ACS 3.2 SNMP

Similar Questions

• Cisco Secure ACS 5.3 SNMP agent does not

  Hello

  I have problems with the SNMP on Cisco Secure ACS 5.3 agent (patch level 5) stop, is there a quick way to restart the SNMP daemon via the command line?

  Robert,

  I understand where you come, I encountered the following bug:

  CSCte39351

  The process of the SNMP agent in demon device ACS stops.

  and reboot the box will bring him back to the top and after about 3 days, he'd stop. I just want to see if it's the same bug that could be back in patch 5. The best thing to do at this stage is to plan a quick down and restart the box to see if the snmp process starts again. If this then gives IT a week to see if the snmp Protocol falls down. If it does then make reference to this bug and open a new case of tac for repair. If not, then you should be in the clear.

  Thank you

  Tarik Admani

• Adding accounts on ACS using SNMP

  Hi people,

  I use ACS 4.2 and I was just wondering if it is possible to add user accounts by using snmpset? If so, anyone found any documentation on what needs to be done?  I have the SNMP running on it and check with the ACS using snmpget.

  Thank you, S.

  Hi Shane,

  It is unfortunately not possible. You cannot add users via SNMP.
  However, you can add multiple users at once using RDBMS synchronization.

  HTH

  Amjad

  Sent by Cisco Support technique iPad App

• 2611XM Terminal Server + ACS + new authentication when selecting menu options

  Hello

  I managed to configure ACS authentication on my 2611xm router,

  After you connect to the router, I have an autocommand configuration to run a menu.

  My problem is when you select the option in the menu,

  You are then re invited to reauthenicated against the router before connecting to the line,

  can someone tell me how to prevent it.

  Thank you for your time and effort in advance, I have attached a config below.

  DDRAS01 #sh running-config

  Building configuration...

  Current configuration: 6854 bytes

  !

  ! Last modification of the configuration at 10:28:49 GMT Sunday, February 21, 2010 by

  !  NVRAM config update at 19:25:53 GMT Saturday, February 20, 2010 by

  !

  version 12.4

  horodateurs service debug datetime msec

  Log service timestamps datetime msec

  encryption password service

  Service linenumber

  sequence numbers service

  !

  hostname DDRAS01

  !

  boot-start-marker

  boot-end-marker

  !

  Security of authentication failure rate 3 log

  Passwords security min-length 6

  logging buffered 51200 informational

  record of the rate-limit all 10000

  recording console critical

  enable password 7

  !

  AAA new-model

  !

  !

  AAA authentication login default group Ganymede + local

  AAA authentication login if_needed local

  the AAA authentication enable default

  AAA of authentication ppp default local

  AAA authorization exec default group Ganymede + local authenticated by FIS

  AAA accounting exec default start-stop Ganymede group.

  orders accounting AAA 15 by default start-stop Ganymede group.

  !

  AAA - the id of the joint session

  clock timezone WAS 10

  summer time clock WAS recurring last Sun Oct 02:00 last Sun Mar 03:00

  no location network-clock-participate 1

  No network-clock-participate wic 0

  IP cef

  !

  !

  !

  !

  list of IP domains

  list of IP domains

  IP domain name

  the IP 2033 172.16.1.1 host dd-cr-01F

  ddsws01 host IP 172.16.1.1 2034

  ddsws04 host IP 172.16.1.1 2035

  ddce565 host IP 172.16.1.1 2040

  IP-name server

  IP-name server

  !

  !

  !

  password username d ' operators 15 7 privilege

  !

  !

  property intellectual ssh source interface FastEthernet0/0

  property intellectual ssh event logging

  property intellectual ssh version 2

  !

  !

  interface Loopback0

  IP 172.16.1.1 255.255.255.255

  !

  interface FastEthernet0/0

  IP 255.255.255.0

  Speed 100

  full-duplex

  !

  interface Serial0/0

  no ip address

  Shutdown

  !

  interface BRI0/0

  no ip address

  encapsulation hdlc

  Shutdown

  !

  interface FastEthernet0/1

  no ip address

  Shutdown

  automatic duplex

  automatic speed

  !

  IP forward-Protocol ND

  IP route 0.0.0.0 0.0.0.0

  !

  IP http server

  no ip http secure server

  Ganymede IP source interface FastEthernet0/0

  !

  radius of the IP source interface FastEthernet0/0

  exploitation forest installation local6

  logging

  SNMP-server RO community

  SNMP-server RW community

  SNMP server location

  contact Server SNMP d ' operators

  !

  title of menu ddras01 ^ C

  Server Terminal Server for Cisco

  Select number from the list below

  Use "ctrl + shift + 6" then 'x' to switch to the menu

  ^ C

  text of ddras01 to menu 1 connect to the DD-CR-01

  order of menu 1 ddras01 resume JJ-cr-01 / dd-cr-01 2033 telnet connection

  ddras01 text menu 2 connect to DDSWS01

  order of menu 2 ddras01 resume ddsws01 / ddsws01 2034 telnet connection

  text menu 3 ddras01 connect to DDSWS04

  order of menu 3 ddras01 resume ddsws04 / ddsws04 2035 telnet connection

  text menu 8 ddras01 connect to DDCE565

  order of menu 8 ddras01 resume ddce565 / ddce565 2040 telnet connection

  menu 9 ddras01 text output

  menu ddras01 command menu-exit 9

  ddras01 menu clear-screen

  menu ddras01-status line

  menu-ddras01 line mode

  radius-server host 10.2.0.50

  RADIUS-server application made

  radius-server key 7

  !

  control plan

  !

  privilege exec 15 level write terminal

  writing level 15 privileges exec

  Ping privileges exec level 1

  privilege exec 10 undebug ip icmp level

  privilege exec 10 undebug ip level

  level of privilege exec 10 undebug all

  privilege exec 10 undebug level

  terminal monitor exec level 10 privileges

  privilege exec 10 level terminals

  privilege exec 15 level show running-config

  See configuration at the privileged exec level 5

  show privileges exec level 5

  privilege exec 10 debug ip icmp level

  privilege exec level 10 debug ip

  privilege exec 10 level debug all

  debugging privileges exec level 10

  clear interface of privileges exec level 10

  clear counters at level 10 privilege exec

  level of privilege exec 10 clear

  !

  Line con 0

  password 7

  Synchronous recording

  line 33 64

  No exec-banner

  exec-timeout 0 0

  no activation-character

  No exec

  preferred transport telnet

  transport of entry all

  character of exhaust-27

  StopBits 1

  FlowControl hardware

  line to 0

  line vty 0 4

  password 7

  Synchronous recording

  ddras01 menu autocommand

  line vty 5 181

  password 7

  Synchronous recording

  ddras01 menu autocommand

  !

  NTP-period clock 17208487

  source NTP FastEthernet0/0

  NTP server

  end

  Hello

  You have aaa login default configured for authentication, with this you get invited

  When you try to access the line.

  Under line VTY 5 181 try adding:

  authentication of the connection /NOAUTH

  exec authorization /NOAUTH

  Add the lines of aaa:

  /NOAUTH AAA authentication login no

  /NOAUTH AAA authorization exec no

  This should stop the authentication to the lines.

  -Jesse

• ACS - monitor Services

  Hello

  Currently using Windows ACS 4.0 and 1113 Ver4.2 with SNMP patch to allow ping.

  We want control services using Solarwinds APM, you fix the template above, you can see details of SNMP from the ect server and Services.  But it seems to require a user name and password to monitor services, which is not a Windows user name and password.  I tried to add Administrators user name and the password of the ACS, but does not control the services.

  Is there a certain procedure to monitor the Services of the CSA with a 3rd party like Solarwinds product?

  Concerning

  Craig

  The ACS SE 1113 is a server, locked in order to describe how the services are done with a third-party utility, it would very probably install some type of agent to look/monitor/or even send traps SNMP for the ACS Services (that are installed on the operating system).

  ACS already does in itself, if you go to the System Configuration > ACS Service Management > you could configure ACS to contact you in the event of a service failure. You may also send the report of these alerts to a Syslog server: System Configuration > Logging > change the case report.

  Just realized that there is also an SNMP Agent (System Configuration-> Configuration of the device--> SNMP Agent), this could provide some additional information:

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/SCBasic.html#wp288047

  Keep in mind:

  Documentation of the ACS CSCsj18497 device doesn't not list SNMP MIB support

  http://Tools.Cisco.com/support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsj27225

  Hope this helps,

• ACS 5.1 issues

  Experts of the Association,

  Need quick answers to issues related to GBA 5.1 for a customer. I haven't used the ACS5.1 still so watch out for the easy questions

  (1) is it possible to generate the report for users who are inactive for 30 days? Customer looking for these users to see if they really need access to any checking device.

  (2) are there any known issues affecting the level of priviligaes users. In the current implementation of that client users are always connected in 1 even private if they are affecting the 5 private level. I understand with ACS 4.x, we can activate the exec process and assign priv under user/group policy. What are the configurations that the client might be missing in this case possiby?

  (3) are there any SNMP or other available in 5.1 ACS notice where admin can be notified at the time where a set of particulat user connects.

  Thank you

  Hello

  Please find answers inline:

  (1) is it possible to generate the report for users who are inactive for 30 days?  Customer looking for these users to see if they really need access to any checking device.

  [YEARS] You can generate reports of user using several elements, including reports for the last 30 days:

  

  (2) are there any known issues affecting the level of priviligaes users. In the current implementation of that client users are always connected in 1 even private if they are affecting the 5 private level. I understand with ACS 4.x, we can activate the exec process and assign priv under user/group policy. What are the configurations that the client might be missing in this case possiby?

  [YEARS] You can do exactly the same implementation GBA 5.x. just create permission authenticate profiles to apply to users with success.

  (3) are there any SNMP or other available in 5.1 ACS notice where admin can be notified at the time where a set of particulat user connects.

  [YEARS] You can create "Alarms" which will send an e-mail notification or a syslog server:

  Monitoring and reports >

  ... >

  Alarms >

  Thresholds >

  Add

  HTH,
  Tiago

  --

  If this helps you or answers to your question if it you please mark it as 'responded' or write it down, if other users can easily find it.

• ACS 5.1 mab reauthentication in every 1 minutes

  Hello

  I use Cisco ACS 5.1. I want to authenticate my phones ip with mab (phones Avaya) and the commputers with dot1x.

  Everything works fine except that the phones that are authenticated successfully with mab attempts to authenticate again

  and again and again... and this fills the newspapers of GBA. Each authentication is successful and the phone don't hang up. But it fills

  until my logs and makes them useless.

  change the version: cat4500-ipbasek9 - mz.122 - 53.SG3.bin

  port config:

  interface FastEthernet2/25
  switchport access vlan 107
  switchport mode access
  switchport voice vlan 502
  switchport port-security maximum 3
  switchport port-security
  aging of the switchport port security 1
  inactivity of aging switchport port-security type
  no event log status link
  load-interval 60
  Speed 100
  full duplex
  QoS based on vlan
  authentication event failure action allow vlan 109
  action of death event authentication server allow vlan 101
  living action of the server reset the authentication event
  multi-domain of host-mode authentication
  open authentication
  authentication order dot1x mab
  authentication priority dot1x mab
  Auto control of the port of authentication
  restrict the authentication violation
  MAB
  no link-status of snmp trap
  dot1x EAP authenticator
  dot1x quiet-time 30
  dot1x timeout server-timeout 25
  dot1x tx-deadline 15
  dot1x timeout supp-timeout 25
  dot1x max - req 3
  TX-queue 3
  high priority
  No cdp enable
  spanning tree portfast
  IP dhcp snooping limit 10 speed
  end

  Thank you

  Andras

  Hello

  If you delete the commands:

  switchport port-security maximum 3
  switchport port-security
  aging of the switchport port security 1
  inactivity of aging switchport port-security type

  Phones stops at authenticate every minute?

  Please note that you set the time of aging at 1 minute, which means that if the phone doesn't send any traffic, the switch will remove its mac address FRO mthe mac table, therefore, the dot1x process will kick.

  HTH,

  Tiago

  --

  If this helps you or answers to your question if it you please mark it as 'responded' or write it down, if other users can easily find it.

• Assignment of VLAN dynamic RADIUS ACS 5.2 Server with NAC

  We are trying to reduce the number of ssid in our network wireless with assignment of vlan dynamic with the acs. Our problem is that we use Cisco NAC so with assignments of vlan dynamic user will be checked by the NAC. Agent of Cisco sometimes pop up and do nothing to do or give a message cannot locate server. We even got an OOB error. Someone used a VLAN dynamics with the acs and the NAC successfully? The NAC is Out of Band

  Hello

  I supported oob nac and wireless and your efforts to make the dynamic assignment of VLANs will not work because of the way in which him vlan quarantine and access are mapped to this ssid.

  This work in in-band mode, however your design. This WLAN key needs to exist because the Manager sends the snmp trap to move the client from quarantine access.

  Just as a note, I'm sure you are aware is that ISE is the evolution of the acs and the NAC. Basically this your solution to reduce the skates and posturing of the customers.

  Sent by Cisco Support technique iPad App

• What necessary SNMP MIB file

  Does anyone know where I could find information (MIB) machine for Toshiba MFP devices file. I googled had and checked the predominant sites for these types of files. I'm looking to get the OID for an eStudio-600 so I can configure the SNMP interruptions for alerts of toner and paper jams.

  Thank you

  Mike

  PS: I put here as a matter of SNMP network, if it's wrong please feel free to move it to the right forum.

  In my opinion, this forum is wrong place for this question. I think you should contact your local dealer where you bought your eStudio-600.
  They offer a type of support or not?

• Is it possible to configure SNMP or logging remotely on the R8000?

  The stock firmware allows logging of external data?

  As a way secret for the program to install/activate SNMP?

  Or direct the output of logging to an external server?

  Because the viewport of the newspapers little pointless, just doesn't really cut it and go through the journal by email whenever you want to look over is simply absurd.

  There is no support SNMP, for one of the Netgear router machine, in stock firmware.

• ReadyNAS Ultra 6 SNMP addon

  Hi all

  I had to reset my ReadyNAS Ultra 6 by default and have lost the SNMP addon. I can't locate on my own PC, or on one of the forums. I searched for hours without success. Anyone out there have the .bin still available and power poster file or email it to me please?

  Thanks in advance.

  Hello mdshelton123,

  Stephen is right, we saw the link you gave, but you already have updated the firmware of the OS6.

  I asked the subject to be moved archives available in the community. It's here: https://community.netgear.com/t5/Community-Add-ons/SNMPon-0-1-1/td-p/789452

  Kind regards

• StorCenter px6 - 300 d SNMP SNMP problem after FW update to 4.0.2.9960

  Hello

  We have a problem in PX6 - 300 d, after the upgrade from version 3.2.3.15290 to 4.0.2.9960, FW SNMP configuration. Ishmael of application allows us to manage matrices. After updating the FW one of storage, the application can no longer collect information. Notify know if there was no change of FW which caused this problem?

  SNMP parameters in storage, are equal, the difference in this version of the FW of storage.

  Thank you for your help

  Adias

  Hi adias.

  There is a newer version of the firmware. I recommend updating to the latest version to see if the problem persists.

  Firmware Version 4.0.8.23976 for px6 - 300 d

• SNMP help please?

  Hello

  I'm all new to SNMP, although I have used LabVIEW a few times in recent years. Office supplies for the moment, I am developing an application to test the power. We use a G756N Dell PDU for each switching power. I tried a couple of approaches to control and SNMP is the most promising so far. During my research I came across free ManageEngine MibBrowser and I could find the last MIB to download the firmware from Dell here. I was able to communicate with the UDA and points of sale under and out so far, but I really need to integrate control of the PDU in the application of LabVIEW to automate tests. I'm pinned Mark Yedinak and his APC PDU SNMP communication library, only the most recent of which I found examples in this thread.

  I tried to do a VI to test communication in LabVIEW using the OID I received from MibBrowser, but it returns an error code 2, noSuchName. The PDU is configured to use SNMP v1 and the public and private communities write access +. I tried with and without the main point, but without success. I'm using LabVIEW 2013 64-bit. Could someone please review the information below and see what I could do wrong, or that the direction to take to solve the problems there?

  Thank you

  Simon

  MIB object IDS:

  . iso.org.dod.internet.private.enterprises.dell.pdu.pdusub.hardware.rPDU.rPDUOutlet.rPDUOutletSwitched.rPDUOutletSwitchedControlTable.rPDUOutletSwitchedControlEntry.rPDUOutletSwitchedControlCmd

  . 1.3.6.1.4.1.674.10903.200.2.200.130.1.4.1.4.1: {1 or 2}

  I added le.1 at the end of the index to the first exit, and 1 variable is instantaneous, while the 2 is instant off

  Photo

  

  VI:

  Front panel:

  

  Wiring:

  

  Link to examples of SNMP Communications and APC_PDU.zip:

  http://forums.NI.com/T5/LabVIEW/APC-ups-with-desktop/m-p/2431528/highlight/true#M749059

  For some reason, I can't the real VI set. The MIB is too in the archive. Its in my selection here:

  https://DL.dropboxusercontent.com/u/10871313/power%20Supply%20Testing.zip

  Thanks again

  
  

• Help with SNMP

  I found an online library of SNMP vi that someone writes and I fight so he can work. I think I use them properly because I can get some OID to work
  and others do not return anything.

  OID.1.3.6.1.2.1.1.1.0 - works fine. It returns the same OID, the data type, then the value.
  OID.1.3.6.1.4.1.21796.4.1.3.1.4.1 - does not work, it returns a different OID and nothing to the value or the type of data.

  Anyone used this library before?  All I have to do is get a value from a device. Any ideas?

  The original poster has contacted me directly, and I gave an updated version of the library which has solved its problems. To be honest I don't know what the updates are in the latest version of the library from the version he got was old enough. In any case, here's the latest version for someone else who may need SNMP.

• MSM765 Team: port source MSMS765 team of SNMP

  Hi all

  We have a team of controllers MSM765. We use the ports of controllers in the following ways:

  • Internet port: only for the management
  • LAN port: use for production, the traffic of users

  Our network management tool (SNMP querys, etc.) is in the network of EHF Internet port of the team. The team sends traps SNMP with LAN Port as a source. We do not want to open any type of comunicarion between the 'Network management' and 'network of Production '.

  It is possible to change the source port the SNMP Traps generated by the team of the LAN Port to the Internet port?.

  Best regards.

  Hello

  My problem must be linked with the routing, as my default route points to a gateway in my LAN Port. I can solve it by adding static routes for networks explicits (hosting the SNMP servers) pointing to the gateway on the Internet Port.

  Best regards.