Cisco Prime Infrastructure 2.0 and ASA 55xx platform

[marcelvos82]

Hello,

We recently upgraded to Prime Infrastructure 2.0 with the hope being able to manage our ASA's from PRIME (and complete an LMS migration).

When I attempt to add ASA's to prime i get the following collection errors:

Unable to collect processor and RAM information.          Processor and RAM information.          Unexpected error. See the log file inventory.log for details.

In the logfile I get the following XML parsing error on the MIB:

<palError>

  <deviceId>6284310032</deviceId>

  <code>VALIDATION_ERROR</code>

  <message>Failed to validate output XML: cvc-maxInclusive-valid: Value '3484331296' is not facet-valid with respect to maxInclusive '2147483647' for type 'int'.</message>

  <result>

    <result xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="/CISCO-MEMORY-POOL-MIB/xmp-im-file-system-module.xsd">

      <xmp-im-file-system-module>

        <MemoryPoolStatistics>

          <memoryPoolIndex>1</memoryPoolIndex>

          <free>4294967295</free>

          <largestFree>4294967295</largestFree>

          <used>3484331296</used>

        </MemoryPoolStatistics>

To me it seems that the ASA returns a value that is bigger then int32 and thus causes an overflow? Any clues? Workarounds to add an ASA to Prime without checking these MIB'S?

Regards,

Marcel

[mick_johnson@hotmail.com]

Hi Marcel

did you find a fix for this as having the same problem, I only get this with a 5585x pair, with a single 5505 I don't

Regards

Mike

[Marvin Rhoads]

The X series (all with 64-bit SMP images) are not currently supported by PI 2.0. We can hope for a device update in the coming months to remedy that situation.

If you click on the arrow next to the help icon in the top right of your PI and choose "Device Level Support" you will see:

Cisco ASA-5500 Series Adaptive Security Appliances

Features : Topology LLDP Neighbor Discovery CDP Neighbor Discovery Configuration Configuration Archive Software Image Management Monitoring Device Availability Reachability Inventory Physical System - Memory Pools Interfaces - IP Interfaces - Ethernet

Device Type	SYSOIDS	S/W Version	Software
Cisco ASA-5510 Adaptive Security Appliance	OID:1.3.6.1.4.1.9.1.669 OID:1.3.6.1.4.1.9.12.3.1.3.447
Cisco ASA-5510 Adaptive Security Appliance Security Context	OID:1.3.6.1.4.1.9.1.773
Cisco ASA-5520 Adaptive Security Appliance	OID:1.3.6.1.4.1.9.1.670 OID:1.3.6.1.4.1.9.12.3.1.3.448
Cisco ASA-5520 Adaptive Security Appliance Security Context	OID:1.3.6.1.4.1.9.1.671
Cisco ASA-5540 Adaptive Security Appliance	OID:1.3.6.1.4.1.9.1.672 OID:1.3.6.1.4.1.9.12.3.1.3.449
Cisco ASA-5540 Adaptive Security Appliance Security Context	OID:1.3.6.1.4.1.9.1.673
Cisco ASA-5560 Adaptive Security Appliance	OID:1.3.6.1.4.1.9.12.3.1.3.454
Cisco ASA-5550 Adaptive Security Appliance	OID:1.3.6.1.4.1.9.1.753
Cisco ASA-5550 Adaptive Security Appliance Security Context	OID:1.3.6.1.4.1.9.1.763
Cisco ASA-5505 Adaptive Security Appliance	OID:1.3.6.1.4.1.9.1.745 OID:1.3.6.1.4.1.9.12.3.1.3.560
Cisco ASA-5580 Adaptive Security Appliance	OID:1.3.6.1.4.1.9.1.914
Cisco ASA-5585 Adaptive Security Appliance	OID:1.3.6.1.4.1.9.1.1194 OID:1.3.6.1.4.1.9.1.1195 OID:1.3.6.1.4.1.9.1.1196 OID:1.3.6.1.4.1.9.1.1197
Cisco ASA-5585 Adaptive Security Appliance Security Context	OID:1.3.6.1.4.1.9.1.1198 OID:1.3.6.1.4.1.9.1.1199 OID:1.3.6.1.4.1.9.1.1200 OID:1.3.6.1.4.1.9.1.1201
Cisco ASA-5585 Adaptive Security Appliance System Context	OID:1.3.6.1.4.1.9.1.1202 OID:1.3.6.1.4.1.9.1.1203 OID:1.3.6.1.4.1.9.1.1204 OID:1.3.6.1.4.1.9.1.1205
Cisco ASA-5580 Adaptive Security Appliance Security Context	OID:1.3.6.1.4.1.9.1.915
Cisco ASA-5580 Adaptive Security Appliance System Context	OID:1.3.6.1.4.1.9.1.916

[mick_johnson@hotmail.com]

I had already found this out and also the same issue for Cisco IPS 4500, but was hoping a fix was out by now as I am in the middle of upgrading a network for a client and Prime was sold to them as part of a compete network/management solution and have not been overly impressed with the product.

[daniel_dantas]

hello

Execute the command on ASA to obtain all OID´s

show snmp-server oidlist

Regards

[Dmitriy Ivanov]

c5k5-cr-ha# sh snmp-server ?

  engineID    Show snmp engineID
  group       Show snmp groups
  statistics  Show snmp-server statistics
  user        Show snmp users

no such command

Compiled on Fri 30-Jul-10 17:49 by builders
System image file is "disk0:/asa832-k8.bin"
Config file at boot was "startup-config"

c5k5-cr-ha up 1 year 91 days
failover cluster up 1 year 91 days

Hardware:   ASA5550, 4096 MB RAM, CPU Pentium 4 3000 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW080 @ 0xfff00000, 1024KB

Problem is that PI2.0 unable to see version and software image

Have opened case with Cisco.