Prime Infrastructure 2.0 - Alert on Switch Config Change

We are in the process of testing out Prime Infrastructure 2.0, is there a way to get an alert when a device's configuration has changed, and send out what has changed in email? I have scheduled Config Archiving for all of my devices, and i can see the config differences when a changes is made in the Prime GUI, but we currently use Kiwi CatTools to send out emails that show what devices had configuration changes and what those changes were, it would be nice if Prime would do that so we could do away with that service. I have looked through all of the reports but do not see anything.

Hi,
I know this feature is there is LMS ,where you can configure the AUTOMATED Action based on Syslogs to get an Alert for config change or any other changes ,however I do not see this option available in PI  2.0.
Syslogs are not compltely supported in 2.0 but in PI 2.1 we should have the complete support for syslogs.
Thanks-
Afroz
[Do rate the useful post]

Similar Messages

  • Prime Infrastructure and C2948G-GE-TX switches?

    I'm trying out Prime Infrastructure, but can't get the SSH to work with our C2948G-GE-TX switches.  The SNMP works, but when the correct SSH credentials are entered for Password and Enable, I get "Wrong CLI Credentials" when attempting to sync.  I can SSH with Putty to the switches just fine.  We have 12 of these switches, and all behave the same way.  Doing a "show version" on the switch gives this:
    WS-C2948G-GE-TX Software, Version NmpSW: 8.4(11)GLX
    Copyright (c) 1995-2006 by Cisco Systems, Inc.
    NMP S/W compiled on Apr 27 2006, 12:46:44
    GSP S/W compiled on Apr 27 2006, 11:47:52
    System Bootstrap Version: 6.1(6)
    Any suggestions for troubleshooting?

    If I remembered correctly, PI will no longer support Catalyst OS.

  • Prime Infrastructure and WLC 2504 N+1 config syncronization

    I've setup 2 cisco 2504 WLC's in a N+1 configuration, before we purchased Prime Infrastructure.  Now I'm trying to syncronize the configurations between the two devices in PI.  I've setup a configuration group, and it seems using templates will keep the configuration syncronized between the two devices.  Is it possible for PI to automatically create the templates based on the current configuration of the device.  Plus with PI 2.1 it seems like I have to create a template for every section of the configuration, shouldn't there be just one large template that has all the configurations.

    Yes, you should be able to discover templates from the WLC
    HTH,
    Steve

  • Cisco Prime Infrastructure 1.2 config deployment (no copy run start)

        I have deployed some CLI templates I have created to configure multiple local accounts on some switches. However the cli templete only appears to accept conf t commands, it will not accept 'write mem' or 'copy run start' at the end to save the altered running config to startup. this results in running and startup being 'out of sync' in the configuration archives, and runs the risk of a power failure causing the config to revert back to startup. Does anyone know how to ensure the altered running config is saved to startup during the config template deployment?       

    I don't know if this has been fixed in 2.0 or not.  By the looks of the bug it hasn't.  However, there is a workaround-
    https://tools.cisco.com/bugsearch/search?kw=prime%20infrastructure%20copy%20run%20start&pf=prdNm&sb=anfr&srtBy=byRel&bt=custV
    BugID
    CSCuf89957
    Prime Infrastructure - No option to save running config to startup
    Conditions:
    Prime Infrastructure 1.2/1.3
    Workaround:
    Create a Configuration Template that runs either:
    "do write mem"
    Or for devices which no longer support "write mem", use:
    "file prompt quiet
    do copy run start
    no file prompt quiet"

  • CISCO PRIME INFRASTRUCTURE 1.2 CONFIG ISSUE

    hello all,
    this is my fist time running a cisco prime infrastructure1.2  but it seem not to be working properly as i have errors on it,
    I had issues from the very begining and had to write erase the config but the appliance only boots to a blank screen wit a cursor.
    can anyone advice on how to restore it back to initial setup
    and please whats the effect of the RESET button on the device.
    thanks

    I don't know if this has been fixed in 2.0 or not.  By the looks of the bug it hasn't.  However, there is a workaround-
    https://tools.cisco.com/bugsearch/search?kw=prime%20infrastructure%20copy%20run%20start&pf=prdNm&sb=anfr&srtBy=byRel&bt=custV
    BugID
    CSCuf89957
    Prime Infrastructure - No option to save running config to startup
    Conditions:
    Prime Infrastructure 1.2/1.3
    Workaround:
    Create a Configuration Template that runs either:
    "do write mem"
    Or for devices which no longer support "write mem", use:
    "file prompt quiet
    do copy run start
    no file prompt quiet"

  • Cisco Prime Infrastructure and VLAN fetch

    I have about a dozen systems which are showing up under the Archive Failed Devices section of Device Work Center -> Configuration Archives.  The reason is Fetch VLAN configuration - Command failed.  All of the affected devices have something in common in that they are all managed by hitting a publicly routable IP address outside of the network on which the NCS server lives (NCS IP is 172.19.40.51).  To the devices, NCS looks like it is coming from an publicly routable IP address (because it is NAT'd by the firewall).  I suspected that the issue was that NCS was trying to TFTP the VLAN.dat file to the NCS server but that it was trying to send it to 172.19.40.51 instead of the NAT address.  I turned on debugs on one of the affected devices and sure enough I see that the device is trying to TFTP something to 172.19.40.51.  Of course that will never work.  I can find no way within the Admin UI of Cisco Prime to change this behavior such that NCS will try to collect the VLAN.dat file in some other way or use the NAT'd IP address for the copy attempt.
    Is there a way to get it to use something other than TFTP?  Is there some way to turn this off entirely so that it doesn't show up in the Archive Failed Devices section?  Prime seems to be able to parse the VLANs by way of the configuration file (since we use transparent mode throughout) so it seems like an extra step I don't need.

    Marvin,
    This is where everything goes off the rails for me when it comes to understanding Prime Infrastruction, Prime LMS and everything that you're talking about.  Refer to this link:  http://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/prime-lan-management-solution/data_sheet_c78-697479.html
    How should I interpret this?:
    "Cisco Prime Infrastructure 1.1 bundles campus switch, branch, core routing, and wireless LAN management into a single, easy-to-order solution that enables businesses and enterprises unparalleled operational efficiencies and investment protection. The bundle consists of:
    ● Cisco Prime LAN Management Solution, which delivers simplified management of Cisco® Borderless Networks and reduces operations costs by aligning network management functionality the way network operators do their jobs
    ● Cisco Prime Network Control System, which provides complete wireless LAN management with converged user and access management, and integrated lifecycle management of branch routers
    For more information about Cisco Prime Infrastructure, please visit http://www.cisco.com/go/primeinfrastructure."
    Am I wrong to assume that the first bullet point, which states "Cisco Prime LAN Management Solution" is referring to Prime LMS 4.2?
    Thanks,
    Steven

  • Prime Infrastructure 2.1 switch in stack down alert

    Hi all,
    Have a question regarding the Cisco Prime Infrastructure 2.1  - How to configure the prime to monitor/send an alert when one of the switches (c3750) from a stack goes down (not the master, so the stack appears as 'up' ) ?
    In old cisco LMS i was able to configured a script based on a syslog sent from a switch, but I'm not sure how to do it in Prime.
    Thanks for help :]
    Pawel

    Pawel,
    Unfortunately PI 2.1 (and 2.2) do not yet allow us to define automated actions in the event of a specific syslog message being received.

  • Cisco Prime Infrastructure 2.0 not showing alerts from switch

    Hello,
    I have a prime  infrastructure 2.0 running at a customer place and the customer now complains that he is not receiving link up/down messages from the switch. When i checked I have seen that if I shut down a port in the switch the prime identifies after a long time, but its not generating an alarm still. How can I fine tune the prime to fix this issue. Please help on this.
    Thanks in advance

    Hi,
    Same problem here.
    I am using Cisco Prime Infrastructure 2.0 (evaluation version for 60 days). I want to deploy port monitoring for my trunk ports between switches and some other important ports e.g. servers. Basically I want to get alarms when these ports are down, there are errors on ports and etc.
    So in Design>Port Grouping I created User Defined group with important ports. In Deploy>Monitoring Deployment I selected Interface Health (default)>Deploy selected Port Groups and when selected port group I created.
    Now the rule shows Deployed: Yes and Status: Active. After that I just pulled out one port which was in monitored group, waited 5min as it is set in Interface Health (default) template, and nothing happened, and worse, alarms started to show up of other ports where regular users are connected (computers was turned off), which I do not want to see at all. I tried redeploy template, I even created my own template but still no desired result.
    Any suggestions how to make port monitoring work?

  • Prime Infrastructure - Email Alerts by Virtual Domain

    We are currently providing wireless to various buildings and districts via flexconnect controllers and use Prime as a monitoring device each separate group is able to access individually to view their maps and APs. I have received a request for email alerts when APs are down from one district, but I see no way to group the email alerts that Prime sends out. It seems to be you can vary by type (APs vs switches) but not by virtual domains or groups of devices. Is there any way to pull this off directly from Prime?
    I could potentially have all email alerts sent to one inbox and then forward based on rules to include the AP syntax for each district, but that would be quite messy, especially if only one of the many districts wants the alerts.
    Thanks for any idea you can provide.

    Just an update for anyone who may stumble on this issue and have the same problem. In version 1.4 of Prime Infrastructure if you change your virtual domain in the top right and then go to alerts and choose email options you have a completely new list you can set up. Doing this you can do a root folder for a company or district you are providing for and setup email alerts for only that teir and bellow of access. This way they only see alerts from APs and devices they have access too. Meanwhile you can leave the root teir to email yourself and then separate them out via inbox rules as desired.
    This may be possible on older versions of Prime, but I did not notice the email alerts being an option while under the other domains until 1.4.

  • Prime Infrastructure 2.0: Running an inventory sync removes "snmp-server location" in running-config

    Hello,
    we're running Prime Infrastructure 2.0 (version VA-2.0.0.0.294).
    I was scared as I figured out one hour ago that running an inventory sync (Device Work Center) removes the command snmp-server location and adds the command snmp-server host "PI-ip address" "snmp rw community" in the running-config.
    Has someone the same behaviour or can reenact this scenario?!
    Can someone imagine that this behaviour has something to do with a configuration setting in PI?
    I'm perplexed and got gray hair now.
    Thank you for your answers or tips.
    Bastian

    Hello Rob,
    I just successfully installed the patch. The snmp-server location is not touched anymore while running a inventory job.
    But PI still enters this string in the running-configuration:
    snmp-server host "PI-IP address" " our snmp RW community- string"
    although there already exists the entry:
    snmp-server host "PI-IP address" version 2c "community-string (not the snmp rw-community-string)"
    Do you or anyone else has the same behaviour that PI adds automaically himself as snmp trap receiver with the SNMP-RW community?
    Regards
    Bastian

  • Prime Infrastructure 2.0 sync config tasks

    Hi,
    I'd like to know few things about PI 2.0 config handling:
    1. Can PI save running config to startup config on a scheduled basis? Let's say once a week on all devices.
    2. Can PI save running config to startup config whatsoever?
    3. Can PI download running config when it receives a config trap from device when user enters/exits config mode?
    4. Can PI export running and startup configs to a external location?
    Thanks!

    Hi ,
    1.
    *Scheduled-You can schedule when Prime Infrastructure collects the configurations of
    selected devices and specify recurring collections by selecting Operate > Configuration
    Archives, then clicking Schedule Archive.
    like  minute ..daily etc...
    3. ASAI K ,this feature work on the bases of syslogs .. we do not have complete support in PI 2.0 yet so I think bases on config chnage syslogs or traps ,config will not be fetched.
    4. for tihs check the below thread:
    https://supportforums.cisco.com/message/3975460#3975460
    Thanks-
    Afroz
    [Do rate the useful post]
    ****Ratings Encourages Contributors ****

  • Cisco Prime Infrastructure 2.0 Alarms (switch port down)

    We have a cisco Prime Infrastructure 2.0 managing switches, routers and AP.
    By default, when a port of a switch goes down, the cisco Prime Infrastructre generates a Critical Alarm for that. (this is a problem, because every phone of laptop disconnection will generate a critical alarm for me)
    I found out that if we go to Administration --> Alarm Severity --> Link down, I can change the Alarm from Critical to another type of alarm.(ex: warning)
    The problem is that I want to keep the Critical Alarm for my Uplinks ports and for some important switch ports, and I would like to make the alarm as warning for the normal user ports.
    I know that I can create Port Groupping and add ports to each group and apply monitoring templates on those groups. But This couldn't Help me solving my alarm problem.
    So I just need to know how to manage the alarms severity for each group of ports.
    Thank you

    Hi,
    Same problem here.
    I am using Cisco Prime Infrastructure 2.0 (evaluation version for 60 days). I want to deploy port monitoring for my trunk ports between switches and some other important ports e.g. servers. Basically I want to get alarms when these ports are down, there are errors on ports and etc.
    So in Design>Port Grouping I created User Defined group with important ports. In Deploy>Monitoring Deployment I selected Interface Health (default)>Deploy selected Port Groups and when selected port group I created.
    Now the rule shows Deployed: Yes and Status: Active. After that I just pulled out one port which was in monitored group, waited 5min as it is set in Interface Health (default) template, and nothing happened, and worse, alarms started to show up of other ports where regular users are connected (computers was turned off), which I do not want to see at all. I tried redeploy template, I even created my own template but still no desired result.
    Any suggestions how to make port monitoring work?

  • Is it possible to manage the switch SMB 300 series using Cisco Prime Infrastructure?

    Is it possible to manage the switch SMB 300 series using Cisco Prime Infrastructure 1.2?

    SF300 series is targeted for support in  PI 2.0.

  • Adding new switch in my network including Cisco Prime Infrastructure

    hi all,
    if I connect new switch to my network, can I let Cisco PI to apply a specific template of configuration to this switch automatically?
    how can I do that ?
    thanks in advance

    Hi,
    i followed these steps :
    SWITCH SIDE
    - configured Prime Infrastructure as snmp-server host;
    - enabled snmp-traps for linkup and linkdown events globally;
    - disabled snmp-traps for linkup and linkdown on non relevant interfaces using the no snmp trap link-status command
    PRIME INFRASTRUCTURE SIDE
    - under "Deploy/Monitor Deployment" i deployed template "Interface Health"  for all the interested switches
    -  under "Administration/System Settings/Mail Server Configuration" configured my internal SMTP server to make Prime Infrastructure able to send e-mails
    - under "Operate/Alarms & Events" click on "Email Notifications" , then on "Switches and Hubs"
       - check the "critical" box ,  insert the destination e-mail address into the "To" field then click "Save"
     -  check the "switches and Hubs" box and then click Save
    As i know is possible to avoid to configure every single not-interesting port on the switches with "no snmp trap link-status" command (it's a bit annoying when you have tens of switches), using Port Grouping configuration on PI but i tried it without success.
    Hope this helps.
    Best Regards,

  • Pushing Configs to devices using Cisco Prime Infrastructure

    Hi All,
    I am trying to push a simple configuration to WLC using Prime Infrastructure. But it is failing as PI doesnot have RW SNMP access.
    My question is that can I use PI to push configs without using SNMP. Like do it using ftp or something.
    Also do the Wired Devices also need SNMP RW access on PI's part.
    All your help is appreciated.
    Mukul

    You need SNMP RW.
    If you use CLI template you need ssh/telnet credentials though.
    Sent from Cisco Technical Support iPad App

Maybe you are looking for