i am currently trying to use LMS 3.2 Compliance management to verify and alter our access port configurations for 802.1x. Below is our current configuration
View 1 RepliesI'm having a hard time getting Compliance Manager to accept a "banner login" command I'm attempting to use on 6500 IOS switches. I've edited the template, tried cut-&-paste, looked for the archive file on the server to directly modify it (without success), among other things. I have this feature functioning correctly on CatOS switches, but can't seem to get it properly set on IOS switches. What's the limit, as far as the template is concerned, on the number of characters with this type of command? Where are the archive configs located on the server; in the "shadow" directory?
View 1 Replies View Relatedworking with a trial version of Cisco Prime 1.2. I am looking for a Configuration Compliance tool. I used it in Cisco Works LMS - but I dont see a way to do the same thing with Cisco Prime.
View 1 Replies View RelatedWe were having a discussion in my group about startup vs running configs, and how often some network managers forget to "click save" when they configure a switch. Is there a way to configure Ciscoworks to copy the running config to the startup?
View 2 Replies View RelatedMy cisco works LMS3.2 is not showing recent configuration of my Cisco devices. also it dont show any change report on last 24 hours or even if i select x number of day, looks like its not saving any changes made on devices.
today i logged in and cisco ASA was showing this in status as well Configuration Last Archived Time May 03 2012 11:27:46 EDT on checking i could see it is same date when cisco ASA was added in cisco works. do i need to click some where for auto update configuration changes and latest confoguration in cisco works setting?
I have a problem with System-defined Link Port Interface Utilization Poller. When I generate Interface Utilization Report, this one just displays few Interfaces (see the figure in my attachment). I checked the default poller for interface utilization and recognize that it just associate with few Interface (same as in Interface Utilization Report) instead all. I need to display the utilization of all interfaces in my report
Is Link Port Interface Utilization wrong or Is it necessary to creat user-defined poller that associate with all interfaces of devices?
I have an all gigE 3560. I don't use the management FE0 port on the back. I was thinking to use that for a 100Mbps WAN connection.
Seems to work just fine when I plugged in an test. But I am not routing across that link yet as I still need to setup the far end.
Is there any reason this would not work? I would like to not burn a gig port if the max throughput of the circuit is 100Mbps.
I have got ASA 5520. How to use the management port as a normal port on ASA. What are the basic reqirements for that.
View 3 Replies View RelatedI'm using LMS 4.0.1 (current patches and device packages)
There is a problem with the configuration fetch.There are some 2503 routers with IOS 11.3(6) and the message on LMS is: Couldnot enter ENABLE Mode from USER Mode on Device
The devices arn't configured with username, only telnet pw and enable pw; no access-lists or other limitations configured
The credential check is ok ... multiple checks done ... devices deleted, new discovery ... devices deleted and manually added .... with the link //serverip:1741/rme/rmedevices.do I've changed the timeouts multiple times (up to 60 seconds for TFTP, SNMP) .... all these have had no effect of the config fetch
I need to archive the configuration for the devices but it states that SSH fails to authenticate although I have checked the credentials many times.
View 1 Replies View RelatedI would like to configure a Management ip address on 6500 by giving ip to the SVI. Following is the configuration done
1) int vlan X
ip address 10.1.1.1 255.255.255.0
no shut
However i am not able to reach this Switch IP from other subnet's. for ex:- 192.168.1.0/24.What next configuration should be done, in order to make this work. I dnt want to use any routing protocol.
in lab trying to run a test upgrade of an Ace30,can seem to get it right ace30 is in slot 1 of the 6500, management vlan 10
View 4 Replies View RelatedI am just going to deploy some new 4900Ms for a customer. Want to know if configuring management for 4900 (everything like NTP, AAA, SNMP , DNS ) is doable through management interface in management VRF and there are no caveats to be aware of.
View 1 Replies View RelatedI am working to configure AP541n AP, is able to connect to the AP wired, assign AP static IP with proper subnet mask & default gateway, when it's done, everything looks perfectly, but since I changed the management VLAN ID from 1 to 2, I can't even connect to the AP wired from the PC, why does the change matter?
View 2 Replies View RelatedI am looking at management (backup of the configuration) of the ACE 4710 running A4.1, the management software is Cisco Cirrus. The question I have is around the management of the context's, I have a backup of the Admin but would like the user context's also, how this is completed.
View 3 Replies View RelatedI am just going to deploy some new 4900Ms for a customer. Want to know if configuring management for 4900 (everything like NTP, AAA, SNMP , DNS ) is doable through management interface in management VRF and there are no caveats to be aware of.
View 1 Replies View RelatedI've got a new 5508 wireless lan controller and can ping the ip address of the management interface, but can't access the GUI at the management interface's ip address. I can access the GUI on the service-port interface. No static routes in the controller; trunk appears to be set up correctly.
View 5 Replies View RelatedI saw that the management port for the ASR 1006 has limited routing functionality according to the documentation. I know it "may" not be best practice but can I use this as a routed interface for the WAN port to our Internet or will this not work?
View 2 Replies View RelatedI have interfaces defined on the 5505:
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
[Code].....
I only need one interface to connect to a single host on the inside (VLAN1) and then connect E0 to a DSL.
Is it possible (are what are the commands required) to take one of the other interfaces and create a Management port on the local office LAN?
I just purchased 2 SF-300 48 port units for 2 customers. I want to be able to remotely manage them over the Internet with my browser. BUT, customer sites already use port 80 for web servers. So, how do I configure this switch to use some other port than 80?
I called support, and much to my surprise he said it cannot be changed. How bizarre that a device with many hundreds of configuration settings does not have one of the most basic settings...
At one customer site I can configure port forwarding and translation to get around this problem, but the other site's router does not offer port translation..
I'm having an issue with the 5508 management port .. I can't seem to ping it from the switch connected to it .. ( the Show cdp command shows that the two can see each other .. but no ping is possible ! [code]
View 4 Replies View RelatedIs it possible to use the mgmt port when in rommon mode? I use the Mgmt port when IOS is loaded and it works fine. I reboot the router, issue a break to put it in rommon and have set some variables but my Mgmt port never has link and I cannot ping it from the network. In rommon mode it looks like this:
PS1=rommon ! >
MCP_STARTUP_TRACEFLAGS=00000000:00000000
BOOT=bootflash:asr1000rp1-adventerprisek9.03.07.03.S.152-4.S3.bin,1;
IP_ADDRESS=10.71.50.101
IP_SUBNET_MASK=255.255.255.0
DEFAULT_GATEWAY=10.71.50.3
BSI=0
RANDOM_NUM=1133006948
RET_2_RTS=13:38:27 EDT Wed Jun 5 2013
RET_2_RCALTS=1370453907
?=0
How does the IP address is assigned on management port of WS4507 R, syntax.
View 2 Replies View Relatedis it possible to Manage the 2504 Controller over a separate Interface. Exmaple: Port 1 is used as controller management interface (untagged) - AP's are connected to the same VLAN Port 1 is used for Guest Traffic (VLAN 3 tagged) Port 2 should be used to manage the WLAN Controller from the internal LAN. (tested with untagged, tagged, same issue)
with this Setup it is possible to ping the Port 2 IP-Address from the internal LAN but if you try to connect to the controller, the Browser shows "Site not reachable".
I also enabled "Management via Wireless" but without success. I also tried to add the "management" VLAN as tagged on the management Interface with the same effect, the controller is not manageable from the internal LAN. On 5508 WLAN Controller i have an similar setup, but with LAG Port enabled. There this works.
The only interface were i can manage the WLAN controller is from the management Interface.
It's a problem about access ASA5500 Firewall mangement port. The customer request access ASA5500 by entering the default IP address https://192.168.1.1 to monitor data tracffic in Windows 7. But after entering the default IP in IE, no any page appear.
But that way can access ASA5500 magement port successfully in Windows XP. What the different between Windows 7 and Windows XP? Is there any way or any patch can access ASA5500 manemeng port in Windows 7?
Is there some kind of trick to getting the fastethernet 0 management port to come up? My adjacent switch is up/up, but fe0 is down/down. I dont' see how this could be possible. I am getting all my info remotely, but I am pretty sure it's wired up correctly.
View 2 Replies View RelatedI have a brand new RV042 v3 that I just updated to the latest firmware (v4.2.1.02) and have stumbled across an anomaly... I can only access the router from the WAN port using port 80. I happen to have it set to port 8080, but that doesn't work; I have to use standard port 80.
I have two other RV042 units running older firmware and they work as expected and follow the port that is filled in. This one has me puzzled and wondering if this is a bug in the firmware.
I've got a client with a Management Port set up for Out-of-Band management. Here's the configuration of the interface and some relevant static routes:
interface Management0/0
description MGT
speed 100
duplex full
nameif Mgt
[code]...
The route through Mgt interface is required as my client accesses the device from a subnet that isn't local to M0/0.Unfortunately, now any traffic originating from outside and destined to 10.48.0.0/16 is choosing the Mgt interface. I had thought that the 'management-only' keyword prevents this from happening (traffic traversing between interfaces).
There is a broad scope of /16 addresses on the 'inside' so just swapping destinations won't work (the client wants to avoid a routing table with 50+ static entries, understandably)My temporary solution was to do this:
route inside 10.0.0.0 255.128.0.0 10.38.103.1
route inside 10.128.0.0 255.128.0.0 10.38.103.1
route Mgt 10.0.0.0 255.0.0.0 10.38.100.254
If 'management-only' doesn't prevent traffic from using the Mgt interface, what is the point of the command?
I have a cisco 6509 configured with a cisco NAM module. I have reset the config of the NAM module by the config clear command. Since this moment I can't no more ping the NAM module via the management port: OK via the 127.0.0.91 address and log in ok via the ios cli session command. [code] I have already tried to reboot the module via the ios cli hw module command and nothing better.
View 12 Replies View Relatedrecently got a RV220W and liking all the configuration options.
Although I cannot find where to change the listening port for management? I want it to listen on port 81 instead of 80.
I have 2 x 5508 Wireless Controllers, 1 mgmt port on each as standard. I noticied something different between these controllers running the same code.I can bound a physical port to the mgmt interface on one controller but not the other (both interfaces are untagged)see below, this config appears on one controller but not the other? Is this something to do with the initial setup? How can I add Phyiscal information to the other controller mgmt interface, I cannot delete the mgmt interface. Physical InformationPort Number Backup Port Active Port Enable Dynamic AP Management?
View 2 Replies View RelatedWhat is the point of it? It is not a remote console. If i reboot the switch i cannot get back to the out of band management port unless the switch is fully running. Is this only for security purposees? so all telnet/ssh is from an Out of band network?
View 15 Replies View RelatedWe recently reset a 4400 controller in a school. Although all access points associated, clients could not get the Internet. On investigating we suddenly lost connection to the web interface. We tried hyperterminal connections to reset, but found that the managament interface had the ports "unconfigured". We finally reset the configuration, and when we tried to start from scratch it now does not allow a port designation. It asks for 1 or 0 but says both are invalid when entered.
View 2 Replies View Related