RTCD for Cisco ASA

March 5, 2013, 8:03 pm

≫ Next: What are the system requirements for a VM server running both NPM and NCM?

≪ Previous: NCM Real-Time E-mail Outside Organization

$

0

0

The default rule for RTCD and the pre-configured Syslog rule did not work for our Cisco ASAs.

1. Checksum line changes each time the config changes so it should be ignored by change detection.

2. The rule to trigger config downloads will not be triggered by ASAs.

 

Create a new Syslog Rule:

Name:NCM Rule: Cisco ASA Realtime Change Notifications

Syslog Message Pattern: *end configuration*,*Begin configuration:*reading from http [POST]*

Action: C:\Program Files (x86)\SolarWinds\Orion\SolarWinds.NCM.RTNForwarder.exe ${IP_Address},RealtimeNotification,${DateTime},${Message}

 

Create an new Comparison Criteria :

Title: Cisco ASA 'Cryptochecksum:' line

RegEx Pattern: ^Cryptochecksum:.*

Comment: Ignores the 'Cryptochecksum:' line.

---

What are the system requirements for a VM server running both NPM and NCM?

July 23, 2014, 6:33 am

≫ Next: Is there a way to change the option of adding to NCM when adding a node in NPM to no?

≪ Previous: RTCD for Cisco ASA

$

0

0

We will be adding NCM to a Virtual server that is already running NPM.  What would be the system requirement in order to run both on this single server?

Is there a way to change the option of adding to NCM when adding a node in NPM to no?

July 22, 2014, 1:44 pm

≫ Next: Connection Refused : Problem with NCM downloading Juniper configs

≪ Previous: What are the system requirements for a VM server running both NPM and NCM?

$

0

0

I have NPM 10.7 and NCM 7.3 running on the same server.  I am trying to see if there is a way to have the option for adding to NCM be no for the default when adding to NPM. With the way that it is now, if someone adds a node in NPM and doesn't pay attention then that same node is getting added into NCM. 9 times out of 10 it is a server that is being added.

 

Thanks,

Shalin

Connection Refused : Problem with NCM downloading Juniper configs

August 18, 2011, 12:36 pm

≫ Next: Connectivity issues, discarding configuration (or configuration is too short) NCM 7.1

≪ Previous: Is there a way to change the option of adding to NCM when adding a node in NPM to no?

$

0

0

Hi,

I have problems downloading Juniper config files. It seems this a common issue with downloading config files using SSH. The configuration looks fine (SSH auto, no enable) but whenever I try to download it says connection refused. I searched everywhere but I could not find any answer. I wonder if someone from solarwinds can answer this question.

Regards,

Rayan

Connectivity issues, discarding configuration (or configuration is too short) NCM 7.1

October 5, 2012, 8:29 am

≫ Next: RTCD for Cisco ASA

≪ Previous: Connection Refused : Problem with NCM downloading Juniper configs

$

0

0

I've captured the configs on about 500 routers, but on about 10 of them, I get the following error in config download every time:

Connectivity issues, discarding configuration (or configuration is too short)

How do I troubleshoot this?  I can login manually, and do a show configuration without a problem.

All routers should have identical configuration and IOS version.

RTCD for Cisco ASA

March 5, 2013, 8:03 pm

≫ Next: NCM Real-Time E-mail Outside Organization

≪ Previous: Connectivity issues, discarding configuration (or configuration is too short) NCM 7.1

$

0

0

The default rule for RTCD and the pre-configured Syslog rule did not work for our Cisco ASAs.

1. Checksum line changes each time the config changes so it should be ignored by change detection.

2. The rule to trigger config downloads will not be triggered by ASAs.

 

Create a new Syslog Rule:

Name:NCM Rule: Cisco ASA Realtime Change Notifications

Syslog Message Pattern: *end configuration*,*Begin configuration:*reading from http [POST]*

Action: C:\Program Files (x86)\SolarWinds\Orion\SolarWinds.NCM.RTNForwarder.exe ${IP_Address},RealtimeNotification,${DateTime},${Message}

 

Create an new Comparison Criteria :

Title: Cisco ASA 'Cryptochecksum:' line

RegEx Pattern: ^Cryptochecksum:.*

Comment: Ignores the 'Cryptochecksum:' line.

NCM Real-Time E-mail Outside Organization

July 21, 2014, 2:27 pm

≫ Next: Device Template for Palo Alto Networks PA-4050

≪ Previous: RTCD for Cisco ASA

$

0

0

Has anyone been able to get NCM Real-Time updates with e-mail notification to work? We've got it running rather well, but I can't seem to get it to send e-mail updates to one of our users... the only difference is that this particular user is outside of our organization. Any help?

Device Template for Palo Alto Networks PA-4050

May 19, 2009, 6:10 am

≫ Next: 3com 5500 series -- difficultly saving configuration

≪ Previous: NCM Real-Time E-mail Outside Organization

$

0

0

This is a Device Template for the Palo Alto Networks PA-4050 Firewall. It was detected by NCM as SystemOID: 1.3.6.1.2.1.1.8.0. Generic template was modified w/ basic functions such as: turning off the screen pause function when viewing the running config, showing the config, downloading config, version info, etc…

Still a work in progress but it at least gets the job done. Feel free to add-on.

-B

---

3com 5500 series -- difficultly saving configuration

July 28, 2014, 4:10 pm

≫ Next: NCM EOS/EOL Dates Query - 7.2

≪ Previous: Device Template for Palo Alto Networks PA-4050

$

0

0

Hi all -- has anyone encountered or resolved an issue with saving changes to 3com 5500 series switches? I am able to download the current configuration or script an update but am unable to save. Tried creating a template variable and executing from command script without success.

 

<Command Name="SaveConfig" Value="Save${CRLF}y${CRLF}${CRLF}"/>

 

example of manual save:

 

[rhcn0asw01]save

The configuration will be written to the device.

Are you sure?[Y/N]y

Please input the file name(*.cfg)(To leave the existing filename

unchanged press the enter key):

Now saving current configuration to the device.

Saving configuration. Please wait...

......

Unit1 save configuration flash:/rhcn0asw01_2014.jun.5.13.23.cfg successfully

Unit2 save configuration flash:/rhcn0asw01_2014.jun.5.13.23.cfg successfully

Unit3 save configuration flash:/rhcn0asw01_2014.jun.5.13.23.cfg successfully

Unit4 save configuration flash:/rhcn0asw01_2014.jun.5.13.23.cfg successfully

 

 

%Jul 28 15:49:59:208 2014 rhcn0asw01 CFM/3/CFM_LOG:- 1 -Unit1 saved configuration successfully.

%Jul 28 15:49:59:211 2014 rhcn0asw01 CFM/3/CFM_LOG:- 1 -Unit2 saved configuration successfully.

%Jul 28 15:49:59:214 2014 rhcn0asw01 CFM/3/CFM_LOG:- 1 -Unit3 saved configuration successfully.

%Jul 28 15:49:59:218 2014 rhcn0asw01 CFM/3/CFM_LOG:- 1 -Unit4 saved configuration successfully.

[rhcn0asw01]

 

Thanks Everyone.

NCM EOS/EOL Dates Query - 7.2

September 26, 2013, 9:03 am

≫ Next: Dell Force10 Switches and NCM

≪ Previous: 3com 5500 series -- difficultly saving configuration

$

0

0

Hi, Upgraded to 7.2

 

Is there a way around having to go into every device and select the corrcet model and EOS/EOL date from the suggestions?

 

I already have EOS, EOL dates against most node IDs in NCM from manual work - and to now have to go back through and select 1000 of them manually is a bit much...any help?

 

If the answer to the above is "it is a manual process only" then i will need to be able to import the attached into the nodes table, linking the appropriate fields in the EOS tables to keep consistancy. as the moment I am about a year behind where i was with my own EOL reporting.

 

Edited: This needs to be based on 'Inventory data' as per my reports, NCM needs to be able to support switch stacks (3750x) and VSS (Virtual Switches) which are represented as one node in NPM, and for many other purposes in NCM, but for EOL/EOS and inventory based functions like this it will maybe need to EOL/EOS data residing in the Physical Inventory table instead? so that line cards and all other modules could be reported on?

 

CSV of current dates attached. (Cisco_EOL_Dates_PerNode_NCM.txt)

 

Copy of current report and colour formatting also attached (summary version only so I dont have to redact information). I will as soon as i have all the correct data in NCM Nodes re-create the sql report and share to the community. (Audit Count by Model ALL.pdf). All data is taken from NCM, formatting is as below;

 

Fill:

=IIF(Fields!EoL.Value < Today(), "Red",

IIF(Fields!EoL.Value < dateadd(dateinterval.Year, 2, Today()), "Orange", IIF(Fields!EoL.Value < dateadd(dateinterval.Year, 15, Today()), "GreenYellow", "White")))

 

Font:

=IIF(Fields!EoL.Value < Today(), "White","Black")

 

Lastly I have some issues, which i will log here first then if required log a feature/bug request.

1. Device in Sale/Support

Would like it to show a 'green tick' next to devices that have not had an EOS or EOL raised against them.

"n\a" or similar in date fields. At the moment it looks like they have just not found a matching item,

and shows as 'no suggested dates' rather than 'no notice is applicable etc

2. Manual Date Boxes

Does NOT let you type in a date directly, have to scroll through months and months to get to the correct year!! not user friendly.

3. 'Best Match' Option

It may be better if NCM could match the PartNo not machinetype it seems to use (very good on Cisco EOL codes) and make a best match, rather

than manually having to go through each device and choose the one that matches.

Can SW share the matching code it uses? see if it can be tweaked by us SW users..

Dell Force10 Switches and NCM

April 7, 2014, 7:04 am

≫ Next: Any way of easily limiting a policy report to just Cisco IOS devices?

≪ Previous: NCM EOS/EOL Dates Query - 7.2

$

0

0

We recently purchased some Dell Force10 S4810 switches.  We're trying to add them into Orion but SNMP will not connect from the Orion server.  The switch is showing  '%STKUNIT0-M:CP %SNMP-3-SNMP_AUTH_FAIL: SNMP Authentication failure for SNMP request from host' errors. We don't have any ACLs configured for the SNMP communities and I've verified the community strings are valid.  Has anyone seen this before?

 

Thanks,

 

SS

Any way of easily limiting a policy report to just Cisco IOS devices?

June 26, 2012, 3:19 am

≫ Next: Script needed to add to an existing config.

≪ Previous: Dell Force10 Switches and NCM

$

0

0

Hi all,

 

I'm currently writing a policy report to run against my Cisco IOS devices. Currently it's set to run against any Cisco device (I've edited one of the Cisco template reports) using the function:

 

NCM Policy Reporter selection criteria

Where ( (Nodes.Vendor = 'Cisco') )

 

I'd like to limit it to just IOS devices rather than running it against NX-OS/FWSM/ASA etc, is there a straightforward way of just selecting IOS devices?

 

Thanks,

JohnCisco

Script needed to add to an existing config.

July 30, 2014, 12:50 pm

≫ Next: Cisco SNMP trap for Realtime Change Detection

≪ Previous: Any way of easily limiting a policy report to just Cisco IOS devices?

$

0

0

I apologize in advance since I am new to the community.  I could not find any scripts readily available and I am horrible at scripting....

 

I am evaluating NCM for my company and need some assistance on building a simple script to add IP addresses to an ACL on an existing config. 

 

This is for a Cisco Switch.

 

Thanks,

Cisco SNMP trap for Realtime Change Detection

October 1, 2009, 11:45 am

≫ Next: Execute script with if/else statement possible?

≪ Previous: Script needed to add to an existing config.

$

0

0

I am working on getting RTCD working. I have my cisco devices configured to send SNMP traps:

snmp-server enable traps config

However, a trap is sent when a user enters config mode, not if they actually change anything or when they exit config mode. This is useless since none of the changes are downloaded. Is it possible to use SNMP to send a trap when the config is changed? It seems syslog will log an entry when it's changed, but I'd rather rely on SNMP.

Execute script with if/else statement possible?

July 31, 2014, 6:33 am

≫ Next: Is there a script to backup a Juniper MX router?

≪ Previous: Cisco SNMP trap for Realtime Change Detection

$

0

0

Hi,

 

is it possible to make if-statements by an execute script?

 

I want to execute a script (not a template) and want to ask if something is set or not.

 

I know I can use variables so can I use the same functions such as in templates?

 

 

Kind regards,

Flo

---

Is there a script to backup a Juniper MX router?

July 31, 2014, 11:22 am

≫ Next: Execute Script ("wr") from results if Running vs. Startup conflicts?

≪ Previous: Execute script with if/else statement possible?

$

0

0

I am trying to backup the configuration for a Juniper MX router.  I have found a couple scripts but have been unsuccessful.  Has anyone created a script for NCM to do this?

Execute Script ("wr") from results if Running vs. Startup conflicts?

August 7, 2013, 2:30 am

≫ Next: Anyone upgrade to NCM 7.3?

≪ Previous: Is there a script to backup a Juniper MX router?

$

0

0

Is it currently possible to execute a script (i.e. "wr/copy run start") from results of the Running vs. Startup conflicts chart?

 

Or do this via a policy?

 

Cheers

Anyone upgrade to NCM 7.3?

May 28, 2014, 10:00 am

≫ Next: Help Me Target Devices in NCM Compliance Policy

≪ Previous: Execute Script ("wr") from results if Running vs. Startup conflicts?

$

0

0

Just looking for user experience on anyone that has upgraded to NCM 7.3 since it went GA.  We've had some past bad experiences with major point upgrades so I want to see what others have experienced so far on this upgarde

Help Me Target Devices in NCM Compliance Policy

July 31, 2014, 10:02 am

≫ Next: add existing node to NCM

≪ Previous: Anyone upgrade to NCM 7.3?

$

0

0

This is a sample of what I am trying to target with some of my policies.

The logic of this Dynamic selection of nodes is really puzzling me.

I want to target two kinds of nodes with this policy: Cisco devices with "swi" in the name AND Cisco devices that are not labeled with "CME" in a custom field but ALSO do not have "FW" or "VPN" in the name.

This is not the only case of tricky node selection, I am trying to write a lot of these policies that taget very specific kinds of nodes.

 

Can someone help me better understand how the AND/OR logic flows here?

add existing node to NCM

August 4, 2014, 6:46 am

≫ Next: Very slow config backups on Fortigate FWs (NCM 7.2.2)

≪ Previous: Help Me Target Devices in NCM Compliance Policy

$

0

0

I may be missing something here, but as a node manager how can I add an existing node to NCM? when you click edit properties, there are numerous tick boxes but not one to add node to NCM?

 

now i know there is a way through manage NCM nodes, i'm not daft, but that is only available to admin users, not 'node management' security as it should be.

 

if someone could shed light on this issue asap

 

m