cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
810
Views
0
Helpful
10
Replies

LMS 4.2.3 Continuous Authentication failure alarm in DFM

Hi All,

We are getting continuous minor alarm[Authentication Failure] for single router in the DFM.  can we check from which ip we are getting the authentication request??

possible steps to find the cause for the authentication failure.?

 

Regards,

Channa

10 Replies 10

Vinod Arya
Cisco Employee
Cisco Employee

The first row is a alert ID, check what you see when you click on it and share.

Also, please confirm which device is that and what version is it running? Does anything you see on device show log?

-Thanks

Vinod

-Thanks Vinod **Rating Encourages contributors, and its really free. **

Hi Vinod,

Its 7600 router running below version

IOS : c7600rsp72043-advipservicesk9-mz.122-33.SRE3.bin

 

Logs on devices:  i can see only below log on the router.

%SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: tool] [Source: <>] [localport: 22] at 00:05:08 IST Sat Oct 11 2014

Regards,

Channa

 

Hi Vinod,

I have tried re-adding the device but the alarms are still reflecting on the LMS.

Regards,

Channa

Please try this, delete device and Shutdown Daemon Manager, then delete NMSROOT/objects/smarts/local/repos/icf/DFM.log. Then restart and readd the device and see if the problem goes away.

-Thanks

Vinod

-Thanks Vinod **Rating Encourages contributors, and its really free. **

Hi Vinod,

I will try and update the results.

Regards,

Channa

 

Hi Vinod,

i can see two files in the location

NMSROOT/objects/smarts/local/repos/icf/

DFM.log and DFM1.log - do i need to delete both files or DFM1.log alone ??

 

Regards,

Channa

 

Don't delete, just copy them as a backup to other location. Restart services and give full 10-15 mins and these files should be regenerated.

Thanks

Vinod

-Thanks Vinod **Rating Encourages contributors, and its really free. **

Hi Vinod,

I didn't find the DFM.log file at below location

NMSROOT/objects/smarts/local/repos/icf/

Find the screenshot

Regards,

Channa

Please do following:

> stop daemon manager

> Rename/move dfm.rps and dfm1.rps from NMSROOT/objects/smarts/local/repos/icf.

> Move/delete NMSROOT/objects/smarts/local/logs/DFM.log and DFM1.log

> start daemon manager 

Please monitor the issue.

-Thanks

Vinod

-Thanks Vinod **Rating Encourages contributors, and its really free. **

Hi Vinod,

I tried delete the DFM and DFM1.log files. but after stopping the deamon manager.unable to delete DFM1.log as this file was accessed by the smserver.exe in the backend.

i have successful moved both RPS files and DFM.log file from the location. but the issue persists.

I try again to delete DFM1.log file in the MW and update.

Regards,

Channa

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: