when running Credential Verification Report, I get following notification: "None of the devices have credential verification data".I have made different Default Device Credential sets that I'm using when I add devices to LMS. I could not see wether this is bug in LMS 4.1 or if I have to do this a different way?
View 1 Repliesi get for all devices telnet credential failed in my credential verification report. I exported the device from the Device Manager into a csv file to verify the correct passwords.The export shows the correct values in
<DEVATTRIB Name="primary_username">cwuser</DEVATTRIB>
<DEVATTRIB Name="primary_password">secretpassword</DEVATTRIB>
I recently installed and configured the Prime LMS 4.1 Soft Appliance. After discovering the devices on the network I ran a credential verification check on everything. All of my devices passed accept for the Nexus 7010s and Nexus 5020s -- these show up in the failed device report with a BLANK value for SSH and "Did Not Try" under Enable by SSH. I have verified SSH is enabled and accessible outside of Prime, and that there are no access lists preventing access. All other tests pass for these devices.
I've also visited the troubleshooting workflow section for these devices, and when I test the connectivity, SSHv2 passes.
I've downloaded all of the updates available for the device packages and have tried other credentials. All other aspects seem to be working properly.
I have a problem when doing this report. If I do a device credentials report on a user defined group (40 devices) 11 of these devices fails to connect via SSH. I can make an SSH connection to all 11 devices from the CiscoWorks server, but 11 devices still fails on the report
Device Name Read Community Read Write Community SSH
1. 149.212.XXX.164 Ok Ok Failed to connect.
2. 149.212.XXX.153 Ok Ok Failed to connect.
3. 149.212.XXX.152 Ok Ok Failed to connect.
4. 149.212.XXX.151 Ok Ok Failed to connect.
5. 149.212.XXX.150 Ok Ok Failed to connect.
[code]....
I inherited a Ciscoworks installation, and would like to create a credential set for a certain class of device. However, after searching around the interface and documentation, I cannot find instructions on how to add a credential set with certain snmp, ssh, credentials. We use ACS authentication and authorization?
View 1 Replies View RelatedWe migrated to LMS4.2 and i created new credential set and set it as the default. However, the new cdredential set applies only to newly added devices no to the migrated devices. for example when i run device credential verfication for a migrated device, the username used my LMS is "cwuser" as opposed to the one i created with the new credential sets. how can i make this new credentila set be applicable to all devices?
View 3 Replies View RelatedI have a problem with my AnyConnect clients connecting to an AD network via a 5510. Anyconnect VPN clients provide AD plus a one time passcode to authenticate to the 5510. This works fine apart from 3 things:
1. Once the VPN session has been established the user is further prompted for AD credentials when accessing an AD share for the first time. Once they provide the credentials the share can be accessed. Should the AD credentials not be passed through when the VPN connection is established? Or is this by design? What makes me think it's not be design is the fact that this could be related to problem 2.
2. Group Policy Update (windows gpupdate) fails. This again suggests to me that the full client/server relationship is not fully in tact.
3. In order to get Outlook to connect to exchange I've had to change Outlooks security settings from Negotiate (which would naturally choose Keberors), to NTLM. Not sure if this is related or not.
Note: DNS is functioning with out any problems
Maybe the first 2 issues are by design, but I thought the whole idea behind the AnyConnect VPN was that the remote machine would function as if connected to the LAN?
I have a case for an LMS 4.0 running in a Live environement (With devices already discovered and organized into seperate groups), where the Device Credential and repository DCR is showing suddenly as empty and only i can see the groups listed, but without any devices in them (Through Inventory > Device Administration > Add/Import/Manage Devices).After a restart of the whole LMS server a few weeks ago, the problem was fixed and the devices appeared again, but now the same issue re-appeared.
View 5 Replies View RelatedI'm having issue with 881W router. this router doesnt let me logon to it after I restart the router and enter correct credentials. after being at the router - it doesn't let me logon to its AP module even after adding correct credentials. I've changed 2 routers so far but see same issue.
try to setup up credentials using: username <username> privilege 15 secret 0 <password> or username <username> priviledge 15 password 0 <password>
I am trying to install a digi cert on a 7921 and I get the message on import of "certificate verification failed".as there does not seem to be much documentation with the above error message.
View 2 Replies View RelatedMy Dell Laptop is connected to Wildbue via LAN connection to Broadband. January or February I connected Belkin Router to obtain Wi-Fi access for other laptops, Cell and PS3, Everything seemed to be working fine. I tried to disconnect the Dell in order to use it via Wi-Fi. This caused problems when my sons laptop lost connection. My guess was that it was actually routed through the Dell via network. Anyway, as I was working to network all correctly. My sons friend decided that he couldn't wait for internet and forced another laptop to login to internet. In the process, it appeared that he changed by router password so that I could not access it. Being a beginner when it comes to network connections, etc., I spent alot of time trying to correct the Belkin Router. I finally disconnected the router and attempted to remove all detail on my Dell. I am sure that my adapter information is not completely accurate. Or so it appears. Note that I do have LAN internet connection and I can search for wireless access. If necessary, I will reinstall the Belkin Router since it is my understanding that it is needed for Wi-Fi access to my internet provider connected via Broadband modem.
I am sure that there will be corrections. I am sure that there is more that will need to be done in order to provide access to other laptops and cells. At this time, I am getting internet on my main laptop that is connected via LAN connection. However, I am having problems understanding adapters for wireless connects.
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:Documents and SettingsPenis>IPCONFIG/ALL
Windows IP Configuration
[code]...
Recieved this unit from an individual who has very little knowledge (like myself) with the 800 series.
I'm having issues just getting into this device, when I power it on and console into the unit i am presented with an "Access Verification" prompt that requires credentials that I do not have/know.
At some point (not sure how) I managed to get to a "yourname#" prompt at which point I configured using this document here and created a username and password and some other basic settings, I saved the config and did a reload and it takes me right back to that "Access Verification" prompt.
Sould I be using the CCPE to gain access to this device instead? Is there a way to recover that "Access Verification" username and pass? How did I ever get to that "yourname#" prompt?
I'm trying to troubleshoot a problem with mpls fast reroute. The primary (protected) link is between PE-PE and the backup link is PE-P-PE. The IGP I'm using is OSPF. When there is a issue with the primary link and debug mpls tra tunnels signalling there is a message "LSP-TUNNEL-SIG: TunnelX [237]: re-route path verification failed (protected) [Can't use link x.x.x.x on node x.x.x.x]". After 30 seconds (without ospf tuning) the SPF is recalcalated, but that's not the point From the show mpls tra tunnels tu1013 (the backup one)everything looks ok:
Status:Admin: up Oper: up Path: valid Signalling: connected From show mpls tra fast-reroute database everything is ok, the status is Ready I'm using 7206VXR, Version 12.4(24)T3
I have a 6509E switch with dual 6Kw power supply that is logging "Power supply 1 input has changed. Power capacity adjusted to 2671.20W" then will bounce back to normal at random times from 1sec to 10sec. Is there a command to check what each input level of the power supply to try to identify possibly which source is causing the problem? The power supply input lights remains green while this is occuring.
View 3 Replies View RelatedWe plan to use machine certificates on our notebooks with Windows Vista. Our authenticating server is Cisco ACS 5.1. To access the wireless network we want to use the machine certificate of the notebook and a verification of the corresponding computer account in the Active Directory. What authentication method is the best to check the machine certificate and if in the Active Directory exist the enabled corresponding computer account ? How to configure the ACS and the notebook to use it like described ?
View 1 Replies View RelatedI'm trying to test port-security in my c3550 but when I show port-security int f0/23 shows it only "Disabled" as below:
run
interface FastEthernet0/23switchport access vlan 200switchport mode dynamic desirableswitchport port-security mac-address stickyspanning-tree portfast
Network newbie need to verify all necessary services and protocols on a new WS-C6509-E are turned on. This layer 3 switch will be used to connect to servers.
Cisco IOS Software, s72033_rp Software (s72033_rp-ADVIPSERVICESK9_WAN-M), Version 12.2(33)SXI9, RELEASE SOFTWARE (fc2)
[Code]....
I seem to get conflicting information on using the Management port as a regular routed interface on the ASA5510..The management interface can be used for the traffic that passes through the firewall as well. The Security Plus License for the ASA 5510 is required in order to use the management0/0 port as a regular interface. With a base license on the 5510, the management0/0 port cannot be used as a regular interface.
I believe that I saw another post that mentioned it was part of the standard IOS if you had a later version.
I'm new to CiscoWorks and I inherited the system in my new job. We are running LMS 3.2 and I want to run a report to see what versions of IOS that are running on the network.
View 3 Replies View RelatedUnable to run Eos/EoL report, I get error that my cisco.com credential are not valid, I verified my credential and they work fine. I'm running RME4.3.2 on Solaris 10.
View 3 Replies View RelatedI have cisco acs 5.3 appliance. Issue is, when i view tacacs accounting it only shows 100 pages of records. So first kindly tell me if this is the limitation of acs 5.3 to only show 100 pages. Secondly if i want to export the report of last 30 days, its also not showing the last 30 days.
How to get the report of last 30 days
I have an issue with rme 4.2 from LMS 3.1 When I try to generate a syslog report this shows me nothing. I locate SyslogCollector.log file and I see sometnig wrong.
View 4 Replies View RelatedIs it possible to run an uptime report using CWLMS 3.2 ?
View 2 Replies View RelatedI am using LMS version 3.2 and i am not able to generate EOS/EOL report with error no connection to Cisco.Saw an update i LMS portal as this:
Now Available! LMS 3.2:Patch for un-interrupted service of Cisco.com download for Device/Software/PSIRT/EOX updates (To be applied on or before 15-June-2011)
so upgraded the patch cwcs33x-win-CSCto46927-0.zip and restarted the demeon as read in the read me file for the patch.Now the job execution status is always shows running, its neither fail nor pass.
My customer recently deployed WLCs and WCS in their environment. However, recently they experienced slow performance. To futher finding out the root cause, I generated the 802.11 counters report from the WCS and noticed the following parameters is shown. Tx/Rx Fragment Count/Sec and FCS Error Count/Sec
1. Can I make the assumptions that the overall transfer of packet rate in that interval is the Total of Tx/Rx Fragment Count/Sec and FCS Error Count/Sec?
2. If the output rate of Tx/Rx Fragment Count/Sec and FCS Error Count/Sec are the same, does it mean that 50% of the packet are corrupted and this high FCA Error Count/Sec will cause performance degradation to the wireless througphput?
3. What is the baseline of the FCS Error Count/Sec that is acceptable? As for the case with wired, 1% error rate is acceptable. Will wireless have the same baseline?
I'm polling a few thousand locations using IP SLA, I have responder enabled on all destinations, and I'm using 60 byte voice packets with a QoS policy.When I run an IP SLA Summary availability report, I have a bunch of locations showing 9% availability 8.5% etc. When I go to the actual collector, and pull up a graph of the same time period, that graph shows 100% availability.
Same collector, same data, just different views giving completely different results. I have to assume that the IP SLA summary report is wrong, these sites were not down 90% of the time.
Just a random though to go with that, I do have the IP SLA to only pull information during the locations operational hours, and I did pull the report from midnight to 11am, the statistics should have been gathered for 4 hours of the 11, which is still higher than 9%, and I would expect all of my locations to report like that, not just a few hundred.
All of the devices are similar in hardware and IOS, and I have verified on a handful that IP SLA responder is enabled, and I see the connections, I have also verified the source configuration via command line.
I am running CiscoWorks LMS 4.0.1 since 6 months and I wanted to generate today a report about the interface utilization on 2 Cisco switches (Catalyst 3750G). The corresponding job is created, it runs and then i get "succeeded with info" in the "Run Status" column. When I want to click then on the "View Report" link, I get the following error: "Could not generate the report. Either data is not available for the specified duration or the report job failed."
I tried the same procedure with 2 other switches but I have got the same result.
We have a new 4507R-E Switch which RME keeps reporting as "CONFIG_CHANGE" each evening. When you click to see the change, the only thing that has changes is the "ntp clock-period".
However, we have configured "ntp clock-period" as an exclude command in RME Config Managment.
I need to understand why change audit report reports an unused username Name of the user who performed the change. This is the name entered when the user logged in. It can be the name under which the LMS application is running, or the name using which the change was performed on the device. #The User Name field may not always reflect the user name. The User Name is reflected only when: A config change was performed using LMS. #A config change was performed outside of LMS, but the network has username-based AAA security model, wherein authentication is performed by an AAA server, which could be TACACS/RADIUS or local.
View 2 Replies View RelatedJust looked at report after having upgraded to WCS 7.0. It is reporting that SSH is disabled. It is enabled on the controller. The timeout value was set to zero for telnet access. No indication was given that the telnet timeout value also affected SSH as well. I set the timeout value to a non-zero number and reran the task that generated the report. The Enable SSH line item on the report no longer shows up.
View 2 Replies View RelatedI have just started to discover the power of EEM and am already monitoring config changes on our switches with EEM.I would like to be notified of any interface going up and possibly down. on our 6509's and 3750's This is just to be aware of anyone patching anything in.
View 1 Replies View RelatedI am unable to generate bug summary report in RME. Even I can not generate PSIRT report as well..LMS always gives error "incorrect cisco.com credential. enter correct credential" I have checked my credentials are correct... it gives me error no BTKT:0014..I am using LMS 3.1 attaaching snap shot of my patch level and application version running on LMS...
View 3 Replies View RelatedWhen i am in report generator to create a unused up report i have any of my devices in the devices selector menu. This a same for all reports of the switchport menu. But for the other menu like inventory performance my devices appeard. I make a reboot of my server but no change. I'm looking the logs.
View 4 Replies View Related