rschroeder · NAM SME · ✭✭✭✭✭

My company moved to ISE for all our RADIUS and TACACS needs. It does the job nicely for us, and our ISE installation has proven to be resilient and highly available. ISE provides our systems both RADIUS and TACACS, and has been intuitive for us to use for securing access, generating AAA logs, and working with Splunk. I…

We have TACACS working on ISE where our switches & routers previously used ACS; the TACACS configuration on ISE was intuitive. We had to manually point all our switches & routers at the new ISE servers' addresses, but it was easy to do via NCM. Tweak & test this in your test lab before applying: aaa new-model aaa group…

Based on your criteria (find a way to scan external IP addresses you own/lease, resolve them to their DNS entries, and get that information available for the boss via IPAM), I've thought of a few things you can try. But these literally only discover the addresses and get them into IPAM for your boss's pleasure. These steps…

You've found the issue on which to focus: discounted price for buying more than one module. If the price of two modules is significantly lower than buying each separately, now you have found the incentive to purchase two modules. I would not be surprised to learn a Solarwinds salesperson would give more and steeper…

I never thought of that. Silly users!

That did exactly what I requested. Nicely done! And fast, too! From your second paragraph, where you referenced I could pull in additional values (e.g.: NodeID, CoreNodeID, EngineID, NodeCaption, etc.), what is the syntax used to add any one of those values, and where/how is it added? For example, your initial query is:…

A little Googling, or searching of Thwack or the Solarwinds support site, goes a long way.

The time goes more swiftly than you'd think. If memory serves, about 18 months ago I was at 14,000 points, and Radioteacher​ had just reached 100,000 or some such impossibly large number. Now I'm closely watching his score, in hopes of becoming his neighbor in the rankings. If you're active, if you participate in the UX…

It's not broken--those are just "alternate facts."

Your reply is not late at all--and I thank you for noting your experience. I'd love to hear more about the strengths and weaknesses, pro's & con's of Gigamon, as well as the size of your network and the area it covers, if you feel comfortable sharing this info. You can also IM me via Thwack if you don't want to share…

You'd only point at a port to which the switch or router listens. For example, you could point at TCP port 22 since you use it for SSH to manage the switch or router via CLI. Or perhaps you'd point at TCP port 179 if you're tracking BGP hops. Use whatever port your target device allows. ACL's on the switch or router may…

What a great reply! I LOVE when Thwack provides an expert answer, quickly and efficiently. And from someone with your credentials? Incredible!

Congratulations!

sirpaw​, MVP's are (reportedly) exempt from the SCP fees. I think you're in good shape to retake the test at no charge, as long as your MVP hasn't expired.

That's exactly what my snmp walk ran into after ~40,000 hits.

No, mine had no physical defects. It opened and worked as expected.

Thank you, renek​, for your thoughts on this matter. I'm reviewing them in sequence and determining whether my environment and your ideas match well.

Since I was just running the Beta last month, I bet this will take six months to get to us in a production form. Maybe longer. (Or maybe less!?)

For starters, do NOT install it with the rest of your Solarwinds. Install it on a separate test server using the stand-alone simplified / easy version, containing its own local database. Do not install it on a server where any other version of Solarwinds products (even other beta products) are installed. If in doubt, have…

Sadly, no progress has occurred.

I could buy into that in many circumstances. Some useful access switch alerts could include: * Notification that one of two or more port-channeled interfaces between an access switch and its distribution switch is down. Traffic to the switch still flows, no one knows you've lost an uplink but NPM and you. But your…

You put your finger squarely on a sore spot for me--the fact that SW doesn't allow a person to globally change that CLI credential for multiple devices or device types. Probably just as bad: one must manually enter in the credentials separately for each device that will use them. I've submitted a Feature Request to let a…

I never knew that was an option. Thanks for expanding my knowledge, Vinay!

I agree that it would be convenient, and make good sense and a better product, if we had access to a canned report for this. Or had an easy ability to make / modify a report on multiple bases: * Protocol * Application * Source * Destination * Port(s) * BPS * Peak Bandwidth Used (per any of the above options) * Total…

I foresee a positive experience, assuming your versions are not too many generations behind. The latest installers / hotfixes are pretty good stuff.

You can find that view starting here: Settings > All Settings >

Cutting NPM's front page load from 60 seconds to 2-to-5 seconds? VERY IMPRESSIVE! Nicely done, and a great example of performance analysis and common sense.

My organization merged with two others a few years ago; each had their own NPM solution in place, so we bought EOC to give visibility into all of them. That was a mistake. It segmented the Network "Team" and facilitated regional members to focus solely on "their" sites, and not help out on other region's sites. I worked a…

jhandberg I was in that same boat until I discovered NAM licensing. I pay less now for SW support than I did when I had stand-alone versions of NPM, NTA, NCM, and three APE's. And I got UDT, IPAM, VNQM, HA, and can install up to 20 APE's at no additional cost. Last year I knew I I needed more polling engines. I also needed…

Hey, that leaves the rest of us in the dark if you two find a solution! Share it here, if you do get it working faster, please?