Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 

Cisco Works -Archiving Network Devices

Hi,

We are using Cisco Works RME 4.0. Somehow CW unable to 'Archive'/'Backup'any of the discovered 70 devices(Error description: Check the SNMP string and licence).Devices configured with TACACS. Both are existing. Any idea..?

Thank you in advance.

MS

29 REPLIES
Cisco Employee

Re: Cisco Works -Archiving Network Devices

Are you really using RME 4.0? If so, I highly suggest you upgrade to at least LMS 2.5.1 which includes RME 4.0.3. Beyond that, check your protocol order under RME > Admin > Config Mgmt > Transport Settings, and verify the devices' credentials in Common Services > Device and Credentials > Device Management. You will need at least an SNMP read-write community string or telnet/SSH username/password credentials to fetch device configurations.

Re: Cisco Works -Archiving Network Devices

Hi,

Thank you and apologize for the mess up information in the original query. I have checked the versions and find RME : 4.0.3 (LMS version 2.5). here are the errors messages I observed...

Few Devices:

CM0056 Config fetch failed for 'testrtr' Cause: CM0204 Could not create

DeviceContext for 39 Cause: CM0202 Could not access 'testrtr' via SNMP.

Action: Check the Read Community string Action: Check if required device packages

are available in RME. Action: Check if protocol is supported by device and required

device package is installed.

Few devices:

Failed to fetch config using RCP.Connection refused: connect Verify RCP is enabled or not.

Fetch portocol Sequence: TELNET , TFTP, SSH, RCP, HTTPS

I tried to create a simple job of 'Show info' and the error message:

NS0039 : Could not get details for Job 0. Check whether CTMJrmServer and jrm processes

are running properly. If not, restart it and try again.

The CW is running on Windows box.

Please advise. Thank you in advance for your time.

regards

MS

Cisco Employee

Re: Cisco Works -Archiving Network Devices

Please provide the output of pdshow as well as a show ver from this test device.

New Member

Re: Cisco Works -Archiving Network Devices

Hi Clarke,

Actually even i am facing the same error for a few devices wherein the device backup fails with error message "CM0056 Config fetch failed for xxxxxxx Cause: CM0204 Could not create DeviceContext for 489 Cause: CM0202 Could not access xxxxxx via SNMP. Action: Check the Read Community string Action: Check if required device packages are available in RME. Action: Check if protocol is supported by device and required device package is installed.

I am using LMS2.5 & RME version is 4.0.4. I checked the communitity sting on router and cisco works is the same. Also telnet is allowed to the device. The protocol selected on Cisco works is TELNET. I have three devices with this error and all three are Cisco switches (3500 series). Let me know if you need any other information. Thanks again for your assistance.

- Manoj

Re: Cisco Works -Archiving Network Devices

Please see the attached show ver.

Also, one thing I just observed, Devce credential report stating:

None of the devices have credential verification data.

Thank you

MS

Cisco Employee

Re: Cisco Works -Archiving Network Devices

This show ver is from a 7200 router and not a 3500 switch. I assume, though, that the problem is affecting this router as well. What version of the Rtr7000 package do you have loaded for RME (find this under Common Services > Software Center > Device Update)? Please provide the list of contents of NMSROOT\MDC\tomcat\webapps\rme\WEB-INF\lib\pkgs and NMSROOT\www\classpath\com\cisco\nm\xms\psu\pkgs\rme.

I also need to see your pdshow output.

New Member

Re: Cisco Works -Archiving Network Devices

Clarke,

Actually i am facing issue on a 3550 switch and MS is having issue on 7200 router. Anyways from my end, when i try to search for the packet installed, below is the output

1. Cat5500 1.1 Cat5500 device package

2. Cat3500XL 1.1 Cat3500XL device package

3. Cat3000 1.1 Cat3000 device package

4. Cat3550 1.1 Cat3550 device package

5. Cat6000IOS 3.0 Cat6000IOS device package

6. Cat4000IOS 2.0 Cat4000IOS device package

7. Cat4200 1.1 Cat4200 device package

8. Cat2900 1.1 Cat2900 device package

9. Cat4000 1.1 Cat4000 device package

10. CatGL3 1.1 CatGL3 device package

11. Cat5000 1.1 Cat5000 device package

12. Cat2948GL3 1.1 Cat2948GL3 device package

13. Cat8500 1.1 Cat8500 device package

14. Cat2900XL 2.0 Cat2900XL device package

15. Cat6000 2.0 Cat6000 device package

16. Cat3560 2.0 Cat3550 device package

17. Cat1900 2.0 Cat1900 device package

18. Cat3750 2.0 Cat3750 device package

19. CatalystCMM 1.0 Cisco Catalyst 6000 and 7000 series Communication Media Module device package

20. Cat2960 2.0 Cat2900 device package

Also the Ciscoworks at my end is installed on a Unix system, hence i will not be able to provide the other details that you requested. Let me know if you need any other information. Thanks!

Cisco Employee

Re: Cisco Works -Archiving Network Devices

Enable ArchiveMgmt debugging under RME > Admin > System Preferences > Loglevel Settings, then run the sync job against this one 3500 switch. Post the resulting /var/adm/CSCOpx/log/dcmaservice.log.

Re: Cisco Works -Archiving Network Devices

Hi,

I altered some RME configuration and ran 'Sync Archive' for the testrtr and now the job is 'Partially Successful' and the message :

CM0057 PRIMARY RUNNING Config fetch SUCCESS, archival failed for 'testrtr' Cause: CM0210 Unable to generate processed config Action: Verify that archive exists for device.

Please advise. Once i get full access to the Server, i will email the reqd. o/p.

Thank you in advance.

MS

New Member

Re: Cisco Works -Archiving Network Devices

Hi MS,

Can you plz post what RME config change have you done. Thanks!

- Manoj

Cisco Employee

Re: Cisco Works -Archiving Network Devices

The ArchiveMgmt debugging is critical at this point to see what the problem is.

New Member

Re: Cisco Works -Archiving Network Devices

Clarke,

Since i dont have access, I have actually put forward your suggestions to the administrator for enabling debugging and providing debug logs. Once i get, i will certainly post the logs. Since MS informed he made some changes which partially resolved his issue, so was just curious to know ;-) .. Thx

- Manoj

Re: Cisco Works -Archiving Network Devices

Hi Monoj,

Simple things I did

1. Re-entered the RO/RW community for the testrtr.

2. Fetchconfig protocol order--> Moved TFTP to the top

3. Took out Job passcodes.

HTH

Thanks

MS

New Member

Re: Cisco Works -Archiving Network Devices

Hi Clarke,

I've managed to get the debug logs. If you can, can u plz share your e-mail id, i will send it to u by mail ... its actually about 5 MB, so i can just winrar and send it to you. Also keeping in mind security policies ;-). If not, then i will upload the debug in the forum. Thanks for ur understanding.

- Manoj

Cisco Employee

Re: Cisco Works -Archiving Network Devices

If you cannot post them to the forum, then please open a TAC service request to continue your debugging there.

New Member

Re: Cisco Works -Archiving Network Devices

Ok np, i am posting the debug logs .. i guess the debug was also enabled on 10th june and the administrator has sent me those logs, i hope these might be useful to you.

Fyi, some devices which fail saying "Could not access via SNMP" error are ajankrse1sw01, ajankrse1sw02 etc. These are 3550 switches. Some devices which fail with error msg of "Failed to get start-tag begin in the configuration" are ancsausy1sw01 , ancsjpto1sw01. These are 6509 switches. You can ignore the rest. Thx again

- Manoj

New Member

Re: Cisco Works -Archiving Network Devices

Hi Clarke,

Sorry to bother you again. Does the debug logs i posted are of any help to you in determining the cause of the issue. Kindly assist. Thanks again man!

- Manoj

Cisco Employee

Re: Cisco Works -Archiving Network Devices

The community strings for ajankrse1sw01 and ajankrse1sw02 are incorrect in DCR (or there is something blocking SNMP to this device). Verify the SNMP credentials, and use Device Center's SNMP Walk tool to try and manually walk the system table on these devices.

The start tag messages usually indicate command authorization is enabled on the device, but "write term" is not allowed. Login to these switches using the same username and password you have configured in DCR, and issue the command "write term". what output do you get?

New Member

Re: Cisco Works -Archiving Network Devices

Hi Clarke,

You are right man. I tried to do wr term on one of the 6500 switches and i got a message saying "Command authorization failed". But i have one query regarding this. We have another 300+ devices (routers + switches) which are not 6500 switches and are being backed up with the same user name and password that i am using for 6500 switches. So why only 6500 switches are not backed up while other devices are backing succesfully. Is there a known bug wherein we need to have wr mem access to backup devices. Why is it so? Is there any link which says this?

Also for the devices ajankrse1sw01 and ajankrse1sw02, i am not sure what DCR is? I have already reentered the community strings and confirmed that they are correct. I dont know what is Device Center's SNMP Walk tool. Can u guide me through this or provide me any link on how to go about this.

I really appreciate all the help you have been providing me in regards to this man. Thanks!

- Manoj

Cisco Employee

Re: Cisco Works -Archiving Network Devices

Why command authorization plagues these switches has to do with their AAA config. You must allow the "write term" command if you are going to be archiving CatOS devices via either telnet or SSH. This needs to be done on the AAA server.

DCR is the Device Credentials Repository (under Common Services > Device and Credentials > Device Management). The strings you have entered in DCR are either wrong, or the config on the switches is blocking the CiscoWorks server, or the network is dropping the SNMP requests.

If you go to Device Center, choose one of your failing 3550s, you will see a link in the bottom left-hand corner of the window for "SNMP Walk". In that tool, you can perform an SNMP Walk on this device. Choose a starting OID of "system". I imagine that will fail, so you need to verify the things I mentioned.

New Member

Re: Cisco Works -Archiving Network Devices

Dear Clarke,

Thanks for your explanation. However i have some doubts still.

Regarding the "start-tag" error, you mentioned the "write term" should be allowed. We have other routers and switches also which does not have "write term" access but backup for those routers and switches (non 6500) is going fine without any problems. Why is the problem only in 6500 then. Does 6500 specifically require write term to be enabled for cisco works backup??

For for other 3550 switches, you are right that it is failing with error "failed to snmp walk the device. plz check your community string and starting OID and try again". I have copied the snmp strings that i configured on the router and re-entered them in cisco works. But stil it is failing. Does the OID of "system" has to be the same always. Why is it always "System". Also i have tried to ping, telnet the device from ciscoworks and am able to do without any problem. So I dont think snmp requests are being dropped by the network.

Cisco Employee

Re: Cisco Works -Archiving Network Devices

You need to allow "write term" to archive the configuration of 6500 switches using either telnet or SSH.

Please include your 3550's show run. If that checks out, then you will need to check with your security administrators to see if there are firewalls or access-lists that are blocking SNMP traffic between the CiscoWorks server and the switches.

New Member

Re: Cisco Works -Archiving Network Devices

Hi Clarke,

Sorry i was on leave yesterday, hence could not reply. You mentioned that on 6509, we need to enable wr term for archive to be successful. Is there any link which says this. Becoz if i put this forward to my higher level team, the first question i will be asked is why other routers and switches (non 6500) are being backed up with also do not have access for wr term.

Also for SNMP for 3550, i will check with my admin and let u know the progress.

One again, thx for ur help man ...

Cisco Employee

Re: Cisco Works -Archiving Network Devices

I do not know of a link that lists all of the documented config collection commands.

New Member

Re: Cisco Works -Archiving Network Devices

Clarke,

I have taken the output of "sh snmp" from two of the 3500 switches. Does this say anything ??

sh snmp

Chassis: CAT1020N3WG

17531 SNMP packets input

0 Bad SNMP version errors

17531 Unknown community name

0 Illegal operation for community name supplied

0 Encoding errors

0 Number of requested variables

0 Number of altered variables

0 Get-request PDUs

0 Get-next PDUs

0 Set-request PDUs

17618 SNMP packets output

0 Too big errors (Maximum packet size 1500)

0 No such name errors

0 Bad values errors

0 General errors

0 Response PDUs

17618 Trap PDUs

SNMP global trap: enabled

SNMP logging: enabled

Logging to 10.209.10.37.162, 0/10, 17611 sent, 7 dropped.

SNMP agent enabled

sh snmp

Chassis: CAT1020N3UJ

3117 SNMP packets input

0 Bad SNMP version errors

3117 Unknown community name

0 Illegal operation for community name supplied

0 Encoding errors

0 Number of requested variables

0 Number of altered variables

0 Get-request PDUs

0 Get-next PDUs

0 Set-request PDUs

3185 SNMP packets output

0 Too big errors (Maximum packet size 1500)

0 No such name errors

0 Bad values errors

0 General errors

0 Response PDUs

3185 Trap PDUs

SNMP global trap: enabled

SNMP logging: enabled

Logging to 10.209.10.37.162, 0/10, 3178 sent, 7 dropped.

SNMP agent enabled

Cisco Employee

Re: Cisco Works -Archiving Network Devices

One-shot counters are meaningless. If you suspect that the SNMP requests are making it to the switches, then you need to take a snapshot of the counters, reproduce the archive failure, then get another snapshot. It won't be 100% accurate, but it will be more telling that just one look at the show snmp output.

New Member

Re: Cisco Works -Archiving Network Devices

Clarke,

You know what .. some of the 3550's which were failing had some configuration issue in cisco works .. after making changes, few are backed up successfully ... no patience to check for other devices now .. will check them later ... you are true genius man .. really ;-)

New Member

Re: Cisco Works -Archiving Network Devices

Clarke,

I have one more query for you. Our Cisco works takes backups every friday. When i try to retrieve a config for a device, i only get the latest config. If i need to get the config of a device that we backed up during Feb or March, how can i get that. Can you guide me through the options man. Thx again ;-)

-- Manoj

Cisco Employee

Re: Cisco Works -Archiving Network Devices

Assuming you have purged this config, you can find it from RME > Config Mgmt > Archive Mgmt > Version Tree.

356
Views
20
Helpful
29
Replies
CreatePlease to create content