Problem downloading switches config in NCM

owllie1990

Hi all,

I was hoping someone who can assist me in this issue.

I have trouble downloading my switches config file which prompted me this error :

"no response using the specified credentials, TFTP host 10.XXX.XX.XX., Device IP XX.XXX.XX.X"

My tftp service is running. I was wondering what does the specified credentials means.

Thanks.

Find more posts tagged with

Accepted answers

All comments

ElDeeBee

The first thing to check is to go to your device in question.

Can you manually type in the tftp command and successfully transfer the config?

If not, the issue is on the device itself.

owllie1990

Can you assist in providing the steps in doing the tftp command that you advise as I am not someone who is expertise in network.?

thanks

cvachovecj

The problem is, different devices have different command syntax. We need to know at least the device type to help you.

Jiri

owllie1990

they are cisco catalyst switch..

thanks

cvachovecj

That's not enough ;-). We need to know the exact model.

Jiri

owllie1990

Its cisco catalyst 3750

thanks

cvachovecj

OK, the first thing to check are the login credentials. Are you able to log in to the switch manually? E.g. using putty? If yes then you must enter the same credentials in NCM. (Please consult admin guide to achieve that.)

Then I would go to Cisco pages, find documentation for your model (there are different 3750's) and find commands to show/download config. There are several methods how NCM can download the config.

Direct download -- NCM logs in to the device and issues command to list configuration -- typically 'show running' or similar. Then it grabs the output and downloads it.
Indirect download -- NCM logs is and issues a command to download the config via TFTP or SCP in form of a file. You need to know the exact syntax how to do that.

The first method is much simpler to configure, so I recommend using it unless you have a serious reason to use TFTP/SCP.

Please post one of the download commands here and I'll guide you further.

Jiri

owllie1990

Hi,

Yes I am able to putty into the switches itself and I have entered the exact credential in NCM.

do you mean by logging into the switches itself to test whether I can download the config?

Thanks.

cvachovecj

No, I just want to make sure that NCM can log in. The best way to be sure is to validate the credentials in Win32 client:

You'll also find here the System OID. This is important to identify the device and we'll need it later.

Jiri

cvachovecj

In the meantime, if you want to understand a little bit more how NCM downloads the configs, it's worth checking this post: .

owllie1990

this is what i got.. i can login to the switches with the credentials. however when i try to validate the login information with the same credentials, it prompted this error

cvachovecj

OK, so as suggested above, enable session tracing (File -> Settings) and then try to download the config. You will find the traces (log files) in NCM directory in Program Files. Take a look at the trace and/or post it here.

Jiri

owllie1990

[7/19/2012 6:03:49 PM] -----------------NCM 7.0.2 -------------------

[7/19/2012 6:03:49 PM] UseCustomMorePromptBehaviour: False

[7/19/2012 6:03:49 PM] Login Attempts: 1

[7/19/2012 6:03:49 PM] Custom UserName Prompt:

[7/19/2012 6:03:49 PM] Device Template: Cisco IOS-1.3.6.1.4.1.9.ConfigMgmt-Commands

[7/19/2012 6:03:49 PM] System Name: PSW01

[7/19/2012 6:03:49 PM] System Description: Cisco IOS Software, s72033_rp Software (s72033_rp-ADVIPSERVICESK9_WAN-VM), Version 12.2(33)SXI5, RELEASE SOFTWARE (fc2)

Technical Support: http://www.cisco.com/techsupport

Compiled Sat 23-Oct-10 10:39 by p

[7/19/2012 6:03:49 PM] System OID: 1.3.6.1.4.1.9.1.283

[7/19/2012 6:03:49 PM] OS Image: s72033_rp-ADVIPSERVICESK9_WAN-VM

[7/19/2012 6:03:49 PM] OS Version: 12.2(33)SXI5, RELEASE SOFTWARE (fc2)

[7/19/2012 6:03:49 PM] Menu-Based mode=False

[7/19/2012 6:03:49 PM] FreezeLoginForPreCommands mode= False

[7/19/2012 6:03:49 PM]

-->StateChange: Connecting to server<--

[7/19/2012 6:03:50 PM] Solarwinds.Net SWTelnet9 Version 9.0.27

[7/19/2012 6:03:50 PM] Connected!

[7/19/2012 6:03:50 PM]

-->StateChange: Disconnected from server<--

[7/19/2012 6:03:50 PM] Disconnected - From: 10.217.28.1

[7/19/2012 6:03:50 PM] -----------------NCM 7.0.2 -------------------

[7/19/2012 6:03:50 PM] UseCustomMorePromptBehaviour: False

[7/19/2012 6:03:50 PM] Login Attempts: 1

[7/19/2012 6:03:50 PM] Custom UserName Prompt:

[7/19/2012 6:03:50 PM] Device Template: Cisco IOS-1.3.6.1.4.1.9.ConfigMgmt-Commands

[7/19/2012 6:03:50 PM] System Name: PSW01

[7/19/2012 6:03:50 PM] System Description: Cisco IOS Software, s72033_rp Software (s72033_rp-ADVIPSERVICESK9_WAN-VM), Version 12.2(33)SXI5, RELEASE SOFTWARE (fc2)

Technical Support: http://www.cisco.com/techsupport

Compiled Sat 23-Oct-10 10:39 by p

[7/19/2012 6:03:50 PM] System OID: 1.3.6.1.4.1.9.1.283

[7/19/2012 6:03:50 PM] OS Image: s72033_rp-ADVIPSERVICESK9_WAN-VM

[7/19/2012 6:03:50 PM] OS Version: 12.2(33)SXI5, RELEASE SOFTWARE (fc2)

[7/19/2012 6:03:50 PM] Menu-Based mode=False

[7/19/2012 6:03:50 PM] FreezeLoginForPreCommands mode= False

[7/19/2012 6:03:50 PM]

-->StateChange: Connecting to server<--

[7/19/2012 6:03:51 PM] TimerTick: mstrData=<> State=1 - Connecting to server

[7/19/2012 6:03:51 PM] Pending Disconnect = False

[7/19/2012 6:03:51 PM] TimerState not Idle, Leaving.

[7/19/2012 6:03:51 PM] Solarwinds.Net SWTelnet9 Version 9.0.27

[7/19/2012 6:03:51 PM] Connected!

[7/19/2012 6:03:51 PM]

-->StateChange: Disconnected from server<--

[7/19/2012 6:03:51 PM] Disconnected - From: 10.217.28.1

[7/19/2012 6:03:51 PM] -----------------NCM 7.0.2 -------------------

[7/19/2012 6:03:51 PM] UseCustomMorePromptBehaviour: False

[7/19/2012 6:03:51 PM] Login Attempts: 1

[7/19/2012 6:03:51 PM] Custom UserName Prompt:

[7/19/2012 6:03:51 PM] Device Template: Cisco IOS-1.3.6.1.4.1.9.ConfigMgmt-Commands

[7/19/2012 6:03:51 PM] System Name: PSW01

[7/19/2012 6:03:51 PM] System Description: Cisco IOS Software, s72033_rp Software (s72033_rp-ADVIPSERVICESK9_WAN-VM), Version 12.2(33)SXI5, RELEASE SOFTWARE (fc2)

Technical Support: http://www.cisco.com/techsupport

Compiled Sat 23-Oct-10 10:39 by p

[7/19/2012 6:03:51 PM] System OID: 1.3.6.1.4.1.9.1.283

[7/19/2012 6:03:51 PM] OS Image: s72033_rp-ADVIPSERVICESK9_WAN-VM

[7/19/2012 6:03:51 PM] OS Version: 12.2(33)SXI5, RELEASE SOFTWARE (fc2)

[7/19/2012 6:03:51 PM] Menu-Based mode=False

[7/19/2012 6:03:51 PM] FreezeLoginForPreCommands mode= False

[7/19/2012 6:03:51 PM]

-->StateChange: Connecting to server<--

[7/19/2012 6:03:52 PM] Solarwinds.Net SWTelnet9 Version 9.0.27

[7/19/2012 6:03:52 PM] Connected!

[7/19/2012 6:03:52 PM]

-->StateChange: Disconnected from server<--

[7/19/2012 6:03:52 PM] Disconnected - From: 10.217.28.1

cvachovecj

You said you were able to connect to the switch using putty. Did you use telnet or SSH? Because the session trace shows telnet.

owllie1990

i use ssh... so should i change the settings to ssh when downloading the config from ncm?

cvachovecj

Yes, exactly!

owllie1990

I noticed that there are SSH1, SSH2, SSHAuto in the settings. Which one do I choose? And what is the difference between these settings?

cvachovecj

These are different versions of SSH protocol. Try SSHAuto first; if it doesn't work, try SSH2 and SSH1.

Jiri

owllie1990

It says that connection refused. I tried to validate my login also but it prompted me error.

cvachovecj

That's strange. Maybe re-enter the device credentials so that we are sure, there is no problem with them.

owllie1990

I tried but it is still giving me this error.

mvankleij

It appears that the switch is blocking connections. It might be an access list on the switch itself. Dit you try logging on to the switch from the same server as where NPM is running, or did you try it from another server/desktop?

owllie1990

Yes i am able to log in from my desktop

mvankleij

Yes, but the question was whether you're able to log in using putty from the NPM server. If not then it's probably blocked by the switch using an access-list.

Unless your desktop and the NPM server are the same, in that case I haven't said anything :-)

cvachovecj

I've checked our customer DB and your organization has a maintenance agreement for NCM. Therefore I suggest opening a support case because this would be the most effective way to solve the problem. You can then post the result here so that we all know what the problem was.

Regards,

Jiri

owllie1990

Initiallly the reseller support was suppose to assist us in logging a ticket, but till now he seems to be missing in action. Hence I brought it up to the forum. But thanks for the advice, I have just submit the support ticket. Will do update the results here once it is solve.

owllie1990

Hi all,

The problem cant be solved as my switches is using access class, and the ip address of solarwind was not included in.

However, if I was to include it, it will defeat the security requirements.

Hence, there isn't any way for Solarwind to bypass the access class to authenticate with the switches.

cvachovecj

Do I understand you correctly that there is nothing on SolarWinds side that can be done?

Regards,

Jiri

owllie1990

Hi Jiri,

Yes, that was the message that was convey to me due to the access-list configured in my switches, and that there is no way solarwind could bypass the access-list.

Thanks.