Performance Monitor 3.2.1

Unanswered Question
Sep 15th, 2008
User Badges:

I have installed Cisco Security Manager 3.2.1 with RME 4.1.1, AUS 3.2.1 along with Performance Monitor 3.2.1 version on the same server.


Iam able to add devices in RME, AUS and working fine with adding devices in CSM and able to discover the existing VPN's.


I properly configured SNMP RO community string, enabled HTTPS but unable to add devices in performance monitor.

I get the error " either the HTTPS was not enabled or the credentials are not correct."


HTTPS is enabled and proper credentials are entered and same is working fine when devices are added in CSM.


Can anyone help me on this.


Thanks,

Chandru

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
ckuriyar74 Mon, 09/15/2008 - 22:22
User Badges:

Hi Farrukh,


Its a good link.


I have created a username with same user password and enable password for PIX/ASA firewalls


If I create a new username with less priv level still I get the same error message.


Any other solution to resolve this issue?


Thanks,

Chandru

Farrukh Haroon Mon, 09/15/2008 - 23:32
User Badges:
  • Red, 2250 points or more

Why don't you give this username privilege 15 only? Can you post outputs of


show run aaa

show run username (remove the passwords)


Regards


Farrukh

ckuriyar74 Mon, 09/15/2008 - 23:36
User Badges:

ASA5510# sh run aaa

aaa authentication ssh console LOCAL

aaa authentication http console LOCAL

aaa authentication telnet console LOCAL


ASA5510# sh run username

username admin password xxxxx encrypted privilege 15

username readonly password xxxxx encrypted privilege 5


Thanks,

Chandru

Farrukh Haroon Mon, 09/15/2008 - 23:55
User Badges:
  • Red, 2250 points or more

This seems OK, please post 'show run http' as well


Regards


Farrukh

ckuriyar74 Tue, 09/16/2008 - 00:00
User Badges:

ASA5510# sh run http

http server enable

http 193.169.1.0 255.255.255.0 management

http 147.183.0.0 255.255.0.0 inside

http 10.1.0.0 255.255.0.0 inside

ASA5510#


I have 147.183.0.0 and 10.1.0.0 inside networks configured for HTTP access and CSM server is in 147.183.0.0 network


Thanks,

Chandru

Farrukh Haroon Tue, 09/16/2008 - 00:09
User Badges:
  • Red, 2250 points or more

So in CPM when importing the device are you using username/passwd or also the enable password?


Regards


Farrukh

ckuriyar74 Tue, 09/16/2008 - 00:17
User Badges:

When I try to import I use the username admin and user password.


User password and enable password are the same.


If I change the user password I get the same error message.

Farrukh Haroon Tue, 09/16/2008 - 00:40
User Badges:
  • Red, 2250 points or more

Can you post the screenshot of the page on which you are entering the username/password AFTER entering the values?


Also are you able to add other devices properly?


Did you also try to import using DCR file (exported from CiscoWorks)?


Regards


Farrukh

ckuriyar74 Tue, 09/16/2008 - 01:12
User Badges:

Iam not able to add any devices and unable to import using DCR file as well. I get the same error when import using DCR.


Devices-->Importing Devices-->Import-->Manually Add new devices-->


I have attached the screenshot.



Attachment: 
Farrukh Haroon Tue, 09/16/2008 - 02:39
User Badges:
  • Red, 2250 points or more

So you are putting username admin and the password in BOTh the fields below? Have you double checked this password by logging into the device itself? Is the SNMP community string correct? can you post 'show run snmp-server' output.


Is this PIX or ASA and which version?


Regards


Farrukh

ckuriyar74 Tue, 09/16/2008 - 02:50
User Badges:

yes, Iam using the correct password. We have standard passwords set. All the devices set user password & enable password same.

I can login to ASA using same password and it works fine. SNMP community is correct.


The ASA version is 8.0(3)


ASA5510# sh run snmp-server

snmp-server host inside 10.1.1.7 community public version 2c

snmp-server host inside 147.183.140.176 community public version 2c

snmp-server host inside 147.183.141.15 community public version 2c

snmp-server location India

snmp-server contact IT Operations

snmp-server community public

snmp-server enable traps snmp authentication linkup linkdown coldstart

ASA5510#


Thanks,

Chandru


Farrukh Haroon Thu, 09/18/2008 - 01:45
User Badges:
  • Red, 2250 points or more

Your ASA is running a 3des license right?


Also is 147.183.140.176 or 147.183.141.15 the CSM server?


Regards


Farrukh

ckuriyar74 Fri, 09/19/2008 - 01:49
User Badges:

Yes, ASA is running 3des license.


CSM server is 147.183.141.15


Thanks,

Chandru

ckuriyar74 Thu, 09/25/2008 - 05:24
User Badges:

I could able to import PIX/ASA when installed CSM 3.1.1 (Cisco Works 3.0.5 & Performance Monitor 3.0) successfully.


Is there any bugs OR issues with CSM 3.2.1 (with performance monitor 3.2.1) ?


Thanks,

Chandru

Farrukh Haroon Thu, 09/25/2008 - 08:22
User Badges:
  • Red, 2250 points or more

I would suggest opening a TAC case, and let them troubleshoot it.


Regards


Farrukh

jagbir_singh Wed, 10/08/2008 - 20:34
User Badges:

Hi Chandru,


Have you got any support from TAC or any other sources as suggested by Farukh on this problem as i m facing the same problem.




Thanks

Jagbir

ckuriyar74 Thu, 10/09/2008 - 23:50
User Badges:

Hi Jagbir,


I had opened a TAC case and the cisco engineer had reset the mcp database. After this iam able to import devices into performance monitor.


Thanks,

Chandru

ckuriyar74 Fri, 10/10/2008 - 04:14
User Badges:

Here is the procedure used to reinitialize the Performance Monitor database (MCP). Please keep in mind that this wipes out any data that is stored in the performance monitor application.


net stop crmdmgtd

c:\progra~1\CSCOpx\bin\perl dbRestoreOrig.pl dsn=mcp dmprefix=mcp

net start crmdmgtd


As a reference, here is the link to the defect webpage:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsu99210


Please rate if this helps.


Thanks,

Chandru



Actions

This Discussion