Generating 540 Or 4624 Events
May 5, 2013
I've got a a customer that is using a single sign on product that uses agents installed on the customer's domain controllers. This works fine accept for one scenario. When the customer transitions from a wired to wireless connection or vice versa. We have determined the reason for this is that the DCs are not getting Windows logon events ie 540 on 2003 servers or 4624 on 2008+. The users have files shares mapped onto member servers but refreshing those is not hitting the DCs.
Any way to ensure hitting a domain resource generates a logon event on a DC without directly mapping a resource on a DC. If it matters there are 50 domain controllers and around 200 member servers spread all over 48 states.
View 7 Replies
ADVERTISEMENT
Apr 29, 2010
Does Cisco WLC 5508 runnig code 6.0.196.0 allows you to generate CSR? Or do you have to use OPENSSL like in previous versions?
View 16 Replies
View Related
Jun 19, 2012
I am unable to see the interface down alarms on my cisco works LMS 4.0 .
This problem is happening only for the Gigabit interfaces , i m receiving the alarms for the POS interfaces . The router status is showning as known .i have also added this interface in poller also .
View 1 Replies
View Related
Apr 10, 2013
We are using CISCO LMS 4.2.3 in our network in India, we are facing a issue regarding alarm generation for a protocol flap/down, especially when BGP / OSPF neighbourship got flapped.These flapping will result in the data service degradation , by which we came to know that some protocol flap may occurred at router end & then we go for the manual check by login into the router.After escalating the same to cisco we came to know that it is a bug of Cisco LMS. using any other method/technique to view the protocol down alarms automatically for cisco routers.
View 2 Replies
View Related
Feb 27, 2012
I have ACS 5.2 and would like to know if I can schedule a report to be sent to my email address each Sunday for example for all the failed and succeeded attempts for devices authentication.
View 3 Replies
View Related
Nov 16, 2012
I am attemtping to install new ssl certs on our 5.3 cluster. I was able to generate the CSR on the Primary host. When I attempt to generate the csr on the secondary host, I receive the following error:
This System Failure occurred: Error while remotely calling Primary to create: com.cisco.nm.acs.im.certificate.CertificateRequest Object{ request=[B@144cead, privateKey=null, encryptedPrivateKeyPassword=[B@5ce155, certificateSubject=CN=xxxx.xxxxxx.net, keyLength=2048, digest=SHA1, timeStamp=null, friendlyName=null, guid=[B@1cd99ca, description=null, name=xxxx.xxxx.net, version=0, id=0}. Your changes have not been saved.Click OK to return to the list page.
Both hosts are running identical versions:
Cisco ACS VERSION INFORMATION
-----------------------------
Version : 5.3.0.40
Internal Build ID : B.839
View 1 Replies
View Related
Jul 5, 2011
I've noted a number of traps reported correctly but with the wrong SSID in the detail on 7.0.116.0
View 1 Replies
View Related
Apr 10, 2013
We are using CISCO LMS 4.2.3 in our network in India, we are facing a issue regarding alarm generation for a protocol flap/down, especially when BGP / OSPF neighbourship got flapped.These flapping will result in the data service degradation , by which we came to know that some protocol flap may occurred at router end & then we go for the manual check by login into the router.after escalating the same to cisco we came to know that it is a bug of Cisco LMS. using any other method/technique to view the protocol down alarms automatically for cisco routers.
View 1 Replies
View Related
Jun 15, 2011
We have Cisco 3945 Router and generating crashinfo while firing PRI from this Router.
View 1 Replies
View Related
Apr 26, 2012
I configured the logging parameters on my Cisco asr 1000 , but nothing was sent to my terminal monitor
logging on
logging buffered debugging
logging buffered 5
[Code].....
View 7 Replies
View Related
Apr 7, 2013
i'am using csm 4.1 and i have configured the keep audit log for 30 days and the entries becomes older than the number of days specified in the keep audit log without deleting, i don't understand why this happend and how can i make shur that the purge is done. if the purge is automaticaly or i have to delete the oldest entries by my self.
View 3 Replies
View Related
Apr 16, 2012
We have LMS 4.2 installed and added devices;Now if for example a device is not reachable we get two messages with same failure ;only the component name is different
- one event with "dns" in component name
- one with "dns(ip)" in component name
dns == hostname
View 4 Replies
View Related
Sep 19, 2011
Recently I had came across 1 issue where one of the server IP had conflicted with VIP of Nexus core switch. The blade server was physically connected to Nexus Distribution switch which in turn connects to Nexus core. Neither Nexus core nor distribution had generate any logs in regards to IP conflict which ideally happens on Cisco catalyst switches. I haven't find any document on cisco as well as on internet for this issue . I dont know what logging need to enable on Nexus for this specific case . There are different logging levels define for every feature like hsrp, ip,monitor etc...
We have Nexus 7k with latest release 4.2(6) Software
BIOS: version 3.22.0
kickstart: version 4.2(6)
system: version 4.2(6)
View 5 Replies
View Related
Dec 19, 2011
What I want to do is be able to control my PC from my TV screen. I mean I want to be able to stream a live ball game or movie I have on my PC hard drive & see it on my TV. I heard about Roku & thought that is what I wanted or Blueray with DLNA. But Roku just pulls streams from subscriber sites like Netflix & Hulu. DLNA will allow you to view video you have on your HDD but will not let you stream live feeds like watching a live event that is streaming on your PC. Is there any hardware out there that will allow me to have whats on my PC screen on my TV screen via wifi (or other means)?
View 2 Replies
View Related
Nov 10, 2011
How do you monitor ASA firewall fail over events?
We had a firewall fail over, didn't know it, the configs were out of sync and the customer went down we want to avoid this is the future.
View 10 Replies
View Related
Jun 17, 2011
I read in the Cisco IOS ASA documentation (8.x) that some group-policy attribues are only available for soft-VPN clients while some are available for both soft-VPN clients and L2L VPN clients. Cisco didn't clearly specify which attributes were available for which clients.
To aid me in troubleshooting my L2L VPN setup could someone indicate if the order of events (listed below) is correct for ASA 5520 with IOS 8.x and if the attributes selected are available for L2L VPN clients?Also, are there "show" commands to reveal more details about tunnel-groups, group-policy, etc. when used with VPNs?
View 1 Replies
View Related
Apr 7, 2013
i'am using csm 4.1 and i have configured the keep audit log for 30 days and the entries becomes older than the number of days specified in the keep audit log without deleting, i don't understand why this happend and how can i make shur that the purge is done.
if the purge is automaticaly or i have to delete the oldest entries by my self.
View 1 Replies
View Related
Aug 26, 2012
I've just installed LMS 4.2, like it a lot so far. In the Fault Monitor, the Device Name column shows the device's IP address rather than the host name. We need for it to show the host name, for ease of troubleshooting; most folks don't have the IP addresses memorized. Likewise, when an email is sent out for an event, the managed device field also shows up as the device's IP address.
The devices were all discovered with their IP addresses rather than a host name...should LMS have automatically found their host names? Regardless, I manually updated all of the device's host names, yet they still display as an IP address in the fault monitor.
Also, it appears I need to figure out some way to throttle alerts. One particular device will report an event (ie a temperature out of range) dozens of times in a polling period...several per second, even though it's the same alert.
View 2 Replies
View Related
May 3, 2013
Region : UnitedKingdom
Model : TD-W8951ND
Hardware Version : V5
Firmware Version : 22.05.2012
ISP :
I have a TD-W8951ND v5 on the latest firmware.
I recently broke my broadband data cap which surprised me as I had not been using the internet much.
I only have tablet which I switched off having first checked the router to make sure there were no other wireless connections and adding MAC address filtering to be sure no one else was stealing my bandwidth. With just my router connected to the ISP, my ISP has recorded 170MB of downloaded data in 3.5 hours. Switching off the router stops the traffic being recorded (as you would expect), but when switched back on the large data transfers start up again.
I have plugged in an older router (not wireless) and no traffic is generated, so it seems to be the TP-Link router rather than my ISP or ADSL circuit that is at fault.
View 1 Replies
View Related
Jul 17, 2012
I have a Cisco ACS 5.1 virtual appliance which has been working fine, I have however just discovered that it is now unable to provide me with any logs. TACACS authentication is still working without any issues, the only problem I have is viewing the logs.
View 6 Replies
View Related
Jul 4, 2012
I faced with strange behavior of Cisco 2901.I strat ospf process on router, do some ospf manipulations and than turn off ospf with
R1(config)#no router ospf 1
But after that when I start to change my config: shut/no shut interfaces I see OSPF debug messages
R1(config-fr-dlci)#interface Serial0/0/0.5 point-to-point
R1(config-subif)#sh
R1(config-subif)#
Jul 5 12:33:13.004: OSPF EVENT Se0/0/0.5: Route adjust
R1(config-subif)#
R1(config-subif)#
R1#sh
Jul 5 12:34:15.076: %SYS-5-CONFIG_I: Configured from console by consoleip pro
R1#sh ip protocols
*** IP Routing is NSF aware ***
How it can be? Thereis no OPSF process on R1.
View 6 Replies
View Related
Jul 26, 2011
I've just taken over a new network with a Cisco ASA5520. Everything is working fine, except I am being bombarded with 106001 alerts from a few internal hosts to one specific internal host. The description in general is "Inbound TCP connection denied from 10.1.0.1 to 10.1.0.5 - both of those are valid internal hosts and the TCP ports are also valid. I tried looking at the log and getting it me to tell me which rule was causing these alerts, but it just came back with 'It's not possible for these type of alerts'
- How is it possible for the ASA to even pick up on this when, in theory, the source host wouldn't be going near the ASA since it's on the same subnet?
- What might be causing this?
- How can I turn it off!! (I guess that'd be fixed by point 2)
View 4 Replies
View Related
Sep 10, 2012
I just got my ea4500. the 50 Mbs from Comcast was killing my old wrt54gl. the thing where cisco connect and access thru the web interface step on each other, or when the web interface does not expose all the settings is annoying. because i didn't want a guest network, i had to go back to Cisco connect. and things did not work well. i ended up re-doing the whole thing, because i did not want a guest network and wanted diff settings for 2.4 and 5 Ghz.and logging after so many years and Linksys still does not include a date/time stamp for the events. logs without date/time are not very useful.
View 6 Replies
View Related
Oct 17, 2011
I am new to Cisco Nexus 7000 Series NX-OS System of appliances. I am looking for type of log events that are getting generated by CISCO Nexus 7000 switches. Some documents which give me this references & some documents which have a log line explained.
View 4 Replies
View Related
Jul 7, 2012
Add the ability to send syslog events to multiple syslog servers in the SA500 Series routers. I know the functionality is currently in the RV220W because we utilized it. It would be great if you could configure the syslog servers by event type as well. For example, being able to send the kernel events to syslog server A, and all other events to syslog server B.
View 0 Replies
View Related