SNMP server and CUCM 9

Hi all,
Environment--CUCM+2x2951 PSTN GWs.
We need free SNMP server which is best solution with CUCM 9.
Server should get SNMP traps from CUCM and Cisco2951 GW.
KR
Andriy

You can also check fornet-snmp's snmptrapd (http://net-snmp.sf.net). simple and free
Br,
Nadeem 
Please rate all useful post.

Similar Messages

  • SNMP Server and Syslog

    We have all of our network equipment configured SNMP and syslog.
    There is also Ciscoworks configured.
    Is Cisco works considered the SNMP server?
    If so, is this also where all of the traps age going?
    There are a ton of traps configured and I don't see how they are all viable in Ciscoworks.
    Ther are even more than this, but here is a sample:
    y
    snmp-server enable traps syslog
    snmp-server enable traps flex-links status
    snmp-server enable traps sonet
    snmp-server enable traps dial
    snmp-server enable traps fru-ctrl
    snmp-server enable traps entity
    snmp-server enable traps rsvp
    snmp-server enable traps csg agent quota database
    snmp-server enable traps srp
    snmp-server enable traps vtp
    snmp-server enable traps vlancreate
    snmp-server enable traps vlandelete
    snmp-server enable traps flash insertion removal
    snmp-server enable traps c6kxbar intbus-crcexcd intbus-crcrcvrd swbus
    snmp-server enable traps envmon fan shutdown supply temperature status
    snmp-server enable traps port-security
    snmp-server enable traps mpls traffic-eng
    snmp-server enable traps mpls ldp
    snmp-server enable traps isakmp policy add
    snmp-server enable traps isakmp policy delete
    snmp-server enable traps isakmp tunnel start
    snmp-server enable traps isakmp tunnel stop
    snmp-server enable traps ipsec cryptomap add
    snmp-server enable traps ipsec cryptomap delete
    snmp-server enable traps ipsec cryptomap attach
    snmp-server enable traps ipsec cryptomap detach
    snmp-server enable traps ipsec tunnel start
    snmp-server enable traps ipsec tunnel stop
    snmp-server enable traps ipsec too-many-sas
    snmp-server enable traps alarms
    snmp-server enable traps vlan-mac-limit
    snmp-server enable traps voice poor-qov
    snmp-server enable traps mpls vpn

    If you're talking about the Ciscoworks server....
    When you add the device to the network, two things can happen...
    1. If Ciscoworks is configured to discover the network through the CM application, the new device will be automatically discovered.
    or
    2. The device will can be manually added into Ciscoworks via the RME application, and then syncronized to DFM.
    You still should point the traps to the LMS server through the config on the device (as mentioned earlier).
    Now if you're not talking about Ciscoworks, but some generic NMS, you will definitely have to have a trap receiver on the server, and still on the device have the "snmp-server host" command set to point the traps there.
    Hope this helps,
    -Joe

  • Best Practices for NCS/PI Server and Application Monitoring question

    Hello,
    I am deploying a virtual instance of Cisco Prime Infrastructure 1.2 (1.2.1.012) on an ESX infrastructure. This is being deployed in an enterprise enviroment. I have questions around the best practices for moniotring this appliance. I am looking to monitor application failures (services down, db issues) and "hardware" (I understand this is a virtual machine, but statistics on the filesystem and CPU/Memory is good).
    Firstly, I have enabled via the CLI the snmp-server and set the SNMP trap host destination. I have created a notification receiver for the SNMP traps inside the NCS GUI and enabled the "System" type alarm. This type includes alarms like NCS_DOWN and PI database is down. I am trying to understand what the difference between enabling SNMP-SERVER HOST via the CLI and setting the Notification destination inthe GUI is? Also how can I generate a NCS_DOWN alarm in my lab. Doing NCS stop does not generate any alarms. I have not been able to find much information on how to generate this as a test.
    Secondly, how and which processes should I be monitoring from the Management Station? I cannot easily identify the main NCS procsses from the output of ps -ef when logged in the shell as root.
    Thanks guys!

    Amihan_Zerrudo wrote:
    1.) What is the cost of having the scope in a <jsp:useBean> tag set to 'session'? I am aware that there are a list of scopes like page, application, etc. and that if i use 'session' my variable will live for as long as that session is alive. (did i get this right?). You should rather look to the functional requirements instead of costs. If the bean need to be session scoped (e.g. maintain the logged in user), then do it so. If it just need to be request scoped (e.g. single page form data), then keep it request scoped.
    2.)If the JSP Page where i use that <useBean> is to be accessed hundred of times a day, will it compensate my server resources? Right now i am using the Sun Glassfish Server.It will certainly eat resources. Just supply enough CPU speed and memory to a server. You cannot expect that a webserver running at a Pentium 500MHz with 256MB of memory can flawlessly serve 100 simultaneous users at the same second. But you may expect that it can serve 100 users per 24 hour.
    3.) Can you suggest best practice in memory management given the architecture i described above?Just write code so that it doesn't unnecessarily eat memory. Only allocate memory if your application need to do so. You should rather let the hardware depend on the application requirements, not to let the application depend on the hardware specs.
    4.)Also, I have implemented connection pooling in my architecture, but my application is to be used by thousands of clients everyday.. Can the Sun Glassfish Server take care of that or will I have to purchase a powerful sever?Glassfish is just an application server software, it is not server hardware. Your concerns are rather hardware related.

  • CUEAC 9.1.1.10 and CUCM 7.1(5) 64 bit TSP Plugin

    Hello,
    I have a customer with CUCM 7.1(5) who has purchased CUEAC 9.1.1.10 and wants to run it on Windows Server 2008 R2 (64 bit).
    According to the data sheet this should be supported but when I go through the CUEAC server installation process it tries to download the 64 bit TSP plugin from the CUCM server.
    This is a problem as CUCM 7.1(5) does not have the 64 bit TSP plugin - it only has the 32 bit version.
    The exact message I get is
    Error occured while downloading Cisco TSP.
    Path: https://10.80.20.12/plugins/CiscoTSPx64.exe
    I have obtained the 64 bit TSP from a later CUCM and done a manual installation hoping that the installer would see the TSP is already installed and skip the step but it does not do so.
    Can anyone suggest how to resolve this?
    I know I could use a 32 bit version of Windows Server or upgrade CUCM but these options are not available.
    Thanks

    Update
    I built a CUCM 9.x server as a virtual machine and integrated CUEAC with that. The 64 bit TSP downloaded and installed ok and I was hoping that I could then reconfigure the TSP CTI manager addresses and the CUEAC CUCM server to point to the version 7.1 CUCM server.
    Unfortunately this did not work as I got a message complaining about version incompatibilities between the CUEAC server and CUCM.
    I do not think there is any workaround for running CUCM 7.1 with CUEAC on a 64 bit Windows Server.
    Luckily for me the customer found an old Windows 2003 32 bit server that they used to run Cisco ACS on. CUEAC installed without a hitch on this server and is running fine.
    If anyone manages to get this working I would be interested to know how.
    Lesson here is do not believe Cisco data sheets

  • SNMP server on PIX IOS 7.2 over VPN

    Hi Team,
    I have a simple query for the issues I m facing currently.
    I have @ remote site  remote site PIX firewall which is configurd to get the Snmp poll on the server locate outside via site to site VPN.
    There is another snmp server located also in inside which I’m not managing it .
    ========================================================================
    below are the command for the snmp configured on PIX.
    snmp-server host inside x.x.x.x community XXXXX ---This is not managed by us
    snmp-server host inside x.x.x.x community XXXXX
    snmp-server host outside y.y.y.y (private IP tunneled though VPN)  poll community YYYYY ---Managed by us
    snmp-server host outside y.y.y.y  poll community YYYYY
    snmp-server community XXXXX
    snmp-server enable traps snmp authentication linkup linkdown coldstart
    snmp-server enable traps syslog
    access-list acl-VPN-tunnel line 2 extended permit ip host z.z.z.z (outside interface of PIX firewall)  host Y.Y.Y.Y (server located outside)
    ==============================================================================
    there are 2 snmp community & server defined in snmp-server host command for 2 different IP address belongs to snmp server  and we can only define one global snmp-server community for any one of them .Question is how the snmp community take a precedence .
    Currently I am able to ping from my snmp server from outside to the PIX firewall outside interface over L2L VPN but somehow the snmp server is not listening when i do port query on 161 por!.
    Appreciate you inputs for the same and let me know if any more details are needed

    What was the resolution?  I am having the same issue.
    Thanks!

  • Difference between MIB retrieval and SNMP server hosts

    Hi all,
    can anybody explain difference between MIB retrieval systems and SNMP server hosts?

    The two of these can both be different systems or the same system
    A MIB retrieval system usually is an NMS system that actively polls the device to collect SNMP/MIB information (counters, stats, etc)
    Whereas a host is typically where traps are sent to from the network devices.
    Most NMS systems act as both a retrieval (poller) and host (trap receiver).

  • Exchange 2013 SP1 and CUCM 9.1.2 - Exch not recognizing called extension

    I think I'm almost there in getting Exchange 2013 SP1 UM working with CUCM 9.1.2...I've got two issues at the moment that I need a little help with.
    1) When I dial my VM pilot (6040) from a UM enabled extension it prompts to enter an extension. When I dial the same extension and let it ring to VM, Exchange picks up and says "the person you are trying to reach does not have a valid voice mail box
    on our system".
    2) This just started happening this afternoon, when I dial my VM pilot (6040) exch3 picks up as thats what I have my route pattern pointing to. If I enter the extension of a mailbox on exch2, I get stuck in a endless loop.
    I've followed this post as a guide but it hasn't resolved my issue.
    https://supportforums.cisco.com/discussion/11914031/exchange-2013-um-and-cucm-86
    My Exchange environment looks like this:
    Site 1:
    exch1 - CAS/Mailbox, used for mainly utility type work, journal, dedicated SMTP flows etc
    exch2 - CAS/Mailbox, part DAG13
    exch3 - CAS/Mailbox, part of DAG13
    Site 2:
    exch2dr - CAS/Mailbox, part of DAG13
    exch3dr - CAS/Mailbox, part of DAG13
    DAG13 is stretched between two sites, there are no users at our DR site so CUCM is pointing to Site 1 for UM. Each site has an internet facing CAS-only server for OWA/EAS etc.
    Any help is greatly appreciated. I'd love to get rid of Unity. 
    EDIT:
    I just found this event in the event logs:
    The Microsoft Exchange Unified Messaging service on the Mailbox server received a diverted call with ID "d51600-3a3140c5-9b8-c1414ac@EXCH3-IPADDR" for extension "4099" on UM dial plan "CUCM" from UM IP gateway "CUCM IP",
    but no UM-enabled mailbox for the corresponding extension could be found. Please check the extension and make sure that the corresponding mailbox is enabled for UM and associated with the correct UM dial plan.

    9.1.2 I think it is, we upgraded to avoid the known DNS bug
    I cant see how to PM you either
    The crux of it was outlined below with some tweaks
    http://blogs.technet.com/b/canitpro/archive/2014/04/30/step-by-step-integration-between-exchange-2013-um-and-cisco-unified-communication-manager.aspx
    As we have multiple combined role servers, our trunks are set up as follows:
    1. 1 x CAS Trunk - contains all CAS Servers on port 5060
    2. 4 x MBX Trunks - contains Maibox Server with ports 5062-5068
    On top of that, we had to Allow "Redirecting Diversion Header Delivery - Inbound (and Outbound)" on the CAS Trunk but DISABLE it on the Mailbox Trunks
    Also, make sure that you are using Telephone Extension Dial plans in Exchange 2013 (Despite them being unable to be associated with a 13 Server - EX13 answers for all calls anyway)
    Lastly, the MS documentation is a little strange - it says that as your last step of UM migration, you should point your Call Manager to 2013 - I don't agree with that statement, EX13 routes calls back to 2010 UM Servers perfectly fine, so treat it the same
    as any other CAS based service - point to 2013, and it will handle the rest

  • Mixing BE6000 UCS Server and "normal" UCS server in the same deployment

    Hello,
    I have been handed a project which has one high density BE6000 UCS server and a separate UCS C220 M3 server. The latter server was included to host a MediaSense call recording system but this will only use 2 of the available 8 vCPUs on the UCS C220 M3 server.
    The total number of users is 200.
    I want to implement a resilient system and so would like deploy two servers in a cluster for each of the following applications:
    CUCM 10.5
    Unity Connection 10.5
    IM & Presence 10.5
    As well as these applications there will be UCCX 10.6 and Cisco Unified Attendant Console Advanced (10.5) but these will be deployed as single servers.
    Looking at the UCS servers they have capacity for me to split the CUCM/CUC/IMP clusters between them.
    I cannot see any technical reason why this will not work but do not want to be caught by any Cisco support policies.
    If I were to implement the system in this way would there be any issues with the deployment or getting support from TAC.
    The separate UCS C220 M3 server has 8 x 8GB RAM (64 total) and 8 x 300GB HDD plus a quad Ethernet card.

    James first of all I am not sure I understand your query in detail. Do you mean you have two UCS220 M3 servers? and one of them is currently running BE6000?
    Having said that, the key here is to carefully plan your deployment against the capacity of the servers you have,.
    Eg..Deploying 200 Users, using the ff OVA
    UCS 220 M3 server 1: (using default TRC ie 8vCPU with 8GB per vCPU)
    Publisher (2500 cucm OVA): 1vCPU (6GB RAM), 80GB HD
    IMP-Publisher (1,000 OVA) :1vCPU(2GB RAM), 80GB HD
    CUC-publisher (1,000 users OVA) :2vCPU(6GB)--NB 1vCPU is reserved for ESXI, 160GB HD
    UCCX-Master: (300 agent OVA): 2 vCPU (8GB) and 292GB HDD
    With this placement you have a total of 22GB RAM and 612HDD used up
    A break down is shown below..
    Server
    Server Name
    C220 M3S TRC#1 (Medium)
    C220 M3S TRC#1 (Medium)
    Application Short Name
    Application Long Name
    Release
    VM Name
    vCPU
    vRAM
    vDisk
    CUCM
    Unified Communications Manager Release
    10.x
    CallCtrl: 2,500 users
    1
    4
    80
    IM&P
    IM & Presence Release
    10.x
    1,000 users
    1
    2
    80
    CUC
    Unity Connection Release
    10.0
    1,000 users
    1
    4
    160
    ESXi
    Unity Connection
    ESXi
    1*
    CUCCX
    Cisco Unified Contact Center Express / Unified IP IVR Release
    10.x
    Main: 300 agents
    2
    8
    292
    ESXi
    VMware vSphere ESXi
    5.5
    4**
    * Note: This is a 1 physical CPU core per host regardless of the number of Cisco Unity Connection (CUC) VMs.
    ** Note: This is 4GB physical RAM per host.

  • At UC platform i can see some applications are installed on Windows server and some directly to VMWare. Pls explain?

    At UC platform i can see some applications are installed on Windows server and some directly to VMWare. Pls explain?

    Pretty much all newer versions of UC applications have started supporting virtualization so they can be installed on the VMware. 
    Have a look at dockwiki for virtualization supported apps:
    http://docwiki.cisco.com/wiki/Unified_Communications_Virtualization_Supported_Applications
    Some applications like CUCM version 4 were windows based previously but going ahead with version 5, 6 onwards the OS has been changed to Linux Operating system.
    Let me know if you need any more information.
    -Terry

  • Prime Infrastructure 2.0: Running an inventory sync removes "snmp-server location" in running-config

    Hello,
    we're running Prime Infrastructure 2.0 (version VA-2.0.0.0.294).
    I was scared as I figured out one hour ago that running an inventory sync (Device Work Center) removes the command snmp-server location and adds the command snmp-server host "PI-ip address" "snmp rw community" in the running-config.
    Has someone the same behaviour or can reenact this scenario?!
    Can someone imagine that this behaviour has something to do with a configuration setting in PI?
    I'm perplexed and got gray hair now.
    Thank you for your answers or tips.
    Bastian

    Hello Rob,
    I just successfully installed the patch. The snmp-server location is not touched anymore while running a inventory job.
    But PI still enters this string in the running-configuration:
    snmp-server host "PI-IP address" " our snmp RW community- string"
    although there already exists the entry:
    snmp-server host "PI-IP address" version 2c "community-string (not the snmp rw-community-string)"
    Do you or anyone else has the same behaviour that PI adds automaically himself as snmp trap receiver with the SNMP-RW community?
    Regards
    Bastian

  • Snmp-server community over VRF

    I'm in the process of rolling out snmp-server community for LMS for all our devices. A few devices is VRF enabled, hence I need to ping the LMS server through a VRF and not the global routing table. To my knowledge the ' snmp-server host 11.22.33.44 vrf VRF XXXX' command only sends traps/notifications to DFM , is there a similar comand for the 'snmp-server community xxxx RO 1' ?
    I can ping the device from the LMS server but the snmp-server community access-list  does not show any hits for the LMS IP and hence the device is not registered in LMS.
    Any ideas?

    So manually-initiated communications appear to be working in both directions. That's good.
    Since you're not seeing hits on your acl at the device, I'd next check to see the traffic leaving your LMS server. You can run a Wireshark capture there (or use the built-in packet tracer), filtering on your device's destination IP. I'd initiate a comms check from Device Center in LMS (or snmpwalk from the cli) to manually trigger an SNMP query.
    If you don't see any SNMP queries leaving, LMS is the culprit (I'd check the DCR entry for the device in question). If you do see the traffic leaving then there is a network / device issue.

  • Failed to start  "admin server" and "BI publisher" :  Reason java.io.IOException openWallet

    Hello,
    I need your help to fix a critical problem to start Admin server and BI server :
    # ...domains/bifoundation_domain/bin/startWebLogic.sh ....
    Failed with
    17-Mar-2015 17:17:33 oracle.security.jps.internal.credstore.ssp.CsfWalletManager openWallet
    WARNING: Opening of wallet based credential store failed. Reason java.io.IOException
    Best Regards
    Djams
    More détails  in ...  /logs/AdminServer.log :
    ####<17-Mar-2015 17:14:16 o'clock CET> <Notice> <Log Management> <srver3.domaine.com> <> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (sel
    f-tuning)'> <> <> <> <1426608856985> <BEA-170019> <The server log file /servers/bipublisher/bip11/user_projects/domains/bifoundation_domain/servers/AdminServer/logs/AdminSe
    rver.log is opened. All server side log events will be written to this file.>
    ####<17-Mar-2015 17:14:16 o'clock CET> <Info> <Log Management> <srver3.domaine.com> <> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-
    tuning)'> <> <> <> <1426608856998> <BEA-170023> <The Server Logging is initialized with Java Logging API implementation.>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Diagnostics> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Defaul
    t (self-tuning)'> <<WLS Kernel>> <> <> <1426608857142> <BEA-320001> <The ServerDebug service initialized successfully.>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Server> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (se
    lf-tuning)'> <<WLS Kernel>> <> <> <1426608857307> <BEA-002622> <The protocol "t3" is now configured.>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Server> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (se
    lf-tuning)'> <<WLS Kernel>> <> <> <1426608857308> <BEA-002622> <The protocol "t3s" is now configured.>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Server> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (se
    lf-tuning)'> <<WLS Kernel>> <> <> <1426608857309> <BEA-002622> <The protocol "http" is now configured.>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Server> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (se
    lf-tuning)'> <<WLS Kernel>> <> <> <1426608857309> <BEA-002622> <The protocol "https" is now configured.>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Server> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (se
    lf-tuning)'> <<WLS Kernel>> <> <> <1426608857311> <BEA-002622> <The protocol "iiop" is now configured.>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Server> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (se
    lf-tuning)'> <<WLS Kernel>> <> <> <1426608857313> <BEA-002622> <The protocol "iiops" is now configured.>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Server> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (se
    lf-tuning)'> <<WLS Kernel>> <> <> <1426608857314> <BEA-002622> <The protocol "ldap" is now configured.>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Server> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (se
    lf-tuning)'> <<WLS Kernel>> <> <> <1426608857316> <BEA-002622> <The protocol "ldaps" is now configured.>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Server> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (se
    lf-tuning)'> <<WLS Kernel>> <> <> <1426608857323> <BEA-002622> <The protocol "cluster" is now configured.>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Server> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (se
    lf-tuning)'> <<WLS Kernel>> <> <> <1426608857324> <BEA-002622> <The protocol "clusters" is now configured.>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Server> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (se
    lf-tuning)'> <<WLS Kernel>> <> <> <1426608857333> <BEA-002622> <The protocol "snmp" is now configured.>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Server> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (se
    lf-tuning)'> <<WLS Kernel>> <> <> <1426608857333> <BEA-002622> <The protocol "admin" is now configured.>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Server> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (se
    lf-tuning)'> <<WLS Kernel>> <> <> <1426608857334> <BEA-002624> <The administration protocol is "t3s" and is now configured.>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <RJVM> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self
    -tuning)'> <<WLS Kernel>> <> <> <1426608857380> <BEA-000570> <Network Configuration for Channel "AdminServer"
    Listen Address          :7001
    Public Address          N/A
    Http Enabled            true
    Tunneling Enabled       false
    Outbound Enabled        false
    Admin Traffic Enabled   true>
    #####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Server> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1426608857449> <BEA-002609> <Channel Service initialized.>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Socket> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1426608857487> <BEA-000415> <System has file descriptor limits of - soft: 4,096, hard: 4,096>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Socket> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1426608857488> <BEA-000416> <Using effective file descriptor limit of: 4,096 open sockets/files.>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Socket> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1426608857489> <BEA-000406> <PosixSocketMuxer was built on Apr 24 2007 16:05:00>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Socket> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1426608857518> <BEA-000436> <Allocating 4 reader threads.>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <Socket> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1426608857521> <BEA-000446> <Native IO Enabled.>
    ####<17-Mar-2015 17:14:17 o'clock CET> <Info> <IIOP> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1426608857866> <BEA-002014> <IIOP subsystem enabled.>
    ####<17-Mar-2015 17:14:22 o'clock CET> <Error> <Security> <srver3.domaine.com> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1426608862432> <BEA-090892> <The loading of OPSS java security policy provider failed due to exception, see the exception stack trace or the server log file for root cause. If still see no obvious cause, enable the debug flag -Djava.security.debug=jpspolicy to get more information. Error message: JPS-01050: Opening of wallet based credential store failed. Reason java.io.IOException>
    ####<17-Mar-2015 17:14:22 o'clock CET> <Critical> <WebLogicServer> <srver3.domaine.com> <AdminServer> <main> <<WLS Kernel>> <> <> <1426608862434> <BEA-000386> <Server subsystem failed. Reason: weblogic.security.SecurityInitializationException: The loading of OPSS java security policy provider failed due to exception, see the exception stack trace or the server log file for root cause. If still see no obvious cause, enable the debug flag -Djava.security.debug=jpspolicy to get more information. Error message: JPS-01050: Opening of wallet based credential store failed. Reason java.io.IOException
    weblogic.security.SecurityInitializationException: The loading of OPSS java security policy provider failed due to exception, see the exception stack trace or the server log file for root cause. If still see no obvious cause, enable the debug flag -Djava.security.debug=jpspolicy to get more information. Error message: JPS-01050: Opening of wallet based credential store failed. Reason java.io.IOException
            at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.loadOPSSPolicy(CommonSecurityServiceManagerDelegateImpl.java:1398)
            at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1018)
            at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:873)
            at weblogic.security.SecurityService.start(SecurityService.java:141)
            at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
            at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
            at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
    Caused By: oracle.security.jps.JpsRuntimeException: JPS-01050: Opening of wallet based credential store failed. Reason java.io.IOException
            at oracle.security.jps.internal.policystore.PolicyDelegationController.<init>(PolicyDelegationController.java:170)
            at oracle.security.jps.internal.policystore.JavaPolicyProvider.<init>(JavaPolicyProvider.java:383)
            at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
            at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
            at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
            at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
            at java.lang.Class.newInstance0(Class.java:355)
            at java.lang.Class.newInstance(Class.java:308)
            at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.loadOPSSPolicy(CommonSecurityServiceManagerDelegateImpl.java:1339)
            at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1018)
            at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:873)
            at weblogic.security.SecurityService.start(SecurityService.java:141)
            at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
            at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
            at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
    Caused By: oracle.security.jps.JpsException: JPS-01050: Opening of wallet based credential store failed. Reason java.io.IOException
    Caused By: oracle.security.jps.JpsException: JPS-01050: Opening of wallet based credential store failed. Reason java.io.IOException
            at oracle.security.jps.internal.policystore.PolicyUtil.getDefaultPDPService(PolicyUtil.java:2984)
            at oracle.security.jps.internal.policystore.PolicyUtil.getPDPService(PolicyUtil.java:3226)
            at oracle.security.jps.internal.policystore.PolicyDelegationController.<init>(PolicyDelegationController.java:167)
            at oracle.security.jps.internal.policystore.JavaPolicyProvider.<init>(JavaPolicyProvider.java:383)
            at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
            at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
            at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
            at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
            at java.lang.Class.newInstance0(Class.java:355)
            at java.lang.Class.newInstance(Class.java:308)
            at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.loadOPSSPolicy(CommonSecurityServiceManagerDelegateImpl.java:1339)
            at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1018)
            at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:873)
            at weblogic.security.SecurityService.start(SecurityService.java:141)
            at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
            at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
            at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
    Caused By: oracle.security.jps.service.credstore.CredStoreException: JPS-01050: Opening of wallet based credential store failed. Reason java.io.IOException
            at oracle.security.jps.internal.credstore.ssp.CsfWalletManager.openWallet(CsfWalletManager.java:184)
            at oracle.security.jps.internal.credstore.ssp.SspCredentialStore.doInit(SspCredentialStore.java:358)
            at oracle.security.jps.internal.credstore.ssp.SspCredentialStore.<init>(SspCredentialStore.java:176)
            at oracle.security.jps.internal.credstore.ssp.SspCredentialStore.<init>(SspCredentialStore.java:160)
            at oracle.security.jps.internal.credstore.ssp.SspCredentialStoreProvider.getInstance(SspCredentialStoreProvider.java:118)
            at oracle.security.jps.internal.credstore.ssp.SspCredentialStoreProvider.getInstance(SspCredentialStoreProvider.java:56)
            at oracle.security.jps.internal.core.runtime.ContextFactoryImpl.findServiceInstance(ContextFactoryImpl.java:139)
            at oracle.security.jps.internal.core.runtime.ContextFactoryImpl.getContext(ContextFactoryImpl.java:170)
            at oracle.security.jps.internal.core.runtime.ContextFactoryImpl.getContext(ContextFactoryImpl.java:191)
            at oracle.security.jps.internal.core.runtime.JpsContextFactoryImpl.getContext(JpsContextFactoryImpl.java:132)
            at oracle.security.jps.internal.core.runtime.JpsContextFactoryImpl.getContext(JpsContextFactoryImpl.java:127)
            at oracle.security.jps.internal.policystore.PolicyUtil$3.run(PolicyUtil.java:2956)
            at oracle.security.jps.internal.policystore.PolicyUtil$3.run(PolicyUtil.java:2950)
            at java.security.AccessController.doPrivileged(Native Method)
            at oracle.security.jps.internal.policystore.PolicyUtil.getDefaultPDPService(PolicyUtil.java:2950)
            at oracle.security.jps.internal.policystore.PolicyUtil.getPDPService(PolicyUtil.java:3226)
            at oracle.security.jps.internal.policystore.PolicyDelegationController.<init>(PolicyDelegationController.java:167)
            at oracle.security.jps.internal.policystore.JavaPolicyProvider.<init>(JavaPolicyProvider.java:383)
            at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
            at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
            at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
            at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
            at java.lang.Class.newInstance0(Class.java:355)
            at java.lang.Class.newInstance(Class.java:308)
            at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.loadOPSSPolicy(CommonSecurityServiceManagerDelegateImpl.java:1339)
            at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1018)
            at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:873)
            at weblogic.security.SecurityService.start(SecurityService.java:141)
            at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
            at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
            at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
    >
    ####<17-Mar-2015 17:14:22 o'clock CET> <Notice> <WebLogicServer> <srver3.domaine.com> <AdminServer> <main> <<WLS Kernel>> <> <> <1426608862461> <BEA-000365> <Server state changed to FAILED>
    ####<17-Mar-2015 17:14:22 o'clock CET> <Error> <WebLogicServer> <srver3.domaine.com> <AdminServer> <main> <<WLS Kernel>> <> <> <1426608862461> <BEA-000383> <A critical service failed. The server will shut itself down>
    ####<17-Mar-2015 17:14:22 o'clock CET> <Notice> <WebLogicServer> <srver3.domaine.com> <AdminServer> <main> <<WLS Kernel>> <> <> <1426608862462> <BEA-000365> <Server state changed to FORCE_SHUTTING_DOWN>
    ####<17-Mar-2015 17:14:22 o'clock CET> <Info> <WebLo

    Hello Djam,
    Please review the following:
    The FMW WebLogic Server (WLS) installation has been configured to use a non-default Java temporary files directory,
    i.e. the following has been set in the WebLogic startup or setDomainEnv.sh script:
    EXTRA_JAVA_PROPERTIES="-Djava.io.tmpdir=/appl/oracle/temp_java_files ${EXTRA_JAVA_PROPERTIES}"
    Reference: How to Change the WebLogic Server Location for Temporary Files (Doc ID 1336002.1)
    When the Middleware home was restored the directory specified by java.io.tmpdir parameter was missing,
    Therefore an IOException occurred when opening the wallet and WLS was unable to initialize the OPSS successfully.
    To resolve the issue re-create the directory specified by the java.io.tmp dir parameter, and make sure the owner and group access are the same as for the FMW installation.
    Unable Start AdminServer: JPS-01050: Opening of wallet based credential store failed. Reason java.io.IOException (Doc ID 1923395.1)
    Bogdan

  • SNMP TRAPS and SLA

    HI
    I am trying to configure IP SLA to send SNMP TRAPS but looks like doing some mistake ..
    i have following configured
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Table Normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-parent:"";
    mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
    mso-para-margin:0cm;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:12.0pt;
    font-family:"Times New Roman";
    mso-ascii-font-family:Cambria;
    mso-ascii-theme-font:minor-latin;
    mso-fareast-font-family:"Times New Roman";
    mso-fareast-theme-font:minor-fareast;
    mso-hansi-font-family:Cambria;
    mso-hansi-theme-font:minor-latin;}
    ip sla monitor 2
    type echo protocol ipIcmpEcho 150.1.3.3 source-ipaddr 1.1.98.7
    frequency 10!
    ip sla monitor schedule 2 start-time now recurring
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Table Normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-parent:"";
    mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
    mso-para-margin:0cm;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:12.0pt;
    font-family:"Times New Roman";
    mso-ascii-font-family:Cambria;
    mso-ascii-theme-font:minor-latin;
    mso-fareast-font-family:"Times New Roman";
    mso-fareast-theme-font:minor-fareast;
    mso-hansi-font-family:Cambria;
    mso-hansi-theme-font:minor-latin;}
    ip sla reaction-configuration 2 react rtt threshold-type immediate action-type trapOnly  
    ip sla logging traps
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Table Normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-parent:"";
    mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
    mso-para-margin:0cm;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:12.0pt;
    font-family:"Times New Roman";
    mso-ascii-font-family:Cambria;
    mso-ascii-theme-font:minor-latin;
    mso-fareast-font-family:"Times New Roman";
    mso-fareast-theme-font:minor-fareast;
    mso-hansi-font-family:Cambria;
    mso-hansi-theme-font:minor-latin;}
    snmp-server community public RO
    snmp-server enable traps rtr
    snmp-server host 1.1.128.226 public
    1.1.98.7 is the loopback ip on my network. To test the snmp traps, i enabled debug snmp packets and shutdown loopback interface (1.1.98.7)
    I don't see any snmp message in debug output ..
    am i missing something or it is not possible to get traps directly from ip sla .. do i need EEM for this?

    sorry, it actually worked .. i just gave a restart to ip sla and it worked.
    looks like router was already in threshold stage when i was activating reaction-config ..
    but i am still confused which command is actualluy generating these traps since i have taken out some of the snmp config out and i stil get traps ..
    below is the oputput of traps which i get when i restart ip sla .
    *Feb 15 17:10:43.453: SNMP: 150.150.1.1 queue overflow, dropping packet
    *Feb 15 17:10:43.453: SNMP: Queuing packet to 150.150.1.1
    *Feb 15 17:10:43.453: SNMP: V1 Trap, ent rttMonNotificationsPrefix, addr 65.65.2.2, gentrap 6, spectrap 3
    rttMonCtrlAdminTag.1 = 
    rttMonHistoryCollectionAddress.1 = 41 41  03 03   
    rttMonCtrlOperOverThresholdOccurred.1 = 1
    *Feb 15 17:10:43.497: SNMP: 150.150.1.1 queue overflow, dropping packet
    *Feb 15 17:10:43.501: SNMP: Queuing packet to 150.150.1.1
    *Feb 15 17:10:43.501: SNMP: V1 Trap, ent rttMonNotificationsPrefix, addr 65.65.2.2, gentrap 6, spectrap 5
    rttMonCtrlAdminTag.1 = 
    rttMonHistoryCollectionAddress.1 = 41 41  03 03   
    rttMonReactVar.1 = 1
    rttMonReactOccurred.1 = 1
    rttMonReactValue.1 = 12
    rttMonReactThresholdRising.1 = 5
    rttMonReactThresholdFalling.1 = 1
    rttMonEchoAdminLSPSelector.1 = 00 00  00 00  
    *Feb 15 17:10:43.585: SNMP: 150.150.1.1 queue overflow, dropping packet
    *Feb 15 17:10:43.585: SNMP: Queuing packet to 150.150.1.1
    *Feb 15 17:10:43.585: SNMP: V1 Trap, ent rttMonNotificationsPrefix, addr 65.65.2.2, gentrap 6, spectrap 5
    rttMonCtrlAdminTag.1 = 
    rttMonHistoryCollectionAddress.1 = 41 41  03 03   
    rttMonReactVar.1 = 1
    rttMonReactOccurred.1 = 1
    rttMonReactValue.1 = 12
    rttMonReactThresholdRising.1 = 5
    rttMonReactThresholdFalling.1 = 1
    rttMonEchoAdminLSPSelector.1 = 00 00  00 00 
    below is my running config and sh ver
    R2#sh ver
    Cisco IOS Software, 2800 Software (C2800NM-ADVENTERPRISEK9-M), Version 12.4(24)T1, RELEASE SOFTWARE (fc3)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2009 by Cisco Systems, Inc.
    Compiled Fri 19-Jun-09 15:13 by prod_rel_team
    ROM: System Bootstrap, Version 12.4(1r) [hqluong 1r], RELEASE SOFTWARE (fc1)
    R2 uptime is 8 hours, 9 minutes
    System returned to ROM by power-on
    System image file is "flash:c2800nm-adventerprisek9-mz.124-24.T1.bin"
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    Cisco 2811 (revision 53.50) with 237568K/24576K bytes of memory.
    Processor board ID FTX0952C333
    2 FastEthernet interfaces
    4 Serial(sync/async) interfaces
    1 Virtual Private Network (VPN) Module
    DRAM configuration is 64 bits wide with parity enabled.
    239K bytes of non-volatile configuration memory.
    62720K bytes of ATA CompactFlash (Read/Write)
    Configuration register is 0x2102
    R2#            
    R2#sh run
    Building configuration...
    Current configuration : 2233 bytes
    version 12.4
    service timestamps debug datetime msec
    service timestamps log datetime msec
    no service password-encryption
    hostname R2
    boot-start-marker
    boot-end-marker
    no aaa new-model
    memory-size iomem 10
    dot11 syslog
    ip source-route
    ip cef
    ipv6 unicast-routing
    ipv6 cef
    multilink bundle-name authenticated
    voice-card 0
    vtp domain 29
    vtp mode transparent
    archive
    log config
      hidekeys
    interface Loopback0
    ip address 65.65.2.2 255.255.255.0
    interface FastEthernet0/0
    shutdown
    duplex auto
    speed auto
    interface FastEthernet0/1
    ip address 65.65.128.193 255.255.255.224
    shutdown
    duplex auto
    speed auto
    interface Serial0/2/0
    ip address 65.65.13.2 255.255.255.224
    encapsulation ppp
    clock rate 2000000
    interface Serial0/3/0
    no ip address
    shutdown
    router ospf 65
    router-id 65.65.2.2
    log-adjacency-changes
    network 65.65.2.2 0.0.0.0 area 1
    network 65.65.13.2 0.0.0.0 area 1
    network 65.65.128.193 0.0.0.0 area 1
    ip forward-protocol nd
    no ip http server
    no ip http secure-server
    ip sla 1
    icmp-echo 65.65.3.3 source-ip 65.65.2.2
    request-data-size 1500
    frequency 10
    ip sla schedule 1 life forever start-time now
    ip sla reaction-configuration 1 react rtt threshold-value 5 1 threshold-type immediate action-type trapOnly
    snmp-server community public RO
    snmp-server host 150.150.1.1 public
    control-plane
    mgcp fax t38 ecm
    mgcp behavior g729-variants static-pt
    line con 0
    line aux 0
    line vty 0 4
    login
    scheduler allocate 20000 1000
    end
    R2#                                 
    R2#

  • Prime Infrastructure 2.2 snmp-server location

    We have implemented Cisco Prime Infrastructure 2.2 in our facility.  We have each switch loaded in with an "snmp-server location" set for the switches for easier identification and quicker troubleshooting.  We would like that location to show in the network topology map as well as in the email alerts it sends if one of those switches goes down.  Is this something I am overlooking, and if so, can someone please explain to me how to make this happen?

    Hi William,
    snmp-server location is synced from the devices & also the info available in various report.
    But, if i'm not wrong you want to customize the e-mail body of notifications sent out from the prime.
    This functionality is no where discussed in PI user guide & i'm afraid not possible as of now.
    Also, there's bug related to snmp-server location even retrieving it from the reports 
    CSCuj09556 : PI 2.0 corrupts device config by doing snmp set for location after sync 
    https://tools.cisco.com/bugsearch/bug/CSCuj09556
    CSCuo16889 : PI 2.0 - Does not poll sysLocation for 3750 device
    https://tools.cisco.com/bugsearch/bug/CSCuo16889
    - Ashok
    Please rate the post or mark as correct answer as it will help others looking for similar information

  • SNMP notify and remote SNMPv3 users

    I've run into some problems trying to get SNMPv3 informs to work.
    Currently I am working with this simplified (by removing views and ACLs) config:
    snmp-server engineID remote XX.XX.XX.XX XXXXXXXXXXXXX
    snmp-server group foobar v3 priv
    snmp-server user foo foobar remote XX.XX.XX.XX auth sha XXXXXXXXXX priv aes 128 XXXXXXXXXXXX
    snmp-server manager enable
    snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
    snmp-server enable traps config
    snmp-server enable traps mac-notification change move threshold
    snmp-server enable traps errdisable
    snmp-server host XX.XX.XX.XX informs version 3 priv foo vlancreate vlandelete port-security envmon power-ethernet config syslog mac-notification vlan-membership errdisable snmp
    ...not sure if the traps lines are even needed.  I made sure to enter the snmp user after the remote engineid.
    Anyway, problem number 1 is that with this configuration I always get no attempts to send informs:
    SNMP Manager-role output packets
        0 Get-request PDUs
        0 Get-next PDUs
        0 Get-bulk PDUs
        0 Set-request PDUs
        0 Inform-request PDUs
        0 Timeouts
        0 Drops
    SNMP Manager-role input packets
        0 Inform request PDUs
        0 Trap PDUs
        0 Response PDUs
        0 Responses with errors
    SNMP informs: enabled
        Informs in flight 0/25 (current/max)
        Logging to XX.XX.XX.XX
            0 sent, 0 in-flight, 0 retries, 0 failed, 0 dropped
    SNMP agent enabled
    Problem number 2 is that whenever I reboot the switch, the remote user definitions disappear.  This happens on two different platforms/IOS versions (3560 12.2(55)SE5 and 2960 15.0(2)SE4) otherwise I'd chalk it up to a regression.  It also happens no matter how much I try to downgrade the auth/priv level -- even to v2c user definitions.  Before the reboot the users are listed as stored in nonvolatile, just like all the local users.
    Can anyone spot any missing components from this config?  Has anyone else seen the lost snmp user entries behavior?

    Yay... finally figured out a workaround for this one.  If you add a local snmp user with the same name and parameters as the remote SNMP user, then everything suddenly works.  A clue if you are having this problem is that when you list snmp users after adding the remote user, it does not show a Group-name for the user.  After adding the local user, it shows a Group-name, informs get sent (using the remote user/engineID no less!) and the switch remembers both users after a reboot.
    So the correction to the above configuration is:
    snmp-server engineID remote XX.XX.XX.XX XXXXXXXXXXXXX
    snmp-server group foobar v3 priv
    snmp-server user foo foobar remote XX.XX.XX.XX auth sha XXXXXXXXXX priv aes 128 XXXXXXXXXXXX
    snmp-server user foo foobar auth sha XXXXXXXXXXX priv aes 128 XXXXXXXXXXXXX
    snmp-server manager enable
    snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
    snmp-server enable traps config
    snmp-server enable traps mac-notification change move threshold
    snmp-server enable traps errdisable
    snmp-server  host XX.XX.XX.XX informs version 3 priv foo vlancreate vlandelete  port-security envmon power-ethernet config syslog mac-notification  vlan-membership errdisable snmp
    Probably more people haven't noticed this problem because they configure the local user first before they realize they need to configure a remote user after consulting the docs, and do not delete the local user.

Maybe you are looking for