Finding username in user Tracking in Cisco works

Hello ,
In user tracking under Campus manager, I'm getting MAC addresses , hostnames and IP address of the station and Username column is empty. How to get usernames?. From Ciscoworks manual, it says that I have to run UTLite script ?. Where I can find this script and how to run this?. Does it require to run this script only once or always ?. Does it require any configuration change on Active directory Domains side to discover the users ?.
Thanks in advance
Raju

See http://www.cisco.com/en/US/products/sw/cscowork/ps563/products_configuration_example09186a00801a9ff6.shtml on where to get the UTLite script in CiscoWorks and how to install it. For troubleshooting UT, see: http://www.cisco.com/en/US/products/sw/cscowork/ps563/products_tech_note09186a0080094949.shtml#ts2

Similar Messages

Problem with user tracking in cisco prime Lms

i attach my senario pic ,
i use snmp v3 for my switch ,,
discover -- ok
synchronization ---- ok
net config and config edit ----- ok
but my problem is
report / inventory / user tracking / quick report ---------------------------------------- i take this notification for all report : no end hosts found
i install UTU but this program can not found any record too .
please help me

NMS servers access the Bridge-MIB data from devices, to get the MAC/CAM table. Because MAC-address or CAM table is maintained on device/VLAN basis, so query needs to be made per VLAN based.
In snmp v1/v2c SNMP Community String Indexing is used. Where vlan is polled by adding VLAN number after community string after @ sign. Example to see all the mac-address table from VLAN 1, if the community is test123, device would be polled like :
snmpwalk -v2c -c test123@1 10.10.10.1
The syntax is [community string]@[instance number].
For snmp v3 this is not an option, as it cant use SNMP community string indexing. So all the MAC/CAM table needs to made snmp v3 context aware, which exposes BRIDGE-MIB data to SNMP v3.
You must use contexts to get per-VLAN data from the BRIDGE-MIB with SNMPv3.Not all the IOS switches support this. In general, if the device supports the "show snmp context" command, contexts will work. If not, an upgrade is needed. However, some switches (e.g. 2950 series) will never support SNMPv3 contexts. You must use v1/v2c with these switches.
Very simply, you need to add the context to the SNMP group to allow your users to poll the given context. For example, to allow users to poll the BRIDGE-MIB for context vlan-6, you would add something like:
snmp-server group v3group v3 auth context vlan-6 read
You should add all those exact name after context which you see in output of show snmp context.
Also, about UTU, it is just a small utility tool to access the LMS User Tracking DB externally to show the UT data, so unless LMS has UT data in its DB, UTU won't a difference either.
-Thanks
Vinod
**Encourage Contributors. RATE Them.**

User tracking not finding any hosts in Ciscoworks LMS 3.1

L.S.
Our test-configuration is as follows:
Application versions:
Ciscoworks LMS 3.1
Ciscoworks Common Services 3.2.0
Campus Manager 5.1.4
We have 31 managed devices in Campus Manager (data has been collected on all),
Edit: All of them show up green in the topology window.
The device are: 2 6509 cores (running IOS s72033_rp-IPSERVICESK9_WAN-M version 12.2(18)SXF8), 1 ASA firewall (running ASA-OS version 8.0.5) and 29 switches (2960 and 3560 models both running ios version 12.2(52)SE). The switches are connected as follows:
User tracking jobs are running normally, but aren't finding any end-hosts or IP phones at all (I suspect around 250-500 hosts+ on these switches)
We are running SNMP v3 on the switches and have added the following configuration items to all the switches:
snmp-server group readonly v3 auth context vlan-1
<repeat for all present snmp-contexts as shown in show snmp context output>
snmp-server group readonly v3 auth context vlan-83
Debugging is enabled in CM->Admin->Debugging Options->User Tracking Server
This is the UT.log file of the last major acquisition:
messages will remian logged to file: D:\PROGRA~1\CSCOpx\log\ut.log
2010/01/13 14:00:01 main MESSAGE ProcessInitializer: Properties will be read from D:\PROGRA~1\CSCOpx\campus\etc\cwsi\ut.properties
I= 0value *.*.*.*
I= 1value 6
I= 2value 1
2010/01/13 14:00:01 main MESSAGE DBConnection: Created new Database connection [hashCode = 10969598]
PartialOrderNode tree dump: time base = VMPSMajor
<root>
    VMPSMajor: <root>
    VMPSMajor:     VMPSMajor.GetXMLData
    VMPSMajor:         VMPSMajor.PingSweep
    VMPSMajor:         VMPSMajor.PopulateFromDCR
    VMPSMajor:             VMPSMajor.GetPortStatus
    VMPSMajor:                 VMPSMajor.GetBridgeTable
    VMPSMajor:             VMPSMajor.Sweep
    VMPSMajor:                 VMPSMajor.GetIpXlateTable
    VMPSMajor:                 VMPSMajor.GetIpv6XlateTable
    VMPSMajor:                     VMPSMajor.GenerateTable6
    VMPSMajor:                         VMPSMajor.GenerateTable
SMFunction evaluation order: time base = VMPSMajor
VMPSMajor.GetXMLData Major
VMPSMajor.PingSweep Minor
VMPSMajor.PopulateFromDCR Major
VMPSMajor.GetPortStatus Minor
VMPSMajor.Sweep Major
VMPSMajor.GetBridgeTable Minor
VMPSMajor.GetIpXlateTable Minor
VMPSMajor.GetIpv6XlateTable Minor
VMPSMajor.GenerateTable6 Major
VMPSMajor.GenerateTable Major
Time base VMPSMajor has 5 major nodes and 3 minor traversals.
log4j:ERROR No appenders could be found for category (CTM.common).
log4j:ERROR Please initialize the log4j system properly.
In classlist loader
In classlist loader processing sub classes
updation done
In classlist loader completed
2010/01/13 14:00:03 main MESSAGE DBConnection: Created new Database connection [hashCode = 12524859]
Calling default
Subnet to SubnetData Map Size :73
2010/01/13 14:01:31 DBConnecton-Reaper MESSAGE DBConnection: Closed Database connection [hashCode = 12524859]
2010/01/13 14:01:31 DBConnecton-Reaper MESSAGE DBConnection: Closed Database connection [hashCode = 10969598]
2010/01/13 14:04:50 main MESSAGE DCRDevWrapper: Closing DCRProxy
I'm slowly getting to a dead end here. What am I missing?

Well, our problem was resolved finally through a weird coincendence after having a websession with a Cisco TAC engineer (TAC case SR 613376661)
We changed the
snmp-server group readonly v3 auth context vlan-xxxx
commands in the switches to:
snmp-server group writeonly v3 auth context vlan-xxxx
that is: use the writestring in the snmp-server groups instead of the read string.
After we changed that, all of the User Tracking mysteriously started working.
As far as I know, the writestring should not be needed, but apparently it is....
Is there any explanation for this?

LMS User Tracking for NEXUS 5548UP

Dear,
A while ago I received a ticket from one of our customers because User Tracking was not working for NEXUS 5548UP on LMS 3.2. I opened a TAC case for this but this was normal since it is a Datacenter switch. Now the customer came back on this because they really want to see which server is connected to which switch port. I understood from the TAC engineer this is not on the roadmap to integrate in LMS 4.x. They want to know if there exists another product (they thought about DCNM) and wanted to know how this integrates or works together with LMS...
Kind regards,
Sven Laureyssens

My latest understanding of User Tracking and Nexus 5K series is that it is not supported due to a limitation of the MIB support in the NX-OS.
The current DCNM (release 5.2) is distinct from the LMS and Cisco Prime umbrella but that wil be changing a bit moving forwad as DCNM is enhanced and rolled into the Cisco Prime family. Last I heard there should be some information coming out of Cisco Live this week and a new release will have some additional functionality and better integration. Still, I doubt we'll see UT for the 5K due to the NX-OS limitation.
One way to do what you're asking apart from use of any of the Cisco products is to enable LLDP on your Nexus and servers. That will at least give you the ability to pull the information from the NX-OS command line ("show lldp neighbor")

LMS 3.2 and user tracking problem

rme 4.3.1
cm5.2.1
cv 6.1.9
dfm 3.2.0
ipm 4.2.0
portal 1.2.0
cs 3.3.0
cwasst 1.2.0
running on windows server 2008.
This was a clean bulid, and we imported all pertinent data from our old lms 2.6 server. This was in september 2010. Everything worked as expected and continues to work except for......
We are in an upgrade cycle for our 4500s. We are upgrading from 12.2.50-sg4 to 12.2.50-sg8, and also upgrading rommon to 12.2.31r-sga4.
It appears that user tracking is not working anymore for the upgraded 4500s. UT still runs, and works perfectly for all other devices, including the 4500s that have not been upgraded yet. I know this sounds goofy, but it really does seem to be the common denominator. I've checked the windows updates, package updates, etc in trying to figure out what made this happen. It really does all come back to upgrading to the above version. All aspects of this server are running great and as expected, it's just that UT for the upgraded 4500s isn't working anymore. I do run the logbackup script weekly (past experience has taught me to do this), and try and keep up with any patches or package updates, etc.
If anyone has seen something similar or can suggest anything, I'd appreciate it. I think I am going to have to open a case on this. Thanks - chris

Michel,
Indeed, it looks like that is the problem. I guess I was focused in on CW rather than the whole picture. But yes, indeed, if I walk the mac table for a vlan on a 4500 that has not been upgraded it works. If I do the same on an upgraded one, I get nothing.
The cautious optimism is that we do have a sup6 at our DR location that is running 12.2.53-sg1 and this test works on that switch. So as long as that
version isn't deferred, we'll test that on one of the older sups to verify.
So thanks for the help, I appreciate it - chris

User tracking ip/host resolution how it works

I know usertacking using layer 3 devices to resolve host name/ ip address. on my case devices are behind the firewall and the devices not on my router arp table . the arp table is on firewall show the mac. however interestingly usertracking still resolve the name.the firewall is not even a cisco brand. that is very new to me and I im thinking may be i am not fully understand user tracking. can some one explain to me. thanks in advance

I've been meaning to write up a doc on how UT works. In the meantime, for layer 3 resolution, UT does a few things. Historically, it has always tried to acquire ARP entries from layer 3 devices in the network during its acquisition cycles. A layer 3 device need not be a router. It can be a 3560 switch, for example. Firewalls (even Cisco firewalls) are not supported for this. Using this layer 3 info, UT will perform a reverse lookup to get a hostname for the end host.
The next thing UT does to get layer 3 information is to listen for UTLite updates from Windows hosts. These updates will contain the MAC address of the client, the username logged into the client, and the IP address of the client. UT will not do a lookup of this information to get a hostname, however.
Finally, UT can query switches for DHCP snooping details to find an IP address. This is dependent on dynamic UT being enabled, and that the end host triggered a MAC notification trap to be sent. Of course, the switch to which the user connects must have DHCP snooping enabled. Again, UT will not perform a hostname lookup on this IP.
My guess based on what you describe is that you have some layer 3 devices in your network like 6500s, 3560s, 4500s, etc. that have some ARP entries populate, and UT is using these to get IPs. That assumes you're seeing hostnames. If you are only seeing IPs, then you could be using UTLite or dynamic UT with DHCP snooping.

Problem with user tracking Cisco Prime lms 4.2

Hi
When I use the User tracking utility, it dont find the usernames, I dont kwow if I have to use the tool UTlite33.exe un all end host or not, please helpme.

Hi Andres,
Check this ::
Understanding UTLite
UTLite is a utility that allows you to collect user names from Primary Domain Controllers, Active Directory, and Novell servers.
To do this you need to install UTLite in the Windows Primary Domain Controllers and in the Novell servers. You can also install UTLite in an Active Directory server.
UTLite sends traps to LMS whenever a user logs in or logs out. UTLite traps are processed by LMS at the rate of 150 traps per second, with a default buffer size of 76800.
Follow the below link and it should help:
http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.0/user/guide/admin/appendixcli.html#wp1032284
Thanks-
Afroz
[Do rate the useful posts]

LMS3.2 User Tracking IP Phones Discovery Doesn't Work

I am having difficulty getting the User tracking for IP Phones to work correctly in Ciscoworks LMS 3.2.
Callmanager is version 7.1.5.10000-12. Campus manager version is 5.2.1
The Callmanager publisher and two subscribers are all showing as application servers with green icons under the topology services view.
The callmanagers show as CDP neighbours on the switches to which they are connected.
I can do an SNMP walk of the ccmPhoneTable from the Ciscoworks devicecenter and get a ton of returned data.
The IP phones are discovered as end hosts and have mac address and IP address info when checked in the User Tracking utility.
Callmanager sysObjectID = OID: CISCO-PRODUCTS-MIB::ciscoMCS7835I
Any help you could give with troubleshooting would be greatly appreciated.
Regards
Rob

Thanks Nick,
I had seen that document and been through the processes
The mac and IP addresses of the ip phone are discovered.
The callmanagers are discovered and have green application server icons in the topolgy view
I can do an snmpwalk of the ccmPhoneTable OID and get returned data (as per this post by JClarke https://supportforums.cisco.com/message/664859#664859)
I can't do an snmpwalk of the ccmPhoneExtension as described in that document but I assume that since it applies to campus manager 3.2 and 3.3 that it is a bit dated and not relevant to later versions of callmanager.
I think that I have covered all the basic cdp/snmp and discovery issues. Any suggestions on where to go from here would be appreciated.
Regards
Rob

LMS 4.2.4 User Tracking End Host Report The system cannot find the path specified

Hello at all,
I have a problem when creating a scheduled User Tracking End Host Report.
I always get the message "The system cannot find the path specified" and the job fails.
An immediate report is successful.
I tried to change the "Report Publish Path" from "C:/Program Files (x86)/CSCOpx/" to "C:/PROGRA~2/CSCOpx/", but that did'nt worked.
Has anybody an idea?
Regards, Kerstin

Share the screenshot of the following directory :
NMSROOT\CSCOpx\campus\etc\cwsi
In case it is blank, try following :
1.Stop the services : net stop crmdmgtd
2.Take a copy of > C:/Progra~2/campus/etc/users and place it under C:/Progra~2/campus/etc/cwsi
3.Start the services : net start crmdmgtd
Please try and let me know the updates.
-Thanks
Vinod
**Encourage Contributors. RATE them.**

User Tracking empty "UserName" field

Hi,
Does anyone know why the 'User name' column in Campus User Tracking Report is empty.
How CiscoWorks reads the UserName from Windows stations?
Thanks.

You need the utlite script to run on the users PC to make it upload the username.
It is usually made part of the login script on the DC
http://www.cisco.com/en/US/partner/products/sw/cscowork/ps563/products_configuration_example09186a00801a9ff6.shtml
Cheers,
Michel

Cisco Prime - User Tracking for N5K

Hi,
We are using Cisco Prime LMS 4.2.4. It isn't getting any user tracking information from our Nexus 5K's. Should it be able to?

Indeed.
As I noted and Arfroz confirmed, the User Tracking functionality requires the target device supports the SNMP-BRIDGE-MIB. If that is important to you, then an upgrade is in order.
It's not a big deal to upgrade - just schedule some downtime and knock it out. The actual upgrade process only takes about 15 minutes per Nexus 5k. I usually schedule 1-2 hours for a pair of them just to allow myself time for some testing (and backout if necessary). I've done about dozen or two 5k upgrades and never had a problem yet - it's a very straightforward process.

Cisco Prime - Can I ping sweep devices to wake them up before the devices are acquired in User Tracking

I have some devices on my network (printers and security cameras) that go to sleep and do not show up in the ARP table under I ping them. Is there any way in Cisco Prime (before User tracking is acquired) to do some sort of ping sweep? If I do not "wake up" these devices in some way, then they do not show up in User Tracking.

Just set up the connection and it should not effect your connection to your pc
If you like a post, or want to say thanks for a helpful answer, please click on the Ratings star on the left-hand side of the post.
If someone answers your question correctly please let other members know by clicking on ’Mark as Accepted Solution’.

Track pad not working & cannot find server message when searching

I tried rebooting, the track pad has worked on and off for months and now when I try to search anything on the browser it comes up with a unable to find requested server message

Hi mugssy10,
Welcome to the BB Community...
I too was having some issue with my trackpad...atfirst it was not a permanent issue(at times trackpad was working and at times not), but later the trackpad tollay stopped working...i got it replaced by the BB service center...
So, i wud suggest u to visit a BB service center and get it clarified...do take backup of ur BB before going to a service center coz they will reinstall ur OS too after replacing the trackpad...
with regards
simply abhik...
Please click "Accept as Solution" if your issue has been solved and to give thanks/appreciation, click thumbs up...
For BB OS update: http://us.blackberry.com/software/smartphones/update.html
BB Simulators: http://us.blackberry.com/sites/developers/resources/simulators.html

Cisco Prime Infrastructure 2.1 - User Tracking

Hello All,
I am facing some issues with user tracking for wired clients. I have configured PI to track one particular mac address, such that every time that mac is identified in the network an alarm should be generated. I have configured mac notification also in the switch ports. I observed that when the device is connected the switch is sending the mac change notification to prime but alarm is not generated until I go to " Administration>Back ground tasks>wired client status" and manually execute the task. Our requirement is that the client should send some trap to prime and prime should poll the client on receiving the trap and update the client database, subsequently generate the alarm.
Thanks
Shabeeb Kunhipocker

Programmatic access to PI's data is via the REST API.
Check the help menu on your PI server to see documentation regarding the supported tables and fields that can be queried via that method.

Campus Manager User Tracking Report - dot1xEnabled = False

The Campus Manager User Tracking Report has the dot1xEnabled field that is always false.
It was my understanding that the switch will send SNMP Trap Notifications to Cisco Works regarding the status of 802.1x authentication per port.
We have configured per port:
snmp trap mac-notification added
snmp trap mac-notification removed
and globally
snmp-server host x.x.x.x abababa udp-port 1431 MAC-Notification
With no success, so we opened a TAC case, 614376387 and we were told by TAC and the Development Engineers that this "feature" does not work in LMS 3.2 and Campus Manager 5.2.1 and that this feature will be available in the next new release.
I thought I had read on this forum that some folks have this 'feature' working, where this field shows the current status of 802.1x per access port.
Has anyone been able to get this 'feature' to work? And if so, what versions are you running and what were the 'tricks' to get it working?
Much appreciated.

The MAC address notification traps only alert Campus to the fact that a MAC address has been learned or removed from a given port. That starts the dynamic UT process. With no other information, you will potentially see a new record appear in UT shortly after receiving the trap. However, that record will not have IP or username data associated with it.
To get the IP data, Campus will poll the CISCO-DHCP-SNOOPING-MIB to pull IP data. To get username data, Campus will poll the IEEE8021-PAE-MIB of the switch to get dot1x information. So, your switch must be configured for dot1x, and it must support this MIB (in particular, the objects dot1xAuthSessionTime, dot1xAuthSessionUserName, and dot1xPaePortCapabilities).
Without dot1x, hope is not lost. If the end host is running Windows and the UTLite tool, then when the user logs in, UTLite should start from their logon script, and send a UDP update to Campus with the username and IP of the host.

Finding username in user Tracking in Cisco works

Similar Messages

Maybe you are looking for