Cisco Prime Infrastructure 2.1: SNMP Connectivity Failed

Hi,
I have discharged all my Cisco devices within Cisco Prime and after a few days and when everything worked correctly one of the switches is displayed with the SNMP error Connectivity Failed, nothing has been changed.
I deleted and i have returned to create the object but it continues to be the same, I've also tried to create another SNMP community still receiving the same error.
This is the configuration of snmp in the switch WS-C3850-48P with version 03.02.02.SE
snmp-server community "community" RW
snmp-server location "location"
snmp-server contact "contact"
snmp-server host 10.180.5.22 version 2c "community"
Best regards.

Hi ,
check if you are getting these errors in "show log" again:
%SNMP-3-INPUT_QFULL_ERR: Packet dropped due to input queue full
If yes , then either a lot of SNMP polling happening on the device
or
CPU utilization is going high sometime , being SNMP as a least priority process , you will see this issue. check for "show proc cpu history"
It is a device side issue definitely.
I would suggest to apply a Access-list on the SNMP community string allowing only the
valid NMS to poll the device
Thanks-
Afroz
***Ratings Encourages Contributors ***

Similar Messages

Cisco Prime Infrastructure 1.4 SNMP Traps are not converted into Alarms

Hi everybody,
I just configured SNMP Traps on a Cisco Catalyst 3750-x to send to our Cisco Prime Infrastructure 1.4 Appliance.
Now I forced the Switch to send some traps (Power off a Power Supply, Interface errdisable). The only events I see in Alarms & Events on PI is the same information message everytime:
Configuration management event has been recorded in ccmHistoryEventTable.
I think the forced traps should be converted into alarms? Why can't I see them?
Thanks,
Marc

Ok, I started debugging as you said. I get the following output:
Mar 13 09:28:13.711: SNMP: V2 Trap, reqid 11689, errstat 0, erridx 0
sysUpTime.0 = 198609846
snmpTrapOID.0 = ciscoSyslogMIB.2.0.1
clogHistoryEntry.2.1688 = PM
clogHistoryEntry.3.1688 = 5
clogHistoryEntry.4.1688 = ERR_RECOVER
clogHistoryEntry.5.1688 = Attempting to recover from bpduguard err-disable state on Gi1/0/13
clogHistoryEntry.6.1688 = 198609844
Mar 13 09:28:13.737: SNMP: Queuing packet to xx.xx.xx.xx
Looks like the Switch is sending SNMP Traps from the ciscoSyslogMIB. Is this why PI can't show the Traps and convert it into a alarm?
After this test I configured logging (syslog) to the PI. Now the errors are showed but still not converted into alarms. I just want to be notified by email when such errors occurs.
Thanks,
Marc

Cisco Prime Infrastructure 2.1 Express OVA failing to boot up

Hi all, i'm wondering if you can help me, i'm trying to deploy Cisco Prime Infrastructure in a lab envrionment but it's not working correctly.
I've deployed "PI-VA-2.1.0.0.87-Express.ova" to a VMware ESXI 5.1U2 hypervisor with 2x AMD 8128HE CPUs, 96GB RAM, ASUS KGPE-D16 motherboard. The installation works fine, I can answer all the questions and enter the IP address. Once the system reboots, it hangs at the following screen:
"Kernel direct mapping tables up to 340000000 @ 10000-1c000" is the last thing I see
Interestingly at this point I can actually ping the VM... I cant connect to the managemnet console on HTTPS though :(
I did find some related info on a blog https://deekayen.net/kernel-alive-lock which mentions booting with "noapic", however when I try to press "P" on the grub boot loader it prompts me to enter a password which I dont know! My normal admin passwords arent working.
Any help to ge tthis running would be greatly appreciated
Thanks in advance
Ben

The server takes about 30 mins to boot up, it's not actually broken it's just extremely slow .. I have found numerous people reporting this issue online, and our production system also does this! I guess my original problem is solved, although I would prefer this issue not to exist!

Cisco Prime Infrastructure 2.2 DVD install fails

We want to migrate to Prime 2.2, but management doesn't want the downtime of the appliance. Trying to install Prime 2.2 via DVD onto a Dell R300 server, and then import config from our appliance to test for issues. However, the NCS install fails due to a file issue. Second burned DVD fails as well. Has anyone tried this? Using a VM (at this point) is not an option.

I've not tried it but would not expect that to work.
The .iso image (DVD) is custom-built for installation onto the Cisco NCS hardware appliance. To install onto any other hardware, you would have to first have VMware ESXi hypervisor and install using the .ova image.

Cisco Prime Infrastructure v2.1 - Delete device fails

Hi.
I'm trying out PI, but I have come across an error.
I'm trying to delete a device (a WLC 5508), but I keep getting this error every time I try:
Delete Device(s) Failed: 172.29.254.6. Please see log for more information.
But there are about 200 log files in Prime, so does anyone know where I should be looking?
I had 2 similar controllers in Prime, the first one got deleted without problems. Strange.
Thanks.

Thank you, that helped.
I found what I needed in ifm_intentory.log
It seems there was a problem deleting the AP's associated with the WLC.
So I deleted the WLC only first, and the AP's next, and now it's gone.
One strange thing though: The WLC could be seen correctly under the Virtual Domain I added it in, but the AP's could only be see in the root Virtual Domain.
I will try to re-add it now, to see if they all end up in the right place this time.
Thank you for your help.

Getting past "Fetch VLAN configuration - Command failed" errors in Cisco Prime Infrastructure 2.0 - How?

I've got a handful of devices in Cisco Prime Infrastructure 2.0 which show up in the "Archive Failed Devices" view. The "Failure Reason" is some variation of "Fetch VLAN configuration - Command failed" sometimes including "TELNET: Failed to establish TELNET connection to x.x.x.x". What does this mean? How do I overcome this? In all cases, the device is configured to use SSH and has valid SSH credentials. In all cases, I can SSH from the command line of the NCS appliance to the devices listed in the "Archive Failed Devices" view.

Hi
I was able to fix the "Fetch VLAN configuration - Command failed" by allowing tftp from the device to PI server in firewall. See if this can help.

Cisco Prime Infrastructure 2.0 import image via WAN link failed.

Cisco Prime Infrastructure 2.0 behind NAT that can copy image on device to Cisco Prime infra but can not deploy from Cisco Prime Infra import image from device. How to solve problem,please ?

Have you downloaded and applied the latest Device Pack updates?
PI enhanced ASA support after the initial 2.0 release and the Device Packs incorporate that change.
The README file for Device Packs explains how to install them. (A bug currently does not allow the direct download in PI so you need to follow the method for installation from local storage after you manually download. Here is a link to the download location.

Cisco Prime Infrastructure 2.0 - no traps/info are pushed from devices

Good evening,
I have setup Cisco Prime Infrastructure 2.0 and, though I have added manually my 4 network cores as devices without any problem, I can't get a single trap or a single SNMP information to be pushed into my Cisco Prime Infra.
Here is my SNMP config on my core :
snmp-server user *edited* *edited* v3
snmp-server group *edited* v3 noauth notify *tv.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF0F
snmp-server community *edited* RO
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps flowmon
snmp-server enable traps transceiver all
snmp-server enable traps call-home message-send-fail server-fail
snmp-server enable traps tty
snmp-server enable traps rf
snmp-server enable traps memory
snmp-server enable traps cpu_threshold
snmp-server enable traps eigrp
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps ospf retransmit
snmp-server enable traps ospf lsa
snmp-server enable traps ospf cisco-specific state-change nssa-trans-change
snmp-server enable traps ospf cisco-specific state-change shamlink interface
snmp-server enable traps ospf cisco-specific state-change shamlink neighbor
snmp-server enable traps ospf cisco-specific errors
snmp-server enable traps ospf cisco-specific retransmit
snmp-server enable traps ospf cisco-specific lsa
snmp-server enable traps flex-links status
snmp-server enable traps fru-ctrl
snmp-server enable traps entity
snmp-server enable traps ethernet cfm cc mep-up mep-down cross-connect loop config
snmp-server enable traps ethernet cfm crosscheck mep-missing mep-unknown service-up
snmp-server enable traps ether-oam
snmp-server enable traps aaa_server
snmp-server enable traps flash insertion removal
snmp-server enable traps l2tc threshold sys-threshold
snmp-server enable traps power-ethernet police
snmp-server enable traps rep
snmp-server enable traps vswitch dual-active vsl
snmp-server enable traps udld link-fail-rpt status-change
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps auth-framework sec-violation
snmp-server enable traps dot1x auth-fail-vlan guest-vlan no-auth-fail-vlan no-guest-vlan
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps entity-diag boot-up-fail hm-test-recover hm-thresh-reached scheduled-test-fail
snmp-server enable traps port-security
snmp-server enable traps ethernet evc status create delete
snmp-server enable traps energywise
snmp-server enable traps ipsla
snmp-server enable traps vstack
snmp-server enable traps bfd
snmp-server enable traps bgp
snmp-server enable traps bulkstat collection transfer
snmp-server enable traps cef resource-failure peer-state-change peer-fib-state-change inconsistency
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps config-ctid
snmp-server enable traps event-manager
snmp-server enable traps hsrp
snmp-server enable traps ipmulticast
snmp-server enable traps isis
snmp-server enable traps msdp
snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-message
snmp-server enable traps bridge newroot topologychange
snmp-server enable traps stpx inconsistency root-inconsistency loop-inconsistency
snmp-server enable traps syslog
snmp-server enable traps isakmp policy add
snmp-server enable traps isakmp policy delete
snmp-server enable traps isakmp tunnel start
snmp-server enable traps isakmp tunnel stop
snmp-server enable traps ipsec cryptomap add
snmp-server enable traps ipsec cryptomap delete
snmp-server enable traps ipsec cryptomap attach
snmp-server enable traps ipsec cryptomap detach
snmp-server enable traps ipsec tunnel start
snmp-server enable traps ipsec tunnel stop
snmp-server enable traps ipsec too-many-sas
snmp-server enable traps errdisable
snmp-server enable traps ethernet cfm alarm
snmp-server enable traps vlan-membership
snmp-server enable traps mac-notification change move threshold
snmp-server enable traps vrfmib vrf-up vrf-down vnet-trunk-up vnet-trunk-down
snmp-server host *ip-address-edited* version 3 noauth *edited*
Basically all traps are enabled but absolutely nothing is showing up in my Prime Infra except that my 4 devices are "Reachable".
Here is a show snmp on the same device :
sh snmp
Chassis: *S/N Edited*
38554534 SNMP packets input
    0 Bad SNMP version errors
    14 Unknown community name
    0 Illegal operation for community name supplied
    0 Encoding errors
    38453185 Number of requested variables
    0 Number of altered variables
    17790703 Get-request PDUs
    20583581 Get-next PDUs
    0 Set-request PDUs
    0 Input queue packet drops (Maximum queue size 1000)
38490708 SNMP packets output
    0 Too big errors (Maximum packet size 1500)
    0 No such name errors
    0 Bad values errors
    0 General errors
    38371069 Response PDUs
    13 Trap PDUs
SNMP global trap: enabled
SNMP agent enabled
SNMP logging: enabled
    Logging to *edited*, 0/10, 13 sent, 0 dropped.
Can anyone point out what is wrong or missing in my configuration? I can't seem to single it out myself.
Thanks
Jeremy

Hi Jeremy,
SNMP traps are shown in the events and alerts section of PI.
SNMP config looks fine. Can you run the SNMP debug (debug snmp packets ) .check the logs and see if the device is actually sending the TRAPS to the PI server.
Thanks-
Afroz
[Do rate the useful post]
****Ratings Encourages Contributors ****

Monitoring ASA in Cisco Prime infrastructure 2.2

Hi everybody. I have some issue with cisco Prime Infrastructure 2.2. We use this product in our network for monitoring network devices and I need to monitor also our ASA 5550 device with soft 8.4. I added ASA to Cisco PI but see only basic component like my device can reachable via and read via snmp. But cannot see CPU, RAM, Device ENV like Temperature, l2l vpn connection, Interfaces status and Utilization that interfaces, cannot see sub interface that placed on ASA like that g0/0.20. I need fully monitor ASA and See logs and trap for my device:
CPU RAM ENV (Temperature), Interface and sub interface status, L2L VPN Status.
1 Cisco Prime infrastructure can full support ASA for monitoring and logging.. IF YES how can i configure that features in Cisco PI 2.2 for ASA
2 IF not which product Can full support that features for full monitoring and logging ASA devices
I have a little deadline for finishing
thanks everybody before

I've not success monitoring ASA interface utilization either. I'm using PI 2.2 with device update #1. The ASA is a 5585-X with 9.2(3) software.
I have deployed the PI monitoring template to the ASA and do see its overall status and PI has enumerated the interfaces in the device page.
I even looked at a packet capture and see PI querying the values of the interface counters and those values being sent back to PI - yet I cannot select any ASA interface when drilling down under Performance Detail monitoring.
When I get some free time I will open a TAC case on it, meanwhile I am getting all the info I need from the upstream and downstream switches.

Cannot add WLC 5508 7.2.111.3 to Cisco Prime Infrastructure 2.0

Though the Cisco Prime Infrastructure Compatibility Matrix list out that 7.2.111.3 is supported for PI 2.0
I am not able to add the controller to the PI 2.0.
The Reachability Status always shown "Unknow" and SNMP Status always shown "No response for SNMP Get".
There is no firewall between the WLC and PI.
And ping test shows it is reachable.
If I try to add controller by non-management port (I know it is not work but I want to try the reachability), the Reachability Status shown "Reachable" but the SNMP Status always shown error.
And if I use some SNMP testing software to test the SNMP port. SNMP can be quoted.
I have try to lower down the "Maximum VarBinds per Get PDU" but no luck.
Any thing I can do to troubleshoot the problem?

Yes, I follow the procedure but it does not work.
Another update:
I add another WLC with version 7.0.98.0. It is fine.
And I setup another new PI 2.0 and new temporary WLC5508 with 7.2.111.3 to test. It work fine also......
So, I am wondering the existing 7.2 WLC have problem in responsing the SNMP Get. But I dont have any idea to test....
Do anyone have idea to test the snmp connection between PI and WLC?

Cisco Prime Infrastructure 1.2 Error

Hi,
I don't have any experience with Cisco Prime infrastructure. I am getting the below error
Unable to start secondary NCS server PRLPrimeNCS02 [10.140.xx.xx]
Reason: IO Error: could not resolve the connect identifier "wcss1"
Not sure exactly what the error means. Any help much appreciated.
Thanks
Nachi

Hi Scott,
Thank you for your email.
The HA is runing on the Cisco Prime. Runing Cisco Prime on a Virtual machine in VM.
The issue we are experiencing is that the system failed over to the secondary (HA) for unknown reasons. When we failed it back it didn’t fail back properly. Configured Manual failover. Managed to failback to primary but it complained HA was no longer configured.
Tried to remove HA and reconfigure it. The primary removed the HA configuration, but the secondary kept it. Here is some info on the secondary
PRLPrimeNCS02/admin# ncs ha status
[Server] prlprimencs01(10.xx.xx.xxx) [State] Secondary Lost Primary [Failover Type] manual
PRLPrimeNCS02/admin# ncs ha remove
High availability configuration will be removed
Do you wish to continue? (y/N) y
Removing secondary configuration will remove all database information
Do you wish to remove high availability configuration from primary? (y/N) y
Secondary is attempting to remove high availability configuration from both primary and secondary
Requesting primary to remove high availability configuration from both primary and secondary
Successfully removed high availability configuration
PRLPrimeNCS02/admin#
PRLPrimeNCS02/admin#
PRLPrimeNCS02/admin# ncs ha status
[Server] prlprimencs01(10.xx.xx.xxx) [State] Secondary Lost Primary [Failover Type] manual
PRLPrimeNCS02/admin#
And the primary
prlprimencs01/admin# ncs ha status
[State] Stand Alone
prlprimencs01/admin#
Below is the log
Starting Health Monitor as a secondary
Checking for Port 8082 availability... OK
truststore used is /opt/CSCOlumos/conf/truststore
truststore used is /opt/CSCOlumos/conf/truststore
Starting Health Montior Web Server...
Health Monitor Web Server Started.
Starting Health Monitor Server...
Health Monitor Server Started.
java.lang.OutOfMemoryError: Java heap space
Dumping heap to logs/java_pid6044.hprof ...
Heap dump file created [249907589 bytes in 6.857 secs]
Thanks
Nachi

Cisco Prime Infrastructure 2.2 - Network Topology error

He dears,
My Customer has installed over UCS Cisco Prime Infrastructure 2.2.
The network is composed with Switches nexus 93962-px and 2960x. All devices were discovered and inventoried successfully.
The problems is that Network Topology is not showing the connections between devices. Some devices connections are showed (partially) and another not.
We've already checked that CDP is run and working fine on all of switches.
I appreciate your help!
Tks,
Regis

I'm sorry to say that but Prime Infrastructure does not support IP SLA functionality similar to Cisco Prime LMS:
http://www.cisco.com/en/US/prod/collateral/netmgtsw/ps6504/ps6528/ps12239/guide_c07-729089.html
It's in the developer's plans but there's no schedule yet for this feature.
It's possible to manually configure IP SLA on the device and then define Custom SNMP templates in Prime Infrastructure and poll whatever information you might consider relevant.
This isn't user friendly (exact OID needs to be typed manually) and is a bit quite complicated, though.
-Thanks
Vinod
**Rating Encourages contributors, and its really free. **

Cisco Prime Infrastructure, trial version

I am trying the Cisco Prime Infrastructure, trial version.
In client management I can see only 802.3 clients, but not clients directly attached to the switch ports.
Finding where a client, searched by IP or MAC address, is connected, is a mandatory need for us.
I have enabled trap sending from the switches.
Regards
Donato Colombo

- Please make sure that your switches are defined (added) in Prime, especially matching the
correct SNMP READ community (as it was defined on the switch).
M.

Cisco Prime infrastructure template undeploy

Hi,
I am new to cisco prime, I have create the new Trap receiver template and deployed to one of the wireless controller and saved the deployment
Now I want to undeploy the templates, When I tried undeploying the templates for same wireless controller, I got the warning message stating "Failed to undeploy the template"
Please advice on below points
1. How to undeploy the templates in cisco prime infrastructure
2. Where to find the snmp traps ( steps to check the snmp traps) in cisco prime.
Please Help!!!!!

Using System Logs
Prime Infrastructure logs all error, informational, and trace messages generated by all devices that are managed by Prime Infrastructure.
Prime Infrastructure also logs all SNMP messages and Syslogs it receives.
You can download and email the logs to use for troubleshooting Prime Infrastructure.
Step 1 Choose Administration > Logging. The General Logging Options Screen appears.
Step 2 Choose a Message Level.
Step 3 Check the check boxes within the Enable Log Module option to enable various administration modules. Check the Log Modules option to select all modules.
Step 4 In the Log File Settings portion, enter the following settings. These settings will be effective after restarting Prime Infrastructure.
Note The log file prefix can include the characters "%g" to sequentially number of files.
Step 5 Click the Download button to download the log file to your local machine.
Note The logs.zip filename includes a prefix with the host name, date, and time so that you can easily identify the stored log file. Included in the zip file is an html file that documents the log files.
Step 6 Enter the Email ID or Email IDs separated by commas to send the log file.
Note To send the log file in a mail you must have Email Server Configured.
Step 7 Click Submit.

Pushing Configs to devices using Cisco Prime Infrastructure

Hi All,
I am trying to push a simple configuration to WLC using Prime Infrastructure. But it is failing as PI doesnot have RW SNMP access.
My question is that can I use PI to push configs without using SNMP. Like do it using ftp or something.
Also do the Wired Devices also need SNMP RW access on PI's part.
All your help is appreciated.
Mukul

You need SNMP RW.
If you use CLI template you need ssh/telnet credentials though.
Sent from Cisco Technical Support iPad App

Cisco Prime Infrastructure 2.1: SNMP Connectivity Failed

Similar Messages

Maybe you are looking for