Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About ssambourg
Stats
Member since
02-26-2009
83
Posts
16
Helpful
2
Solutions
Certifications
03-26-2020
03:22 AM
Hello, I have a problem on Prime Infrastructure 3.6 last patch. For some switches, clients appears for others switches clients don't appears. I check that there is connected client on theses switches where client don't show up in Prime and mac-address table is not empty for these switch ports. It happens on different hardware model. What could be a root cause of that ? My snmpwalk from Prime Infra to switches where I have the problem seems to be correct but I assume that the SSH connection is used to gather the clients mac address table. I also tried to re-sync these switches, suppress them from my inventory and add them again. I check on my firewall between prime and switches and no one packet is dropped..
... View more
- Tags:
- primeinfrastructure
Labels:
Created by
ssambourg
in Network Security
in Network Security
03-05-2020
02:10 AM
03-05-2020
02:10 AM
Hello, Unfortunately after FMC reboot I still have the problem. We also try with different browser (chrome, Edge, FF).
... View more
Created by
ssambourg
in Network Security
in Network Security
03-04-2020
01:20 AM
03-04-2020
01:20 AM
Hello, We upgraded FMC from 6.2.3 to 6.4.0.8. After this upgrade, we started to create prefilter rule (no one prefilter rule before). Under 'Port' tab, the available port section stays in Loading state. I don't see this behavior under ACP rules. Anyone note that ? I look after a way to troubleshoot that in CLI. I've attached a screenshot of the concerned tab.
... View more
Created by
ssambourg
in Network Management
in Network Management
09-18-2019
09:16 AM
09-18-2019
09:16 AM
Hi Guys, Finally I find a solution after reading details on local EngineID. I found this here : https://www.cisco.com/assets/sol/sb/SG220_Emulators/SG220_Emulator_v1-0-0-18_20140626/help/SNMP05.html The Engine ID is only used by SNMPv3 entities to uniquely identify them. An SNMP agent is considered an authoritative SNMP engine. This means that the agent responds to incoming messages (Get, GetNext, GetBulk, Set), and sends trap messages to a manager. After suppressing snmp-server engineID local. Modifying the local engineID means to suppress and recreat SNMP v3 user and group. Configuration example : conf t
no snmp-server user Pr1meSnMp-RW prime-group v3
no snmp-server group prime-group v3 priv
no snmp-server engineID local
no snmp mib community-map public engineid
snmp-server group prime-group v3 priv access acl-snmp
snmp-server user Pr1meSnMp-RW prime-group v3 auth md5 ****** priv aes 128 ****** Then the show snmp user show my user with the new unique local engineID. After doing this modification, I sync the devices and the issue is resolved. HTH
... View more
Created by
ssambourg
in Network Management
in Network Management
09-17-2019
02:55 AM
09-17-2019
02:55 AM
Hello, I'm using a Cisco Prime Infra 3.6 (Patch 2). I have the same problem with two "WS-C2960S-24TS-L" version 12.2(53)SE2 for the first and 15.2(2)E9 for the second one. I am using SNMP v3 (MD5/AES128 and try at first with AES258). But the problem is the same if I try with SNMP v2c. Here is my SNMP configuration on switch side : (prime 192.168.113.34) snmp-server engineID local 8000000903000009E8432381
snmp-server group prime-group v3 priv
snmp-server view myview iso included
snmp-server community public RO acl-snmp
snmp-server community private RW acl-snmp
snmp-server chassis-id Switch
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps cluster
snmp-server enable traps config
snmp-server enable traps entity
snmp-server enable traps rtr
snmp-server enable traps syslog
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps flash insertion removal
snmp-server enable traps port-security
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps vlan-membership
snmp-server host 192.168.113.34 version 3 priv Pr1meSnMp-RW
snmp-server host 192.168.113.34 version 2c private
snmp-server host 192.168.113.34 version 2c public
snmp-server host 192.168.113.35 version 2c public What I see when I add one of these switch into Prime : Some SNMP informations are collected by Prime. On switch side, the SNMP debug : [...]
ciscoEnvMonSupplyStatusEntry.2.1006 = NULL TYPE/VALUE
044811: Sep 17 11:36:03.864: SNMP: Response, reqid 983959, errstat 0, erridx 0
ciscoEnvMonSupplyStatusEntry.3.1006 = 1
ciscoEnvMonSupplyStatusEntry.2.1006 = Sw1, PS1 Normal, RPS NotExist
044812: Sep 17 11:36:03.874: SNMP: Packet sent via UDP to 192.168.113.35
044813: Sep 17 11:36:04.409: SNMP: Packet received via UDP from 192.168.113.35 on Vlan3
044814: Sep 17 11:36:04.409: SNMP: Get request, reqid 983956, errstat 0, erridx 0
ciscoMemoryPoolEntry.5.16 = NULL TYPE/VALUE
ciscoMemoryPoolEntry.6.16 = NULL TYPE/VALUE
044815: Sep 17 11:36:04.414: SNMP: Response, reqid 983956, errstat 0, erridx 0
ciscoMemoryPoolEntry.5.16 = 40
ciscoMemoryPoolEntry.6.16 = 1048536
044816: Sep 17 11:36:04.414: SNMP: Packet sent via UDP to 192.168.113.35
044817: Sep 17 11:36:04.949: SNMP: Packet received via UDP from 192.168.113.34 on Vlan3
044818: Sep 17 11:36:04.949: SNMP: Report, reqid 2147483647, errstat 0, erridx 0
usmStats.2.0 = 363
044819: Sep 17 11:36:04.949: SNMP: Packet sent via UDP to 192.168.113.34
044820: Sep 17 11:36:10.360: SNMP: Packet received via UDP from 192.168.113.35 on Vlan3
044821: Sep 17 11:36:10.360: SNMP: Get request, reqid 983961, errstat 0, erridx 0
cpmCPUTotalEntry.4.1 = NULL TYPE/VALUE
cpmCPUTotalEntry.7.1 = NULL TYPE/VALUE
cpmCPUTotalEntry.17.1 = NULL TYPE/VALUE
cpmCPUTotalEntry.19.1 = NULL TYPE/VALUE
cpmCPUTotalEntry.23.1 = NULL TYPE/VALUE
cpmCPUTotalEntry.12.1 = NULL TYPE/VALUE
cpmCPUTotalEntry.13.1 = NULL TYPE/VALUE
cpmCPUTotalEntry.15.1 = NULL TYPE/VALUE
ciscoMemoryPoolEntry.5.1 = NULL TYPE/VALUE
ciscoMemoryPoolEntry.6.1 = NULL TYPE/VALUE
lsystem.8.0 = NULL TYPE/VALUE
lsystem.19.0 = NULL TYPE/VALUE
lsystem.27.0 = NULL TYPE/VALUE
lsystem.35.0 = NULL TYPE/VALUE
lsystem.43.0 = NULL TYPE/VALUE
lsystem.67.0 = NULL TYPE/VALUE
lsystem.47.0 = NULL TYPE/VALUE
snmpEngine.2.0 = NULL TYPE/VALUE
snmpEngine.3.0 = NULL TYPE/VALUE
044822: Sep 17 11:36:10.391: SNMP: Response, reqid 983961, errstat 0, erridx 0
cpmCPUTotalEntry.4.1 = 8
cpmCPUTotalEntry.7.1 = 8
cpmCPUTotalEntry.17.1 = NO_SUCH_OBJECT_EXCEPTION
cpmCPUTotalEntry.19.1 = NO_SUCH_OBJECT_EXCEPTION
cpmCPUTotalEntry.23.1 = NO_SUCH_OBJECT_EXCEPTION
cpmCPUTotalEntry.12.1 = NO_SUCH_OBJECT_EXCEPTION
cpmCPUTotalEntry.13.1 = NO_SUCH_OBJECT_EXCEPTION
cpmCPUTotalEntry.15.1 = NO_SUCH_OBJECT_EXCEPTION
ciscoMemoryPoolEntry.5.1 = 26451444
ciscoMemoryPoolEntry.6.1 = 47745184
lsystem.8.0 = 47745184
lsystem.19.0 = 25
lsystem.27.0 = 6983
lsystem.35.0 = 23560
lsystem.43.0 = 0
lsystem.67.0 = 0
lsystem.47.0 = 0
snmpEngine.2.0 = 1
snmpEngine.3.0 = 886
[...] And I notice that the SNMP Get request loop like if there is a missing information collection. From Prime Infra, the SNMP Walk give : ade # snmpwalk -v3 -u Pr1meSnMp-RW -l AuthPriv -a MD5 -A ******* -x AES -X ****** 192.168.107.223
SNMPv2-MIB::sysDescr.0 = STRING: Cisco IOS Software, C2960S Software (C2960S-UNIVERSALK9-M), Version 12.2(53)SE2, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2010 by Cisco Systems, Inc.
Compiled Wed 21-Apr-10 06:08 by prod_rel_team
SNMPv2-MIB::sysObjectID.0 = OID: SNMPv2-SMI::enterprises.9.1.1208
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (114031903) 13 days, 4:45:19.03
SNMPv2-MIB::sysContact.0 = STRING: *********
SNMPv2-MIB::sysName.0 = STRING: *****
SNMPv2-MIB::sysLocation.0 = STRING: *****
SNMPv2-MIB::sysServices.0 = INTEGER: 6
SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORID.1 = OID: SNMPv2-SMI::enterprises.9.7.129
SNMPv2-MIB::sysORID.2 = OID: SNMPv2-SMI::enterprises.9.7.115
SNMPv2-MIB::sysORID.3 = OID: SNMPv2-SMI::enterprises.9.7.265
SNMPv2-MIB::sysORID.4 = OID: SNMPv2-SMI::enterprises.9.7.112
SNMPv2-MIB::sysORID.5 = OID: SNMPv2-SMI::enterprises.9.7.106
SNMPv2-MIB::sysORID.6 = OID: SNMPv2-SMI::enterprises.9.7.47
SNMPv2-MIB::sysORID.7 = OID: SNMPv2-SMI::enterprises.9.7.122
SNMPv2-MIB::sysORID.8 = OID: SNMPv2-SMI::enterprises.9.7.135
SNMPv2-MIB::sysORID.9 = OID: SNMPv2-SMI::enterprises.9.7.43
SNMPv2-MIB::sysORID.10 = OID: SNMPv2-SMI::enterprises.9.7.37
SNMPv2-MIB::sysORID.11 = OID: SNMPv2-SMI::enterprises.9.7.92
SNMPv2-MIB::sysORID.12 = OID: SNMPv2-SMI::enterprises.9.7.53
SNMPv2-MIB::sysORID.13 = OID: SNMPv2-SMI::enterprises.9.7.54
SNMPv2-MIB::sysORID.14 = OID: SNMPv2-SMI::enterprises.9.7.52
SNMPv2-MIB::sysORID.15 = OID: SNMPv2-SMI::enterprises.9.7.93
SNMPv2-MIB::sysORID.16 = OID: SNMPv2-SMI::enterprises.9.7.186
SNMPv2-MIB::sysORID.17 = OID: SNMPv2-SMI::enterprises.9.7.128
SNMPv2-MIB::sysORID.18 = OID: SNMPv2-SMI::enterprises.9.7.121
SNMPv2-MIB::sysORID.19 = OID: SNMPv2-SMI::enterprises.9.7.44
SNMPv2-MIB::sysORID.20 = OID: SNMPv2-SMI::enterprises.9.7.99999
SNMPv2-MIB::sysORID.21 = OID: SNMPv2-SMI::enterprises.9.7.350
SNMPv2-MIB::sysORID.22 = OID: SNMPv2-SMI::enterprises.9.7.33
SNMPv2-MIB::sysORID.23 = OID: SNMPv2-SMI::enterprises.9.7.130
SNMPv2-MIB::sysORID.24 = OID: SNMPv2-SMI::enterprises.9.7.116
[...] and the walk stop/pause at this point : [...] SNMPv2-MIB::sysORUpTime.73 = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::sysORUpTime.74 = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::sysORUpTime.75 = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::sysORUpTime.76 = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::sysORUpTime.77 = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::sysORUpTime.78 = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::sysORUpTime.79 = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::sysORUpTime.80 = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::sysORUpTime.81 = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::sysORUpTime.82 = Timeticks: (0) 0:00:00.00
And after a wait of about 30s, the SNMP Walk go on very slowly : [...]
IF-MIB::ifSpeed.10109 = Gauge32: 10000000
IF-MIB::ifSpeed.10110 = Gauge32: 10000000
IF-MIB::ifSpeed.10111 = Gauge32: 1000000000
IF-MIB::ifSpeed.10112 = Gauge32: 1000000000
[...] When the Add/Sync process is in progress into prime, I can go to Monitor > Network Device and see some SNMP information (interface, vlan spanning-tree, uptime, ...). I don't know if this setting is correct regarding my hardware & software : snmp-server engineID local 8000000903000009E8432381 What I read is that any change on this setting implie to recreat my SNMP v3 group & user.
... View more
Labels:
09-06-2019
07:44 AM
Hello, to make the routing decision process for the connected subnet, you can't have two interfaces in the same subnet (partially / totaly). 10.208.75.69 255.255.255.192 start from 10.208.64.0 (network address) and finish at 10.208.127.255 (broadcast). 10.208.75.65 255.255.255.252 start from 10.208.75.64 (network address) and finish to 10.208.75.67 (broadcast). Vlan 151 network adress is included in your vlan 12 network adress. You need to review your addressing scheme. HTH
... View more
09-06-2019
02:21 AM
Do you check that : https://community.cisco.com/t5/network-management/can-i-rate-limit-on-the-sub-interface-in-cisco-asr-1013/td-p/2003581
... View more
09-06-2019
02:12 AM
Hi, Could you please share the output of the show ip nat translation command ?
... View more
09-06-2019
02:08 AM
Hello, I think you will have to set L3 sub interfaces where you will apply the rate limit. Or you can try to set class-map which match your 3 vlans then a policy map where you set up a shaper and apply this service-policy into the interface connected to your ISP. HTH
... View more
Created by
ssambourg
in Network Access Control
in Network Access Control
09-06-2019
02:05 AM
09-06-2019
02:05 AM
Hi, You will need to affect shell privilege and command set in result profile linked to a condition that match your identity group. Did you try this : https://www.cisco.com/c/en/us/support/docs/security/secure-access-control-system/113590-acs5-tacacs-config.html HTH
... View more
09-06-2019
01:20 AM
Hi, Enable the HTTPS server to listen on a different port in order to change the configuration that is related to the ASDM service on the ASA, as shown here: ASA(config)#http server enable <1-65535> configure mode commands/options: <1-65535> The management server's SSL listening port. TCP port 443 is the default. Here is an example: ASA(config)#http server enable 65000 After you change the default port configuration, use this format in order to launch the ASDM from a supported web browser on the security appliance network: https://interface_ip_address:<customized port number> Don't forget to permit your public IP to access ASDM with this CLI : http [your public IP] 255.255.255.255 outside ! or all public IP : http 0.0.0.0 0.0.0.0 outside HTH
... View more
Created by
ssambourg
in Network Management
in Network Management
09-06-2019
12:54 AM
09-06-2019
12:54 AM
Hi, As I already said, escalation to AM / SE was already done. They escalate to BU. We now have a BU answer : Cat 9500-H SVL support is planned for PI 3.8 release which is tentatively scheduled for Q2 So nothing sure for short term but will arrive. Today, there is no parity feature from Prime Infra to DNAC, isn't it ?
... View more
Created by
ssambourg
in Network Management
in Network Management
09-06-2019
12:47 AM
09-06-2019
12:47 AM
Hi,
... View more
Created by
ssambourg
in Network Management
in Network Management
08-28-2019
01:22 AM
08-28-2019
01:22 AM
You are right ! Just one important word in : there curently is no plan May be this plan will exist !
... View more
Created by
ssambourg
in Network Management
in Network Management
07-02-2019
08:41 AM
07-02-2019
08:41 AM
Hello, This had already been done to SE who escalated to BU.
... View more
03-26-2020
Hello, I have a problem on Prime Infrastructure 3.6 last patch. For some
switches, clients appears f...
Created by
ssambourg
in Network Security
03-05-2020
03-05-2020
Hello, Unfortunately after FMC reboot I still have the problem. We also
try with different browser (...
Created by
ssambourg
in Network Security
03-04-2020
03-04-2020
Hello, We upgraded FMC from 6.2.3 to 6.4.0.8. After this upgrade, we
started to create prefilter rul...
Created by
ssambourg
in Network Management
09-18-2019
09-18-2019
Hi Guys, Finally I find a solution after reading details on local
EngineID. I found this here :
http...
Created by
ssambourg
in Network Management
09-17-2019
09-17-2019
Hello, I'm using a Cisco Prime Infra 3.6 (Patch 2). I have the same
problem with two "WS-C2960S-24TS...
09-06-2019
Hello, to make the routing decision process for the connected subnet,
you can't have two interfaces ...
09-06-2019
Hi, You will need to affect shell privilege and command set in result
profile linked to a condition ...
09-06-2019
Hi, Enable the HTTPS server to listen on a different port in order to
change the configuration that ...
Created by
ssambourg
in Network Management
09-06-2019
09-06-2019
Hi, As I already said, escalation to AM / SE was already done. They
escalate to BU. We now have a BU...
Created by
ssambourg
in Network Management
08-28-2019
08-28-2019
You are right ! Just one important word in : there curently is no plan
May be this plan will exist !
Created by
ssambourg
in Network Management
07-02-2019
07-02-2019
Hello, This had already been done to SE who escalated to BU.
Public Statistics
| Date Registered | 02-26-2009 09:34 AM |
| Date Last Visited | 04-01-2020 04:53 AM |
| Total Messages Posted | 83 |
| Total Helpful Votes Received | 16 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 10 | |
| 5 | |
| 5 | |
| 10 |
.jpg "Hall of Fame Guru"){kind=icon}
Helpful Votes From
.jpg "VIP Mentor"){kind=icon}
