ASA support in Prime Infrastructure 1.2 Lifecycle

Now I am testing phase with this new software and I found, that the Prime is able to manage ASA, but unable to say anything about it, does not place in the relevant Device Group. Is there any possibility for a more detailed management of ASA within PI 12 Lifecycle?

The "pure" PI 1.2 has limited functionality outside of the traditional NCS which it is derived from. You will get more functionality from LMS 4.2.2 (included in PI 1.2 licensing). If you're just managing a small number of ASAs, that might be a better choice.
You will still have limited view into the firewall though. For full management capability of ASAs, and for any large scale ASA management, the flagship solution from Cisco is Cisco Security Manager (CSM):
http://www.cisco.com/en/US/products/ps6498/index.html

Similar Messages

Do we support Cisco Prime Infrastructure in Windows Platform?

Do we support Cisco Prime Infrastructure in Windows Platform?

PI 1.2 needs to run on either a Cisco physical appliance or VMware ESX/ESXi 4.1 or 5.0. It's RHEL-based under the covers.
Unlike LMS, you can't install it on a windows server, either physical or virtualized.
For more details check:
http://www.cisco.com/en/US/docs/net_mgmt/prime/infrastructure/1.2/quickstart/guide/cpi_qsg.html#wp46865

Monitoring ASA in Cisco Prime infrastructure 2.2

Hi everybody. I have some issue with cisco Prime Infrastructure 2.2. We use this product in our network for monitoring network devices and I need to monitor also our ASA 5550 device with soft 8.4. I added ASA to Cisco PI but see only basic component like my device can reachable via and read via snmp. But cannot see CPU, RAM, Device ENV like Temperature, l2l vpn connection, Interfaces status and Utilization that interfaces, cannot see sub interface that placed on ASA like that g0/0.20. I need fully monitor ASA and See logs and trap for my device:
CPU RAM ENV (Temperature), Interface and sub interface status, L2L VPN Status.
1 Cisco Prime infrastructure can full support ASA for monitoring and logging.. IF YES how can i configure that features in Cisco PI 2.2 for ASA
2 IF not which product Can full support that features for full monitoring and logging ASA devices
I have a little deadline for finishing
thanks everybody before

I've not success monitoring ASA interface utilization either. I'm using PI 2.2 with device update #1. The ASA is a 5585-X with 9.2(3) software.
I have deployed the PI monitoring template to the ASA and do see its overall status and PI has enumerated the interfaces in the device page.
I even looked at a packet capture and see PI querying the values of the interface counters and those values being sent back to PI - yet I cannot select any ASA interface when drilling down under Performance Detail monitoring.
When I get some free time I will open a TAC case on it, meanwhile I am getting all the info I need from the upstream and downstream switches.

Prime Infrastructure 2.0: Open Database Schema Support available?

Hello,
I searched the forum for an Open Database Schema Support for PI.
I only found Open Database Schemas for the Cisco Works LAN Managemet Solutions and Cisco Prime LAN Managemet Solutions.
Exists an open Database Schema Support for Prime Infrastructure 2.0 as it exists for the older LAN Managemet Solutions ?
Thanks.
Bastian

Programmatic interface to Prime Infrastructure is done via the the REST API vs. any open database schema.
There are published reference guides here. For the most up to date information, please see your PI server itself. In Lifecycle view, the help menu has a link to the server-based API information:

Prime LMS 4.2 to Prime Infrastructure 2.0 license migration

A couple of months ago I upgraded WCS to Prime Infrastructure (WCS via NCS to PI 1.2 at that time). Meanwhile PI is running version 2.0. For some reason, when purchasing the upgrade licenses, I also got a 500 device LMS4.2 upgrade license.
The exact part numbers were:
R-W-PI12-M-K9 WCS 7.0 to Cisco Prime Infrastructure 1.2 Migration
R-PI12-BASE-K9 Prime Infrastructure 1.2 Base License and Software
L-PI12-LF-500-LIC Prime Infrastructure 1.2 - Lifecycle - 500 Device Lic PAK
L-PILMS42-500-M Prime Infrastructure LMS 4.2 - 500 Device Upgrade Lic
I have a virtual LMS appliance running where I installed the 500 device license I mentioned. I've actually never used LMS but that's a different story...
As I'm running low on PI device licenses (lifecycle licenses to be precise), the question is:
Is there an officially supported scenario to migrate these 500 LMS 4.2 licenses (that are already the result of a license upgrade) to PI 2.0?
If so: what part numbers do I need to purchase? I suppose I need
R-L-PI2X-U-K9 LMS to Cisco Prime Infrastructure 2.x Upgrade
plus
(L-L-PI2X-500-U LMS to Cisco Prime Infrastructure 2.x Lifecycle Upgrade 500 Device)
XOR
(L-L-PI2X-500-UP LMS to Cisco Prime Infrastructure 2.x Lifecycle Upgrade with PASS 500 Device)
Maybe someone can comment on that... thanks in advance.

In case anyone is facing the same issue:
Meanwhile, I finished the upgrade process using the following part numbers:

Prime infrastructure 1.2 licensing

We have activated a new VM for the cisco PI,
this substitutes an old NCS VM, so we have prepared for migration as decribedin the cisco documents
all the procedures have been followed so the situation after installing pointpatch, backup application ncs, destroy NCS VM, deploy new PI VM that has been configured on the same basis of the old NCS and now active.
before proceding with the restoration of the backup I have some question regarding the licenses
we do own pak for:
L-PILMS42-1.5K-U Prime Infrastructure LMS 4.2 - 1.5K Device Maj Upg Lic
L-PI12-LF-1.5K-LIC Prime Infrastructure 1.2 - Lifecycle - 1.5K Device Lic PAK
R-PI12-BASE-K9 Prime Infrastructure 1.2 Base License and Software
and before restoring the ncs backup I'd like to ask some questions
1) Does the system inheris the old (demo) license that was on the "old" NCS VM? (please consider that the VUDI has changed ad the VMware datastore is now different)
2) Will the old VUDI be restored?
3) after restoration of backup the machine will result unlicensed?
4) Is there the risk of wireless service disruption?
5) do I need to generate and apply licence before or after the restore?
6) What licence do I need to register and apply to have PI functional?
thank you

Have you gone through the below link
http://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/prime-infrastructure/guide_c07-714720.html

Cisco Prime Infrastructure - Assurance. Upgrade from 1.2 to 2.0

Hi,
We had purchased Prime Infrastructure 1.2 with SAU smartnet. Before we deployed 1.2 now I see 2.0 version is out and we qualify for upgrade license. However when I login to CCO to download the OVA file, I see 3 different editions. Express, Pro and Standard. Which one do I qualify to install? I have purchased following part numbers with 1.2 version.
R-PI12-K9     -     Qty 1
L-PI12-LF-100-LIC     -     Qty 1
L-PILMS42-100     -     Qty 1
L-PI12-LF-100     -     Qty 1
Thanks in advance,
Sam

Hi,
Check the below link for difference between [ Express, Pro and Standard ]
http://www.cisco.com/en/US/docs/net_mgmt/prime/infrastructure/2.0/quickstart/guide/cpi_qsg.html#wp46865
http://www.cisco.com/en/US/docs/net_mgmt/prime/infrastructure/2.0/quickstart/guide/cpi_qsg.html#wp75315
L-PI12-LF-100-LIC and
L-PI12-LF-100   :: Prime Infrastructure 1.2 - Lifecycle - 100 Device Lic PAK
are same as per my understanding and you can use these license to installed PI 2.0 with device count of 100.
Note: you can also add additional licenses(feature license ) for more Lifecycle (via R-PI12-K9 skus), which can be used for both Prime Infrastructure and LMS.
Thanks-
Afroz
[Do rate the post if you find it useful]

Prime Infrastructure 2;x

Hi,
When will Nexus 7706 be supported in Prime Infrastructure?
Is there today a workaround to manage configurations and to report performance on the Nexus 7706? As I understood, Prime DCNM does not handle the full configuration and performance management.
Jan

It's not yet supported. Cisco doesn't generally publish roadmaps publicly for future support. The best you can do via public sources is to continue to watch the Supported Devices lists for updates.
As of right now, here is a list of the current data center switches supported (in PI 2.1):
Cisco Nexus 6004 Switch
Cisco Nexus 5596T Switch
Cisco Nexus 5010 Switch
Cisco Nexus 5020 Switch
Cisco Nexus 5020T Switch
Cisco Nexus 7000 10-Slot Switch
Cisco Nexus 7000 18-Slot Switch
Cisco Nexus 1000V Series Switches
Cisco Nexus 1010 Virtual Services Appliance
Cisco Nexus 4001I Switch Module for IBM BladeCenter
Cisco Nexus 4005I Switch Module for IBM BladeCenter
Cisco Nexus 5548P Switch
Cisco Nexus 5548UP Switch
Cisco Nexus 5596UP Switch
Cisco Nexus 3064 Switch
Cisco Nexus 3048 Switch
Cisco Nexus 3016 Switch
Cisco Nexus 7000 9-Slot Switch
Cisco Nexus 9500 Switch
Cisco Nexus 3548 Switch

Is Cisco Prime Infrastructure 1.2 or 2.0 compatible on UCS ?

hello, can we install Cisco Prime Infrastructure 1.2 or 2.0 on UCS C22, C220M3 or NCS Hardware Appliance without using VMware ?
thanks.

Hi,
Unfortunately, this isn't yet supported for Prime Infrastructure.
you have Installed VMWare first.
Thanks-
Afroz
[Do rate the useful post]

Understanding licenses/PAK - LMS/Prime Infrastructure.

Hi,
I purchased an upgrade LMS 3.2 to Prime Infrastructure 1.2 and one more license for 300 devices.
I received 6 differents PAK numbers for:
Cisco Systens - R-PI12-UP-K9
L-PI12-LF-300-LIC - Prime Infrastructure 1.2 - Lifecycle - 300 Device Lic PAK
L-PILMS42-300-U - Prime Infrastructure LMS 4.2 - 300 Device Maj Upg Lic
R-PI12-BASE-K9 - Prime Infrastructure 1,2 Base License and Software
Cisco Systens - R-PI12-K9
L-PI12-LF-100-LIC - Prime Infrastructure 1.2 - Lifecycle - 100 Device Lic PAK
L-PILMS42-100 - Prime Infrastructure LMS 4.2 - 100 Device Base Lic
R-PI12-BASE-K9 - Prime Infrastructure 1,2 Base License and Software
I'll need to download 6 .lic files and install all?
Thanks.

PI and LMS are both entitled products with your upgrade. You may install one, the other or both (but on separate hosts).
When you install either, you will need to use your Product Authorization Keys (PAKs) to download two license files - one for the base 100 devices and another for the 300 devices. You will need to do this separately for each product.

Cisco Prime Infrastructure 2.0 and Cisco ASA

Hello,
We've recently installed trial version of Cisco Prime Infrastructure 2.0 Express. We hoped that it already supports Cisco ASA 55xx series (especially 5505, we have pretty amount of them). But we had some problems with PI and asa durind the exploitation process.
First, I've added ASA to PI, and Inventory Collection Status is Completed, but I can't see CPU and RAM utilization graphs. Inventory.logs are non-informative.
Also, config backup is success, but when I try to watch the backuped configuration at Configuration Archive PI says "Failed to fetch raw configuration". And so on.
ASA version is 5505, image is 9.1(2).
So, I have a question: is it possible to manage ASAs with PI 2.0?
UPD: I've just tried to upgrade asa to 9.1(4), and behavior of the equipment is quite the same. Seems we shall wait for 9.2 to be released.

Have you downloaded and applied the latest Device Pack updates?
PI enhanced ASA support after the initial 2.0 release and the Device Packs incorporate that change.
The README file for Device Packs explains how to install them. (A bug currently does not allow the direct download in PI so you need to follow the method for installation from local storage after you manually download. Here is a link to the download location.

Configure the syslog of ASA 5512-X for display on Cisco Prime Infrastructure 2.1

Hi, I'm working on implementing the Cisco Prime Infrastructure 2.1 and want to display the syslog about ASA5512-X with Software Version 9.2.
What would be the procedure for configuring?
Thanks in advance.

Hi,
Enable "logging host x.x.x.x " command to enable logging
check the below link:
http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/monitor_syslog.html#68764
FYI: Prime Infrastructure support only SEV 0,1,2 syslogs as of now.
Operate > alarm and events > syslogs
Thanks-
Afroz
****Ratings Encourages Contributors *****

Cisco Prime Infrastructure 2.0 and ASA 55xx platform

Hello,
We recently upgraded to Prime Infrastructure 2.0 with the hope being able to manage our ASA's from PRIME (and complete an LMS migration).
When I attempt to add ASA's to prime i get the following collection errors:
Unable to collect processor and RAM information.          Processor and RAM information.          Unexpected error. See the log file inventory.log for details.
In the logfile I get the following XML parsing error on the MIB:
<palError>
<deviceId>6284310032</deviceId>
<code>VALIDATION_ERROR</code>
<message>Failed to validate output XML: cvc-maxInclusive-valid: Value '3484331296' is not facet-valid with respect to maxInclusive '2147483647' for type 'int'.</message>
<result>
    <result xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="/CISCO-MEMORY-POOL-MIB/xmp-im-file-system-module.xsd">
      <xmp-im-file-system-module>
        <MemoryPoolStatistics>
          <memoryPoolIndex>1</memoryPoolIndex>
          <free>4294967295</free>
          <largestFree>4294967295</largestFree>
          <used>3484331296</used>
        </MemoryPoolStatistics>
To me it seems that the ASA returns a value that is bigger then int32 and thus causes an overflow? Any clues? Workarounds to add an ASA to Prime without checking these MIB'S?
Regards,
Marcel

The X series (all with 64-bit SMP images) are not currently supported by PI 2.0. We can hope for a device update in the coming months to remedy that situation.
If you click on the arrow next to the help icon in the top right of your PI and choose "Device Level Support" you will see:
Cisco ASA-5500 Series Adaptive Security Appliances
Features :
Topology
LLDP Neighbor Discovery
CDP Neighbor Discovery
Configuration
Configuration Archive
Software Image Management
Monitoring
Device Availability
Reachability
Inventory
Physical
System - Memory Pools
Interfaces - IP
Interfaces - Ethernet
Device Type
SYSOIDS
S/W Version
Software
Cisco ASA-5510 Adaptive Security Appliance
OID:1.3.6.1.4.1.9.1.669
OID:1.3.6.1.4.1.9.12.3.1.3.447
Cisco ASA-5510 Adaptive Security Appliance Security Context
OID:1.3.6.1.4.1.9.1.773
Cisco ASA-5520 Adaptive Security Appliance
OID:1.3.6.1.4.1.9.1.670
OID:1.3.6.1.4.1.9.12.3.1.3.448
Cisco ASA-5520 Adaptive Security Appliance Security Context
OID:1.3.6.1.4.1.9.1.671
Cisco ASA-5540 Adaptive Security Appliance
OID:1.3.6.1.4.1.9.1.672
OID:1.3.6.1.4.1.9.12.3.1.3.449
Cisco ASA-5540 Adaptive Security Appliance Security Context
OID:1.3.6.1.4.1.9.1.673
Cisco ASA-5560 Adaptive Security Appliance
OID:1.3.6.1.4.1.9.12.3.1.3.454
Cisco ASA-5550 Adaptive Security Appliance
OID:1.3.6.1.4.1.9.1.753
Cisco ASA-5550 Adaptive Security Appliance Security Context
OID:1.3.6.1.4.1.9.1.763
Cisco ASA-5505 Adaptive Security Appliance
OID:1.3.6.1.4.1.9.1.745
OID:1.3.6.1.4.1.9.12.3.1.3.560
Cisco ASA-5580 Adaptive Security Appliance
OID:1.3.6.1.4.1.9.1.914
Cisco ASA-5585 Adaptive Security Appliance
OID:1.3.6.1.4.1.9.1.1194
OID:1.3.6.1.4.1.9.1.1195
OID:1.3.6.1.4.1.9.1.1196
OID:1.3.6.1.4.1.9.1.1197
Cisco ASA-5585 Adaptive Security Appliance Security Context
OID:1.3.6.1.4.1.9.1.1198
OID:1.3.6.1.4.1.9.1.1199
OID:1.3.6.1.4.1.9.1.1200
OID:1.3.6.1.4.1.9.1.1201
Cisco ASA-5585 Adaptive Security Appliance System Context
OID:1.3.6.1.4.1.9.1.1202
OID:1.3.6.1.4.1.9.1.1203
OID:1.3.6.1.4.1.9.1.1204
OID:1.3.6.1.4.1.9.1.1205
Cisco ASA-5580 Adaptive Security Appliance Security Context
OID:1.3.6.1.4.1.9.1.915
Cisco ASA-5580 Adaptive Security Appliance System Context
OID:1.3.6.1.4.1.9.1.916

What are the features supported in Cisco Prime Infrastructure for WLAN for autonomous AP's?

What are the features supported in Cisco Prime Infrastructure for WLAN for autonomous AP’s?

• PI provides visibility for autonomous clients within the same list view as lightweight and wired clients (client list page).
• Rogue AP detection for autonomous AP's is not supported (it's supported in CUWN).
• Alarms/events for client authentication issues (e.g. authentication failure) are displayed in PI.
• Config management for autonomous AP's is via CLI template. Config comparison and archiving functionality in PI leverages these same features that were brought in from LMS, so need to defer to others in terms of whether this is a cross-platform feature in PI or is only supported on a subset of platforms. Config comparison/archive is supported in CUWN.PI supports both infrastructure (e.g. AP Tx Power and Channel, busiest AP, AP utilization, etc.) and client (e.g. client count, client sessions, etc.) reports, and there are extensive reports for CUWN

Does Prime Infrastructure 2.0 support 7.5 code?

I am currently running PI 1.3 and plan on upgrading to PI 2.0. Are 5508 Wireless Controllers 7.5 and MSE 7.5 code supported in release PI 2.0?

PI 2.0 was really intended for the converged access, but it will also support v7.5 and PI1.4 supported v7.5.
Management Support for WLC Release 7.5
Prime Infrastructure 1.4 provides management support for WLC Release 7.5 and associated features. In addition, this release provides support for AP platforms such as 3600P and 802.11ac module.
For more information about Cisco Unified Wireless Network (CUWN) Software Release 7.5, see the product bulletin at the following URL:
http://www.cisco.com/en/US/products/hw/modules/ps2797/prod_bulletins_list.html
For more information about the features of WLC Release 7.5, read the Release Notes for Cisco Wireless LAN Controllers and Lightweight Access Points for Release 7.5 available at the following URL:
http://www.cisco.com/en/US/products/ps10315/prod_release_notes_list.html

ASA support in Prime Infrastructure 1.2 Lifecycle

Similar Messages

Maybe you are looking for