Solved: Cat 6513 FWSM and CiscoWorks RME/CS

Bruce Summers · ‎01-23-2009

Hey folks,

I'm in a bit of a quandrie here...

I'm trying to archive the config from a 6513 FWSM, it is bombing out with an SNMP errorâ€¦I was under the impression that I could merely use SSH to perform the archiveâ€¦The error is implying, that at least once, works needs to inventory the FWSM using SNMP, is that the case, or should I just be able to config the credentials in CS and then connect using SSHâ€¦maybe I've missed something??

Joe Clarke · ‎01-23-2009

No. RME relies on being able to periodically poll managed devices for inventory information. SNMP is a requirement throughout the management lifetime of a device.

View solution in original post

Joe Clarke · ‎01-23-2009

ALL devices must be configured for SNMP before LMS can manage them. Therefore, you will need to configure the FWSM for SNMP. Once the FWSM has been managed, and RME has it in a Normal state, then you can archive the config. Config archive for the FWSM will happen with either telnet or SSH depending on your chosen protocol order.

Bruce Summers · ‎01-23-2009

understood and thats what i was afraid of...

Let me ask this question...If after it has been inventoried and in a normal state, can snmp then be removed and merely archive the configs using telnet/ssh???

Joe Clarke · ‎01-23-2009

No. RME relies on being able to periodically poll managed devices for inventory information. SNMP is a requirement throughout the management lifetime of a device.

Bruce Summers · ‎01-23-2009

alrighty..thanks J...

Bruce Summers · ‎01-23-2009

let me ask this last question..If I'm not concerned about periodically polling to update the inventory, would it be feasible to remove the SNMP config and merely connect using SSH to archive the config? I have been told, and I havent found it anywhere yet, that SNMPV3 is not supported on the FWSM's...

Joe Clarke · ‎01-23-2009

No, SNMPv3 is not supported on the FWSMs, PIX, or ASA devices. However, neither is SNMP read-write. You must keep SNMP enabled, but it's not like that can be used to change anything. The most one could gain is information. That can be limited by only allowing the LMS server to poll the FWSM via SNMP.

Bruce Summers · ‎01-23-2009

roger that...thanks again J.