RME 4.3.1 NetConfig behavior

A user has a NetConfig job set to execute "no speed 10" among a bunch of "no" commands on a couple of interfaces on two routers running two different versions of IOS 12.x.
routerA has one of those IOS bugs that produces the extraneous "username: " prompt before entering enable mode. This made NetConfig fail via SSH, so it seemed to have fallen back to TFTP, according to the job output. routerA was reported as a "success", including the "no speed 10" line in the output.
routerB had no such issue, but it "failed" because the IOS complained about "Cannot set speed to auto unless duplex is set to auto". I do not know at this time if routerA interface has/had the same issue.
The user says NetConfig actually failed to execute "no speed 10" on both routers' interfaces. Does that sound plausible? I didn't/don't have debug on, so I'm not sure how useful the job logs are.

It certainly could be. Just because deviceA was reported as successful doesn't really mean it was. Since TFTP was used, and TFTP has not error detection, the command could have been rejected by IOS for the same reason that deviceB rejected it. The TFTP mechanism for deployment is nice because it's fast, but it's not a silver bullet. IOS will still evaluate the commands with the parser, and if it doesn't like the syntax, or if the commands attempt to do something bad or unsupported, they will be silently rejected.

Similar Messages

LMS 3.2 - Change Management

Hi,
Is there something within CiscoWorks LMS 3.2 that allows you to raise or generate some kind of form that can be emailed or printed if a change on a device is required.
Nish

You can use the job approval options in RME to perform change management using the steps outline below from the users guide.
http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_resource_manager_essentials/4.3/user/guide/jobmgt.html
Enabling Approval and Approving Jobs Using Job Approval
Resource Manager Essentials (RME) applications, such as NetConfig, Config Editor, Archive Management, and Software Management allow you to schedule jobs to perform their tasks. Job Approval allows you to require that one of a group of users designated as job Approvers approves each job before it can run.
This section contains:
•Job Approval Workflow
•Job Management
Job Approval sends job requests through e-mail to users on a job's Approver list. If none of the Approvers approve the job before its scheduled run time, or if an Approver rejects the job, the job is moved to the rejected state and will not run.
When Job Approval is enabled, applications that use it, require you to schedule the job to run in the future, rather than immediately. Job approval cannot be enabled for jobs that run immediately.
A user with the appropriate privileges uses a CiscoWorks application to schedule jobs.
When you use Job Approval, different people can perform different tasks:

QPM 4.1 policy deployment

Hi,
I have an issue deploying a policy with QPM; The policy I am deploying gets stuck on the "in progress" state and never deploys properly. Looking at the CLI of the router I can see some of the policy commands have been entered from QPM, but the job gets stuck half way. For example all the class-maps are there, but the policy map never makes it into the config.
The device and IOS and QoS features are supported fully, so its not a device support issue. I have even manually created the policy via CLI and then imported this via QPM, and then tried to deploy it back to the router - but this fails.
I have created a simple policy of 4-5 lines and deployed this successfully via QPM, so the functionality is there. Each time I try and deploy the desired full policy I get about 20 lines of config before the job stops and "hangs"
anyone have any ideas???
Thanks in advance,
Lee.

That rings a bell: QPM 4.1 is shipped with RME 4.2, whose NetConfig component is the one that actually deploys the policies. In that case, you're probably hitting a combination of the three known bugs: CSCsv95235 / CSCsw39641 / CSCsw88378. To overcome the bugs, you could contact Cisco TAC to obtain a consolidated patch for RME 4.2. Just make sure the patch received has the md5 checksum of 326986eef9c9e46801a8623014ddd07e. Here's an older thread from another QPM user who experienced the same issue: https://supportforums.cisco.com/message/680263
Alternatively, the bugs are supposedly fixed in RME 4.3, but I don't see a QPM 4.2 available yet to upgrade to.

LMS 3.2 and RME NetConfig Job - No Devices

I'm runnig CW LMS 3.2 on Solaris 10. If I go to Resource Management Essentials, click on NetConfig, and then select "create" as in "create a NetConfig job", it takes me to the Netconfig Jobs screen. On this screen, I check "select all devices ", but afterwards it says that "0 devices selected". There are over 1000 devices in our inventory, so I cannot understand why they are not found. They are visible on the system module, and in RME-Devices. But they are not availalble for RME Netconfig jobs.
Any ideas?

When I enter the NetConfig jobs screen, I click on "create" ,which takes me to the next screen, where I click on "device" , which takes me to the next screen where I have a select "device box" and a "select task" box. Checking the "all devices" option results in "0 devices select". If I click on the "+" sign on the "all devices" option to expand a list of all devices, it changes to a "-" but does not show any devices.
About the screen shot, due to the confidential nature of my work environment, I may not be allowed to do that. I'm checking with the security manager about that now.

Netconfig jobs stuck on RME 3.5

Hello fellow netpros,
We currently have CiscoWorks LMS 2.2 installed and sometimes when a netconfig job is run it just get's stuck in the "Job Started" state for no reason.
Then I restart the Change Audit deamon under Ciscoworks Admin, run the same job again and it completes succesfully.
Sometimes jobs also stops and checking the job details the status appears as "Device was not attempted for update".
The CW Server has:
-RME 3.5 with IDU 13
-CM 3.3 with IDU 11
-DFM 1.2 with IDU 5
-CiscoView 5.5
The latest patches are applied
This case has been on TAC's hands for 2 weeks.
Also, I would like to know what is the current procedure for applying Microsoft patches to the CiscoWorks server, I mean is it advisable to run Windows Update on the CW server ? Is it recommended by Cisco ?
I would appreciate if anyone can shed a light on this.
Regards.

Does it throw some other error message as well ?

Unable to Select Devices in LMS RME Netconfig

Hi,
I am trying to apply netconfig to some devices through RME , however i can see the devices but not able to select them
the checkbox is disabled
any suggestions

These devices are probably put to 'unmanaged' or 'suspended' state.
See "device management state"
Cheers,
Michel

Cisco RME Netconfig

Hi all,
I am using CiscoWorks RME 4.0 Netconfig to push some config. I am creating a new Netconfig job. After selecting a device (2621XM), I selected my user-defined SSH task. It didn't show up on the next screen under "Applicable Tasks". However, if I chose the system defined SSH task for the same device, the system defined SSH task showed up.
Why is my user defined task not showing up?
Thanks!

Never mind, I found out where the problem is. Under user defined task, you can choose device type to apply the task to.

CISCOWORKS - RME netconfig error

When I go to RME>Config Mgnt>NetConfig>User-Define Task i receive the follow error:
CFG0053: No User-defined tasks are available.
I don't can do any configuration.
the version of RME is 4.1.1 and the licence is for 100 equipments, I must update the module? or someone know why appear this error?

I think the problem is more serious
as seen, does not allow me create any task: in the menu, "Tasks" on the left can not deploy any device.
When i go create a task in RME>Config Mgmt>Netconfig>Netconfig jobs i cant not select ALL the devices as shown in the picture below: the host ING_C58_Sw_P2_03 can not choose, instead the other can choose
which will be the cause?

LMS 3.2 Netconfig, Email Output

Hi,
Below is version information. Via the CLI, I have setup a NetConfig job to run show ephone commands on a router. I get the email status alerts (creation, approval, deletion etc) but I wanted to know if I can actually send outcome of those commands in an email (part of the body or an attachement) rather than logging into LMS and viewing it from there.
CM 5.2
DFM 3.2
HUM 1.0
IPM 4.2
RME 4.3
VNM 1.0
NJ

Hi
Please attached the screen shot of
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
the Common services > Software Center>Software Update
what is the RME version ?
Thanks--
Afroj

LMS 3.2 and RME 4.3.1 telnet with tacacs+ fails

Hi everyone,
I'm having issue with credentials verification for telnet with TACACS+ enabled. Verification job fails with "Telnet: Incorrect" and an exception to daemons.log:
om.cisco.nm.lib.cmdsvc.CmdSvcException: com.cisco.nm.lib.cmdsvc.telnet.TelnetException: Unable to read from socket
        at com.cisco.nm.lib.cmdsvc.TelnetSession.connect(TelnetSession.java:89)
        at com.cisco.nm.lib.cmdsvc.Session.connect(Session.java:152)
        at com.cisco.nm.lib.cmdsvc.AuthHandler.connect(AuthHandler.java:254)
        at com.cisco.nm.lib.cmdsvc.OpConnect.invoke(OpConnect.java:56)
        at com.cisco.nm.lib.cmdsvc.SessionContext.invoke(SessionContext.java:299)
        at com.cisco.nm.lib.cmdsvc.Engine.process(Engine.java:57)
        at com.cisco.nm.lib.cmdsvc.LocalProxy.process(LocalProxy.java:22)
        at com.cisco.nm.lib.cmdsvc.CmdSvc.connect(CmdSvc.java:190)
        at com.cisco.nm.lib.cmdsvc.CmdSvc.connect(CmdSvc.java:166)
        at com.cisco.nm.xms.xdi.pkgs.LibDcma.persistor.CliOperator.<init>(CliOperator.java:214)
        at com.cisco.nm.xms.xdi.pkgs.SharedDcmaIOS.transport.IOSCliOperator.<init>(IOSCliOperator.java:116)
        at com.cisco.nm.xms.xdi.pkgs.SharedDcmaIOS.transport.CatIOSSwitchCliOperator.<init>(CatIOSSwitchCliOperator.java:56)
        at com.cisco.nm.xms.xdi.pkgs.SharedDcmaIOS.transport.Cat6kIOSCliOperator.<init>(Cat6kIOSCliOperator.java:32)
        at com.cisco.nm.xms.xdi.pkgs.SharedDcmaIOS.transport.Cat6kIOSConfigOperator.getOperator(Cat6kIOSConfigOperator.java:35)
        at com.cisco.nm.xms.xdi.pkgs.LibDcma.persistor.OperatorCacheManager.getOperatorForDevice(OperatorCacheManager.java:50)
        at com.cisco.nm.xms.xdi.pkgs.LibDcma.persistor.ConfigOperation.doConfigOperation(ConfigOperation.java:99)
        at com.cisco.nm.xms.xdi.pkgs.SharedDcmaIOS.transport.IOSConfigOperator.fetchConfig(IOSConfigOperator.java:73)
        at com.cisco.nm.rmeng.dcma.configmanager.ConfigManager.updateArchiveForDevice(ConfigManager.java:658)
        at com.cisco.nm.rmeng.dcma.configmanager.ConfigManager.performCollection(ConfigManager.java:1646)
        at com.cisco.nm.rmeng.dcma.configmanager.CfgUpdateThread.run(CfgUpdateThread.java:27)
I've tried to edit TacacsPrompts.ini also with suggestion to enter "," after last space character
I'm using only TACACS so all prompts are the same. I'm using MOTD also.
TACACS prompt looks like this example : "TEST username: ,TEST password: " so this looks obvious.
The issue started to appear after some patching done to RME and CiscoView, but I'm not sure that this is connected anyhow.
Thanks for all the help

Hi!
They gave me the solution like this:
line vty
timeout login response 90
Ofcourse it helped but this it still inproper behavior from LMS side. It sends the username char by char for more than a minute! Guess the scenario with thousands of devices.... It will take ages to telnet to them. And network performance has nothing to do with that - i'm running the LMS on a powerful Sun and the network is mostly gigabit connected.
Setting timeout login response is a workaround but does not fix the problem.
Still waiting fot some fix to LMS not for fairly acceptable workarounds.
This is NOT case with TACACS enabled on a router. The box responds within moment when telneted using commandline or other NMS software. This is a problem with LMS telnet login mechanism and prompt parsing (TacacsPrompts.ini doesn't seem to work at all, I could type there anything and it has no effect on the login proces).
Besides this SSH to the same box wit TACACS works flawlessly. But then it parses only password prompt not the username - this is sent by ssh.

LMS 3.2 - RME 4.3.1 - Report Generator scheduled Syslog-Reports

Hi all,
within Report Generator in RME 4.3.1 I discovered an issue with newly added devices in scheduled Syslog Severtiy Level Summary Reports.
Settings for the report
- Device Selector: All Devices
- Data Range: 24 hours
- Schedule: daily, at xx:xxh
Our purpose for this job is to get a daily summary of syslogs of all managed devices.
But there seems to be a problem with the dynamic update of newly added devices to DCR and RME-Device-DB.
The report only creates output for all managed device at timestamp of report creation, not for newly added devices.
Is this a know bug, or is this the planned behavior?
Any suggested workarounds/fixs are appreciated.
Thanks a lot for your help.
Lothar

This is documented in the online help for the report generator, sync archive, etc. pages.
# Group Selector — To schedule a job for dynamic group of devices.
The job is scheduled only for the devices that are present in the selected group at the time when the job is run. The customizable group selector for jobs evaluates static groups also as dynamic during run time.

CiscoWorks RME 4.1.1 - CRIN0014 Error

Hello,
Not sure when this started, but I noticed the following error when trying to go to the report generator in RME:
CRIN0014: Operation failed while connecting to JRM. Make sure jrm and/or CTMJrmWrapper services are running.
I went and made sure all that I downloaded and applied all patches available to Common Services and RME and this did not do anything. The server is connected to ACS and I re-joined them and re-registered all my applications. The other thing I am noticing is when I go to do practically anything in RME that involved the device selector RME shows 0 devices, but in the RME home page I see all 900+ of my devices listed as "normal".
This is a weird issue that just came out of nowhere. Has anyone seen behavior like this in the past? Not sure what I would need to post as far as log files, etc. but I can provide them as needed.
Any help would be appreciated.
Thanks,
AJ Schroeder

AJ,
With this version of RME you MAY be hitting bug CSCte49301. Based on the release note there is a workaround you can try (see below):
--Workaround
Shutdown CiscoWorks Daemon Manager with the following command from the server's command prompt:
net stop crmdmgtd
Delete the following two files:
NMSROOT\MDC\tomcat\webapps\rme\WEB-INF\lib\ctmregistry
NMSROOT\MDC\tomcat\webapps\rme\WEB-INF\lib\ctmregistry.backup
Restart CiscoWorks Daemon Manager with the following command:
net start crmdmgtd
If that does not work, then the Windows Remote Management service must be stopped, and disabled. Then, CiscoWorks Daemon Manager must be restarted.
It also could be a permission issue with teh system identity user and its permission on ACS. Ensure the system identity username is configured in ACS with full access privileges in the Ciscoworks "Shared Profile" components.
Rob

RME - CLI reboot after IOS upgrade?

Hi,
Is there any way for RME to invoke a CLI reboot after an image upgrade job? I maintain a network without SNMP RW permissions.
LMS 3.2
RME 4.3.1
network devices - switches - mainly 3750(regular/g/e), 3560(regular/g), and a few 2950's.

You could create a Netconfig job to do this. Netconfig has a template for reloading a device. You could do this automatically by creating a script which gets called when the SWIM job finishes. The script could call cwcli to create a Netconfig job. For example:
cwcli netconfig createjob -u admin -p admin -devicelist rtr1 -commandfile cmd.dat -description "cwcli job to reload rtr1" -mode enable
The contents of cmd.dat would be:
reaload

Ciscoworks -- netconfig -- URN_NOT_FOUND : urn "JRM" : Not found

Hi Cisco Team,
Im posting this case as i did not get a proper solution from the thread {https://supportforums.cisco.com/message/646282#646282,
scoWorks and Databases urgent}. Here the issue is almost same as ....
netconfig window opens with an error message ::
NS0033 : Error occured while processing.
This may be because of URN_NOT_FOUND : urn "JRM" : Not found !!
And an error in the jrm file as :: "FATAL ERROR : Can not connect to database cmf"
This issue started from the day when client noticed that there is a disk constraint in the drive and moved unwanted or non-ciscoworks related file to another storage area. So i was referring the old thread and did the below troubleshooting.
net stop crmdmgtd
net start crmdmgtd
rebooted the ciscowoks server
Found the below files under NMSROOT\databases\cmf
1.cmf.db (Did not find cmf.log)
2.a folder called orig
I did not do NMSROOT\objects\db\win32\dbsrv9 -f NMSROOT\databases\cmf\cmf.db (Not sure any data will be lost after doing this step and not sure if it is required ??)
You may please find the attached pdshow, jrm.log, netconfigclient logs etc....Noticed that jrm is never started nor started if tried manually. And in services.msc CWCS cmf database status is neither showing as started nor stopped, but blank as attached in the screen shot.
From the another thread {https://supportforums.cisco.com/message/680779#680779,
CiscoWorks LMS 2.2 Problems with Jobs (jrm process) }and confirmed that\CSCOpx\www\classpath\cisco\nm\cmf\DBService\DBserver.properties --have all the five lines properly.
Kindly help as soon as possible...
~PR

YES !! thats it, the issue is resolved......and im able to do netconfig jobs.
This thread is closed.
Note:-
I was afraid to do the below step prior to post this thread as i was unaware of the impact.
dbsrv9 -f
Can you pls let me know what really the script does on the cmf database (dbsrv9 -f)
Could you let me know how to reinitialize the cmf/rme/ani etc (procedure)..
what precautions to be done b4 doing this...
how to confirm the connectivity to the databases of cmf/rme/ani etc.
Im sure there would be some commands to check this.
This is just to add my knowledge base.
regards
rajesh

CiscoWorks Netconfig - "Not Attempted"

Hi All,
I've been tasked with amending the config on all of our Cisco kit around the organisation with additional lines to suit a new TACACS Server. I've tried around 140 so far and at least 30 have failed with the statement "not attempted". Checking the log on the devices there are none of the usual entries for a netconfig job and it does look a lot like Ciscoworks has indeed not attempted to amend the config. I've tried the same devices several times with the same result. The devices work fine in other areas of CW, e.g. the configs are being archived ok.
The frustrating thing is that there is no reason given why the device(s) has been skipped. Does anyone have any idea why this is happening?
I'm running LMS 3.2 and RME 4.3.1
Many Thanks
Scott

What version of ACS are you running? And verify the devices are in ACS prior and get the IC_Server.log from CSCOpx/log.

RME 4.3.1 NetConfig behavior

Similar Messages

Maybe you are looking for