Hi   I have a fairly new installation at a client running in Multi-POD.  They are running version 4.1 but since we started to configure and migrate servers we get exceptionally slow responses from APIC.   In many cases we receive response errors on both SSH and WEB interfaces if I try to interrogate the leaf nodes - "ErroApplication Centric Infrastructure: Unable to deliver the message, Resolve timeout from (type/num/svc/shard) = switch:104:4:0, switch:203:4:0".  in general the response time to INB and OOB networks is around 60ms on the VPN link (I am not on site), although we get the same issue there.  In many cases, it seems configs are not pushed to the nodes once applied.   Similar issues are experienced depending on where you navigate on the UI. ... View more

Hi I did read one of the previous posts where EM do not discover wired endpoints.  I did look at the articles and suggestions posted and verified the environment my controller is installed in. I have a slightly different issue here.  This is a multi vrf environment which is the first bit of complexity (need to sort out some routing here).  Then on the vrf that the controller is installed in, it would only discover some of the connected devices.  The client runs ipt with most of the phones being detected but not all the PCs.  The access layer is mostly c3750 stacks.  These connect to a pair of N7K core switches.  these, in turn, connects to a pair of N5K switches that the servers connect to.  Besides the limited discovery in the access layer, I do not see a single device that connects to the N5Ks (data center) Could anyone give me some advice here? PS. I am running APIC-EM Version 1.4.3.1009. Thanks in advance ... View more

Hi,   I am having some issues writing a basic python script to configure access switches in mass. The process I am trying to follow is – Connect the switches to the lab network, issue IP address from a DHCP server and use auto config to load a base config (set the username, enable local login). The python script will do the following- Read the IP list file Log in to the devices one by one Update firmware (must still be completed) Optionally load a config update file Load a custom config file (based on device sn) Gen new rsa key Save config Backs up new running config. If I write this, one command following on the other it seems to work.   However. In order to provide more flexibility, I would prefer to write separate definitions and call these as I need them.  This works to a limited extent. The process to call the individual definitions works.  The expect statements do not seem to function beyond the first definition that I call.  My suspicion is that the expect telnet instance gets interrupted and do not continue to function as too as the first definition is completed. Hoe do I get the pexpect child statement to work on the subsequent definitions?           from __future__ import print_function import argparse import commands import ConfigParser import glob import os import paramiko import pexpect import re import select import shutil import signal import string import sys import syslog import time import traceback from binascii import * from cmd import * from ftplib import * from netmiko import * from optparse import * from paramiko import * from paramiko .ssh_exception import * from paramiko.py3compat import * # from pyRouterLib import * from StringIO import StringIO # system parameters switch_username = 'admin' # edit to reflect switch_telnet_password = 'C1sc0312' # edit to reflect switch_enable_password = 'C1sc0312'  # edit to reflect ftp_username = 'user'  # edit to reflect ftp_password = 'password'  # edit to reflect configuration_server = "172.30.12.150"  # edit to reflect host_list = open ( '/root/PycharmProjects/scripting/ip_address_list.txt' , 'r' ) firmware_2960 = 'c2960-ipbase-mz.122-35.SE5.bin' firmware_3560 = 'c3560-ipbase-mz.122-35.SE5.bin' min_flash_req = 10000000 rsa_key_length = 2048 def login_to_node (): # use Telnet     try :         child = pexpect.spawn( 'telnet %s' % (host))         child.expect( 'Username:' )         child.sendline(switch_username)         child.expect( 'Password:' )         child.sendline(switch_telnet_password)         child.expect( '#' )         print (( "Successfully Telnetted to host " ), (host))     except :         try :             #child.expect('>')             child.sendline( 'enable' )             child.expect( 'Password:' )             child.sendline(switch_enable_password)             child.expect( '#' )             print (( "Successfully Telneted to host " ), (host), ( ',and enabled console' ))         except :             print (( "Failed to Telnet to host " ), (host))     return # update firmware def update_firmware ():     try :          # check platform         # child = pexpect.spawn()         # check model         child.sendline( 'show version | include Model number' )         #child.expect('(?:Processor\sboard\sID\s)(\d|\w{11})')         #hardware_model = child.after[-11:]         # check running firmware         child.sendline( 'show version | include MSystem image' )         #child.expect('(?:Processor\sboard\sID\s)(\d|\w{11})')         #firmware = child.after[-11:]         # check available space         child.sendline( 'show flash | include bytes total' )         #child.expect('(?:Processor\sboard\sID\s)(\d|\w{11})')         #flash_available = child.after[-11:]         # upload new firmware         # confirm md5         # set boot variable         # delete old firmware         # notify upgrade         # reboot         print (( "Successfully updated firmware on host " ), (host))     except :         print (( "Failed to update firmware on host " ), (host))     return # load configuration update def load_config_update ():     try :         # copy config file to unit         # child = pexpect.spawn()         child.sendline( 'copy ftp: flash:' )         child.expect( '[Address or name of remote host []?]' )         child.sendline(configuration_server)         child.expect( '[Source filename []?]' )         child.sendline( 'temp_config.cfg' )         print ( "Using device config file temp_config.cfg" )         child.sendline( 'temp_config.cfg' )         child.expect( '[Source filename []?]' )         child.sendline( 'temp_config.cfg' )         child.expect( '#' )         print (( "Successfully copied files to flash " ), (host))         # copy config to running config (append current)         try :             child.sendline( 'copy flash:temp_config.cfg running-config' )             child.expect( '[?]' )             child.sendline( 'running-config' )             child.expect( '#' )             print (( "Successfully copied files to running-config " ), (host))         except :             print (( "Failed to copy files to running-config " ), (host))     except :         print (( "Failed to copy files to flash " ), (host))     return # load custom config def load_custom_config():     try :         # get unit info         # child = pexpect.spawn()         child.sendline( 'show version | include Processor' )         child.expect( '(?:Processor\sboard\sID\s)(\d|\w{11})' )         device_id = child.after[- 11 :]         serial_number = device_id         print (( "This is Device-ID " ), (device_id))         print (( "This is Device-SN " ), (serial_number))         config_file = '%s.cfg' % serial_number         # copy config file to unit         child.sendline( 'copy ftp: flash:' )         child.expect( '[Address or name of remote host []?]' )         child.sendline(configuration_server)         child.expect( '[Source filename []?]' )         print (( "Using device config file " ), (config_file))         child.sendline(config_file)         child.expect( '[Source filename []?]' )         child.sendline( 'temp_config.cfg' )         child.expect( '#' )         print (( "Successfully copied files to flash " ), (host))          # copy config to running config (replace current)         try :             child.sendline( 'copy flash:temp_config.cfg running-config' )             child.expect( '[?]' )             child.sendline( 'running-config' )             child.expect( '#' )              print (( "Successfully copied files to running-config " ), (host))         except :             print (( "Failed to copy files to running-config " ), (host))     except :         print (( "Failed to copy files to flash " ), (host))     return # generate new crypto key def generate_rsa_key ():    # check current key    # ?    # generate new key    try :        # child = pexpect.spawn()        child.sendline( 'crypto key generate rsa' )        child.expect( '(512)' )        child.sendline(rsa_key_length)        child.expect( '#' )        print (( "Successfully generated new RSA key on host " ), (host))    except :        print (( "RSA key gen failed on host " ), (host))    return # save running config def save_running_config():     try :         #child = pexpect.spawn()         child.expect( '#' )         child.sendline( 'write memory' )         child.expect( '[OK]' )         child.expect( '#' )         print (( "Successfully saved the running-config on " ), (host))     except :         print (( "Failed to save the running-config on " ), (host))         #return # backup running config def backup_deployed_congig ():     #child.sendline('quit')     return # test function def test_function ():     try :         print (( "Successfully ran the test function on host " ), (host))     except :         print (( "Test function failed on host " ), (host))     return for line in host_list:     host = line.split()[ 0 ]     print (( "Start configuration on host " ), (host))     platform = None     hardware_model = None     firmware = None     flash_available = None     device_id = None     serial_number = None     config_file = None     login_to_node ()     #update_firmware ()     #load_config_update ()     #load_custom_config ()     #generate_rsa_key ()     save_running_config ()     #backup_deployed_congig ()     test_function () ... View more

Hi Community   I am testing (trying) the POAP functionality in the nexus product range but seem to run into some issues.  I have a N7009, DHCP, TFTP and FTP connected to a management network.  I copied a quite elaborate script from the software download section on the Cisco site.   I’ve edited the script to point to the relevant IP addresses I use in my infrastructure.   The POAP process starts, gets the relevant IP and script file info from the DHCP server.  The switch successfully contacts and downloads the script from the TFTP server but then fail the MD5 validation of the script.  The same failure accurse even if I place an unmodified script on the TFTP server.    I really would like to get this working as I see great value the feature.   regards   Kobus     ... View more

Hi   I am testing a isr  router with a ucs blade installed but seem to run into some issues.  I have the router directly connected to my laptop and are follow the configuration instructions in the configuration guide.  I get the following symptoms in any of the configuration / connectivity scenarios….  connecting to one of the router port and mapping that to the ucs, connecting to port g2 on the ucs or connecting directly to the management port.  I do configure the unit with the appropriate configs for each of the connection types as per the guide.   Problem 1 – although I am able to ping both the router and the cimc IP I cannot web to the cimc. Problem 2 – if I try to install esxi (same as I run on our B and C series servers) it gets to about 75% and then halts looking for a network card.   I am obviously missing something here… any assistance will be appreciated   Regards ... View more

Hi I have a PBR problem on a 3750 running 12.35SE5 (C3750-IPSERVICES-M). SDM configured as "desktop routing". I have a couple of entry points in to my network with specific exit points based on the source of the traffic. With my policy configured with ONE set command it works fine. route-map rm-in permit 10 match ip address sites-in-1 set ip next-hop 172.18.21.110 ! route-map rm-in permit 20 match ip address sites-in-2 set ip next-hop 172.18.21.120 ! The problem starts as soon as I configure TWO set statements. Although the config is allowed in the policy I cannot apply this to the interface. The system does not report any errors but does not configure the policy on the SVI. Once the "set tag" statement is removed, the policy could be applied. route-map rm-in permit 10 match ip address sites-in-1 set tag 2 set ip next-hop 172.18.21.110 ! route-map rm-in permit 20 match ip address sites-in-2 set tag 2 set ip next-hop 172.18.21.120 ! Any assistance or advice  will be welcome. ... View more