LMS 4.2.3 Continuous Authentication failure alarm in DFM

[ChannaBasava Kalapurmath]

Hi All,

We are getting continuous minor alarm[Authentication Failure] for single router in the DFM.  can we check from which ip we are getting the authentication request??

possible steps to find the cause for the authentication failure.?

Regards,

Channa

[Vinod Arya]

The first row is a alert ID, check what you see when you click on it and share.

Also, please confirm which device is that and what version is it running? Does anything you see on device show log?

-Thanks

Vinod

[ChannaBasava Kalapurmath]

Hi Vinod,

Its 7600 router running below version

IOS : c7600rsp72043-advipservicesk9-mz.122-33.SRE3.bin

Logs on devices:  i can see only below log on the router.

%SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: tool] [Source: <>] [localport: 22] at 00:05:08 IST Sat Oct 11 2014

Regards,

Channa

[ChannaBasava Kalapurmath]

Hi Vinod,

I have tried re-adding the device but the alarms are still reflecting on the LMS.

Regards,

Channa

[Vinod Arya]

Please try this, delete device and Shutdown Daemon Manager, then delete NMSROOT/objects/smarts/local/repos/icf/DFM.log. Then restart and readd the device and see if the problem goes away.

-Thanks

Vinod

[ChannaBasava Kalapurmath]

Hi Vinod,

I will try and update the results.

Regards,

Channa

[ChannaBasava Kalapurmath]

Hi Vinod,

i can see two files in the location

NMSROOT/objects/smarts/local/repos/icf/

DFM.log and DFM1.log - do i need to delete both files or DFM1.log alone ??

Regards,

Channa

[Vinod Arya]

Don't delete, just copy them as a backup to other location. Restart services and give full 10-15 mins and these files should be regenerated.

Thanks

Vinod

[ChannaBasava Kalapurmath]

Hi Vinod,

I didn't find the DFM.log file at below location

NMSROOT/objects/smarts/local/repos/icf/

Find the screenshot

Regards,

Channa

[Vinod Arya]

Please do following:

> stop daemon manager

> Rename/move dfm.rps and dfm1.rps from NMSROOT/objects/smarts/local/repos/icf.

> Move/delete NMSROOT/objects/smarts/local/logs/DFM.log and DFM1.log

> start daemon manager 

Please monitor the issue.

-Thanks

Vinod

[ChannaBasava Kalapurmath]

Hi Vinod,

I tried delete the DFM and DFM1.log files. but after stopping the deamon manager.unable to delete DFM1.log as this file was accessed by the smserver.exe in the backend.

i have successful moved both RPS files and DFM.log file from the location. but the issue persists.

I try again to delete DFM1.log file in the MW and update.

Regards,

Channa