Common services - wlc

Hi Experts
Two Business divisions wants to keep wireless as common services for thier guest, some of the guest are common. Both Business divisions are placed in the same building across 10 floors. Both of them have separate IT to manage their users/services
can a single ACS/ISE can integrate with Active Directory of each Business division
each business division will have their SSID for users / smart phones broadcast on each AP - is this correct
do guest users needs to be on WLC or ACS/ISE - what is preferred?
are there any security conern on merging
can someone share thoughts on which model to lookout considering
each floor with 60 users
Total of 10 floors
max users will be on wireless
All floors are open area
what is the suggested WLC model
what is the suggested AP model
thanks
ST

Companies will not want to open the AD to a merged point in which they can get compromised. That is a very bad idea and if a company gets audited, they will for sure get flagged for that and the auditor will think that is such a crazy idea.
Have two separate systems!!! That is the way to go.
Sent from Cisco Technical Support iPhone App

Similar Messages

Problems with adding a new device in Common Services

Hello,
I have the following problem: I need to add a new device in my Cisco Works. What I do is I go to Common Services >> Device and Credentials >> Device Management. There I click "Add" and I add the new device with the corresponding credential set.
Then, in the RME >> Job Management >> RME Jobs I can see a new job created (
CDA:CDA job due to Device Add. ) because of this addition but this jobs stays always in status Running and it never finishes. Most probablt because of that this newly added device never actually appears in the RME so I cannot operate with it - deploy software, save configs, etc.
I did this test a few times and all the times this is the result.
I tought that it might be a firewall issue blocking some protocol needed for the communication, as SNMP, telnet or something else. But if I go to Decice Center and I select this newly added device (which there appears with the question mark icon, not with the right device icon) I can see all the information for it, like Detailed Device Report, etc.
Then I noticed that in the RME Jobs section I have some more jobs that are like running forever - "
CredEditCDA: CDA job due to Credential Edit".
See the attached image for details:
So, my question is what might be the reason for this behaviour and what can I do in order to unblock these jobs and add my device normally?
What I use is:
Windows Server
LMS 3.2
RME 4.3.0
Thank you in advance,
Vesko

OK,
first of all, have you intergrated lms with ACS ? - check in common services - server - security - single-server mgmt - local user policy setup.
If this is in ACS, check if the newly added devices is in ACS... Check if this devices is reflecting in common services itself...make sure that the device type is selected properly ???
Next do a snmp test in device center for this machine..how would you do this --" in device center, select the device, do a management to station and select the snmpv2 and ok it" you will get if snmp is failing or not...As you mentioned it is coming in question mark..this is because the correct device type is not selected in common services.
Do an update inventory & archive and check the status..
~ rate if this was helpful.
-rajesh

LMS services in Common Service can't start

Hi all!
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Calibri","sans-serif";}
1.     My server have problem with service. In RME module, I see “JRM service could be down, Check whether JRM services are running”. But I go on Common Services > Sercurity > Admin > Progess. I don’t see any services. I don’t know how to start all services ? This server is running LMS 3.2. Thank so much!

Hi ,
To Start all the Services :
TO STOP :        /etc/init.d/dmgtd stop   ( for solaris)
                        net stop crmdmgtd       (For windows)
TO START :      /etc/init.d/dmgtd start ( for Solaris)
                        net stop crmdmgtd      ( For Windows )
If the issue does not resolved after Restarting the services.. please send me the output of pdshow
> go to commnd prompt : type pdshow >pdshow.txt   ... send me the pdshow.txt file
Also share the screen shot of SERVICES.MSC window !!!
Thanks--
Afroj
If this post answers your question, please click the "Correct Answer" button"

Common Services portal does not appear on the LMS 3.0 homepage

Hi,
I am encountering a problem on Ciscoworks LMS 3.0 wherein the Common Services portal does not appear on the homepage. This was after I tried to upgrade CW to LMS 3.2 but does not seem to work so I revert back to LMS 3.0. I even did a restore of the backup database but still no Common Services on the homepage.
How do i resolve this?
Appreaciate your help. Thanks in advance!

If you're not seeing the Common Services application portlet on the Functional Portal View, then you need to open a TAC service request to get the steps to manually re-register all of the installed applications from the command line.

How to resolve hostname in Common Service 3.3 ?

hi guys!
i have a problem when discover my devices in ciscoworks common service 3.3.
i discovered use module setting cdp and ping sweep , preferred dcr name is hostname, and update dcr display name is checked.
i hope the hostname is show in display name but there is ip address.
i search this problem is bug CSCsq54877 and CSCsv65933 but its resolved in common service 3.3.
my question:
there is any problem in my discover settings or is still a bug.?
could anyone help me to preferred show hostname than ip address ?

i make a trick.
i use hosts.etc in windows server where the ciscoworks installed

Bug CSCti41352 for Common Services 3.0.5

/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
Hi,
We don't have found the patch to fix CSCti41352 bug for Common Services 3.0.5 in cisco download page. I attach screenshot that show this. Where is this patch available?
Thanks

The End of SW Maintenance for LMS 2.6 (Common Services 3.0.6) was June 11, 2009, so I think you're SOL trying to get the patch for CS 3.0.5 now.
http://www.cisco.com/en/US/prod/collateral/netmgtsw/ps6504/ps6528/ps2425/prod_end-of-life_notice0900aecd80532c07.html
Table 1. End-of-Life Milestones and Dates for the CiscoWorks LAN Management Solution 2.6
Milestone
Definition
Date
End-of-Life Announcement Date
The date the document that announces the end of sale and end of life of a product is distributed to the general public.
June 12, 2007
End-of-Sale Date
The last date to order the product through Cisco point-of-sale mechanisms. The product is no longer for sale after this date.
June 11, 2008
Last Ship Date:
App. SW
The last-possible ship date that can be requested of Cisco and/or its contract manufacturers. Actual ship date is dependent on lead time.
September 10, 2008
End of SW Maintenance Releases Date:
App. SW
The last date that Cisco Engineering may release any final software maintenance releases or bug fixes. After this date, Cisco Engineering will no longer develop, repair, maintain, or test the product software.
June 11, 2009
End of New Service Attachment Date:
App. SW
For equipment and software that is not covered by a service-and-support contract, this is the last date to order a new service-and-support contract or add the equipment and/or software to an existing service-and-support contract.
June 11, 2009
End of Service Contract Renewal Date:
App. SW
The last date to extend or renew a service contract for the product.
September 10, 2010
Last Date of Support:
App. SW
The last date to receive service and support for the product. After this date, all support services for the product are unavailable, and the product becomes obsolete.
June 30, 2011

LMS 3.2 Common Services User Defined Groups problem

CiscoWorks LMS 3.2 is installed on Windows 2008 64-bit server.
All devices are added into appropriate User defined group in Groups/Common Services.
All groups are fine except that Members of group named Switch-HO-access have been copied also to group named Router-Branch by system for unknown reasons.
At few files we have noticed errors :
" FATAL com.cisco.nm.xms.ogs.server.OGSServer main Exception while OGS Server start up: CTMRegistry::startRegistryServer() : Can't find/start registry server " and
" com.cisco.nm.xms.ogs.util.OGSException: CTMRegistry::startRegistryServer() : Can't find/start registry server ".
What is the reason for copying this devices and is there some other underlying problem?

it seems that the errors you see correlate with regular stopping/starting of the LMS processes (dmgtd) so this would be a normal behaviour.
Can you provide a screenshot of the problem you describe and also the rule for the group Switch-HO-access and Router-Branch

Apache Tomcat error on common services (Device Update)

I have installed lms 3.2 on server 2008 , and when I click on device update in software center I recieve an error
which I inserted down here ;
I have to mention that I also have installed Common services patch .
please some one help me this out .
which I

Hi,
Kindly check if you have CSCtj20850-0.info at location CSCOpx\setup\patch
Try this workaround too as it look like rme map files got corrupted :-
Navigate to -->
CSCOpx/www/classpath/com/cisco/nm/xms/psu/maps
Backup these two files (rme*.map) at another location and finally delete them from this location. You need to stop the daemon manager to be able to delete this files with the command net stop crmdmgtd.
Now, run the following command two command, rememer they are one line command :-
1>
set NMSROOT=%CWMIBDIR%\..\..\..
2>
%NMSROOT%\lib\jre\bin\java -classpath %NMSROOT%\lib\jre\lib;%NMSROOT%\lib\classpath;%NMSROOT%\objects\log4j\1.1.3\log4j.jar;%NMSROOT%\MDC\tomcat\shared\lib\MICE.jar;%NMSROOT%\MDC\tomcat\shared\lib\NATIVE.jar;%NMSROOT%\MDC\tomcat\shared\lib\jdom.jar;%NMSROOT%\www\classpath;%NMSROOT%\lib\classpath\servlet.jar;%NMSROOT%\MDC\tomcat\webapps\cwhp\WEB-INF\classes com.cisco.nm.xms.psu.packagemgmt.map.CreateMaps %NMSROOT%\www\classpath\com\cisco\nm\xms\psu\pkgs\rme
The above workaround should generate the rme*.map files again and then it should work fine.
Now, start the daemon manager and wait for 20 minutes before logging back to CiscoWorks.
Note :- Its important to backup (rme*.map) before deleting them.
Many Thanks,
Gaganjeet Singh

Url link for download on LMS from Common services

Hello, i would like to reported a major thing that appeared on 3-4 customers.
The download action is not never possible when they try it from the LMS portal/Common Services/Software update.
The url loaded on browser Internet(eg IE 7.0) add the character | on the link when it proceed after the authentication on the CISCO.COM web site.
The worst is that when i did it from my lab's machine,it works fine even the bad entries. We have traced it with a sniffer.
From an IE directly (outside the LMS so), the page is not displayed as she is not matched with W3C recomendations.
A Doctype tag is not a DTD XHTML 1.0 one.
Hereafter , the URL:
http://www.cisco.com/cgi-bin/Software/WLAN/cwselectfile.cgi?bp=1&&SEARCH=nmim||1.6.0||Software%20Packages|||&FORMAT=XML
On the other side, when a proxy is installed on this machine , it has been refused as well, as the proxy controls that.
Thanks by advance.Richard.

The caracters | are not allowed by the XML validator.
The url link has been finished when he meet this kind caracters.
So it means , that , maybe it has been inserted for stopping the entries, when a bad username has been typed.

LMS 3.2 common services error

Hi all,
I am facing a problem with my LMS 3.2 server. Suddenly I found there is no device reflecing in common services-> device management as well as RME also. I restarted LMS services, server multiple time, reseted casuser, demoted the server from ACS mode to local mode but no luck. However in "dcrcli" i can see all devices and exported all devices to CSV file.
After this I restored from a backup 3 month old when devices were reflecting under common server and RME device management. this also not resolved the problem.
I uninstalled LMS, performed system cleaning and reinstalled LMS 3.2. Then I imported the devices from CSV file i had. Now also the problem not got resolved . I can see devices in dcrcli but none of the device is reflecting under device management of any module.
In Dcmaservice.log i found the error" ERROR,[main],com.cisco.nm.rmeng.config.netshow.server.admin.NSCommandSetManager,getAllCommandSet,8661,Invalid MDF data file:D:/CSCOpx/lib/classpath/com/cisco/nm/cwcs/mdf/mdfdata.xml"
Hence I restored teh mdfdata.xml file from another server. However now i can see the following errors
1) in common service -> software center -> device updae -> device count are 0 for all module
2) no device is reflecting under any module
3) one progress i saw when tring to add any device if selecting device type, it is showing me the list of device type along with OID. before restoring mdfdata.xml it was also not comming.
Please help me to resolve this.

Hi Martin,
Yes you are correct. I did the fresh installation. Imported all devices from the CSV file. However
1) none of these device is showing up in CS>device & credential >device manag
2) Also none of these device are showing up in any other module
3) In Dcrcli i can see al the devices are there
4) for testing I added few device manually. Those are also not showing in any module.
Just to inform all the modules are configured with Auto mode along with manage all devices in Auto Allocation settings under device management.
Thanks & Regards,
Satya

Common Services device management/discovery

I use the Edit Identity option to change the "Display Name" from an IP to a station name, it is overwritten when a discovery has been done. I have checked the discovery settings and tried using the update DCR Display name setting to prevent this from happening, but it makes no difference.
Is there something i am missing? This is on LMS 3.2

Hi ,
In LMS 3.2 there is one more discover settings called Scheduled Discovery .
Common service > Device and Credentials >Device Discovery >Discovery Schedule.
Please check the settings there and see if there is a problem.
For more information on Common Service >Discovery , you can always refer this document written by Joseph Clarke sir :
https://supportforums.cisco.com/docs/DOC-9005
Thanks
Afroj

Common Services Device Update

I have just completed an Install of LMS 3.2
I have tried to apply the latest device update package the download site for DFM.
However I get the following message "consitency check for base package DFMSharedUpdates."
When I look at the Common Services, Software Center, Device Update ; all the device type counts are zero except for CiscoView and Resource Manager Essentials. I would have thought that the DFM section would have a value other than Zero.
How do I apply the Base Package for DFM and what is the file location.
Thanks Mark

Make sure you also download and install the MDF update for Common Services. In fact, check the boxes next to RME, Common Services, DFM, CiscoView and Campus Manager. Install all of the available device updates for each application. When done, you should have non-zero device counts for RME, DFM, and CiscoView.

Common Services Framework

Hi all,
Can anyone tell me how to start with Common Services Framework in JCAPS?
Regards,
Dai

I have the same question.
Thanks for the answer :)
- Remold

LMS 4.1 Common Services and RME Question

Hello,
we are using Cisco LMS 4.1 and we going to deploy Cisco Security Manager 4.2 as well. Can CSM and LMS share RME and Common Services?
thanks in advanced
alex

No that is not foreseen, so not supported. Use 2 servers.
What can be done is having the DCR's in sync by having a common service as master and the other as slave.
Cheers,
Michel

CSM 4.2 RME and Common Service Question

Hello,
we're planning to use CSM 4.2. We already using Cisco LMS 4.1. Is it possible to use RME and the Common Services from the existing LMS 4.2?
thanks for your feedback
Alex

If you are not using the 64-bit CSM, then you can share the same RME instance (Till LMS 3.2), just have to see the server ip within CSM options:
http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/security_manager/4.2/deployment/guide/cmsdg42.html#wp47518
Resource Manager Essentials (RME)
4.3
This is the officailly supported version for CSM 4.2
I don' t think the new prime architecture is officially supported (LMS 4.2.x)
Regards
Farrukh

Common services - wlc

Similar Messages

Maybe you are looking for