Cisco :: VRF Collector Job Failing (LMS 4.0)
Nov 29, 2012My VRF Collector job has started failing. I have attached the contents of the vnmcollector.log file after setting debug level to DEBUG.
View 1 Replies
ADVERTISEMENT
AAA/Identity/Nac :: ACS 5.1 Log Collector Freezing
Oct 19, 2011I've noticed a problem with log collector on the secondary acs server. It suddenly stopped to collect logs.So, current acs version is 5.1.0.44.3 and all processes were running. During this time, ACS sent a couple of authentication reports in the monitoring system.But they can not be viewed through ACS Monitoring&Report system. The problem was solved by rebooting the server.
View 0 Replies View RelatedCisco :: LMS 4.2 Syslog Collector Doesn't Work
May 21, 2013my LMS 4.2, syslog collector on LMS doesnt working even service syslog collector running normaly and also i saw in syslog_info is working to collect syslog from all router but not show up in dashboard monitoring.I have setting on every router to logging (ip address LMS) but on LMS no any syslog from router can collect.i did a selftest from LMS there are all PASS except nslookup fail, it is has relation with syslog not show up on dashboard?
View 5 Replies View RelatedCisco Infrastructure :: Using Netflow On Cat 6500s With The NAM-2 As The Collector?
Feb 17, 2004Using Netflow on Cat 6500s with the NAM-2 as the collector?
View 7 Replies View RelatedCisco :: CiscoWorks LMS 4.0.1 And Remote Syslog Collector
Nov 11, 2012I'm using CiscoWorks LMS 4.0.1 and I need to activate a remote syslog collector.Installation occur without errors and the test subscription is fine but syslog reports are always empty!These two servers need to communicate through a firewall.I'm not able to define a correct rule, a "permit ip any any" does not work also!
View 1 Replies View RelatedCisco :: Integrate Remote Syslog Collector With LMS 4.1
Jul 7, 2012We have LMS 4.1 in our network. We had recently installed Remote Syslog Collector on a new Server to collect logs from all the devices. How can we integrate the Remote Syslog Collector with the LMS Server?
View 3 Replies View RelatedCisco AAA/Identity/Nac :: Upgrade To ACS 5.4 - Authentication Server And Log Collector
Jan 28, 2013We got 2 Cisco ACS 5.2.0.26.10.Primary server as authentication server and log collector.Secondary server as authentication server. Replication is configured. url..."There are some exceptions to this usual setup, which you can handle as described below: If the ACS 5.3 primary server also functions as a log collector in your 5.3 deployment, you should promote any one of the secondary servers as primary server in the deployment. See Promoting a Secondary Server to Primary "
This exception matches with my case. I have to promote my secondary server as primary.I would have :Secondary server as authentication server and log collector.Primary server as authentication server. I think I have to deregister secondary from primary server..According to the guide, I have to upgrade the log collector server. "Step 1: Choose any secondary server to become a log collector:" I dont have another secondary server..
Cisco :: LMS 4.2 Syslog Collector For Windows Server 2008SR2?
Jan 16, 2013Is there an .ISO file for installing on Windows Server20888SR2 ?
View 1 Replies View RelatedCisco :: No Source Devices In Wizard To Create Collector For LMS 3.2
Dec 29, 2011I'm trying to create a LMS 3.2 IPM Collector, but no source devices appears in the wizard.I have the Auto Mode Enable in the Auto Allocation Settings, and in IPM Devices I can see all my devices. ¿
View 2 Replies View RelatedCisco Firewall :: Flow Export From ASA5505 To Netflow Collector
Mar 21, 2013I have three ASA5505, two firewalls connected to central VPN hub. the central inside network is 192.168.0.0/24,Network A is 192.168.1.0/24,Network B is 192.168.2.0/24,In one of this site (central), I have server with NetFlow collector.,I will collect the traffic information from all ASA at the my one serverCan I configure source IP address (or source interface - inside) for NetFlow packet, originate from ASA? (for example from site A)If it is not possible I think, I can rewrite my access lists and permit udp traffic from outside interface to server IP like this:access-list VPNACL permit udp host <Outside IP site A> host <Inside IP the Server> eq 9996,But I do not understand, what port I must be use in access list on Central site ASA. ,access-list VPNACL_A permit udp host <Inside IP the Server> host <Outside IP site A> eq 9996 ? or, in this place, must be source port in the udp netflow packet?
View 2 Replies View RelatedCisco :: Can ASA 5510 Be Configured As Bridge Mode And Still Send Netflow Info To A Collector
Dec 4, 2012Can ASA 5510 be configured as bridge mode and still send Netflow info to a collector?ie have a PIX connect internal network to internet. Because PIX does not support NetFlow, as a temporary solution, we were thinking of putting an ASA 5510 between the PIX and internet gateway, and configure it as a bridge so that there will be no routing issues, and the ASA can still send Netflow info to a collector.
View 2 Replies View RelatedCisco :: Can ASA 5510 Be Configured As Bridge Mode And Still Send Netflow Info To Collector
Dec 4, 2012Can ASA 5510 be configured as bridge mode and still send Netflow info to a collector?We have a PIX connect internal network to internet. Because PIX does not support NetFlow, as a temporary solution, we were thinking of putting an ASA 5510 between the PIX and internet gateway, and configure it as a bridge so that there will be no routing issues, and the ASA can still send Netflow info to a collector.
View 1 Replies View RelatedCisco :: LMS 3.2 Job Browser Failing
Jan 13, 2011When I select Job Broser I get the following crash, LMS 3.2, server has been restarted but I continue to get the error. [code]
View 4 Replies View RelatedCisco VPN :: 891 - VTI Failing And Not Reinitializing
May 1, 2011I'm running a Cisco 891 it has both crypto maps and ipsec VTI's running on the external interface. The cryto maps are for sites that do not have a cisco router and the Tunnels are for the sites that use crypto maps work perfectly fine. But I much prefer using unnels as it gives a routable interface, ospf works ect.
The tunnel interfaces will periodicly fail (Line protocol down) at no set interval, they will then not come back up again. To bring them back up I either have to shutdown and then re-enable the interface or run "clear cry ses rem *.*.*.*"
Logging with isakmp and ipsec errors provides the following:
55801: *May 1 10:31:16.015: ISAKMP:(0):Can't decrement IKE Call Admission Control stat incoming_active since it's already 0.55802: *May 1 10:31:16.015: ISAKMP:
[Code].....
Cisco :: Boot From Tftp Failing?
Aug 5, 2011I've got a fully working 877w that I'm trying to get to boot from tftp, but I just can't seem to get that going.I have a tftp server running and can copy images back and forth without any trouble.I have this in my config:boot-start-markerboot system tftp c870-advipservicesk9-mz.124-24.T2.bin 192.168.1.200boot-end-markerDuring the boot process I get an error message that says there is a missing or illegal ip but I really don't see how that can be as my tftp server is 192.168.1.200 just like my config says.
View 16 Replies View RelatedCisco :: VPN Failing Between Two Pix Devices (DEBUG)
Oct 3, 2012My tunnel had been running fine for a couple of months. Now, not so much.Here is some debug.
View 6 Replies View RelatedCisco WAN :: 1921 IOS Upgrade Failing
Mar 31, 2013Any issues upgrading the IOS on a 921 router.How can i create a certificate for the new IOS? I've never had to do this for other IOS 15 upgrade?I've confirmed the IOS is not corrupt and if i upgrade the router in ROMMON the router boots correctly.
View 1 Replies View RelatedCisco Firewall :: ASA 5520 Not Failing Over
Mar 13, 2013Im preparing a lab and I have 2 ASA 5520's. I have configured them for failover so the Primarys config will replicate over to the Secondary. They are connected via a 3560 switch. the switch ports are configured as access ports on vlan 1. Spanning-tree portfast is enabled
Firewall (Primary)
Cisco Adaptive Security Appliance Software Version 9.1(1) Device Manager Version 7.1(2)
Compiled on Wed 28-Nov-12 10:38 by buildersSystem image file is "disk0:/asa911-k8.bin"Config file at boot was "startup-config"
[Code].....
Cisco :: LMS 3.2 Archive Management Failing?
Sep 4, 2011config collection is failing.in detail its partial success(config fetch is success but archieve is failed).
View 1 Replies View RelatedCisco :: 871 - LMS 4.1 Software Distribution Failing
Mar 20, 2012I'm currently unable to upgrade certain devices since Cisco Prime incorrect believes there is not enough room in the flash partition.For example.
Getting the following error messsage trying to upgrade some Cisco 871 routers: "Catastrophic - SWIM1200: Selected Flash partition requires minimum (28 MB) to upgrade selected software/image."The images are around 18 MB in size. Why does Cisco Prime thinks its 28 MB in size? Bug?
Cisco Routers :: Failing RV016 Or ISP?
Jan 22, 2010I have a rv016 that's been in 24x7 operation since I bought it a few years back. It is out of warranty. It is connected to three cable modems on WANs 1-3. Behind it are a bunch of PCs getting IPs via DHCP. There is a gateway to gateway vpn tunnel setup on wan3 to a rv082 at another site. There is a forwarding entry for http to an internal http server. Everything else is pretty much default.
The router is primarily used to aggregate bandwidth for uploading large numbers of photos. The systems behind the router initiate the uploads and the router automatically load balances the outgoing bandwidth.
This was all working fine until just recently. The ISP is Knology who is upgrading each of the 8m/768k cable modems to 25m/5m. They are also moving from DOCSIS 1 to DOCSIS 3. They are currently in the middle of this upgrade and have upgraded the modems to DOCSIS 3 as well as the speeds to 12m/2m. The problem is that the rv016 Network Service Detection, which is set to "Default Gateway" indicates that the modems fail randomly. Usually only one will be failed, but up to two will fail the Network Service Detection simultaneously.
Knology insists that there is nothing wrong with their modems. I have removed a modem from the rv016 when Network Service Detection indicates it is in a failed state and connected it directly to a computer. It will work, but it has a different IP address and default gateway. As soon as I connect it back to the rv016, it works there too, but on the original IP address and gateway. I've only tried this test this twice so far, so it is a bit inconclusive.
Speed tests behind the rv016 are the same as directly connected to one of the cable modems. The router works normally as it has for years. Nothing else is acting funny.
So my question is, is the rv016 failing or is the ISP having problems?
Cisco :: LMS 4.2 Backup Failing Randomly
Jun 4, 2012Backup failed on 2012/06/03 at 22:02:52. REASON: Unable to proceed with the backup operation as some files are being accessed by jobs. Reschedule the jobs such that the backup job does not coincide with other jobs.
Randomly the backup for lms 4.2 is failing. it has suceeded but majority of the time its failing. i have tried changing times but nothing seems to work. previously we were running 4.0.1 and had noproblems with the backup time.
Just found the bug
CSCtz29665
URL
SFTP Connection Failing?
Dec 4, 2012I set up a connection from a laptop (Windows 7) that goes through a LAN proxy server to a secure ftp server (Windows Server 2003).The sftp server is assigned a public ip address.I opened the firewall at the destination and allowed port 22 traffic to the sftp server. Well, the connection is failing.I know for a fact the connection from the client laptop is making it to the sftp server.If I issue this command on the client laptop:
telnet sftpserver 22
The DOS screen clears and tells me the type of SSH server I'm connecting to. While this connection is still active, I logged into the destination sftp server and did a netstat command. I can see the address of the proxy server in the "Foreign Address" column of the netstat results. I also can see the proxy server address when I look at the Application Log on the sftp server, so I know the connection is making it to the sftp server.
I beleive the problem is the control port (return traffic) from the server back to the client. Something is being blocked or is misconfigured. I always thought the router negotiated the control port, and that the control port didn't need to be put into any firewalls.
Internet Failing On Certain Devices?
Dec 16, 2012For everybody else in the house the internet works fine on their devices, however, on my laptop and ipod it will often not allow me to connect for ages, but then finally connecting (without me changing anything)
View 3 Replies View RelatedBrowser Keeps Failing To Recognize DNS
Oct 18, 2011I am able to use the lap top but not my desk PC.Browser keeps "failing" to recognize the DNS ? or my ports are blocked by a previous firewall ?
View 19 Replies View RelatedD-Link DIR-655 :: UPnP Failing In 2.07 And 2.10?
Jan 14, 2013UPnP seems to be failing somewhere between a few hours and a few days. It will work as expected for a while after starting or restarting the router, but then trying to create any new UPnP mappings will fail, and the ones that have been already created usually stop working. The commandline client upnpc fails to locate the router automatically, and manually navigating to http://192.168.0.1:65530/rootDesc.xml in Chrome returns a connection reset error instead of the expected XML device description.I turned on debug messages in the logs, but there doesn't seem to be anything useful in there (though they also seem to be flooded with a bunch of IPv6 mDNS network hopping, so I'm going to try disabling that for a while and see if that works). I did update to 2.10 and still had the same issue with UPnP, however my wireless network kept going down (I guess a known issue) so I downgraded back to 2.07. After the downgrade, I reset the router and manually re-entered all my settings (i.e. I didn't import them).
View 14 Replies View RelatedCisco :: Active Directory Authentication Failing?
Feb 16, 2012I am not sure why but when I try to connect with my IPSEC VPN client, authentications are failing. The ldap test passes on the ASA but when I try to login, the VPN client gives me authentication failure even though debugs show authentication was successful.User 'test1' should be able to authenticate based on group membership.User 'test2' shouldn't be able to.I already removed the attribute-map to see if that was the problem but I am still failing authentication.
View 9 Replies View RelatedCisco :: Identify The Point At Which A Connection Is Failing?
Jul 31, 2012I've got an application running on a Windows 2008 server that I have verified as live on port 8085 at localhost. I've also verified on the server itself that port 8085(and in fact, all ports) are open right now. Despite this, I have no connection to this port on the server. Let me back up a bit an explain the architecture I'm working with.windows_server >> Switch >> Firewall >> Firewall >> InternetEverything but my server is managed by my hosting company who is insistent that this is a server issue. Is there a way to find out at what point my connection to port 8085 is failing? I feel like it's stopping at one of the Firewalls but need proof of this theory to get something done about it
View 3 Replies View RelatedCisco VPN :: PIX 515e VPN To ASA Failing After Several Hours Following Upgrade?
Feb 13, 2011I've got a PIX 515e firewall on a branch site running version 7.2.4.7(LD) connecting via a VPN to an ASA at the HQ with 7.2.5 code running. After several hours it is no longer possible to ping either the PIX or hosts behind it on the branch LAN though the tunnel still shows as being up. In order to bring the link back up the local PIX has to be rebooted.The connection used to work with no problems when I was running PIX version 7.2.1 software but this had to be upgraded to 7.2.4 to support the new TCP normalization commands. VPN connections to other branch sites running PIX 7.2.1 remain active with no problems. The reason for the upgrade is to implement WAN acceleration between the sites however I still encounter this problem even when the WAN acceleration hosts are not installed.In addition to the software upgrade I added the following configuration to both the ASA and the PIX:
tcp-map wanx_tcpmap
synack-data allow
invalid-ack allow
seq-past-window allow
tcp-options range 28 28 allow
[code]....
The ASA originally had this code but the PIX did not and the VPN was stable, after upgrading the PIX and adding the code the link was no longer stable.
Cisco :: Ap1242 - Bridge Connectivity Failing
Jan 14, 2013I am having trouble getting the bridge to work. The setting is as follows: I have to buildings, separated by a road. Distance is apx 35-40 meters. From the main building there is a network which I am trying to extend to the other building by a wireless bridge. I am using two 1242 (autonomous) for this. I have also external directional antennas (7Db) mounted on a pole 8 meters above ground on each buildings. These are of course directed to eachother. The antennacabel used between the ap's are shielded Cisco-cables.
The config on the root AP:
dot11 ssid Valhalla01
authentication open
authentication key-management wpa version 1
[Code].....
Cisco AAA/Identity/Nac :: ACS 1113 SE Upgrade From 4.0.1.44 To 4.1.1.24 Failing
May 2, 2011we have a Cisco ACS 1113 SE running v4.0.1.44 and are trying to upgrade it to v.4.2.0.124 following the instructions to upgrade it to v4.1.1.24 first.
We are using the following CD "ACS SE Overall Upgrade CD ACS 3.3.4 and 4,1,1,24 Upgrades"
We can download the 4.1.1.24 image to the ACS appliance via distribution server but the upgrade fails- we obtained the following console output when attempted upgrade was tried;
Upgrade package was not verified
Applying this upgrade package may corrupt the appliance
Continue at your own risk!
[Code].....
Cisco :: LMS 4.2.3 Device And System Update Failing?
Jan 10, 2013I have upgraded to prime LMS 4.2.2 (from 4.0.1) and can not perform system or device upgrade. Using wireshark I can see why. it looks like LMS is trying to go to this old web [URL] to get software. I believe this was fixed years ago in bug CSCto46927.
Can I reapply bug fix CSCto46927 on 4.2.3 or is there another fix?
Cisco WAN :: 2600XM Failing With Booting / End Up Being In ROMmon
Feb 4, 2012I have recently bought a used 2600XM, I was trying to boot it, I get some errors and end up being the ROMMON mode:
ystem Bootstrap, Version 12.2(8r) [cmong 8r], RELEASE SOFTWARE (fc1)
Copyright (c) 2003 by cisco Systems, Inc.
C2600 platform with 262144 Kbytes of main memory
getdirent: bad file magic number, possibly out of sync
boot: cannot determine first file name on device "flash:"
[code]...