Devices not in ACS lists devices whose IP addresses or hostnames within LMS DCR are not covered by ranges or explicitly listed devices known to ACS.
So, if you've created NDG ranges to cover all devices, but you still see devices in the DCR report, then those devices must be added to DCR by different IPs, or they are added only by hostname. In the latter case, you must explicitly add each hostname to ACS.
If DCR only has the hostnames, then yes, you need to add one entry for every hostname into ACS. You can automate this using the dcrcli expAcs function. This will export all devices from LMS into ACS based on some configurable parameters. This command is documented in the LMS online help.
There must be something else wrong with your ACS configuration (or a bug somewhere). First, check to make sure the LMS System Identity User is properly defined in ACS, and has all rights to all LMS tasks. Depending on the version of LMS, you may have to create custom roles to accomplish this. Next, check to make sure the user that is logging into LMS has access not only to the set of devices, but also to the LMS server itself (if you are using NDGs).
If that checks out, the next set of troubleshooting steps are not very straight-forward, so it would be best to open a TAC service request, and have them walk you through it.
Question We run asr9001 with XR 6.1.3, and we have a very long delay to
login w/ SSH 1 or 2 to the device compare to IOS device. After
investigation, the there is 1s delay between the client KEXDH_INIT and
the server (XR) KEXDH_REPLY. After debug ssh serv...
Introduction The purpose of this document is to demonstrate the Open
Shortest Path First (OSPF) behavior when the V-bit (Virtual-link bit) is
present in a non-backbone area. The V-bit is signaled in Type-1 LSA only
if the router is the endpoint of one or ...
Hi, I am seeing quite a few issues with patch install and wanted to
share my experience and workaround to this. Login to admin via CLI, then
access root with the “shell” command Issue “df –h” and you’ll probably
see the following directory full or nearly ...