Prime Infrastructure 2.2 snmp-server location

We have implemented Cisco Prime Infrastructure 2.2 in our facility.  We have each switch loaded in with an "snmp-server location" set for the switches for easier identification and quicker troubleshooting.  We would like that location to show in the network topology map as well as in the email alerts it sends if one of those switches goes down.  Is this something I am overlooking, and if so, can someone please explain to me how to make this happen?

Hi William,
snmp-server location is synced from the devices & also the info available in various report.
But, if i'm not wrong you want to customize the e-mail body of notifications sent out from the prime.
This functionality is no where discussed in PI user guide & i'm afraid not possible as of now.
Also, there's bug related to snmp-server location even retrieving it from the reports 
CSCuj09556 : PI 2.0 corrupts device config by doing snmp set for location after sync 
https://tools.cisco.com/bugsearch/bug/CSCuj09556
CSCuo16889 : PI 2.0 - Does not poll sysLocation for 3750 device
https://tools.cisco.com/bugsearch/bug/CSCuo16889
- Ashok
Please rate the post or mark as correct answer as it will help others looking for similar information

Similar Messages

  • Prime Infrastructure 2.0: Running an inventory sync removes "snmp-server location" in running-config

    Hello,
    we're running Prime Infrastructure 2.0 (version VA-2.0.0.0.294).
    I was scared as I figured out one hour ago that running an inventory sync (Device Work Center) removes the command snmp-server location and adds the command snmp-server host "PI-ip address" "snmp rw community" in the running-config.
    Has someone the same behaviour or can reenact this scenario?!
    Can someone imagine that this behaviour has something to do with a configuration setting in PI?
    I'm perplexed and got gray hair now.
    Thank you for your answers or tips.
    Bastian

    Hello Rob,
    I just successfully installed the patch. The snmp-server location is not touched anymore while running a inventory job.
    But PI still enters this string in the running-configuration:
    snmp-server host "PI-IP address" " our snmp RW community- string"
    although there already exists the entry:
    snmp-server host "PI-IP address" version 2c "community-string (not the snmp rw-community-string)"
    Do you or anyone else has the same behaviour that PI adds automaically himself as snmp trap receiver with the SNMP-RW community?
    Regards
    Bastian

  • Cisco Prime Infrastructure 2.1: SNMP Connectivity Failed

    Hi,
    I have discharged all my Cisco devices within Cisco Prime and after a few days and when everything worked correctly one of the switches is displayed with the SNMP error Connectivity Failed, nothing has been changed.
    I deleted and i have returned to create the object but it continues to be the same, I've also tried to create another SNMP community still receiving the same error.
    This is the configuration of snmp in the switch WS-C3850-48P with version 03.02.02.SE
    snmp-server community "community" RW
    snmp-server location "location"
    snmp-server contact "contact"
    snmp-server host 10.180.5.22 version 2c "community"
    Best regards.

    Hi ,
    check if you are getting these errors in "show log" again:
     %SNMP-3-INPUT_QFULL_ERR: Packet dropped due to input queue full
    If yes , then either a lot of SNMP polling happening on the device
    or
    CPU utilization is going high sometime , being SNMP as a least priority process , you will see this issue. check for "show proc cpu history"
    It is a device side issue definitely.
    I would suggest to apply a Access-list on the SNMP community string allowing only the
    valid NMS to poll the device
    Thanks-
    Afroz
    ***Ratings Encourages Contributors ***

  • Will Prime Infrastructure 2.0 monitor server 2008?

    Prime Infrastructure 2.0 monitor server 2008?  Will any of the future versions include system monitoring?
    Thanks, Scott

    It can do so in a limited way now. You need to enable the SNMP service on your server and set community strings etc.
    Once you do that, you can add it as a device in Prime Infrastructure. I doubt it will ever be a complete system monitor like a server management tool. PI is fundamentally a network management tool.
    FYI here are the steps for enabling SNMP agent on your Windows server:
    http://technet.microsoft.com/en-us/library/bb726987.aspx
    Make sure to add your Prime server as an authorized host and setup the community string. Once you've done that, you should be able to sync with it as an added device in Device Center. Here is my Windows 2008 R2 server added thus in PI 2.0:

  • RME: User defined groups on basis of snmp server-location

    Hi,
    We have abt 3500 devices in LMS3.2.1, and we want to make user defined groups in RME on the basis of devices configuration of snmp server-location ...
    Please advise that it is possible or not?
    Thanks

    Hi Michel and thanks for the reply.
    The "Physical Location" groups magically started working.  I had tried to apply a bunch of device update packages a couple of days ago.  I thought they all failed but maybe some of them actually applied.  I have no idea but the 2 groups with a rule like this one are now populating:
    Device.Hostname startswith "XYZ"
    However, the groups with the rule below are still failing to populate in the device selector even though if I edit the group the "Objects matching criteria" list contains the correct members:
    Device.Admin_responsibility equals "XYZ"
    Admin_responsibility is user defined field 1 (Admin => Device Credential Settings => User Defined Fields).
    If you mean "dynamic" in that they are supposed to automatically update then yes these are dynamic public groups.  I had them defined this way for years in LMS 2.6, though the "dynamic" part never worked.  I always had to go into group admin and manually refresh to get the groups to update.  I have tried that several times in 4.1 with no luck.
    -Jeff

  • Cisco Prime Infrastructure 1.4 SNMP Traps are not converted into Alarms

    Hi everybody,
    I just configured SNMP Traps on a Cisco Catalyst 3750-x to send to our Cisco Prime Infrastructure 1.4 Appliance.
    Now I forced the Switch to send some traps (Power off a Power Supply, Interface errdisable). The only events I see in Alarms & Events on PI is the same information message everytime:
    Configuration management event has been recorded in ccmHistoryEventTable.
    I think the forced traps should be converted into alarms? Why can't I see them?
    Thanks,
    Marc

    Ok, I started debugging as you said. I get the following output:
    Mar 13 09:28:13.711: SNMP: V2 Trap, reqid 11689, errstat 0, erridx 0
     sysUpTime.0 = 198609846
     snmpTrapOID.0 = ciscoSyslogMIB.2.0.1
     clogHistoryEntry.2.1688 = PM
     clogHistoryEntry.3.1688 = 5
     clogHistoryEntry.4.1688 = ERR_RECOVER
     clogHistoryEntry.5.1688 = Attempting to recover from bpduguard err-disable state on Gi1/0/13
     clogHistoryEntry.6.1688 = 198609844
    Mar 13 09:28:13.737: SNMP: Queuing packet to xx.xx.xx.xx
    Looks like the Switch is sending SNMP Traps from the ciscoSyslogMIB. Is this why PI can't show the Traps and convert it into a alarm?
    After this test I configured logging (syslog) to the PI. Now the errors are showed but still not converted into alarms. I just want to be notified by email when such errors occurs.
    Thanks,
    Marc

  • Cisco Prime Infrastructure 2.1

    HI All,
    Hopefully a very easy question that i cannot get to the bottom of - VG224
    I am trying to push out an snmp-server location to all my devices in Prime. The devices seem to accept the config but in the menu i cannot select the VG224's as devices to push the config to.
    The VG224's are managed and Prime can back them up ok so it is not connectivity. I have also looked in the supported devices and can see them there also.
    I made a previous mistake and pushed the same location to all the devices on the network. The VG224's seem to have this config! but now i cannot go back to my templetes and push it again
    Any help on where i am going wrong would be fantastic
    Thanks in advance
    Alex

    Hi Alex,
    If you look at the available devices for selection in the CLI template design (Design > Feature Design) there isn't an option to select VG224's.  For my company we have to log into these devices and manually enter changes to the configs.  Image management is all that I have been able to do with these devices at this time.
    Regards,
    Brandon

  • Prime Collaboration Assurance - Configure SNMP Community on Appliance Itself

    Dear forum users.
    Very simple question, I need to configure an SNMP Read-Only community on the two Prime Collaboration appliances themselves.The client has a 3rd party monitoring tool they want to use to query the Prime appliances themselves. I have searched through the CCO documentation but can't find any reference to it. Part of the problem is that if you search Prime and SNMP you get lots of hits about SNMP on managed devices but not about the actual Prime appliances themselves. 
    I reckon you could do it because we have root CLI access but I don't want to do anything that is not supported by TAC. My client operates in a very sensitive environment. 
    Any help much appreciated. 

    Hi.
    You don't need root access for that. Login as admin, and issue the following:
    conf t                                                          --> like you would do on an IOS-based device
    snmp-server community public ro
    snmp-server contact Phil
    snmp-server location CiscoILM
    exit
    write memory
    If you don't run the last, your changes will be rolled back at next reboot (again like on an IOS box).
    This works on PCAA 10.5.1 (didn't try the previous releases) and allows MIB II access to PCAA.
    Note that PCAA does not send traps (so don't look for the snmp-server enable traps command). PCAA 10.6 will be able to raise an alarm in case of CDR collection max supported rate exceeded that can then be notified to an external manager via the standard event notification mechanism, but that's the only one that will be supported.
    HTH
    /Phil

  • SNMP server on PIX IOS 7.2 over VPN

    Hi Team,
    I have a simple query for the issues I m facing currently.
    I have @ remote site  remote site PIX firewall which is configurd to get the Snmp poll on the server locate outside via site to site VPN.
    There is another snmp server located also in inside which I’m not managing it .
    ========================================================================
    below are the command for the snmp configured on PIX.
    snmp-server host inside x.x.x.x community XXXXX ---This is not managed by us
    snmp-server host inside x.x.x.x community XXXXX
    snmp-server host outside y.y.y.y (private IP tunneled though VPN)  poll community YYYYY ---Managed by us
    snmp-server host outside y.y.y.y  poll community YYYYY
    snmp-server community XXXXX
    snmp-server enable traps snmp authentication linkup linkdown coldstart
    snmp-server enable traps syslog
    access-list acl-VPN-tunnel line 2 extended permit ip host z.z.z.z (outside interface of PIX firewall)  host Y.Y.Y.Y (server located outside)
    ==============================================================================
    there are 2 snmp community & server defined in snmp-server host command for 2 different IP address belongs to snmp server  and we can only define one global snmp-server community for any one of them .Question is how the snmp community take a precedence .
    Currently I am able to ping from my snmp server from outside to the PIX firewall outside interface over L2L VPN but somehow the snmp server is not listening when i do port query on 161 por!.
    Appreciate you inputs for the same and let me know if any more details are needed

    What was the resolution?  I am having the same issue.
    Thanks!

  • Prime Infrastructure 2.1 - Fan-Failure SNMP-Trap Issue

    Hello,
    I am facing the following Prime Infrastructure (v2.1) issue:
    - A Fan-Failure SNMP-Trap from a Cisco 3650 switch doesn't appear on Prime, but a Link-Failure from the same switch does.
    - The both events appears on Prime with Syslog.
    - The command "snmp-server enable traps envmon fan shutdown supply temperature status" is set up.
    - The switch is in "Managed" state in PI, I have checked the ACL at the "snmp-server community" command, it is okay.
    - I have set up an SNMP-Trace for the switch on PI, but only "SNMP Null was returned for class com.cisco.server.managedobjects.bridge.Fan3KStats attribute fanIndex" arrived. Please find the log below.
    07/02/14 12:39:53.211 TRACE [presence-9] [] Adding attributes for object Fan3KStats[151206060_,1012]
    07/02/14 12:39:53.211 TRACE [presence-9] [] Index name : fanIndex
    07/02/14 12:39:53.211 TRACE [presence-9] [] Index Value : 1012
    07/02/14 12:39:53.211 TRACE [presence-9] [] Device MIB table index: .1012
    07/02/14 12:39:53.211 TRACE [presence-9] [] MIB table row index: .1012
    07/02/14 12:39:53.211 TRACE [presence-9] []     OID for : fanIndex = 1.3.6.1.2.1.47.1.1.1.1.1.1012
    07/02/14 12:39:53.211 TRACE [presence-9] []     OID for : fanOperStatus = 1.3.6.1.4.1.9.9.13.1.4.1.3.1012
    07/02/14 12:39:53.211 TRACE [presence-9] [] Get fragment
    07/02/14 12:39:53.211 TRACE [presence-9] [] Creating PDU: Get
    07/02/14 12:39:53.211 TRACE [presence-9] []     VarBind OID=1.3.6.1.2.1.47.1.1.1.1.1.1010
    07/02/14 12:39:53.211 TRACE [presence-9] []     VarBind OID=1.3.6.1.4.1.9.9.13.1.4.1.3.1010
    07/02/14 12:39:53.211 TRACE [presence-9] []     VarBind OID=1.3.6.1.2.1.47.1.1.1.1.1.1011
    07/02/14 12:39:53.211 TRACE [presence-9] []     VarBind OID=1.3.6.1.4.1.9.9.13.1.4.1.3.1011
    07/02/14 12:39:53.211 TRACE [presence-9] []     VarBind OID=1.3.6.1.2.1.47.1.1.1.1.1.1012
    07/02/14 12:39:53.211 TRACE [presence-9] []     VarBind OID=1.3.6.1.4.1.9.9.13.1.4.1.3.1012
    07/02/14 12:39:53.218 TRACE [presence-9] [] Error Status: 0
    07/02/14 12:39:53.218 TRACE [presence-9] [] Error index:  0
    07/02/14 12:39:53.218 TRACE [presence-9] [] SNMP Null was returned for class com.cisco.server.managedobjects.bridge.Fan3KStats attribute fanIndex
    07/02/14 12:39:53.218 TRACE [presence-9] []     Setting attribute: fanOperStatus
    07/02/14 12:39:53.218 TRACE [presence-9] []     SnmpInt Value : ?
    07/02/14 12:39:53.218 TRACE [presence-9] [] GetMultiAttributes, storing result, class=com.cisco.server.managedobjects.bridge.Fan3KStats, attr=fanOperStatus
    07/02/14 12:39:53.218 TRACE [presence-9] [] SNMP Null was returned for class com.cisco.server.managedobjects.bridge.Fan3KStats attribute fanIndex
    07/02/14 12:39:53.218 TRACE [presence-9] []     Setting attribute: fanOperStatus
    07/02/14 12:39:53.218 TRACE [presence-9] []     SnmpInt Value : ?
    07/02/14 12:39:53.218 TRACE [presence-9] [] GetMultiAttributes, storing result, class=com.cisco.server.managedobjects.bridge.Fan3KStats, attr=fanOperStatus
    07/02/14 12:39:53.218 TRACE [presence-9] [] SNMP Null was returned for class com.cisco.server.managedobjects.bridge.Fan3KStats attribute fanIndex
    07/02/14 12:39:53.218 TRACE [presence-9] []     Setting attribute: fanOperStatus
    07/02/14 12:39:53.218 TRACE [presence-9] []     SnmpInt Value : ?
    07/02/14 12:39:53.218 TRACE [presence-9] [] GetMultiAttributes, storing result, class=com.cisco.server.managedobjects.bridge.Fan3KStats, attr=fanOperStatus
    07/02/14 12:39:53.218 TRACE [presence-9] [] GetMultiAttributes, assembling attributes
    07/02/14 12:39:53.218 TRACE [presence-9] []     MIB lookup, OID for: powerSupplyIndex = 1.3.6.1.2.1.47.1.1.1.1.1
    07/02/14 12:39:53.218 TRACE [presence-9] []     GetMultiAttributes needs class=com.cisco.server.managedobjects.bridge.PowerSupply3kStats, field=powerSupplyIndex
    07/02/14 12:39:53.218 TRACE [presence-9] []     MIB lookup, OID for: powerSupplyOperStatus = 1.3.6.1.4.1.9.9.13.1.5.1.3
    07/02/14 12:39:53.218 TRACE [presence-9] []     GetMultiAttributes needs class=com.cisco.server.managedobjects.bridge.PowerSupply3kStats, field=powerSupplyOperStatus
    07/02/14 12:39:53.218 TRACE [presence-9] [] GetMultiAttributes invoked
    07/02/14 12:39:53.218 TRACE [presence-9] [] GetMultiAttributes building OIDs for next PDU
    07/02/14 12:39:53.218 TRACE [presence-9] [] Adding attributes for object PowerSupply3kStats[151206060_,1009]
    - The switch sends the SNMP Trap, based on the followings:
    Jul  7 13:38:30 UTC: SNMP: Packet sent via UDP to IP_ADDRESS
    Jul  7 13:38:30 UTC: %PLATFORM_THERMAL-6-FRU_FAN_OIR: Switch 1: System fan 1 removed
    Jul  7 13:38:30 UTC: %PLATFORM_THERMAL-1-FRU_FAN_NOT_PRESENT: Switch 1: System fan 1 not present
    Jul  7 13:38:30 UTC: SNMP: Queuing packet to IP_ADDRESS
    Jul  7 13:38:30 UTC: SNMP: V2 Trap, reqid 33202, errstat 0, erridx 0
    sysUpTime.0 = 576753333
    snmpTrapOID.0 = ciscoEnvMonMIBNotifications.8
    ciscoEnvMonFanStatusEntry.2.1010 = Switch 1 - FAN 1, NotExist
    ciscoEnvMonFanStatusEntry.3.1010 = 5
    Jul  7 13:38:30 UTC: SNMP: Queuing packet to IP_ADDRESS
    Jul  7 13:38:30 UTC: SNMP: V2 Trap, reqid 33203, errstat 0, erridx 0
    sysUpTime.0 = 576753333
    snmpTrapOID.0 = ciscoEnvMonMIBNotifications.8
    ciscoEnvMonFanStatusEntry.2.1010 = Switch 1 - FAN 1, NotExist
    ciscoEnvMonFanStatusEntry.3.1010 = 5
    Jul  7 13:38:30 UTC: SNMP: Queuing packet to IP_ADDRESS
    Jul  7 13:38:30 UTC: SNMP: V2 Trap, reqid 33204, errstat 0, erridx 0
    sysUpTime.0 = 576753333
    snmpTrapOID.0 = ciscoEnvMonMIBNotifications.8
    ciscoEnvMonFanStatusEntry.2.1010 = Switch 1 - FAN 1, NotExist
    ciscoEnvMonFanStatusEntry.3.1010 = 5
    Jul  7 13:38:30 UTC: SNMP: Queuing packet to IP_ADDRESS
    Jul  7 13:38:30 UTC: SNMP: V2 Trap, reqid 33205, errstat 0, erridx 0
    sysUpTime.0 = 576753333
    snmpTrapOID.0 = ciscoEnvMonMIBNotifications.8
    ciscoEnvMonFanStatusEntry.2.1010 = Switch 1 - FAN 1, NotExist
    ciscoEnvMonFanStatusEntry.3.1010 = 5
    Jul  7 13:38:31 UTC: SNMP: Packet sent via UDP to IP_ADDRESS
    Jul  7 13:38:31 UTC: SNMP: Packet sent via UDP to IP_ADDRESS
    Jul  7 13:38:31 UTC: SNMP: Packet sent via UDP to IP_ADDRESS
    Jul  7 13:38:31 UTC: SNMP: Packet sent via UDP to IP_ADDRESS 
    Jul  7 13:38:45 UTC: SNMP: Packet sent via UDP to IP_ADDRESS
    Jul  7 13:38:51 UTC: %PLATFORM_THERMAL-6-FRU_FAN_OIR: Switch 1: System fan 1 inserted
    Jul  7 13:38:54 UTC: SNMP: Queuing packet to IP_ADDRESS
    Jul  7 13:38:54 UTC: SNMP: V2 Trap, reqid 33206, errstat 0, erridx 0
    sysUpTime.0 = 576755733
    snmpTrapOID.0 = ciscoEnvMonMIBNotifications.8
    ciscoEnvMonFanStatusEntry.2.1010 = Switch 1 - FAN 1, Normal
    ciscoEnvMonFanStatusEntry.3.1010 = 1
    Jul  7 13:38:54 UTC: SNMP: Queuing packet to IP_ADDRESS
    Jul  7 13:38:54 UTC: SNMP: V2 Trap, reqid 33207, errstat 0, erridx 0
    sysUpTime.0 = 576755733
    snmpTrapOID.0 = ciscoEnvMonMIBNotifications.8
    ciscoEnvMonFanStatusEntry.2.1010 = Switch 1 - FAN 1, Normal
    ciscoEnvMonFanStatusEntry.3.1010 = 1
    Jul  7 13:38:54 UTC: SNMP: Queuing packet to IP_ADDRESS
    Jul  7 13:38:54 UTC: SNMP: V2 Trap, reqid 33208, errstat 0, erridx 0
    sysUpTime.0 = 576755733
    snmpTrapOID.0 = ciscoEnvMonMIBNotifications.8
    ciscoEnvMonFanStatusEntry.2.1010 = Switch 1 - FAN 1, Normal
    ciscoEnvMonFanStatusEntry.3.1010 = 1
    Jul  7 13:38:54 UTC: SNMP: Queuing packet to IP_ADDRESS
    Jul  7 13:38:54 UTC: SNMP: V2 Trap, reqid 33209, errstat 0, erridx 0
    sysUpTime.0 = 576755733
    snmpTrapOID.0 = ciscoEnvMonMIBNotifications.8
    ciscoEnvMonFanStatusEntry.2.1010 = Switch 1 - FAN 1, Normal
    ciscoEnvMonFanStatusEntry.3.1010 = 1
    Jul  7 13:38:55 UTC: SNMP: Packet sent via UDP to IP_ADDRESS
    Jul  7 13:38:55 UTC: SNMP: Packet sent via UDP to IP_ADDRESS
    Jul  7 13:38:55 UTC: SNMP: Packet sent via UDP to IP_ADDRESS
    Jul  7 13:38:55 UTC: SNMP: Packet sent via UDP to IP_ADDRESS
    It seems like PI and the switch doesn't understand each other concerning the fan...
    Thanks for any ideas, comments and feedbacks,
    Csaba

    I have the very same problem.
    The switch has a power supply error (one of the two is down). There is the syslog message in PI about it, but no event has created, so nor alarm is there as well.
    When I check the status of the switch in the Device Work Center, and choose the Environment in Device Details I can see that PI has not realized the power supply error.
    However when I click on the Sync for this very device the power supply status is updated, but still no event or alarm.
    This is the case with the FANs as well.

  • Prime Infrastructure 2.0 possible to grab SNMP poll from WAN?

    Our objective is to monitor all our network devices using Cisco Prime Infrastructure 2.0 which include LAN site and WAN site. LAN site we have various of equipments example cisco router 3800, ASA 5510, Catalyst switch 6500 and other access switches. WAN site we have ASA 5520. Currently our ASA is located at ISP which has its own public IP. Question is, it is possible to monitor our ASA 5520 which at WAN site? Attached is our topology sample.
    Note: We has no issues on monitoring LAN equipments.

    Hi Remysyaku
    Are you able to do snmp polling on ASA from any other software like net-snmp etc.
    I mean you need to check whther problem is snmp connectivity or PI is not able to manage ASA.
    Also there is a bug due to which ASA5515x will be shown as unsupported in PI 2.0 but ASA 5520 and further should show managed correctly.
    Thanks
    Mahavir

  • Cisco Prime Infrastructure 1.2 on Windows Server/Hyper-V

    Hi Everyone,
    In Entriprise environment while designing a BYOD solution we need to integrate ISE3315 with CPI 1.2. I know that Cisco ISE software either runs on 3315 platform or other option is virtual appliance (which is VMware based). Now problem is that we have Hyper-V environment as standard so I need to go with ISE-3315. Here my concern is to I install CPI 1.2 on Hyper-V, or on a Windows Server (2008 or 2012) based machine. Is that doable?
    Any help, suggessions would be warmly welcomed.
    Thanks,
    Azhar...

    Cisco Prime LMS will slowly be phased out in favor of Cisco Prime Infrastructure and hence there are no new mainline releases are planned to provide support to new Hardware or virtualization support.
    However, Prime LMS do support Hyper V Virtualization (As an installable in Windows 2008). Please note that Virtualization technologies like, VMWare and Hyper V virtualization systems are not supported in LMS 5000, and LMS 10000 Devices license, in Windows. VMWare Systems are supported in LMS 5000, and LMS 10000 Devices license in Soft Appliance. Virtualization technologies like, VMWare and Hyper V virtualization systems are not supported in LMS 5000, and LMS 10000 Devices license, in Windows. VMWare Systems are supported in LMS 5000, and LMS 10000 Devices license in Soft Appliance.
    For more details on HW and SW requirements for Cisco Prime LMS, please check document here.
    -Thanks
    Vinod

  • Using Windows Network Policy Server to authenticate Prime Infrastructure 1.4 admin access

    I am using Prime Infrastructure 1.4 and I am needing to set up RADIUS Authencation.  I am using Microsoft Network Policy Server.   I have done all of the setup on both systems.  I have matched up the settings the best I can on both systems.  I am trying to use CHAP.  I keep getting username or passwrod is not valid.  In a effort to test I changed the Authentication type to PAP (I do not want to use this because it is not encrypted) But in a effort of testing I changed the setting on both the NPS and on Prime.  I am now able to log in.  Changing back to CHAP it fails and states the Username or Password is invalid.  SO, PLEASE HELP!!!!

    Ok, I was able to resolve this over the weekend.  The actual fix is a little complicated.  You can find the full explination here: http://technologyordie.com/windows-nps-radius-authentication-of-cisco-prime-infrastructure
    The basics are that Prime (1.3 is the version I am using at this point) expects two AV pairs from radius.  They are as as follows:
    NCS:role0=Admin
    NCS:virtual-domain0=ROOT-DOMAIN
    "Admin" is the name of the group you would like your users to have access at and "ROOT-DOMAIN" is the name of the domain you would like them to have access to.
    For TACACS+ I suspect the AV Pairs are going to be the same but I have not been able to test that.

  • Cisco Prime Infrastructure 1.x Server requirements & Operating System

    Dear Friends
    I wish you are in very good health ........ I really very confused regarding LMS and i really needs your help ........ I need to order LMS for one of our customer with 500 devices and reporting cabailities ..... So i chosse base license "R-PI-1.1-K9" and 500 device license "R-PI-1.1-500-K9" and
    Compliance Management - 500 Device License "L-PI-1.1-CM-500"
    What really confused me that i tried to search server cabalitity for my requirments & Operating system and couldn't find it ...... what i need your help for is the following:
    1) What is the server requirments ???
    2) What is operating system (windows 2008 or VMWare VMware ESX/ESXi Version 4.1 or 5.0)
    3) Is their any deticated applicance from Cisco ??
    Please help
    Thanks in advance

    In addition to the release notes for the 4.2.3 patch noted above, please also see  the 4.2 release notes which further direct you:
    Server and Client Requirements
    For information on server and client requirements for the system and browser, see Chapter 2 of Installing and Migrating to Cisco Prime LAN Management Solution 4.2 at:
    http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.2/install/guide/
    install.html
    To summarize the options it describes, you can run the LMS product on any number of platforms - a dedicated Cisco hardware appliance, a physical server of your own with Windows or Solaris OS, a VMware server with a Windows server OS guest, or a "soft appliance". The soft appliance is package built with the underlying guest OS (a customized RHEL distribution with Cisco's Application Development Environment OS (ADE-OS)) built-in.
    Once you have installed LMS 4.2, you should patch - first to 4.2.2 and then to the current 4,2,3. then run the software update feature to bring all package components up to date.
    Regarding licensing, there is a Cisco Prime Infrastructure Ordering and Licensing Guide here.
    When you order the licenses for PI 1.2 (new customer), you order the base product and then Lifecycle licenses (required for either PI 1.2 Lifecycle and LMS installations - which option is a customer choice) and, optionally, Compliance and Assurance licenses. An upgrade order for an existing LMS customer will include the base PI 1.2 with Lifecycle licenses as well as LMS in a single SKU as noted in tables 4 and 5 of the Ordering Guide.

  • Using Windows Network Policy Server to authenticate Prime Infrastructure 1.2 admin access

    Dear all,
    How can I authenticate admin access to the Prime infrastructure 1.2 using AAA mode RADIUS with Windows Network Policy Server as RADIUS server? I find some information using ACS as RADIUS server but cannot find how to for Windows NPS.
    I try to configure the NPS but an error prompted when logging in to PI using an account in the NPS server, "No authorization information found for Remote Authenticated User. Please check the correctness of the associated task(s) and Virtual Domain(s) in the remote server"
    Thanks for your help.
    Dennis

    Ok, I was able to resolve this over the weekend.  The actual fix is a little complicated.  You can find the full explination here: http://technologyordie.com/windows-nps-radius-authentication-of-cisco-prime-infrastructure
    The basics are that Prime (1.3 is the version I am using at this point) expects two AV pairs from radius.  They are as as follows:
    NCS:role0=Admin
    NCS:virtual-domain0=ROOT-DOMAIN
    "Admin" is the name of the group you would like your users to have access at and "ROOT-DOMAIN" is the name of the domain you would like them to have access to.
    For TACACS+ I suspect the AV Pairs are going to be the same but I have not been able to test that.

Maybe you are looking for