User tracking problem - lms 3.2

Noticed a pretty weird one. LMS 3.2 on windows 2008.
Everything had been running normally. A while back we noticed the user tracking
tables diminishing, and found out it was due to a bug in the code we were running
on our 4500s. So we started an upgrade cycle and the tables started growing again.
UT runs fine, but there is nothing newer than Feb 25th. Even if I do a manual UT discovery
it seems to run fine, but there are no new entries in the table, or rather nothing with the
last seen date of today when I just ran it.
I did do the usual, run the logBackup script, clean some other log files, I even rebooted
the server, but it still doesn't update with any new UT entries. I have checked and can
do snmpwalks per vlan on the cam tables, so I don't believe it's anything with the switches,
I think this is something within UT or campus.
I would be happy to send up any log files that might be useful. Thanks - chris

Gaganjeet,
that's interesting (and frustrating). In the screenshot I sent yesterday, the UT count is 12500. We should be well over 13000 end hosts.
In doing a search through the UT.log, one of the IPs that is not showing up when I search user tracking is:
2011/03/28 10:02:06 EvalTask-vmpsadmin-05 VmpsAdminSMFGetIpXlateTable: router=10.255.3.130 ip=10.242.9.15
mac=00-19-99-91-a1-14 subnet=10.242.9.0 mask=255.255.255.0 vtp=PETERSACC_10.255.3.130(T) vlan=PETERS-C-USER-1
vlan Index=1709
It is clearly in the logfile. But if you refer to the attached screenshot titled peters-ut-screenshot, if I search on just 10.242, I get
"no end hosts found". This site was brought online a couple weeks ago.
The second screenshot, titled PACS-subnet, shows no end hosts found. This is due to the SW bug we found in 12.2.50-sg8 and
the entries already having been purged. This switch was upgraded to 12.2.53-sg3 on March 14th so the entries should be showing
up. I have not searched ut.log for this subnet. The bug we found with 12.2.50-sg8 was that an snmpwalk of the mac tables, per vlan,
returned nothing. With 12.2.53-sg3, an snmpwalk of the mac tables per vlan does return the mac tables per vlan.
The third screenshot is just searching on 10.255, which covers our datacenter. While there are a lot of entries, the "last seen" date
is Feb 25th. As these servers are always on, I would expect to see the last seen date as yesterday when the last ut run was executed.
I have not searched ut.log for any of these entries.
So it does indeed appear that the ut discovery finds the end hosts. But when you pull up the user tracking utility to search, there is nothing newer
than February 25th. I hope this helps.
Thanks again for the help, I appreciate it - chris

Similar Messages

LMS 3.2 and user tracking problem

rme 4.3.1
cm5.2.1
cv 6.1.9
dfm 3.2.0
ipm 4.2.0
portal 1.2.0
cs 3.3.0
cwasst 1.2.0
running on windows server 2008.
This was a clean bulid, and we imported all pertinent data from our old lms 2.6 server. This was in september 2010. Everything worked as expected and continues to work except for......
We are in an upgrade cycle for our 4500s. We are upgrading from 12.2.50-sg4 to 12.2.50-sg8, and also upgrading rommon to 12.2.31r-sga4.
It appears that user tracking is not working anymore for the upgraded 4500s. UT still runs, and works perfectly for all other devices, including the 4500s that have not been upgraded yet. I know this sounds goofy, but it really does seem to be the common denominator. I've checked the windows updates, package updates, etc in trying to figure out what made this happen. It really does all come back to upgrading to the above version. All aspects of this server are running great and as expected, it's just that UT for the upgraded 4500s isn't working anymore. I do run the logbackup script weekly (past experience has taught me to do this), and try and keep up with any patches or package updates, etc.
If anyone has seen something similar or can suggest anything, I'd appreciate it. I think I am going to have to open a case on this. Thanks - chris

Michel,
Indeed, it looks like that is the problem. I guess I was focused in on CW rather than the whole picture. But yes, indeed, if I walk the mac table for a vlan on a 4500 that has not been upgraded it works. If I do the same on an upgraded one, I get nothing.
The cautious optimism is that we do have a sup6 at our DR location that is running 12.2.53-sg1 and this test works on that switch. So as long as that
version isn't deferred, we'll test that on one of the older sups to verify.
So thanks for the help, I appreciate it - chris

LMS 4.0.1 User Tracking Problem "No end hosts found"

Hi everybody,
I have problems with devices that do not appear in the user tracking utility.
These devices are a cisco WS-C4506-E with Supervisor II-Plus-10GE and two WS-C6509 with Supervisor Engine 720.
When I start acquisition for the devices I receive following message: "Device unreachable". When I try to watch the end hosts, I get following Message: "No end hosts found."
I have patched LMS 4.0.1 with CSCto06189 Patch.
Is there perhaps a solution?
Roman

400 devices - do you mean 400 end users?
Do they all use a Layer 3 default gateway that is among your discovered and managed devices?
Have you followed the steps and troubleshooting from around page 24 of this guide?

Campus manager user tracking problem

Hi We are using LMS 3.0.1 and the campus manager verson is 5.0.2. We have two subnet which are used for the management ip of switch kept in two different geographical areas. I have made the entry of all devices kept in both subnets and all the devices are know device in DCR, RME and DFM. also after data collection the devices are shown in campus manager database. But I am not able to learn the end host details of the hosts connected to one of our segment.
even if the perticular subnet is not appearing in "campus user tracking" as well as the devices belongs to the subnet. but I am getting all end host details from the second subnet.
please help.

Hi clarke,
i have updated the cm to the latest but still it did not learn. Later i added the 10.188.7.x ip addresses manually in the discovery settings instead of " *.*.*.* " - ip range. Now i am able to see these devices in topology view > layer 2 veiw as connected devices & not seen in unconnected..
Now i need to see the hostname, ip address etc details of these segments in UT acquisition window.... Secondly in topology view, the core switch is showing in "?" question mark symbol. This device is WS-C6509-E (sup-bootdisk:s72033-ipbase-mz.122-33.SXH3a.bin). I tried to delete this device from common services and added it again, there i selected "ws-c6509", i did not see the " ws-c6509-E".
in Cisco site, the serial number of the device is showing as the device "VS-C6509E-S720-10G"
Can u pls help me on this..
regards
rajesh

User Tracking in LMS 3.0.1

Hello Clark,
I have read the user guide for the CM 5.0 for Tracking users and also i have read the Understanding UTLite,I can't see the users login???
what can be the possible reason i have missed.
Thanks

Hello Clarke,
The domain administrator made a mistake in specifying the details in DC,i just added,I have less windows knowledge,where to find the logon scripts files for step 3 in windows 2003 server.as per the campus manager user guide .
Edit the UTLiteNT.bat file:
a. Open the UTLiteNT.bat file.
b. Locate the following line and replace domain and ipaddress with the domain name of the Windows
domain controller and IP address of the computer running the Campus Manager server:
start %WINDIR%\UTLite33 -domain domain -host ipaddress -port 16236
If port 16236 is already in use, enter a different number. This port number must match the number
that you entered in the Use Port Number field, in the User Tracking > Administration >
Acquisition > Acquisition Settings page.
For more details, see Modifying Acquisition Settings, page 7-10.
Step 3 Edit the logon script files to run the UTLiteNT.bat file when users log into the network by adding this
line:
UTLiteNT.bat
Thanks,

Ciscowork 2000 User tracking problem: not listing all IP address

Hello All!
We are troubleshooting ciscowork user tracking function and we don`t get any ip address outside the subnet where the server is!
Can someone explain how cisco work get the list of all ip addresse SNMP, CDP, scan ...??? From what I have read it seem to be from SNMP. Can I found which OID it use?
User tracking list all mac addresse, all switches but not the ip address. It is not in vlan 1. It stop working since we close vlan 1 and move the server to another vlan.
If your answer is: " cisco work can't see your gateway" Can you be more precis...I have seen that sentence but I don`t what that means...
thanks
ch

First i would check to see if ANI actually discovered teh device. After checking that the IP address filter is correct and your snmp strings are correct then u can try lengthening the snmp retry timeout values: Also check DNS or your local host file for any typos.. failing this try some of these :
Click on Diagnostics > Discovery Metrics > and click on the hyper link number of devices.
This will show u exactky what ANI has discovered and its CDP relationship to other devices. If you do not see your router or L2/L3 device there, then u can try the following:
- check cpd neighbours and correct as required and retry discovery
- select jump router boundries from Setup > ANI admin > Discovery Settings and retry
- if all fails then add the device as part of the seed file.

Problem with user tracking in cisco prime Lms

i attach my senario pic ,
i use snmp v3 for my switch ,,
discover -- ok
synchronization ---- ok
net config and config edit ----- ok
but my problem is
report / inventory / user tracking / quick report ---------------------------------------- i take this notification for all report : no end hosts found
i install UTU but this program can not found any record too .
please help me

NMS servers access the Bridge-MIB data from devices, to get the MAC/CAM table. Because MAC-address or CAM table is maintained on device/VLAN basis, so query needs to be made per VLAN based.
In snmp v1/v2c SNMP Community String Indexing is used. Where vlan is polled by adding VLAN number after community string after @ sign. Example to see all the mac-address table from VLAN 1, if the community is test123, device would be polled like :
snmpwalk -v2c -c test123@1 10.10.10.1
The syntax is [community string]@[instance number].
For snmp v3 this is not an option, as it cant use SNMP community string indexing. So all the MAC/CAM table needs to made snmp v3 context aware, which exposes BRIDGE-MIB data to SNMP v3.
You must use contexts to get per-VLAN data from the BRIDGE-MIB with SNMPv3.Not all the IOS switches support this. In general, if the device supports the "show snmp context" command, contexts will work. If not, an upgrade is needed. However, some switches (e.g. 2950 series) will never support SNMPv3 contexts. You must use v1/v2c with these switches.
Very simply, you need to add the context to the SNMP group to allow your users to poll the given context. For example, to allow users to poll the BRIDGE-MIB for context vlan-6, you would add something like:
snmp-server group v3group v3 auth context vlan-6 read
You should add all those exact name after context which you see in output of show snmp context.
Also, about UTU, it is just a small utility tool to access the LMS User Tracking DB externally to show the UT data, so unless LMS has UT data in its DB, UTU won't a difference either.
-Thanks
Vinod
**Encourage Contributors. RATE Them.**

CiscoWorks LMS 4.0.1, user tracking acquisition problem on 3750 stack.

Hello.
We are using Catalyst 3750 switch stacks with software 12.2(44)SE. We have two stacks, only one with IP routing enabled.
When we try to run an Acquisition Action on this, from Admin> Collection Settings> User Tracking, the system replies with an error "Failed to start acquisition: Device unreachable. Please enter a valid device".
Device Center reports "success" on all collector status.
Acquisition starts successfully when we try with the other stack.
With LMS 4.1 demo, users acquisition runs successfully.
Any suggestions is appreciated.
Thanks.
Regards.
Andrea

Hello Andrea,
just wanted to let you know that I have fixed that for our system. I reinitated the UT Database with the following command:
/opt/CSCOpx/bin/perl /opt/CSCOpx/campus/bin/reinitdb.pl -restore -ut -all
It's important to call perl with the full path, otherwise it will completely fail.
Hope this will help you.
Greetings

Problem with user tracking Cisco Prime lms 4.2

Hi
When I use the User tracking utility, it dont find the usernames, I dont kwow if I have to use the tool UTlite33.exe un all end host or not, please helpme.

Hi Andres,
Check this ::
Understanding UTLite
UTLite is a utility that allows you to collect user names from Primary Domain Controllers, Active Directory, and Novell servers.
To do this you need to install UTLite in the Windows Primary Domain Controllers and in the Novell servers. You can also install UTLite in an Active Directory server.
UTLite sends traps to LMS whenever a user logs in or logs out. UTLite traps are processed by LMS at the rate of 150 traps per second, with a default buffer size of 76800.
Follow the below link and it should help:
http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.0/user/guide/admin/appendixcli.html#wp1032284
Thanks-
Afroz
[Do rate the useful posts]

CiscoWorks LMS 4.0.1, user tracking acquisition problem.

Hello.
We are using Catalyst 3750 with 12.2(44)SE. We have two stack configured, one with IP routing enabled.
When we try to run an Acquisition Action on IP routing enabled stack, from Admin> Collection Settings> User Tracking, the system replies with an error "Failed to start acquisition: Device unreachable. Please enter a valid device".
Acquisition starts successfully when we try with the other stack.
We are going to investigate!
Any suggestions is appreciated.
Thanks.
Regards.
Andrea

You aren't using SNMP v3 perchance are you? If you are, you need to use contexts. Reference this thread.
Have you tried initiating a full data collection and been successful? Reference this thread.
If neither of these suggestions works, the latter thread linked above has some more detailed troubleshooting suggestions.
Hope this helps.

User tracking not finding any hosts in Ciscoworks LMS 3.1

L.S.
Our test-configuration is as follows:
Application versions:
Ciscoworks LMS 3.1
Ciscoworks Common Services 3.2.0
Campus Manager 5.1.4
We have 31 managed devices in Campus Manager (data has been collected on all),
Edit: All of them show up green in the topology window.
The device are: 2 6509 cores (running IOS s72033_rp-IPSERVICESK9_WAN-M version 12.2(18)SXF8), 1 ASA firewall (running ASA-OS version 8.0.5) and 29 switches (2960 and 3560 models both running ios version 12.2(52)SE). The switches are connected as follows:
User tracking jobs are running normally, but aren't finding any end-hosts or IP phones at all (I suspect around 250-500 hosts+ on these switches)
We are running SNMP v3 on the switches and have added the following configuration items to all the switches:
snmp-server group readonly v3 auth context vlan-1
<repeat for all present snmp-contexts as shown in show snmp context output>
snmp-server group readonly v3 auth context vlan-83
Debugging is enabled in CM->Admin->Debugging Options->User Tracking Server
This is the UT.log file of the last major acquisition:
messages will remian logged to file: D:\PROGRA~1\CSCOpx\log\ut.log
2010/01/13 14:00:01 main MESSAGE ProcessInitializer: Properties will be read from D:\PROGRA~1\CSCOpx\campus\etc\cwsi\ut.properties
I= 0value *.*.*.*
I= 1value 6
I= 2value 1
2010/01/13 14:00:01 main MESSAGE DBConnection: Created new Database connection [hashCode = 10969598]
PartialOrderNode tree dump: time base = VMPSMajor
<root>
    VMPSMajor: <root>
    VMPSMajor:     VMPSMajor.GetXMLData
    VMPSMajor:         VMPSMajor.PingSweep
    VMPSMajor:         VMPSMajor.PopulateFromDCR
    VMPSMajor:             VMPSMajor.GetPortStatus
    VMPSMajor:                 VMPSMajor.GetBridgeTable
    VMPSMajor:             VMPSMajor.Sweep
    VMPSMajor:                 VMPSMajor.GetIpXlateTable
    VMPSMajor:                 VMPSMajor.GetIpv6XlateTable
    VMPSMajor:                     VMPSMajor.GenerateTable6
    VMPSMajor:                         VMPSMajor.GenerateTable
SMFunction evaluation order: time base = VMPSMajor
VMPSMajor.GetXMLData Major
VMPSMajor.PingSweep Minor
VMPSMajor.PopulateFromDCR Major
VMPSMajor.GetPortStatus Minor
VMPSMajor.Sweep Major
VMPSMajor.GetBridgeTable Minor
VMPSMajor.GetIpXlateTable Minor
VMPSMajor.GetIpv6XlateTable Minor
VMPSMajor.GenerateTable6 Major
VMPSMajor.GenerateTable Major
Time base VMPSMajor has 5 major nodes and 3 minor traversals.
log4j:ERROR No appenders could be found for category (CTM.common).
log4j:ERROR Please initialize the log4j system properly.
In classlist loader
In classlist loader processing sub classes
updation done
In classlist loader completed
2010/01/13 14:00:03 main MESSAGE DBConnection: Created new Database connection [hashCode = 12524859]
Calling default
Subnet to SubnetData Map Size :73
2010/01/13 14:01:31 DBConnecton-Reaper MESSAGE DBConnection: Closed Database connection [hashCode = 12524859]
2010/01/13 14:01:31 DBConnecton-Reaper MESSAGE DBConnection: Closed Database connection [hashCode = 10969598]
2010/01/13 14:04:50 main MESSAGE DCRDevWrapper: Closing DCRProxy
I'm slowly getting to a dead end here. What am I missing?

Well, our problem was resolved finally through a weird coincendence after having a websession with a Cisco TAC engineer (TAC case SR 613376661)
We changed the
snmp-server group readonly v3 auth context vlan-xxxx
commands in the switches to:
snmp-server group writeonly v3 auth context vlan-xxxx
that is: use the writestring in the snmp-server groups instead of the read string.
After we changed that, all of the User Tracking mysteriously started working.
As far as I know, the writestring should not be needed, but apparently it is....
Is there any explanation for this?

LMS 4.0.1 and User tracking with SNMP v3

Hi! (again )
I've another problem with our new LMS 4.0.1.
We manage our devices with SNMP v3 but the user tracking don't want to work flawlessly.
I've attached an example from our SNMP configuration. Basicly it's the same in our devices.
1st the problem was that no matter what I did the User tracking didn't want to find any host. I left it and worked on something else. After 2 weeks suddenly appeard couple of thousand end host.
As earlier (LMS 2.6 or 3.2 with snmp v2) it is the same that LMS cannot differentiate normal end host and IP Phones although we have several thousand from both. But this is only one problem.
The other is that there are switches with the same IOS and SNMP configuration and from one I get the UT data and from another one I didn't get anything. Only from some 4506 (aprox. 12-15) and 6506 (2) works and we have 20+ 4506 and 10+ 6506. Not to mention the other switches (couple of houndred 2960 and 3750).
I'll be grateful if somebody could advice what to do.
Thanks
Gabor

Understanding Debugger Utility
The utility displays a report on the reasons why User Tracking failed to discover end hosts on specific ports.
In many cases, User Tracking may not perform as expected. This may be because of problems in other LMS applications. For instance LMS Server may have devices that are not discovered or inadequate VLAN discovery in Topology Services.
You can run the utility to troubleshoot problems, or provide the report and log generated by the utility when you contact TAC for help in diagnosing problems.
The debugger utility uses the data collected by LMS Server and reports the reasons for the missing ports in User Tracking.
This tool also has an SNMP component embedded which runs an SNMP query for the table as a part of verification for SNMP failure. For example, SNMP bugs in Catalyst operating system because of which User Tracking may fail to discover devices.
This generates an Action Report that you can use to analyze the data.
The Debugger Utility:
1. Checks the switch ports in a sequential order.
2. Reports violation of basic rules for each of the missing ports such as link ports and trunk ports.
3. Checks for SNMP retrieval of data, if the ports pass the validity check.
4. Generates an Action Report suggesting possible remedial actions to retrieve the valid missing ports.
Using Debugger Utility
The Debugger Utility is available at $NMSROOT/campus/bin/ (where $NMSROOT is the directory where you have installed CiscoWorks).
To run the Debugger Utility, run the command:
utdebug -switch switch-ip -port port1[,port2 ...] [-export filename]
where,
switch is the switch to which the end hosts are connected.
ports are the ports on the switch which have missing end hosts User Tracking.
-export filename specifies that the debug messages be stored in the file specified. If this option is not used, the messages are displayed on the console.
For example,
utdebug -switch 10.29.6.12 -port 5/12
utdebug -switch 10.29.100.10 -port Fa0/10
utdebug -switch 10.29.6.14 -port Gi6
Pretty sure you will find this and perhaps more in the build in help of LMS
Cheers,
Michel

LMS 4.2 user tracking

Hello,
I have a problem with LMS 4.2 user tracking.
When I generate a report on all my network all mac address are ok but there is no Hostname/Ip address in the result, except for 2 equipments.
the only difference between these 2 equipements and the rest of the network is that they are connected on a not routed vlan. All the other phones, computers are connected on a routed vlan.
I have a Nexus 5k as core and 2960 as access. Routing between vlans is done with the Nexus
My DNS server is ok and reachable
Here is a screenshot of the report attached.
Thanks for your help

Yes, the Nexus 5000 series has a few issues with LMS (and other things). Among them is the non-support of User Tracking. I'm told it's a MIB variable issue but it's been the case for some time now and remains so with the current LMS release.
Here is the reference from the Supported Devices Table which states in part:
The following features are not supported:
User Tracking (Nexus 1K, 4K, 5K and 7K with FEX), VLAN Management, VRF Lite, LANE Management
Configuration Deploy Protocols: HTTPS, SCP, SSH, RCP
Configuration Fetch Protocols: HTTPS, SCP, SSH, RCP
Software Distribution by: Advanced flow, Image, Remote Staging
Software Repository Synchronization
CiscoView - [1.3.6.1.4.1.9.12.3.1.3.840, 1.3.6.1.4.1.9.12.3.1.3.903, 1.3.6.1.4.1.9.12.3.1.3.907, 1.3.6.1.4.1.9.12.3.1.3.930]

LMS 4.2.2 User Tracking - IP resolving

Hello,
I have made a fresh install of LMS 4.2.2 and I have a problem with the user Tracking.
My architecture :
A pair of 4500-X running Version 03.03.00.SG
10 stack of 2960-S running IOS : 12.2.55.SE5
The 4500-X are routing cores. Everything is running SNMP V3 and I have entererd the commands for each VLAN :
snmp-server group SDIS03-GP-RW v3 priv context vlan-x write SDIS03-V-RW
All equipments are seen correctly by LMS. My problem is the user Tracking does not show the IP Addresses, I only have the MACs. I suppose this is an issue with ARP Table of the 4500-X that are not dowloaded by LMS but I don't konw why.
I have seen several post on the forum for similar problems but it do not seems to resolv mine.
Thanks by advance for your ideas.
Regards,
Abel.

I found a reference on the LMS Supported Devices Table:
The following features are not supported:
VRF Lite, LANE Management, User Tracking, VLAN Management
Configuration Deploy Protocols: HTTPs
Configuration Fetch Protocols: HTTPs
I wonder if it's due to this fact (mentioned in the 4500-X IOS XE Release Notes):
The following features are not supported on a Catalyst 4500-X Series switches:
•CISCO-IETF-IP-FORWARD-MIB
•CISCO-IETF-IP-MIB

LMS 4.2 User Tracking for Avaya IP Handsets and Connected Devices

I manage an environment that makes extensive use of Avaya IP phones and it's frustrating that this seems to limit the usefulness of the User Tracking application within LMS.
We configure the switch (2960) ports connected to the handsets as dot1q trunks with the associated PC being connected to the switch built into the phone.
Having done some forum research it seems that UT only adds an entry for a device connected on a trunk port if it is a Cisco IP phone, not anything else. This is frustrating as it eliminates a large part of our network from being recorded in UT and is doubley frustrating since the PC connected to the switch on the phone also isn't recorded.
Is there any way to get around this problem that anybody is aware of? Thanks

As long as you have a supported Cisco Layer 3 device in your LMS-management domain, you should be able to correlate the IP-MAC addresses in User Tracking (UT).
UT support is not specifically listed for the ASA firewall - I'm not sure it will support that feature if it is the users' gateway.
Useful links:
UT explanation from the LMS Admin Guide
Supported devices listing
Hope this helps.

User tracking problem - lms 3.2

Similar Messages

Maybe you are looking for