Cisco Works SNMP write community string Incorrect

Hi,
I have installed Cisco Works at my organisation. Under RME -> Inventory -> Import status -> Device Attribute Error: I am getting: Incorrect SNMP write community strings. Even though i know perfectly well the SNMP write community string is correct. To prove that, if I delete the device and then add the same device using the same SNMP write community string it works fine. then a couple of days later, it comes up with the same message "SNMP write community string is incorrect". I have increased the time and retries for the SNMP settings at the ANI server, still it has not resolved the issue.
Please help

I have sharched the CCO bug toolkit and according them, it was a know issue for verion 3.4 but it has been fixed for Ver RME 3.5. But we are currently running RME 3.5, therefore it does not make any sense.

Similar Messages

  • Cisco Works - SNMP for Pushing instead of TFTP

    Is there a setting in Cisco Works I can change for getting SNMP used instead of TFTP for pushing configuration changes?  I recently did a push to over
    4500 network devices (routers & switches) in my network and found that Cisco Works was using TFTP instead of SNMP.  Is there a setting I can change
    for getting SNMP used instead of TFTP?
    Also when I look at running config on the devices, they do NOT show the name of the "profile (TACACS Account)" used to log into the device by Cisco Works.  Thus the Audit function could not pickup the profile that made the changes.
    Currenting using LMS 3.2.
    Thanks

    LMS uses TFTP triggered by SNMP.  There is no way to use SNMP exclusively to push config changes.  LMS will use one of either SNMP/TFTP, SSH, telnet, or RCP.  This is set under RME > Admin > Config Mgmt > Transport Settings.
    If you are not using telnet or SSH to do config management (i.e. archive, Netconfig, etc.), then the running config will not relfect a username logging into LMS to make config changes.

  • Cisco works 3 vtp servers

    Hello
    We having single network total 3 L3 switches in server mode and 80 L2 transperent and claint modes  switches, Total switches are same vtp ,L3 ip address 10.66.1.1,1.60 and 1.120,on cisco works topology services showing only 10.66.1.60 switch details and some other switches showing but it s not showing total network,I configured on cisco works snmp settings . any other configuration required.all switches are enabled cdp .Total Network 10.66.1.0 series.

    Hi,
    To restore the backup we need to follow this link commands:
    http://cisco.biz/en/US/docs/net_mgmt/ciscoworks_resource_manager_essentials/4.3/user/guide/appc.html
    restorebackup.pl
    NMSROOT/bin/perl NMSROOT/bin/restorebackup.pl
    [-d BackupDirectory] [-gen GenerationNumber] [-t TempDirectory] [-help]
    Regards,
    podhillo

  • Cs-mars changing the community string on multiple devices

    Hello,
    We've changed the snmp v2 community strings on all the network devices.
    Is it possible in cs-mars to change the community string on multiple devices?
    When I select edit in admin>security and monitor devices> and select several devices and click edit the message "please select only one device to edit"
    What's the best way to do this, and is this absoluteley nessecary?
    Many thanks for all the help......

    > Is it possible in cs-mars to change the community string on multiple devices?
    Yes, it's possible for some device types.  The SNMP community string(s) can be bulk updated using a seed file, but only for the following device types: PIX, PIX 7.x, ASA, IOS, and SWITCH-IOS.  Any other device types have to be updated manually.  The details are on page 1-46 of the Device Configuration Guide.  You will also need the details for using a seed file, from the same document.
    > is this absoluteley necessary?
    If you want to communicate with the devices via SNMP, then yes, you need to update the strings.  This is especially the case if you don't use any other communications protocols such as SSH, Telnet, or FTP.  Also, without the updated SNMP strings, MARS can't fully discover the Layer 2 topology from the device.
    Unfortunately, the SNMP string bulk update is only available for SNMPv1 (or v2 with no encryption) credentials.  If you're using SNMPv3, each device has to be edited manually.

  • StorCenter px6-300d SNMP Community String

    Dear Reader,
    We have a NAS (StorCenter px6-300d) and we want to monitor it with our monitoring system.
    On the Iomega website (http://iomega.com/resources/ui/px6-300d-313/help/help.html) i've found the configuration steps (see below) and configured our NAS.
    Configuring SNMP settings
    To enable SNMP, click the switch on.
    Enter a unique username and password to define the community.
    Confirm your password.
    Enter the IP address of the host in the Trap Receivers text box. To grant access to multiple receivers, list all of them in the text box, separating each entry with a space.
    Click Apply to save your settings
    In our monitoring system we get the following msg: SNMP agent down - no response received. I think this is because of the (wrong) community string. In our monitoring system, under configuration tab, I tried 'public', 'username', 'password' etc in the community string field but it is not working.
    I hope someone can help me with this... what is the community string? If i'm doing something else wrong then...
    Thanks in advance.
    With kind regards,
    From the Netherlands
    Solved!
    Go to Solution.

    Hi yunuz,
    The username and password that you set on the NAS device needs to match on the SNMP server that you are trying to connect to. So use the same username and password for the server. Do you know what SNMP version your client is using?
    What is an “SNMP Community String”?
    The “SNMP Community string” is like a user id or password that allows access to a router's or other device's statistics. PRTG sends the community string along with all SNMP requests. If the community string is correct, the device responds with the requested information. If the community string is incorrect, the device simply discards the request and does not respond.
    Note: SNMP Community strings are used only by devices which support SNMPv1 and SNMPv2c protocol. SNMPv3 uses username/password authentication, along with an encryption key.
    By convention, most SNMPv1-v2c equipment ships from the factory with a read-only community string set to "public". It is standard practice for network managers to change all the community strings to customized  values in the device setup.
    Source: http://www.paessler.com/manuals/prtg_traffic_grapher/whatisansnmpcommunitystring
    Have questions and need answers?
    Search the database for answers to FAQ's, software/driver downloads, tutorials, news, features and more!
    LenovoEMC Support & Downloads
    LenovoEMC North America Support Contact Page

  • CiscoWorks IPM 4.1.0 - SNMP Community String Updates

    Cisco NetPro,
    We're running IPM 4.1.0 on Solaris 10.
    Periodically we change SNMP RO/RW strings on our devices.  I recently changed the strings on our devices and within IPM.
    Now that they're changed, 26 of my collectors are appearing in the Source Not Responding list.  Both my Source and Target devices have the same strings configured.
    I need to verify the strings IPM has stored.  I exported my collectors via the command line utility "ipm" and via the GUI and still no strings in the output.
    How can I see the SNMP strings in IPM?
    Stephanie

    I ran "pdterm IPMProcess" followed by "pdexec IPMProcess"  and now I'm getting this error:
    Error
    Error in communicating with IPMGroupAdministration Server.
    It may be down or not yet up. Please make sure that the IPMGroupAdministration Server is up and running, then refresh the page.
    Stephanie

  • Pass SNMP community string a scripted monitor parameter in SCOM 2012

    Hi,
    Following the advice given here http://social.technet.microsoft.com/Forums/systemcenter/en-US/606d793c-b559-40b5-865a-ae312ee483d7/snmp-monitor-compare-oid-to-current-date
    I created a scripted monitor to poll the value of a SNMP OID and compare it to the current system date.
    It works perfectly fine, but I can't find how to pass the community string to the script in order to avoid having to hardcode it in clear text in the script... It seems this was published as a Target's Property with SCOM 2007 (like described here : http://www.burkard.it/2011/10/create-a-calculated-snmp-monitor/
    ) but that it's not the case anymore with SCOM 2012 (likely because SCOM 2012 now uses RunAs accounts to store community strings, I guess).
    So, what is the correct way to achieve this?
    Thanks!

    Ok, I just found the solution myself, it was quite easy actually (but as often not really documented anywhere) :
    you just have to pass this as a parameter :
    $RunAs[Name="NetworkLibrary!System.NetworkManagement.Snmp.MonitoringAccount"]/CommunityString$
    instead of the scom2007 property which was :
    $Target/Property[Type="NetworkDeviceLibrary!Microsoft.SystemCenter.NetworkDevice"]/CommunityString$
    And that's it, you don't even need to decode the string in your script as it was the case with scom 2007.

  • View snmp community string

    Maybe I am missing something here but it looks like once you set the snmp community name, it is blanked out from display and can't be viewed again. No luck via the CLI also.
    Is this actually true or am I just missing something here?? If the community name is hidden then how does one view the same?
    Thanks,
    GD

    From NXOS, for example. 
    bdsol-6120-05-A# connect nxos
    bdsol-6120-05-A(nxos)# sh run | i community
    snmp-server community CISCO group network-operator

  • Configure vpn 3030 snmp for cisco works 2000

    vpn 3030 snmp error in cisco works 2000
    I want to monitor vpn3030 through vpn monitor,so do some config on vpn3030:
    1)Configuration | System | Management Protocols | SNMP
    enabled port 161
    2)Configuration | System | Management Protocols | SNMP Communities
    public
    3)Administration | Access Rights | Administrators | Modify Properties
    snmp modify config
    I can telent & http vpn3030,but when I run test in in cisco works 2000(server
    configuration|diagnostics|connectivity tools|management station to device)
    it said:
    Interface Status Test Results
    172.16.8.1 DOWN SNMPR failed
    sent: 5 recvd: 0 min: 0 max: 0 avg: 0 timeout: 2 size: 91 protocol: snmp_get port: 161
    SNMPW failed
    sent: 0 recvd: 0 min: 0 max: 0 avg: 0 timeout: 2 size: 0 protocol: snmp_set port: 161
    about my vpn3030
    Monitoring | System Status Thursday, 10 October 2002 16:40:16
    VPN Concentrator Type: 3030
    Bootcode Rev: Cisco Systems, Inc./VPN 3000 Concentrator Series Version 2.5.Rel Jun 21 2000
    18:57:52
    Software Rev: Cisco Systems, Inc./VPN 3000 Concentrator Series Version 3.0.2.Rel Apr 05 2001
    20:50:58
    Up For: 6d 0:04:27
    Up Since: 10/04/2002 16:35:49
    RAM Size: 128 MB
    There is only a 6509 between cisco works 2000 server and vpn3030,and no restrictions on tcp/ip
    flow.
    Please help me .thanks in advance.

    I test it in cw2000 cdone.
    This is really a strange question.
    the cw2000 server ip address is 10.8.1.122
    the vpn3030 's ip address is 172.16.8.1
    between them is a 6509, ip address is 10.8.1.201
    when I test connectivity between cw2000 server and 6509, everything is good,snmp is ok.
    when i test connectivity between cw2000 server and vpn3030, everything is good,except snmp is not response,while use third party snmp program,snmp status is ok!
    when I change the cw2000 server's ip address to 172.16.8.3 and connect it directly to vpn3030,test connectivity between cw2000 server and vpn3030 ,everything is good,snmp is ok.

  • LMS 3.2 - snmp-write needed ?

    Hello,
    we are testing currently LMS 3.2 for a very large installation. In our network snmp-write access to devices is currently forbidden by a special company policy. The devices can only contacted via snmp-read and telnet/ssh.
    So my questions is:
    For which functions does LMS 3.2 realy need snmp-write access to the devices ? Or can I use telnet/ssh intead of snmp-write always ?
    Thx + Best regards
    Hendrik

    CiscoView also requires the SNMP read-write for most its configuration tasks (some can use telnet/SSH).  This is not nearly as show-stopping as IPM, though.  IPM is pretty much useless without SNMP read-write.  But note, that community string-based SNMP is no longer required in LMS.  You can move to SNMPv3, and be able to do SET operations in a more secure manner.

  • Shutdown wireless interface via SNMP Write?

    Hi
    We're working on writing a very simple web app to control a couple of access points via SNMP.  I'm trying to shutdown the Wireless interface via SNMP WRITE with the following oid;
    .1.3.6.1.2.1.2.2.1.7.1
    and
    .1.3.6.1.2.1.2.2.1.7.2
    But its saying the integer of '0' is invalid (badValue, wrong type or length).  I'm able to set other values like hostname, etc, so I know my string is correct...can anyone help?  THanks
    Jason

    Hi
    Just found my own answer...the value to shutdown the interface is not 0, it's 2.  durrr
    Thanks
    J

  • Adapter Module not working in Sender Communication Channel working in recie

    Hi
    I have written one adapter module. IF i give that Adapter Module in Sender Communication channel its not working. If i give that in Reciever Communication Channel its working. If i mention in both the channels then its working in sender communication channel also.But in only sender communication channel its not working in only reciever communication channel its working Can any one tell me why its happening
    Thanks & Regards
    Ravi Shankar B
    Message was edited by:
            RaviShankar B
    Message was edited by:
            RaviShankar B
    Message was edited by:
            RaviShankar B

    hi
    if its problem with my code why its working if i give the adapter module in both the communication channels?If i give in only sender communication channel the module is not invoking. its not showing any auditlogs.Can any one please help me
    OUTBOUND is for sender
    INBOUND is for reciever right.?
    the following code i have written
    public ModuleData process(
              ModuleContext moduleContext,
              ModuleData inputModuleData)
              throws ModuleException {
              String SIGNATURE =
                   "process(ModuleContext moduleContext, ModuleData inputModuleData)";
              Object obj = null;
              Message msg = null;
              String filename = null;
              AuditMessageKey amk = null;
              try {
                   obj = inputModuleData.getPrincipalData();
                   msg = (Message) obj;
                   System.out.println("&&&&&&&&&&&&&&&&&" + msg);
                   if (msg.getMessageDirection().equals(MessageDirection.OUTBOUND)){
                        amk = new AuditMessageKey(msg.getMessageId(),AuditDirection.OUTBOUND);
                        Audit.addAuditLogEntry(amk,AuditLogStatus.SUCCESS,">>>>>>>>>>>>>>> etHostName: Module called"+ i++);
                   }else{
                        File filename1 = new File("
    10.7.1.43
    XI
    source","text.txt");
                        filename1.createNewFile();
                        amk = new AuditMessageKey(msg.getMessageId(),AuditDirection.INBOUND);
                        Audit.addAuditLogEntry(amk,AuditLogStatus.SUCCESS,">>>>>>>>>>>>>>> etHostName: Module called"+ i++);
                   System.out.println("**************" + amk + "***********");
              } catch (Exception e) {
                   Audit.addAuditLogEntry(amk,AuditLogStatus.SUCCESS,">>>>>>>>>>>>>>> GetHostName: Error Module called");
                   e.printStackTrace(System.err);
                   ModuleException me = new ModuleException(e);
                   throw me;
              // Read the channel ID, channel and the module configuration
              try {
                   Hashtable mp = (Hashtable)inputModuleData.getSupplementalData("module.parameters");
                   if(mp != null){
                        filename = (String)mp.get("FileName");
                        Audit.addAuditLogEntry(amk,AuditLogStatus.SUCCESS,"Host >>>  Element Name is set to {0}"+filename );
                   }else{               
                        Audit.addAuditLogEntry(amk,AuditLogStatus.WARNING,"HostElementName parameter is not set. Default used: HostName.");
                        filename = "FileName";
              } catch (Exception e) {
                   e.printStackTrace(System.err);
                   Audit.addAuditLogEntry(amk,AuditLogStatus.ERROR,"Cannot read the module context and configuration data");
                   ModuleException me = new ModuleException(e);
                   throw me;
              try {
                   XMLPayload xmlpayload = msg.getDocument();
                   DocumentBuilderFactory factory;
                   factory = DocumentBuilderFactory.newInstance();
                   DocumentBuilder builder = factory.newDocumentBuilder();
                   Document document =
                        builder.parse((InputStream) xmlpayload.getInputStream());
                   Element rootNode = document.getDocumentElement();
                   if (rootNode != null) {
                        Element childElement = document.createElement("filename");
                        childElement.appendChild(document.createTextNode(filename));
                        rootNode.appendChild(childElement);
                   // Transforming the DOM object to Stream object.
                   TransformerFactory tfactory = TransformerFactory.newInstance();
                   Transformer transformer = tfactory.newTransformer();
                   Source src = new DOMSource(document);
                   ByteArrayOutputStream myBytes = new ByteArrayOutputStream();
                   Result dest = new StreamResult(myBytes);
                   transformer.transform(src, dest);
                   byte[] docContent = myBytes.toByteArray();
                   if (docContent != null) {
                        xmlpayload.setContent(docContent);
                        inputModuleData.setPrincipalData(msg);
              } catch (Exception e) {
                   e.printStackTrace(System.err);
                   Audit.addAuditLogEntry(amk,AuditLogStatus.ERROR,"Cannot read the module context and configuration data");
                   ModuleException me = new ModuleException(e);
                   throw me;
              return inputModuleData;
    Best Regards
    Ravi Shankar B
    Message was edited by:
            RaviShankar B
    Message was edited by:
            RaviShankar B

  • Snmp-server community over VRF

    I'm in the process of rolling out snmp-server community for LMS for all our devices. A few devices is VRF enabled, hence I need to ping the LMS server through a VRF and not the global routing table. To my knowledge the ' snmp-server host 11.22.33.44 vrf VRF XXXX' command only sends traps/notifications to DFM , is there a similar comand for the 'snmp-server community xxxx RO 1' ?
    I can ping the device from the LMS server but the snmp-server community access-list  does not show any hits for the LMS IP and hence the device is not registered in LMS.
    Any ideas?

    So manually-initiated communications appear to be working in both directions. That's good.
    Since you're not seeing hits on your acl at the device, I'd next check to see the traffic leaving your LMS server. You can run a Wireshark capture there (or use the built-in packet tracer), filtering on your device's destination IP. I'd initiate a comms check from Device Center in LMS (or snmpwalk from the cli) to manually trigger an SNMP query.
    If you don't see any SNMP queries leaving, LMS is the culprit (I'd check the DCR entry for the device in question). If you do see the traffic leaving then there is a network / device issue.

  • Cisco Wireless LAN Controller 4402 under Cisco Works RME 4.0?

    I am trying to manage a Cisco 4402 using non-default snmp communities from Cisco Works RME 4.0.  RME Credential Verification fails with “Device Not Supported” recorded against selected option; however, the controller does respond to snmp queries.  The 4402 has snmpv1 through snmpv3 enabled; and the snmp communities are associated with the correct client IP.  Is the WLC only responsive to snmp from the WLS and should the box be manageable via it’s management interface.  ICMP and telnet to the WLC from RME works OK.
    Advice and Guidance would be greatly appreciated.

    What firmware version are on the WLC's..... minimum is 5.0.148 per the RME Table.
    http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_resource_manager_essentials/4.0.5/device_support/table/RME405.html

  • Is the "Community" string hardcoded somewhere in SEA?

    Hi
    I have a machine installed with SEA 1.0.3 and developed a Subagent by myself. I want to change the Community String for security reason but encountered some problem.
    I updated the community string in snmpd.conf and myagent.acl at /etc/snmp/conf. Then I stop snmpdx and start it again with "-d 4". At another terminal, I start my subagent with "-d 4" too, there is some PDU print out on the screen as follows:
    SSASubagent called with mysubagent
    PDU:
    version: 0
    community: public
    type: SET_REQ_MSG (0xa3)
    request id: 0
    error status: noError(0)
    error index: 0
    name: 1.3.6.1.4.1.42.2.15.5.0
    type: OCTET STRING (0x4)
    length: 9
    value: mysubagent ( 73 6f 67 61 6c 61 72 6d 64 )
    MANAGERS:
    * 0
         COMMUNITIES(READ_WRITE): myprivate mypublic
    #EFILTER:
    TRAP RECIPIENTS:
    Waiting for incoming SNMP requests on UDP port 7041
    You can see from the beginning that the community print out is still "public". But at the bottom of the print out, the community has been changed.
    I have 2 questions on this:
    1. Since I have not any SNMP server running and I did not send any GET/SET request to my agent, I think this PDU is the registration PDU my subagent send to the master agent for register. Am I right?
    2.If I update the community string in snmpdx.acl, my subagent can not start up successfully and there is some print out in the master agent site that "community_check() : bad community from myhost ". It seems that it is because the community string in the PDU is still "public" and which is different with what master agent set.
    3.I'm using Solaris 5.9. Do I need some patch for this issue?
    I have read the User Guide and Developer Guide of SEA but still can not resolve it , would you give some information on this?
    thanks a lot
    Wendy

    > Is it possible in cs-mars to change the community string on multiple devices?
    Yes, it's possible for some device types.  The SNMP community string(s) can be bulk updated using a seed file, but only for the following device types: PIX, PIX 7.x, ASA, IOS, and SWITCH-IOS.  Any other device types have to be updated manually.  The details are on page 1-46 of the Device Configuration Guide.  You will also need the details for using a seed file, from the same document.
    > is this absoluteley necessary?
    If you want to communicate with the devices via SNMP, then yes, you need to update the strings.  This is especially the case if you don't use any other communications protocols such as SSH, Telnet, or FTP.  Also, without the updated SNMP strings, MARS can't fully discover the Layer 2 topology from the device.
    Unfortunately, the SNMP string bulk update is only available for SNMPv1 (or v2 with no encryption) credentials.  If you're using SNMPv3, each device has to be edited manually.

Maybe you are looking for