Baseline Template Query LMS 4.2 - IP address

Does anyone know how to create a baseline template that would validate a configuration to ensure that it only has 1 IP address terminating on it? The IP address may terminate on an SVI or an interface, but must only have the 1 IP address on the device
Any information or suggestion would be appreciated.

Hi Afroz,
Thanks for the link however I was unable to find any information that would help me with my query.
Here's the issue. Multilayer switches can have multiple IP interfaces on them and on certain devices on our network, I want to ensure that there is only 1 IP interface. So, if the device only has 1 IP interface, the configuration is compliant. If the device has multiple IP interfaces, the configuration is non-compliant.
The other factor that would complicate things is that on some devices, the IP interface would be an SVI while on others the IP interface would be on an Ethernet port.
I hope this helps clarify my query.
Thanks,
H

Similar Messages

LMS 4.0 Prequisites of baseline templates are ignored if used for direct deploy

Hi all,
I'm want to use baseline templates for conditionally configuring several hundert access-switches.
What I expect to work:
Write a baseline template with prerequisites and parameters and use
Configuration> Compliance> Compliance Templates> Direct Deploy
The baseline template works perfect for
Configuration> Compliance> Compliance Templates> Compliance Check
if I use regex instead of parameters
- compliant devices are detected
- commands are generated only for non compliant devices
But I don't want to enter several hundert parameters manually if
I want to deploy the job after compliance chek...
If I change the regex into a parameter then direct deploy will unconditionally
generate the commands, regardless whether the prerequisites are met or not.
Is this by design or a bug?
My task is simple:
If interface Vlan1 has an IP address matching a certain pattern I want to deploy the global command
ip default gateway [same-prefix-as-interface-vlan1].1
Like I mentioned above: the regexes are OK: compliance check works as expected
When the regexes are changed to a parameter the command ip default-gateway will
always be generated regardles wether the prequisite is met or not.
Any thoughts or insight?
Regards, MiKa

Solution was simple:
In one of the old release notes (Cisco Ressource Manager Essentials, around 2009) I found a note that prerequisites in templates are not supported with direct deploy. There are no notes for newer releases but the behaviour is exactly like described.
Another documentation error...
Rgds, MiKa

LMS 3.1 Baseline Template Fails

NEED HELP! :-)
I made a baseline template that basicaly says: If you encounter an interface with a vlan24, apply a port-security mac-address sticky command. TEMPLATE FOLLOWS:
In Conditional Block's SUBMODE:
interface [#.*Ethernet.*#]
CLI Command (of conditional block is):
+ switchport access vlan [#(24)#]
Use the SubMode of above condition (yes)
CLI Command:
+ switchport port-security mac-address sticky
UNFORTUNATELY, THE MESSAGE I GET AFTER THE DIRECT DEPLOY IS:
*** Device Details for cdp-aa-sw-c02-02 ***
Protocol ==> Unknown / Not Applicable
Selected Protocols with order ==> SSH
Execution Result:
CM0150 Deploy Baseline template to PRIMARY config on device failed Cause: CM0070 Copy Config to device failed on cdp-aa-sw-c02-02 Cause: Action: Check device credentials and reachability.
CM0100 Copy PRIMARY Running Config to PRIMARY Startup Config on device not attempted
CM0089 Config archival successful for cdp-aa-sw-c02-02
Do you have a clue what is wrong with this immediate job deployment??? Can you help me fix it so it applies correctly!?
Thanx in advance,
WANimal

Post the job directory for this job. The directory is found under NMSROOT/files/rme/jobs/ArchiveMgmt on Windows and /var/adm/CSCOpx/files/rme/jobs/ArchiveMgmt on Solaris.

LMS 4.2.4 Baseline template deploy fails for 2960X

Hello,
we have Cisco Prime LMS 4.2.4 and I added a new switch type C2960X-24TS-L with IOS Version 15.0.2-EX1.
I'd like to deploy a baseline template, but it fails:
Protocol ==> Unknown / Not Applicable
Selected Protocols with order ==> SSH,Telnet,TFTP
Execution Result:
CM0150 Deploy Baseline template to PRIMARY config on device failed Cause: Operation not supported for generic support devices
CM0056 Config fetch failed for xxxxx Cause:
PRIMARY-RUNNING config Fetch Operation failed for TFTP.
SSH: Failed to establish SSH connection to 10.xxx.xxx.xxx - Cause: Authentication failed on device 3 times.
Action: Check if protocol is supported by device and required device package is installed.
The device is reachable via telnet.
I think that I installed the latest device packages for LMS 4.2.4.
What could be the problem here?
Thanks,
Kerstin

Hi Afroz,
when I checked the ssh-credentials, I got a failure on ssh enable.
The failure message on ACS is "missing user password".
I reentered the credentials, but the error persists.
I tried to login with the credentials manually, and it works. So the credentials are correct.
Last I deleted and re-added the device, but nothing has changed.
Other devices (not 2960X) working correct.
So I think maybe I haven't the latest device packages for 2960X-Switches. But here is the next problem, I can't check for latest packages:
[ Tue Apr 07 12:19:10 CEST 2015 ] INFO [DownloadManager : queryAllPkgs] : Going to collect download packages...
[ Tue Apr 07 12:19:12 CEST 2015 ] ERROR [RemoteRepSync : downloadPsuHeadersAsXml] : VDSException thrown com.cisco.nm.xms.vds.VDSException: CcoDownloadAdapter::getXmlFileList():IOException:tools.cisco.com
Regards,
Kerstin

How to find routers with multiple bgp neighbors using baseline templates?

Running LMS 4.1 5k on Windows
We have around 400 routers on a MPLS network. Only few of these have more than one BGP neighbor. We need to enable some bgp traps so we know when a bgp neighbor is down. How would I write a baseline template to check if a router has more than one bgp neighbor?
basically I want to know if a router has more than one statement of the following kind:
router bgp xxxxx
neighbor x.x.x.x remote-as xxxxx <-- 1st neighbor
neighbor y.y.y.y remote-as yyyyy <-- 2nd neighbor

Yes, it looks like the bug I mentioned previously. The bug has nothing to do with RME. You can use RME or not, and this bug will still be triggered. While an upgrade is recommended, the Release notes detail a workaround:
The 1711 router gives traceback when we process an snmpwalk at OID
"cInetIcmpMsgOutPkts" (1.3.6.1.4.1.9.10.86.1.3.2.1.6) from CISCO-IETF-IP-MIB or
when ciscoDslCpeMIB is queried (1.3.6.1.4.1.9.20.1.1).
12.2(15) works well
12.3(8)T4 and 12.0(3)T are giving this problem.
Didn4t find a similar problem reported to this one.
Workaround:
The problem lies in CISCO-DSL-CPE-MIB, so if you don't need this mib you can
exclude it from the default or created snmp view, thereby preventing the
traceback. Here is an example of 1) changing default view and 2) creating a new
view.
-- change the default snmp view to exclude CISCO-DSL-CPE-MIB
conf term
snmp-server view v1default ciscoDslCpeMIB excluded
end
show snmp view
-- create a new snmp view that excludes CISCO-DSL-CPE-MIB
conf term
no snmp-server view nodslmib
snmp-server view nodslmib iso included
snmp-server view nodslmib internet.6.3.15 excluded
snmp-server view nodslmib internet.6.3.16 excluded
snmp-server view nodslmib internet.6.3.18 excluded
snmp-server view nodslmib ciscoMgmt.252 excluded
snmp-server view nodslmib ciscoDslCpeMIB excluded
no snmp-server community public
snmp-server community public view nodslmib ro
end
show snmp view

How to see data of an AWR Baseline Template after it is expired

Hi,
I have a query on AWR baseline templates in 11GR2
I create a baseline template on a range which is a future date range(single).
It will show the baseline created in AWR Baseline Templates page.
Now after the range time gets over, I want to see the details which I am not able to see in EM(no charts nothing, just a page with discription of it, THe page says rage is expired).
I want to compare this baseline with other. How can I do that?

Hi Akulala,
Click on your fields; go to the Source heading and make Source Used: Only when current value in session state is null
Go to your branches and make sure that the "reset pagination for this page" boxes are not ticked. and the branch points are: On submit: after computation, validation & processing.
Mike

Transport Web Template, Query from development to productive system

Hi!
How can I transport Web Template, Query, workbooks from development to productive system?

RSA1 ---> Transport Coonection ---> Object Types -
> Select Web Tempelate ---> Drag to right and group under transport
Similary do for other objects
Thanks
Amit

Baseline template

Hello,
I have a question about "baseline template"
I try know to find if some interfaces don't have OSPF key.
I create my basic template like this for find all the interface fastEthernet begins with 0/2/ who don't shut :
Conditional Block
     sub mode
interface [#FastEthernet0/2/*#]
     CLI commands
- shutdown
Compliance Block (Use the Submode of above condition is checked)
     CLI commands
+ ip ospf message-digest-key [#*#]
and like this it doesn't works...
so I wonder how does works "stars *", "sharps #" ect ect ...
I try this because in the manual guide they use this, but I think I don't use them properly
thank you for answering me

So I've tried :
+ ip ospf message-digest-key [KEY]
and also
+ ip ospf message-digest-key 1 md5 [KEY]
apparently it doesn't works.
in response "RME say" to me 0 of 56 are compliant
it say, I should add in all interface the line "ip ospf message-digest-key ...". it's curious because the most of it have the line :/.
thank you for the link, I will study it.

Baseline template - look for specific loopback interface when specifying "ip tftp source-interface"

Hello all
I'm new to regex and I'm trying to make a baseline template, that will check our network devices for our required basic configuration.
What I'm trying to do is to make a template that will look for either a loopback0 or loopback1 interface.
If eíther one is found (the loopback interfaces will not be there at the same time) it must apply the following command:
ip tftp source-interface loopback0 (or loopback1)
Is it even possible to make an if-then statement using regex?
Thank you in advance.
Best regards
Jesper Ross Petersen
Message was edited by: Jesper Ross Petersen

Yes, this can be done
#Go to the tcl shell of the device.
C1811#tclsh
C1811(tcl)#
#copy and paste this at the tcl prompt.
proc intf {} {
set runningcfg [exec show run | inc ^interface Loopback]
foreach line [split $runningcfg \n] {
if {[regexp {interface (Loopback[0-1])} $line -> interface] } {
ios_config "ip tftp source-interface $interface"
return "ip tftp source-interface $interface"
# now type the name of the proc (intf) at the tcl prompt.
C1811(tcl)#intf
# If loopback0 or 1 is present the tftp source interface is added to the running config.
ip tftp source-interface Loopback0
C1811(tcl)#

Web template query

Hi
How to include request while deleting web templates.
Regards
Indraneel

Hi Indraneel,
When you create a Web template query it asks for a TR right ? So when you delete the query the deletion gets automatically recorded in that TR. Now to check if this is true please follow the following steps.
While creating the Web template query you get a TR right ? After creating the query please delete this TR.
Now your query is not associated with any TR.
Now try deleting the query it will ask for a TR.
Please revert if any issues
Regards,
Pramod

Using RME baseline templates to find non-compliant SNMP strings

Running LMS3.2.1
A. Can I run a compliance check using RME baseline template to find devices which have non standard SNMP strings IN ADDITION to the correct one?
How will the regular expression look like if we want to say
+ snmp-server community cisco123 ro
+ snmp-server community cisco456 rw 1
- snmp-server community [anything else] ro
- snmp-server community [anything else] rw [#.*#]
B. Is it possible to run a clean up job on the violating devices by using DEPLOY (or NetConfig, etc.)?

- [#snmp-server community (?!cisco123|cisco456).*#]
+ snmp-server community cisco123 RO
+ snmp-server community cisco456 RW
From the compliance job result GUI, you can deploy the job directly after verifying the results. When you deploy this template, it will remove any community that does not match "cisco123" or "cisco456", and then add them if the device does not already have them.

Batch Query with Batch but need address lines split by column

Hi folks,
I have the following query I created with the batch number of the sales order:
SELECT T0.[DocDate] as "Date", T1.[DocNum] as "Sales Order Number", T0.[CardCode] as "Customer Code", T0.[CardName] as "Customer Name",T1.[Address2], T0.[ItemCode], T0.[ItemName], T0.[BatchNum], T0.[Quantity], T1.pickrmrk FROM IBT1 T0, ORDR T1 WHERE T0.[BaseNum] = T1.[DocNum] and T1.docstatus = 'O' and T0.WHSCODE = '01' order by T0.BaseNum
Now I need to split the address by column so need street, block, city, county, country and zipcode fields from CRD1, but would either need the ship to address of the sales order it is selected or even just the default ship to address of the sales order. In above query T1.[Adress2] is not quite right for our needs, as this file will have to be exported to 3rd party. So I have gotten this far:
SELECT T0.[DocDate] as "Date", T1.[DocNum] as "Sales Order Number", T0.[CardCode] as "Customer Code", T0.[CardName] as "Customer Name",T1.[Address2], T2.[Street], T2.[Street], T2.[Block], T2.[City], T2.[County], T2.[Country], T2.[Zipcode], T0.[ItemCode], T0.[ItemName], T0.[BatchNum], T0.[Quantity], T1.pickrmrk FROM IBT1 T0, ORDR T1, CRD1 T2 WHERE T0.[BaseNum] = T1.[DocNum] and T1.docstatus = 'O' and T0.WHSCODE = '01' and T0.[CardCode] = T2.[CardCode] and T2.[AdresType] = 'S' order by T0.BaseNum
but will split into multiples if a business partner have more than one shipping address.
Can someone please advise on this one?
Many thanks in advance,

Thanks Agustin, tried it with RDR12 as the following query:
SELECT T0.[DocDate] as "Date", T1.[DocNum] as "Sales Order Number", T0.[CardCode] as "Customer Code", T0.[CardName] as "Customer Name",T1.[Address2], T2.[StreetS], T2.[BlockS], T2.[CityS], T2.[ZipCodeS], T2.[CountyS], T2.[CountryS], T2.[ZipCodeS], T0.[ItemCode], T0.[ItemName], T0.[BatchNum], T0.[Quantity], T1.pickrmrk FROM IBT1 T0, ORDR T1, RDR12 T2 WHERE T0.[BaseNum] = T1.[DocNum] and T1.docstatus = 'O' and T0.WHSCODE = '01' order by T0.BaseNum
but has multiple lines for different addresses (and not just shipping addresses of that businss partner sales order).
Anymore ideas or can you spot error in the query?
Thanks again,

Templates query have no children elements

same query for meetings returns correctly number of childer,
but for templates I get xml that only have
<node href="/accounts/bkf/my-account-id/templates"
type="cr:folder">
<name>templates</name>
<properties>
<property name="cr:owner" type="string">
<value>...</value>
</property>
<property name="jcr:created" type="date">
<value>2009-02-17T23:33:22.804-05:00</value>
</property>
</properties>
</node>
url:
https://na2.connectnow.acrobat.com//app/content/accounts/bkf/my-account-id/templates/?gak= lalala
but same url for meetings:
https://na2.connectnow.acrobat.com//app/content/accounts/bkf/my-account-id/meetings/?gak=l alala
returns all children along with container folder metadata
etc ..
so Java code throws NPE when trying to iterate through
templates :
Element children = (Element)
repository.getElementsByTagName("children").item(0);
//children is null
NodeList nodes = children.getElementsByTagName("node");
error:
error listing templates
java.lang.NullPointerException
at AFCS$AccountManager.listItems(AFCS.java:290)
at AFCS$AccountManager.listTemplates(AFCS.java:343)
at AFCS.main(AFCS.java:668)

you are correct.
all the other scripts are fine when no <children> tag
is present, but the Java version chokes. I'll fix it for next
version (and I wish I used XPath or a better XML parser for this
but I tried to limit the dependencies from external jars where
possible)
thanks for reporting the problem.

ABAP query using IHPA--need partner address

I am using SQ01 to create a query. I amusing the EQUI and IHPA. I need the partner address for Partner function = EC. I have the parner number but not the address number, so I cannot join to table ADRC.

Hi Priyank,
First you need to check whether all the required fields are available there in the LDB PNPCE(I guess you are using the same).
I think old department, old division must not be available there. Then you need to add it in your Infoset and write custom code for these fields. Once you are done with custom coding, you can use this infoset for creating queries.
Use trnx SQ02 to create queries, either SAP or Infoset.
Hope it helps. Let me know if you need some more help.
Raveesh

Approval Template Query

Hi, Is it possible to setup a approval template where an approval is required for all AP invoices that include a GL account that has a budget set for it?
Thanks,
Jane

Hi,
Yes possible to set approval template by means of query which is to be assigned under "Terms tab". But following condition should be meet,
1. Under general settings--->BP tab, you have to select "Warning" check box.
Thanks & Regards,
Nagarajan

Baseline Template Query LMS 4.2 - IP address

Similar Messages

Maybe you are looking for