Cisco :: LMS 4.1 User Tracking Does Not Pull IP Address From Hosts?
Oct 25, 2011
New install discovered router and switches at same location with no issues. However when running an acquisition on those switches most fields are populated except the ip address of end host associated with port. Mac address, port speed, etc. but no ip address info on per port basis. Using snmp v3 if that makes a difference.
I have a problem with LMS 4.2 user tracking.When I generate a report on all my network all mac address are ok but there is no Hostname/Ip address in the result, except for 2 equipments.the only difference between these 2 equipements and the rest of the network is that they are connected on a not routed vlan. All the other phones, computers are connected on a routed vlan.I have a Nexus 5k as core and 2960 as access. Routing between vlans is done with the NexusMy DNS server is ok and reachable.
We are running LMS Prime 4.2.3 on a Softappliance. We have a Cisco Switch behind a Non Cisco Layer-3 Device. In the end host tabe we see only the MAC-Addresses of the host connected to this switch. No IP-Address. The corresponding IP-Addresses are in the ARP-Table of this non Cisco Layer-3 Device. The arp table can also be read by snmp. Is it possible to get the ip address in the UT End Host Table in such an environment?
I was wondering if it is possible to track and or log the changes that users make in in LMS 4.1. For an example if someone changed a configuration I want that being logged. I want to see what the person changed, when it's changed and who changed it.
what is the best way to do a acquistion on ip address on devices that appear to be dead until ping before LMS4.1 reports onn them. For example we run acquistion on a branch we do not see 172.20.12.51, howver we ping it from my desktop Claims unplugged when plugged in, and says "safe to remove" when I unplug the cableand then run user tracking and then it shows up.
I am trying to determine why hosts off our Nexus 7010s are being picked up in UT. Since LMS 4.0.1, UT should be supported on these devices.When adding the Nexus devices to DCR, provide the netadmin SNMP RO credential.When other SNMP RO credential is provided, user tracking will not collect end host data.I think I have this setup correctly as the device center test passes when cehcking snmp ro credentials.Our 7010s are running NX-OS 5.0(3) - earlier than the recommended version - might that cause issues? We are not using VRFs other than the default and management.
Here is my snmp section:
sh run | sec snmp ip access-list copp-system-acl-snmp 10 permit udp any any eq snmp 10 permit udp any any eq snmp 20 permit udp any any eq snmptrap
in LMS 4.1, under Monitor->Identity Dashboard, i have "user tracking summary" as a portlet, which tells me i have ~ 17,000 users. when i click the report, it pops up a screen that shows mac address, ip address, hostname, subnet, etc.
If i try to do ANY filtering, it returns 0 records. this could be from a specific IP, mac address, device name, or subnet. i have tried every type of record. every filter i attempt always ends with 0 records returned, even though in the unfiltered list they show up. It would be problematic to manually sort through 17,000 users looking for the particular records i need without the ability to use the filter.
how to filter the User Tracking report? is there some feature in LMS i don't own or have enabled to allow this filtering?
I have just got LMS 4.2 soft appliance up and running. When going to Inventory >> Acquisition summary, I get a HTTP 500 error with java. lang.Null Pointer Exception. That is obviously a bug somewhere (although the TAC engineer disagrees with me). I am just wondering if this is could have been caused by the fact that I have not done any user tracking on this LMS server yet? [code]
We are running LMS 4.3.2, it was running OK... but now we receive the following message:
"User Tracking Major Acquisition cannot be started as Network Topology, Layer 2 Services and User Tracking are disabled."
All processes are running. System restart and re-install the 4.3.2 update does not fix it. I think this happens after a device update, maybe FaultManagementDeviceUpdate...
I have an interesting problem at one of my customers. They are using LMS 4.0.1, but they have a problem with user tracking with SNMPv3. They using a very simple SNMP configuration, wich is the following: [code]
Now they have UT working well for their Ctalyst 4500 switches, and the half of the 6500s (They have 2950 switches as well, but for those UT with SNMPv3 is unsupported). So the problem is the following: they have 12 6500 switches, with the same IOS version (10 pieces of WS-C6506-E + SUP720-3B IOS: 12. 2 (18) SXF17 (IP Services), 2 pieces of WS-C6506 + SUP720-BASE IOS: 12.2(18)SXF17 (IP Services)). They have identical SNMP configuration on both devices. Based on the logs from LMS it seems that on the problematic switches for some reason LMS identifies the switchports as routed: [code]
I've another problem with our new LMS 4.0.1.We manage our devices with SNMP v3 but the user tracking don't want to work flawlessly.I've attached an example from our SNMP configuration. Basicly it's the same in our devices.
1st the problem was that no matter what I did the User tracking didn't want to find any host. I left it and worked on something else. After 2 weeks suddenly appeard couple of thousand end host.As earlier (LMS 2.6 or 3.2 with snmp v2) it is the same that LMS cannot differentiate normal end host and IP Phones although we have several thousand from both. But this is only one problem. The other is that there are switches with the same IOS and SNMP configuration and from one I get the UT data and from another one I didn't get anything. Only from some 4506 (aprox. 12-15) and 6506 (2) works and we have 20+ 4506 and 10+ 6506. Not to mention the other switches (couple of houndred 2960 and 3750).
For example:Switch 4506 send the endhosts for every VLAN that it has configured, except for one, but I can see that VLAN is configured over the switch.
are there problems directly with the connected endhosts over this VLAN or is it a problem about configuration for user tracking settings ?
I have a linksys router model#wrt54gt v1 and I can not pull up the router's ip address to change the security settings. I have checked and I have the correct IP address of 192.168.1.1. I can ping the router and everything hooked up to the router is now working correctly. I was having problem with the router losing the internet ip address and having to turn everything off and then back on to connect to the internet. I reset the router and it seems to have corrected that problem but I now can not pull up the router's ip address. I have tried in Internet Explorer and Firefox. I have tried typing thebefore the ip address but it will not pull up. I have read countless posts trying to trouble shoot and figure out what's wrong with it and nothing will work.
I have a user who is a work at home. She has an 871 Cisco Router with is connected to an ISP modem. Lately she has been getting connectivity issues. And a tech from the ISP troubleshooted it and said that the Cisco Router was not pulling an IP address. He said he queried the modem and got a null response on the IP address of the router. He cleared the ARP cace and rebooted the ISP modem; still the Cisco Router would not get an IP address. However when I went into the router, I noticed that there were many log alerts. It seems that the router is in quiet mode.
Code...
Would quiet mode cause the router to lose connectivity or cause to not pull an ip address?
I am using LMS 4.2 I have enabled user tracking and I am getting ip address, MAC address ,hostname in user tracking table . But username entry in user tracking is not getting populated . Even I have enabled get user name from the hosts in NTS and ND host domains in user tracking acquisition settings .Is there anything else that I need to configure in LMS in order to get the usernames in user tracking table?
I am experiencing an issue with end host being discovered on a cisco 4510. Anything connected to modules 9 or 10 are not discovered in User Tracking. The switch is running: Cisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSALK9-M), Version 03.02.01.SG RELEASE SOFTWARE (fc4).
I am using lms 3.2.1 and CM 5.2.2. I have even enabled ping sweep but the hosts IP never show on the user tracking report. I can not see any Available Subnets/Available Sources on Configure Subnet Acquisition and Ping Sweep windows. When I try to enable End host discovery on Trunks and click Show Trunks comes a message: "There are no Trunks in the device(s) selected", but every access device is connected to the nexus core via a Port channel:
I have an LMS 3.2.1 server running user tracking collection starting at 11:30am. We also use InterMapper to monitor switches. Right around the time UT collection is running, InterMapper starts to alert about "No SNMPv2c response".
Does Cisco have any plans to incorporate the CiscoWorks User Tracking Utility into LMS Prime 4.2 or any newer version of LMS? This tool is very useful in identifing where a computer or device is located on a switch. I know SolarWinds just came out with their own version of the User Tracking utility, and I am wondering if Cisco is going to continue on with theirs.
We are using Catalyst 3750 with 12.2(44)SE. We have two stack configured, one with IP routing enabled. When we try to run an Acquisition Action on IP routing enabled stack, from Admin> Collection Settings> User Tracking, the system replies with an error "Failed to start acquisition: Device unreachable. Please enter a valid device". Acquisition starts successfully when we try with the other stack. We are going to investigate!
I have a problem with User tracking. After a restart of the daemon manager or a reboot of the server the end host table is empty. All end hosts then have to be discovered again. is there any possibility to backup and restore the UT-Database?
We just deployed some Catalyst 3750X-48PF-L switches. I noticed that the user tracking report doesn't work normally.The switches have C3KX-10Gb NM modules, and all access port are 1 Gbit. But in the User Tracking report, I see devices found on Fa0/43 for example (this is because the previous switch was a Catalyst 2960. I deleted the old switch and add the new 3750X, so this could not be the cause of the problem).I installed all the patches that are available for LMS 4.0.1.
I am facing the following issue. In our environment we have a couple of WS-C2960S-24TS-L configured as stack. These switches are configured as VTP mode transparent.We are running LMS 4.1 and although UserTracking Acquisition works fine for all other switches, it only runs on demand for the above. The user tracking report for these switches shows only the MAC of the connected end hosts, without the respective IP address. The vlan I am interested in is configured on both the gateway (cisco 6509) and the switches, and the subnet is routable.Show arp on the gateway does show the "mac-ip address" binding, so I would have thought that usertracking would have been able to report both IP and MAC.
Why does usertracking only run on demand for the above switches in vtp mode transparent?Why does the UserTracking report show only the MAC and not the IP?Are the above issues related to the vtp mode? I have ruled out any connection to the switch-model, because we have recently installed the same switches in VTP mode client and User Tracking Acquisition works fine for them.
Using Custom Reports from Reports> Report Designer> User Tracking to create an end host report we get this error message: the syntax is not valid the system cannot find the path specified.
I have installed LMS 4.0.1 again. Now LMS is running on a Windows 2008 R2, 64 bit. Using Custom Reports from Reports> Report Designer> User Tracking to create an end host report I get this error message: "The syntax is not valid: the system cannot find the path specified". Anyway, the report is created but I’m not able to edit or delete: it is not listed on Available Custom Reports.
situation: LMS 3.2 Cat6509 w. 4 port 10 GE module connected with trunk to HP BladeSystem c7000 Enclosure with HP Virtual Connect Flex-10 10Gb Ethernet Module with #20 of ESX servers, Citrix
UT settings: "config trunk for end host disc. = enable on this trunk." No show for connected MAC's of the server and end hosts (Citrix sessions).
Note: this works well for a ESX based DL380 server connected with 1GB trunk to a C3750. Why is this not working for this Cat6509 configuration ? Is the 10 GE port supported in Campus manager?
my laptop has been stolen but I still have the box with all the details( Serial Number, MAC address for LAN and Wireless Product code etc) and I was wondering if there is any possibility in tracking it using for instance the physical MAC address.... I am sure that the thief reinstalled windows on drive C, as I was able to use and register my genuine copy of Win7 on a different laptop.
I have just started to use an ASA 5510 for my network. I use the DHCP server on it and after i made the change over to ASA hosts started loosing their IP address. This was not a problem before on my old firewall that aso had the roll of DHCP.
Is it possible that something is wrongly sett on the asa? All traffic is flowing normaly when this does not happen.
Information: Lease length: 172800 address pool: 134 addresses hosts: around 45 + mobile units 45