Cisco AAA/Identity/Nac :: Collection Filter In ISE Similar To ACS 5.3?
Aug 28, 2012I wanted to ask if there is a collection filter in the ISE similar to ACS 5.3, where I can filter out unwanted syslogs.
View 2 RepliesI wanted to ask if there is a collection filter in the ISE similar to ACS 5.3, where I can filter out unwanted syslogs.
View 2 RepliesI was having users on a Cisco WLC 440x controllers. Some service accounts were logged several time with the same AD-Account.Since I migrated them on the new controller (5508), it seems that we cannot have the same AD user logged several time.
I changed the Radius server with the one we were using on the old 440x but situation seems to be same,I checked the error message when trying to start a second similar connection they looks like :
*Dot1x_NW_MsgTask_4: Aug 24 14:04:51.558: %DOT1X-3-MAX_EAP_RETRIES: 1x_auth_pae.c:3062 Max EAP identity request retries (3) exceeded for client xxxxxxxxxxx
*Dot1x_NW_MsgTask_4: Aug 24 14:04:51.558: %DOT1X-3-ABORT_AUTH: 1x_bauth_sm.c:447
Authentication aborted for client xxxxxxxxxxx
If I move back to the other 440x similar logins are allowed without any problems.
I currently have 2 WAN links, a 20MB Ethernet BGP MPLS and a bonded T1. I have a 2800 at each end configured to automatically fail over to the T1 in the event that the MPLS goes gown. I put a high AD on the T1 connection with static routes. If the MPLS goes down the T1 does kick in, however users are dropped from their applications and VOIP calls are disconnected.
I was looking into Fat Pipe appliances and they supposidly will fail over a connection without any packet loss - therefore not dropping a VOIP call or kicking anyone off the database application. In addition they will provide aggregated bandwidth.
Is there any way to achieve a similar failover without packet loss with just the routers? Do I really need to purchase the Fat Pipe to achieve this? Are there any alternatives?
Any Cisco command similar to Junipers monitor interface interface type / number. It's handy seeing real time interface stats. monitor interface?
View 5 Replies View RelatedI have a 2600 Router that has been donated to my use for some lab work. The thing was locked down pretty well. I have console access to it (obviously) but there is a console PW assigned. How can I reset the silly thing back to factory defaults including wiping the con PW? I cannot get to it to reset the boot register from 2102 to 2142 or similar. Is there a way to bypass this and reset the device?
View 4 Replies View RelatedDo Cisco Catalyst (IOS) and specially Cisco SG300/500 support a similar feature to HP's Loop Protection or DLINK's Loopback Detection? This is an interesting feature to avoid loops caused by unmanaged switches.
View 6 Replies View RelatedIs there a Cisco wall-plate model? Something similar to HP E-MSM317 and Ruckus 7025? I had look on the web but couldn't find anything.
View 3 Replies View Relatedafter upgrading about 35 Catalyst 2960 and Catalyst 2960S to IOS 15.0(2)SE2, we experience a memory leak on several switches. After some days / weeks the switches are not accessible via Console/Telnet/SSH/Web any more. Only SNMP seems to work properly.Attached users do not experience any decrease in service.
Trying to connect to the console, we get following error message:
"% Low on memory; try again later"
The only (temporary) solution is to reboot the switch. The behavior is similar to Bug CSCts52797.With regards to the Bug notes this bug should only affect Catalyst 2960 with 64MB of RAM and should already be solved with IOS 15.0(2)SE2.
We experience the erroneous behavior with
-WS-C2960-48TC-S running IOS 15.0(2)SE2
-WS-C2960S-48LPS-L running IOS 15.0(2)SE2
After launching config collection job in LMS 4.2 I can't get job results and receive error message - Unable to get results of job execution for device. I've increased the job result wait time using option in Admin > Collection Settings ... , but nothing changed.Here are screenshots of error message and wait settings I used.
View 3 Replies View RelatedOur customer is try to make a configuration by web interface menu:
Admin > Collection Settings > Inventory
After select the menu below they always received this message:
Error in starting acquisition: unable to connect to server
i have an issue with the lms 4.2 Topology Data Collection. After installation the Topology Data Collection was running normaly, but since first server reload the Topo Data Collect under Inventory > Dashboards > Device Status > Collection Summary is "frozen".Is there any option to stop this process elsewhere? I cannot find anything under jobs in running state or so. Clicking on Schedule only give me the option to start data collection, but lms always returns that the process is running.
View 9 Replies View RelatedAfter I upgrading all device packages, inventory collection failure to complete. All devices stuck on pending state and at the end of the job all devices are under not attempted and job result description ses " Timed out. Make shure that ICServer is running". I made sure that ICServer is running.
LMS runs on windows 2008 R2 server
I have Cisco Works LMS 4.0 on Win 2K8 64 bits on VMware EXs. I am facing issue with reference to Inventory Collection, my 10% devices (including Routers & Switches) Inventory collection is failed and give me error (Device sensed, but collection failed). I increase the SNMP timeout 10 sec, 30 sec, 60 sec and even 100 sec the result be the same.
View 1 Replies View RelatedI have a problem with the User Tracking and Data Collection on LMS 4.0.1 . I think It crashes every time or freezes. I Have this error if I lunch UT Acquisition :
Failed to start acquisition: Construction of XML data required for UT IS in progress. Please try After Some Time.When scheduling a CM data collection, I have this error: Data collection IS Already in progress.
I detected an error in ani.log line 12266: Exception in thread "Discovery" java.lang.AbstractMethodError: com. cisco. nm. ani. server. topo. Port Channel.portIfIndex ()
I successfully changed the name of the CiscoWorks server last week with the tool hostnamechange.pl.
Perhaps there was an impact on data collection ?
A customer of mine have 2 VSS systems for wich IC times out during collection when trying to read from flash on them. From the ICserver.log
[ Thu Dec 13 16:45:19 CET 2012 ],WARN ,[Thread-20],com.cisco.nm.rmeng.util.logger.XDILogger,67,com.cisco.nm.xms.xdi.pkgs.SharedInventoryCatIOS.FlashAGI_CISCO_FLASH_Mib,g$eval,70,com.cisco.nm.xms.xdi.pkgs.S
[Code].....
I'm having an issue with LMS 4 where it's failing to collection configuration from devices.
The following is the status of your Scheduled Config collection job:
Job ID : 1045
Status : Job Failed(111)
Description : System config collection job
[Code]....
I researched through this forum and found a thread where the ConfigMgmtServer server wouldn't run. Looking at the processes it says that this service is running normally.
LMS 4.0.1 installed on Windows Server 2008 R2 Standard with SP1. Created Inventory collection job, but couple of hours later, it is failed with all devices Not Attempted. Increased SNMP timeout on 10 sec, started again for only 1 device - collection failed again. I am attaching pdshow and ICServer file.
View 6 Replies View Relatedwe have installed LMS 3.2 when i try to run data collection it shows "Notified server to run campus data collection", but status of data collection is idle.
If i restart the server and try to run data collection it runs properly one time.
Each time i have to restart the server for data collection.
We have LMS4.0 monitoring 100+ devices. In that collection we have 2 4506e switches. The switches are identical,but one is inventoried successfully and the other always fails.Both have verified their credentials. The 4506e failing inventory is the only device not being inventoried.I looked at other post and increased snmp timeout with no effect.
View 1 Replies View RelatedDoes two separate SCE 2000 devices can share a collection manager, or do they each need a separate CM? If they can share, is there any special setup on the CM itself?
View 0 Replies View RelatedI am having a very strange issue on LMS 3.2
The problem is that the syslog collection suddently stops receiving logs and writing them into the syslog.log file
I have checked the following:
- Packet sniff to make sure that logs are being received on the server's NIC interface
- Checked the UDP port 514 is bound to the crmlog process.
- Checked the crmlog is running.
When i restart the server, the syslog connections works for a week or two and save the received logs in the syslog.log file, but after that it suddenly stops collecting log again, all the above points stays valid (service running, UDP Port...)
I have attached the LMS's modules versions installed on the server.
I was trying to add a 2504 to PI, but I keep coming up with this error in Unknown Devices: Collection Status : Unexpected error. [code]
View 4 Replies View RelatedUsually the configuration files are fetched once every week. Lately, the Scheduled Config collection job is failing for all the devices. I have tried to “sync Archive” from LMS 3.2 on some devices but nothing happens. The switches out there are C3750, 2960, 2950, 3550, 3650 and some routers.The server is Win Ser 2003.
[URL]
I reinstalled CiscoWorks LMS (Windows 2008 R2) updated th LMS with all availible devicepackages and imported all devices with a xml bulk import of the former installation. Now I am frustrated.... because after the reinstallation LMS has problems collecting the inventory data.The inventory collection for one local device (Cisco WS-C3560-8PC-S) starts and nevers stops.... I have to stop the ICserver to stop the inventory collection.
I have only 4 of nearly 1800 devices where it was possible to collect the inventory information.All the rest is supposed to unreacheable...Reports> Inventory>Management Status>Unreachable Devices.But if I take one of the devices which is reported to be unreacheable and do a device diagnostic (Monitor> Troubleshooting Tools> Troubleshooting Workflows) says it is reacheable...
The inventory does not appear in the "Collector Status"?
Data collection runs forever (since this morning). Also an reboot of the LMS server didnt work. Checked all processes and ani.log -OK. After reboot, the time stemp for Toplogy changed from 8:00 to "Not Available"
Inventory Collection24019 Apr 2012, 12:15 CEST
IdleScheduleConfig Archive24016 Apr 2012, 16:24 CEST
IdleSchedule
i have all of my music/ films on PC running windows 7 (might upgrade to 8) i would like to be able to browse my collection on a tablet (using it as a remote) and be able to play it through my stereo / tv. i would like this done with as few wires as possible none would be best im guessing i will need some from the pc to the stereo and tv
View 1 Replies View RelatedOn our CiscoWorks 2000 installation, running on Solaris with LMS3.2 and RME4.3.1, we noticed a few weeks ago, that the job "Inventory Collection" needs more and more time to finish. At the moment the job execution time is as high as 8 hours, compared to 3 hours before. When we look at the network traffic during job execution, we see after the collection phase (~3h) several hours with no traffic together with a very high CPU load. I mean to remember that this job used to complete around 15 minutes after data collection phase. Restarting the application and rebooting the system didn't work.When we look in to the IC_Server.log, we find devices with a completion time of over 20'000 seconds. Increasing from day to day. [code]
Affected devices are Cisco Nexus 5548P. We tried to delete/add these devices. That works for a few days, then the runtime starts to increase again.
Are we hitting a bug? And is it possible, as a workaround, to exclude devices from only the Inventory Collection?
I have an LMS 3.2.1 server running user tracking collection starting at 11:30am. We also use InterMapper to monitor switches. Right around the time UT collection is running, InterMapper starts to alert about "No SNMPv2c response".
View 1 Replies View RelatedWhen I do an Inventory Collection, the job doesn´t work with some devices and I have to restart the server. The job doesn´t fail but the log ICServer.log doesn´t got any information and it works for hours and hours and when it finally stops I can see that devices are not attempted.
I have done some succesfull Inventory Collections with Cisco 3750 switches and 805 routes. I have tried witch Cisco 2811 routers and 2950 and 2960 switches but it doesn´t work.
I have tried to update my LMS4.0.1 but it doesn´t find any actualization. However, in the Cisco download page there are some patches.
I'm currently experiencing some problems with LMS 3.1 where inventory collection fails on cat6500 switches running 12.2(33)SXI1, Sup720.
I have changed the SNMP timeout to 30 seconds.
we have the following problems with lms 3.2 on windows. Archive management and inventory collection fail.
The following messages we get:
DCMA0055: URN_NOT_FOUND : urn "JRM" : Not found !!
DCMA0077: Could not create job. Check dcmaclient.log for more details.
Someone recommend to remove the following files ctmregistry and ctmregistry.backup.Will this fix the issue?
I add 4510 and 4507 in zhe LMS ,but fault discovery failure.
View 7 Replies View RelatedI have 3560-24PS-S (ios version 12.2(35)SE1) that have high CPU (almost 100%) use at every inventory collection (each sunday) or polling (each day 6 a.m) during 2 or 3 minutes.
I read on the forum, that this could be due to some mib object polling failure, and could, perhaps, be solved by upgrading the ios version or configuring view preventing the poll of the problematic object.
But what view to configure ?Is there well known MIB objects to filter ? Which ones ? I did not see any bug related to my IOS version and this behavior in the bug toolkit ... I join some sh commands (unfortunately done when no problem). I will try to obtain the output of the sh command when the pb occurs.