wbrown

Comments

  • Interface filtering would be VERY nice to see. I know a number of us have been asking for this feature for a few years. Monitoring routing info would also be nice to see if it supports EIGRP.
  • This link may help: tools.cisco.com/.../MainServlet No login required. You can put in your firmware version and platform and find all the MIBs supported in the firmware. Once you find the right MIB you can determine the OID you need if you want to use a custom poller to get the info.
  • I'm betting that you have your read-only string defined within NPM, but no read-write string. In my environment I ended up pushing out "no logging snmp-authfail" to all my switches. This solution was taken because we have other devices, managed by a separate group, that regularly perform network scans and test SNMP…
  • I don't know about adding an overall availability percentage to a detailed report, but for NPM I did an overall availability average for my wireless networks by modifying a copy of a detailed availability report and unselecting the fields (vendor, device name, etc) that I didn't care about. In the end, the only fields left…
  • This functionality has been a feature request for a few years now. No ETA has been given as to when it will actually be in the product, and to my knowledge nobody has posted a hack to accomplish this either.
  • You can create multiple devices within NPM that share the same IP, or even hostname. In your case you can simply recreate what you've described: create 2 objects in NPM with the same IP, each using a different polling method (1 ICMP only, 1 SNMP).
  • This is one of those things I intend to implement when I have some spare cycles to research, but those spare cycles haven't appeared. If you want to do the research, start with OID 1.3.6.1.4.1.9.9.491 For exploring Cisco MIBs, use this link: tools.cisco.com/.../BrowseOID.do
  • In order to add the device try doing so with the RW string blank. If the firmware info isn't being pulled by default then your options are to create a UnDP, or to use Device Studio to specify which OIDs to poll for the Node Details data. If you want an example of a Device Studio poller for this info I've got a couple Cisco…
  • You can do MANY things to a switch via SNMP. This is one of the many reasons you should have ACLs on the SNMP access. To answer your direct question: yes, you can change the configuration via SNMP. I've not done so via NCM but I have done so via the Engineer's toolset. BTW - be very careful when pasting in an encrypted…
  • For the most part my flow data has gone unused. It is a solution in search of a problem. On occasion it has been useful to discover the largest traffic types going through a particular link.
  • How are your SQL skills? My recommendation would be to create a report showing the output you're looking for. Then add that report to the page you want it to appear on. We had one of the guys from Loop1 here and he did something very similar for our NOC's view. They now have a list of all down nodes.
  • Info for 5K with FEX uploaded. Used to have 7K with FEX but we ended up replacing those FEX with 9Ks.
  • After seeing this post I asked my sales rep about this. The story is that ISE 2.0 is tentatively on the road map to be announced next year. At that time TACACS+ support will be included and should have feature parity with ACS. ACS may go EOSale at that time, with EOL/EOSupport date being 3-5 years after that. Of course the…
  • It may or may not resolve your issue, but disabling the topology discovery will GREATLY decrease the time required to discover. I was having issues where the discovery would appear to hang, but really the backend was still busy crunching the info to build the topology. Support provided me the below steps to disable…
  • Cisco firewalls generally don't like to operate with only a single interface - all sorts of normal config becomes quirky. I'd strongly suggest making your ezvpn server 2-legged. If you really need to keep your ASA single-legged, then there are couple things you can try. First thing is disable nat-conrol. Depending on your…
  • I had a similar issue with 2 pairs of FWSMs. One pair would discover fine, but the other pair (on same firmware) would seem to discover but then I would receive the "no devices found" message. I logged a case with support. They came back with this message: "Thanks for you patience. I received an update from our dev team…
  • Sounds like you're looking for output from grep. Grep is available in any *nix command shell, or under Windows when using Cygwin or Gnutils. If you really want to do this with Perl then read a single line from the file, check for the target substring within the line that is read, if substring position >= 0 then output the…
  • My EOS devices: Device type, System description, end-of-sale date, end-of-support date, Vendor EoL statement URL. Cisco VG204, Voice Gateway, 11/16/2013, 11/30/2018, http://www.cisco.com/en/US/prod/collateral/voicesw/ps6790/gatecont/ps2250/end_of_life_notice_c51-728269.html Cisco FWSM, Firewall module in multiple context…
  • Our network consists of dozens of Cisco 6509's (6509, 6509E) and a thousand or so 4507's (4507, 4507R, 4507R-E, 4507R+E). We're also adding Nexus 7010's and 5548's. All the topology info is completely worthless. Where switches are directly connected, the uplinks are monitored. The topology info shows "Unknown" between the…
    in NPM Topology Comment by wbrown June 2012
  • Based upon experience with support, I'd recommend against putting anything on a VM. Despite exceeding recommended resources (cpu, mem, storage,...), support had a tendency to blame the configuration or performance of the VMs when dealing with any issues. Now that we have all components (DB, app, pollers) on physical…
  • I haven't noticed a difference with the 10.1.1 upgrade, but I did notice similar behavior in 10.0. In both versions the test feature seems to only execute the actions including providing values for specified variables. But neither version seemed to actually check the configured conditions.
  • Another thing to check: Can you establish and maintain a telnet or ssh session to the problem switch? If not then you may have another device trying to use the same IP as your switch. However this shouldn't affect the ICMP reachability of the IP unless the offending device is blocking ICMP echo requests.
  • Up/down status is entirely dependent on ICMP rather than SNMP reachability. My initial gues is that there is either QoS or some kind of management-plane protection limiting the number of ICMP requests in a given time interval, or there is an IDS somewhere in the path limiting the number of ICMP requests between a…
  • Wherever you want a carriage return/ line feed, put: $ { Cr Lf } Omit the spaces.
  • That's how I've been running and have not noticed any issues with NPM 10.1. We just migrated to 10.2 last week and haven't noticed any impact yet.
  • I've got no problem with traffic routing through different or multiple links as these are links that I've configured to do so, thus I know where to look and what to look for when there's an issue. The specific path at a given time can vary, but it should only vary within constraints that I've already configured and expect.…
  • Edit the login accounts to remove that tab. Within the account settings go to "Default Menu Bars and Views" and click the drop-down for "Virtualization tab menu bar". Change the setting to "none", click "Submit" at the bottom of the page to save the settings for the user. Repeat for any other tabs and logins you would like…
  • You can widen the column the map has to fit into. This is done by editing the view through the settings page, or "customize page" in upper right-hand corner. Any changes you make to the view will be applied to all users that share the view. If you only want to change your settings, you can copy the view, customize that…
  • Sounds like a great idea to me. I can easily see management wanting to see such a report. Modify the post's title to include "feature request". That might have a better chance of getting the developers' attention. The current title makes it sound like an announcement.
  • Just adding the switches won't give you the vsan graphs. I had to add the switches as a normal network node, and monitor the fiber-channel ports that connect to the SAN in order to get VSAN traffic graphs.