Cisco devices configuration for CW-LMS

Hello,
I am new to CiscoWorks LMS. I am working with a LMS 3.2 fresh installation. I added all the devices (routers, switches and 3 ASAs) into the DCR. Now I need to know how to configure the devices to send relevant info to the CW LMS machine. I am looking for something similar to this:
http://www.cisco.com/en/US/docs/solutions/Enterprise/Security/SAFE_RG/chap10.html#wp1056411
This is a deployment model for Cisco MARS, which shows what to configure on each device in the network to send the most relevant info (syslog, netflow) to the Cisco MARS.
Is there a best practice for CW LMS regarding this? For example, what syslog level should the routers send to the LMS?
Thank you!

There is a deployment guide whitepaper for LMS at http://www.cisco.com/en/US/products/sw/cscowork/ps2425/prod_white_papers_list.html .  As for what to do syslog-wise, you should configure your logging facility to be local7 (this is the default on IOS, but not on ASA OS), and send at least sev 5 or higher messages.  You may want to bump that up to sev 6 (informational), but sev 5 for IOS devices will be sufficient to get things like configuration change messages.  For CatOS, you definitely want sev 6.

Similar Messages

  • Device Configuration for Samsung Galaxy Tab?

    Longtime Flex/AIR developer here, but first time developing for Android.
    Want to build for Samsung Galaxy Tab. In Flash Builder Burrito, when creating a Run Configuration, there's a list of devices to target. But the Galaxy Tab isn't one of them. Which one should I use? Or do I just create one and enter the right dimensions etc? Is there any information associated with those device configurations besides the pixel dimensions and pixels per inch?

    Try the nearest match in terms of resolution. Also if you design your controls with relative size (%age based or relative to a fixed initial size), it shouldn't be a problem on device. There is also a blog post which may help you in writing your app: http://www.adobe.com/devnet/air/flex/articles/writing_multiscreen_air_apps.html

  • Network device configuration for SCOM 2012 Network Resource Pool

    We are planning for two management servers in a Network Resource Pool.
    So(considering failover situation) to send traps to both devices do we need to configure both management servers as SNMP servers on these devices?
    If yes, Then it will definitely need double traffic for sending traps to two devices, isn’t it?
    What SNMP server name we should use while configuring devices?
    Thanks,
    Vinayak

    Hi,
    >So(considering failover situation) to send traps to both devices do we need to configure both management servers as SNMP servers on these devices?
    Yes, you need to configure both management servers as a trap recievers.
    >If yes, Then it will definitely need double traffic for sending traps to two devices, isn’t it?
    That's right.
    http://OpsMgr.ru/

  • Logging for changing device configuration using cisco prime LMS / PI

    Dear All,
    How to see / set for
    for changing device configuration (routers, switches) using cisco prime LMS / PI ?
    and, how to see network topology diagram using PI / LMS?
    Thanks,
    Jerri

    anyone can help. thanks.

  • Cisco works LMS 3.0.1 cannot archieve configuration for cisco 3000 series vpn concentrator

    Hi All,
    Our problem is, we have Cisco Works LMS 3.0.1. cannot archieve configuration for cisco 3000 series vpn concentrator.
    Any help would be greatly appreciated.
    Thanks in advance.
    Samir

    Make sure you have filled out all of the HTTP/HTTPS credential data in DCR for these devices.  RME will only use HTTPS to fetch VPN concentrator configurations.

  • Cisco works LMS 3.0.1 does not archiever configuration for cisco 7201 router

    Hi All,
    We have Cisco works LMS 3.0.1 and it does not archiever configuration for cisco 7201 router.
    Any help would be appriciated.
    Thanks in advance
    Samir

    Hi,
    *** Device Details for d0151-100 ***
    Protocol ==> Unknown / Not Applicable
    Selected Protocols with order ==> TFTP,SSH,HTTPS
    Execution Result:
    Unable to get results of job execution for device. Retry the job after increasing the job result wait time using the option:Resource Manager Essentials -> Admin -> Config Mgmt -> Archive Mgmt ->Fetch Settings
    This is the error while doing syn archieve.
    I am not sure about Rtr7000 version but we have latest Rtr7000.
    Waiting for your kind reply.
    Samir

  • Cisco Work (LMS 2.6) Device Configuration

    Hi,
    Can anyone tell me where is the default location of device configuration ( Running conf ) saved in Cisco Work (LMS 2.6) Server.
    Thanks & Regds,
    Lalit

    if you enable the so called shadow directory feature under:  Admin -> Config Mgmt -> Archive Mgmt -> Archive Settings
    then the defaut location is \CSCOpx\files\rme\dcma
    Cheers,
    Michel

  • How we archieve configuration for Cisco ASA 5500 series appliances

    Hi,
    We need to archieve configuration for Cisco ASA 5500 series appliances.
    We have Cisco works LMS 3.0.1.
    Device package installed is 4.2
    Any help would be appricated.
    Thanks in advance.
    Samir

    Hi ,
    Thanks for your answer.
    Right now we are using TACAS to login in to the ASA. That means we need single username and password to login via
    Cisoworks. Am I correct ?
    Waiting for your reply.
    thanks,
    Samir

  • Comparing NX-OS Configurations in Cisco Prime 2.1 or LMS 4.2.5

    Hello All,
    Maybe this is just an NX-OS thing but does anyone have issues comparing different versions of a configuration for the same device?  As an example we have Nexus 5548 running version 5.1(3)N2(1).  When someone configures an interface on the switch Prime and LMS receive syslog notifications and back up the configuration.  When you attempt to do a configuration comparison within Cisco Prime 2.1 it appears like the entire configuration has changed (see below - if you were to scroll over the entire config is red).  
    When I do the same comparison within LMS 4.2.5 it gives the same result.  Is this just the way it is?
    Brian

    So I checked another Nexus 5548 that's running 5.0(3)N1(1c) and it is working as expected.  It seems with that device that Cisco Prime 2.1 is able to parse the configuration out and you can compare differing versions of the same device:
    Looking back at the original device that Cisco Prime is having issues with it appears that everything is lumped under the global config:

  • CiscoWorks LMS 4.1, syslog analyzer parsing non-Cisco device.

    Hello.
    Can Syslog Analyzer parse syslog messages coming from a Non-Cisco device?
    I'm trying to parse message from a HP Virtual Connect module without success.
    Thanks.
    Andrea

    Hi Andrea,
    You could use syslog-ng to write a generic mnemonic into the message and forward it to LMS.
    Something like:
    syslog-ng->add fac-sev-mne: message->lms
    However, I would also caution you that LMS is *not* meant to be a "syslog" manager - there are usually way to many syslog messages in most environments for it to handle that many - which is why most syslog managers are standalone servers.
    In order to make sure that the NMS systems that syslog-ng forward messages to receive the correct source, syslog-ng needs to be compiled with the source spoof option. This will allow messages received on other NMS’s (such as LMS) to appear to come from the original devices rather than from the syslog-ng server.
    Compiling from source:
    Install the syslog-ng prerequisites from Balabit
    You must configure syslog-ng with --enable-spoof-source in order to enable the spoof source feature (which is disabled by default).
    ./configure --enable-spoof-source
    make && make install
    If you run into any issues during the installation, you can refer to the syslog-ng forum  or you can refer to the syslog-ng knowledge base
    Lastly, here's a great paper on syslog management:
    Building Scalable Syslog Management Solutions

  • How to Configure Cisco ASA 5512 for multiple public IP interfaces

    Hi
    I have a new ASA 5512 that I would like to configure for multiple public IP support.  My problem may be basic but I am an occasional router admin and don't touch this stuff enough to retain everything I have learned.
    Here is my concept.    We have a very basic network setup using three different ISPs that are currently running with cheap routers for internet access.  We use these networks to open up access for Sales to demo different products that use a lot of bandwidth (why we have three)
    I wanted to use the 5512 to consolidate the ISPs so we are using one router to manage the connections.  I have installed an add on license that allows multiple outside interfaces along with a number of other features.
    Outside Networks (I've changed the IPs for security purposes)
    Outside1 E 0/0 : 74.55.55.210  255.255.255.240 gateway 74.55.55.222
    Outside2 E 0/2: 50.241.134.220 255.255.248 gateway 50.241.134.222
    Inside1 : E 0/1 192.168.255.1 255.255.248.0
    Inside2 : E 0/3 172.16.255.1 255.255.248.0
    My goal is to have Inside 1 route all internet traffic using Outside1 and Inside 2 to use Outside2.    The problem is I can't seem to do this. I can get inside 1 to use outside 1 but Inside2 uses Outside 1 as well.
    I tried adding static routes on Outside2 to have all 172.16.248.0/21 traffic use gateway 50.241.134.222 but that doesn't seem to work.   
    I can post my config up as needed.  I am not well versed in Cisco CLI, I've been using the ASDM 7.1 app.  My ASA 5512 is at 9.1.   
    Thanks in advance for the suggestions/help

    I have been away for a while and am just getting caught up on some posts. so my apology for a delayed response.
    I find the response very puzzling. It begins by proclaiming that to achieve the objective we must use Policy Based Routing. But then in the suggested configuration there is no PBR. What it gives us is two OSPF processes using one process for each of the public address ranges and with some strange distribute list which uses a route map. I am not clear what exactly it is that this should accomplish and do not see how it contributes to having one group of users use one specific ISP and the other group of users use the other ISP>
    To the original poster
    It seems to me that you have chosen the wrong device to implement the edge function of your network. The ASA is a good firewall and it does some routing things. But fundamentally it is not a router. And to achieve what you want were a group of users will use a specified ISP and the other group of users will use the other ISP you really need a router. You want to control outbound traffic based on the source of the traffic, and that is a classic situation where PBR is the ideal solution. But the ASA does not do PBR.
    HTH
    Rick

  • Optimal configuration for Cisco E3000 Router

    Hi All,
    Following are the details of my current home network setup, I would like to hear more recommendations and drawbacks of this setup.
    ISP has provided with a Cisco  DPC3825 DOCSIS 3.0 Gateway which has 4 Ethernet ports and a wireless networking but only 2.4 GHz.. This router is connected to the cable CPE box to internet. I have enabled the Firewall features of this router and disabled the Wireless network. This has also the DHCP server running. 
    The Second router is a Cisco E3000 which supports 2.4 GHz / GHz wireless networking. Connection to gateway is made via the 1st Ethernet port of gateway and then to the Internet port of E3000 router. I have connected my wireless devices to E3000 with GHz wifi lan. This router also has the firewall activated and DHCP server running as well.
    Both routers have WEP2 Personal / AES security configured. Currently these two devices are on two different IP ranges ..etc gateway is 192.168.0.1 and e3000 is 192.168.1.1.
    The E3000 is primarily configured for my online video for TV (Panasonic Vireacast). Please let me know if this is the best configuration or any other possible options.
    Thanks,
    RG

    This configuration is called LAN to WAN configuration and this is the best configuration considering that you want to behave both the router as a router.
    Because the other confiuration would be LAN to LAN then you can only use 1 router as a router and 2nd router as a switch.
    http://www6.nohold.net/Cisco2/ukp.aspx?vw=1&docid=529c188bc0ee4f7da79ffc22f2be33ec_4579.xml&pid=80&r...
    The first configuration in the article is is LAN to LAN, scroll down the window for LAN to WAN configuration.

  • ISE version 1.0 - Unable to get management access for cisco devices

    Hi All,
    I want to manage all cisco devices with read and write privilege with ISE 1.0.
    Is this functionality is available in this version?
    I configured the 2960 switch.  On switch  redius test is successful. When I telnet to the switch, it ask for username and password. But message is authorization fail. But on ISE shows authentication is successful.
    Is it configuration issue or this feature is not available in this version?
    Regards,
    Hanumant

    Hanumant,
    You will have to create an authorization profile to send back the privilege level for the user:
    Here is the attribute (cisco-av-pair) you will have to send back:
    shell:priv-lvl=xx

  • LMS 4.2 Network Devices configuration requirement

    I have install LMS 4.2 and nat ip to discover found WS-6513 but cannot polling inventory.
    I serch for document about configuration on Network Devices such as switch, router, asa etc. to support LMS.
    But I cannot find it, anyone have example configuration or document about this ?

    Given that you have verified the SNMP RO community string and assuming you have a Supervisor 720 as noted in the compatibility matrix, you should be able to pull inventory.
    As a next step I would check what is going on when you actually try to retrieve inventory.
    Go into Device Center for your switch and select Tools > Packet Capture. Create a capture using the IP address of your switch and choose application SNMP (udp161). Give it adequate time, say 10 minutes (600 seconds). then go back into Device Center and choose Tools, Update Inventory. Once the Job Browser indicates the job is done )or failed), go back into the Packet Capture Window and examine the traffic captured (the jet file can be opened in Wireshark).
    A successful Inventory update consists of a series of get and get-bulk requests and associated get responses from the managed device. If it's failing, there should be some response early on in one of the frames from the capture.

  • How can I restore out of box configuration on Cisco device?

    Hello,
    The new Cisco devices (routers and switches) are coming with some default (out of box) configuration, but not without configuration, not with blank configuration.
    I realized that there is some command that can restore thе default configuration. But I can't find it.
    What is this command? Anyone does it know?
    Thanks in advance!
    Best Regards,
    Tsvety

    Mike's suggestion was correct. I would only add that one needs to erase vlan.dat if you have a switch that was used elsewhere. Cisco procedure linked here (for switches) and here (for routers).
    Even a brand new factory-fresh box will have SOME configuration bits on it. A skeleton configuration - the default VLAN 1, empty interface definitions, etc. will always be there. The only way to remove everything would be to erase flash altogether forcing one to boot in rommon (not very useful).

Maybe you are looking for