Discovering Network devices on 2 different subnets

Hello
I am trying to discover the network devices available in 2 different subnets (10.0.0.0) and (172.0.0.0), I installed 2 interface cards on the operations manager management server, each interface should reach the network devices in their address range,
I tested reaching various network devices in the 2 subnets "using the application MIB browser" and everything is ok.
now I added the devices IP addresses to the network discovery rule, 90% of the devices are discovered but some devices are not shown in the discovered devices nor the pending management pages! while they are added to the rule.
I logged onto the failed device which its interface is connected to the subnet 172.0.0.0 and checked the snmp logs and found that the operations manager management server is failing to access the device using SNMP using the subnet 10.0.0.0.
so I think now that operations manager uses the primary interface card 10.0.0.0 to access the remote device using snmp, so how do I enforce SCOM to discover the 172.0.0.0 devices using the 172.0.0.0 interface card.
Thank you
Mohammad, IT NOC Team

Hi Yan,
no many of the devices in the subnet 172.0.0.0 are discovered but some of them are not, those which are not discovered and are not appearing under the pending management. also when accessing those devices and checking the snmp logs I see failed attempts
to read snmp from the SCOM IP address which is on the subnet 10.0.0.0 isn't strange that SCOM uses the IP 10.0.0.0 to access a device on the subnet 172.0.0.0
Thanks
Mohammad, IT NOC Team

Similar Messages

Discovering Network Devices with SNMP not working

I have implemented SCOM 2012 SP1 CU5 on Server 2008 R2 with SQL 2008 R2 all installed on the same VM running side by side with SCOM 2007 R2 v 6.1.7221.0. I have almost fully decommissioned SCOM 2007 and all that remains on it is 2 network devices that
I cannot discover with SCOM 2012 using SNMP, no matter what I try. If I just use ICMP the discovery works. I have checked both the devices and SNMP is enabled and if I run this snmpwalk command on both devices I get a response;
c:\Support\SNMP Walk>SnmpWalk.exe -r:10.X.X.XX -v:1 -c:"public" -os:.1.3.6.1.
2.1.1 -op:.1.3.6.1.2.1.2
SnmpWalk v1.01 - Copyright (C) 2009 SnmpSoft Company
[ More useful network tools on http://www.snmpsoft.com ]
OID=.1.3.6.1.2.1.1.1.0, Type=OctetString, Value=NetMan 100 plus
OID=.1.3.6.1.2.1.1.2.0, Type=OID, Value=1.3.6.1.4.1.5491.6
OID=.1.3.6.1.2.1.1.3.0, Type=TimeTicks, Value=5 days, 1:58:58.04
OID=.1.3.6.1.2.1.1.4.0, Type=OctetString, Value=SystemsEngineer
OID=.1.3.6.1.2.1.1.5.0, Type=OctetString, Value=MARMUPS
OID=.1.3.6.1.2.1.1.6.0, Type=OctetString, Value=FXXXXX
OID=.1.3.6.1.2.1.1.7.0, Type=Integer, Value=0
Total: 7
c:\Support\SNMP Walk>SnmpWalk.exe -r:10.X.X.1 -v:1 -c:"scom05" -os:.1.3.6.1.2.1
.1 -op:.1.3.6.1.2.1.2
SnmpWalk v1.01 - Copyright (C) 2009 SnmpSoft Company
[ More useful network tools on http://www.snmpsoft.com ]
OID=.1.3.6.1.2.1.1.1.0, Type=OctetString, Value=SSG-140 version 6.3.0r2.0 (SN: 0
185112006000325, Firewall+VPN)
OID=.1.3.6.1.2.1.1.2.0, Type=OID, Value=1.3.6.1.4.1.3224.1.52
OID=.1.3.6.1.2.1.1.3.0, Type=TimeTicks, Value=359 days, 2:20:16.00
OID=.1.3.6.1.2.1.1.4.0, Type=OctetString, Value=Network
OID=.1.3.6.1.2.1.1.5.0, Type=OctetString, Value=XXXXXX
OID=.1.3.6.1.2.1.1.6.0, Type=OctetString, Value=FXXXXX
OID=.1.3.6.1.2.1.1.7.0, Type=Integer, Value=72
Total: 7
The first device is a Marms UPS which has had its firmware upgraded, which was discovered using SNMP in SCOM 2007 and the second device is a Juniper SSG-140 Firewall, again this is discovered using SNMP in SCOM 2007.
I believe that I have setup SNMP correctly on SCOM 2012 because I have 28 other networks devices discovered using SNMP using an explicit discovery, some of these being newer Marms UPS's, emerson air conditioners, netapp SAN etc.
I have added any and all accepted community names in the SNMP service properties on SCOM 2012 and enabled accept SNMP packets from any host.
Does anyone have any information that they could forward to me or point in the right direction to troubleshoot this issue for eg run some snmp get commands and capture / filter traffic with wireshark, what do I look for? Any other logs to check besides the
obvious ones? Any known issues with SCOM 2012 SP1 and SNMP, should I upgrade to R2? It just seems that some network devices get discovered with ease and others do not and I am running out of ideas. Thank you all in advance.

Patrick, thank you for your reply.
Yes the snmpwalk command is run from the new SCOM 2012 server which has the discovery rule on it.
I don't have any pending network devices, its blank.
Could there be an issue with my discovery rule? I have noticed that each time I make a change to, for eg, the access mode and change this from ICMP to ICMP/SNMP, save it, run it, it doesn't seem to update the said network devices access mode's in network
devices, it just stays on ICMP. Do I have to manually remove the network devices which have been discovered before making any changes to the discovery rule and running it which I have done? They don't seem to appear in network devices pending management either?

How to discover network devices?

We have a SCOM2012R2 management group with 6+ management servers. If I want to configure discovery of network devices,
1. can I use "All management servers" pool to discover them? or
2. Can I specify/reserve two of them just to do the discover and manage those network devices (a handful devices), and how?
3. If I create a resource pool contains only those two MSs, do I need to remove them from "All management servers" pool?

Yes, you can create one discovery rule per management server or gateway server.
http://blogs.technet.com/b/ptsblog/archive/2011/11/28/network-monitoring-with-system-center-operations-manager-2012.aspx
Operations Manager supports monitoring of the following number of network devices:
2000 network devices (approximately 25,000 monitored ports) managed by two resource pools
1000 network devices (approximately 12,500 monitored ports) managed by a resource pool that has three or more management servers
500 network devices (approximately 6,250 monitored ports) managed by a resource pool that has two or more gateway servers
Also you can refer below link
http://technet.microsoft.com/en-us/library/hh212935.aspx
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"

Seed mailbox database copy through replication network (DAG members on different subnets in different sites)

Good afternoon
I currently operate a two node DAG in our primary site supporting one mailbox database. I plan to introduce a third DAG node in our datacenter which is in a different Active Directory site. Both current DAG members replicate over a dedicated replication
network to keep the traffic separate from the MAPI traffic. The third DAG member will also have a dedicated replication network adapter (of course, on a different subnet). Ideally I would like to seed the database at a time of my choosing, rather than at the
moment I add the mailbox database copy (I know how to achieve this), but I would like to specify which network the data replicates over.
According to the following (see below link) under the 'Seeding and Networks' section as my two DAG members will be on different subnets in different sites Exchange will make the decision to use the MAPI network adapters of the target and source server.
'If the source server and target server are on different subnets, even if a replication network that contains those subnets has been configured, the client (MAPI) network will be used for seeding.'
http://technet.microsoft.com/en-us/library/dd335158%28v=exchg.150%29.aspx
Am I able to force Exchange to use the replication network adapters of both source and target server when I initiate the seeding process? I have a 200+ GB mailbox database that will need to replicate over a 100Mbps internet connection to our secondary
site and I would like to keep that traffic to the replication network I have configured.
Any insight would be helpful.

Hi,
If you want to specify the networks for seeding, you can use the
Network parameter when running the
Update-MailboxDatabaseCopy cmdlet and specify the DAG networks that you want to use.
If you don't use the Network parameter, then the system uses the following default behavior for selecting a network to use for the seeding operation:
If the source server and target server are on the same subnet and a replication network has been configured that includes the subnet, the replication network will be used.
If the source server and target server are on different subnets, even if a replication network that contains those subnets has been configured, the client (MAPI) network will be used for seeding.
If the source server and target server are in different datacenters, the client (MAPI) network will be used for seeding.
So please use the Update-MailboxDatabaseCopy cmdlet with
NetWork parameter to specify which DAG network should be used for seeding.
Best regards,
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Belinda Ma
TechNet Community Support

Discover network devices

Hello all,
I'm trying to understand the 'network discovery' method and wanted to know what kind of devices it can discover using this method?
thanks

It will and can discover just about anything attached to the network but most of those devices can;t be managed in any way and or very limited information is collected so doing this typically isn't done at all as it simply clutters ConfigMgr.
Jason | http://blog.configmgrftw.com

2 different subnets on single vlan

I have this setup.
2 3750G switches stacked.
I have 2 servers with IP 10.10.10.1/30 and 10.10.10.2/30 connected into port g1/0/1 and g1/0/2 respectivily on switch1 both in vlan 100
I have another 2 servers with IP 10.10.20.1/30 and 10.10.20.2/30 connected into port g2/0/1 and g2/0/2 respectivily on switch2 both also in vlan 100.
I need to keep this same vlan across the stack. In theory servers on same subnet in vlan 100 should be able to communicate properly, or am I wrong?
What can I do to prevent broadcasts from propagating between subnets of this single vlan?

Edison
Perhaps I read the post from Sparky slightly differently than you do. The first pair of servers are in the same logical subnet and in the same VLAN so they should communicate with each other fine. And the second pair of servers are in the same logical subnet and in the same VLAN so they should communicate with each other fine.
But I agree with you that there are flaws in this implementation. First, since the subnets are /30 they only allow two hosts and with two servers in the subnet there is nothing to act as a gateway and to provide access to "remote" addresses. Also this implementation breaks the assumption that there is a correlation between subnet and VLAN. We tend to assume that a correlation exists and that a subnet is related to a VLAN and a VLAN is related to a subnet. But VLAN is a layer 2 concept and subnet is a layer 3 concept and they are not necessarily related. There is no rule that says that a VLAN have only 1 subnet (though that is common practice). A VLAN interface with a primary IP address and a secondary IP address would certainly support 2 (or more) subnets.
Note that this implementation does not provide the isolation that we tend to assume when we talk about subnets. We generally assume that devices in 1 subnet do not communicate directly with devices in a different subnet (because we tend to assume that each subnet is a separate broadcast domain). But this implementation puts both subnets into the same broadcast domain. So the first pair of servers will hear all the broadcasts (including ARP) from the second pair of servers and any of these servers could communicate directly with any other of the servers - certainly not bounded by the subnet.
Sparky
There is no way to isolate the broadcasts within the same VLAN. The basic definition of VLAN is that it is a broadcast domain. And any broadcast generated will be flooded thoughout the entire broadcast domain. The only way to restrict the broadcasts is to create 2 VLANs.
HTH
Rick

ISE 1.2 network device editing

I have upgraded to ISE 1.2 and the latest patch and noticed a bug where editing network devices, you are unable to save changes as the "Save" button is greyed out. It also appears to have SNMP unchecked for all devices even though there is configuration for them.

Hi
Make sure that you have defined Security Group Access (SGA)-enabled devices in Cisco ISE to process requests from SGA-enabled devices that can be part of the Cisco SGA solution. Any device that supports the Security Group Access solution is an SGA-enabled device.
SGA devices do not use the IP address. Instead, you must define other settings so that SGA devices can communicate with Cisco ISE.
If you are importing network devices from previous release then You cannot import network devices in Cisco ISE, Release 1.2 that are exported in previous Cisco ISE, Releases 1.1 and 1.1.x as the import template for these releases are different.
You can import a list of device definitions into a Cisco ISE node using a comma-separated value (CSV) file. You must first update the imported template before you can import network devices into Cisco ISE. You cannot run an import of the same resource type at the same time. For example, you cannot concurrently import network devices from two different import files.

How to import network devices on ISE 1.2

Hi, experts,
I'm trying to import network devices on ISE 1.2.0.899
so I downloaded the template and opened with notepad and wrote all the nessesarry information.
and I tried to upload to ISE, and it just said import failed. no reason..
does anyone know how to do it ?

Hi jiyoung
This import failed error might occur due to following reasons so please make sure that :
You are not running two import jobs of the same resource type at the same time. For example, you cannot concurrently run two import jobs to import network devices from two different import files.
More over please make sure that while configuring the network devices you are performing job from a super admin or network device admin group.
Best Regards:
Muhammad Munir
Hi, experts,
I'm trying to import network devices on ISE 1.2.0.899
so I downloaded the template and opened with notepad and wrote all the nessesarry information.
and I tried to upload to ISE, and it just said import failed. no reason..
does anyone know how to do it ?

Remote content crawler on a file directory in a different subnet

I'm trying to crawl a file directory that is on our company network but in a different subnet. It seems to be set up correctly, because I have managed to import most of the documents to the knowledge directory. However, when running the job a few times, sometimes it succeeds and sometimes it fails, without consistency. The main thing I notice is that it doesn't import the larger files (>5 MB), but our maximum allowed is 100 MB. Even when the job runs "successfully" there is a message in the job log:
Feb 21, 2006 12:08:14 PM- com.plumtree.openfoundation.util.XPNullPointerException: Error in function PTDataSource.ImportDocumentEx (vDocumentLocationBagAsXML == <?xml version="1.0" encoding="ucs-2"?><PTBAG V="1.1" xml:space="preserve"><S N="PTC_DOC_ID">s2dC33967209AEE4710C5ED073C04B3EDCF_1.pdf</S><I N="PTC_DTM_SECT">1000</I><I N="PTC_PBAGFORMAT">2000</I><S N="PTC_UNIQUE">\\10.105.1.33\digitaldocs\s2dC33967209AEE4710C5ED073C04B3EDCF_1.pdf</S><S N="PTC_CDLANG"></S><S N="PTC_FOLDER_NAME">s2dC33967209AEE4710C5ED073C04B3EDCF_1.pdf</S></PTBAG>, pDocumentType == com.plumtree.server.impl.directory.PTDocumentType@285d14, pCard == com.plumtree.server.impl.directory.PTCard@1f6ef01, bSummarize == false, pProvider == [email protected]4)ImportDocumentExfailed for document "s2dC33967209AEE4710C5ED073C04B3EDCF_1.pdf"
When the job fails, there is a different message:
*** Job Operation #1 failed: Crawl has timed out (exception java.lang.Exception: Too many empty batches.)(282610)
I tried increasing the time out periods for the crawler web service and the crawler job. That didn't seem to work. Any suggestions?

Hi Dave,
Did you fix this issue? I'm having the same error.
Thanks!

SCOM Network Device Alerts

Hi,
In our environment we are using SCOM 2012 to monitor Servers and network Devices.we discovered network devices but the display name of the device is looking like 134.sub-91-245-149.ymzvw.com and the same is displayed in alerts so it is very difficult
to trace out the name and location of the device.But and in the property of the device it shows location and primary owner name of the device it will be helpful if i change the display name to its location name.
Is there any way to change the display name of the device to its location name.
Is there any way to modify the alerts so that it will be easy to figure out the location and name of the device.
Thanks in advance
Thanks Siva Aadhi-CIT. MCITP

I have resolved part of my issue. Display name and full path name
     is now same as MIB2 System Name. Apparently Display name and
     Full path name is pulled from DNS. So i was about to resolve part of
     my issue with just deleting the device from SCOM. creating DNS A record
     and re-discovering the device. but still when it comes to alert.. it shows
     MAC address as part of Path instead of display name or MIB2 Displayname.
http://social.technet.microsoft.com/Forums/systemcenter/en-US/fab18884-3a08-4684-99da-c6a9b801054f/scom-2012-network-monitoring-alerts>
Have a nice day !!!

Same network device gets discovered multiple times in scom

Hi All,
In SCOM 2012 , Same network device gets discovered multiple times.
For example, if we have an ip address 10.91.180.43 added to Network discovery rule.
When Discovery is run few times.
its gets discovered multiple times and shows 3 or 4 times under Network Devices.
Please help me to fix this issue.
Thank you
Siva

Hi dktoa,
Thank you for the quick reply. i would like to explain my issue in clear.
For example, if we have an ip address 10.91.180.43 added to Network discovery rule.
When Discovery is run few times. its gets discovered multiple times and shows 3 or 4 times under Network Devices. And it gets listed multiple times with same ipaddress not with different ip.
it will look like this
10.91.180.43
10.91.180.43
10.91.180.43
---- I read both articles, they are were interesting.
Do you mean to say that my issue will get fixed , if i change the AccessAddressFormat = "AUTOADDRESS" as
AccessAddressFormat = "LOOPBACKADDRESS"
Please guide me if i am wrong.
Thank you once again.
Regards
Siva

Network devices discovered but not managed

SCOM 2012 R2 management group. A dedicated network monitoring resource pool consists of two MSs. These two MSs have been removed from AMSRP and other two default resource pools (AD.., Notification...) - is this correct?
Two discovery roles:
role1 runs on GWS1 discovered (explicitly) 5 devices and shown all "healthy". This rule was using AMSRP to monitor, but changed to the dedicated pool after it was created.
role2 (added after the dedicated resource pool was created) runs on GWS2 discovered (explicitly) 2 devices but shown as "not monitored"
How to find out what's wrong? (log files etc?)
Anything need to check with the resource pool settings?
Thanks.

Hi,
Do you mean that you have discovered the two network devices on your Management server, but it is not monitored.
This issue maybe caused by the proper management pack was imported, please go through the below article to get more information about how to monitor network device by using SCOM:
http://technet.microsoft.com/en-us/library/hh212935.aspx
Network Monitoring using System Center Operations Manager 2012
http://blogs.technet.com/b/rohitkochher/archive/2011/11/26/network-monitoring-using-system-center-operations-manager-2012.aspx
Regards,
Yan Li
Regards, Yan Li

URGENT !!! Two physical network interface with two completely different subnets - No bridges - cannot connect both

This is my urgent problem:
I have a physical machine with two physical network interfaces. I have a VMWARE player installed and a virtual machine that must use both cards on two different subnets, one directly public on the router and one intranet inside the company.
How can I just tell one net card to go on that sub and the other on the public sub ? Going crazy. Please help.
Thanks,
P.

Using VMware Player Virtual Network Editor, create a additional bridged VMnet and bind each bridged VMnet to a different physical network adapter... on virtual machine, create a virtual network adapter to each subnet, and bind each virtual network adapter to a different bridged VMnet.
For additional help with virtual network editor, check this KB: VMware KB: Using the Virtual Network Editor in VMware Workstation

Profile Manager on Devices on a Different Network

Hello,
I currently have profile manager setup and working on 266 iPads. After I set them all up, 66 of those iPads moved to a temporary location accross the street. They are using a different network then my server. (different line, gateway, firewall ect).
My question is, is there any way I can push out apps / update profiles to those 66 iPads? I do not want to change any settingso on the iPads if possible. Please let me know any suggestions you guys have.
I have a mac mini server 10.8.5
iPads are running 7.0.2
Profile mangager works completely fine on the devices in the network.

I to am having this issue. My Mac mini server is hosted in a datacenter off-network from my other devices. Currently, the only way to grab updates is to VPN into the server to have them pull down to the client machines. I run a mix of MacBook Pros, iPhones and desktop Macs.
A solution on this would be extremely helpful, as I do not want the end users to have to VPN in to pull an update from the Profile Manager all the time.

Can members in a pool be on different subnets using CSM

Hello. We have recently been investigating load balancing devices, and were almost set on F5. We then overhauled our core network, including replacing one 4507R with 2 6500's, outfitted with Sup720's and FWSM modules.
Now, we are seriously thinking about investing in the CSM or ACE module instead of the F5. I was wondering if the servers in my virtual pool can be on different subnets?
For example, the user is looking for a web server with an IP of 192.168.110.1. This virtual ip is setup on the CSM module, and contains three physical servers, 192.168.110.10, 192.168.110.20, and 10.10.10.1 (server in a different data center, only to be used if the two primary servers go down). Will this work, or do all members in the pool need to be on the same subnet?
Thanks.

I would recommend the following test results published by veritest
http://www.lionbridge.com/NR/rdonlyres/5518CDEC-0D57-446E-8E3D-2AE73DCB7EEF/0/csm_comparison.pdf
Gilles.

Discovering Network devices on 2 different subnets

Similar Messages

Maybe you are looking for