Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

IOS Version Policy

I thought this would be pretty simple. Trying to create a new Policy Report that will have rules for each device model we own. If those models don't have the correct/standard IOS version it will show as critical. Since a show run doesn't show the IOS version how can I create a policy rule to check for this?

Thanks

Find more posts tagged with

ios_cisco_policy_report_ncm

Accepted answers

All comments

CiscoHenk

Hi,

Use the following command in priviledged mode to see version software installed (works for Cisco routers, switches and firewalls):

show version | include Software

jeff.stewart

Not sure that is how the rules work in the Policy Reporter.

Thanks

jeff.stewart

Anyone from SW have a solution for this?

mkelly2

All you can get from a policy report is the major version (12.2, 11.1, etc)

If you need the exact software version you will have to pull that from an inventory report.

algeus

More than a year from the original post,and I would like to raise this issue again.

Trying to do the same - create a policy for every equipment type checking the up-to-date IOS.

Any suggestions/walkthrough on how to create the policy are most than welcome:)!

Thanks a lot in advance,

Alex

tattersfield

I was just recently asked to create a management report showing vendor, model, image, version, and then alert if a device with an image and version not in the report is detected. I came up with a static database that if the device is not at the exact image name and version then it would generate an alert. I used the NPM database instead of NCM because I found an issue if you do not sync the database you could have stale IOS image version in NCM.

With SolarWindsOrion as the NPM database name, I created a separate database named Network as to not modify the NPM tables or database.

The script below takes the latest IOS version and uses that as the baseline for the static database Network.

/******* Script Begin **********/

USE [Network]

IF EXISTS (SELECT * FROM sys.objects WHERE object_id = OBJECT_ID(N'[dbo].[NVOSS]') AND type in (N'U'))

DROP TABLE [dbo].[NVOSS]

USE [Network]

SET ANSI_NULLS ON

SET QUOTED_IDENTIFIER ON

CREATE TABLE [dbo].[NVOSS](

[SNOSID] [int] IDENTITY(1,1) NOT NULL,

[VendorName] [nvarchar](255) NOT NULL,

[VendorModel] [nvarchar](255) NOT NULL,

[VendorImage] [nvarchar](255) NULL,

[OSVersion] [nvarchar](255) NULL,

CONSTRAINT [PK_NVOSS] PRIMARY KEY CLUSTERED

(

[SNOSID] ASC

)WITH (PAD_INDEX = OFF, STATISTICS_NORECOMPUTE = OFF, IGNORE_DUP_KEY = OFF, ALLOW_ROW_LOCKS = ON, ALLOW_PAGE_LOCKS = ON) ON [PRIMARY]

) ON [PRIMARY]

USE [Network]

INSERT INTO Network.dbo.NVOSS

(VendorName, VendorModel, VendorImage, OSVersion)

SELECT LIOSV.Vendor, LIOSV.MachineType, LIOSV.IOSImage, LIOSV.IOSVersion

FROM

(SELECT DISTINCT MachineType, IOSImage FROM SolarWindsOrion.dbo.Nodes) DMTI

CROSS APPLY (SELECT TOP 1 * FROM SolarWindsOrion.dbo.Nodes WHERE Vendor!='Unknown' AND MachineType=DMTI.MachineType AND IOSImage=DMTI.IOSImage ORDER BY IOSVersion DESC) LIOSV

WHERE NOT EXISTS (SELECT 1 FROM Network.dbo.NVOSS WHERE LIOSV.MachineType=VendorModel AND LIOSV.IOSImage=VendorImage)

ORDER BY Vendor, MachineType, IOSImage

/********* Script End **********/

Create a new alert in Orion Advanced Alert Manage

On the "Trigger Condition Select "Custom SQL Alert, Node"

Your should see this under the non editable sql portion:

SELECT Nodes.NodeID AS NetObjectID, Nodes.Caption AS Name, IOSImage, IOSVersion

FROM Nodes

Add this to your editable portion:

WHERE NOT EXISTS (SELECT 1 FROM Network.dbo.NVOSS WHERE Nodes.IOSImage=VendorImage AND Nodes.IOSVersion=OSVersion)

Under reset condition:

Select Reset when conditions are met and add:

WHERE EXISTS (SELECT 1 FROM Network.dbo.NVOSS WHERE Nodes.IOSImage=VendorImage AND Nodes.IOSVersion=OSVersion)

Trigger action add new action NetPerfMon Event Log:

${Caption} OS is Nonstandard!

I also added an email:

/**** Email Begin ******/

${Caption} OS is Nonstandard!

OS Version is currently at:

${IOSImage}

${IOSVersion}

and should be at:

${SQL: SELECT VendorImage FROM Network.dbo.NVOSS WHERE EXISTS (SELECT 1 FROM SolarWindsOrion.dbo.Nodes WHERE Nodes.IOSImage=NVOSS.VendorImage AND SolarWindsOrion.dbo.Nodes.Caption='${Caption}')}

${SQL: SELECT OSVersion FROM Network.dbo.NVOSS WHERE EXISTS (SELECT 1 FROM SolarWindsOrion.dbo.Nodes WHERE Nodes.IOSImage=NVOSS.VendorImage AND SolarWindsOrion.dbo.Nodes.Caption='${Caption}')}

/**** Email End ******/

Reset action add new action NetPerfMon Event Log:

${Caption} OS is Now Standard!

Reset email:

/**** Reset Email Begin *****/

${Caption} OS is Now Standard!

OS Version is currently at:

${IOSImage}

${IOSVersion}

No further action is required.

/*** Reset Email End ***/

Once done you can use the Database manager to query the Network database table NVOSS and export the data to excel to create a management report.

SELECT * FROM [dbo].[NVOSS]

You should see an output similar to this below:

VendorName	VendorModel	VendorImage	OSVersion
Cisco	Cisco 2821	C2800NM-SPSERVICESK9-M	15.1(4)M4, RELEASE SOFTWARE (fc1)
Cisco	Cisco 2851	C2800NM-SPSERVICESK9-M	15.1(4)M4, RELEASE SOFTWARE (fc1)

Thanks, Let me know if this helps.