Cisco ANM in HA mode

Team,
I need to install two ANM servers in HA mode. The primary ANM server will be in my primary data-center and my back up ANM server will be located in my back up data-center. Is this possible? Based on what I read in the installation and user manual, the servers are supposed to be inter-connected with a cross over cable. Please let me know if what I am trying to do is possible and how can I make this work?
http://www.cisco.com/en/US/products/ps6904/tsd_products_support_series_home.html
Thank you,
John...

Guys,
Thank you for your replies. I'm thinking of configuring both ANM servers as primaries, create a vip in my core ACE module and put the ANM server in my primary and backup datacenters as a real server in a server farm. I will leave the ANM server in my primary data-center as active and I will configure the real server of the ANM server in my backup data-center as standby. What do you think of this solution?
Regards,
John...

Similar Messages

Cisco ANM - Exporting Historical Data (VA)

Hi Experts,
I am looking for the way to access historical data on Cisco ANM 5.2.1 Virtual Appliance. In documentation I found that raw data should be stored in
/var/lib/anm/export/historical-data/date-stamp.
The problem is that VA is lockdown environment with no access to its content.
Does anyone found the way how to use external scripts to gather historical data in CSV format?
BR
Marcin

This exception is sometimes seen when the 4.0(5) server had been upgraded from 4.0(3) or a lower version originally. The missing information in DCD does not cause any issues on 4.0, but it causes an issue for the DMT.
Attached is a document that is often helpful to replace this file and correct the problem. The blob value that needs to be copied into the entry in DCD is contained within the doc.
Thanks,
Brendan

Installing New network card on a Cisco Catalyst 6500 VSS mode

Hi All.
I need to install a new network card on Cisco Catalyst 6500 VSS mode, I need to follow any special procedures or is it only insert the new card and the Catalyst automatically recognizes the card?
Thank you So mucho.

Hi,
Just insert the blade and the switch should recognize it. For the 6500 series the blades are hot swap able.
HTH

Cisco ANM

Team,
We are thinking of purchasing the Cisco ANM product in an effort to centrally manage our ACE modules with a GUI interface. My past experiences with GUI and Cisco have not being positive, but I don't hold grudges.
Could you guys please respond with your unbiased opinion of this product whether you are currently using it or knows a colleague that is using it.
Thank you,
John...

for monitoring , config , and role based access control, as well as larm notification its pretty good. The main feature folks want that isn't there yet is reports and graphing of traffic.
If you have a server that meets the requirements layed out at:
http://www.cisco.com/en/US/customer/docs/app_ntwk_services/data_center_app_services/application_networking_manager/2.1/installation/guide/IG_prep.html#wp1060727
you can get a demo license that will allow you to have 2 ace blades with 5 contexts
demo license available at www.cisco.com/go/license click on the link under licenses not requiring a PAK
You can then test drive.

Adaptiva Software Distribution not working with Cisco APs in Local Mode

A worldwide customer would like to use a new Software distribution system called Adaptiva to replace SCCM within Windows environment. As far as I understand, Adaptiva is designed to work like a snowball system. A single PC at a remote side can be "infected" with new Software and will distribute the package to other PCs within the same IP-subnet, saving WAN bandwidth.
First tests are showing that it is working well with Cisco WLAN solution as long as we are using Flexconnect WLAN APs.
Customer locations with Local WLAN AP design create problems for this new software distribution method.
The WLAN-PCs can be reached from outside, but the establishment of the Client/Server-model between the WLAN Clients is not working. The Port used by this software for communication between clients in each WLAN subnet is UDP Port 34329.
Our WLCs are running at 7.4.130.0. The problem is appearing independently of AP Multicast settings or Broadcast Forwarding. Enabling Broadcast forwarding without Reboot did not improve the situation.
Global Multicast Mode and IGMP Snooping are also of no influence.
P2P Blocking Action is "Disabled" within the WLAN setup.
Who has any idea what might cause this communication problem between WLAN clients in Local Mode of APs ?
Thank You for answers
Wini

I can think of two solutions. You could 1: turn the "auto-lock" to never, so that your phone never sleeps. Or, you could 2: jailbreak your iPhone and install "insomnia". I wish we had the Cisco Mobile app. I usually use wifi/insomnia and turn data off at work since we have wireless pretty much everywhere...
Sent from Cisco Technical Support iPad App

Dynamic Routing Protocol Support in Cisco ASA Multiple Context Mode

                   Dear Experts,
Wold like to know whether dynamic Routing Protocol Support in Cisco ASA Firewall Multiple Context Mode. If yes then please provide OS version and Hardware Model of Cisco ASA Firewall. Appreciate the quick response. Thanks.

Hi,
Check out this document for the information
http://www.cisco.com/en/US/docs/security/asa/roadmap/asa_new_features.html#wp93116
Its lists the following for software level 9.0(1)
Multiple   Context Mode Features
Dynamic routing in Security   Contexts
EIGRP and OSPFv2 dynamic   routing protocols are now supported in multiple context mode. OSPFv3, RIP, and multicast routing   are not supported.
Seems to me you would need some 9.x version to support the above mentioned Dynamic Routing Protocols.
I don't think its related to the hardware model of the ASA other than that it requires a model that supports Multiple Context Mode. To my understanding the only model that doesnt support that is ASA5505 of the whole ASA5500 and ASA5500-X series.
Hope this helps
- Jouni

Cisco Profile 55 H323 mode Off after restart

Hi All,
We have a Cisco Profile 55 that for some reason after a restart switchs H323 Mode to off after a restart.
Through the web interface if you browse to Configuration -> System Configuration -> Network services -> H323 Mode is the first setting.
I have set it to On and save it twice now but after a restart it has changed back to off!
Any idea's what would be causing this would be a great help.
Thanks
John

Hello John -
As Martin as mentioned above, when using CUCM, H323 isn't supported. Actually starting with TC7 as seen in the TC release notes, on pg 7, when registering an endpoint to CUCM, H323 becomes disabled.
Taking a look at the following TelePresence Admin Guide with CUCM, on pg 11, it mentions that when using a TelePresence endpoint registered to CUCM, the default call protocol is SIP, this is because CUCM is SIP only.
In order to make H323 calls, you'll need to rely on either a VCS-C/E or Expressway-C/E to do the SIP to H323 interworking as I don't believe CUCM can. Expressway is preferred when using CUCM.

How to change Cisco EPC2425 into bridge mode

Hi,
I need help regarding how to chage ECP2425 into bridge mode. I have Wireless NAS drive router which has its own DHCP and NAT service. At the moment my Wireless Timecapsule (NAS Drive) is in bridge mode and connected to EPC2425 with ethernet cable. Everything is fine. But in order to access my timecapsule over the internet, I need to use its (timecapsule)'s NAT service. For this, I need to put EPC2425 which is my first point of access from internet, into bridge mode or atleast disabled its (EPC2425) NAT service. Unfortunately, I am not been able to find NAT or Bridge mode option on EPC2425. I will appreciate if anyone can help me out in this case. I need to change my EPC2425 router into bridge mode or gateway mode.
Thank you very much

Hi Azhar,
Thank you for your question. However, this community is for Cisco Small Business Products and the DPC/EPC2425 is not a Cisco Small Business Product.
Your product is an internet service provider (ISP) supported product. In other words you need to contact your ISP or technology reseller that you purchased this from to help you with your question.
http://www.cisco.com/web/consumer/support/modem_DPC2425.html
http://www.cisco.com/web/consumer/support/prod_modems.html
Regards,
Cindy Toy
Cisco Small Business Community Manager
for Cisco Small Business Products
www.cisco.com/go/smallbizsupport
twitter: CiscoSBsupport

Cisco 3502i in autonomous mode - for site survey

Hi,
Last year I was able to load autonomous mode IOS to a cisco 3502i to do the site survey using instructions at following thread.
https://supportforums.cisco.com/thread/2084624
This year I have to do site survey for a different site and need to do the same process. However on the CCO I don't see the autonomous image. Under downloads -> products -> wireless -> access points -> Cisco 3502i I see IOS link and when clicked there is gives
ap3g1-k9w8-tar.124-23c.JA4.tar. I even loaded that IOS but it seems to be light weight mode IOS.
After reading a few different threads somebody clarified that K7 = IOS and K8 = Lightweight. However I can't seem to find the lightweight mode anywhere.
https://supportforums.cisco.com/thread/2140629
Can somebody guide me? I need to run this code only for the site survey and totally understand the fact that Cisco would not support such configuration.
Thanks in advance,

Sorry to inform you but there is no autonomous code for the 3500. You could however use the 1140 code. But this not supported by Cisco but it does work ..
Sent from Cisco Technical Support iPhone App

Cisco Security Manager Workflow mode

Folks,
I am having difficulty working with CSM in workflow mode, has anyone done this task before, Any help would be highly appreciated. I will surely rate this post.
Thanks,

Workflow mode is an advanced mode of operation that imposes a formal change-tracking and change-management system. Workflow mode is suitable for organizations in which there is division of responsibility among security and network operators for defining policies and deploying those policies to devices.
http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/security_manager/3.2/user/guide/wfplan.html#wp88928

Cisco Aironet 3700 Autonomous Mode

Hi guys,
I was wondering if the autonomous IOS for the Cisco Aironet 3700 series is fully functional, instead of only supporting the site-survey mode.
Many thanks.

Thanks man.
I saw that IOS on Cisco's site too.
https://software.cisco.com/download/release.html?mdfid=285029866&flowid=48543&softwareid=284180979&release=15.3.3-JAB&relind=AVAILABLE&rellifecycle=ED&reltype=latest
However, I wasn't sure it fully supports it.
Cheers

Reg. Cisco IPS Inline VLAN Mode

Hi
Currently my Cisco IPS 4240 version 5.1(5) , is in Promiscous mode.Soon i will be configuring it in Inline mode .i will be using only 1 IPS Interface and will be configuring VLANs in the switch and connect the trunk port to the Gig0/0 of the IPS .The issue is that if the IPS goes down , will the packet flow continue to run smoothly i.e will the "Auto bypass mode" will be applicable for this scenario too and let the traffic goes without inspection ?
Ankur

Perfectly normal. Your test does not test the Software ByPass feature.
The confusion is in how Software ByPass and Virtual Sensor assignment are related.
If ByPass is set ON (Not Auto, but specifcally ON) then the traffic will be software bypassed regardless of whether or not analysis engine is running or whether the inline pair is assigned to any virtual sensors.
The driver does the bypass, and never even attempts to send it to the analysis engine.
If Software ByPass is set to Auto OR Off, the driver will always attempt to send the packets to the analysis engine.
The only difference between Auto and Off is what happens when the analysis engine STOPS pulling new packets from the driver.
With Software ByPass Auto, the driver will start passing the packets straight through and not send them to analysis engine.
With Software ByPass Off, the driver will bring the link down on the NICs until analysis engine is able to start receiving packets again.
So you see that Software ByPass is a function of the NIC driver.
Whether or not the pair is actually assigned to a virtual sensor is UNKNOWN by the NIC driver itself.
Whether or not the inline pair is assigned to a virtual sensor is solely a function of the analysis engine. If the analysis engine is functioning is running then the driver is always going to send it the packets. The analysis engine then checks to see if the packets should be monitored. If the inline pair is assigned to a virtual sensor then it is monitored before being passed back to the driver for transmit.
IF the inline pair is NOT assigned to a virtual sensor, then the packet is STILL passed back to the driver for transmit.
So an inline pair that is NOT assigned to a virtual sensor will STILL have packets passed through if analysis engine is Running. So long as analysis engine is runninng the NIC driver in Software ByPass Auto or Off does not care whether or not it is actually monitored. The driver only knows that it must pass the packet to the analysis engine and the analysis engine will send the packet back for transmit.
So adding and removing inline pairs from virtual sensors does NOT test the Software ByPass feature. The packets will always be passed through so long as analysis engine is running.
If analysis engine stops passing traffic, then software bypass kicks in and all inline pairs (whether monitored or not) will be treated the same depending on whether bypass is Auto or Off.
The only way to really test Software ByPass is to simulate an actual failure of the analysis engine.
To do this:
create a service account
login with service account
switch to user roor (su - root)
The root password is the same as the service account password.
Execute "ps -ef" to find the pid of the sensorApp process (which is the analysis engine)
Now execute "kill -9 ###" replacing the ### with the pid of the sensorApp process.
Now the Software ByPass functionality should kick in.
You can always run "show int" to see the current running status of the Software ByPass feature in the driver.
It will be either On, Off, or Auto_On or Auto_Off
The Auto_On and Auto_Off are the 2 running states for the Auto configuration. Auto_Off is when analysis engine is working, and auto_on is when the analysis engine is not working.

Cisco ANM 5.2 Device Import Issue

Hello,
I have installed ANM 5.2 virtual appliance.
I have an issue importing a Catalyst 6500 device.
When I try to import it, I get the following error:
Device discovery failed: Cannot communicate to the device.
Authentication failure while attempting to connect. Verify the device
type and credentials.
I double verified and the credentials are correct.
I user SSH version 2.
I use the following special carachters in the password:
"!" and space.
I don't use enable password to connect to the 6500 device. The 6500 device has a privilege 15 username.
In ANM, the enable password is a requirement so I just fill in the regular password.
I think the issue is appearing due to one of the following:
1.) The ANM does not support the special carachters I use in the 6500 password.
2.) Then ANM requires enable password, while I don't use enable password in the 6500 switch.
The 6500 runs SXI6 software version.
I can't configure an enable password or configure a test username without special carachters beacause it's against the organization's policy.
Does anyone familiar with this issue?

Hi Ehud,
Please read this link: http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/application_networking_manager/5.2/user/guide/UG_manage_devices.html
I used this guide without problem.

Cisco ASA 55XX Transparent mode VLAN traversing

Hello Cisco Forum Team!
In a scenario where the Cisco ASA is in Transparent mode, is it possible to transmit L2 traffic from other VLANs different than the native VLAN the management IP of the firewall resides?
The switches on the outside and inside interfaces of the ASA are in trunk mode and I am trying to pass L2 VLAN ttraffic from inside to outside and vice-versa using filters on the switches (switchport trunk allowed vlan).
Thanks in advanced for your support and comments!

Yes it is possible but you will be limited to 8 VLANs, or more accurately, 8 BVI interfaces so this is not a scalable solution. The catch is that you will need to have different VLANs for the same subnet at either end of the ASA.
To clarify this, lets say you are using interface Gig0/1 and Gig0/2. On Gig0/1 you would have configured subinterfaces with VLANs 2, 3, and 4. Now if you try to configure these same VLANs on Gig0/2 you will get an error saying something like this VLAN is already configured on another interface...I don't remember the exact error.
So to get this working you would need to configure Gig0/2 with subinterfaces for VLANs...lets say...5, 6, and 7. you would then associate VLANs 2 and 5 with BVI 1, VLANs 3 and 6 with BVI 2, and VLANs 4 and 7 with BVI 3. Each BVI interface would have its own IP address for the subnet that is being bridged across the ASA.
Please remember to select a correct answer and rate helpful posts

Cisco 1242 AP Preamble Mode

Hi,
I would like to know if configuring only 802.11g bit rate force the AP to use the the 20usec ERP-OFDM preamble. My understanding of the protection mode where b&g clients coexists force the AP to used the long 192 usec preamble so b client can understand that the air channel is utilized for the duration defined in the length field.
In other words, can we assume that as soon as we configured bit rate like 2,5,5,11 Mb/sec the AP is using the long 192 usec preamble
Thanks
Stephane

Hi Stephane,
I think you're mixing 2 concepts.
Concept 1 : Long or short preamble. Short preamble were already available at the time of 802.11b. Cisco APs still support long preambles for the sake of compatibility. You can restrict to short preambles only (more efficient). This is regardless of the rate used.
Concept 2 : Protection mode when a .11b client is present. A Clear-To-Send frame is sent before every .11g frames. The CTS frame is sent in .11b data rate so that .11b clients can understand.
I hope it clarifies ?
So for your questions, when b and g clients are presents, EVERYONE (except .11b clients obviously) sends a CTS frame in .11b rate to warn of upcoming .11g frames.
Nicolas

Cisco ANM in HA mode

Similar Messages

Maybe you are looking for