VLAN Port Assignment failed on Campus Manager 5.1

Dear All,
i deploying LMS 3.1 in my organization.
I finalized the installation and all looks fine BUT when i try to assign a port to a different VLAN in Campus Manager (5.1) i am getting the following error message.
There were some errors during operation."
Error occured moving port Gi1/8 in device 10.x.y.z into vlan with index XY.
Cause:An error occured while performing SNMP operation.
Action:Examine and save the server log file and report the error to the product administrator for further action.
VLAN Port Assignment failed
any idea?
here is simply the config related to SNMP on my switch.
snmp-server community XXXXXXXX
snmp-server host 10.X.Y.Z version 2c XXXXXXXX
snmp-server enable informs
snmp-server enable traps
do i miss anything else? any recommendation? Why i am getting that error message?
Thank you for your support and asistance.
Kind Regards,
mico

Hi Joe,
thank you so much for your kind reply. I configured the snmp RW community string on the switch matching the credentials on the LMS server but still getting the same error message when i try to assign ports no a different VLAN
here is my commands for the switch:
snmp-server community xxxxxx ro
snmp-server community yyyyyy rw
snmp-server host x.y.w.z version 2c yyyyyy
snmp-server enable informs
snmp-server enable traps
and on the LMS server i set the values:
snmp-server community xxxxxx ro
snmp-server community yyyyyy rw

Similar Messages

LMS 4.0 VLAN Port Assignment Cat3750X

Hello together
Have installed LMS 4.0 at a customer. The main switches he uses are the following ones:
WS-C3750X-24P-S (1.3.6.1.4.1.9.1.1224)
First problem I faced was with lack of support for Cisco View and the mentioned device. This is fixed with the following package Cisco View Device Update: Cat3750.cv50.13-0.zip. Have tested this today.
But now to my new problem. One reason for Cisco View usage is VLAN assignement. Unfortunately this is not supported with the Cat3750 devices and Cisco View like with other devices. So I thought I show the customer how to do it with the VLAN Port Assignement:
Configuration > Workflows > VLAN > Configure Port Assignment
Unfortunatly it seems that this is not supported with these devices. From the following document I can't find something which underlines the lack of support: http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.0/device_support/table/lms40sdt.html#Cisco Catalyst 3750 Series Switches
It even seems it should be supported. See picture in the bottom from the above link.
My question to the community:
- Does anybody else have the same switches? If yes, does Configure Port Assignment work in LMS 4.0
- @Cisco, is this feature really not supported with the following device: WS-C3750X-24P-S? If yes, are any patches planned with release date.
Thanks for any feedback.
Erich

Hi Joseph
Thanks for your feedback. Have asked the customer to do the following steps and send me a screen shot:
- Configuration > Workflows > VLAN > Configure Port Assignment
- Select Domain Selector
- Choose a Domain of a Switch C3750X
- Click on List Ports
Actually the same thing what I have done during my installation Onsite. When I have done the above steps I only have received a empty windows. Now, a week later it seems to work. Enclosed a screen shot with evidence for all those you have the same devices in use.
Happy that it works. Funny, that it didn't worked when I was onsite. Sorry for the inconvenience and thanks for your feedback / support.
Erich

VLAN port assignment on LMS 4.2

I have noticed that only the auxiliary(Voice) vlan is showing up on new deployed switch ports even though both Data and Voice vlans are configured. Since the native vlan does not show up, the technicians are unable to assign other vlans on the ports. Any idea what causes this behavior?

ok, shell or shell_enable ?
i'll try it，thanks。
LMS02/sysadmin# ?
Exec commands:
application   Application Install and Administration
clock         Set the system clock
configure     Enter configuration mode
copy          Copy commands
debug         Debugging functions (see also 'undebug')
delete        Delete a file
dir           List files on local filesystem
exit          Exit from the EXEC
forceout      Force Logout all the sessions of a specific system user
halt          Shutdown the system
mkdir         Create new directory
nslookup      DNS lookup for an IP address or hostname
patch         Install System or Application Patch
ping          Ping a remote ip address
ping6         Ping a remote ipv6 address
reload        Reboot the system
rmdir         Remove existing directory
shell         Access the shell by using the password
shell_enable Enable access to shell by setting password
show          Show running system information
ssh           SSH to a remote ip address
tech          TAC commands
telnet        Telnet to a remote ip address
terminal      Set terminal line parameters
traceroute    Trace the route to a remote ip address
undebug       Disable debugging functions (see also 'debug')
write         Write running system information
LMS02/sysadmin#

ISA550 Deny access to management login on some vlans/ports

Hi,
I tried to create a firewall ACL rule that would deny access to http/https on the router for some vlans/ports, but it seems like the rule is just ignored.
Also; I can ping all interfaces on the router even between to vlans that are using a same level zone. Even connect to the management login from a different access vlan port.
The main issue is that I don't really like to expose a webserver on a securitydevice to everyone on the LAN side. And I would also like to isolate all vlans and create exceptions if I need to.
Anyone know if this is possible?

Hi Prithvi Manduva,
Thank you for replying!
I have tried to set up two simple rules to illustrate my problem. My configuration is this:
VLAN 1: DEFAULT in zone OFFICE
VLAN 2: CONFIG in zine CONFIG
With Vlan 1 and 2 assigned to port 2 and port 3 in access mode-
DHCP is enabled on both vlans with subnets of 192.168.5.0/24 for OFFICE and 192.168.10.0/24 for CONFIG
CONFIG_IP is 192.168.10.1
DEFAULT_IP is 192.168.5.1
Using these two rules:
#     FromZone     ToZone     Service     SourceIP     DestinationIP     Action
1     CONFIG     Any     HTTP     Any     CONFIG_IP     Permit
2     Any     Any     HTTP     Any     DEFAULT_IP     Deny
I would think that this would allow the CONFIG zone to access port 80 on config IP, and also deny all other zones to access port 80 on the default gateway for Office (DEFAULT_IP)
I also tried to create a simple Deny ICMP Echo Request to the DEFAULT_IP, but it looks like it's just ignored.
In short, it looks like I can't deny anything to any of the IP addresses of the interfaces on the router.

Campus Manager report - Ports in error Disabled state

Hi,
I have LMS 3.2 and I wonder how Campus Manager collects information from the switch to generate a report of discrepancies, namely a report of "Ports in Error Disabled state"??
I find that I have ports in errDisabled state but Campus Manger doesn´t show this information in "Ports in Error Dissabled state" report. What could be the problem?
Thanks.

Hi,
Campus Manager do snmpwalk on the ciscoErrDisableMIB to get the status of the error disabled ports.
Thanks,
Gaganjeet Singh

Dynamic VLAN/SSID assignment using 4402/MS IAS

Greetings,
In short we have a WLC4402 (50 AP license) and approx 30 1252s LAPs in place. Right now we have three VLANs/SSIDs in place - one for admin, one for teachers and one for students. The WLC uses a MS Windows 2003 server running IAS for PEAP authentication. The clients are Windows XP, the SSID is entered manually based on "pre-designation" of the laptop's "type" (either admin, teacher or student).
This is working fine. However more and more frequently our users have been "sharing" laptops so a student may need to use a teacher's laptop and vice-versa. In short we would like to use dynamic VLAN/SSID assignment so that if a student does have a teacher's laptop the "student" VLAN/SSID would be assigned to them when log in (and the proper ACLs, QoS policies, etc would be applied)
We have found documentation on how to perform this with an ACS but is there anything available for this configuration with a MS IAS server.
Any input/information would be greatly appreciated.
Joe

Shaun,
My LAG - etherchannel interface
interface Port-channel8
description WLC-portchannel
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,3,24-26
switchport mode trunk
end
My 2 WLC Fiber ports:
Current configuration : 382 bytes
interface GigabitEthernet7/47
description CiscoWLC-LAG-Ports
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,3,24-26
switchport mode trunk
service-policy output autoqos-voip-policy
qos trust cos
auto qos voip trust
tx-queue 3
bandwidth percent 33
priority high
shape percent 33
spanning-tree bpdufilter enable
channel-group 8 mode on
end
2200-3A#sh run int g7/48
Building configuration...
Current configuration : 382 bytes
interface GigabitEthernet7/48
description CiscoWLC-LAG-Ports
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,3,24-26
switchport mode trunk
service-policy output autoqos-voip-policy
qos trust cos
auto qos voip trust
tx-queue 3
bandwidth percent 33
priority high
shape percent 33
spanning-tree bpdufilter enable
channel-group 8 mode on
end
I use vl1 for ap mgmt, vl3 for hotspot, and vl24-26 for WPA2 clients and wireless voip devices.
One of my AP switchports on the same switch. I let the trunk port to the AP carry a range of vlan's, and then a manage the vlans assigned to clients with IAS and the WLC.
interface FastEthernet4/48
description AP-PoE
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1-1004
switchport mode trunk
service-policy output autoqos-voip-policy
qos trust cos
auto qos voip trust
tx-queue 3
bandwidth percent 33
priority high
shape percent 33
end
Jim

Unable to run reports in Campus Manager 5.2.2

I'm trying to run reports in Campus Manager and none of them work.
If I try a Best Practices Deviation report I get this error:
"Problem with File /WEB-INF/screens/reports/BestPracticesReportGen.jsp!!!/WEB-INF/screens/reporst/BestPracticesReportGen.jsp(418,66) Attribute value "pophelp('" + helpLink + "');" is quoted with " which must be escaped when used within the value"
If I try a Device Attributes report or a Port Attributes report I get a pop up saying:
"Report not found"
If I try a Discrepancies report I get:
"Error while loading. Campus Manager Server may be down. Please check for Campus Manager Server Stgatus in Common Services -> Server -> Admin -> Process. If the process is down, restart it. Else try after sometime"
And finally, running a VLAN report for any device (and I know they are L2 devices) comes back with:
"Selected devices(s) do not support VLANs"
We're running on Windows 2003. I've taken over supporting this system, so I don't know if it ever worked.
LMS 3.2.1
Campus Manager 5.2.2
CiscoWorks Common Services 3.3.1
Can anyone suggest how I could get to the bottom of this?

Hi Roger - try editing your MDC\tomcat\conf\catalina.properties file and add the following line at the end:
org.apache.jasper.compiler.Parser.STRICT_QUOTE_ESCAPING=false
This tells Tomcat to be flexible with double and single quoting in the CW code and allowed me to run the reports, though I'm still not getting the data I'd expect that's probably another issue.
Hi Ahmad, thanks for your reply. Here's my output too.

Problem With Device Management in Campus Manager

hi , there are 474 devices in common services device managemant which I grouped them to userdefinedgroups .
then I applied the auto allocation mode in Campus manager to apply all managed devices , when I click apply it mentioned that it would add 474 devices . but after data collection was finished just 461 devices was added and the rest of those are now in the Include devices under device management !!!
why does it hapened ?
thank you .

Hi Marian,
Could you please provide me with details on how to setup test workbench reporting. I have a BW system external to Solution Manager. I have setup the RFC conncections and all is okay. I have also setup the source system in BW and installed the web templates. However, when activating the content via solman_workcenter - test management - settings, I get the following error:
Content Activation Log
Log for Setup ID 20100819135323
20100819 135323[ERROR ]: Current Status: ERROR
20100819 135323[INFO ]: Job CCMS_BI_SETUP successfully scheduled
20100819 135323[ERROR ]: Incorrect system setting: standard transport is active
20100819 135323[ERROR ]: Change system settings or set user parameters RSOISCONTENTSYSTEM and RSOSTANDARDCTOACTIVE
20100819 135323[ERROR ]: Prerequisites check failed
20100819 135323[ERROR ]: Jobname/count: CCMS_BI_SETUP 13532300
I am sure there is something wrong in my setup but I cannot figure out what it is. A step by step help on how to do it will be greatly appreciated.
Regards,
Rue.

AniServer Campus Manager problem

Hi I recently ran a Device patch update and ever since I have had major problems with Campus Manager.
I figured it was Aniserver related So i have done the following so far:
1- I reinitialised the ANI Database
2 - I replaced the aniserv.properties with the .orig file.
Still the problems exist even if i managed to get the Aniserver started campus manager data collection would have problems and intermittent error messages when trying to access Campus Manager admin pages.
3 - I decided to upgrade to LMS3.2 SP1
It seemed to be ok with data collection but then when I came in to work today it hadnt run any scheduled aquistions when i went tinto the admin pages I had the error messages again unable to get properties from server.
4 I decided to try a complete restore of the database to a date before the initial device package update.
But I still have problems with the aniserver Failed to run.
Please Help!!
Kind regards Dean
Here is the Ani log
2011/06/23 13:11:10 main ani ERROR ServiceModule: Failed to instantiate com.cisco.nm.ani.server.dfmpoller.NoServiceModule
2011/06/23 13:11:10 main ani MESSAGE DBConnection: Created new Database connection [hashCode = 6164599]
2011/06/23 13:11:12 main ani MESSAGE PartialSMFCommit: Partial Commit is enabled for DataCollection
2011/06/23 13:11:16 main ani ERROR POStore: Exception caught: com.cisco.nm.ani.server.frontend.AniStaticConfigException: AniStaticConfigException: Failed (sql) to verify/construct schema for PO com.cisco.nm.ani.server.topo.PagpPortChannel because: com.sybase.jdbc2.jdbc.SybSQLException: SQL Anywhere Error -116: Table must be empty
2011/06/23 13:11:16 main ani ERROR AniLoadConfiguration: AniStaticConfigException: Failed to construct or verify database

Seems to be working fine now I used the info in the following link to reinitialise the ani.db https://supportforums.cisco.com/thread/2083513
Using this alone did not fix it opt/CSCOpx/bin/perl /opt/CSCOpx/bin/dbRestoreOrig.pl dsn=ani dmprefix=ANI
But doing this as well seemed to sort it:
First, set the CiscoWorks Daemon Manager service to Manual, and reboot the server. When the server reboots, delete NMSROOT\databases\ani\ani.log if it exists. Then run:
NMSROOT\objects\db\win32\dbsrv9 -f NMSROOT\databases\ani\ani.db
After that, set the Daemon Manager service back to Automatic, and reboot again
Regards Dean

Campus Manager User Tracking Report - dot1xEnabled = False

The Campus Manager User Tracking Report has the dot1xEnabled field that is always false.
It was my understanding that the switch will send SNMP Trap Notifications to Cisco Works regarding the status of 802.1x authentication per port.
We have configured per port:
snmp trap mac-notification added
snmp trap mac-notification removed
and globally
snmp-server host x.x.x.x abababa udp-port 1431 MAC-Notification
With no success, so we opened a TAC case, 614376387 and we were told by TAC and the Development Engineers that this "feature" does not work in LMS 3.2 and Campus Manager 5.2.1 and that this feature will be available in the next new release.
I thought I had read on this forum that some folks have this 'feature' working, where this field shows the current status of 802.1x per access port.
Has anyone been able to get this 'feature' to work? And if so, what versions are you running and what were the 'tricks' to get it working?
Much appreciated.

The MAC address notification traps only alert Campus to the fact that a MAC address has been learned or removed from a given port. That starts the dynamic UT process. With no other information, you will potentially see a new record appear in UT shortly after receiving the trap. However, that record will not have IP or username data associated with it.
To get the IP data, Campus will poll the CISCO-DHCP-SNOOPING-MIB to pull IP data. To get username data, Campus will poll the IEEE8021-PAE-MIB of the switch to get dot1x information. So, your switch must be configured for dot1x, and it must support this MIB (in particular, the objects dot1xAuthSessionTime, dot1xAuthSessionUserName, and dot1xPaePortCapabilities).
Without dot1x, hope is not lost. If the end host is running Windows and the UTLite tool, then when the user logs in, UTLite should start from their logon script, and send a UDP update to Campus with the username and IP of the host.

RE:connection to port 6241 failed during java upgrade

Hi all,
We are performing Java Upgrade and we are stuck in the intial stage stage. The problem is connection to port 6241 failed .
We have retained the default port.
Thanks and Regards,
sowmya

Hi Regelio
As Van mentioned above,the issue may caused by the TAO NT Naming service.
Please check the status of TAO NT Naming service/License Manager
when the issue happens.And in case the error is really caused by
those services,please try to re-install the whole server tools.
Also,if the issue still persists,as another workaround we suggest you to use a simple
batch script to test the Status of the TAO NT naming service,
and restart it when the services was stopped.
Such a script can be launched with windows scheduled every several
minutes.
@echo off
net start find "TAO NT Naming Service"
IF %ERRORLEVEL% EQU 0 (
echo Ok - "TAO NT Naming Service" is running
) ELSE (
echo Error - "TAO NT Naming Service" is not running
net stop "TAO NT Naming Service"
net stop "SAP Business One License Manager 2005"
net start "TAO NT Naming Service"
net start "SAP Business One License Manager 2005"
Regards,
Syn Qin
SAP Business One Forums Team

Norma flow of Campus Management

Hi CM Masters,
I am new in Campus Management.
Please tell me the normal flow of CM.
I have some understanding..please correct me..
1-Creation of Org Unit
2-Attach Program of Study with org unit.
3-Attach Modules with Program of study.
4 Create Student
5 Admission of student.
administration of Student.
7 Module Booking.
8 Assesment.
9 Progression.
10.Re-registration/De-Registration
11-Degree Audit.
12 Alumni.
Please tell me if any steps I am missing. And if you people have any documentation where I can found that what process is necessary before going from one steps to another it would help me.
Thanks a lot

Hi Ankita,
For assesment process , module booking plays a very important role
When Sessions Of Offering are assigned to the module , grading can be done .
<b>Event Planning and booking :</b>
Event Planning is more useful when you have two classes (A ,B )
Eg:
Decision Making(DM) is the Module and two categories of section having the same module , resouces etc .
Here comes the Event Planning : Where u can define the timings for the classes , the resource , location etc .
Event Planning is done for Module DM where the template differs as DM_A ,DM_B .
Then you can book the students for that particular event DM_A ,DM_B .
So easily you can differentiate the student belonging to the class DM_A or DM_B provided its already known that the partcular module is offered in that particular Sessions Of Offering .
Regards,
Gajalakshmi .

UCS VLAN Port Count Limit

hi, Cisco:
Is there any way to INCREASE the VLAN Port Count Limit of 6000 Per FInterconnect running 1.4(2b)?
Imagine I have 4 vNIC and 10 selected VLAN Per Service Profile and 2 vHBA.
So in this case, how many VLAN ports will be used? Is it 60 or 40? Assuming it is 60, Does it man that I CAN ONLY HAVE 100 Service Profiles?
just wondering WHY is the VLAN Port Count Limit So Low? How about the other fabric and how DOES it contribute to the VLAN Port Count Limit?
Please advise.
Really appreciate it as we are rolling and rolling out UCS in droves.
SiM

Hey KP,
The VLAN port count is accrued on an individual FI basis. So each FI gets 6000 VLAN port counts. This total is made up from a combination of Uplink ports (Border Interfaces) as well as virtual ports (Access Ports or HBAs). You can see the current allocaiton by:
UCS-250-B# scope fabric-interconnect b
UCS-250-B /fabric-interconnect # show vlan-port-count
VLAN-Port Count:
VLAN-Port Limit Access VLAN-Port Count Border VLAN-Port Count Alloc Status
6000 95 114 Available
UCS-250-B /fabric-interconnect #
The border (uplink) interfaces are pretty easy to understand. The Access VLAN Port Count is incremented for each VLAN on each vNIC defined, as well as any HBAs.
So in your example, if you have 4 vNICs with 10 VLANs defined on each, plus two HBAs you would have 4 x 10 + 2 = 42 VLAN port counts for this service profile.
The only time this count comes into consideration is with an adaptor that can create multiple virtual ports such as the Palo (M81KR-VIC) adaptor. We have many cloud providers with 20+ Chassis who never hit the max limit.
This limitation brings in "good design" practices. If you want to define 4 vNICs for your service profiles, do you really need all 10 VLANs allowed on each of the 4 vNICs? Crafting an individual vNIC for different purposes such as VMotion, Management, iSCSI etc is a great idea. But I don't need to allow each & every VLAN on these various purpose NICs. Just allowing all VLANs on ALL vNICs is the only way you'll likely exceed the 6000 VLAN port count limit. This again, would probably identify a design concern more than system limitation.
Let me know if you have any other questions/concerns.
Regards,
Robert

H-REAP LWAPs losing VLAN mapping when fail to secondary WLC's

Hello,
I have three 5508 WLCs, running code 7.0.98.0 supporting 100+ LWAPs in H-REAP mode. The LWAPs are servicing 2-3 WLANs each. Some are using central authentication and local switching, some are configured for central authentication and central switching. When the LWAPs fail from one WLC to another WLC, the LWAP's lose all of their VLAN mappings and pick up the VLAN of the management interface on the new WLC.
All WLANs are configured to use the management interface on the WLC and the VLAN mappings are configured per LWAP on the H-REAP properties tab. The WLAN ID numbers and all the WLAN settings are the same across all 3 WLC's. I have created AP groups on all 3 WLC's and the AP group config matches across the 3 WLCs.
I can get the LWAPs to keep their VLAN mapping by creating an interface on the WLC with the VLAN ID of the locally switched/remote site VLAN and then setting the interface for the WLAN to the new interface. However, then the WLAN doesn't work, because the centrally located WLC doesn't have the remote site VLAN. It also seems to keep the VLAN mapping if I create the locally switched/remote site VLAN interface on the WLC , and point the WLAN to the management interface. This shouldn't be a necessary step though... In H-REAP with local switching, the LWAPs aren't using the interface on the WLC.
I found a note in the 7.0 WLC config guide that explains why the VLANs are picking up the management interface VLAN, but that same note says the VLAN mappings can be changed per LWAP/WLAN!
From config guide:
For hybrid-REAP access points, the interface mapping at the controller for WLANs that is configured for H-REAP Local Switching is inherited at the access point as the default VLAN tagging. This mapping can be easily changed per SSID, per hybrid-REAP access point
Anyone using H-REAP and been able to get the LWAPs to keep the VLAN mapping when failing from one WLC to another?
Thanks!

Shawn,
I went back and reviewed everything and everything was duplicated , Except... WLAN_ID. The Wlan ID tags were different. I created a test and failled my two test AP's and they both came up on the backup controller with the proper vlan ID. now I know. When it was working for everyone else I was begining to wonder if I found a new bug or it was my config. This is one I wont forget ..
Thank you

Network Topology in Campus Manager

I have two switches that are unsupported in my network topology map. These devices show up as green boxes with question marks. The switches are catalyst 3560's model number WS-C3560-48TS. I can see where the 24 port model is supported but not the 48 port. Is there a way to get support for these devices so that my topo map doesn't have green icons with question marks?

Which campus manager service pack do you have installed? This support was added in CM 3.0.4

VLAN Port Assignment failed on Campus Manager 5.1

Similar Messages

Maybe you are looking for