Discover network devices

Hello all,
I'm trying to understand the 'network discovery' method and wanted to know what kind of devices it can discover using this method?
thanks

It will and can discover just about anything attached to the network but most of those devices can;t be managed in any way and or very limited information is collected so doing this typically isn't done at all as it simply clutters ConfigMgr.
Jason | http://blog.configmgrftw.com

Similar Messages

Discovering Network Devices with SNMP not working

I have implemented SCOM 2012 SP1 CU5 on Server 2008 R2 with SQL 2008 R2 all installed on the same VM running side by side with SCOM 2007 R2 v 6.1.7221.0. I have almost fully decommissioned SCOM 2007 and all that remains on it is 2 network devices that
I cannot discover with SCOM 2012 using SNMP, no matter what I try. If I just use ICMP the discovery works. I have checked both the devices and SNMP is enabled and if I run this snmpwalk command on both devices I get a response;
c:\Support\SNMP Walk>SnmpWalk.exe -r:10.X.X.XX -v:1 -c:"public" -os:.1.3.6.1.
2.1.1 -op:.1.3.6.1.2.1.2
SnmpWalk v1.01 - Copyright (C) 2009 SnmpSoft Company
[ More useful network tools on http://www.snmpsoft.com ]
OID=.1.3.6.1.2.1.1.1.0, Type=OctetString, Value=NetMan 100 plus
OID=.1.3.6.1.2.1.1.2.0, Type=OID, Value=1.3.6.1.4.1.5491.6
OID=.1.3.6.1.2.1.1.3.0, Type=TimeTicks, Value=5 days, 1:58:58.04
OID=.1.3.6.1.2.1.1.4.0, Type=OctetString, Value=SystemsEngineer
OID=.1.3.6.1.2.1.1.5.0, Type=OctetString, Value=MARMUPS
OID=.1.3.6.1.2.1.1.6.0, Type=OctetString, Value=FXXXXX
OID=.1.3.6.1.2.1.1.7.0, Type=Integer, Value=0
Total: 7
c:\Support\SNMP Walk>SnmpWalk.exe -r:10.X.X.1 -v:1 -c:"scom05" -os:.1.3.6.1.2.1
.1 -op:.1.3.6.1.2.1.2
SnmpWalk v1.01 - Copyright (C) 2009 SnmpSoft Company
[ More useful network tools on http://www.snmpsoft.com ]
OID=.1.3.6.1.2.1.1.1.0, Type=OctetString, Value=SSG-140 version 6.3.0r2.0 (SN: 0
185112006000325, Firewall+VPN)
OID=.1.3.6.1.2.1.1.2.0, Type=OID, Value=1.3.6.1.4.1.3224.1.52
OID=.1.3.6.1.2.1.1.3.0, Type=TimeTicks, Value=359 days, 2:20:16.00
OID=.1.3.6.1.2.1.1.4.0, Type=OctetString, Value=Network
OID=.1.3.6.1.2.1.1.5.0, Type=OctetString, Value=XXXXXX
OID=.1.3.6.1.2.1.1.6.0, Type=OctetString, Value=FXXXXX
OID=.1.3.6.1.2.1.1.7.0, Type=Integer, Value=72
Total: 7
The first device is a Marms UPS which has had its firmware upgraded, which was discovered using SNMP in SCOM 2007 and the second device is a Juniper SSG-140 Firewall, again this is discovered using SNMP in SCOM 2007.
I believe that I have setup SNMP correctly on SCOM 2012 because I have 28 other networks devices discovered using SNMP using an explicit discovery, some of these being newer Marms UPS's, emerson air conditioners, netapp SAN etc.
I have added any and all accepted community names in the SNMP service properties on SCOM 2012 and enabled accept SNMP packets from any host.
Does anyone have any information that they could forward to me or point in the right direction to troubleshoot this issue for eg run some snmp get commands and capture / filter traffic with wireshark, what do I look for? Any other logs to check besides the
obvious ones? Any known issues with SCOM 2012 SP1 and SNMP, should I upgrade to R2? It just seems that some network devices get discovered with ease and others do not and I am running out of ideas. Thank you all in advance.

Patrick, thank you for your reply.
Yes the snmpwalk command is run from the new SCOM 2012 server which has the discovery rule on it.
I don't have any pending network devices, its blank.
Could there be an issue with my discovery rule? I have noticed that each time I make a change to, for eg, the access mode and change this from ICMP to ICMP/SNMP, save it, run it, it doesn't seem to update the said network devices access mode's in network
devices, it just stays on ICMP. Do I have to manually remove the network devices which have been discovered before making any changes to the discovery rule and running it which I have done? They don't seem to appear in network devices pending management either?

How to discover network devices?

We have a SCOM2012R2 management group with 6+ management servers. If I want to configure discovery of network devices,
1. can I use "All management servers" pool to discover them? or
2. Can I specify/reserve two of them just to do the discover and manage those network devices (a handful devices), and how?
3. If I create a resource pool contains only those two MSs, do I need to remove them from "All management servers" pool?

Yes, you can create one discovery rule per management server or gateway server.
http://blogs.technet.com/b/ptsblog/archive/2011/11/28/network-monitoring-with-system-center-operations-manager-2012.aspx
Operations Manager supports monitoring of the following number of network devices:
2000 network devices (approximately 25,000 monitored ports) managed by two resource pools
1000 network devices (approximately 12,500 monitored ports) managed by a resource pool that has three or more management servers
500 network devices (approximately 6,250 monitored ports) managed by a resource pool that has two or more gateway servers
Also you can refer below link
http://technet.microsoft.com/en-us/library/hh212935.aspx
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"

Discovering Network devices on 2 different subnets

Hello
I am trying to discover the network devices available in 2 different subnets (10.0.0.0) and (172.0.0.0), I installed 2 interface cards on the operations manager management server, each interface should reach the network devices in their address range,
I tested reaching various network devices in the 2 subnets "using the application MIB browser" and everything is ok.
now I added the devices IP addresses to the network discovery rule, 90% of the devices are discovered but some devices are not shown in the discovered devices nor the pending management pages! while they are added to the rule.
I logged onto the failed device which its interface is connected to the subnet 172.0.0.0 and checked the snmp logs and found that the operations manager management server is failing to access the device using SNMP using the subnet 10.0.0.0.
so I think now that operations manager uses the primary interface card 10.0.0.0 to access the remote device using snmp, so how do I enforce SCOM to discover the 172.0.0.0 devices using the 172.0.0.0 interface card.
Thank you
Mohammad, IT NOC Team

Hi Yan,
no many of the devices in the subnet 172.0.0.0 are discovered but some of them are not, those which are not discovered and are not appearing under the pending management. also when accessing those devices and checking the snmp logs I see failed attempts
to read snmp from the SCOM IP address which is on the subnet 10.0.0.0 isn't strange that SCOM uses the IP 10.0.0.0 to access a device on the subnet 172.0.0.0
Thanks
Mohammad, IT NOC Team

SCOM Network Device Alerts

Hi,
In our environment we are using SCOM 2012 to monitor Servers and network Devices.we discovered network devices but the display name of the device is looking like 134.sub-91-245-149.ymzvw.com and the same is displayed in alerts so it is very difficult
to trace out the name and location of the device.But and in the property of the device it shows location and primary owner name of the device it will be helpful if i change the display name to its location name.
Is there any way to change the display name of the device to its location name.
Is there any way to modify the alerts so that it will be easy to figure out the location and name of the device.
Thanks in advance
Thanks Siva Aadhi-CIT. MCITP

I have resolved part of my issue. Display name and full path name
     is now same as MIB2 System Name. Apparently Display name and
     Full path name is pulled from DNS. So i was about to resolve part of
     my issue with just deleting the device from SCOM. creating DNS A record
     and re-discovering the device. but still when it comes to alert.. it shows
     MAC address as part of Path instead of display name or MIB2 Displayname.
http://social.technet.microsoft.com/Forums/systemcenter/en-US/fab18884-3a08-4684-99da-c6a9b801054f/scom-2012-network-monitoring-alerts>
Have a nice day !!!

Network devices discovered but not managed

SCOM 2012 R2 management group. A dedicated network monitoring resource pool consists of two MSs. These two MSs have been removed from AMSRP and other two default resource pools (AD.., Notification...) - is this correct?
Two discovery roles:
role1 runs on GWS1 discovered (explicitly) 5 devices and shown all "healthy". This rule was using AMSRP to monitor, but changed to the dedicated pool after it was created.
role2 (added after the dedicated resource pool was created) runs on GWS2 discovered (explicitly) 2 devices but shown as "not monitored"
How to find out what's wrong? (log files etc?)
Anything need to check with the resource pool settings?
Thanks.

Hi,
Do you mean that you have discovered the two network devices on your Management server, but it is not monitored.
This issue maybe caused by the proper management pack was imported, please go through the below article to get more information about how to monitor network device by using SCOM:
http://technet.microsoft.com/en-us/library/hh212935.aspx
Network Monitoring using System Center Operations Manager 2012
http://blogs.technet.com/b/rohitkochher/archive/2011/11/26/network-monitoring-using-system-center-operations-manager-2012.aspx
Regards,
Yan Li
Regards, Yan Li

Same network device gets discovered multiple times in scom

Hi All,
In SCOM 2012 , Same network device gets discovered multiple times.
For example, if we have an ip address 10.91.180.43 added to Network discovery rule.
When Discovery is run few times.
its gets discovered multiple times and shows 3 or 4 times under Network Devices.
Please help me to fix this issue.
Thank you
Siva

Hi dktoa,
Thank you for the quick reply. i would like to explain my issue in clear.
For example, if we have an ip address 10.91.180.43 added to Network discovery rule.
When Discovery is run few times. its gets discovered multiple times and shows 3 or 4 times under Network Devices. And it gets listed multiple times with same ipaddress not with different ip.
it will look like this
10.91.180.43
10.91.180.43
10.91.180.43
---- I read both articles, they are were interesting.
Do you mean to say that my issue will get fixed , if i change the AccessAddressFormat = "AUTOADDRESS" as
AccessAddressFormat = "LOOPBACKADDRESS"
Please guide me if i am wrong.
Thank you once again.
Regards
Siva

Remove network device inventory from SCOM database

Hello Gurus
I have a quick question. I think one of the internal connectors in my SCOM environment has got deleted by mistake. As a result all the network devices that were being monitored previously has now disappeared. I believe because they were present in the database,
I can't discover them now. Is it possible somehow to list those network devices from the database, and then delete them, by using powershell and/or SQL.
Any help in this regard will be greatly appreciated.
Regards,

You can delete them by:
In the Discovery Rules option under the Administration Tab, you will be able to see all the network devices that are discovered. This shows the devices that are discovered and currently getting monitored in SCOM. You can select multiple devices and then
remove them.
Then Run in powershell Get-RemotelyManagedDevice to check that all Network devices deleted.
you can also check below link to remove/restore network device
http://technet.microsoft.com/en-us/library/hh212795.aspx
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"

LMS 4.2 Network Devices configuration requirement

I have install LMS 4.2 and nat ip to discover found WS-6513 but cannot polling inventory.
I serch for document about configuration on Network Devices such as switch, router, asa etc. to support LMS.
But I cannot find it, anyone have example configuration or document about this ?

Given that you have verified the SNMP RO community string and assuming you have a Supervisor 720 as noted in the compatibility matrix, you should be able to pull inventory.
As a next step I would check what is going on when you actually try to retrieve inventory.
Go into Device Center for your switch and select Tools > Packet Capture. Create a capture using the IP address of your switch and choose application SNMP (udp161). Give it adequate time, say 10 minutes (600 seconds). then go back into Device Center and choose Tools, Update Inventory. Once the Job Browser indicates the job is done )or failed), go back into the Packet Capture Window and examine the traffic captured (the jet file can be opened in Wireshark).
A successful Inventory update consists of a series of get and get-bulk requests and associated get responses from the managed device. If it's failing, there should be some response early on in one of the frames from the capture.

Network Devices: id 11009 Error in SNMP GET response from IP Address:, Status: noSuchInstance(129).

Hello,
I'm having this error since i started monitoring network devices. Currently i have 14 Network devices (Cisco Switch). I have the SCOM 2012 R2.
The same error appear for a lot of workflows:
OID: .1.3.6.1.2.1.2.2.1.12.10609
Workflow name: System.NetworkManagement.MIB2_ifMIB_dot3Ethernet.Port.InputPacketBroadcastPct
Workflow name: System.NetworkManagement.DeltaRule.MIB2.NetworkAdapter.ifInNUcastPktsRate
Workflow name: System.NetworkManagement.MIB2_dot3.NetworkAdapter.HighOutputErrorRate
Workflow name: System.NetworkManagement.MIB2_Base.NetworkAdapter.InputPacketDiscardPct
Workflow name: System.NetworkManagement.MIB2_ifMIB_dot3Ethernet.Port.HighInputBroadcastRate
OID: .1.3.6.1.2.1.2.2.1.18.11104
Workflow name: System.NetworkManagement.MIB2_dot3.NetworkAdapter.OutputPacketErrorPct
Workflow name: System.NetworkManagement.MIB2_dot3.NetworkAdapter.HighOutputErrorRate
Workflow name: System.NetworkManagement.DeltaRule.MIB2.NetworkAdapter.ifOutNUcastPktsRate
System.NetworkManagement.MIB2_Base.NetworkAdapter.HighInputDiscardRate
Anyone knows a solution? This is generating a lot of alerts. What can i do to stop this workflow?
Thanks,
Rui

Hi,
If we can find the corresponding device according to the OID, and then we could override the monitor or rule for this specific device.
And here is a similar thread about how to monitor Cisco device based on OID, please go through it:
http://social.technet.microsoft.com/Forums/systemcenter/en-US/5e806aa2-c90d-4b39-9ef2-4cfc003e68ff/snmp-monitor-based-on-oids?forum=operationsmanagerauthoring
In addition, have you tried the possible resolution for event 11009 as below in the link I provided in my first post:
Possible Resolutions
Stale Discovery Data – Device has been reconfigured since the last discovery and Operations Manager is attempting to monitor a component that no longer exists on the device.
If the device doesn’t support the workflow, then a solution is to disable the workflows utilizing the value for the device. This will prevent these workflows loading and failing in the future.
Possibly a device issue, try updating the Firmware and OS on the device
Possible a discovery issue where the instance is being discovered incorrectly. For example Operations Manager is expecting to monitor a performance counter but this is a virtual interface and the counters are not present for the interface. Try
running a re-discovery for the device.
Regards,
Yan Li
Regards, Yan Li

How to remove network devices through powershell? (scom 2012)

Hi
Could anyone says how to delete network device in SCOM 2012 through powershell?
In 2007 we have Get-RemotelyManagedDevice.
I have a big number network device in monitoring and now need delete some of them with specific filter, all switches.
How to do it?
Thanks
Alex

The devices were discovered by an old Management Server that was reinstalled.
I finally got those devices out of my SCOM environment using this SQL query (just replace networkdevicename):
UPDATE
BaseManagedEntity
SET
isdeleted=1
from
BaseManagedEntity where
BaseManagedEntityId in
(select
BaseManagedEntityId from
BaseManagedEntity where
displayname like
'%networkdevicename%')

Network device disappeared

Hi!
I was adding some network devices to SCOM 2012 R2. One of my network devices appeared as a pending device. Reason: No Response SNMP.
After I added my scom management server to the accepted list on the server I wanted to monitor under the SNMP service it just disappeared from my SCOM management console. I cant find it under pending or Network Devices now.
If I try to run a discover again I cant find the device again, even if I remove the scom management server from the accepted list on the SNMP service. The only way to find the device again is to discover it only using ICMP.

Hi,
Please check the event log of the Management Server where you assigned discovery to run. If discovery was a success, you will see your network device show up in the Admin console, under Network devices.
Niki Han
TechNet Community Support

SCOM Monitoring Multiple interface of a same network device

hi
I have deployed SCOM 2012 R2. I have discovered around 200 network device by using device's loopback IP adress with SNMP v3.
100 dvices are in the branch offices those are connected with 3 links in three interfaces respectively. Even if two link is down, i can see that my network device is healthy since network device is discovered with the loopback address. How can i configure
my network monitoring so that even if one link goes down i can see some kind of warning or error in the particular network device in my monitoring pane. Please say if my infrastructure is unclear.

Hi,
You can create built-in network ICMP only network monitoring for the three interfaces respectively.
Using the built-in network monitoring within Operations Manager 2012 to monitor network devices using ICMP only mode
http://blogs.catapultsystems.com/cfuller/archive/2013/07/03/using-the-built-in-network-monitoring-within-operations-manager-2012-to-monitor-network-devices-using-icmp-only-mode-scom-sysctr.aspx
Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Network Device Discovery and Monitoring through Proxy Agent

Hi,
In our SCOM 2012 SP1 environment, I want to monitor an InfiniBand switch that is only connected to a physical server with a SCOM agent and a SQL PDW appliance, but not to the VLAN which the SCOM gateway server is on.
According to SCOM documentation, it seems that if a SCOM mgmt or gateway server cannot connect directly to the switch using ICMP or SNMP-related ports, then it cannot be discovered and ultimately monitored. Is this correct? Or can the discovery
occur "through" the physical server that has a SCOM agent installed with proxy enabled, which reports to the gateway server?
I guess I don't fully appreciate the purpose of allowing monitoring of network devices through proxy if the discovery cannot also be performed through proxy, if this is indeed the case.
Much thanks for any help!

Hi,
you can create new rules/monitors targeted that specific server which check necessary params of your network device.

Network device is not responding to SNMP

Hello All
We are monitoring our first network device (Cisco FW) SNMP V2.
We discovered it and were able to collect performance counters for 2 hours.
After that, only thing we can collect is ICMP response. Also it keeps switching between healthy and warning state.

Hi Helpful guy,
This problem occurs on some network devices in case that the maximum number (default 50) of OIDs that OM will query per batch is too high. You probably find a entry in the Cisco logs:
"incoming SNMP request (# bytes) from IP address
IP_ADDRESS and PORT
PORT_NUMBER Interface "inside" exceeds data buffer size, discarding the SNMP request"
This problem can be solved by creating a registry key:
location: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Operations Manager\3.0\Modules\Global\SNMP]
key type: DWORD value
key name: MaxOidsPerRequest
default: 50
Change the default value to one that suits your environment.
Hope this helps,
Regards Marthijn van Rheenen
Blog: Heading To The Cloud’s
I'm using OpsMgr 2012 R2. I started with MaxOidsPerRequest set to 30 and monitoring was going well for two ASA 5510s. I have raised the number to 40 and am waiting to see if there are any issues. It is a decimal value and I set it on both
management servers in the resource pool for network devices.

Discover network devices

Similar Messages

Maybe you are looking for