Cbqos with Solarwinds

hello,
i have just recently deployed qos on some of our rotuers and wanted to monitor them in solarwinds (which we use for network monitoring). So the problem i have run into is that when i poll the mib provided by cisco (cbqos) i get a graph with object.id's instead of names and interfaces. Does anyone know of a way to map these object.id's to actual names (which by the way are found in the same MIB) into solar winds. I know we can use NTA module for his purpose, but we really want to stay way from netflow at the present moment.
thanks.

Most likely you have to configure SolarWinds to identify the MIBS by their object name instead of the OID. Usually this involves this involves loading the MIB's directly to your NMS application. You might want to contact SolarWinds to ask them how to load the MIB to identify the OID's by their object name.

Similar Messages

SCOM 2012 Integration with Solarwinds

Hi Experts,
Currently we are using SCOM 2012 for Server, Application, Network, etc monitoring. Also, we are using Solarwinds Network Performance Monitor(NPM) for network monitoring and Network Configuration Manager(NCM) to perform configuration backup of network
devices as SCOM 2012 does not have this capability.
We are planning to have single consolidated view in SCOM 2012.
Please let us know, how can we integrate Solarwinds NPM and NCM with SCOM 2012.
Any help will be appreciated.
Kumaresan Lakshmanan

It depends. To be honest I never used it myself. If this MP is NOT based on OpsMgr Network Device class(es) - it should work on OpsMgr 2012. It seems like this MP queries a Solarwind product with a connector - this probably should work for 2012 as well.
http://OpsMgr.ru/

Adobe Reader and Acrobat Pro updates for 11.0.10 being pushed out through SolarWinds Patch Manager are not being recognized as applicable.

I am trying to update our Adobe Reader and Acrobat Pro to 11.0.10 using the default MSP packages with SolarWinds Patch Manager. All of the systems keep reporting as 'NOT APPLICABLE'. All of the workstations have Reader11.0.09, with about 10% still on 11.0.08 (due to the fact that the reader 11.0.09 package only patched about 2/3 of the systems). All systems that have Acrobat Pro are 11.0.09.
In SolarWinds I am using the "Adobe Systems, Inc. Packages" node.
Adobe Systems Acrobat 11 Catalog
Adobe Systems Reader 11 Catalog
and the SW Patch Manager downloads the msp's straight from Adobe.
I have checked the msp's manually and they will update at least back to 11.0.07 in Reader, and 11.0.0 in Acrobat Pro. (I had an old stand alone system that still had Reader 11.0.07, and I did a new install of Pro and went straight to update 11.0.10)
The SolarWinds Tech said, "Okay. That content is produced by Adobe. Any questions concerning applicability logic or diagnosing why a package reports as NotApplicable when that's not expected would need to be directed to Adobe, as they are solely responsible for that content and its behavior".
I am new to SolarWinds Patch Manager, and any help or advice would be greatly appreciated.

It sounds like you are attempting to use the SCUP catalogs outside of the MS solution. I can almost guarantee you that Adobe didn't test it if it's not referenced in the ETK: 11 SCCM-SCUP — Enterprise Administration Guide
That being said there "should" be logging available in any deployment solution. Since I am not familiar with Solar-Winds particular solution I can't say if it logs errors and how verbose those logs might be. If you have logs then post the output and the forum members "might" be able to assist you.

SNMP traps with WLC 4402

Currently using WLC 4402 with about a dozen WAPs. I would like to start logging some messages to troubleshoot some association issues. The syslog does not seem adequate for this the issues I am having. I noticed the default SNMP traps but is only holds 255 traps. I have tried to setup an SNMP server to get the traps but I get no data, only OID values. I was successful in getting the MIBs for the OIDs but still not all the data that I see on the brief traps screen.

Hi,
I have tried it with solarwinds and works fine for me. Talking about the traps. But they are too many.
The OID is : 1.3.6.1.4.1.14179.1.1.2.4.1.22
snmp info for polling:
MIB Value Type: Raw Value
Format: None
SNMP Get Type: Get Table
Polling Type: node
On WLC go to Managemnet (top TAB)
Right hand select > SNMP > Traps Control.
In this menu select what traps to need to be logged.
These traps will be shows on the oid polled.

How can I track a days worth of total bandwidth usage?

I've been trying to figure this out for a while now... I have setup SNMP with Solarwinds NPM to gauge the bandwidth over a link using the OID,
iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifEntry.ifOutOctets &
iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifEntry.ifInOctets but these seem to only show the current bandwidth utilization at the time of polling the device. I want this information but I also need to know the total amount of bandwidth traversing over a link for an entire day.
I'm trying to gauge the amount of bandwidth used for a server that's continually replicating to a backup server. So I would like to know the amount of data that was transferred for the entire day and also the maximum load amount during that time. Can I setup something like this on a 2960 switch or perhaps create a SPAN port that is linked to a system with bandwidth monitor software?
Thanks for any advice! -Mark

Netflow is the best tool for this, assuming you have a router in the path that supports Netflow. (L2 switches and most L3 switches do not but most routers do.)
Given a Netflow-capable device, export the flows to a Netflow server (Solarwinds and Manageengines make licensed ones and one can also use an open source one like ntop). There you can look at total volume of traffic generated from a given source-destination address pair.

WLC OID (snmp) for authenticated clients

I know the OID for associated users 1.3.6.1.4.1.14179.2.1.1.1.38.
But is there one for Authenticated clients? I am looking for the numbers similar to the one I can get from the report tools in WCS.
I think the number of authenticated clients is a better number than using the associated client count when talking about guest WLAN's.
Best regards,
Steffen Lindemann

Hi,
yes there is. I have created a table with solarwinds for this but they represent or provide information in diffrent way.
The table consist of
>WLAN Profile
1.3.6.1.4.1.9.9.599.1.3.1.1.3
This object specifies the WLAN Profile name
this 802.11 wireless client is connected to.
>Client Status
1.3.6.1.4.1.9.9.599.1.3.1.1.2
The object that represents the current status of the client.
>MobileStationUserName
1.3.6.1.4.1.14179.2.1.4.1.3
User Name , if any , of the Mobile Station. This would
be non empty in case of Web Authentication and IPSec.
>Client Protocol
1.3.6.1.4.1.9.9.599.1.3.1.1.6
The 802.11 protocol type of the client.
'dot11a' - The client is using 802.11a standard
to connect to the access point (AP)
>MobileStationIpAddress
1.3.6.1.4.1.14179.2.1.4.1.2
Ip address
Well the Clinet status would be represted in num value:
Client status:
4 = associated
6 = Probing
8 = Disconnected
Protocol:
1 = 802.11a
2 = 802.11b
3 = 802.11g
Hope this helps

Cisco WLC PSK Scheduled for Autogeneration

Hi All,
Is there a way to schedule Auto Generation of PSK for Guest WLAN in WLC or PI for every week/month?
We want to use WPA+WPA2 layer2 security with PSK on our Guest WLAN with just a splash screen acknowledging our policy without user/name password.
Are you aware of any way to automate PSK key creation. We would like to be able to change it weekly or monthly.
Thanks and Regards,
CJ

HI Jaganmohan,
I never tried with solarwinds but u can try it and let us know.
Here is the commnds :
config wlan security wpa akm psk set-key {ascii | hex} psk-key wlan_id
Note: keys must contain 8 to 63 ASCII text characters or 64 hexadecimal characters.
Regards
Dont forget to rate helpful posts

Unable to Telnet / SSH to a particular cisco switch

Hello,
I have an unusual issue that I just can't seem to track down. We have a Windows Server 2008 R2 box that is unable to telnet or ssh to one switch in our network.
Server IP: 10.0.0.74
Cisco Switch IP: 10.1.0.7
I am able to access all other switches/routers on the 10.1.0.x network, but not this one. I ping and tracert by ip address and name.
We have a number other servers on our network and they all can access this switch
Example:
a. 10.0.0.73 can telnet/ssh to 10.1.0.7
b. 10.0.0.72 can telnet/ssh to 10.1.0.7
c. 10.0.0.50 can telnet/ssh to 10.1.0.7
d. My workstation (10.0.250.213) can telnet/ssh to 10.1.0.7
If anyone can help with troubleshooting further, I would greatly appreciate it.

Thanks for the reply Philippe! Here is the route print
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.0.0.2 10.0.0.74 266
10.0.0.0 255.255.0.0 On-link 10.0.0.74 266
10.0.0.74 255.255.255.255 On-link 10.0.0.74 266
10.0.255.255 255.255.255.255 On-link 10.0.0.74 266
10.10.0.0 255.255.0.0 On-link 10.0.0.74 266
10.10.0.74 255.255.255.255 On-link 10.0.0.74 266
10.10.255.255 255.255.255.255 On-link 10.0.0.74 266
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 10.0.0.74 266
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 10.0.0.74 266
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
0.0.0.0 0.0.0.0 10.0.0.2 Default
===========================================================================
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
1 306 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
Firewall is disabled and there is no active antivirus. Im pretty sure port blocking is not the issue. I am able to ssh and telnet from this box to every other switch/router in our network.
This server has Solarwinds on it and tracks the health of our network (servers, routers, switches, ups, ect.). The only reason we noticed an issue is because it stopped backing up the config for this particular switch. All other switchs/routers
config is backed up to this server every morning at 2:00AM.
With solarwinds, this server is also able to communicate with this switch via snmp / icmp and ping.
Thanks again for the help!

Layer 2 links netflow monitoring tools

I am trying find Layer 2 netflow monitoring tools at the moment i have checked with solarwinds,manage engine they are not supporting layer2 interfaces netflow export.Is there any other monitoring tool opensource/closed source applications which can export cisco Layer 2 links.
We are having nexus 7k and ASR1k devices
Thanks for your help

Hey Nick,
The tricky part is getting the alert from consumed bandwidth. That will be handled from your NMS software of course. To answer your questions-
#1 - You can use the interface OID in MIB-II. There may be a specific MIB on the 3G, but MIB-II should work just fine. You can check on the 3G MIB here: http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?local=en
#2 - I think that would work. You would flow only your interface and send that to NMS. During an outage the router will hold the Netflow data, but I don't think it can push old stats after the primary link comes online. It would probably work if the outage was short but if it was longer, you would have to jump in the CLI and view the data there. I would lab it up, but I don't have any Netflow software

Disable default snmp traps

Hello,
I am trying to disable the default snmp trap for x25. I tried to use the "no" form of the command (no snmp-server enable traps x25), but after typing:
no snmp-server enable traps ?
x25 is not even listed.
The other workaround was to specify exactly what type of traps I wanted to be sent to my snmp-server using the commands:
snmp-server host ip_address community flash tty snmp
(x25 was not included), but that didn't solve the problem.
Any assistance would be highly appreciated.
Regards,
Katerina

Hi,
I have tried it with solarwinds and works fine for me. Talking about the traps. But they are too many.
The OID is : 1.3.6.1.4.1.14179.1.1.2.4.1.22
snmp info for polling:
MIB Value Type: Raw Value
Format: None
SNMP Get Type: Get Table
Polling Type: node
On WLC go to Managemnet (top TAB)
Right hand select > SNMP > Traps Control.
In this menu select what traps to need to be logged.
These traps will be shows on the oid polled.

Cisco Prime Infrastructure 2.0 and IPAM Solution

Hello everyone,
I'm student in a big company and my manager gave me a mission to study an IPAM solution.
In 3 month, we will use Cisco Prime Infrastructure 2.0
I turn to you cause I saw on this doc (link below) that CP Infrastructure 2.0 includes an IPAM Solution.
http://www.cisco.com/en/US/prod/collateral/netmgtsw/ps6491/ps11433/ps11480/ps11609/c45_658846_02_prime_aag.pdf
This IPAM Solution, is it just a repository to manage IP Adresse and DNS ?
Is it possible to write on DNS bind with IPAM of CP Infrastructure 2.0 ?
Thank you for your attention,
Cordially Vincent Malique

Pas de problème Vincent.
The Network Registrar product is usually seen only in very large enterprises or service providers as it is designed to sale up to serving hundreds of thousands of addresses.
In smaller organizations looking to move beyond the spreadsheet method of keeping track of subnets, I have seen people have success with IPPlan (open source). Those wishing more functions and a supported product often go with SolarWinds IP Address Manager (IPAM) product.

RANCID alternatives

Hey!
I was wondering if anyone had any recommendations/experience with device backup software other than RANCID (Windows compatible)? We wanted to deploy a new project but it requires that we use a Windows based program. Any help would great. Thanks!

It's not open-source like RANCID, but several folks are happy with Solarwinds' Network Configuration Manager (NCM).
Of course Cisco Prime LMS can back up Cisco device configurations (among many other functions). It can run on Windows, Solaris or RHEL. It's really not designed for non-Cisco gear though.
I'd estimate if you go beyond one of those 3, you'll be in an increasingly small segment of the population - single digit percentage-wise. Depending on your number and type of devices, it might be easier just to build some scripts on the mandated Windows platform and run them at AT jobs. I'd think it easier to push back on the Windows-only requirement and get an exemption to deploy RANCID on Linux.

Network top talker! Bandwidth consumption!

Hello,
what is the best solution in cisco world for finding the top talkers in the network.
I need to know what bandwidth consumption per IP.
I found out that Cisco IOS router with solarwind using SNMP.
Does cisco ASA generate this kind of reports?
Regards,
Viorel

just use google and viola! https://supportforums.cisco.com/docs/DOC-6113 netflow stat in ASA.

Solarwinds Netflow products what will work with a 3850-switch

Does anybody know….what Solar winds product will do Net Flow with Cisco 3850-switches? I know Net Flow Configurator will not work….but what about Net Flow Real-time for a Cisco 3850 switch?

For a lot of people, it is not neccessary. I used to ask myself that question until I came across a need for things that iLife and the Finder would not do.
Toast is a great program with a lot of features that just are not standard on a Mac.
You can make music DVDs. You can span a HD backup over multiple disks. You can make hybrid PC/Mac disks. It has DVD compression tools to fit a 8.5GB dual-layer DVD onto a single layer 4.7GB DVD.It suppoprts OGG and FLAC audio formats. You can turn your iMovie and iDVD projects into DivX disks.
It also has lots of nice tools to clean up audio that is imported from a noisy source - like vinyl.
It is all in all a very useful program, but not unless you need any of those features of course.

Problems with WSUS over VPN

A while back we started having trouble with our WSUS server communicating with our laptops over our VPN. We've been just running updates manually, but it's become a priority to find out what the issue is so that we can resume using it to deploy other software
packages.
We're getting the following in our WindowsUpdate.log:
2014-08-21 10:40:50:083 1168 63c AU Triggering AU detection through DetectNow API
2014-08-21 10:40:50:083 1168 63c AU Triggering Online detection (interactive)
2014-08-21 10:40:50:083 1168 a80 AU #############
2014-08-21 10:40:50:083 1168 a80 AU ## START ## AU: Search for updates
2014-08-21 10:40:50:083 1168 a80 AU #########
2014-08-21 10:40:50:083 1168 a80 AU <<## SUBMITTED ## AU: Search for updates [CallId = {414E9C34-F810-46D5-9D6B-01001BCE24FB}]
2014-08-21 10:40:58:211 1168 cf4 Misc WARNING: Send failed with hr = 80072ee2.
2014-08-21 10:40:58:211 1168 cf4 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2014-08-21 10:40:58:211 1168 cf4 PT + Last proxy send request failed with hr = 0x80072EE2, HTTP status code = 0
2014-08-21 10:40:58:211 1168 cf4 PT + Caller provided credentials = No
2014-08-21 10:40:58:211 1168 cf4 PT + Impersonate flags = 0
2014-08-21 10:40:58:211 1168 cf4 PT + Possible authorization schemes used =
2014-08-21 10:40:58:211 1168 cf4 PT WARNING: SyncUpdates failure, error = 0x80072EE2, soap client error = 5, soap error code = 0, HTTP status code = 200
2014-08-21 10:40:58:211 1168 cf4 PT WARNING: PTError: 0x80072ee2
2014-08-21 10:40:58:211 1168 cf4 PT WARNING: SyncUpdates_WithRecovery failed.: 0x80072ee2
2014-08-21 10:40:58:211 1168 cf4 PT WARNING: Sync of Updates: 0x80072ee2
2014-08-21 10:40:58:211 1168 cf4 PT WARNING: SyncServerUpdatesInternal failed: 0x80072ee2
2014-08-21 10:40:58:211 1168 cf4 Agent * WARNING: Failed to synchronize, error = 0x80072EE2
2014-08-21 10:40:58:211 1168 cf4 Agent * WARNING: Exit code = 0x80072EE2
2014-08-21 10:40:58:211 1168 cf4 Agent *********
2014-08-21 10:40:58:211 1168 cf4 Agent ** END ** Agent: Finding updates [CallerId = ]
2014-08-21 10:40:58:211 1168 cf4 Agent *************
2014-08-21 10:40:58:211 1168 cf4 Agent WARNING: WU client failed Searching for update with error 0x80072ee2
2014-08-21 10:40:58:226 1168 cf4 Agent *************
2014-08-21 10:40:58:226 1168 cf4 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
2014-08-21 10:40:58:226 1168 cf4 Agent *********
2014-08-21 10:40:58:226 1168 cf4 Agent * Online = Yes; Ignore download priority = No
2014-08-21 10:40:58:226 1168 cf4 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2014-08-21 10:40:58:226 1168 cf4 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2014-08-21 10:40:58:226 1168 cf4 Agent * Search Scope = {Machine}
2014-08-21 10:40:58:226 1168 cf4 Setup Checking for agent SelfUpdate
2014-08-21 10:40:58:226 1168 cf4 Setup Client version: Core: 7.6.7600.256 Aux: 7.6.7600.256
2014-08-21 10:40:58:226 584 db4 COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = <NULL>]
2014-08-21 10:40:58:226 584 db4 COMAPI - Updates found = 0
2014-08-21 10:40:58:226 584 db4 COMAPI - WARNING: Exit code = 0x00000000, Result code = 0x80072EE2
2014-08-21 10:40:58:226 584 db4 COMAPI ---------
2014-08-21 10:40:58:226 584 db4 COMAPI -- END -- COMAPI: Search [ClientId = <NULL>]
2014-08-21 10:40:58:226 584 db4 COMAPI -------------
2014-08-21 10:40:58:226 584 84c COMAPI WARNING: Operation failed due to earlier error, hr=80072EE2
2014-08-21 10:40:58:226 584 84c COMAPI FATAL: Unable to complete asynchronous search. (hr=80072EE2)
2014-08-21 10:40:58:258 1168 cf4 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2014-08-21 10:40:58:273 1168 cf4 Misc Microsoft signed: Yes
2014-08-21 10:41:19:333 1168 cf4 Misc WARNING: Send failed with hr = 80072ee2.
2014-08-21 10:41:19:333 1168 cf4 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2014-08-21 10:41:19:333 1168 cf4 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://{servername}/selfupdate/wuident.cab>. error 0x80072ee2
2014-08-21 10:41:19:333 1168 cf4 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2014-08-21 10:41:19:333 1168 cf4 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2014-08-21 10:41:19:333 1168 cf4 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2014-08-21 10:41:40:362 1168 cf4 Misc WARNING: Send failed with hr = 80072ee2.
2014-08-21 10:41:40:362 1168 cf4 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2014-08-21 10:41:40:362 1168 cf4 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://{servername}/selfupdate/wuident.cab>. error 0x80072ee2
2014-08-21 10:41:40:362 1168 cf4 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2014-08-21 10:41:40:362 1168 cf4 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2014-08-21 10:41:40:362 1168 cf4 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2014-08-21 10:42:01:391 1168 cf4 Misc WARNING: Send failed with hr = 80072ee2.
2014-08-21 10:42:01:391 1168 cf4 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2014-08-21 10:42:01:391 1168 cf4 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://{servername}/selfupdate/wuident.cab>. error 0x80072ee2
2014-08-21 10:42:01:391 1168 cf4 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2014-08-21 10:42:01:391 1168 cf4 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2014-08-21 10:42:01:391 1168 cf4 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2014-08-21 10:42:22:435 1168 cf4 Misc WARNING: Send failed with hr = 80072ee2.
2014-08-21 10:42:22:435 1168 cf4 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2014-08-21 10:42:22:435 1168 cf4 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://{servername}/selfupdate/wuident.cab>. error 0x80072ee2
2014-08-21 10:42:22:435 1168 cf4 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2014-08-21 10:42:22:435 1168 cf4 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2014-08-21 10:42:22:435 1168 cf4 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2014-08-21 10:42:22:435 1168 cf4 Misc WARNING: DownloadFileInternal failed for http://{servername}/selfupdate/wuident.cab: error 0x80072ee2
2014-08-21 10:42:22:435 1168 cf4 Setup WARNING: SelfUpdate check failed to download package information, error = 0x80072EE2
2014-08-21 10:42:22:435 1168 cf4 Setup FATAL: SelfUpdate check failed, err = 0x80072EE2
2014-08-21 10:42:22:435 1168 cf4 Agent * WARNING: Skipping scan, self-update check returned 0x80072EE2
2014-08-21 10:42:22:435 1168 cf4 Agent * WARNING: Exit code = 0x80072EE2
Here's what the client diagnostic tool returns:
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is not running. PASS
Wuaueng.dll version 7.6.7600.256. . . . . . . . . . . . PASS
This version is WSUS 2.0
Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings
Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use
Checking Connection to WSUS/SUS Server
WUServer = http://{servername}
WUStatusServer = http://{servername}
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS
Press Enter to Complete
Both of the above were run without any firewall at all. For some reason it appears as though (in the log anyway) it's trying to use a proxy. (when it shouldn't)
Updates work perfectly when plugged into our network, and while they're on the VPN they have access to all network resources. (mapped drives, etc)
Any help would be greatly appreciated, as I'm afraid this one has me stumped.

A while back we started having trouble with our WSUS server communicating with our laptops over our VPN.
First note here that may significantly assist in your diagnostics... the WSUS Server does NOT communicate with clients.. the *CLIENTS* communicate with the WSUS Server. So, it's not about the pathway from server-to-client, but rather from client-TO-server.
Ergo.. why can the clients not find the WSUS server when connected via VPN?
AU <<## SUBMITTED ## AU: Search for updates [CallId = {414E9C34-F810-46D5-9D6B-01001BCE24FB}]
I have no idea what/where this call to the WUA is coming from, but it's failing with a TIMEOUT error. My assumption, all other things considered, is that this is NOT a call to the assigned WSUS server. At a minimum, it's not a standard WUA detection for
updates from a WSUS server.
Checking Connection to WSUS/SUS Server
WUServer = http://{servername}
WUStatusServer = http://{servername}
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
SelfUpdate folder is present. . . . . . . . . . . . . . PASS
Presumably the WSUS server communication is working perfectly, but I'll have to offer that as an assumption ONLY since I don't actually know what the client is talking to since you've masked that critical information from your query. I'm also assuming this
CDT output is from a client actually connected to the VPN.
ALSO: Please do NOT post logfiles in CODE BLOCKS... it makes them impossible to read, and I HATE horizontal scrolling. Just post them as *TEXT*.
For some reason it appears as though (in the log anyway) it's trying to use a proxy. (when it shouldn't)
Are the clients configured to USE a proxy when they shouldn't be? SHOULD they be required to use a proxy on the VPN connection and they're not? I can't tell what OS version the client is, since the logs are not complete enough, but since it's -2014- I'm
going to assume it's a Vista or later client.
What's the output from NETSH WINHTTP SHOW PROXY?
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

Cbqos with Solarwinds

Similar Messages

Maybe you are looking for