Bandwidth monitoring with Cisco LMS4.0

Hi everybody,
I am using Cisco LMS 4.0 to manage a company network distributed in many town. I need to known about bandwidth utilization between the sites on a per interface basis.
We are experiencing network connection problem and the ISP ensures us that he is providing the right bandwith between the sites.
Can someone help me please.

Similar Messages

MIB Required for Bandwidth Monitoring on Cisco 3800 and 3900 series Routers

Hi Team,
Need your help here.
I am planning to do Bandwidth Monitoring on Cisco 3800 and 3900 series Routers. I want to know the exact MIB which I need to use for getting this done.
Thanks,
Karthik Anbumani

Matt, based on feature navigator GLBP is supportted on 3800 series.
Go to this link and search by feature (GLBP)
http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp
HTH
Jorge

UPS monitoring support with Cisco Prime Infrastructure 1.2

Dear Members,
Good day,
I am having a project implemented wherein i have the UPS power redudancy solution for our network devices.
Now can anyone gide that is it possible for below :-
UPS units installed with SNMP cards be monitored via Cisco Prime Infrastructure 1.2 as our monitoring & management solution is Cisco Prime Infrastructure 1.2 ?
if yes
Can you guide if following action would be possible to export the below logs from UPS unit to our Cisco Prime Infrastructure 1.2
   a) UPS fault status information
   b) UPS operational status(input power available Y/N)
   c) Battery fault status
   d) Battery charging current
   e) Battery charge level
   f) Output current
Conclusion is we need to confirm that would it be posible to achieve remote monitoring of these UPS units via our CPI 1.2
Thanks in Advance for your support & replies to this query.
Regards,
Muzammil N.

Prime Infrastructure 1.2 can manage non-Cisco devices in a limited fashion via SNMP query and trap processing. It cannot import logs and does not have a generic syslog server,
So if your devices have snmp read only support and can generate SNMP traps for the above you can add them to PI. Follow the manual add device procedure here.

Monitoring the Cisco ACE module with SNMP

We use 2 redundant Cisco ACE loadbalancer in our datacenter
The models are ACE20-MOD-K9 with software A2(2.0)
Does anybod know how to monitor the environment (cpu, memory) of such a module with snmp?
We were not able to find an applicable MIB for that module.
The CISCO-PROCESS-MIB.oid (ftp://ftp.cisco.com/pub/mibs/oid/CISCO-PROCESS-MIB.oid) seems not to reflect the correct oid's.
What are the correct oid's for cpu and memory?
Where can I find a detailed documentation for snmp-monitoring the cisco ace module?
thanks

Hi Patrik,
to monitor the ACE I use these two MIB's:
ftp://ftp.cisco.com/pub/mibs/v2/CISCO-SLB-MIB.my
ftp://ftp.cisco.com/pub/mibs/v2/CISCO-ENHANCED-SLB-MIB.my
Example for CPU:
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Normale Tabelle";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
cpmCPUTotalEntry 1.3.6.1.4.1.9.9.109.1.1.1.1
The resource usage and other interesting things you will find with a MIB browser.
Achim

Azure multiple site-to-site VPNs (dynamic gateway) with Cisco ASA devices

Hello
I've been experimenting with moving certain on-premise servers to Azure however they would need a site-to-site VPN link to our many branch sites e.g. monitoring of nodes.
The documentation says I need to configure a dynamic gateway to have multiple site-to-site VPNs. This is not a problem for our typical Cisco ISR's. However three of our key sites use Cisco ASA devices which are listed as 'Not Compatible' with dynamic routing.
So I am stuck...
What options are available to me? Is there any sort of tweak-configuration to make a Cisco ASA work with Azure and dynamic routing?
I was hoping Azure's VPN solution would be very flexible.
Thanks

Hello RTF_Admin,
1. Which is the Series of CISCO ASA device you are using?
Thank you for your interest in Windows Azure. The Dynamic routing is not supported for the Cisco ASA family of devices.
Unfortunately, a dynamic routing VPN gateway is required for Multi-Site VPN, VNet to VNet, and Point-to-Site.
However, you should be able to setup a site-to-site VPN with Cisco ASA 5505 series security appliance as demonstrated in this blog:
Step-By-Step: Create a Site-to-Site VPN between your network and Azure
http://blogs.technet.com/b/canitpro/archive/2013/10/09/step-by-step-create-a-site-to-site-vpn-between-your-network-and-azure.aspx
You can refer to this article for Cisco ASA templates for Static routing:
http://msdn.microsoft.com/en-us/library/azure/dn133793.aspx
If your requirement is only for Multi-Site VPN then there is no option but to upgrade the device as Multisite VPN requires dyanmic routing and unfortunately there is no tweak or workaround due to hardware compatibility issue.
I hope that this information is helpful
Thanks,
Syed Irfan Hussain

Adaptiva Software Distribution not working with Cisco APs in Local Mode

A worldwide customer would like to use a new Software distribution system called Adaptiva to replace SCCM within Windows environment. As far as I understand, Adaptiva is designed to work like a snowball system. A single PC at a remote side can be "infected" with new Software and will distribute the package to other PCs within the same IP-subnet, saving WAN bandwidth.
First tests are showing that it is working well with Cisco WLAN solution as long as we are using Flexconnect WLAN APs.
Customer locations with Local WLAN AP design create problems for this new software distribution method.
The WLAN-PCs can be reached from outside, but the establishment of the Client/Server-model between the WLAN Clients is not working. The Port used by this software for communication between clients in each WLAN subnet is UDP Port 34329.
Our WLCs are running at 7.4.130.0. The problem is appearing independently of AP Multicast settings or Broadcast Forwarding. Enabling Broadcast forwarding without Reboot did not improve the situation.
Global Multicast Mode and IGMP Snooping are also of no influence.
P2P Blocking Action is "Disabled" within the WLAN setup.
Who has any idea what might cause this communication problem between WLAN clients in Local Mode of APs ?
Thank You for answers
Wini

I can think of two solutions. You could 1: turn the "auto-lock" to never, so that your phone never sleeps. Or, you could 2: jailbreak your iPhone and install "insomnia". I wish we had the Cisco Mobile app. I usually use wifi/insomnia and turn data off at work since we have wireless pretty much everywhere...
Sent from Cisco Technical Support iPad App

Ask the Expert: Scaling Data Center Networks with Cisco FabricPath

With Hatim Badr and Iqbal Syed
Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about the Cisco FabricPath with Cisco technical support experts Hatim Badr and Iqbal Syed. Cisco FabricPath is a Cisco NX-OS Software innovation combining the plug-and-play simplicity of Ethernet with the reliability and scalability of Layer 3 routing. Cisco FabricPath uses many of the best characteristics of traditional Layer 2 and Layer 3 technologies, combining them into a new control-plane and data-plane implementation that combines the immediately operational "plug-and-play" deployment model of a bridged spanning-tree environment with the stability, re-convergence characteristics, and ability to use multiple parallel paths typical of a Layer 3 routed environment. The result is a scalable, flexible, and highly available Ethernet fabric suitable for even the most demanding data center environments. Using FabricPath, you can build highly scalable Layer 2 multipath networks without the Spanning Tree Protocol. Such networks are particularly suitable for large virtualization deployments, private clouds, and high-performance computing (HPC) environments.
This event will focus on technical support questions related to the benefits of Cisco FabricPath over STP or VPC based architectures, design options with FabricPath, migration to FabricPath from STP/VPC based networks and FabricPath design and implementation best practices.
Hatim Badr is a Solutions Architect for Cisco Advanced Services in Toronto, where he supports Cisco customers across Canada as a specialist in Data Center architecture, design, and optimization projects. He has more than 12 years of experience in the networking industry. He holds CCIE (#14847) in Routing & Switching, CCDP and Cisco Data Center certifications.
Iqbal Syed is a Technical Marketing Engineer for the Cisco Nexus 7000 Series of switches. He is responsible for product road-mapping and marketing the Nexus 7000 line of products with a focus on L2 technologies such as VPC & Cisco FabricPath and also helps customers with DC design and training. He also focuses on SP customers worldwide and helps promote N7K business within different SP segments. Syed has been with Cisco for more than 10 years, which includes experience in Cisco Advanced Services and the Cisco Technical Assistance Center. His experience ranges from reactive technical support to proactive engineering, design, and optimization. He holds CCIE (#24192) in Routing & Switching, CCDP, Cisco Data Center, and TOGAF (v9) certifications.
Remember to use the rating system to let Hatim and Iqbal know if you have received an adequate response.
They might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation on the Data Center sub-community Unified Computing discussion forum shortly after the event. This event lasts through Dec 7, 2012.. Visit this support forum often to view responses to your questions and the questions of other Cisco Support Community members.

Hi Sarah,
Thank you for your question.
Spanning Tree Protocol is used to build a loop-free topology. Although Spanning Tree Protocol serves a critical function in these Layer 2 networks, it is also frequently the cause of a variety of problems, both operational and architectural.
One important aspect of Spanning Tree Protocol behavior is its inability to use parallel forwarding paths. Spanning Tree Protocol forms a forwarding tree, rooted at a single device, along which all data-plane traffic must flow. The addition of parallel paths serves as a redundancy mechanism, but adding more than one such path has little benefit because Spanning Tree Protocol blocks any additional paths
In addition, rooting the forwarding path at a single device results in suboptimal forwarding paths, as shown below, Although a direct connection may exist, it cannot be used because only one active forwarding path is allowed.
Virtual PortChannel (vPC) technology partially mitigates the limitations of Spanning Tree Protocol. vPC allows a single Ethernet device to connect simultaneously to two discrete Cisco Nexus switches while treating these parallel connections as a single logical PortChannel interface. The result is active-active forwarding paths and the removal of Spanning Tree Protocol blocked links, delivering an effective way to use two parallel paths in the typical Layer 2 topologies used with Spanning Tree Protocol.
vPC provides several benefits over a standard Spanning Tree Protocol such as elimination of blocker ports and both vPC switches can behave as active default gateway for first-hop redundancy protocols such as Hot Standby Router Protocol (HSRP): that is, traffic can be routed by either vPC peer switch.
At the same time, however, many of the overall design constraints of a Spanning Tree Protocol network remain even when you deploy vPC such as
1.     Although vPC provides active-active forwarding, only two active parallel paths are possible.
2.     vPC offers no means by which VLANs can be extended, a critical limitation of traditional Spanning Tree Protocol designs.
With Cisco FabricPath, you can create a flexible Ethernet fabric that eliminates many of the constraints of Spanning Tree Protocol. At the control plane, Cisco FabricPath uses a Shortest-Path First (SPF) routing protocol to determine reachability and selects the best path or paths to any given destination in the Cisco FabricPath domain. In addition, the Cisco FabricPath data plane introduces capabilities that help ensure that the network remains stable, and it provides scalable, hardware-based learning and forwarding capabilities not bound by software or CPU capacity.
Benefits of deploying an Ethernet fabric based on Cisco FabricPath include:
• Simplicity, reducing operating expenses
– Cisco FabricPath is extremely simple to configure. In fact, the only necessary configuration consists of distinguishing the core ports, which link the switches, from the edge ports, where end devices are attached. There is no need to tune any parameter to get an optimal configuration, and switch addresses are assigned automatically.
– A single control protocol is used for unicast forwarding, multicast forwarding, and VLAN pruning. The Cisco FabricPath solution requires less combined configuration than an equivalent Spanning Tree Protocol-based network, further reducing the overall management cost.
– A device that does not support Cisco FabricPath can be attached redundantly to two separate Cisco FabricPath bridges with enhanced virtual PortChannel (vPC+) technology, providing an easy migration path. Just like vPC, vPC+ relies on PortChannel technology to provide multipathing and redundancy without resorting to Spanning Tree Protocol.
Scalability based on proven technology
– Cisco FabricPath uses a control protocol built on top of the powerful Intermediate System-to-Intermediate System (IS-IS) routing protocol, an industry standard that provides fast convergence and that has been proven to scale up to the largest service provider environments. Nevertheless, no specific knowledge of IS-IS is required in order to operate a Cisco FabricPath network.
– Loop prevention and mitigation is available in the data plane, helping ensure safe forwarding that cannot be matched by any transparent bridging technology. The Cisco FabricPath frames include a time-to-live (TTL) field similar to the one used in IP, and a Reverse Path Forwarding (RPF) check is also applied.
• Efficiency and high performance
– Because equal-cost multipath (ECMP) can be used the data plane, the network can use all the links available between any two devices. The first-generation hardware supporting Cisco FabricPath can perform 16-way ECMP, which, when combined with 16-port 10-Gbps port channels, represents a potential bandwidth of 2.56 terabits per second (Tbps) between switches.
– Frames are forwarded along the shortest path to their destination, reducing the latency of the exchanges between end stations compared to a spanning tree-based solution.
    – MAC addresses are learned selectively at the edge, allowing to scale the network beyond the limits of the MAC addr

Inserting a Flash video and the Bandwidth Monitor

I am new to Captivate, and I want to be sure I'm following
some practical guidelines for inserting Flash video in my Captivate
slides.
I know there are quite a few variables relating to practical
bandwidth usage--basically, we are creating elearning presenations
that will have "talking head" videos embedded within. These
presentations will be available for download via our LMS site, both
within the US and overseas.
I have utilized Captivate's Bandwidth Monitor to gauge the
bandwidth hit each video slide is responsible for. However, I don't
believe the numbers I'm getting back: because I've set each
embedded video to "Pause slide till end of video", all the slides
are reporting the same length in seconds, KB per sec and Video KB
numbers.
Can someone suggest a practical method for setting up the
videos such that the Bandwidth Monitor can interpret them
correctly? Can you also suggest a rule of thumb for maximum length
for each slide with an embedded video (320 X 240) in it?
Thanks in advance,
Carl

I am new to Captivate, and I want to be sure I'm following
some practical guidelines for inserting Flash video in my Captivate
slides.
I know there are quite a few variables relating to practical
bandwidth usage--basically, we are creating elearning presenations
that will have "talking head" videos embedded within. These
presentations will be available for download via our LMS site, both
within the US and overseas.
I have utilized Captivate's Bandwidth Monitor to gauge the
bandwidth hit each video slide is responsible for. However, I don't
believe the numbers I'm getting back: because I've set each
embedded video to "Pause slide till end of video", all the slides
are reporting the same length in seconds, KB per sec and Video KB
numbers.
Can someone suggest a practical method for setting up the
videos such that the Bandwidth Monitor can interpret them
correctly? Can you also suggest a rule of thumb for maximum length
for each slide with an embedded video (320 X 240) in it?
Thanks in advance,
Carl

Is Bandwidth monitoring possible?

Hi,
I wanted to monitor my internet usage. Is it possible to build a bandwidth monitoring application using ActionScript 3.0 (with AIR + Flex).
Aim:
Get total downloads and uploads going via ethernet.
(If possible display the list of ethernet cards and wifi cards and the user can select the one needed to be monitored).
Also get the time of connection.
+(optional)
Automatically monitor if any transfers goes any ethernet or the ethernet after selecting the specific one thereafter.Any resources or any ideas regarding the above.
Thanks.

Dear Siva,
we did nearly the same in LV 4.0 times where the G Webserver was not integrated into LV. The only difference is that we used a java applet instead of javascript. It was running fine with Netscape 3 and Internet Explorer 4 on Win NT 4 machines.
Waldemar
Using 7.1.1, 8.5.1, 8.6.1, 2009 on XP and RT
Don't forget to give Kudos to good answers and/or questions

PDSN bandwidth monitoring

I am facing and issues with a PDSN 7204 Router
Basicly we are very closed to our Bandwidth limit with our Internet Service provider
We think we should be around 5 to 8Mbit/s but we are at a steady 35Mbit/s
We have seen a significant increase in bandwidth from around mid february from 8Mbit/s to 35Mbit/s in close to 48hours...(without any significant changes form our end) I have tools to monitor the internal network and that is going around 500KB/s so nothing that could bring up those numbers.
our PDSN is connected to our ISP to the RADUIS server and our internal network
And all our client are basicly connected to the PDSN
How can I monitor the traffic going in the PDSN to see what is taking all that bandwidth
I am new at this and I need some help
thanks
Paul

wuischke wrote:You can use webalizer for this job. It's not the prettiest tool, but it gets the job done.
thanks! this is the closest to what I've been looking for, with the exception that only about 40% of my traffic is through lighttpd. does anyone know any similar programs for tracking what ports/processes are using the most?

Issue with cisco ONS 15310. Slot with Ethernet ports, designed for bridging.

Hi, guys. I’ve got an issue with cisco ONS 15310 sdh optical network. I’ve got a special slot with Ethernet ports, designed for bridging. Assume, we’ve got to multiplexers, named A and B with ports A0 and B0 respectively. The ios console of these slots says, the configuration is as follows:
no ip address set on these ports
Ports are administratively up
Auto mdix
Bridge groups are the same on these ports.
Dot1q tunnel.
I’m trying to monitor a device with an ip-address connected to port B0. It answers ping if I connect the notebook directly to a device. But if I connect the notebook to port A0 and ping the device pluged in port B0 through the optical network, it doesn’t answer. I tried connections with straight and cross cable.
Guys, who set the network said, it should work as a point to point bridge with no extra configuration. But it doesn’t. I used wireshark sniffer to lookup what’s happening on port A0. All I see is cdp-s from port A0 and self-announcements of the notebook.
Any suggestions? Thank you in advance.

B
Building configuration...
Current configuration : 3712 bytes
! Last configuration change at
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
hostname B
boot-start-marker
boot-end-marker
enable password -
clock timezone -
ip subnet-zero
no ip domain-lookup
no mpls traffic-eng auto-bw timers frequency 0
bridge 100 protocol ieee
bridge 140 protocol ieee
bridge 141 protocol ieee
bridge 142 protocol ieee
bridge 143 protocol ieee
bridge 144 protocol ieee
interface Loopback0
ip address 192.x.0.x 255.255.255.255
interface FastEthernet0
description -
no ip address
mode dot1q-tunnel
bridge-group 140
bridge-group 140 spanning-disabled
interface FastEthernet1
description --- B0 ---
no ip address
mode dot1q-tunnel
bridge-group 141
bridge-group 141 spanning-disabled
interface FastEthernet2
description -
no ip address
mode dot1q-tunnel
bridge-group 142
bridge-group 142 spanning-disabled
interface FastEthernet3
description -
no ip address
mode dot1q-tunnel
bridge-group 143
bridge-group 143 spanning-disabled
interface FastEthernet4
description -
no ip address
mode dot1q-tunnel
bridge-group 144
bridge-group 144 spanning-disabled
interface FastEthernet5
no ip address
shutdown
interface FastEthernet6
no ip address
shutdown
interface FastEthernet7
description -
no ip address
shutdown
mode dot1q-tunnel
bridge-group 100
bridge-group 100 spanning-disabled
interface POS0
description -
no ip address
crc 32
interface POS0.1
encapsulation dot1Q 141
no snmp trap link-status
bridge-group 141
interface POS0.2
encapsulation dot1Q 142
no snmp trap link-status
bridge-group 142
interface POS0.3
encapsulation dot1Q 143
no snmp trap link-status
bridge-group 143
interface POS0.4
encapsulation dot1Q 144
no snmp trap link-status
bridge-group 144
interface POS0.5
description -
encapsulation dot1Q 140
no snmp trap link-status
bridge-group 140
interface POS1
no ip address
crc 32
interface POS1.1
encapsulation dot1Q 100
no snmp trap link-status
bridge-group 100
router ospf 100
log-adjacency-changes
network 192.x.0.x 0.0.0.0 area 0
ip default-gateway [x.x.x.x]
ip classless
no ip http server
snmp-server community public RO
snmp-server ifindex persist
snmp-server trap link ietf
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps cpu threshold
snmp-server enable traps entity
snmp-server enable traps syslog
snmp-server enable traps hsrp
snmp-server enable traps config-copy
snmp-server enable traps bridge
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps ospf retransmit
snmp-server enable traps ospf lsa
snmp-server enable traps ospf cisco-specific state-change
snmp-server enable traps ospf cisco-specific errors
snmp-server enable traps ospf cisco-specific retransmit
snmp-server enable traps ospf cisco-specific lsa
snmp-server enable traps bgp
snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-message
snmp-server enable traps ipmulticast
snmp-server enable traps rtr
snmp-server enable traps mpls traffic-eng
snmp-server enable traps mpls ldp
snmp-server enable traps rsvp
snmp-server enable traps l2tun session
snmp-server enable traps mpls vpn
snmp-server host x.x.x.x public
control-plane
line con 0
line vty 0 4
password -
logging synchronous level 4
login
end

UCS C240 M4 with Cisco UCS VIC1227 VIC MLOM - Dual Port 10Gb SFP+

Hi All,
Have a few UCS C-series questions:
If I have a UCS C240 M4 rack server with Cisco UCS VIC1227 VIC MLOM - Dual Port 10Gb SFP+, but do not have fabric interconnect(s), I cannot use the UCS VIC1227 for anything, can I? The VIC ports HAVE to be connected to the FI(s) in order to be integrated with the UCS Manager. There is no local UCS manager software running on the server itself, is there?
It is useless to have this card in the server without the FI(s), isn’t it?
The OS that is going to be installed on the server is not going to see those 10GB ports on the VIC, isn’t it?
And if there are no additional PCIe NICs installed in the server, I am stuck with the two 1GB onboard NICs, is that correct?
Any input is appreciated.

do not have fabric interconnect(s), I cannot use the UCS VIC1227 for anything, can I?
The VIC 1227 can be used to integrate the server with UCSM, but that does NOT mean that is its unique function... the VIC 1227 is a CNA card that can be used whether your server is in standalone mode (no Fabric Interconnects) or integrated with UCSM.
If the server is not connected to a Fabric Interconnect (FI), it still has CIMC (Cisco Integrated Management Controller) which can be configured by attaching a monitor to the server and a keyboard, press F8 when you see the Cisco logo and then you can configure the IP, subnet, gateway, NIC mode and others... this may help: https://www.youtube.com/watch?v=KHQBvwO7pUU
http://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/e/1-0/gs/guide/b_Getting_Started_Guide/b_Getting_Started_Guide_chapter_0101.html#task_3F8535D6A9574BCD806B25FEBF44615D
http://www.cisco.com/c/en/us/support/docs/servers-unified-computing/ucs-c200-m1-high-density-rack-mount-server/111455-setup-cimc-c-series.html <<< Little old but still helps.
It is useless to have this card in the server without the FI(s), isn’t it?
It is NOT useless to have the card in the server without the FIs, having the servers integrated only allows you to take advantage of the flexibility of Service Profiles but the VIC card still has the same capabilities whether you have an FI or not.
The OS that is going to be installed on the server is not going to see those 10GB ports on the VIC, isn’t it?
See above
And if there are no additional PCIe NICs installed in the server, I am stuck with the two 1GB onboard NICs, is that correct?
Same answer as above
Let me know if you have further questions. IF I covered everything, please mark the question as "answered" for future users with the same doubts.
-Kenny

CSM - Site-to-site monitoring with unmanaged device

Hello All,
Is it possible to monitor some Site-to-site VPNs that include unmanaged devices? I tried to discover a few site to site VPNs using the wizard but it always fails with saying that CSM can only discover site to site vpn on managed devices.
Maybe I missed something in the manual...
Is anybody able to monitor site to site vpn including 3rd party firewall with CSM?
Regards,
Thibault.

Yeah, you can't discover a site to site vpn to an unmanaged device. You can manually create one in CSM however using the following process:
1) Discover managed device.
2) Discover unmanaged device (using Add New Device wizard, and unselect "Manage in Cisco Security Manager")
3) Add an interface to the unmanaged device with correct peer IP address. This seems to be required otherwise when you submit changes an error occurs.
4) Create Site to Site VPN.
5) Submit and deploy.
Note that when deploying, CSM still wants to deploy to the unmanaged device (which is silly as the device is not managed by CSM).
I logged a call with Cisco and had a round table with their CSM developers on the issues above, and also discovery of vpns to unmanaged devices. They gave me some constructive feedback that they are working on all of the issues, however they don't expect a solution to be released for some time.
Matt

Monitoring for Cisco UCS/Cisco Catalyst/EMC VNX/VMware environment

hi
I am not sure whether this is the right place for this post, but I am giving it a shot anyway.
I am looking for a monitoring solution for a Cisco UCS/Cisco Catalyst/EMC VNX/VMware environment and I cannot seem to find 1 product that does it all.
Do any of you Guys have experience with a such product?
thanks...

I have used PRTG for Cisco Routers/Switch, Vmware and with Cisco UCS. As for the storage part I'm not sure.
I recommend prtg because its user friendly and web based management.
Please Rate.

Reasonably priced endpoint bandwidth monitoring in BYOD network?

Please save me from this Cisco nightmare!
I manage a BYOD network in a shared office complex. It is connected to 75mbps FCCT broadband via a Cisco 1921. I bought the 1921 because the old Draytek wasn't stable enough.
Obviously I need to monitor the upload / download consumed by the users. To my total supprise, I've wasted days trying to find a solution that will actually work with Cisco. I've tried (with the help of their tech support) PRTG only to find that is won't work unless all the endpoints are static IPs. Obviously this is not really feasable.
I've had a look at ntopng, but I really don't want to be unsupported. All the others I've found cost £1000s and I have little faith that they'll work any better than PRTG.
I've gotta be missing something obvious??
TIA

Currently we have both wired and wireless, however I'm thinking of putting the wireless network behind a hotspot controller.
In terms of identification the ideal solution would allow me to label the MAC addresses of regular users and generate a monthly report.
All I need to be able to do is spot when a user is getting a bit greedy, I'm open to suggestions?

Bandwidth monitoring with Cisco LMS4.0

Similar Messages

Maybe you are looking for