I am trying to perform a MIB walk on a device I have recently configured SNMPv3 on. I have configured my v3 view as follows...   snmp-server view ALL iso included snmp-server group MyReadWriteGroup v3 priv read ALL write ALL access 1 snmp-server user Myv3User MyReadWriteGroup v3 auth sha PASSWORD priv aes 128 PASSWORD access 1   As far as I know this all looks good to me and I have created a view that will allow any user in the group I've configured called 'MyReadWriteGroup' to view everything in the MIB table below the OID which is everything.   However when I try a MIB walk my MIB walking tool, it keeps dying during the walk. The applications vendor support are trying to tell me this has something to do with SNMPV3 contexts (contexts are views right?), they are trying to telll me my config is only allowing a certain amount of the MIB to be viewable but as you can see above I have configured the view for my user to be from iso down so he should have a view of everything?    Am I correct in saying this?    Also the other approach I was thinking was not to create a view at all as I have read that if no view is configured then the whole MIB is viewable? If this is the case I can remove views/context from my investigation as to why my MIB walk won't complete.   Here's a 'sh snmp group' for a group I didn't specify a view for and you can see the view is autopopulated for v1default, is this the default view that gives visibility to the whole MIB?    Router#sh snmp group groupname: NVG security model:v3 priv contextname: <no context specified> storage-type: nonvolatile readview : v1default writeview: <no writeview specified> notifyview: <no notifyview specified> row status: active access-list: 1   And here is the sh snmp group for my 'MyReadWriteGroup'   groupname: MyReadWriteGroup security model:v3 priv contextname: <no context specified> storage-type: nonvolatile readview : ALL writeview: ALL notifyview: <no notifyview specified> row status: active access-list: 1   As far as I can tell both groups should have members that can view the whole of the MIB.    Any ideas on this I can't find clear documentation on this! Thanks for reading!       ... View more

Hi I am trying to find a way to report on all IP's in each VRF configured on a Nexus switch. I am running a similar report for regular IOS routers and switches this is simply acieved by polling ipAdEntAddr 1.3.6.1.2.1.4.20.1.1.    This OID however is not supported by Nexus kit. Is there an OID that I can poll to gather all the IP's configured on a Nexus switch? ... View more

If I don't specify a view and I use v1Default when configuring an SNMPv3 group, what MIB access is available to a member of the aforementioned SNMPv3 group? What exactly is the value/meaning of v1default?   groupname: MYREADGROUP security model:v3 priv readview : v1default writeview: <no writeview specified> notifyview: <no notifyview specified> row status: active access-list: 200     ... View more

Can't find much in the user guide but it doesn't appear that there is a way to schedule a sync job with Prime Infrastructure 3.4. I want to set up a job where prime will sync with managed nodes. It seems as if the only way to sync a device is manually one by one? ... View more

I am often looking to remdiate vulnerabilties across our cisco estate. One vulnerabilty I am working with at the moment is trying to address machines on our network that are running telnet. To remediate this I am looking to enable ssh and disable telnet but often when I log on to a device I can check its IOS version or what software it is running then use the cisco feature navigator tool to determine whether that version of code supports ssh, or I can also run a 'sh ip ssh' and wait for the 'invalid input ^...'  response What I would really like would be a tool that would match up what versions of code are supported on what box. So for a 2950 switch I could enter in Hardware Platform: Cisco 2950   and get versions of code which will run on this platform then I could hopefully determine from the software version name what feature sets are supported and whether I can upgrade the code to remediate the vulnerability. Is such a tool or similar available anywhere? Any help or a push in the right direction appreciated. TIA! ... View more

I am migrating our NMS and I need to assign a new different IP address to the server I am migrating to. One concern I have is that I want to make sure that all nodes I am monitoring are set up to send syslog and SNMP traps to the new address, I could just add config to point the nodes at the new syslog and trap destination but am cocerned that I can't send syslog and SNMP traps to two different addresses concurrently. Can't seem to find any documentation to back this up? I'd like to configure nodes to send to two different addresses then when I have successfully cutover I can remove references to the old address I am migrating from. Can I send syslog and traps to two different location sconcurrently? ... View more

The OID I am polling at the moment is cefcModuleOperStatus 1.3.6.1.4.1.9.9.117.1.2.1.1.2. When I poll a Nexus 7k switch I am getting a result: 2,2. I am guessing this means OK and OK. The thing is I don't know what other outputs there are for this OID and what there values might mean. I am guessing I'm correct in assuming that the values 2,2 mean OK, OK because I logged on to the switch and saw that both power modules were in OK state  Why are OID's so opaque?! I can't find any decent documentation which gives a full thorough explanation of what each non intuitively named OID might mean and how to interpret the results. So frustrating! Anyway does anybody know if this is indeed the correct OID to poll? and if so are you aware of the possible out puts and what the nemerical values returned might translate to eg. 0 = absent, 1 = failed, 2 = OK?  ... View more

I am searching for this image: c7200-ik9s-mz.122-11.T.bin in Cisco Feat. Nav. it's on a machine of ours and I want to see what features are available on it. However when I search by name I can't seem to find it? See screen shot? Also for a bonus point anybody got a link to a good article or any sort of resource that explains how to read/understand Cisco naming conventions for their IOS software?         ... View more