andy_h

Comments

  • I could be mistaken, but I believe in version 10 of the F5's the command line to backup the configs is: tmsh show running-config all-properties
    in Testing my F5 backup file Comment by andy_h April 2013
  • I think the best way to tackle this is to use the Policy Reporter. Using the Policy Reporter Application on the NCM server, you can follow the wizard to create a policy that will notify you which devices do or do not contain that line. Once that is complete you can then create a remediation script that can quickly make…
    in How to conditonally add a ACL entry with NCM Comment by andy_h June 2013
  • John, I believe you can create very specific ignore rules that will do this. Try adding these rules: ^interface Vethernet7 ^inherit port-profile SYSTEM-VLAN301 ^description UOS-BBAS-03,Network Adapter 1 ^vmware dvport 3250 dvswitch uuid "56 7d 0d 50 91 52 54 fc-77 36 65 dd 2c 7f 54 05" ^vmware wm mac0050.568D.059E These 5…
    in Config comparison with Nexus 1000v switches Comment by andy_h May 2013
  • NCM cannot currently differentiate between the commands that are entered for an execute command script. Since you are using config change approvals, all execute commands scripts, even show commands, have to be approved. I would open a ticket with support and ask them to add this as a feature request.
    in Can "request approval" be bypassed for certain scripts, for scripts which dont change any config ? Comment by andy_h April 2014
  • Are the missing lines always occurring after a certain line in the config? If so, it's possible that the device config has a piece of text such as description or a line somewhere in it that contains something like: DeviceHostname# Which NCM tends to confuse as being the device prompt when gathering the config via telnet or…
    in NCM downloading incomplete configs Cisco routers Comment by andy_h April 2014
  • I would be interested to see the settings for your Config Change report Job. If you set it to compare changes made between specific dates, it would continually run the same report, and give you the same results. It is probably better to compare either to the last downloaded, or to have the job only show changes made over…
    in Config Change Report is always the same Comment by andy_h May 2013
  • For that many nodes you should be ok to put SQL on the same server as NCM. That is provided that you are installing NCM in a standalone deployment and not integrating it with NPM. According to the NCM Admin guide the minimum requirements are for a dual core 3GHz cpu with at least 3 GB of ram and 20GB of free disk space.…
    in MINIMUM NCM SERVER SPEC Comment by andy_h July 2013
  • That error of "No devices to run job on this engine." This is a known bug with NCM 7.2 and 7.2.1: This bug is resolved in 7.2.2.
    in Executing scripts with NCM Comment by andy_h April 2014
  • This can be done, but it's complicated. There is no simple solution. You can only set a single TFTP server address. You could set the TFTP server address as the public IP for all TFTP transfers. This might resolve the issue for this one device, but it could prevent other devices from sending configs. Alternatively you…
    in SNMP configs pulls using SNMP/TFTP to a device on the outside of the firewalls. Comment by andy_h April 2013
  • Typically syslogs are a bit easier to config for realtime change detection. Once you have configured the device to send syslogs back to the Orion server, you need to identify that these devices are actually sending a unique syslog message only when the config change has been made. For example on the Cisco IOS devices, only…
    in I need to get real time change notifications for our Juniper Netscreen firewalls. Comment by andy_h April 2014
  • I believe you can get the job to save the results from each node in an individual file. The way to do this is actually under the "Notifications" tab when scheduling the job. If you select "Save Results To File", it will prompt you by default to save the files to C:\Program Files…
    in Executing Script in Schedule Job Comment by andy_h April 2013
Avatar