|
Device Troubleshooting Report | |
|
Name | 10.70.7.100 | Device Type | Cisco ASA-5520 Adaptive Security Appliance | IP Address | 10.70.7.100 | Managed By | lms: Resource Manager Essentials, Campus Manager. | |
| Reachability Check (Device connected) | | LMS Ping | Success | HTTP | Failed | SNMPv1/v2c Read | Success | SNMPv1/v2c Write | Failed | SSHv1 | Success | SSHv2 | Failed | Telnet | Success |
|
|
|
|
| Trace Route (Trace Route retrieved for the selected device.) | | LMS Tracing route to 10.70.7.100 over a maximum of 30 hops
1 <1 ms <1 ms <1 ms 10.70.7.100
Trace complete.
|
|
|
|
|
|
| Syslog Message (Syslog messages retrieved for the selected device.) | | LMS Severity : Alerts | | Device Name | Interface | Timestamp | Facility[-Sub-facility] | Severity | Mnemonic | Description | Details | 1. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:23:51 | ASA | 1 | 106100 | access-list DMZ1_access_in denied icmp DMZ1/10.80.8.201(8) -> DMZ2-vm/10.70.7.200(0) hit-cnt 15 300-second interval [0xd09b143c, 0x0] | * | 2. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:24:27 | ASA | 1 | 106100 | access-list DMZ1_access_in denied icmp DMZ1/10.80.8.204(8) -> DMZ2-vm/10.70.7.203(0) hit-cnt 1 first hit [0xd09b143c, 0x0] | * | 3. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:24:27 | ASA | 1 | 106100 | access-list DMZ1_access_in denied icmp DMZ1/10.80.8.201(8) -> DMZ2-vm/10.70.7.207(0) hit-cnt 3 300-second interval [0xd09b143c, 0x0] | * | 4. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:24:27 | ASA | 1 | 106100 | access-list DMZ1_access_in denied icmp DMZ1/10.80.8.204(8) -> DMZ2-vm/10.70.7.200(0) hit-cnt 1 first hit [0xd09b143c, 0x0] | * | 5. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:24:35 | ASA | 1 | 106100 | access-list DMZ1_access_in denied udp DMZ1/169.254.218.192(137) -> DMZ2-vm/10.70.7.200(137) hit-cnt 1 first hit [0xd09b143c, 0x0] | * | 6. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:24:53 | ASA | 1 | 106100 | access-list DMZ1_access_in denied icmp DMZ1/10.80.8.201(0) -> DMZ2-vm/10.70.7.206(0) hit-cnt 1 first hit [0xd09b143c, 0x0] | * | 7. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:25:26 | ASA | 1 | 106100 | access-list DMZ1_access_in denied icmp DMZ1/10.80.8.204(0) -> DMZ2-vm/10.70.7.206(0) hit-cnt 1 first hit [0xd09b143c, 0x0] | * | 8. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:29:31 | ASA | 1 | 106100 | access-list DMZ1_access_in denied icmp DMZ1/10.80.8.204(8) -> DMZ2-vm/10.70.7.203(0) hit-cnt 1 300-second interval [0xd09b143c, 0x0] | * | 9. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:29:31 | ASA | 1 | 106100 | access-list DMZ1_access_in denied icmp DMZ1/10.80.8.204(8) -> DMZ2-vm/10.70.7.200(0) hit-cnt 3 300-second interval [0xd09b143c, 0x0] | * | 10. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:29:38 | ASA | 1 | 106100 | access-list DMZ1_access_in denied udp DMZ1/169.254.218.192(137) -> DMZ2-vm/10.70.7.200(137) hit-cnt 5 300-second interval [0xd09b143c, 0x0] | * |
| |
|
Severity : Errors | | Device Name | Interface | Timestamp | Facility[-Sub-facility] | Severity | Mnemonic | Description | Details | 1. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:50:46 | ASA | 3 | 710003 | TCP access denied by ACL from 10.70.7.212/49192 to DMZ2-vm:10.70.7.100/80 | * | 2. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:50:46 | ASA | 3 | 710003 | TCP access denied by ACL from 10.70.7.212/49192 to DMZ2-vm:10.70.7.100/80 | * | 3. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:50:46 | ASA | 3 | 710003 | TCP access denied by ACL from 10.70.7.212/49192 to DMZ2-vm:10.70.7.100/80 | * | 4. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:51:01 | ASA | 3 | 710003 | TCP access denied by ACL from 10.70.7.212/49227 to DMZ2-vm:10.70.7.100/80 | * | 5. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:51:01 | ASA | 3 | 710003 | TCP access denied by ACL from 10.70.7.212/49227 to DMZ2-vm:10.70.7.100/80 | * | 6. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:51:01 | ASA | 3 | 710003 | TCP access denied by ACL from 10.70.7.212/49227 to DMZ2-vm:10.70.7.100/80 | * | 7. | 10.70.7.100 | 10.70.7.100 | Dec 28 2011 13:06:54 | ASA | 3 | 713119 | Group = 173.192.254.5, IP = 173.192.254.5, PHASE 1 COMPLETED | * | 8. | 10.70.7.100 | 10.70.7.100 | Dec 28 2011 13:07:41 | ASA | 3 | 713902 | Group = 173.192.254.5, IP = 173.192.254.5, Removing peer from peer table failed, no match! | * | 9. | 10.70.7.100 | 10.70.7.100 | Dec 28 2011 13:07:41 | ASA | 3 | 713119 | Group = 173.192.254.5, IP = 173.192.254.5, PHASE 1 COMPLETED | * | | |
|
|
|
|
|
| Audit Report (No audit summary for the selected device.) | | LMS |
|
|
|
| Generic OnLine Diagnostics (Generic OnLine Diagnostics details not available for the selected device.) | | LMS The device does not support the task |
|
|
|
|
| Call Home (Call Home details not available for the selected device.) | | LMS The device does not support the task |
|
|
|
|
| Embedded Event Manager (Embedded Event Manager details not available for the selected device.) | | LMS The device does not support the task |
|
|
|
|
| Device Credential Verification Report (Verification Report for the selected device.) | | LMS Credential Verification report as on Dec 28 2011 12:57:05 GMT+04:00 | Run now | Device Name | Read Community | Read Write Community | SNMPV3 | Telnet | Enable by Telnet | SSH | Enable by SSH | 10.70.7.100 | OK | Not Supported | No Value To Test | OK(Primary Successful) | OK(Primary Successful) | No Value To Test | Did Not Try |
|
|
|
|
|
| Last Configuration Change (No configuration archived for the selected device.) | | LMS No configuration archived for the selected device. |
|
|
|
| CDP Neighbors (No CDP Neighbor exists for the selected device.) | | LMS |
|
|
|
| Discrepancy (No Discrepancy found for the selected device.) | | LMS |
|
|
| |
|
|
|
|
|
MARVIN RHOADS wrote:
Syslog is sent FROM the ASA and not dependent on LMS being able to log into the ASA remotely.
It sounds like perhaps you haven't correctly discovered the ASA and gotten it into the Device and Credentials Repository (DCR).
On your LMS, go to Inventory > Device Administration > Add / Import / Manage Devices. Does your ASA appear on that list?
That step (and more useful ones) are included in this guide:
Hope this helps.
Hello marvin,
thank for your reply, please see the report below, the device is already added on the LMS 3.2. but the software is not able to get the running config and startuo config.
|
Device Troubleshooting Report | |
|
Name | 10.70.7.100 | Device Type | Cisco ASA-5520 Adaptive Security Appliance | IP Address | 10.70.7.100 | Managed By | lms: Resource Manager Essentials, Campus Manager. | |
| Reachability Check (Device connected) | | LMS Ping | Success | HTTP | Failed | SNMPv1/v2c Read | Success | SNMPv1/v2c Write | Failed | SSHv1 | Success | SSHv2 | Failed | Telnet | Success |
|
|
| |
| Trace Route (Trace Route retrieved for the selected device.) | | LMS Tracing route to 10.70.7.100 over a maximum of 30 hops
1 <1 ms <1 ms <1 ms 10.70.7.100
Trace complete.
|
|
|
|
| |
| Syslog Message (Syslog messages retrieved for the selected device.) | | LMS Severity : Alerts | | Device Name | Interface | Timestamp | Facility[-Sub-facility] | Severity | Mnemonic | Description | Details | 1. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:23:51 | ASA | 1 | 106100 | access-list DMZ1_access_in denied icmp DMZ1/10.80.8.201(8) -> DMZ2-vm/10.70.7.200(0) hit-cnt 15 300-second interval [0xd09b143c, 0x0] | * | 2. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:24:27 | ASA | 1 | 106100 | access-list DMZ1_access_in denied icmp DMZ1/10.80.8.204(8) -> DMZ2-vm/10.70.7.203(0) hit-cnt 1 first hit [0xd09b143c, 0x0] | * | 3. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:24:27 | ASA | 1 | 106100 | access-list DMZ1_access_in denied icmp DMZ1/10.80.8.201(8) -> DMZ2-vm/10.70.7.207(0) hit-cnt 3 300-second interval [0xd09b143c, 0x0] | * | 4. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:24:27 | ASA | 1 | 106100 | access-list DMZ1_access_in denied icmp DMZ1/10.80.8.204(8) -> DMZ2-vm/10.70.7.200(0) hit-cnt 1 first hit [0xd09b143c, 0x0] | * | 5. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:24:35 | ASA | 1 | 106100 | access-list DMZ1_access_in denied udp DMZ1/169.254.218.192(137) -> DMZ2-vm/10.70.7.200(137) hit-cnt 1 first hit [0xd09b143c, 0x0] | * | 6. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:24:53 | ASA | 1 | 106100 | access-list DMZ1_access_in denied icmp DMZ1/10.80.8.201(0) -> DMZ2-vm/10.70.7.206(0) hit-cnt 1 first hit [0xd09b143c, 0x0] | * | 7. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:25:26 | ASA | 1 | 106100 | access-list DMZ1_access_in denied icmp DMZ1/10.80.8.204(0) -> DMZ2-vm/10.70.7.206(0) hit-cnt 1 first hit [0xd09b143c, 0x0] | * | 8. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:29:31 | ASA | 1 | 106100 | access-list DMZ1_access_in denied icmp DMZ1/10.80.8.204(8) -> DMZ2-vm/10.70.7.203(0) hit-cnt 1 300-second interval [0xd09b143c, 0x0] | * | 9. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:29:31 | ASA | 1 | 106100 | access-list DMZ1_access_in denied icmp DMZ1/10.80.8.204(8) -> DMZ2-vm/10.70.7.200(0) hit-cnt 3 300-second interval [0xd09b143c, 0x0] | * | 10. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:29:38 | ASA | 1 | 106100 | access-list DMZ1_access_in denied udp DMZ1/169.254.218.192(137) -> DMZ2-vm/10.70.7.200(137) hit-cnt 5 300-second interval [0xd09b143c, 0x0] | * |
| |
|
Severity : Errors | | Device Name | Interface | Timestamp | Facility[-Sub-facility] | Severity | Mnemonic | Description | Details | 1. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:50:46 | ASA | 3 | 710003 | TCP access denied by ACL from 10.70.7.212/49192 to DMZ2-vm:10.70.7.100/80 | * | 2. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:50:46 | ASA | 3 | 710003 | TCP access denied by ACL from 10.70.7.212/49192 to DMZ2-vm:10.70.7.100/80 | * | 3. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:50:46 | ASA | 3 | 710003 | TCP access denied by ACL from 10.70.7.212/49192 to DMZ2-vm:10.70.7.100/80 | * | 4. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:51:01 | ASA | 3 | 710003 | TCP access denied by ACL from 10.70.7.212/49227 to DMZ2-vm:10.70.7.100/80 | * | 5. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:51:01 | ASA | 3 | 710003 | TCP access denied by ACL from 10.70.7.212/49227 to DMZ2-vm:10.70.7.100/80 | * | 6. | 10.70.7.100 | 10.70.7.100 | Dec 29 2011 11:51:01 | ASA | 3 | 710003 | TCP access denied by ACL from 10.70.7.212/49227 to DMZ2-vm:10.70.7.100/80 | * | 7. | 10.70.7.100 | 10.70.7.100 | Dec 28 2011 13:06:54 | ASA | 3 | 713119 | Group = 173.192.254.5, IP = 173.192.254.5, PHASE 1 COMPLETED | * | 8. | 10.70.7.100 | 10.70.7.100 | Dec 28 2011 13:07:41 | ASA | 3 | 713902 | Group = 173.192.254.5, IP = 173.192.254.5, Removing peer from peer table failed, no match! | * | 9. | 10.70.7.100 | 10.70.7.100 | Dec 28 2011 13:07:41 | ASA | 3 | 713119 | Group = 173.192.254.5, IP = 173.192.254.5, PHASE 1 COMPLETED | * |
| |
|
|
|
| |
| Audit Report (No audit summary for the selected device.) | | LMS |
|
| |
| Generic OnLine Diagnostics (Generic OnLine Diagnostics details not available for the selected device.) | | LMS The device does not support the task |
|
|
| |
| Call Home (Call Home details not available for the selected device.) | | LMS The device does not support the task |
|
|
| |
| Embedded Event Manager (Embedded Event Manager details not available for the selected device.) | | LMS The device does not support the task |
|
|
| |
| Device Credential Verification Report (Verification Report for the selected device.) | | LMS Credential Verification report as on Dec 28 2011 12:57:05 GMT+04:00 | Run now | Device Name | Read Community | Read Write Community | SNMPV3 | Telnet | Enable by Telnet | SSH | Enable by SSH | 10.70.7.100 | OK | Not Supported | No Value To Test | OK(Primary Successful) | OK(Primary Successful) | No Value To Test | Did Not Try |
|
|
|
| |
| Last Configuration Change (No configuration archived for the selected device.) | | LMS No configuration archived for the selected device. |
|
| |
| CDP Neighbors (No CDP Neighbor exists for the selected device.) | | LMS |
|
| |
| Discrepancy (No Discrepancy found for the selected device.) | | LMS |
|
| | |
| |
|
|
|