Can someone point me in the right direction. I want to get the LMS server to achive and store all the ASA configurations we have (5 and counting). However I cannot seem to get this working. One of the devices has been added to LMS but I cannot seem to get it to retrieve the configuration.
Both devices are setup to use the same ACS server and the account specified in LMS will let me log into the ASA without issues. SSH access is also enabled on the ASA.
Thanks in advance
RME version is 4.2.0
The error message from the config collection report is
CM0056 Config fetch failed for bre-vpn-fw01 Cause: CM0204 Could not create DeviceContext for 234 Cause: CM0202 Could not access 192.168.254.250 via SNMP. Action: Check the Read Community string Action: Check if required device packages are available in RME. Action: Check if protocol is supported by device and required device package is installed.
However the SNMP strings are set correctly at each end, and the packages should be installed (I upgrade all missing packages to try and solve the problem).
The OID for the ASA is 184.108.40.206.220.127.116.11.669
I just double checked and this is the same ID that LMS is using for the device.
This device is supported, so there must be a problem with your package installation. I'm guessing this is a Windows server. Please post the list of contents under NMSROOT/MDC/tomcat/webapps/rme/WEB-INF/lib/pkgs and NMSROOT/www/classpath/com/cisco/nm/xms/psu/pkgs/rme.
I seem to be having the same issues with a pair of ASA's. 5510's like yours.
When you go to RME/Config Mgmt/Archive Mgmt, are you able to select the device? Mine seems to be locked or greyed out....
I can do an SNMP walk on the devices, and access rights are working ok for Telnet, but the LMS won't do a config fetch for archive.
You will need to enable ArchiveMgmt Service debugging under RME > Admin > System Preferences > Application Loglevel Settings, reproduce the problem, then post the dcmaservice.log.
The previous error you posted points to a device support problem, and not an issue with the ASA.
What is the sysObjectID of this ASA? Please post the list of contents under NMSROOT/MDC/tomcat/webapps/rme/WEB-INF/lib/pkgs and NMSROOT/www/classpath/com/cisco/nm/xms/psu/pkgs/rme.
I already posted the information you asked for several posts back and haven't changed anything else on the server since.
OID 5th message in thread
Directory contents 7th message in thread
Sorry, for whatever reason, the latest post was the RME version and error. I simply re-replied to that.
There are no errors in this log. What transport protocols do you have enabled for config fetch under RME > Admin > Config Mgmt > Transport Settings?
transport protocols for config fetch are in order.
SCP and HTTPS are both available but not configured for devices. Do I need these to be enabled for the ASA
No, TELNET and SSH are sufficient. At this point, I recommend you open a TAC service request so that this problem can be analyzed in real time.