MARS 6.0 cant discover PIX 8.0(4)

Hello,
I've configured CS-MARS 6.0, added a lot of devices and everything works fine,
but i cant add PIX 8.0 device,
Error:
spqwn ssh -c 3des -l admin 10.*.*.*
ssh: connect to host 10.*.*.* port 22: no route to host
Error executing ssh command
PIX connected to the switch, MARS connected to the switch, too, The same vlan
PIX config:
PIX Version 8.0(4)
hostname test-pix
enable password ************* encrypted
passwd ************ encrypted
no names
interface Ethernet0
nameif management
security-level 100
ip address 10.*.*.* 255.255.255.0
interface Ethernet1
shutdown
no nameif
no security-level
no ip address
interface Ethernet2
shutdown
no nameif
no security-level
no ip address
ftp mode passive
clock timezone MSK 3
access-list permit_ssh extended permit tcp host 10.*.*.* any eq ssh log
access-list permit_tcp extended permit tcp host 10.*.*.* any
pager lines 24
logging enable
logging trap notifications
logging host management 10.*.*.*
mtu management 1500
no failover
icmp unreachable rate-limit 1 burst-size 1
asdm image flash:/asdm-613.bin
no asdm history enable
arp timeout 14400
access-group permit_tcp in interface management
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
dynamic-access-policy-record DfltAccessPolicy
aaa authentication ssh console LOCAL
aaa authentication enable console LOCAL
snmp-server host management 10.*.*.* community ****
no snmp-server location
no snmp-server contact
snmp-server community ****
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
telnet timeout 5
ssh 10.*.*.* 255.255.255.0 management
ssh 10.*.*.* 255.255.255.255 management
ssh timeout 5
console timeout 0
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
username admin password ********** encrypted privilege 15
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect netbios
inspect rsh
inspect rtsp
inspect skinny
inspect esmtp
inspect sqlnet
inspect sunrpc
inspect tftp
inspect sip
inspect xdmcp
inspect icmp
service-policy global_policy global
prompt hostname context
Cryptochecksum:c61a9083378da448280284a603b1bfe0
: end
test-pix#
Could anyone help, please?
Thank you

Try login to Cisco MARS into CLI
try to login to PIX by SSH.
Config of PIX is seamed correct.
Configure switch with IP address in same vlan as PIX and MARS and try ping switch from mars and switch from PIX

Similar Messages

Problems discovering PIX 525

Hi all,
In Common services I have problems discovering some pix firewalls, running 6.3(5) software. I have a SNMP tool that can discover the firewalls if i'm using SNMP version 1. I don't have the option to choose version 1 in Cisco Works (except if i do a SNMP walk from the device center, then it works. In device center I can choose version 1). In the discovery settings, I can only choose version 2c or 3.
Any good ideas besides opgrading the firewall softvare
Thanks,
Jesper

According to the bug notes, Common Services 3.3 should have support for SNMPv1 device discovery:
http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsu82153
So if you can upgrade to LMS 3.2, that'd be one way to work around upgrading the PIX.

Manually configuring ASA modules vs discovering them

We're starting to deploy ASA now to replace some aging / end of life devices (PIX and IDS sensors). Once the network admins set up the required IDS module(s) etc. on the ASA, I can then configure each of them as reporting devices in MARS (I can also discover the individual settings on the IPS e.g. virtual sensors ). Basically looks just like an IPS v7 box.
Question: should I first set up the ASA itself in MARS, and then use the discover feature top-down for MARS to uncover the IPS, firewall modules etc. - as opposed to configuring each module individually as a reporting device in MARS? Aside from the add'l effort required, are there any distinct advantages or issues with one method vs the other? What are the gotcha's if we ignore the ASA (from MARS perspective) and treat all modules individually - i.e. MARS would have no knowlege of the ASA itself, and considers the modules to be all "stand alone" in that respect...?
hope that makes sense
thanks

Hello,
You could use either methods and both of them are absolutely fine. There are no specific gotchas if you add the modules individually just that it is a little more work and it is absolutely fine to have the modules configured individually on the MARS.
Hope this clarifies!!
Thanks,
--Sunil

Cs-mars changing the community string on multiple devices

Hello,
We've changed the snmp v2 community strings on all the network devices.
Is it possible in cs-mars to change the community string on multiple devices?
When I select edit in admin>security and monitor devices> and select several devices and click edit the message "please select only one device to edit"
What's the best way to do this, and is this absoluteley nessecary?
Many thanks for all the help......

> Is it possible in cs-mars to change the community string on multiple devices?
Yes, it's possible for some device types. The SNMP community string(s) can be bulk updated using a seed file, but only for the following device types: PIX, PIX 7.x, ASA, IOS, and SWITCH-IOS. Any other device types have to be updated manually. The details are on page 1-46 of the Device Configuration Guide. You will also need the details for using a seed file, from the same document.
> is this absoluteley necessary?
If you want to communicate with the devices via SNMP, then yes, you need to update the strings. This is especially the case if you don't use any other communications protocols such as SSH, Telnet, or FTP. Also, without the updated SNMP strings, MARS can't fully discover the Layer 2 topology from the device.
Unfortunately, the SNMP string bulk update is only available for SNMPv1 (or v2 with no encryption) credentials. If you're using SNMPv3, each device has to be edited manually.

Host Discovery In MARS

I have problem with my MARS. I can not see or find any host discovered by MARS when I go to the IP management page and search for host.
I have add all the switches in MARS and it is discovered and i configured SNMP and syslog on the switches.
can you please help me to solve this issue

MARS will not discover the host automatically. Only if there is an attack, based on the syslog and/or snmp that has been sent from all your network devices, MARS can advise where the attack is originated from and towards which host. It will not perform auto discovery of all hosts in your network.
MARS is an event corelator, so it will only corelate events that are being sent from syslog/snmp of network devices.
Whether MARS should be in management vlan or not, depends on your company security/network policy. It is not a requirement for MARS to be in management vlan, however, if your company policy dictates that all management traffic should be off the management vlan then it makes sense for MARS to be in the management vlan too.

Exchange 2013 MP doesn't discover Exchange edge servers

SCOM cannot discover exchange 2013 edge servers with the following error
MicrosoftExchangeDiscovery.ps1 : (198): $res= $ds.FindOne()
System.Runtime.InteropServices.COMException (0x8007054B): The specified domain either does not exist or could not be contacted.
at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
at System.DirectoryServices.DirectoryEntry.Bind()
at System.DirectoryServices.DirectoryEntry.get_AdsObject()
at System.DirectoryServices.PropertyValueCollection.PopulateList()
at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)
at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)
at System.DirectoryServices.DirectorySearcher.get_SearchRoot()
at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne)
at System.DirectoryServices.DirectorySearcher.FindOne()

I have the same problem as well. Tried all the fixes that were done to discover Exchange 2010 Edge servers. Cant discover the 2013 Edge Server.
See the script start;
MicrosoftExchangeDiscovery.ps1 : Exchange Server Discovery Script
Message: Discovery Script started.
Arguments: '0' '{3E7D658E-FA5E-924E-334E-97C84E068C4A}' '{26027EF2-6F9B-528B-706D-49808087F917}' 'mx2.exchange.****.***.**' 'mx2' 'PER' '' '' 'C:\Program Files\Microsoft\Exchange Server\V15\' '0' 'true'
Then see it error;
MicrosoftExchangeDiscovery.ps1 : (198): $res= $ds.FindOne()
System.Runtime.InteropServices.COMException (0x8007054B): The specified domain either does not exist or could not be contacted.
at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
at System.DirectoryServices.DirectoryEntry.Bind()
at System.DirectoryServices.DirectoryEntry.get_AdsObject()
at System.DirectoryServices.PropertyValueCollection.PopulateList()
at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)
at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)
at System.DirectoryServices.DirectorySearcher.get_SearchRoot()
at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne)
at System.DirectoryServices.DirectorySearcher.FindOne()
at CallSite.Target(Closure , CallSite , Object )

FAILED TO DISCOVER A XSCF FROM A M8000

Hallo,
i have a OPS Center 2.5 with to Proxys. On Proxy is in a DMZ and on Proxy. From the dmz proxy i have acess to this xscf i want to discover via ssh but the BUI cant discover.... log at the logfile output. I need help
Enterprise Controller Version:
2.5.0.1200
This is the output from the logfile....
Task : ServiceTagDiscovery
Target : 10.31.85.183
Status : FAILED
Result : Discovered no service tags. (10066)
Logs :
11/04/2010 12:07:49 PM CET INFO Invoking prepare method of this task-target. (15018)
11/04/2010 12:07:50 PM CET INFO Task is posted to the proxy - sot-uce-02-7e101e3c, from the satellite. (15011)
11/04/2010 12:08:00 PM CET INFO Task is received by the proxy. (15012)
11/04/2010 12:08:00 PM CET DEBUG Service tag discovery started for target 10.31.85.183 (10.31.85.183) (10063)
11/04/2010 12:08:10 PM CET DEBUG The discovery target could not be reached. (10046)

Hello,
Before you discover any of the M-Series servers, you need to create a user with platadm privilege on the XSCF Service Processor. To create such user, login to the XSCF shell and run:
XSCF> adduser xvmoc
XSCF> set privileges xvmoc platadm
XSCF> password xvmoc
     (enter password)
     (enter password again to confirm)
As a test, try to ssh into the XSCF using the xvmoc credentials from your Proxy Controller. If all works, create a custom discovery for your server. Make sure to select "XSCF Service Processor" as the search type and use the credentials of the user with platadm privileges (i.e. xvmoc).
Regards,
[email protected]

Cant print wirelessly after getting new router

Hi,
I cant connect wirelessly. After I uninstalled then reinstalled using the hp set up assistant I downloaded from this site, I get asked ito check a box f I want to connect wirelessly.
I check the box. It asks me to connect via USB. I am connected via USB. I disconnect then reconnect. It asks me to enter my wireless network name. I do that but it says the device isnt connected and that I should connect via USB. I disconnect the USB and connect it to another USB port and it still doesnt work.
I shut down the computer, disconnect the printer, and reset the router. I turn on the computer then reconnect the printer and launch again the set up assistant. It still cant discover the WiFi. I go to my system preferences and open up Print & Fax. I see the printer there. I delete it. When I add again finally I see a place to enter an ip address. I add that and now I see a generic printer with the ip address. I still cant connect.
I go back and re add the HP 6000 printer option that it says to add. I uninstall the hp software, I shut down my computer, disconnect the printer. I turn off the router, disconnect it, reset it. I wait for the router to turn back on, then turn on the computer, turn on the printer, reinstall the software. It still says the device isnt connected.
I check to see if its listed in Print & Fax and it is. The set up assistant wont let me continue. I
just discovered that I can manually connect to my network device by typing in my ip address under the gear icon in the set up assistant. I input my routers ip address and every ip address listed in my network but it still cant connect. Im out of ideas!!!
Thanks

Hey @HP-Mac-Lisa,
Because your printer is unresponsive now to our steps I would recommend reaching out to our Technical Support queue by phone to explore additional options.
HP Technical Support can be reached at: 800-474-6836.
If you live outside the US/Canada Region, please click the link below to get the support number for your region.
HP Worldwide Contact
It's been a pleasure working with you. I wish you luck going forward with this!
X-23
I work on behalf of HP
Please click "Accept as Solution" if you feel my post solved your issue, it will help others find the solution.
Click the "Kudos, Thumbs Up" on the right to say "Thanks" for helping!

Is the "Community" string hardcoded somewhere in SEA?

Hi
I have a machine installed with SEA 1.0.3 and developed a Subagent by myself. I want to change the Community String for security reason but encountered some problem.
I updated the community string in snmpd.conf and myagent.acl at /etc/snmp/conf. Then I stop snmpdx and start it again with "-d 4". At another terminal, I start my subagent with "-d 4" too, there is some PDU print out on the screen as follows:
SSASubagent called with mysubagent
PDU:
version: 0
community: public
type: SET_REQ_MSG (0xa3)
request id: 0
error status: noError(0)
error index: 0
name: 1.3.6.1.4.1.42.2.15.5.0
type: OCTET STRING (0x4)
length: 9
value: mysubagent ( 73 6f 67 61 6c 61 72 6d 64 )
MANAGERS:
* 0
COMMUNITIES(READ_WRITE): myprivate mypublic
#EFILTER:
TRAP RECIPIENTS:
Waiting for incoming SNMP requests on UDP port 7041
You can see from the beginning that the community print out is still "public". But at the bottom of the print out, the community has been changed.
I have 2 questions on this:
1. Since I have not any SNMP server running and I did not send any GET/SET request to my agent, I think this PDU is the registration PDU my subagent send to the master agent for register. Am I right?
2.If I update the community string in snmpdx.acl, my subagent can not start up successfully and there is some print out in the master agent site that "community_check() : bad community from myhost ". It seems that it is because the community string in the PDU is still "public" and which is different with what master agent set.
3.I'm using Solaris 5.9. Do I need some patch for this issue?
I have read the User Guide and Developer Guide of SEA but still can not resolve it , would you give some information on this?
thanks a lot
Wendy

> Is it possible in cs-mars to change the community string on multiple devices?
Yes, it's possible for some device types. The SNMP community string(s) can be bulk updated using a seed file, but only for the following device types: PIX, PIX 7.x, ASA, IOS, and SWITCH-IOS. Any other device types have to be updated manually. The details are on page 1-46 of the Device Configuration Guide. You will also need the details for using a seed file, from the same document.
> is this absoluteley necessary?
If you want to communicate with the devices via SNMP, then yes, you need to update the strings. This is especially the case if you don't use any other communications protocols such as SSH, Telnet, or FTP. Also, without the updated SNMP strings, MARS can't fully discover the Layer 2 topology from the device.
Unfortunately, the SNMP string bulk update is only available for SNMPv1 (or v2 with no encryption) credentials. If you're using SNMPv3, each device has to be edited manually.

Is OMS required?

OS: W2K server.
I've decided to go 2 tier approach so, my IFS and DB are running in the same machine which is server and domain controller. I hope I'm not makning any mistake on the terminology here. Eventually my DB up and IFS runs, but I cant discover it in the OEM, because I can't see "discover" comment any where in the pop up menus. On the otherhand, document says to run ifsomssetup, but I can't say at this moment do I need OMS for 2 tier.
The other question is, without trying to discover IFS in OEM; I followed the steps in "Validate basic operation" and tried to acces web page through explorer but page didn't come up. Is any body can guess what could be the mistake?
Last question: Do I need IIS and relativly SMTP. FTP or WWW Publisher running automatically when W2K up. As far as I know IFS introduce new web server with no connection to IIS, any idea if I should kill the IIS while running the IFS.
thanks in advance.

I stopped the IIS and FTP services from automatically running on the server that is running iFS. This way there will not be a conflict with the ports.
For confirming basic operation, make sure that you do the following (at least it works for me) from the iFS bin directory.
//I usually wait about 20 seconds between each step
ifsjservctl start
start ifslaunchdc
start ifslaunchnode
ifsstartdomain
After everything is running in my environment I've got to wait at least a minute (sometimes more) before iFS will accept a connection. (Monitor the CPU utilization until it stabilizes back to normal)
Test with IE at http://yourserver/ifs/files/ (don't forget the trailing /
For Ent Mgr after I ran the ifssomsetup iFS showed up in Ent Mgr application. It works well, but I can not get jobs to work appropriately in Ent Mgr. It always fails authentication.

BDC by call transaction

Hi all,
In my recording I gave TC MM01 and inserted. Then in SE38.
DATA : begin of itab occurs 0,
matnr(15),mbrsh(15),mtart(15),maktx(15),meins(15),
end of itab.
called function
There was no errror.
How can I see the contents whether that is inserted or not.
There are three internal tables
RMMG1,MAKT,MARA. I cant see the contents of RMMG1.
Then What is this error.
Call_transaction MM01 return code = 1.001 Record.
S No batch input data for screen SAPLMGMW 0100.
what is this error.

I would really suggest that you use the BAPI.
You will save yourself a big headache. Here is an example.
In this example, were creating a HALB material using internal number assignment. Of course if your material type uses external number assignment, you can assign it directly.
report zrich_0001.
data: headdata    type bapimathead.
data: clientdata type bapi_mara.
data: clientdatax type bapi_marax.
data: descdata    type table of bapi_makt with header line.
data: return type table of bapiret2 with header line.
data: returnm type table of bapi_matreturn2 with header line.
data: imat    type table of bapimatinr with header line.
call function 'BAPI_MATERIAL_GETINTNUMBER'
exporting
    material_type          = 'HALB'
*   INDUSTRY_SECTOR        = 'M'
tables
    material_number        = imat.
read table imat index 1.
if sy-subrc = 0.
headdata-material = imat-material.
endif.
headdata-ind_sector      = 'M'.
headdata-matl_type       = 'HALB'.
headdata-basic_view = 'X'.
clientdata-base_uom   = 'EA'.
clientdatax-base_uom   = 'X'.
clientdata-old_mat_no = 'Old Material'.
clientdatax-old_mat_no = 'X'.
clientdata-division = '00'.
clientdatax-division = 'X'.
descdata-langu = sy-langu.
descdata-matl_desc = 'This is the description'.
append descdata.
call function 'BAPI_MATERIAL_SAVEDATA'
exporting
    headdata                   = headdata
    clientdata                 = clientdata
    clientdatax                = clientdatax
    PLANTDATA                  =
    PLANTDATAX                 =
*   FORECASTPARAMETERS         =
*   FORECASTPARAMETERSX        =
*   PLANNINGDATA               =
*   PLANNINGDATAX              =
*   STORAGELOCATIONDATA        =
*   STORAGELOCATIONDATAX       =
*   VALUATIONDATA              =
*   VALUATIONDATAX             =
*   WAREHOUSENUMBERDATA        =
*   WAREHOUSENUMBERDATAX       =
*   SALESDATA                  =
*   SALESDATAX                 =
*   STORAGETYPEDATA            =
*   STORAGETYPEDATAX           =
importing
    return                     = return
tables
    materialdescription        = descdata
*   UNITSOFMEASURE             =
*   UNITSOFMEASUREX            =
*   INTERNATIONALARTNOS        =
*   MATERIALLONGTEXT           =
*   TAXCLASSIFICATIONS         =
    returnmessages             = returnm
*   PRTDATA                    =
*   PRTDATAX                   =
*   EXTENSIONIN                =
*   EXTENSIONINX               =
check sy-subrc = 0.
Regards,
Rich Heilman

Iphone 5 - Bluetooth simply wont work

Hi
I've just traded in my trusty old Iphone 4 for an brand new Iphone 5. The Iphone 4 happily connected Bluetooth to anything I wanted it to, my headphones, my car stereo, my ipad etc etc
This new 5 is showing "now discoverable" but nothing can discover it, and apparently it cant discover anything else, Just goes round and round drawing a big fat blank. All tried accessories are still happily working with each other and the old Iphone 4.
It would appear that, to all intents and purposes, in late 2012, I have just bought a phone that doesnt have Bluetooth. Can somebody please tell me thats not the case?????

https://discussions.apple.com/message/21745117#21745117

WAAS No Peer - Insufficient option Space?

Hi,
I have a WAAS trial deployment running with a pair of 612s in the data centre and a coupe for remote 674s.
One site appears to be running fine (has optimised connections, both sides see each other in topology) but my new site cant discover the peer. From what I have read this commonly seems to be asymmetric routing but I only have one path in and out so it cant be that.
Checking show stat auto-discovery and debug auto-discover conn I see that my 'Insufficient Option-Space' count is increasing. Does anyone know what this means or how to resolve the undiscovered peer? I see the conns from the remote site in the head-end WAAS, so I believe that means WCCP is at least sending the traffic to the head-end device.
FYI the difference between the working and non-working sites is that one is using GRE/IPSec (working) and the other is plain IPSec (not working). Again, I don't believe its MSS or MTU as the default 1380 is large enough to pass unfragmented.
Thanks for your help,
Des

In fact, I think the devices still aren't auto-discovering after all; although they show in the topology table in the GUI, doing show stat tfo peer on either of the head end devices or the remote device shows no peer.
Looking at tcpdump, I definitely seem to see the MAC addresses entered into option21 / 33 at either end:
Remote end:
14:41:36.225065 IP (tos 0x0, ttl 58, id 50033, offset 0, flags [DF], length: 64) TERM_SERVER_IP.51979 > DEST_SERVER_IP.ssh: S [tcp sum ok] 1505981933:1505981933(0) win 49640
14:41:38.267296 IP (tos 0x0, ttl 250, id 0, offset 0, flags [none], length: 56) DEST_SERVER_IP.ssh > TERM_SERVER_IP.51979: S [tcp sum ok] 227079900:227079900(0) ack 1505981934 win 4128
Head-end:
14:41:34.505685 IP (tos 0x0, ttl 55, id 50033, offset 0, flags [DF], length: 64) TERM_SERVER_IP.51979 > DEST_SERVER_IP.ssh: S [tcp sum ok] 1505981933:1505981933(0) win 49640
14:41:34.508646 IP (tos 0x0, ttl 253, id 0, offset 0, flags [none], length: 56) DEST_SERVER_IP.ssh > TERM_SERVER_IP.51979: S [tcp sum ok] 3768269639:3768269639(0) ack 1505981934 win 4128
Those MACs are the correct addresses for the NIC on the WAEs. Shouldn't show stat tfo peer be showing the head and remote end devices (as with my other boxes)? I know ssh wont be optimised, but I just want to see the devices recognise each other as peers.
Thanks for your help.

Trouble syncing documents by wifi or bluetooth

Hi
I am trying to transfer some docs from my macbook pro to ipad either via wifi or bluetooth. Neither are connecting.
I have blue tooth on on both devices, and my laptop sees my ipad as a device in its bluetooth settings but when trying to connect to it says bluetooth connection not available. Laptop connects fine to other bluetooth devices I have. On the ipad, ipad cant discover the laptop when it turn on bluetooth button on ipad.
On laptop i have Snow Leo 10.6.8
Via wifi, no idea how to do this
Help!
Thanks!

iOS does not have a way to file share over Bluetooth, you must use an application. I have used AirSharing, which is great over WiFi. I am sure there are many others. I think a lot of the "pro" versions of these apps allow for Bluetooth sharing, although it is much slow going.

Setting recipient for system emails

When someone subscribes to our newsletter with a bad email address, i receive a system message (from [email protected]) reporting that the system email to the subscriber failed.
I would like to change the recipient of these emails to another one of our system users and cant discover where to set the recipient details.
Can anyone help?

Hi,
It's either the double opt-in email (under system emails) or the auto-responder email (for the campaign list or the webform, depending on what you use). That's the email that the system tries to send "from" your email address to the person that subscribes - this email bounces and you get the system message.
Hope this helps - if you still have problems, I'd recommend opening a new case and attaching one of the emails you get so that support can sort this out for you.
Thanks and regards,
Florin

MARS 6.0 cant discover PIX 8.0(4)

Similar Messages

Maybe you are looking for