade policy.

Create a mediation security policy that specifies the following; see To configure device mediation for information:

• SNMPv3 user: the new user created in Stage 4.

• CLI user: must be the same as the SNMPv3 user

• SSH for CLI access

• Secure FTP

Note: You must enable NetConf in the mediation policy, and specify the SNMPv3 user in the NetConf section of the mediation policy. The NetConf credentials are available from technical support.

If required, enable enhanced NE security mode; see

Create a carrier VPRN with static routes to and from the 7705 SAR-Hm; see To create a VPRN service and To configure static routes on a VPRN site; ensure that the service is configured as described in In-band management using VPRN.

Configure a PDN profile policy that specifies each cellular interface used to connect 7705 SAR-Hm mobile data users to the network; see To configure a PDN Profile policy for a 7705 SAR-Hm.

If NGE security is required, create an NGE domain that includes the cellular domain head-end nodes as the NGE domain gateway sites; see Workflow for NGE management using NFM-P.

If required, upgrade 7705 SAR-Hm radio card firmware; see To upgrade 7705 SAR-Hm radio card firmware.

Create a cellular domain that has the cellular domain head-end node as the head end, and includes each 7705 SAR-Hm device; see To configure a cellular domain with single SIM deployment or To configure a cellular domain with dual SIM deployment.

If you intend to discover the devices listed in an XML file, import the file to the cellular domain that is to include the devices, as described in To configure a cellular domain with single SIM deployment or To configure a cellular domain with dual SIM deployment; see Specifying devices using an XML file for information about the XML file format.

If the head-end node is a 7705 SAR, create BGP peers in the domain BGP group; see To configure peer-level BGP.

Enable ADP on one or more selected cellular domain subnets, and monitor the discovery process; see To enable and monitor the ADP discovery process.

If you are using the two-step ADP method, perform the following steps after the first step ADP is completed:

1. Check the LED status of each device to be discovered, as described in the device documentation, to ensure that the first ADP step is complete.

2. Disable ADP on the cellular domain subnet that includes the devices; see To disable ADP.

3. Deliver the devices to the remote installation site.

4. Enable ADP on the cellular domain subnet that contains the devices.

5. Install and turn up each 7705 SAR-Hm that is to complete the ADP process at the remote site.

6. Monitor the ADP process using the NFM-P, as described in To enable and monitor the ADP discovery process, and by checking the device LEDs, as described in the device documentation.

Disable ADP on the cellular domain subnets that no longer require ADP for device discovery; see To disable ADP.

Apply a new security PIN to all NEs in a cellular domain, as required; see To configure a new PIN value for a cellular carrier.

If dual SIM deployment is in use, configure the Cellular tab of the MDA on each 7705 SAR-Hm; see To configure an MDA.

Configure polling for the NEs in the cellular domain; see To configure polling for a 7705 SAR-Hm.