cnorborg · Network Professional IV · ✭✭✭✭✭

Ok, very important info that.. Now the Rogue MAC Address is much trickier in that it's not so easy to get to the Nodes table. Couple that with you trying to nest SQL "escapes" or defined SQL variables within other SQL "escapes" and I think you had a couple different problems going on. So, first off, stop trying to do the…

Well, there is no PIVOT function in SWQL, that being said, this discussion had a possible solution. Bit complex but if you really want it... PIVOT function with SWQL?

So, when you say redundancy wireless controller, is that in a failover mode where it doesn't become active until the primary fails? Usually if its this way, there will be a VIP (virtual IP) and while both the primary and secondary controllers have an IP of their own, it doesn't mean the second one is fully alive. Sometimes…

How are you connecting to the devices? SSH or Telnet? I've found SSH2 to be much more reliable. I think there was also an older version that had problems with this, what version are you on?

Ok, not familiar with sFlow or the Nexus 3000, but with Netflow, its usually very simple to get it to export records, but sometimes not in a way the server can recognize. The first thing to do is to see whether or not packets are going out. I believe "show sflow statistics" will do the trick. If the counters are not-zero…

In the advanced config search portion of the page, right now you're looking for where the "Config file" "Must Contain" "Find String" and "switchport port-security" Just "Add another string" and have it do something like "Config file" "Must NOT Contain" "Find String" "switchport mode trunk" By having 2 comparisons within…

I'm going out on a limb and going to say that you cannot do multiple blocks within the same rule, but you can create multiple rules. However, depending on your circumstances you might be able to get away with it. In this case I'm seeing you probably only need 1 rule though. The key to it is using a regex type for matching…

Hmm... All I can think of is maybe put an extra newline before each "int range"? Or maybe an "exit" on a line on its own to get out of the previous interface range before starting a new one?

For using Solarwinds via the web interface, or for polling remote sites, the bandwidth you stated should be more than sufficient, assuming no other major loads are on it. The HTTP pages and SNMP polling shouldn't generate that much traffic at any given time. I should think even if it was a symmetric connection at the lower…

 Not always a "choice" thing when you work in a big enterprise. >Definitely< not in my case, IE7 (or higher) isn't approved software. Neither is Firefox for that matter, but at least I can install it without losing my IE6 which is required for some corporate websites. And yes, I know we're behind on many things, we would…

 Ah, you shouldn't hide things that way... 8-) Found another odd "issue" today. When I go into "Node Management", I see my Node Groupings whatever they might be on the LHS. On the RHS are the nodes. No matter what grouping type or whatever, there are 3 node entries on the RHS for each node. Even if I group things in such a…

Are there differences between the devices? ie: model #, IOS/OS version?, etc?

From what I understand though, the EOC won't give you everything that having both on the same server will. You'd still be limited in the full scope of what is possible. I've never used it myself, can anyone confirm this?

Doubling the traffic? Hmm.. I suppose that depends on how you look at it. Lets say you want to do a report on all the traffic from router A to router B. On router A your monitoring the ethernet interface and the serial interface. If you do a report on just Router A that includes both your Ethernet and Serial interface,…

Did you try enabling "All Fields" to search on? I would think its just a matter of finding the right field?

Hmmm... More work than I want to put in I think. Not saying it can't be done, just that I don't see a clear way to do it in a decent timeframe. Plus it would have fairly limited usage I would think, where-as mine is useful on most devices. Why? The VLAN tag I think will only show up on switches, where with mine using the…

Or you can use this query SELECT I.InterfaceName, N.Caption, N.DetailsURL AS [_LinkFor_Caption] FROM Orion.NPM.Interfaces I INNER JOIN Orion.Nodes N ON (N.NodeID = I.NodeID) WHERE I.Status = 0 Either put it in SWQL Studio, or customize a webpage in Orion and add a "Custom Query" resource and put it in there. I call it…

Yes, just a single SLX license to support all our nodes. Pretty beefy server, but a single license...

Why SSH1? I'd recommend abandoning 1 and moving to 2, much more stable... Have you tried SSH'ing to the router from your Orion server? Or are you going in from another IP address? How do you have the config transfer set up? (ie: the "Request Configs Using" and "transfer configs using" in your "Edit properties")

I think lots of people are having problems with this, not sure if there is a solution or not... You might be interested in voting this up if you're interested in using Geolocation however!!

I don't remember any issues to speak of, go for it! Oh wait, at some point, might have been before 7.3, some scripts started breaking. Turns out if you do a script that has multiple <returns> in it, ie: something like this: copy tftp://1.1.1.1/new_aaa.txt running-config dir That it would collapse the multiple returns into…

How are your devices managed? SSH/Telnet? I find that SSH tends to work much better with NCM. How do you have it set up to download the configs? SSH/Telnet/SNMP/SCP? Once again, I find it better to use SSH myself. How are your devices set up for logging in? Just a password/enable, or are you using username/passwords and…

Tried doing a discovery on a router of mine, but it didn't have this issue. Maybe post the configuration of the interface its having the issue with? Are you monitoring your routers using a WAN or LAN interface? Have you considered using a loopback interface instead? Definitely a much better practice for managing Layer-3…

Ha! Thwack and Google, that sounds like some British sexual reference like Slap and Giggle... :-) Try running the Config Manager and have it reinstall everything UDT, that usually works...

I have heard that there seems to be some delay in the 2960x sending out its netflow template to the receiver, maybe you ran in to that. You're definitely seeing Netflow there, but like I said, its only sampling at most 1:32 packets, so make sure the ratio is set correctly!

Correct, I was having that problem and inquired with Solarwinds and they confirmed that the router for any given VLAN has to be managed with UDT also. You don't have to manage any ports on the device, just the device itself (at least from my experience!!). That way UDT gains access to the ARP table on that device. You also…

Well, just like you have have a restricted view in SNMP, you can also permit access to specific MIBS. Now, I know this isn't perfect with SNMPv3, like if you want to get cbqos info in NTA you can't do it with SNMPv3 (at least AFAIK). But the general format is: snmp-server view <viewname> <oid-tree> (included|excluded)…

Yes, that means that its seeing Netflow, but its from an unmanaged interface, or one that NPM doesn't know about. By default NTA doesn't monitor all sources of Netflow packets that it receives, so you either need to add it manually, or tell Netflow to add all sources. Go to your NTA settings in Orion, at the top of the…

SNMP traps take a bit of work to fully understand. Included in the trap should be the IP Address of the device you're looking at. The "ifAdminStatus" is fairly self-explanatory, it tells whether a device is up (value of 1), down (value of 2) or in testing mode (value of 3). A simple search of the internet should find this…

Hmm. 6504's I would think would be beefy enough to handle most SNMP queries, sure it's not an IOS bug? Guess it depends on the Sup and such... I know there were problems with some Cisco L3 engines getting really high CPU and potentially crashing when the ARP and routing tables were queried. Maybe exclude those in your…