Looking for Tool - Port Security/err-disable

I have implemented port security on our new 3750X's. Does anyone know, or using, a tool that can report, poll or alert when an interface goes into err-disable and what caused the violation?

Thanks Marvin. I was hoping there was another utility, as well. We have a syslog server, which does get the syslog messages. I was hoping for a more proactive response versus a query for the information. Building trends and such is not a big deal with the syslog data.
Our environment is fairly large with 70 buildings at one location and 15 at another. Being a University we have students who try different things on the network as well as other "IT" arms doing their own thing. We have a monitoring tool, Intermapper, but I was hoping there was something else that could be used, or someone else using something better, to give us a real time view, and something that could collect all the data at once and provide a report.
I was not sure if Cisco Prime Infrastructure provided that functionality or not, or if there was another product recommended.

Similar Messages

First time buyer on itunes store, its looking for answers to security questions i dont remember answering, what do i do

first time buyer on itunes store, its looking for answers to security questions i dont remember answering, what do i do

You need to ask Apple to reset your security questions; ways of contacting them include clicking here and picking a method for your country, and filling out and submitting this form.
(96666)

Looking for tool - for manage Oracle database

hi
i looking for tool that i can make tables, run querys, make backup .....
on Oracle 11.2.0 64bit
i'am looking for any graphical tool (like sql-server tool)
thanks in advance

You didn't see you've answered your own question: you posted inside the SQL Developer tool forum ;)
Have fun with it,
K.

Looking for a Darknet/Secure BBS app

I have been a fan of Haxial KDX for the longest time, but due to the bugs, etc., I would like to move on. I'm looking for a secure darknet/bbs styled program that supports chat, filesharing, and of basic user management (who can login, who can't, etc..). I have been asking this question all over the web, and haven't gotten (or found) a single response. Waste has never worked right for me, by the way. I would definitely prefer it to be open source, which is why I thought it best to post here. Please help out, or at least direct me somewhere where I should ask... Thanks.
As an aside, the guy who wrote KDX and Hotline (Adam?? Hinckley) claimed on the Haxial website that he is willing to sell the project. I wouldn't mine purchasing and restarting the KDX Project, but I've been unable to get in contact with him. So...if you are him, or know him, or own the rights to Haxial KDX and all related projects...$$$$$
Last edited by xen0blade (2010-01-12 13:18:15)

I've recently become a big fan of OneSwarm - http://oneswarm.cs.washington.edu - I like that it supports remote access.
But I'm definitely interested to see what this thread brings up!
Last edited by hAyZe (2010-01-11 20:50:45)

Looking for Serial Code Security for Dreamweaver Extensions.

Hello
I am looking for a solution or an extension which would allow me to secure my Dreamweaver Extension with a Serial Code so that i can atleast save it from being pirated.
Does anyone have a solution for this ? I would like to purchase it.

Could you please share the following log files from your system so that we could debug this issue.
Files : amt3.log and oobelib.log from /tmp on Mac or %TEMP% on Win).
Please send it to [email protected]
Thanks
Vikas

FabricPath vPC port-channel err-disabled CE Vlan?

I have a pair of Nexus 56128 configured with fabric path and vpc+. The Nexus pair has UCS connected downstream using vpc port-channels. When a Vlan is in mode fabricpath, it's ok for the vpc+ peer-link and the vpc port-channel to UCS. However when I changed the vlan to classic Ethernet, it's err-diabled in the vpc port-channels.
Is this the normal behavior of fabric path domain? In other words, CE Vlans and fabric path Vlans cannot use the same Layer 2 path, correct?
If I need to transport CE Vlans and fabric path Vlans from Nexus (fabric path vpc+) to UCS, I have to use a separate non-vpc port-channel for the CE Vlans between each Nexus and UCS?
Thanks

I have a pair of Nexus 56128 configured with fabric path and vpc+. The Nexus pair has UCS connected downstream using vpc port-channels. When a Vlan is in mode fabricpath, it's ok for the vpc+ peer-link and the vpc port-channel to UCS. However when I changed the vlan to classic Ethernet, it's err-diabled in the vpc port-channels.
Is this the normal behavior of fabric path domain? In other words, CE Vlans and fabric path Vlans cannot use the same Layer 2 path, correct?
If I need to transport CE Vlans and fabric path Vlans from Nexus (fabric path vpc+) to UCS, I have to use a separate non-vpc port-channel for the CE Vlans between each Nexus and UCS?
Thanks

I'm looking for a simple, secure password manager. Any thoughts

Been browsing the Apple store for a password manager.There is a couple highly rated ones.But wanted to expand my search.

Hi Mark,
No need to restrict your choice to the preset Pages Templates. Do a web search and choose a Word template. Pages will open Word documents and templates. Or design your own:
This is a Table I inserted into a blank Pages Word Processing document. Format the date column in Inspector > Table > Format > Cell Format. Select the first Date cell,then drag the fill handle down to increment the dates.
Regards,
Ian.

LMS 4.2 - Err-disable port state

Hello,
I'm trying to figure it out how exactly LMS learns about ports in err-disable state? Which MIB or command is used?
I have two ME3400 switches with err-disabled ports but LMS shows only the ports of one of the them. Both switches are ME-3400-24TS-A
and have the same IOS version (12.2(53)SE). I'm sure data collection is running fine because it updates the other discrepancies.
What i have tried by now:
- did an SNMP walk from LMS on CISCO-ERR-DISABLED-MIB - no info found there on port status
- did an SNMP walk from LMS on CISCO-STACK-MIB - I know that this MIB contains object portAdditionalOperStatus (1.3.6.1.4.1.9.5.1.4.1.1.23) which shows the operational status of the ports, but it seems that ME3400 does not support it (although it supports CISCO-STACK-MIB), because I cannot see the SNMP reponse in the trace:
========================================================================
The following is a SNMP walk of device 192.168.6.89 starting from .1.3.6.1.4.1.9.5.1.4.1.1.23
SNMP Walk Output
.1.3.6.1.4.1.9.5.1.4.1.1.23
CISCO-STACK-MIB::portAdditionalOperStatus = No Such Object available on this agent at this OID
========================================================================
So how does LMS knows which ports are in err-disable state?
Kind regards,
Velin

Hello,
The OID that LMS uses for detecting the err-disabled state of the ports is 1.3.6.1.4.1.9.9.548.1.3.1.1.2 (cErrDisableIfStatusCause) from CISCO-ERR-DISABLE-MIB
Velin

Port Err-disable report from cisco works

Hi All,
We have network of around 400 switches.
My question is, Is there any way I can pull up the report of Err-disable for all the switches on Cisoworks ( LMS 3.2).
Any help would be appricated.
Thanks,
Samir

No, this is not possible because determining if a port is err-disable is not easily obtainable via SNMP. Campus Manager's Port Attributes report will show you the operational status of ports, but err-disable ports will be down (which is indistinguishable from a port which is unconnected).

Calling external Web Service: PI is looking for a logical port and proxy.

Hi,
My scenario is ECC Proxy -> PI -> External Webservice (WS adapter).
the Web service adapter fails with the error message:
<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
- 
- <SAP:Error xmlns:SAP="http://sap.com/xi/XI/Message/30" xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/" SOAP:mustUnderstand="">
<SAP:Category>XIServer</SAP:Category>
<SAP:Code area="INTERNAL">WS_ADAPTER_SYS_ERROR</SAP:Code>
<SAP:P1 />
<SAP:P2 />
<SAP:P3 />
<SAP:P4 />
<SAP:AdditionalText />
<SAP:Stack>System error while calling Web service adapter: Error when initializing SOAP client application: 'error_text'</SAP:Stack>
<SAP:Retry>M</SAP:Retry>
</SAP:Error>
When I debug the message processing, it is looking for a port in table SSRVRTCONFIG, finds it(entry created automatically when WS adapter and the corresponding receiver agreement is activated in ID.
Then the program looks for an entry in "SRT_CFG_CLI_ASGN" for a proxy and logical port combination and errors out.
to be able to call an external web service, do we need a proxy to be created? I tried to create but the proxy creation fails because the external WSDL has some unsupported tags.
Also do we need to do any other configuration in SOAMANAGER? I am assuming not because the Web service is external.
Any help would be appreciated.
Thanks
Vijay

I already checked that note and made sure that the points mentioned are met. I have a trace set up on the target system and would know if the call reaches them and then fails in authorization. Right now the call doesnt even reach the target system and also from debugging I know that the program is looking for a proxy and then fails.

Looking for good docs for securing VoIP enviornment

I'm looking for documents on securing IP phones. Mostly resricting the information available from the phone itself via the settings button.
Also a document listing the required protocols for a functional voice VLAN would be helpfull.
Thanks,
Andy

Hi Andy
for Cisco IP Phones with CCM did you try Cisco Unified CallManager Security Guide, here is the link:
CCM 5.x
http://www.cisco.com/univercd/cc/td/doc/product/voice/c_callmg/sec_vir/ae/sec502/index.htm
CCM 4.1
http://www.cisco.com/univercd/cc/td/doc/product/voice/c_callmg/4_1/sec_vir/ae/sec413/index.htm
hth
/majdi

Looking for a disk management tools in JAVA

Hi everybody,
I am currently looking for tools or APIs designed for disk management. I explain : I would like to defrag or format a microSD card with Java code.
Is it possible since the way to get access to the memory card depends on the underlying OS. I know that the really defrag or format action is OS-independent, but filesystem type dependent.
Can you help me please ?
Thanks in advance.
Oliwood

These are system level, platform dependent actions and not the sort of thing Java is made for. If you search hard enough (read Google) you may find these types of tools using JNI for specific platforms, but I wouldn't count on it.

Looking for a security product

Hi,
I'm looking for a SINGLE security product in order to do:
- Network Admission Control
- Limit the bandwidth for some users or some groups of users
- Block peer-to-peer traffic
Can someone suggest?
Thank you.
Best regards.
Massimiliano.

Massimiliano,
ISR routers can do the job for you. Here is the link for NAC support on ISR:
http://www.cisco.com/en/US/docs/security/nac/appliance/support_guide/license.html#wp54131
Zone-Based FW has the capacity to filter peer-to-peer traffic on the ISR.
QoS functionality should provide you the ability for bw limit.
Thanks,
Mynul

GT70 20C Kubuntu looking for bios option to disable optimus for external monitor

I have a GT70 20C with Kubuntu installed looking for a bios option to disable optimus for linux to support an external monitor. Linux will not detect any connected monitor with or without the latest nvidia drivers.

optimus and onboard GPU can't be disabled,
they are need to be able to see anything on the screen.
only dedicated nvidia card can be turned off

Strange mac address causing err-disable

I have mainly 3550/4506 with port-security. Every day user ports go into err-disable and it's the same few mac addresses each time? anyone else came acreoss this ans know what's it is all about.

It should tell you in the logg why the port is err-disableing the port . Could be as simple as speed/duplex mismatches on the port if they are causing something like a lot of late collisions the switch will err-disable the ports . Check the switch and nic settings for these devices .

Looking for Tool - Port Security/err-disable

Similar Messages

Maybe you are looking for