ISG - ASR1002 config change

Hi Support Team,
We have had two instants - when there was an outage on our broadband customer.
Our 'rancid' server was able to pick up the change in config on one of the BRAS - AS1002
Config change is attached below...this was removing and adding the configs as noticed by the Rancid Server.
Any assistance anyone can give in identifying the root cause will be very much appreciated as so far the ASR log has no indication that the change was manually done by any of our users.
- class-map type traffic match-any ISG_OPENGARDEN
- match access-group output name OPENGARDEN_ACL_OUT
- match access-group input name OPENGARDEN_ACL_IN
+ class-map type traffic match-any Empty-Class
class-map type traffic match-any L4REDIRECT
match access-group input name L4REDIRECT_ACL_PORTAL_IN
- class-map type traffic match-any Empty-Class
+ class-map type traffic match-any ISG_OPENGARDEN
+ match access-group input name OPENGARDEN_ACL_IN
+ match access-group output name OPENGARDEN_ACL_OUT
class-map type control match-all IP_UNAUTH_COND
match timer IP_UNAUTH_TIMER
We are looking forward to hear from anyone who can throw us some light into this 'strange issue'
Thankyou in advance,
RWaqa

Hi,
You can select particular absence/Attendance types in this table V_T554S_ESSEX ... based on selection in this table you can restrict entries in CAT2/ ESS portal.
Try this it may help.
Thanks

Similar Messages

Is there a way to find all config changes between clients and sap system

We have our Dev system with clients
310 - Developer make changes and create transport
400 - Test client
410 - a copy of our Production system (over 1 year ago0
TST - this is our quality system with one client
101
Production system one client
101
I know if i do a database copy from Production to our TST system, both systems would be exact.
Abaper Director wants to know all the configuration changes that are different between Devopment client 310 - Test and production.
I told him that in development client 310 the abaper or functional users make most of the changes if they do not get transported they would be missing.
I cannot copy to client 310 otherwise we would loose all of our version management.
Is there another way that I can see the config changes between all these clients.
Thanks
Joe

You should be able to use tcode SCU0
Regards,
Brian

ACS will not save the config changes to reports

I have configured a very old ACS appliance, 4.1. At this time this is what I we have to use. The authentication is working fine, the reports for accounting, TACACS+ accounting is only saving the login and logout of the users and not any config changes that are being made.
I'm hoping that someone may have an idea of what accounting command I am using or if this older version has some changes that need to be done as the config/aaa lines I use today and work on newer version work. I was under the impression that this line "aaa accounting exec default start-stop group tacacs+" would send every command to the tacacs server?
aaa new-model
aaa authentication login default group tacacs+
aaa authorization config-commands
aaa authorization exec default group tacacs+ none
aaa authorization commands 0 default group tacacs+ none
aaa authorization commands 1 default group tacacs+ none
aaa authorization commands 2 default group tacacs+ none
aaa authorization commands 7 default group tacacs+ none
aaa authorization commands 15 default group tacacs+ none
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
any ideas would be3 appreciated. thanks for reading
Yvon

Hi martijn,
Are there some custom fields in this list or some duplicate columns? Please have a check.
For more information about the possible reasons and solutions, see
http://social.technet.microsoft.com/Forums/en-US/sharepointcustomizationprevious/thread/ae946f73-3126-41ad-833b-25e4cc2b7723#e22af3fe-8203-45c4-8d19-e18041a048e2
http://social.technet.microsoft.com/Forums/en-US/sharepointgenerallegacy/thread/59895a6b-7f61-431f-a762-e3fd9d81fe34
http://social.technet.microsoft.com/Forums/en/sharepointcustomizationprevious/thread/eba4cd7e-498a-465f-adea-decae44d7a8c
Regards,
Kelly Chen

%ONLINE-SP-6-REGN_TIMER: multiple line cards down after config change

Hi,
I was wondering if someone could help.
I recently changed the entire configuration on two 6509 switches, and the fibre modules on slot 7 and 8 have gone down on BOTH switches. It would be easy to say that its a hardware fault but I cannot understand how module 7 and 8 can go down on both switches. Initially I thought it maybe due to IOS bug 22-33.SXI2a.bin" so I upgraded it to s72033-advipservicesk9_wan-mz.122-18.SXF12a.bin but it still down.
These are the actions I have carrried out to try resolve the issue:
- Reverted back to orginal configs but no luck
- Tried to use "power enable" command but the status light on both modules seems to turn red and then go off again.
- I have also tried to put one of the fibre modules into a different slot but no joy
- Upgraded the IOS from 22-33.SXI2a. to 122-18.SXF12a
I am running out of ideas.. can anyone help ? I am sure that hardware fault cannot occur on BOTH modules 7 & 8 on BOTH switches after config change.
The error in the log shows that modules "failed to bring online because of registration timer event". I understand this means that it is unable to download the image within the allocated time.. maybe I could manually copy the image onto the line card if that is possible ?? any ideas ?
Daughterboard         WS-SUP720          SAL135063V2 4.0    Ok
7 Centralized Forwarding Card WS-F6700-CFC       SAL1419HKJK 4.1    PwrDown
8 Centralized Forwarding Card WS-F6700-CFC       SAL1419HAG0 4.1    PwrDown
Mod                                                      Hw    Fw           Sw           Status
7 5475.d016.075c to 5475.d016.075f   3.1   Unknown      Unknown      PwrDown
8 5475.d0bb.7404 to 5475.d0bb.7407   3.1   Unknown      Unknown      PwrDown
System image file is "disk0:s72033-advipservicesk9_wan-mz.122-18.SXF12a.bin"
BOOT variable = disk0:s72033-advipservicesk9_wan-mz.122-18.SXF12a.bin,12;sup-bootdisk,1;
CONFIG_FILE variable =
BOOTLDR variable =
Configuration register is 0x2102
Standby is not present.
May 28 17:25:10.352: %C6KPWR-SP-4-DISABLED: power to module in slot 7 set off (Module Failed SCP dnld)
May 28 17:25:10.452: %ONLINE-SP-6-REGN_TIMER: Module 8, Proc. 0. Failed to bring online because of registration timer event
sm(cygnus_oir_bay slot8), running yes, state wait_til_online
Last transition recorded: (disabled)-> disabled (disabled)-> disabled2 (restart)-> wait_til_disabled (timer)-> may_be_occupied (timer)-> occupied (known)-> can_power_on (yes_power)-> powered_on (real_power_on)-> check_power_on (timer)-> check_power_on (power_on_ok)-> wait_til_online
May 28 17:25:10.452: %C6KPWR-SP-4-DISABLED: power to module in slot 8 set off (Module Failed SCP dnld)
May 29 11:41:16.601: %SYS-5-CONFIG_I: Configured from console by console

Would anyone know if the line cards are maybe failing due to Embedded Event Manager configuration ? The person who configured this lab has left the company so I am not sure what the EEM configurations actually mean.
The reason i am suspecting the EEM configuration is because the error in the log seems to suggest the module failed due to registration timer event.
May 30 14:47:00.366: %ONLINE-SP-6-REGN_TIMER: Module 8, Proc. 0. Failed to bring online because of registration timer event
Just trying to check all the possibilities as I have tried everything else,
event manager directory user policy "disk0:/fcp_eem"
event manager directory user repository tftp://10.11.x.x/xxx/
event manager scheduler script thread class default number 10
no event manager policy Mandatory.go_switchbus.tcl type system
event manager policy rp_test.tcl type user
event manager detector rpc ssh acl 60 event manager directory user policy "disk0:/fcp_eem"
event manager directory user repository tftp://10.11.216.145/FCPD/
event manager scheduler script thread class default number 10
no event manager policy Mandatory.go_switchbus.tcl type system
event manager policy rp_test.tcl type user
event manager detector rpc ssh acl 60

Prime Infrastructure 2.0 - Alert on Switch Config Change

We are in the process of testing out Prime Infrastructure 2.0, is there a way to get an alert when a device's configuration has changed, and send out what has changed in email? I have scheduled Config Archiving for all of my devices, and i can see the config differences when a changes is made in the Prime GUI, but we currently use Kiwi CatTools to send out emails that show what devices had configuration changes and what those changes were, it would be nice if Prime would do that so we could do away with that service. I have looked through all of the reports but do not see anything.

Hi,
I know this feature is there is LMS ,where you can configure the AUTOMATED Action based on Syslogs to get an Alert for config change or any other changes ,however I do not see this option available in PI 2.0.
Syslogs are not compltely supported in 2.0 but in PI 2.1 we should have the complete support for syslogs.
Thanks-
Afroz
[Do rate the useful post]

SAP BI System Copy with only Config changes, Not Data

Hi BASIS,
I have a requirement from a client to build a system landscape stratagy for their SAP BI system.
We have DEV - QA - PRD systems for SAP BI (7.0 SP 16)
Both DEV and QA are completely out of sync with PRD. We are doing development tasks directly on PRD. Now we have decided to re-sync the DEV & QA systems with PRD.
'System copy with Data' will be easier to implement. But our PRD DB size is nearly 3TB. The client is not ready to pay for the extra/temp. disk space for DEV and QA sync. ( We are on DB2).
Now, we have only one option left. Capture all Config changes from PRD and transport them back to DEV & QA. This is a tedious task and cause many inconsistencies.
Would anyone have any other ideas to bring the systems in sync with less time involved and less resources.
I am a SAP BI person. So dont know much about BASIS tasks. Please help me with any links of best practises or SAP notes.
Cheers

HI Reddy,
We came to know from our basis team that we do not have the Java Stack installed in our BI 7.x system yet.
As it is integrated with EP which has Java, our web reports are working.
1) But my question is still do we ned to install the Java Stack in our BI system as i do not find any Export to PDF option in EP for the reports (eventhough AS Java supports this).
2) Or can we use the existing configuration without Java STack integrated to EP for the new tools like Report Designer and Integrated Planning?
Regards
Kumar

Vbscript - detect config changes

not sure if this is the right community to post this kind of question but i am after some example of vbscripts to detect routing change for example like to know when someone add a new route entry, advertised in to our campus networks, would like to know the no of routing entries being added, now of routes in the routing table /etc including vlan changes, RPF failures within the environment and number of entries in our multicast table including new additions.
any example you can provide will be useful. thanks in advance.

Config Changes are Changes to Customizing Objects (e.g. through IMG). Config changes are usually settings that a functional user would do in comparison to technical changes that involve ABAP which would require a developer.
In general you could say that config changes are usually done by functional consultants whereas anything that involves ABAP coding is not config related.
E.g. You set up order types in IMG and transport those settings. If you would now make changes to your DEV config but didn't transport this you will have config differences between DEV and Q.
Hope that helps,
Michael

How to add config changes in Transport Request

Hi Experts,
We did some config changes in Logistics - General=>Material Master=>Configuring the Material Master=>Define structure of Data screen for screen sequence / Assign Secondary sequence / Maintain Order of Main and Additional Screens.
But while saving this config of Assign Secondary sequence / Maintain Order of Main and Additional Screens its not asking for Transport Request.
Even i checked in the menu of EDIT-Tranport entries, but the menu's are in disable mode.
Can anyone guide me how to add this two fields config changes in to TR?
Thanks and regards,
Anandhan

Hi,
This is really strage.
However you can try the following.
upon entering the config node, use the first menu option in which option "transport" would be there.
Upon clicking it, the same table opens in display mode.
Select the entries that you have created and use the option "include in transport"
When asked for, provide teh transport number.
Alternatively you can create a transport and them use SE10 to include entries from tables that you can select.
ou may need teh help of an experinced ABAPer or Basis to do it if you are not confortable doing it yourself.
However if the config effects multiple tables, then this is not a viable option as you need to know all the impacted tables.
hope this helps.

LMS 4.2.2 - RME Config Change

I am currently receiving emails from LMS 4.2.2 that alert me of a config change on my switches. The alerts are emailed after the periodic polling job that is run daily. My problem is the email contain only the ip address of the device. It would be nice to open the emails and see what change(s) made on the device. Does anyone know if this can be done? TIA

i have seen this with SNMP timeout needed to be increased.
please try to increase those values, and not the job completion values.
I just saw in CP LMS 4.2 that the values are assembled on a new page.
all of them ...
Admin > Network > Timeout and Retry Settings > Inventory/Config Timeout and Retry Settings
also in the navigator of the same last windows your screenshot is from try the device specific timeouts:
Admin > Collection Settings > Config > Edit the Inventory/Config Timeout and Retry Settings
HTH

SIP stops when upgrading from ASA from 8.4.1 to 8.4(2)8 w/ out config change? Why?

I have to be missiong something small in my config.
If I upgrade my ASA 5510 which I am routing and NATing off of, from 8.4.1 to 8.4.2.8, SIP stops. All phones go dead.
If I roll bck to 8.4.1, SIP comes up.,... Go bck to 8.4(2)8 nd SIP goes down.....
This is without mking any config changes.
I have looked at it so long, I must be overlooking something simple, simple, simple...

Have spent sIx hours in past 24 w/ Cisco TAC and they have a tin of caps as have I but can't figure out why there is a denial of SIP from inside outside and outside inside to/from sip providers three IP addresses. Have created new access lists, new access groups to allow all 3 ip's in & out, increased timeout, bypassed IPS, have both sip UDP & tcp allowed in/out, specified inspection to approve any any for all sip protocols in/out to/from Lync & mediation and nada.
To answer another question, yes I'm certain config doesn't change... I reloaded tge same running config from a bkup just to make sure.....
What I see in the logs coming in/out is the call does make it all the way through the SSM to the ASA..
What happens there is the head scratcher...
SiP even though allowed and even though I've specified it to push through inspection On ASA side is denied based on inspection rule...
I also tried using another one of my (unused) public IPs for only SIP thinking that maulybe there was a core conflict with multiple services NATd to the same public IP but that also did nothing.
On topology I only have a single location so I'm using my 5510 to route as well...
Have 1 IIS web server l, SQL, (ports clised except to obe vendor and am allowing via access list by their IP and ipsec,) Exchange, Lync, Ironport, Endpoint and everything else is 80/80...
Everything is on Server 08r2 w/ exception of web server and two boxes ( one stand-alone & one VM on hyper-v) I am running Server8 for Microsoft TAP engineering / validation airlift. Neither of those are attached to UC/UM at all...
I'm using dynect from dyndns for outside network web services and just piggybacking on time Warner metro e for internal (no physical DNS server)
When I look at caps everything is identical in the tcp and UDP trace even on sip except for the denial...
Which caps/logs would 'y'all like to see and I'll post em when I get home....
Is there a link to bug notes Jullio? Is it sip specific? Any possibility of it being just a name/cosmetic big I can force a work around to?
I recall when Asa first was released I had to specify port 25 allow instead of being able to simply say allow smtp .. That took 2 weeks but it allowed for a work around so whatever I can do/try I'm willing!! Someone may wanna tell TAC if it's a bug because after 6 hours yesterday they are saying there's not a bug... :)
Thanks all!!!!

Config change in cats

Hello everyone
Is there any config change to restrict the few attendance/absence subtype data from cat2 that can be made as nonvisible in ESS/Portal.So that employee cannot change the data.

Hi,
You can select particular absence/Attendance types in this table V_T554S_ESSEX ... based on selection in this table you can restrict entries in CAT2/ ESS portal.
Try this it may help.
Thanks

Generate SNMP TRAP when config changes

Hello,
Is there any way to generate a SNMP trap when new config is saved in ASA 5510?
We are running ASA 8.3
Thanks.

I have a clue about how to do it.
I use in the asa the fallowing command:
snmp-server host DMZ 10.153.50.5 community *****snmp-server enable traps entity config-change fru-insert fru-remove
And I setup a snmptrapd on a lin
/etc/snmp/snmptrapd.conf# Example configuration file for snmptrapd## No traps are handled by default, you must edit this file!# authCommunity log,execute,net public# traphandle SNMPv2-MIB::coldStart /usr/bin/bin/my_great_script coldux box.
But it doesn´t works when I do a config change, it doesn´t generate anything on the linux box log.
Any idea?
Thanks.

Send snmp when config changes

Hi all
I have an ASA 8.2 and I would like to know if theres any snmp trap that can be sent. when a configuration is made.
Thanks

You could try the following command.
snmp-server enable traps entity config-change
This is assuming you have your authentication correctly configured as you would need your users to use the same password as their login password for the enable password. for example:
aaa authentication enable consol LOCAL
Please remember to select a correct answer and rate helpful posts

ASDM not applying config changes

Hi
I am running version 9.1(1) and ASDM 7.3.1 as Cisco recommended.
It looks like the creating of objects or something similar doesn't get applied. I don't see any progress bar window which generally says applying your config changes. So after a while when u want to save , it will ask you haven't applied. Then again when u say apply, it just doesn't do anything.
Has anyone seen this issue before.
Regards
Mohit
Sent from Cisco Technical Support iPad App

it is 6. I tried using 7 but that completely stuffed the ASDM. I couldnt even open ASDM at all fromt that version. So i rolled back to 6 but still the same issue where i cannot apply after making major changes.
i can make minor rules addition deletion but trying to create objects never helped me so far.
i was thinking of downgrading the asdm version to 7.1.1 which is the min required for this IOS 9.1 (1), any suggestions??

What SRM config changes will need to take place with a change to Plant

Hi
Please could you tell me What SRM config changes will need to take place with a change to Plant, Co Code, Purchasing Org, Purchasing Group,
Cheers
B

Yes Disha loads more questions,
is it simply a GET_LOCATIONS_ that I need to run once all the new plants have been created in R3 or do i need to create the plants in SRM?
With one Purch org to one co code to one plant how will this effect the workflow start conditions
How will the be differnt to a on Purchasing Org to many co codes to many plants?
Any thing else you think that I might need to do with this change
Thanks
B

ISG - ASR1002 config change

Similar Messages

Maybe you are looking for