CiscoWorks: Compliance job to find NTP status in switches?

Hi,
We have about 4000 switches in our estate, and we want to find from CiscoWorks that which devices are not configured with correct NTP source. Is it possible to run a compliance job in CiscoWorks to findout that which switches "clock is unsynchronized". e.g. if we do "show ntp status" on switch, we get output as "clock is unsynchronized". How we can run this job in compliance jobs.
Or please advise a better way to find this issue.
We are using LMS 3.2 SP1
Thanks and Kind Regards,

I would run a job that puts the username password on all of them. And runs a no username johndoe for all username you know of, that you want to remove
So it may overwrite the same username password..... I don't mind, it will be done when I get back in the morning.
Cheers,
Michel

Similar Messages

CiscoWorks: Compliance job to change usernames/password in devices.

Hi,
We have configured devices with TACACS and in case TACACS don’t work then fall back to local credentials..We have different passwords on different devices. Is it possible in compliance job that if particular username/password match, then change it to different username/password.
e.g. if username=abc and password=123 then change it to username=def and password=456
or if
if username=abc and password=cisco then change it to username=ciscoworks and password=ciscoworks123
We want to run this job on 3500 devices via CiscoWorks. Please advise.
Thanks. We are using LMS 3.2.1.

I would run a job that puts the username password on all of them. And runs a no username johndoe for all username you know of, that you want to remove
So it may overwrite the same username password..... I don't mind, it will be done when I get back in the morning.
Cheers,
Michel

Why is apple - the most innovative company that pioneered customer experience- not making it easier to find out if Iphone is locked or unlocked? it should be simple to find this status on the phone.

Why is apple - the most innovative company that pioneered customer experience- not making it easier to find out if IPhone is locked or unlocked? it should be simple to find this status on the phone. I have to go thru so much trouble to find out if the phone is unlocked or not. There should be a much simpler solution to this.

call them, tell them you NEED a new battery installed, and they need to tell you when they can do it. That is their job to help you! Give pushback if necessary.

Cisco IOS NTP: "show ntp associations" versus "show ntp status"

what is the difference of the commands "show ntp ass det" and "show ntp status" ?
these commands differs on the referenced time source.
switch#sh ntp ass detail
Load for five secs: 17%/4%; one minute: 20%; five minutes: 20%
Time source is NTP, 10:45:15.469 MET Tue Feb 4 2014
10.1.5.4 configured, ipv4, sane, valid, stratum 2
ref ID 154.71.99.39   , time D69B3383.9D414772 (10:38:11.614 MET Tue Feb 4 2014)
our mode client, peer mode server, our poll intvl 1024, peer poll intvl 1024
root delay 0.38 msec, root disp 5.93, reach 377, sync dist 11.77
delay 0.84 msec, offset 0.3778 msec, dispersion 1.06, jitter 0.97 msec
precision 2**21, version 4
assoc id 26601, assoc name 10.1.5.4
assoc in packets 12339, assoc out packets 12361, assoc error packets 28
org time 00000000.00000000 (01:00:00.000 MET Mon Jan 1 1900)
rec time D69B347C.4ACDE42A (10:42:20.292 MET Tue Feb 4 2014)
xmt time D69B347C.4ACDE42A (10:42:20.292 MET Tue Feb 4 2014)
filtdelay =     0.88    0.87    0.85    0.90    0.84    0.90    0.89    0.87
filtoffset =    0.31    0.31    0.32    0.28    0.37    0.32    0.25    0.31
filterror =     0.97    1.00    1.03    1.06    1.09    1.12    1.15    1.18
minpoll = 6, maxpoll = 10
FD8C:2208:32F7:8EA::5 configured, ipv6, our_master, sane, valid, stratum 1
ref ID .PPS., time D69B318B.92FDD88A (10:29:47.574 MET Tue Feb 4 2014)
our mode client, peer mode server, our poll intvl 1024, peer poll intvl 1024
root delay 0.00 msec, root disp 0.42, reach 377, sync dist 17.18
c4507r01#show ntp status
Load for five secs: 19%/4%; one minute: 20%; five minutes: 20%
Time source is NTP, 10:42:03.441 MET Tue Feb 4 2014
Clock is synchronized, stratum 2, reference is 81.201.114.7
nominal freq is 250.0000 Hz, actual freq is 249.9987 Hz, precision is 2**10
ntp uptime is 752342800 (1/100 of seconds), resolution is 4016
reference time is D69B2950.47571873 (09:54:40.278 MET Tue Feb 4 2014)
clock offset is 0.9771 msec, root delay is 0.94 msec
root dispersion is 47.43 msec, peer dispersion is 1.03 msec
loopfilter state is 'CTRL' (Normal Controlled Loop), drift is 0.000005068 s/s
system poll interval is 1024, last update was 2881 sec ago.
switch#sh ntp associations
Load for five secs: 18%/4%; one minute: 20%; five minutes: 20%
Time source is NTP, 10:53:12.750 MET Tue Feb 4 2014
address         ref clock       st   when   poll reach delay offset   disp
+~10.1.5.4      154.71.99.39     2    690   1024   377 0.848   0.377 1.069
*~FD8C:2208:32F7:8EA::5
                  .PPS.            1    400   1024   377 0.931   0.892 1.007
* sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured

Its hard to find expert on switches/IOS on the Network Management Forum, which is for NMS applications.
You should post this thread on Switching community of CSC forum.
Though, what i can suggest is to use SNTP. Certain low-end Cisco devices only support SNTP. SNTP is a simplified, client-only version of NTP. SNTP can only receive the time from NTP servers and cannot be used to provide time services to other systems. SNTP typically provides time within 100 milliseconds of the accurate time. In addition, SNTP does not authenticate traffic, although you can configure extended access lists to provide some protection. An SNTP client is more vulnerable to misbehaving servers than an NTP client and should only be used in situations where strong authentication is not required.
SNTP may not be much of an alternative because it is not widely supported in software.
You can use command # sntp server. SNTP generally is supported on those platforms that do not provide support for NTP.
Device (config)# sntp server {address | hostname} [version number]
For more clarification post this to Lan Switching and Routing section.
-Thanks
Vinod
**Rating Encourages contributors, and its really free. **

Timezone in ntp status

Hi
Please find below the output of "show ntp status" command on a NTP Server & client Routers.
NTP Server
Clock is synchronized, stratum 2, reference is 208.184.49.9
nominal freq is 250.0000 Hz, actual freq is 250.0001 Hz, precision is 2**18
reference time is C6D04612.22EA36B7 (21:23:14.136 kuwait Mon Sep 12 2005)
clock offset is 0.4224 msec, root delay is 217.96 msec
root dispersion is 1.24 msec, peer dispersion is 0.82 msec
NTP Client
Clock is synchronized, stratum 3, reference is xxx.xxx.xxx.xxx (IP address of the NTP Server)
nominal freq is 250.0000 Hz, actual freq is 250.0055 Hz, precision is 2**24
reference time is C6D04AF3.9FC434D0 (18:44:03.624 UTC Mon Sep 12 2005)
clock offset is 0.1061 msec, root delay is 220.26 msec
root dispersion is 1.07 msec, peer dispersion is 0.03 msec
The NTP Server's clock timezone (Kuwait) is configured properly. Why the NTP Client router (Shows UTC timezone) doesn't have the same timezone as of the NTP Server?
Also the following messages keep appearing on the console of the NTP Server Router. Is it related to NTP?
Sep 12 10:28:43.768: %DSX1-6-CLOCK_CHANGE: Freerun clock is now selected as clock source
Sep 12 10:29:15.379: %DSX1-6-CLOCK_CHANGE: Controller 1 clock is now selected as clock source
Sep 12 10:29:25.483: %DSX1-6-CLOCK_CHANGE: Freerun clock is now selected as clock source
Sep 12 10:29:31.023: %DSX1-6-CLOCK_CHANGE: Controller 0 clock is now selected as clock source
Sep 12 10:29:32.159: %DSX1-6-CLOCK_CHANGE: Freerun clock is now selected as clock source
Sep 12 10:29:55.471: %DSX1-6-CLOCK_CHANGE: Controller 1 clock is now selected as clock source
Sep 12 10:30:56.686: %DSX1-6-CLOCK_CHANGE: Freerun clock is now selected as clock source
Sep 12 10:31:56.185: %DSX1-6-CLOCK_CHANGE: Controller 1 clock is now selected as clock source
Sep 12 10:32:04.152: %DSX1-6-CLOCK_CHANGE: Freerun clock is now selected as clock source
Sep 12 10:32:10.900: %DSX1-6-CLOCK_CHANGE: Controller 0 clock is now selected as clock source
Sep 12 10:33:26.163: %DSX1-6-CLOCK_CHANGE: Freerun clock is now selected as clock source
Sep 12 10:33:56.135: %DSX1-6-CLOCK_CHANGE: Controller 0 clock is now selected as clock source
Sep 12 10:34:09.770: %DSX1-6-CLOCK_CHANGE: Freerun clock is now selected as clock source
Sep 12 10:34:16.942: %DSX1-6-CLOCK_CHANGE: Controller 1 clock is now selected as clock source
Sep 12 10:34:18.046: %DSX1-6-CLOCK_CHANGE: Freerun clock is now selected as clock source
Appreciate your reply.
Thanks in advance. // Anup

Anup
I believe the console message you ask about is not at all related to your NTP question. It looks to me like something is unstable about clocking for some serial interface or controller.
The explanation of your NTP question is that NTP transmits time in Universal Time (UTC) and the router translates that time into local timezone if it is configured to do so. Apparently the server has been configured to adjust for local time of Kuwait and the client has not. The command to adjust for local timezone is in global config:
clock timezone
If you configure this on the client you should find that the time is correctly translated.
HTH
Rick

User Profile Service - User Profile Incremental Synchronization Timer job stuck at 33% Status: Pausing

User Profile Service - User Profile Incremental Synchronization Progress: 33% Status: Pausing
It has been almost 15 days.
Both User Profile Service and User Profile Synchronization Service are in Started state and FIM service also starting
I tried clearing sharePoint config cache.
I also restarted the sharepoint timer service.
I tried almost everything that is on Internet but nothing helped me.
Is there any other way to solve the issue as I was struck on production server (ASAP)
In synchronization serivce manager status of MOSS_DeltaImport is Inprogress from past 2 days
Best Regards.

Hi,
Please follow the steps in the link below to clear the configuration cache.
http://blogs.msdn.com/b/jamesway/archive/2011/05/23/sharepoint-2010-clearing-the-configuration-cache.aspx
Here is a similar thread for your reference:
https://social.technet.microsoft.com/Forums/en-US/beaa852c-6f40-428a-b97c-20722864e045/user-profile-service-user-profile-incremental-synchronization-timer-job-stuck-at-88-status?forum=sharepointadminprevious
Or try to clear the file system cache on all servers in the server farm on which the Windows SharePoint Services Timer service is running. Microsoft has provided a step by step procedure on clearing file system cache from the SharePoint front-end servers
in this kb article.
You can also see the ULS logs and check error messages.
http://sharepointlogviewer.codeplex.com/
Best Regards
Dennis Guo
TechNet Community Support

Job is in Dispatched status

Hello Experts,
I had some problem in the running of the daily jobs in the Redwood Production Environment.Actually A job was to run at around 2P.M as per its scheduled,But the job did not run as per its scheduled.Instead of showing the status as running the job was in Dispatched status for a long time.Then I had to cancelled the job and resubmit it again and finally it completed successfully.
Now my questions for the above scenarios are:
1.Why the job was in Dispatced status for a long time?
As per my understanding The redwood job runs by the redwood service as below:
Scheduled -> Dispatched ->running
2.So what happened when the Redwood Service was trying to change the status from Dispatched to running?
3.Is there any solution to set up a alert mail notification when job would be in Dispatched status for a long time?
4.Is there any root cause solution for my above scenarios and questions so that it doesn't happen again in the future?
Kindly suggest me a solution for this issue?
Thanks and Regards,
Ashish.

Hi,
As indicated, this depends on your license.
For the free version, you could send the monitor tree that is available in CPS (see Monitoring -> Monitors) to Solution Manager. This tree contains the current state of the process servers, so if a system can no longer be reached, its status will change, this will show up in Solution Manager and Solution Manager can send alerts for you (search for "XMW" in the PDF documentation).
You can also use GRMG from Solution Manager to monitor these items. Here Solution Manager regularly polls CPS for the status of its components. How to set this up is described in the documentation (search for "GRMG" in the PDF doc).
With the full version, you can get the alerting module for CPS which allows more rules and flexibility regarding alerts. You can then alert on more complex conditions, and also set up an escalation mechanism: send out the first alert, if nobody replies within x minutes send out another alert to a different team, etc.
Finally regarding the jobs: if a job needs to start within a given window, you can use the "Overdue" property to raise an event if the job doesn't start in time. The event would then trigger a job that sends you an e-mail.
I hope these examples help you further.
Regards,
Anton Goselink.

Create G/L Account Centrally cant find "Field Status group"

Dear All,
When i create G/L Account Centrally i can no t find "Field Status group" as the picture showed. Before i do this, i have already defined the field status groupd and assign this to the company code J610. However i can not find "Field Status group" in Tcode FS00.
Please help me on this! Very appreciated!

Hi,
Please check as per steps given below :
1. Go to transaction code OBD4
2. Double Click on Account Group
3. Double Click on Document Entry
Check whether Field status group is Suppress.
Regards,
Tejas

Jobs Scheduled But Never Run or EM jobs remain in 'running' status

Hi All,
Please I need help on this: I have job scheduled through Oracle Enterprise Manager (OEM) but each time our Windows server is shutdown for patches update the job I scheduled failed and in the status column it shows that the job is still running ( Note: I do know how to stop/delete this job) BUT I will like to know if there's anything I need to do so that each time our server is shutdown the scheduled job will not fail to run.
Thanks
Wale

Jobs Scheduled But Never Run or EM jobs remain in 'running' status what is the output of user_jobs and user_jobs_running views when this happens? especially last_date, last_sec, failures, broken columns.

How to find system status for production orders?

How to find system status for production orders?
looked into table AUFK, AFKO and AFVC but none of these tables, carry
system status as part of the fields(STTXT)
I tried to filter in COOIS, but not much help
Able to find system status information in COHV,Is there any other way where
I can find system status information for production orders
Kindly guide

Hi,
Look into table, JEST, JSTO, AFPO & AFKO. CAUFV filed OBJNR, TJ02T filed ISTAT.
But, it is very difficult to combine the details like Order and System status.
Take the help of your ABAPer to generate Report for you.
Regards,
Siva

How to find the status of an invoice in ECC ?

Hi,
Could anyone please tell me how to find the status of an invoice in ECC system (Parked, posted or saved as completed)
Regards
Prashant Chauhan

HI
MIR6
Regards
Kailas Ugale

LMS 3.2 Compliance jobs and crypto trustpoints

Hi Guys,
Got a little bit of a problem. I am trying to write a compliance job that is going to adjust the config in a trustpoint. I need it to first confirm that the trustpoint exists and then add some additonal command to the trust point.
crypto pki trustpoint fred
enrollment mode ra
enrollment xxxx
So from the above config I would write a job that would have a pre-requisite of crypto pki trustpoint fred
and then add auto-enroll x regenerate into the trustpoint.
However when I try to do this via compliance job the job always shows as compliant even though the device has not got the auto-enroll x regenerate line in the trustpoint.
It doesn't seem to matter whether I do a basic or advanced compliance job, or whether I set the pre-requite of crypto pki trustpoint fred as both a pre-requisite and parent of the subcommand auto-enroll x regenerate or just a pre-requisite. It also doesn't seem to matter whether I set the auto-enroll x regenerate command as a subcommand or global. All attempts seem to pass as compliant even though they only have the pre-requisite met and not the command I am looking for within the pre-requisite as a sub command?
Any ideas as I need to deploy this configuration across about 100 devices tomorrow
Thanks

Just to let people know, I raised a bug with Cisco TAC and they have told me to install SP1. Apparently this fixes a lot of compliance type issues. Will report back once its done to confirm if the problem is fixed.

Finding the Status of the Network

Hi,
Fron AUFK Table I am getting OBJNR of the Network. To find out Status of that Network , i an Giving the OBJNR value to JEST Table.
But for One OBJNR Value i am getting 10 recodrs ,Each of them having different Status No.(STAT).Which one I should Consider.
Thanks & Regards,
Rahul

JEST Table will list out all active and inactive status for a given object number. If there are 10 records found for your network object number , that means there are 10 status (both active and inactive) set to that network number. Status number starts with 'I' refers to system status and 'E' refers to user status. To find the text of the status number pass the status number to TJ02 table, as mentioned by Amol, you will get the status text, but TJ02 will take only system status number not user status number.

How to find database status

how to find database status(average execution,reads,writes,block size)

Please, use the copy and paste feature available on all the computer (CTRL-C and CTRL-V), go onto the oracle online documentation http://docs.oracle.com click on the link corresponding to your version, and paste the word I wrote previously.
You'll got answers.
Nicolas.
i want to find out using sql queries.Didn't notice you WANT sql queries. Then my answer is out of scope. Except for the document link.
Message was edited by:
N. Gasparotto

NTP Status: Clock is unsynchronized

I have been having issues with a 3750X Stack that is not synchronizing with our NTP server. I have tried adding and removing the NTP server but it does not help. We are running Version 15.2(1)E. Any suggestions would be great! Thanks!

Daniel,
Thanks for the quick reply. Here is the “sh status” and “sh ntp associations”
Sh ntp status
Clock is unsynchronized, stratum 16, no reference clock
nominal freq is 119.2092 Hz, actual freq is 119.2092 Hz, precision is 2**19
ntp uptime is 26320700 (1/100 of seconds), resolution is 8403
reference time is 00000000.00000000 (18:00:00.000 CST Thu Dec 31 1899)
clock offset is 0.0000 msec, root delay is 0.00 msec
root dispersion is 0.16 msec, peer dispersion is 0.00 msec
loopfilter state is 'FSET' (Drift set from file), drift is 0.000000000 s/s
system poll interval is 64, never updated.
sh ntp associations
address         ref clock       st   when   poll reach delay offset   disp
~x.x.x.x    .LOCL.           1     40     64   377 2.409 2723270 16.508
~x.x.x.x     x.x.x.x     2      5     64   377 2.298 2723270 16.528
* sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured
We are using our internal Windows Domain Controller as an NTP source. I have multiple 3750 stacks looking at our DCs without an issue. Thanks!

CiscoWorks: Compliance job to find NTP status in switches?

Similar Messages

Maybe you are looking for