Before you begin, here's a handy checklist that will walk you through the prerequisites.
1. IOS XE
Use show version to find which version running on your device
IOS XE 17.3.x to 17.9.4 are supported versions
Image must have payload encryption (i.e. image type must not contain NPE in its name)
To download IOS XE software, go to Cisco Software website
Here's a guide on how to upgrade IOS XE if you need
IOS XE Release notes here
2. NTP
Device has ntp configured (ntp server address).
Here's a list of public NTP servers in case needed.
And here's a useful guide
3. IP Routing
Device has IP routing enabled (ip routing)
Only default VRF is supported and a default route must be configured (ip default-gateway not supported)
Connectivity must be via a front panel port (i.e. management port not supported)
4. DNS
The device must have a DNS server configured (ip name-server address)
You can use Cisco Umbrella for free
The device must allow domain lookup (ip domain lookup)
5. Authentication
- AAA authorization must be set to start an exec shell with aaa authorization exec default local or aaa group name
- If the aaa authorization exec default specifies a aaa server-group name first in the list, a aaa group server tacacs+ {server-group name} server group with that group name must be configured
6. Loopback interface
7. VTY lines
8. Access Lists
9. HTTP Proxy
10. Configuration Backup
