Q: Can Integrity Check reports be run
A: No, the Integrity Check reports can be run against baselines only.
However, it is
possible to make changes to a baseline network and then either re-open the
baseline or create a new baseline. Then you can run the report for the new
baseline containing the changes.
Q: Where are the Integrity Checks documented?
A: All of the Cisco and Bay router Integrity Checks are documented in Appendix
A in the 4.0 Netsys Connectivity Service Manager General Reference Guide. The LAN
switch Integrity Checks are documented in Appendix G of the same book.
Q: Under what conditions would NSM not
show the different time stamps in the "Most Recent Config File Changes"
A: When a baseline is initially created, there is only one revision
of each configuration file. The Previous, Latest, Diff
and Delta buttons will not be available, and the "Most Recent Config
File Changes" will be empty.
Q: Are the configuration files parsed before or after
the comparisons generating the "Most Recent Config File Changes"
report is done?
A: The "Most Recent Config File Changes" report is generated after
parsing the configuration files.
Note: Unlike the Configuration Changes
-> Modified This Session generated deltas, the Diff and Delta
in Report Manager do not require you to re-open the baseline.
Q: Why do I get IP information, such as IP
Integrity Checks, even though I chose IPX analysis only when I opened
A: The "IP only/IPX only/Both" analysis choice when a baseline is opened
refers to which protocol is used as a basis for "Policy Analysis."
It has no bearing on the Diagnostic Report, Topology, or routing table
Q: Why do I get a redundant IPX address check
when the router fills in that information dynamically?
A: There are many options in IPX routing that utilize the explicit IPX
address, such as next hop IPX router address in an IPX static route
and explicit mapping commands in multipoint WAN environments (for example,
frame-relay map ipx, smds static map ipx, and x25 map ipx).
If you are using these features, a redundant IPX address will cause
problems in your network. If not, the check can be ignored.
Q: What does "end system" mean in the Baseline Summary report?
A: An end system is an end-point for traffic, such as a PC, workstation, server,
and so on.
The software auto-generates an end system on each LAN segment based on observed
host-specific access lists. These end system addresses
are listed when you create connection/performance policies.
Because NSM has router configurations only, it doesn't know what end systems actually
exist on the network. Therefore, it creates these "pseudo end systems" as an aid to
the user. It makes things easier when initially creating connectivity requirements
(now called policies).