Cisco Active Advisor - Unreachable devices?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-27-2015 12:50 PM
Trying to figure out why some devices are labeled "unreachable" when I have no issue connecting to them via SSH or SSL from the same machine I'm running CAA on. From the error logs it appears CAA tries HTTP, HTTPS, Telnet and SSH, but confused as to why they are unreachable.
- Labels:
-
Network Management

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-27-2015 02:52 PM
All devices are not supported with Cisco Active Advisor.
See link below concerning issues and limitations with Cisco Active Advisor.
https://help.ciscoactiveadvisor.com/support/solutions/articles/5000438878-what-are-some-known-issues-and-limitations-of-the-active-advisor-scanner-
This link is Q&A about Cisco Acitve Advisor.
http://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/active-advisor/q-and-a-c67-732514.html
Hope this helps,
Please rate helpful posts.
Thanks.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-27-2015 03:23 PM
One of the devices is a 3750 stack, same model that is already been discovered before. Also HTTPS Server is enabled and there is no ACL.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-27-2015 03:45 PM
Has this stack been discovered before and now it's unreachable or is this a new stack you are attempting to discover/audit?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-27-2015 03:50 PM
Not 100% sure. I started using CAA over a year ago, but hadn't updated it in a looooong time so I blew everything away and I'm starting to rediscover again. I'm almost 99.99% sure it had been discovered before. As of right now this 3750 Stack and a WLC2504 are labeled unreachable, but I am running CAA on the same VM in which I have Cisco Prime LMS installed so I know its not an ACL issue. I do use ACS with custom username and password prompts, but like I said other 3750's have been discovered and the WLC is SSL only using a local username. Do we get TAC assistance with this?

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-27-2015 04:06 PM
It's a free product, so you can try calling Cisco
or send an email to caa-help@cisco.com.
I assume you are trying to discover the devices via the specific ip address?
There is a bug out there with CAA that states it will not scan the last octet if its set to 0(example:10.1.1.0)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-27-2015 04:06 PM
I'll try that email. I saw that bug, but none of my devices end in a .0 or .255. Thanks

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-27-2015 04:09 PM
ok.
Good luck.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-20-2015 01:56 AM
Same issue here with a Cisco 877 Router which is supported from CAA... anyone can help?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-25-2015 05:55 AM
- I seem to remember that you can also get this when the credentials used in active advisor do not correspond to an account with elevated privilege level on the device.
M.
-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '
