topic Re: Performance Monitor 3.2.1 in Network Security

Performance Monitor 3.2.1

ckuriyar74 — Fri, 21 Feb 2020 11:00:34 GMT

I have installed Cisco Security Manager 3.2.1 with RME 4.1.1, AUS 3.2.1 along with Performance Monitor 3.2.1 version on the same server.

Iam able to add devices in RME, AUS and working fine with adding devices in CSM and able to discover the existing VPN's.

I properly configured SNMP RO community string, enabled HTTPS but unable to add devices in performance monitor.

I get the error " either the HTTPS was not enabled or the credentials are not correct."

HTTPS is enabled and proper credentials are entered and same is working fine when devices are added in CSM.

Can anyone help me on this.

Thanks,

Chandru

Re: Performance Monitor 3.2.1

Farrukh Haroon — Mon, 15 Sep 2008 15:39:14 GMT

Did you have a look at this link?

http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/performance_monitor/3.0/troubleshooting/guide/TS_Guide.html#wp1464487

Regards

Farrukh

Re: Performance Monitor 3.2.1

ckuriyar74 — Tue, 16 Sep 2008 05:22:50 GMT

Hi Farrukh,

Its a good link.

I have created a username with same user password and enable password for PIX/ASA firewalls

If I create a new username with less priv level still I get the same error message.

Any other solution to resolve this issue?

Thanks,

Chandru

Re: Performance Monitor 3.2.1

Farrukh Haroon — Tue, 16 Sep 2008 06:32:24 GMT

Why don't you give this username privilege 15 only? Can you post outputs of

show run aaa

show run username (remove the passwords)

Regards

Farrukh

Re: Performance Monitor 3.2.1

ckuriyar74 — Tue, 16 Sep 2008 06:36:10 GMT

ASA5510# sh run aaa

aaa authentication ssh console LOCAL

aaa authentication http console LOCAL

aaa authentication telnet console LOCAL

ASA5510# sh run username

username admin password xxxxx encrypted privilege 15

username readonly password xxxxx encrypted privilege 5

Thanks,

Chandru

Re: Performance Monitor 3.2.1

Farrukh Haroon — Tue, 16 Sep 2008 06:55:07 GMT

This seems OK, please post 'show run http' as well

Regards

Farrukh

Re: Performance Monitor 3.2.1

ckuriyar74 — Tue, 16 Sep 2008 07:00:46 GMT

ASA5510# sh run http

http server enable

http 193.169.1.0 255.255.255.0 management

http 147.183.0.0 255.255.0.0 inside

http 10.1.0.0 255.255.0.0 inside

ASA5510#

I have 147.183.0.0 and 10.1.0.0 inside networks configured for HTTP access and CSM server is in 147.183.0.0 network

Thanks,

Chandru

Re: Performance Monitor 3.2.1

Farrukh Haroon — Tue, 16 Sep 2008 07:09:45 GMT

So in CPM when importing the device are you using username/passwd or also the enable password?

Regards

Farrukh

Re: Performance Monitor 3.2.1

ckuriyar74 — Tue, 16 Sep 2008 07:17:32 GMT

When I try to import I use the username admin and user password.

User password and enable password are the same.

If I change the user password I get the same error message.

Re: Performance Monitor 3.2.1

Farrukh Haroon — Tue, 16 Sep 2008 07:40:59 GMT

Can you post the screenshot of the page on which you are entering the username/password AFTER entering the values?

Also are you able to add other devices properly?

Did you also try to import using DCR file (exported from CiscoWorks)?

Regards

Farrukh

Re: Performance Monitor 3.2.1

ckuriyar74 — Tue, 16 Sep 2008 08:12:40 GMT

Iam not able to add any devices and unable to import using DCR file as well. I get the same error when import using DCR.

Devices-->Importing Devices-->Import-->Manually Add new devices-->

I have attached the screenshot.

Re: Performance Monitor 3.2.1

Farrukh Haroon — Tue, 16 Sep 2008 09:39:29 GMT

So you are putting username admin and the password in BOTh the fields below? Have you double checked this password by logging into the device itself? Is the SNMP community string correct? can you post 'show run snmp-server' output.

Is this PIX or ASA and which version?

Regards

Farrukh

Re: Performance Monitor 3.2.1

ckuriyar74 — Tue, 16 Sep 2008 09:50:09 GMT

yes, Iam using the correct password. We have standard passwords set. All the devices set user password & enable password same.

I can login to ASA using same password and it works fine. SNMP community is correct.

The ASA version is 8.0(3)

ASA5510# sh run snmp-server

snmp-server host inside 10.1.1.7 community public version 2c

snmp-server host inside 147.183.140.176 community public version 2c

snmp-server host inside 147.183.141.15 community public version 2c

snmp-server location India

snmp-server contact IT Operations

snmp-server community public

snmp-server enable traps snmp authentication linkup linkdown coldstart

ASA5510#

Thanks,

Chandru

Re: Performance Monitor 3.2.1

Farrukh Haroon — Thu, 18 Sep 2008 08:45:33 GMT

Your ASA is running a 3des license right?

Also is 147.183.140.176 or 147.183.141.15 the CSM server?

Regards

Farrukh

Re: Performance Monitor 3.2.1

ckuriyar74 — Fri, 19 Sep 2008 08:49:51 GMT

Yes, ASA is running 3des license.

CSM server is 147.183.141.15

Thanks,

Chandru

Re: Performance Monitor 3.2.1

ckuriyar74 — Thu, 25 Sep 2008 12:24:53 GMT

I could able to import PIX/ASA when installed CSM 3.1.1 (Cisco Works 3.0.5 & Performance Monitor 3.0) successfully.

Is there any bugs OR issues with CSM 3.2.1 (with performance monitor 3.2.1) ?

Thanks,

Chandru

Re: Performance Monitor 3.2.1

Farrukh Haroon — Thu, 25 Sep 2008 15:22:02 GMT

I would suggest opening a TAC case, and let them troubleshoot it.

Regards

Farrukh

Re: Performance Monitor 3.2.1

jagbir_singh — Thu, 09 Oct 2008 03:34:07 GMT

Hi Chandru,

Have you got any support from TAC or any other sources as suggested by Farukh on this problem as i m facing the same problem.

Thanks

Jagbir

Re: Performance Monitor 3.2.1

ckuriyar74 — Fri, 10 Oct 2008 06:50:23 GMT

Hi Jagbir,

I had opened a TAC case and the cisco engineer had reset the mcp database. After this iam able to import devices into performance monitor.

Thanks,

Chandru

Re: Performance Monitor 3.2.1

ckuriyar74 — Fri, 10 Oct 2008 11:14:29 GMT

Here is the procedure used to reinitialize the Performance Monitor database (MCP). Please keep in mind that this wipes out any data that is stored in the performance monitor application.

net stop crmdmgtd

c:\progra~1\CSCOpx\bin\perl dbRestoreOrig.pl dsn=mcp dmprefix=mcp

net start crmdmgtd

As a reference, here is the link to the defect webpage:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsu99210

Please rate if this helps.

Thanks,

Chandru