About Philip Badhams

Philip Badhams · ‎01-10-2019

Hi Brandon. Please see the switch debug below: Switch debug: Dec 27 2018 15:03:46.097 gmt: SNMP: Packet received via UDP from X.X.X.X on TenGigabitEthernet1/1/3 Dec 27 2018 15:03:46.098 gmt: Incoming SNMP packet Dec 27 2018 15:03:46.098 gmt: v3 packet security model: v3 security level: noauth Dec 27 2018 15:03:46.098 gmt: username: Dec 27 2018 15:03:46.098 gmt: snmpEngineID: 80000009030000425A434F00 Dec 27 2018 15:03:46.098 gmt: snmpEngineBoots: 0 snmpEngineTime: 0 Dec 27 2018 15:03:46.098 gmt: SNMP: Report, reqid 0, errstat 0, erridx 0 usmStats.4.0 = 258 The switches experiencing issues are: WS-3850-12S (IOS Version 03.06.06E) 2960X (IOS Version 15.2(2)E6) Thanks

Philip Badhams · ‎01-07-2019

Hi I have installed CSPC 2.8.1 for a customer and they are experiencing an isssue where the CSPC is configured to use 'Priv Auth' but the devices are reporting the connection attempt is being made using "No Auth" The Auth algorithm is using SHA and the privacy password is using AES-128. The devices have been discovered using IP address and the SNMP security level on the switch is set to "Priv". Can anbody assist in what would cause a device to report an SNMP connection attempt being made using 'no auth' when the collector is set to use 'Priv Auth'? I have asked the customer to confirm the switch IOS versions and am awaiting a response. Any help in the mean time would be appreciated.

Philip Badhams · ‎01-04-2018

Is it possible to send the capture directly to an external source instead of saving it on the CUCM? I have around 5 phones suffering very intermittent silent audio and am just concerned that the logs will fill the CUCM disk quickly. Secondly can you capture from select phones at once or is it one or all? Thanks

Philip Badhams · ‎11-19-2015

Thanks Stephen. Please see the response below from TAC. "As discussed on the call, while associated to SSID you need to perform authentication, either with PSK or dot1x or web-auth (depends on security settings). With PSK and dot1x SSIDs generally no client intervention is needed and process happens transparently as credentials are stored in PC supplicant profile. With web-auth SSID you can connect and obtain IP address but then you are redirected to web portal for logon. When AP moves from one channel to another clients that are associated with it losing network connection, go to scan mode and connect with other SSID, that results in old session termination and establishing new session. In case of dot1x/PSK clients credentials are supplied automatically on re-authentication, however with web-auth SSID client re-associates to SSID but is moved to WEBAUTH_REQ state so every time you are redirected to login portal when you are session is terminated. I can't provide you link to CCO documentation as I wasn't able to find that process clearly mentioned." We have already increased the session timeout to its max as a trial but the same issue is being experienced. The TAC engineer has asked for the DCA timers and anchor time to be increased as a next step to a resolution. Thanks

Philip Badhams · ‎11-19-2015

I have a customer who is running an SSID which uses PSK and centralised Web auth with Radius. The clients are asked at random intervals to re-authenticate Web auth. After raising a TAC case I am led to believe this is due to DCA and the fact that if the AP changes channel the client looses its web auth session. I have been asked to increase the DCA timer, which I will do, however I am struggling to see why you would ever implement DCA when roaming because the if a client needs to re-authenticate everytime they move location or DCA Changes channel then is this not just going to provide a negative end user experience. Any clariifcation would be appreciated Thanks Philip

Philip Badhams · ‎11-19-2015

I have a customer who is running an SSID which uses PSK and centralised Web auth with Radius. The clients are asked at random intervals to re-authenticate Web auth. After raising a TAC case I am led to believe this is due to DCA and the fact that if the AP changes channel the client looses its web auth session. I have been asked to increase the DCA timer, which I will do, however I am struggling to see why you would ever implement DCA when roaming because the if a client needs to re-authenticate everytime they move location or DCA Changes channel then is this not just going to provide a negative end user experience. Any clariifcation would be appreciated Thanks Philip

Philip Badhams · ‎06-05-2014

Has anyone managed to locate the details of how to resolve the Caveat in upgrading to Prime 2.0.0.0.294 to 2.1.0.0.87. There is a bug ID of CSCun11428 in the release notes. ttp://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/2-1/release/notes/cpi_rn.html#83938 show application status NCS (version 2.0.0.0.294) Health Monitor Server is running. Ftp Server is running Database server is running Tftp Server is running Matlab Server is running NMS Server is running. Plug and Play Gateway is running. SAM Daemon is running ... DA Daemon is running ... Syslog Daemon is running ... show application status NCS (Version 2.1.0.0.87) Health Monitor Server is running. Ftp Server is Stopped Database server is stopped Tftp Server is Stopped Matlab Server is Stopped NMS Server is stopped. CNS Gateway with port 11011 is down CNS Gateway SSL with port 11012 is down CNS Gateway with port 11013 is down CNS Gateway SSL with port 11014 is down Plug and Play Gateway Broker with port 61617 is down Plug and Play Gateway config, image and resource are down on https Plug and Play Gateway config, image and resource are down on http Plug and Play Gateway is stopped. SAM Daemon is not running ... DA Daemon is not running ... Syslog Daemon is not running ... I have tried numerous reloads of the Prime Unit (Physical box) but to no avail. If anyone is able to assist in the resolution of this bug it would be much appreciated. The Bug search tool says that the fix is not yet in the public domain but the 2.1 Relased notes mention it as a closed caveat. This prime was running in a HA pair prior to being split for the upgrade. Both boxes are identical. Any help would be appreciated. Thanks

Philip Badhams · ‎02-08-2014

The output is as follows: ISE Database listener is running, PID:4093 ISE Database is running, number of processes: 33 ISE Application Server is running, PID: 5587 ISE M&T Database session is running, PID: 3741 ISE M&T Log Collector is running, PID: 5736 ISE M&T Log Processor is running, PID: 5812 ISE M&T Alert Process is running, PID 5631 I have upgraded the ISE VM to Quad core and 4GB of ram. It has been allocated 68.70GB of HDD. The ISE will not be going into production, it is only for training purposes. The error 500 is still occuring. Thanks

Philip Badhams · ‎01-14-2014

I currently have ISE version 1.1.1.268 installed in an ESXI 5.1 lab environment so I can get used to how it works but when logging in, I get the error code 500 message. I have tried it in both Firefox 26.0 and IE 11 on a Windows 7 Machine The specs of the virtual machine are: Hard disk 64GB 1 vCPU 2GB RAM Guest OS Red had enterpirise Linux 5 (32 Bit) I am able to browe to the login screen using the DNS name and have also tested the lookup using nslookup. The DNS server resides on the same ESXI host and is Windows server 2012. I have also versified that the ise service is running using the CLI and tried restarting the service I am going to try resetting the timezone as suggested in another post, https://supportforums.cisco.com/thread/2120115 but I am just wondering if any one else knows of any other option before doing so as I image, if it was a live environment, resetting the ISE to factory default may not be an option. Any help would be appreciated. Thanks

Date Registered	‎01-14-2014 12:23 AM
Date Last Visited	‎01-17-2019 12:51 AM
Total Messages Posted	9

Re: CSPC SNMPv3 discovery issue - devic...

CSPC SNMPv3 discovery issue - devices r...

Re: Packet Capture on CUCM Appliance Mo...

Thanks Stephen. Please see

5760 Web auth and Dynamic Channel Assig...

5760 Web auth and Dynamic Channel Assig...

Cisco Prime 2.0.0 to 2.0.1 Upgrade bug ...

ISE Error Code 500 ESXI 5.1

ISE Error Code 500 ESXI 5.1