We are using non-advertised IPs on many devices, but LMS is attempting to ping these addresses and setting off all sorts of security alarms. Anyone know how to stop LMS 4.1 from pinging the interfaces? We don't even want LMS to do any fault monitoring so if that could be turned off, it would be even better.
DFM periodically pings all managed IP addresses to determine if they
are reachable. (Device IP Addresses and component IP Addresses)
To stop ICMP polling to a particular IP address, please perform below
1) Execute the below command to check which component has the IP from
CSCOpx/objects/smarts/bin: dmctl -s DFM1 get IP:: IP-Example: dmctl -s DFM get IP:: IP-10.32.49.2
You can identify the device from the attribute HostedBy in the output.
2. Unmanage the particular IP from Detailed Device View
a) Go to Monitor > Fault Settings > Setup > Fault Device Details.
b) Select the Device and press view.
c) Click on the device name, Detailed Device View will get appear
d) Select IP , unmanage that particular IP by changing managed state to false and submit.
e) Then go to Monitor > Fault Settings > Setup > Apply Changes and press Yes
To remove completely:
1) Open a command prompt and navigate into NMSROOT/bin
2) Execute the command pdreg -u
Fault Management (DFM)
IPSLA Performance Management (IPM)
Device Performance Management (HUM)
As you can tell, this is not the intended operation for LMS, it is unsupported and may introduce unintended consequences. If you choose this or any course of action... Take a backup prior to making changes!