Cisco NAM 2204 Appliance Problem

Hi,
I wanna seen port utilization for Cisco 3750 with NAM 2204. What can i do this configuration in NAM and 3750?
Thanks.

I have copy&paste the error message in the web search and I did get a bunch of hits on this, all related to Linux. The NAM is build on a Linux kernel, so it is obviously related to it but I didn't found a good hint what really caused the issue, just a couple of suggestions. One thread described how to change some settings in grub.conf which is not soltion for you:
http://www.cyberciti.biz/faq/linux-kernel-uhhuh-nmi-received-for-unknown-reason-30/
In couldn't find an entry for this in Ciscos' bug tool, so I would say, its time to open a TAC service request with Cisco (or your partner) or just try to reload the module and see if you get it back working....

Similar Messages

Cisco nam 2204 performance evaluation

Hi,
We are planning export 500 Netflow of ISR G2 to a NAM2204-RJ45 appliance.
But I Cannot find information about NAM2204-RJ45 Netflow Data Export performance.
Can someone share user experience?

The 2204 is an appliance with 4 gigabit ports where the ISR is a module with two ports.
2204 data sheet:
http://www.cisco.com/en/US/prod/collateral/netmgtsw/ps5740/ps5688/ps10113/data_sheet_c78-655535.html
ISR data sheet:
http://www.cisco.com/en/US/prod/collateral/netmgtsw/ps5740/ps11658/data_sheet_c78-655516.html

SunBlade 100 to Cisco PIX Security Appliance

I have a problem connecting a SunBlade 100 workstation with Cisco Routers, and the PIX Security Appliance at the Console ports of both a Cisco router and the Cisco PIX Security Appliance. This should be out of the serial port of the SunBlade 100 workstation..
I have tried to use the UNIX command tip hardwire. No luck connecting to the console port. I also tried to use the UNIX cu command again no response from the console port. I tried connecting a modem temporarily to the SunBlade 100 workstation and was successful in echoing a phone number to a modem. However, I need to use a direct connection from the SunBlade 100 workstation.
Currently, Windows 2000 workstations are used with
Hyperterminal to connect to routers and the PIX Security Appliance. I have 24 SunBlade workstations in my classroom and need to use them to connect to the console port on Cisco routers, and the PIX Security Appliance. I would appreciate any help anyone might be able to give on this subject.

Hello Namit and Rahul,
Here are few questions that came in directly during your live webcast hence posting them here so that users can benifit:
1)      How is ASA CX different from other UTM solutions ?
2)      How is dynamic application inspection of CX better than other inspection engines ?
3)      What features or functionalities on the CX are available by default ?
4)      what are the different ways we can run or install CX on the ASA platform ?
5)      What VPN features are supported with multi context ASA in the 9.x release ?
6)      What are the IPv6 Enhancements in the ASA version 9.x ?
Request you to please provide your responses to them individually.
Thanks.

Cisco ACS 4.2 authenticating Cisco 4710 ACE appliance failed

Hi,
I've got a problem with Cisco ACS 4.2 authenticating Cisco 4710 ACE appliance.
ACS4.2 has been configured to use both internal and external database. It's been working fine for a couple or years.
Recently we bought a Cisco 4710 ACE appliance. When I use ACS4.2 internal username and password to login the Cisco 4710 ACE appliance, I have no problem. I can also see the passed authentication log on ACS4.2. However, if I use AD username and password, I couldn't login in. The message is "Login incorrect". I checked the failed attempts log on the ACS4.2, there was no log regarding the failed attempt. My AD username and password works fine on all other cisco routers and switches.
I've posted my AAA configuration of the 4710 ACE below. ACE is running on the latest version A4(1.1). Please help.
tacacs-server key 7 "xxxxxxxxxxxxx"
aaa group server tacacs+ tac_admin
server xx.xx.xx.xx
aaa authentication login default group tac_admin local
aaa authentication login console group tac_admin local
aaa accounting default group tac_admin

Hi,
Since the ACS is receiving the request.
Could you please ensure that In ACE on every context (including Admin and other) you have following strings:
tacacs-server host x.x.x.x key 7 "xxx"
aaa group server tacacs+ tac_admin
   server x.x.x.x
aaa authentication login default group tac_admin local
aaa authentication login console group tac_admin local
aaa accounting default group x.x.x.x
On ACS side for group named "Network Administrators" you should configure in TACACS settting:
1. Shell (exec) enable
2. Privilege level 15
3. Custom attributes:
           shell:Admin*Admin default-domain
    if you have additional context add next line
          shell:mycontext*Admin default-domain
After loging to ACE and issuing sh users command you should see following
User             Context                                                                  Line     Login Time   (Location)        Role   Domain(s)
*adm-x        Admin                                                                    pts/0   Sep 21 12:24 (x.x.x.x)    Admin   default-domain
Hope this helps.
Regards,
Anisha
P.S.: please mark this thread as answered if you fee your query is resolved. Do rate helpful posts.

Ask the Expert: Introduction to Cisco Adaptive Security Appliance (ASA) version 9.x (Context Aware Security and VPN Features)

With Namit Agarwal and Rahul Govindan
Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about Cisco Adaptive Security Appliance (ASA) version 9.x (Context Aware Security and VPN Features) with experts Namit Agarwal and Rahul Govindan.
This is a continuation of the live webcast.
Cisco ASA CX (Context-Aware) is a next generation firewall service that serves as an extension to the Cisco Adaptive Security Appliance (ASA) firewall platform. In addition to the proven stateful inspection firewall capabilities, it provides us with next-generation capabilities and a host of additional network-based security controls for end-to-end network intelligence and streamlined security operations.
Namit Agarwal is a customer support engineer at the Cisco Technical Assistance Center in Bangalore, India. He has more than four years of experience in the security domain. His areas of expertise include ASA firewalls, IPS, and ASA content-aware security (ASA CX). He has been involved in various escalation requests from around the world. He holds CCIE certification (number 33795) in security.
Rahul Govindan has been an engineer with the Security Technical Assistance Center team in Bangalore for more than three years. He works on security technologies such as VPN; Cisco ASA firewalls; and authentication, authorization, and accounting. His particular expertise is in Secure Sockets Layer VPN and IP security VPN technologies. He holds CCIE certification (number 29948) in security.
Remember to use the rating system to let Namit and Govindan know if you have received an adequate response.
Because of the volume expected during this event, Namit and Govindan might not be able to answer every question. Remember that you can continue the conversation in the Security community, subcommunity VPN shortly after the event. This event lasts through November 1, 2013. Visit this forum often to view responses to your questions and the questions of other Cisco Support Community members.
Webcast related links:
Slides from the live webcast
Video Recording of the live webcast
Introduction to Cisco Adaptive Security Appliance (ASA) version 9.x (Context Aware Security and VPN Features): FAQ from live webcast

Hello Namit and Rahul,
Here are few questions that came in directly during your live webcast hence posting them here so that users can benifit:
1)      How is ASA CX different from other UTM solutions ?
2)      How is dynamic application inspection of CX better than other inspection engines ?
3)      What features or functionalities on the CX are available by default ?
4)      what are the different ways we can run or install CX on the ASA platform ?
5)      What VPN features are supported with multi context ASA in the 9.x release ?
6)      What are the IPv6 Enhancements in the ASA version 9.x ?
Request you to please provide your responses to them individually.
Thanks.

TACACS+ Authentication For Cisco NAM

Hi All,
I have an cisco ACS v5.1 and also a cisco NAM. Currently, I have configured TACACS+ on the NAM and the ACS v5.1 however when I try to access the NAM, the ACS v5.1 has an error message of "TACACS+ authentication ended with error" and I am not able to access the equipment.
For your information, I have no problem with others equipment TACACS+ authentication with the same ACS.
Please advise.
Thks and Rgds

Steven
I would first suggest that you verify that your ACS has an appropriate and correct entry configured for the NAM as a client. Assuming that is correct then I would suggest that you check and verify that the NAM is originating its TACACS requests from the address that you configured for the client on the ACS and that the shared secret is the same on both devices.
If those are correct then I would suggest to look in the Failed Attempts report of ACS and see if it provides a better identification of the problem.
HTH
Rick

Cisco NAM - Capabilities

Hello All,
I'm looking for features of NAM 3.0 which may help on daily operational basis, below are few questions regarding the same:
1. Can NAM give real time data showing which IP addresses are connected to a particular server?
2. Can it provide details of which protocol is abruptly disconnecting between two end-points?
3. If I deploy Cisco NAM at my data centre in HQ, how would it help me monitor my traffic at remote sites, or does it help at all in this regards?
4. Can it differentiate between traffic coming from load balancers, WAN optimizers, SSL devices, etc apart from regular endpoints like servers, desktops?
5. I'm guessing it already does, but just wanted to know if NAM gives complete details of all ports active on a server and which protocols, clients connected to it?
6. Does it show real time traffic between two endpoints like two hosts on different remote sites?
Thank you.
Regards,
Adnan

NAM, NAM1, NAM2, NAM SoftAppliance, NAM WAAS Blade or NAM Appliances are hardware denominators. Each new hardware release brings new chipsets, designs and hardware capabilities to NAM.
But majorly, all features depends on the software version you are using, either NAM Software 4.x or 5.x.
As an example, it is like using a Windows Software on a old single processor or a new Quad-core processor, features may remain same. However, some of the selective features does depend on Hardware as well, but mostly the robust hardware adds performence.
The latest NAM3 has following architecture:
•Two high-performance CPUs with hardware-based packet acceleration offering greater than 10 Gigabit Ethernet monitoring performance, 24 GB RAM, 600 GB SATA hard disk drive, mini SAS, and 10 Gigabit Ethernet external storage interface, and 1 Gigabit Ethernet management interface
• 20 gigabit interface to backplane for Switched Port Analyzer (SPAN)/VLAN access control list (VACL) capture data sources, NetFlow, encapsulated remote SPAN (ERSPAN), Cisco WAAS, and Cisco Performance Agent (PA) data sources
For more details on NAM3 please visit this link:
http://www.cisco.com/en/US/prod/collateral/modules/ps2706/ps11659/data_sheet_c78-655374.html
-Thanks

Unable upgrade cisco NAM

Hi guys!
I have next problem:
I have cisco NAM server (Catalyst 6509 with module WS-SVC-NAM-2). I want install upgrade for 6.0.2 version but I get next error:
upgrade ftp://[email protected]/c6svc-nam.6-0-2.bin.gz
Downloading the image...
Password for [email protected]:
ftp://[email protected]/c6svc-nam.6-0-2.bin.gz (170786K)
- [############# ] 95734K | 11448.08K/swrite: No space left on device
426 Connection closed; aborted transfer of "/c6svc-nam.6-0-2.bin.gz"
Image download failed. Exiting...
Upgrade with <ftp://[email protected]/c6svc-nam.6-0-2.bin.gz> failed (1)
Can anybody help me?
Thanks

I can't believe no one has replied to you yet. I'm sure you've figured it out by now, but for those who are searching: the disk on the NAM device was full. You know how on the NAM you have your hard drive for all the data that's collected, but that's not where the OS for it resides. It resides on a flash card. That's probably like a 128MB card, and it's full. Typically in this situation you have to remove the old version of the software from flash before you ftp the new image up there. Now be careful with this because if you are not positive that you have the correct image, you could be temporarily bricking your device. By erasing the old image before loading the new one you're going to have the risk that if it doesn't work that you won't have an image to recover from. So typically you want to FTP the current image down to a computer where you can store the old image, until you're sure the new one works.

Add arabic file names to ZipOutputStream problem

Dear All,
i have problem with add arabic file names to ZipOutputStream problem my sample code :
zipOutputStream.putNextEntry("عربي.txt");//some arabic text
the zip file created successfully and contain files but the files in the zip file with name '??????????.txt'.i use many character set to encode arabic file name such as utf-8,windows-1256,iso-8859-1,IBM437 but the name changed to someting cannot understand lik '_د_س_ذ_د_ز ___«___è_ر1.txt' or '??????????.txt'.
is there anyone to help
with regards
Wa'el Abu Rahmeh

Its a warning. You can ignore it, and your program will run correctly.
To get the full details, follow the instructions and run it with Xlint:
javac -Xlint:unchecked beans\CustomerManager.javaProduces this error message:
beans\CustomerManager.java:19: warning: [unchecked] unchecked call to add(E) as a member of the raw type java.util.List
            rv.add(getCustomer(String.valueOf(i)));
                  ^
1 warningIt is a Java1.5 specific warning because you are not using the new Generics info with the collections.
Here is the version that compiles with no warnings whatsoever.
package beans;
import java.util.ArrayList;
import java.util.List;
public class CustomerManager
    public List<Customer> getCustomers()
        return generateCustomers();
    private List<Customer> generateCustomers()
        List<Customer> rv = new ArrayList<Customer>();
        for (int i = 0; i < 10; i++)
            rv.add(getCustomer(String.valueOf(i)));
        return rv;
    public Customer getCustomer(String id)
        return new Customer(id, id + "First", "Last" + id,
            "123 Caroline Road Fooville");
}Basically the change was everywhere you have List or ArrayList replace it with List<Customer> - meaning you have a List of customer objects, rather than just a List of "anything"
If you are compiling with jdk1.5, then anywhere you use a Collection without specifying the types in this manner, it will create a warning.
You can ignore the warning if you so wish, and the program should run fine.
Cheers,
evnafets

Cisco Wireless Location Appliance

dear
i have WCS with 500 ap License
i need to have Cisco Wireless Location Appliance what lisens i need for 500 ap
please explain to me that

Hi Ahmed,
This is the upgrade License SKU for upgrading WCS to WCS Location;
WCS-LOC-UPG-K9
Supports deployment of Cisco WCS on a single server only.
For customers upgrading from their existing Cisco WCS base licenses to equivalent Cisco WCS location licenses running Cisco WCS Software Release 4.1 or later.
Available as Cisco WCS location in increments of 50, 100, or 500 lightweight access points.
Customers currently using this license with Cisco WCS Software Release 4.0 are encouraged to upgrade to Cisco WCS Software Release 4.1, but they are not required to do so.
Order the Correct Cisco WCS SKUs
The process to order Cisco WCS SKUs for WCS-STANDARD-K9, WCS-LOC-UPG-K9, WCS-WLSE-UPG-K9 and WCS-ENT-K9 is presented below. To request help with ordering, please contact Cisco Customer Service: http://www.cisco.com/go/customerservice.
1. Login to the Cisco Ordering Tool.
2. Enter the family SKU of WCS-STANDARD-K9 or WCS-LOC-UPG-K9 or WCS-WLSE-UPG-K9 or WCS-ENT-K9 into "Enter Product" in the Ordering Tool and then press "Enter."
3. The family SKU will display in the ordering area. (Figure 6).
4. Select the "Line" for the family SKU
5. Once you have been taken to the configuration screen, select one of these options from the left side (Figure 7):
For WCS-STANDARD-K9 select one of the sub-SKUs based on the following:
Base: WCS Standard AP Base Option
Location: WCS Standard AP Location Option
For WCS-WLSE-UPG-K9 select one of the sub-SKUs based on the following:
Base: WLSE to WCS AP Base Upgrade Option
Location: WLSE to WCS AP Location Upgrade Option
**For WCS-LOC-UPG-K9 select the sub-SKU:
**WCS AP Location Upgrade Option
For WCS-ENT-K9 select the sub-SKU:
WCS Enterprise AP Location Option
For the WCS-STANDARD-K9 or **WCS-LOC-UPG-K9 SKU families, customers are prompted to order the optional CD (WCS-CD-K9), for a nominal charge, during the ordering process. The WCS-CD-K9 contains one software image of Cisco WCS Software Release 4.1 on a CD for Windows and Linux. This CD is shipped by U.S. mail to the purchaser's address. The optional CD is not available for WCS-WLSE-UPG-K9 because this SKU family already ships in CD format.
6. The right side of the screen will display the licenses available (Figure 7). The price for each SKU is displayed in the Ordering Tool.
7. Each license is orderable in a quantity of one (1) for the quantity blocks specified. To add multiple quantities of license blocks, you must go back to the main screen and order additional family SKUs and then select the sub-SKU option and license quantity block required. Repeat this process as needed, until the correct quantity of license blocks for your sub-SKU have been ordered.
From this good doc;
http://www.cisco.com/en/US/products/ps6305/pro ducts_data_sheet0900aecd804b4646.html
Hope this helps!
Rob

Cisco Prime NCS appliance & license

Hi all,
I'm looking for getting a Cisco prime NCS appliance (PRIME-NCS-APL-K9). I'm a little bit confused regarding to the license scheme:
1. Does the appliance has any license coming with it or we need to order the license separately?
2. If I have an WLC 5508 (license support 12 APs) & 12 3500 APs, then number of devices counted will be 1 (WLC) or 12 (APs) or 13 (WLC + APs) ?
Thanks for the help,

Cisco Prime Infrastructure for the first time you may access the lifecycle and assurance features using the built-in evaluation license that is available by default. The default evaluation license is valid for 60 days for 100 devices and 150 interfaces. You will need to purchase the base license and the corresponding feature license before the evaluation license expires. Cisco Prime Infrastructure 1.2 can be ordered using the standard Cisco® ordering tools at http://www.cisco.com/go/ordering. More information about getting the license files can be found in the Cisco Prime Infrastructure 1.2 Ordering and Licensing Guide

Cisco NAM 5.0 API

Hi,
What all API's are exposed by cisco NAM 5.0 for data extractiom from it's embedded database.

Most if not all NDE collectors do include their own database. So, yes, that would be another database. The NAM CSV export feature does allow you to specify custom date ranges and get periodic exports in either CSV or HTML format. You can view these reports prior to sending them by first clicking the Export button, then click the Preview button. For example, here is a preview of the Application traffic report for SNMP for a day's worth of traffic:
Application,snmp
Time From,Sat, 18 Jun 2011 15:54
Time To,Sun, 19 Jun 2011 16:09
Application Traffic
Time,Bytes/sec,Packets/sec
Sat, 18 Jun 2011 16:00,1,769,9
Sat, 18 Jun 2011 17:00,1,893,10
Sat, 18 Jun 2011 18:00,1,683,9
Sat, 18 Jun 2011 19:00,1,690,9
Sat, 18 Jun 2011 20:00,1,702,9
Sat, 18 Jun 2011 21:00,1,726,9
Sat, 18 Jun 2011 22:00,1,669,9
Sat, 18 Jun 2011 23:00,1,684,9
Sun, 19 Jun 2011 00:00,1,695,9
Sun, 19 Jun 2011 01:00,1,734,9
Sun, 19 Jun 2011 02:00,1,682,9
Sun, 19 Jun 2011 03:00,1,686,9
Sun, 19 Jun 2011 04:00,1,706,9
Sun, 19 Jun 2011 05:00,1,734,9
Sun, 19 Jun 2011 06:00,1,672,9
Sun, 19 Jun 2011 07:00,1,681,9
Sun, 19 Jun 2011 08:00,1,683,9
Sun, 19 Jun 2011 09:00,1,735,9
Sun, 19 Jun 2011 10:00,1,670,9
Sun, 19 Jun 2011 11:00,1,690,9
Sun, 19 Jun 2011 12:00,1,692,9
Sun, 19 Jun 2011 13:00,1,738,9
Sun, 19 Jun 2011 14:00,1,669,9
Sun, 19 Jun 2011 15:00,1,706,9
Sun, 19 Jun 2011 16:00,1,730,9
Thu, 01 Jan 1970 00:00,,
Top N Hosts - Traffic In
Host,Bytes/sec
14.32.100.30,92
172.18.123.238,163
14.32.15.2,244
14.32.12.17,285
14.32.15.1,332
Top N Hosts - Traffic Out
Host,Bytes/sec
14.32.15.1,163
172.18.123.238,173
14.32.15.101,198
172.18.123.174,224
14.32.12.17,310
Application Configuration
Protocol,Port,Bytes/sec
UDP,161,1,643

Cisco Wireless NAC Appliance - Design Practices ??

Hi,
I have a new Cisco WIreless NAC appliance, the purpose of which is to manage the Guest users access to network. I have been searching for some best practices related to the design of this appliance but havent found one.
Can anybody help me in sharing his design experience or any docuement which would be guiding in deciding over the design / placement of this NAC device in network.
Thank You.

Hi,
there is nothing such as "Wireless Nac appliance".
The question is "do you have the NAC Guest Server" or the "Nac appliance Server and Nac appliance Manager (CAS/CAM)" ?
Because those are just not the same at all.
Then on the wireless side, do you have autonomous APs or a WLC ?
Sorry to ask, but there's just so many possibilities you could be asking that we need to clarify.
My bet is that you are either looking for this :
http://www.cisco.com/en/US/partner/products/ps6128/products_configuration_example09186a0080a138cc.shtml
or for this :
http://www.cisco.com/en/US/partner/docs/security/nac/guestserver/configuration_guide/20/g_hotspots.html#wp1092277
Nicolas
===
Don't forget to rate answers that you find useful

Migrating from Linux based Tacacs+ server to Cisco ACS 1113 appliance

I'm trying to migrate my configuration from a Linux based Tacacs+ server to the Cisco ACS 1113 appliance. Does anyone have any recommendations.
Thanks.

Hi
We (extraxi) offer migration and general consultancy for ACS if you need professional help.
www.extraxi.com/contact.htm

Linksys Cisco WVC210 Network Camera - Problem

Hello Cisco Members,
I have problem with one Linksys Cisco WVC210 Network Camera.
When I Power ON, the PowerLED blinking, other 3 GreenLED light and on LCD Display have nothing.
I make 30 seconds push resset button, 30 seconds power OFF and havent result. When I connect it to
Router with DHCP, this camera can not take IP Address... I do not understand where is a problem with
this camera.
I write here to get a fix of this problem.
Regards,
Vivendi

Try power on and after 90 seconds go to the Browser and type in 192.168.1.99 (assuming you are on the 192.168.1.xx LAN network) and see if you are able to get to the firmware page, if yes try reload the firmware, if you are not then I would recommend returning the product by getting in touch with Cisco's Tech Support and get an RMA number and instructions on returning the product and get a replacement.
Alan.

Cisco NAM 2204 Appliance Problem

Similar Messages

Maybe you are looking for