User Guide for Campus Manager 5.2 (with LMS 3.2)
Chapter 5 Administering Campus Manager

Table Of Contents

Administering Campus Manager

Understanding Campus Manager Administration

Using Daemon Manager

Restarting Daemon Manager on Solaris

Restarting Daemon Manager on Windows

Selective Backup and Restore

Viewing Campus Manager Home Page

Using Campus Manager Data Collection Administration

Viewing Summary of Data Collection Settings

Modifying SNMP Timeouts and Retries

Device Management

Mode and Policy Settings

Manually Including Devices to Data Collection

Manually Excluding Devices from Data Collection

Using Advanced Search in CM Device Selector

Usage Notes

Scheduling Data Collection

Device Poller

Configuring Topology Settings

Restricted Topology View

Configuring DFM Polling

Understanding Groups

System Defined Groups

User Defined Groups

Overview of Subnet Based Groups

Rules Editor

Example of Rule

Using Groups

Creating Groups

Modifying Groups

Viewing Group Details

Deleting a Group

Recomputing Group Membership

Using Administration Reports

Analyzing ANI Server

Viewing Data Collection Metrics

Viewing Data Collection Details

Viewing List of Devices Supported

Using Other Admin Settings

Configuring Discrepancy Reporting and Syslog Message Generation

Purging Reports Jobs and Archived Reports

Setting RME Credentials

Setting Debugging Options

Setting up Debugging Options for Data Collection

Setting up Debugging Options for Configuration and Reports

Setting Debugging Options for Device Groups

Setting Debugging Options for Topology

Using Campus Manager Job Browser

Administration Command Line Interface

Configuration Settings for SNMPv3 Devices

Starting Campus Manager Applications

Security


Administering Campus Manager


Network administrators can perform administrative tasks on Campus Manager applications using the Administration module. This chapter contains:

Understanding Campus Manager Administration

Viewing Campus Manager Home Page

Using Campus Manager Data Collection Administration

Configuring Topology Settings

Understanding Groups

Using Administration Reports

Using Other Admin Settings

Setting Debugging Options

Using Campus Manager Job Browser

Administration Command Line Interface

Security

Understanding Campus Manager Administration

There are two main processes in Campus Manager:

Data Collection

Fetches the device list from DCR and collects the following data from the network:

Ports available in a device

VLANs in the network or device

Subnets in the network

Discrepancies in the network

Neighbor data for each device

Details about STP running in the network

User Tracking Major Acquisition

Collects information about the end hosts and IP phones in the network. For more details on User Tracking, see Understanding User Tracking.

The data collected by the above processes is used by Campus Manager to generate reports about the network.

This section explains:

Using Daemon Manager

Selective Backup and Restore


Note The Device Discovery process that was available in the previous versions of Campus Manager is now moved to Common Services. For more details see the User Guide for Common Services.


You can do the following settings from Campus Manager Administration:

Data Collection Settings

Specify the time period at which SNMP queries time out, and the number of retries that can be done by Campus Manager before it stops querying the device.

Schedule the time intervals at which Data Collection runs.

Include or exclude devices for Data Collection by setting appropriate filters.

For details, see Viewing Summary of Data Collection Settings.

Configuring Topology Settings

Set Topology Maps to display only the devices that you are authorized to view.

Configure DFM Poller to display DFM alert information in Topology maps.

For details, see Configuring Topology Settings.

User Tracking Settings

Configure various options based on which data on end-hosts and IP phones in the network are collected. For details see, Using User Tracking Administration.

Group Management

Create Device groups that can be shared by a set of users. These groups allow you to view a subset of the entire network.

For details, see Understanding Groups.

Launch Administration Reports

Launch and view reports on:

Analysis of the ANI Server

Data Collection metrics

List of devices supported

For details, see Using Administration Reports

Other Admin Settings:

Discrepancy Configuration

Customize the Discrepancies Report to display only those discrepancies that you want to be notified about.

Specify the discrepancies for which you need to generate Syslog messages

For details, see Understanding Discrepancies and Best Practices Deviations.

RME Server Credentials

Enter the credentials of the RME Server that you need to access, to invoke CiscoWorks CLI commands from a remote client.

For details, see Setting RME Credentials.

Set Purge Policies

Configure Purge settings for jobs or report archives For details, see Purging Reports Jobs and Archived Reports.

Set Debugging options

Enable debugging for the various applications in Campus Manager. For details, see Setting Debugging Options

Using Daemon Manager

The daemon manager provides the following services:

Maintains the startup dependencies among processes.

Starts and stops processes based on their dependency relationships.

Restarts processes if an abnormal termination is detected.

Monitors the status of processes.

The daemon manager is useful if there are applications that have long-running processes that must be monitored and restarted. It is also used to start processes in a dependency sequence, and to start transient jobs.

This section explains:

Restarting Daemon Manager on Solaris

Restarting Daemon Manager on Windows

Restarting Daemon Manager on Solaris

To restart daemon manager on Solaris:


Step 1 Log in as root.

Step 2 Enter the following to stop the daemon manager:

/etc/init.d/dmgtd stop

Step 3 Enter the following to start the daemon manager:

/etc/init.d/dmgtd start


Restarting Daemon Manager on Windows

To restart daemon manager on Windows:


Step 1 Go to the command prompt.

Step 2 Enter the following to stop the daemon manager:

net stop crmdmgtd

Step 3 Enter the following to start the daemon manager:

net start crmdmgtd



Note Do not start the daemon manager immediately after you stop it. The ports used by daemon manager will be in use for a while even after the daemon manager is stopped. Wait for sometime before you start the daemon manager.


If the system resources are less than the required resources to install the application, restarting daemon manager displays warning messages that are recorded in log file.

Log file for Solaris is /var/adm/CSCOpx/log/dmgtd.log

Log file for Windows is NMSROOT\log\syslog.log

Selective Backup and Restore

You can selectively back up files from the LMS 3.2 Server and restore them only on this LMS 3.2 Server. You can also selectively back up and restore the configuration files and specific tables in databases.

You can also backup the schema, stored procedures, and select tables specified in the configuration file of Campus Manager. The selected tables include all dependent table for proper functioning, as a part of Restore.

For tables that are not specified in the configuration file of Campus Manager, blank tables are created so that Campus Manager can function properly.

You can restore the settings similar to a normal backup with no data or little data. You can restore the settings, using the CLI function on Windows and Solaris. Only configurable files and data from the database will be backed up as part of a selective backup.

This section contains:

Files used for backup

Backing up Using CLI

Backing up View

Selective Backup

Normal Backup

Files used for backup

For selective backup, the following two files are used:

Config file: Systemfile.txt: The Systemfile.txt contains information about the configuration files that includes configuration settings. The Systemfile.txt is located at:

Windows: NMSROOT/backup/manifest/ani/Systemfile.txt.

Solaris: /opt/CSCOpx/backup/manifest/campus/Systemfile.txt.

where, NMSROOT— CiscoWorks installed directory

DB file: Dbtablesfile.txt: The Dbtablesfile.txt is located at:

Windows: NMSROOT/backup/manifest/campus/database/Dbtablesfile.txt

Solaris: /opt/CSCOpx/backup/manifest/campus/database/Dbtablesfile.txt

where, NMSROOT— CiscoWorks installed directory

The Dbtablesfile.txt contains a list of the following tables:

ManualDevices — The ManualDevices table includes the entries of the devices manually included and excluded.

devicestopoll — The devicestopoll table includes the entries of critical devices. Critical devices are the devices in your network that are polled at specified intervals.

DbVersion — The DbVersion table includes the version and the date on which database is installed.

VNMVRF — The VNMVRF table includes the VRFs discovered by VNM.

Backing up Using CLI

To back up data, using only CLI on Windows and Solaris:

On Windows, run:

NMSROOT\bin\perl NMSROOT\bin\backup.pl -dest=BackupDirectory [-system]

[-log=LogFile] [-email=E-mail][-gen=Num_Generations]

On Solaris, run:

/opt/CSCOpx/bin/perl /opt/CSCOpx/bin/backup.pl -dest=BackupDirectory [-system]

[-log=LogFile] [-email=E-mail] [-gen=Num_Generations]

where,

NMSROOT— CiscoWorks installed directory

-dest=BackupDirectory—Directory where the backed up data to be stored.

-system—Command line option that allows you to back up only the selected system configurations from all applications instead of backing up the complete database.

-log=LogFile— Log file name that contains the details of the backup.

-gen=Num_Generations—Maximum number of backup generations to be retained in the backup directory.

Backing up View

If you backup a view, it cannot be restored. To get the latest view details, you need to freshly install a view by invoking:

NMSROOT/bin/perl NMSROOT/bin/dbaccess.pl install

As a prerequisite to installing a view, you must run Data Collection and User Tracking.

Normal Backup

In case of normal backup, to backup a view, you need to freshly install a view by invoking:

NMSROOT/bin/perl NMSROOT/bin/dbaccess.pl install.

As a prerequisite to installing a view, you must run Data Collection and User Tracking.

If you modify various Network Topology View features and take a backup of Topo Map Preferences. The topo map views that are backed up cannot be restored because the map views are dynamically generated.

The following data is backed up when you run a backup from the user interface or from CLI without

entering the -system option:

SNMP Settings

CM Homepage Settings

Data Collection Scheduled Details

User Defined Groups

RME Credentials

Data Purge Settings

Trap Configuration Settings

Custom Reports and Layouts

Topo Map Preferences - This is applicable for Upgrade only.

MAC Detection Settings

VNM Settings, Jobs and Archives - VNM Settings, Jobs and Archives are migrated only when you restore data from LMS 3.2.

Device Details

Port and VLAN Details

Campus Jobs and Archives

User Tracking Jobs and Archives


Note All Scheduled jobs which are yet to be run will be backed up.


Selective Backup

When you run a backup from CLI with -system option, all the above-mentioned data gets backed up except:

Device Details

Port and VLAN Details

Campus Archives, User Tracking Archives and VNM Archives

Discovery Settings will be migrated for LMS 3.0 or lower versions.

After the completion of selective backup and restore, you must run Data collection before executing VNM workflows.


Note If you enter DSN:ani:NONE in the Dbtablesfile.txt, the database will not be backed up.


Viewing Campus Manager Home Page

The Campus Manager Home Page is the first page that appears when you start Campus Manager.

From this homepage you can :

View the status of the various processes running in Campus Manager

For details, see System Status

View the count of Discrepancies and Best Practise Deviations available in the network and launch reports on them.

For details, see Discrepancies and Best Practices Deviations

Launch Recently Completed User Tracking Jobs

For details, see Recently Completed Jobs

Access frequently used features in the application and launch various reports.

For details, see Campus Manager Tasks and Reports

You can use the Refresh icon to refresh the homepage manually and get a live status of the applications.

By default, the page refreshes every 45 seconds. Select the Auto Refresh check box to refresh the page automatically.

The information displayed on the homepage depends on the role assigned to you for the feature.

System Status

Table 5-1 describes the fields in the System Status table.

Table 5-1 Fields in System Status Table 

Field
Description

Operation

Campus Manager processes—Data Collection, User Tracking Acquisition

Last Completion Time

Date and time when the operation was last completed.

Result

Click on the respective hyperlinks to get reports on Data Collection, and User Tracking Reports.

Status

Status of the Operation—Running or Idle

Action

Click on the respective hyperlinks to start Data Collection, or User Tracking Acquisition.

Data Collection: Displays a confirmation message from where you can choose to run Data Collection only for new devices or for all devices.

After selecting the required option, click OK to run Data Collection.

User Tracking Acquisition: Displays a confirmation message. Click OK to start User Tracking Acquisition.


Discrepancies and Best Practices Deviations

Campus Manager provides reports on discrepancies, such as network inconsistencies and anomalies or misconfiguration in the discovered network.

Best Practices Deviations are variations from the normal or recommended practices in a network.

The Campus Manager Home Page displays the total number of Discrepancies and Best Practise Deviations present in the network. When you click on the total number, the relevant report is launched. For more information, see Understanding Discrepancies and Best Practices Deviations.

Recently Completed Jobs

The Recently Completed Jobs table displays the following details of jobs that were completed recently:

Job ID

Job Type

Description

Status

Completed At

Each Job ID is displayed as a hyperlink. You can launch the report by clicking the hyperlink.

If there are more than eight jobs, a link named More is displayed at the bottom right of the table. Click More >> to launch the Campus Manager Job Browser page.

Campus Manager Tasks and Reports

The Campus Manager homepage provides hyperlinks to the following tasks and reports:

Tasks
Description
Application Setup Tasks

Data Collection Settings

Displays the Data Collection Settings page. Here, you can configure various settings that define the scope of Data Collection in your network.

For more information see Viewing Summary of Data Collection Settings.

User Tracking Acquisition Settings

Displays the Campus User Tracking Acquisition Settings page. Here you can configure various settings that define the scope of User Tracking Acquisition.

For more information, see Using User Tracking Administration.

Discrepancy Settings

Displays the Network Discrepancies page from where you can customize the Network Discrepancies report.

For more information, see Understanding Discrepancies and Best Practices Deviations.

Device Group Management

Displays the Group Management page from where you can manage groups.

For more information, see Understanding Groups.

Device Trap Configuration

Displays the Device Trap Configuration page, from where you can configure Cisco switches for sending SNMPv1/SNMPv2 MAC Notification Traps.

For more information, see Enabling SNMP Traps on Switch Ports.

Trap Listener Configuration

Displays the Trap Listener Configuration page, from where you can configure either Campus Manager or DFM or HPOV to listen to SNMP traps sent by devices.

For more information, see Configuring SNMP Trap Listener.

Trunk Configuration

Displays the Trunk Configuration page, from where you can configure trunk link between devices.

For more information, see Creating Trunk.

Operational Tasks

Topology Services

Launches the Campus Manager Topology Services window.

VLAN Port Assignment

Launches the Campus Manager VLAN Port Assignment window.

Device Reports

Device Attributes Report

Displays the Report Generator from where you can generate and view Device Attributes Report. The report gives information about the devices in your network.

For more information, see Displaying Device Attributes.

Port Attributes Report

Displays the Report Generator from where you can generate and view Port Attributes Report. The report gives complete information about the ports in the devices such as Port Name, type, Speed, Duplex mode etc.

For more information, see Displaying Port Attributes.

VLAN Report

Displays the Report Generator from where you can generate and view VLAN Report. The report gives complete information about the VLANs existing in your network such as, VLAN ID, VLAN Type Status etc.

For more information, see Displaying VLAN Reports.

User Tracking Reports

End Host/IP Phone Report

Displays the User Tracking Quick Reports page from where you can generate different types of End Host and IP Phones Report.

For more information, see Viewing End Hosts Reports and Viewing IP Phones Reports.

Wireless Report

Displays the User Tracking Report Generator from where you can generate and view reports on the wireless devices connected to your network.

For more information, see Viewing Reports on Wireless Clients.

End Host History Report

Displays the User Tracking Report Generator from where you can generate and view reports on end host history.

This report gives information about the user logged in to the host, the date and time in which it was connected or disconnected to and from a port etc.

For more information, see History Reports Based on Filters.

MAC Reports

Displays the User Tracking Report Generator from you can generate reports on new MACs, Rogue MACs and dormant MACs in the network.

For more information, see Viewing MAC Reports.

Network Reports

Best Practice Deviation Report

Displays the Report Generator from where you can generate and view reports on Best Practice Deviations in the network. You can view Acknowledged as well as Unacknowledged deviations.

For more information, see Viewing Best Practices Deviations Reports.

Discrepancies Report

Displays the Report Generator from where you can generate and view reports on discrepancies present in the network. You can view Acknowledged as well as Unacknowledged discrepancies.

For more information, see Viewing Discrepancy Reports.

Advanced Reports

Switch Port Capacity Report

Lists switches that crossed utilization threshold limits, along with the value of percentage port utilization.

For details see, Understanding Switch Port Usage Reports.

Switch Port Summary Report

Gives the number of Connected, Free, and Free down ports in each switch.

For details see, Understanding Switch Port Usage Reports.

Reclaim Unused Down Ports Report

Lists administratively down ports, which are not connected to any end host or device.

For details see, Understanding Switch Port Usage Reports.

Reclaim Unused Up Ports Report

Lists administratively up ports, which are not connected to any end host or device. For details see, Understanding Switch Port Usage Reports.

Switch Port Utilization History Report

History Report for Switch Port Utilization helps you to view the log in and log out of end hosts for the selected devices.

For details, see Understanding History Report.

Duplicate IP Report

Displays the Report Generator page from where you can generate Duplicate IP Report.

For more information, see Viewing Duplicates Report

Duplicate MAC Report

Displays the Report Generator page from where you can generate the Duplicate MAC Report.

For more information, see Viewing Duplicates Report

Duplicate MAC and VLAN Report

Displays the Report Generator page from where you can generate the Duplicate MAC and VLAN Report.

For more information, see Viewing Duplicates Report

Ports with Multiple MAC Report

Displays the Report Generator page from where you can generate report for Ports with Multiple MAC.

For more information, see Viewing Duplicates Report


Using Campus Manager Data Collection Administration

You must run Data Collection for Campus Manager to manage devices. Using the Administration module of Campus Manager, you can:

View the summary of Data Collection settings. For details, see Viewing Summary of Data Collection Settings.

Modify SNMP Timeouts and Retries. For details, see Modifying SNMP Timeouts and Retries.

Specify Data Collection filters. For details, see Device Management.

Schedule Data Collection. For details, see Scheduling Data Collection.

Configure Polling options. For more details, see Device Poller.

Specify the Data Collection debugging options. For details, see Setting up Debugging Options for Data Collection.

You can click the Go to Campus Administration hyperlink from any screen to go to the Campus Administration dashboard.

Viewing Summary of Data Collection Settings

You can view a summary of the Data Collection settings in this page.

To view summary:


Step 1 Select Campus Manager > Administration > Data Collection.

The summary of Data Collection Settings appears.

Table 5-2 describes the fields that appear in the Data Collection Settings dialog box.

Table 5-2 Data Collection Settings 

Field
Description

Type of Polling

Polling can be done for all devices or a critical set of devices. Clicking View Details for this option takes you to the Device Poller, where you set the type of polling.

For more information, see Device Poller

Device Management Mode

Devices can be managed in the Auto mode or Manual mode. Clicking View Details for this option launches the Mode and Policy Settings page, where you can do the required settings.

For more information, see Device Management.

Poll Interval

Periodicity for polling the network. Polling Interval is in the format HH:MM:SS, where HH is the hour; MM is the minutes; SS is the seconds.

Polling checks whether the devices managed by Campus Manager are SNMP reachable, and if the interfaces in the devices are up or down.

The default poll interval is 2 hours. You can change this value in Campus Manager > Administration > Data Collection > Device Poller page.

Data Collection Schedule

Data Collection fetches the device list from DCR and collects the following data from the network:

Ports available in a device

VLANs present in the network/ device

Subnets in the network

Discrepancies in the network

Neighbor data for each device

Details about STP running in the network

Click View Details to view the Data Collection Schedule details. You can add a new schedule and edit or delete existing schedules.



Modifying SNMP Timeouts and Retries

You can modify the SNMP timeouts and retries when Data Collection fails for a particular device with SNMP timeout exceptions.

The SNMP fallback methodology applicable for Data Collection, UT Acquisition, and Dynamic UT is as follows:

If you have configured a device with SNMP v2 or v1 settings in DCR, then the device is initially queried with SNMP v2 by Campus Manager. If the query fails, CM will query the device with SNMP v1.

If you have configured a device with SNMPv3 settings in DCR, then the device is queried with SNMP v3. However, if the query fails, the same device will not be queried with SNMP v2 or v1.

To modify SNMP timeouts and retries:


Step 1 Select Campus Manager > Administration > Data Collection > SNMP Timeouts and Retries.

The SNMP Timeouts and Retries dialog box appears.

Step 2 Modify the SNMP settings as given in Table 5-3.

Table 5-3 Modify Data Collection SNMP Timeouts and Retries 

Field
Description

Target

Denotes the Target device.

You should enter IPv4 or IPv6 address of the target device in this field.

You can also use wildcard characters or range of numbers to specify the target device.

For example, you can enter 10.[77-78].*.* or ABCD:EF12:*:*:*:*:[3A-BB] as the target device

Timeouts

Time period after which the query times out.

This also indicates the time interval between the request and the first initial response from the device.

The SNMP response may be slow for remote devices. If your network has remote devices connected over a slow link, configure a higher value for time-out.

If Time out is increased, discovery time could also increase. Enter the value in seconds. The allowed range is 0-60.

For every retry, the timeout value is doubled.

For example, If the timeout is 10 seconds and retries 4:

Campus Manager waits for 10 seconds for response for the first try, 20 seconds for the second retry, 40 seconds for the third retry and 80 seconds for the fourth retry.

150 seconds (10+20+40+80) is the total time lapse after which Campus Manager stops querying the device.

Retries

Number of attempts made to query the device. The allowed range is 0-8.


Step 3 Click Add to add SNMP settings.

Step 4 Select a row and either:

Click Edit to edit the timeouts and retries values.

Or

Click Delete to delete the timeouts and retries values.

Click OK to save the changes or click Cancel to exit.

Step 5 Click Apply.


Device Management

There are two modes of managing devices in Campus Manager namely Auto mode and Manual mode.

Auto Mode

This is the default option, where devices in DCR are automatically managed in Campus Manager Data Collection. You can specify the filter policies based on device groups to include devices in data collection. In addition to these, you can also manually add or delete devices.

For more details on mode and policy settings, see Mode and Policy Settings.

Manual Mode

In this mode policies are not applicable. You must manually add or delete devices and only those devices will be taken for Data Collection.

For more details on manual mode, see:

Manually Including Devices to Data Collection.

Manually Excluding Devices from Data Collection

Mode and Policy Settings

You can control the mode in which Data Collection runs as well as specify filters as follows:

Enable Auto Mode

Specifying Auto Allocation Rules

Enable Auto Mode

This option is selected by default. This indicates that Campus Manager Data Collection happens in the Auto mode. This mode works in tandem with the Manual mode policies. When you deselect this, Campus switches to the Manual mode of Data Collection and all filters set in the Auto mode are dropped.

Specifying Auto Allocation Rules

In Auto mode you can either manage all devices or manage devices in groups.

There are two types of groups available:

System Defined groups

System defined groups are automatically created, based on the information in DCR.

User Defined Groups

You can create User Defined groups based on your requirement. For example, if you want to manage only devices with the IP address 10.77.*.* in Campus Manager:

Create a group in Common Services for the devices with the IP Adress 10.77.[0-255].[0-255], say CM_Subnet77.

Include that group in Campus Manager Auto mode settings.

Run Data Collection.

Now the devices with the IP address 10.77.*.* will be managed in Campus Manager.

For more details on Group Creation, see the User Guide for Common Services 3.3.

To combine Auto mode policies with Manual mode, see:

Manually Including Devices to Data Collection

Manually Excluding Devices from Data Collection

To set Auto Allocation rules:


Step 1 Select Campus Manager > Administration > Data Collection > Device Management > Mode And Policy Settings.

The Auto Allocation Settings dialog box appears.

Step 2 Select either:

Manage All Devices

This setting indicates that all devices in DCR will be managed by Campus Manager (as per the license limit). If you select this, skip Step 3.

Manage by Groups

This setting indicates that only the devices belonging to the selected groups will be managed by Campus Manager.

Step 3 Select the individual groups that are to be managed by Campus Manager.

Step 4 Click Apply.

If you selected Manage All Devices, the settings will be applied. All devices will be managed in Campus Manager in the next Data Collection. Skip Step 5.

If you selected Manage by Groups, the Auto Allocation Summary window appears with the information, as explained inTable 5-4:

.

Table 5-4 Data Collection Filters 

Field
Description

Number of devices currently managed

Number of devices currently managed in Campus Manager.

Number of new devices after this rule change

Number of devices that will be added to Campus Manager, after the settings are applied. Clicking on the number launches the device list.

For the Manage by Groups setting:

If a device has different display names, the same IP address, and belongs to two different groups, it is listed twice in the report.

Number of devices that will be deleted after this rule change

Number of devices that will be deleted from Campus Manager, after the settings are applied. If you click on the number, it launches the list of devices marked for deletion.

For the Manage by Groups setting:

If a device has different display names, the same IP address, and belongs to two different groups, it is listed twice in the report.

Total number of devices after this rule change

Total number of device that will be managed in Campus Manager after the settings are applied.

This is the sum/difference of already managed devices and the devices added/deleted from the rule change.

Current license limit

Maximum number of devices that you can manage as per the LMS license you have purchased. For more details on this, see Installing and Getting Started guide published at http://cisco.com/en/US/products/sw/cscowork/ps2425/prod_installation_guides_list.html

Run Data Collection Immediately after applying the settings

Runs Data Collection immediately after applying the settings.


Step 5 Click OK to save the settings or Cancel to cancel the changes.

The rules set come into effect only in the next Data collection cycle.


Example

Consider the following scenario:

The following devices are managed in Campus Manager:

10.77.209.60

10.77.209.59

10.77.210.7

To understand the device count in the Auto Allocation Summary window, assume the following:

You have created a user-defined group in Common Services, which consists of the devices in the range 10.77.209.*, say LAB1.

You have changed the mode to Manage by groups in Mode and Policy Settings page and have included only the group LAB1.

DCR has the following devices in the range 10.77.209.*:

10.77.209.60

10.77.209.59

10.77.209.53

10.77.209.54

10.77.209.55

You have manually included the device 10.77.210.6 to be managed in Campus Manager.

You have manually excluded the device 10.77.209.55, so that it is not managed in Campus Manager.

Now the details of Auto Allocation Summary are:

Number of devices currently managed: 3 (10.77.209.60, 10.77.209.59, 10.77. 210.7)

Number of new devices after this rule change: 3 (10.77.209.53, 10.77.209.54, 10.77.210.6)

Number of devices that will be deleted after this rule change: 1 (10.77.210.7)

10.77.210.7 will not be managed after the rule change since it does not belong to the group LAB 1 and is not manually included.

Total number of devices after the rule change: 5 (10.77.209.60, 10.77.209.59, 10.77.209.53, 10.77.209.54, 10.77.210.6)

Points to be noted:

When a group is removed from Common Services, the change is immediately reflected in the Auto Allocation Settings s screen, but the devices that belonged to this group will be managed in Campus Manager and shown in Topology maps until you perform Data Collection.

When a new device is added to a group, deleted from a group or moved to another group, the changes will be reflected in Campus Manager only in the next Data Collection cycle.

When you migrate from an older version of Campus Manager to the current version, all the IP based filters from the older version are automatically converted into a single group with the predefined name Migrated_From_CM_Filters.

This group will be selected automatically as an Auto mode setting. This conversion will happen immediately after migration, during ANIServer startup.

If the filter migration fails due to any issues, the filter value will be saved as comment (preceded with # symbol) in the ANIServer.properties file.

When the DCR mode changes in the Campus Manager server as follows:

Master mode to Slave mode

Standalone mode to Slave mode

All Auto and Manual mode policies will be deleted. Data Collection will be triggered on Manual mode and will delete all previously managed devices from the Campus Manager database. You have to set new policies and run Data Collection again to manage devices in Campus Manager.

When the DCR mode changes in the Campus Manager server as follows:

Standalone mode to Master mode

Master mode to Standalone mode

Slave mode to Standalone mode

Slave mode to Master mode

Auto Allocation mode is preserved.

When Campus Manager server is integrated with ACS server, only authorized devices are shown in Campus Manager pages.

But in the mode and policy settings page, when you click on "Number of new Devices after the rule change link" in the summary page, both authorized and unauthorized devices are listed— if you have included unauthorized devices for managing in Campus.

After you run Data collection, only the authorized devices are shown in Campus Manager.

Manually Including Devices to Data Collection

The Device Selector in Include devices page displays the list of devices not managed by Campus Manager, but present in DCR. From this list you can select and add devices that need to be managed by Campus Manager.

This Manual mode of including devices can work along with the Auto mode or can work independently. This implies:

You can manually include devices even when you are in Auto management mode. Whereas if you are in Manual mode, Auto mode policies are not applicable.

If you switch from Auto mode to Manual mode, the Auto mode policies will not be retained. However, the devices that are already managed will be included in future Data Collections.

The list of devices included manually is given preference over the policies set through Auto mode.

For example, If you set a Data Collection filter to exclude the devices belonging to the address range 10.77.*.* or 10.77.[0-255].[0-255], but manually add 10.77.2.1, this device will be included in the consecutive Data Collection cycle.

The policies that you set in Auto and Manual mode will come into effect only during the next Data Collection cycle.

Click Show Included Devices, to see the list of manually included devices in this cycle.

To manually include devices:


Step 1 Select Campus Manager >Administration >Data Collection >Device Management > Include Devices.

The Include Devices page is launched. The Device Selector in this page has two groups:

All devices and Device Type Groups. If you have configured User defined groups, it is displayed here.

Step 2 Select the list of devices from the groups.

The devices that are already being managed by Campus Manager will not be present in the Add list.

Step 3 Click Include.

These devices will be included in the next Data Collection process.



Note Any changes you make here will come into effect only in the next Data collection cycle.


Manually Included Devices Report

This report gives the details of devices that are manually included from Campus.

To view the report:


Step 1 Go to Campus Manager >Administration >Data Collection >Device Management >Include Devices

Step 2 Click Show Included Devices.

The report displays information as described in Table 5-5:

Table 5-5 Manually Included Devices Report

Field
Description

IP Address

IP Address (IPv4 or IPv6 address) of the device.

Device Name

Name of the device.

Management State

Indicates whether the device is currently managed in Campus.


To exclude a device from the Included list, select the device and click Exclude.


To get more clarity on Device Management, see FAQs.

Manually Excluding Devices from Data Collection

You can manually exclude devices from the list of devices managed by Campus Manager. The Device Selector in the Exclude page will list the devices that are currently managed in Campus Manager and the manually included devices.

This manual mode of excluding devices can work with Auto mode or independently. This implies:

You can manually exclude devices even when you are in Auto management mode. Whereas if you are in Manual Mode, Auto mode policies are not applicable

If you switch from Auto mode to Manual mode, the Auto mode policies will not be retained. However, the devices that are already managed will be included in future Data Collections.

The list of devices excluded manually are given preference over the policies set through Auto mode.

For example, If you set a Data Collection filter to include the devices belonging to the address range 10.77.*.* or 10.77.[0-255].[0-255], but manually exclude 10.77.1.3, the device 10.77.1.3 will be excluded in the Data Collection process.

The changes made in Auto and Manual mode will come into effect only during the next Data Collection cycle.

Click Show Excluded Devices to see the list of manually excluded devices in this cycle.

To manually exclude devices:


Step 1 Select Campus Manager >Administration >Data Collection >Device Management > Exclude Devices.

The Exclude Devices page is displayed with the following groups:

All Devices

Device Type Groups

User Defined Groups (If any)

Step 2 Select the devices from the list which you want to remove.

Step 3 Click Exclude.

These devices will be excluded from the list of devices managed by Campus Manager.



Note Any changes you make here will come into effect only in the next Data collection cycle


Manually Excluded Devices Report

This report gives the details of devices that you manually excluded from Campus Manager.

To view the report:


Step 1 Select Campus Manager >Administration >Data Collection >Device Management > Exclude Devices.

The Exclude Devices page is launched.

Step 2 Click Show Excluded Devices.

The report displays information as given in Table 5-6:

Table 5-6 Manually Excluded Devices Report

Field
Description

IP Address

IP Address (IPv4 or IPv6 Address) of the device.

Device Name

Name of the device.



To include a device from the Excluded list, choose the device and click Include.

For more information on Device Management, see FAQs.

Using Advanced Search in CM Device Selector

You can use the Advanced Search icon to specify a set of rules for advanced search. Advanced search is based on the Grouping Services attributes of Grouping Services Server of Campus Manager. In the Advanced Search dialog box, you can create rules to search for devices.Figure shows the Advanced Search dialog box.

The dialog box contains the following fields and buttons as mentioned in Table 5-7

Table 5-7 CM Advanced Search Dialog Box

Field
Description

Device Name

Name of the device.

Object Type

Type of object (device) that is used to form a group.

Variable

Device attributes based on which you can define the group. See Rules Editor.

Operator

Operator to be used in the rule. The list of possible operators changes based on the Variable selected.

Value

The value of the rule expression. The possible values depend upon the variable and operator selected. Depending on the operator selected, the value may be free-form text or list of values.

The wildcard characters are not supported.

Add Rule Expression

Used to add the rule expression to the group rules.

Rule Text

Displays the rule.

Check Syntax

Verifies that the rule syntax is correct. Use this button if you have entered the rules manually.

Search

Used to search for devices based on the defined rule.


Usage Notes

The following are the usage notes for Advanced Search:

If you have not selected any device nodes, then advanced search is applied only for All Devices node.

You can either enter the rules directly in the Rule Text field, or select the components of the rule from the Rule Expression fields, and form a rule.

Each rule expression contains the following:

object type.variable operator value

Object Type—The type of object (device) that is used to form a group.

Variable—Device attributes, based on which you can define the group. See the Rules Editor.

Operator—Operator to be used in the rule. The list of possible operators changes based on the Variable selected.

Value—Value of the rule expression. The possible values depend upon the variable and operator selected. Depending on the operator selected, the value may be free-form text or a list of values.

If you are entering the rule expressions manually, the rule expression must follow this syntax:

object type.variable operator value

If you are entering more than one rule expression, you must enter logical operators OR, AND or EXCLUDE after every rule expression.

You must use Check Syntax button only when you add a rule manually or when you modify a rule expressions in the Rule Text.

The advanced search operation is not case-sensitive.

To delete the rules in the Rule Text box, select the complete rule including the logical operator and press the Delete key on your keyboard.

If you want to perform a new search, click Clear All before selecting any new devices.

For information on the rules used to perform advanced search, refer Rules Editor.

Scheduling Data Collection

To schedule data collection:


Step 1 Select Campus Manager > Administration > Data Collection > Schedule Data Collection.

The Data Collection Schedule dialog box appears.

Step 2 Modify the data collection settings as described in Table 5-8.

Table 5-8 Data Collection Schedule Settings 

Field
Description
Usage Notes
Schedule

Days, Hour, Min

Days on which and the time at which data collection is scheduled.

The optimum data collection schedule depends on the size of the network and the frequency of network changes.

The default data collection schedule is every 4 hours, on the 4-hour mark, daily: 04.00, 08.00, 12.00, 16.00, 20.00, 24.00 Note that time is in the 24-hour format.

Recurrence Pattern

Select the days of the week on which data collection is to be scheduled.

This field is available only when you are adding or editing a schedule.


Select a schedule and click Edit to edit the schedule.

Select a schedule and click Delete to delete the schedule.

Click Add to add a new schedule.

Step 3 Click OK to save the changes or click Cancel to exit.


Best Practices

Be cautious while scheduling Data Collection:

Data Collection consumes significant resources on the network management system.

Use the Polling option to see the device and link status without running data collection. For more details on polling see, Device Poller

Device Poller

Campus Manager polls the entire network for device and link status periodically.This feature allows you to:

Configure the time interval at which the network is polled.

Poll only a critical set of devices.

Use this option to see the device and link status without running Data Collection.

Since Data Collection consumes significant system resources, you can simply poll the network and view the device and link status in Topology maps.

Adding Critical Devices to the Device Poller

To add a device to the Critical Devices list from Topology Map:


Step 1 Launch a Topology map.

Step 2 Right click a device and select Add device to Critical Poller.


To add a device to the Critical Devices list from N-Hop View Portlet:


Step 1 Launch N-Hop View Portlet.

Step 2 Go to the configuration screen and select Poll devices.

For complete details on N-Hop view portlet, see N-Hop View Portlet.



Caution If the critical set of devices is more than 30, the amount of traffic generated as part of polling cycle will use a large of bandwidth.

To configure Device Poller:


Step 1 Go to Campus Manager > Administration > Data Collection > Device Poller.

The Device Poller screen is displayed.

Step 2 Configure the device poller options as specified in Table 5-9.

Table 5-9 Device Poller Options

Field
Description
Usage Notes

Polling Details

All Devices

Specifies that all devices in the network will be polled at the specified interval.

By default the whole network is polled every 2 hours.

Critical Devices

Specifies that only critical devices in the network will be polled at the specified interval.

You can configure this option when you need to poll a few devices in the network more frequently.

By default the critical devices are polled every five minutes.

Time Interval

Time interval at which the specified devices are polled periodically.

The time interval is added to the completion time of Data Collection.

For example, you have configured the following:

Data Collection is scheduled to run at 07:00 hours

Time interval is set to 4 hours.

If Data Collection completes at 08:00 hours, the next polling will happen at 12:00 hours (8 + 4).

Configure this option to change the interval from the default value.

Show Devices

For Critical Devices:

Displays the list of critical devices in the network.

The following information about the Critical Devices is displayed:

IP Address

DeviceName

You can choose any device and click Delete to remove it from the Critical Device poller list.

For All Devices:

Launches the Data Collection metrics report.

The following information about the devices in the network is displayed:

IP Address

DeviceName

DeviceType

Neighbors


Step 3 Click Apply to save the configuration.


Configuring Topology Settings

You can configure the following Topology Settings:

Restrict Topology Maps to display only authorized devices, when Campus Manager is set to ACS mode. For details, see Restricted Topology View.

Configure Campus Manager to fetch alert information from DFM, and display it in Topology Maps. For details, see Configuring DFM Polling.

Restricted Topology View

Topology Maps display all the devices discovered by Campus Manager. When Campus Manager is integrated with the ACS server, you can set Topology Maps to display only the devices you are authorized to view. To do that:


Step 1 Go to Campus Manager > Administration > Topology > Restricted Topology View.

The configuration screen is displayed.

Step 2 Check Display Only the Authorized devices in Topology Maps.

This option is enabled only when Campus Manager is integrated with the ACS server.

Step 3 Click Apply.

Topology Maps display only the devices you are authorized to view. If Topology Services is already launched, close it and relaunch for the change to take effect.


Points to be Noted

If you change the management IP address of an authorized device:

It becomes an unauthorized device.

The device is not shown in Topology maps in the consecutive relaunches.

When the changed IP address is given as root in N-hop view portlet, it results in an error.

To avoid the above mentioned issues, you must maintain the same management IP address for the device in Topology Services and in the ACS server.

Configuring DFM Polling

To display DFM information in Topology Maps and N-Hop view portlet, you have to enable polling as follows:


Step 1 Go to Campus Manager > Administration > Topology > DFM Poller Settings.

The configuration screen is displayed.

Step 2 Check Poll DFM Server for alerts.

If you try to apply the settings when DFM is not installed on a local or remote server, you will get an error message indicating the same.

If DFM is installed, the list of DFM servers detected is displayed above this check-box.

You can enable this option, only if:

DFM is installed in the local CiscoWorks server or on a remote CiscoWorks server in the master slave mode.

AND

Campus Manager has detected the DFM server.

If DFM is installed after running Data Collection, either run Data Collection or restart ANI Server before enabling the above setting.

Step 3 Set the time interval at which the polling should occur.

DFM updates the latest alert information every 6 minutes. So the time interval can be a value between six minutes and fifty nine minutes, fifty nine seconds.

Step 4 Click Apply.

The settings are saved to the server and polling starts within six minutes of the configuration.

In addition to this, you can restrict the type of DFM alert displayed in your machine. For example you can choose to display only critical alerts in Topology maps. To do that, see Modifying DFM Alert Settings.

To restrict the type of alerts displayed in N-hop view Portlet, see Configuring the Portlet.

The alert information fetched from DFM can be launched from Topology Maps and N-Hop view portlet, by right clicking on the required device. For details, see Starting CiscoWorks Applications From Topology Views.


Understanding Groups

A Group can be thought of as a convenience view that allows you to view a subset of the entire network based on the group rule defined while creating the view.

These views, which are subsets of the Layer 2 views, can be accessed by a user or a set of users. These custom views are generated using a Campus Manager feature called Grouping Services that helps to manage groups of devices.

Grouping Services determines the membership of a group by interpreting and applying the rule associated with the group.

Hence, Topology Groups allows you to:

Identify and view a set of objects corresponding to a view.

Create and manage views.

Define convenience views which are a subset of the Layer 2 map.

This section explains:

System Defined Groups

User Defined Groups

Overview of Subnet Based Groups

Rules Editor

Using Groups

Concept of a Group

A group is a named set of devices. The group is characterized by a set of properties such as a name, description, type, access permission, and so on. Most importantly, a group has an associated rule. The rule determines the membership of a group, which may change whenever the rule is evaluated.

Groups manage subgroups in a hierarchical organization. Two predefined top level Parent groups are available when you install Campus Manager:

System Defined Groups

User Defined Groups

These groups are provided to categorize devices at your site, and each of these contains a list of all the devices in the Campus Manager Database.

The groups under Administration > Groups and that under Topology Services > Topology Groups follow the same hierarchy.

After you create a group through Administration > Groups, you must reopen the Topology Services to view the changes.

If you have appropriate permissions, you can create subgroups under groups. Hence, each Child group is a subgroup of a Parent group.

Note the following:

The membership of a Child group will be a subset of its immediate Parent group.

Changes in the properties of a Parent group—Name, Rule, Evaluation Type, Access Permissions, impact all Child groups under it.

When you remove a group, all Child groups under it are also removed.

When a user is removed from the Campus Manager list of users, the groups created by the user are not removed.

System Defined Groups

A System Defined Group is a top-level container for standard groups that are accessible to and used by most Campus Manager users. These groups are pre-defined by Campus Manager.

The predefined sub-groups under System Defined Groups are:

All Unreachable Devices — which contains set of all devices that are not reachable by Campus Manager.

Subnet Based Groups — which contains sub folders representing subnets (one folder per subnet) discovered in the network. Each folder contains the devices corresponding to those subnets.

These subnet folders are of the form: subnet — subnet mask

eg: 10.77.209.48 — 255.255.255.240

You cannot:

Change system defined groups

Create any subgroups under system defined groups.

Based on your requirements, you can create customized groups under User Defined Groups.

User Defined Groups

User Defined Groups is a top-level container where individual Campus Manager users can create their own groups. Typically, the groups under User Defined Groups would be used and accessible to the user who created the group, and perhaps a small group of additional users, or these groups may be transient in nature.

For example, if Joe Smith wants to create a group that contains all devices where he is the System Contact, and he uses the following rule to form this group:

Device.SystemContact equals "Joe Smith" OR
Device.SystemContact equals "jsmith"

Dynamic Group

A dynamic group is a group for which the membership list is always up-to-date.

Whenever you view a dynamic group, it always displays the latest group membership list.

Static Group

A static group is a group for which the membership is refreshed only when you explicitly request it. Between re-evaluations, the Group Server stores the membership list and group definition of the static group.

Overview of Subnet Based Groups

Subnet based groups are automatically created when devices are managed. These are a part of System defined groups. You cannot create, edit or delete them.

Subnet based groups help you work on smaller subsets of devices that are logically grouped. They are automatically deleted when all the devices in a subnet are deleted.

This topic covers:

Accessing Subnet Based Groups

Understanding Subnet Based Groups

Creating Groups Based on Subnet

Accessing Subnet Based Groups

To access Subnet based groups go to Campus Manager > Administration > Groups.

This displays the Group Management page. The Group Selector field displays two groups, System Defined Groups and User Defined Groups. The Subnet Based Groups are created under System Defined Groups.

Understanding Subnet Based Groups

The Subnet based groups use the following name format:

Subnet -- Subnet Mask.

The rule expression for Subnet Based Groups has the following components:

Class.attribute operator "value"

For example,

Device.IP.Subnet equals "172.20.104.192" AND Device.IP.SubnetMask equals "255.255.255.240"

The rule above will select all devices of subnet 172.20.104.192 and subnet mask 255.255.255.240.

Creating Groups Based on Subnet

When you need to create subnet based groups as per network requirements, you can do it under User defined groups.

For example, the following rules might be used to create two groups based on the IP address subnet:

Device.IP.Subnet equals "172.29.252.32"
Device.IP.Subnet equals "172.29.252.64"

The examples provided here are simple. However, the Grouping Service allows arbitrarily complex rules to be formed by combining rule expressions with AND, OR or the EXCLUDE operators. This gives the administrator the power and flexibility to create view partitions tailored to the needs of their site.

Rules Editor

Every group is defined by a set of rules. You may select an item from the drop down menus, enter a rule in the free-form Rule Text area, or use a combination of the two.

A rule set contains a Boolean combination of individual rule expressions. A rule expression is made of the following components:

Object Type

Variable

Operator

IP Address Range Operator

Value

Object Type

The type of devices which form the group. Rules are evaluated on the list of devices discovered. Campus Manager supports only one object type:

Device

Variable

Any of the attributes of a device. Table 5-10 gives details on the available variables:

Table 5-10 Device Attribute Description 

Attributes
Description

DiscoveryStatus

Status of the Data Collection process.

Hostname

Name of the device.

ImageVersion

Software version running on the device.

IP.Subnet

IP address of the device with the subnet to which it belongs.

IP.SubnetMask

Subnet mask address of the device.

IPAddress

IP Address of the device.

SysName

Name of the device as configured by the Administrator.

SysObjectID

SysObjectID of the device as configured by the Administrator.

SystemContact

Contact for the device details as entered by the Administrator.

SystemLocation

Location of the device as entered by the Administrator.


Operator

The operator used in forming a rule. The following operators are available:

equals

contains

When the variable DiscoveryStatus is used, equals is the only operator is available.

When the all the variables, the following operators are available:

equals

contains

startswith

endswith

When the variable is equal to IPAddress or IP.SubnetMask or IPv6.Subnet or IPv6.SubnetMask, the following operators are available:

equals

contains

startswith

endswith

range

IP Address Range Operator

The range operator enables you to group the devices of the specified range of IP Addresses. You can select the range operator only for the IPAddress variable. You should enter the range of IP Addresses in the Value field, to create a group rule based on IP Address ranges.

When you enter the IP Address range in the text field, you should:

Specify the range with permissible values for one or more octets in the IP Address.

The minimum limit in the range is 0 and the maximum limit is 255.

Use the hyphen character (-) as a separator between the numbers within a range.

Specify the range of IP Addresses within the [and] characters to create a group rule.

For example, you can enter 10.10.10.[0-255] or 10.10.[0-255].[0-255] in the Value field.

You should not:

Enter numbers lesser than 0 and greater than 255 in the IP Address range.

Enter any other characters other than the range separator (-).

Enter the value of highest limit in the range as less than the value of smallest limit number. For example, you should not enter 10.10.10.[8-4].

Value

A free flow operand forming the last part of the rule.

When the variable DiscoveryStatus is used, only the following values are available:

Never_Reachable

Reachable

Currently_Unreachable

Example of Rule

Let us consider a scenario where you need to define a rule for a set of devices in the State Street Campus. Campus Manager has devices at two locations: Bldg 1 Devices and Bldg 2 Devices.

In this scenario, we will create rules for the System Defined Groups and the User Defined Groups.

This section contains:

Rule for a System Defined Group

Rule for a User Defined Group

Composite Rule

Rule for Include Devices

Rule for Exclude Devices

Rule for a System Defined Group

To create a System Defined Group whose member devices are located in Bldg. 1 Devices, the group rule is:

Device.SystemLocation equals "Bldg 1 Devices"

where

Variable is SystemLocation

Operator is equals

Value is Bldg 1 Devices

Similarly, to create a System Defined Group whose member device IP addresses is 172.20.121.10, the group rule is:

Device.IpAddress equals "172.20.121.10"

In addition you can use the contains operator to match a value anywhere in the attribute:

Device.IPddress contains "10"

The above rule, will match devices with IP address like 172.20.10.3, 172.25.3.101 etc.

To group all devices whose IP Addresses are within the range 10.10.0.0 to 10.10.50.255, the group rule is:

Device.IPAddress range "10.10.[0-50].[0-255]"

Rule for a User Defined Group

To create an User Defined group whose member devices have a common system contact person, J Smith Devices, the group rule is:

Device.SystemContact equals "J Smith Devices"

Composite Rule

Composite rule contain more than one rule expression separated by a Boolean operator.

The Boolean Operators OR, AND, or EXCLUDE appear in the Rules:Create dialog box only when you have entered at least one rule expression.

When the composite rule has more than two simple rule expressions, you can adjust priorities among the expressions using opening and closing parenthesis.

In the above example, to create a group whose member devices are labelled Lab Test Setup, have a common system contact person, J Smith Devices, the composite rule is:

Device.DeviceLabel equals "Lab Test Setup" AND
Device.SystemContact equals "J Smith Devices"

Rule for Include Devices

Simple Rule for Include Devices contains a common parameter: CMF:DCR:Device. The Device Management filters the devices based on the rule you have specified in the Defined Advanced Search Rules dialog box.

For example, the rule type:

:CMF:DCR:Device.DisplayName equals "joe" 

will select the device with the DisplayName joe.

Rule for Exclude Devices

Simple Rule for Exclude Devices contains a common parameter: Device.The Device Management filters the devices based on the rule you have specified in the Defined Advanced Search Rules dialog box.

For example, the rule type:

Device.HostName equals "Saturn"

will filter the Devices with common host name, Saturn.

For more information on creating groups, refer Creating Rules for Groups.

Using Groups

The main tasks that you can perform using groups are:

Creating Groups

Modifying Groups

Viewing Group Details

Deleting a Group

Recomputing Group Membership

All actions begin from the Topology Groups administration page, unless otherwise specified.

Access control to groups is controlled on a username basis.

By default, read permission is granted to System Defined Groups, and read write and evaluate permissions are granted to User Defined Groups.

The User Defined Groups folder is meant to hold a users private group and/or groups that are more transient in nature.

Creating Groups

You can create groups under System Defined Groups and User Defined Groups. To create Groups, you must select Campus Manager > Administration > Groups. Creating Groups involves:

Creating Group Properties

Creating Rules for Groups

Creating Memberships

Creating Group Properties

Access to group creation is based on permission levels. You can create groups under User Defined Groups.

By default, only the CiscoWorks admin user can create groups under System Defined Groups. However, the admin user can modify the access permission to the System Defined Group to enable edit privilege (that is, create permission) to other Campus Manager user names.

To create Group Properties:


Step 1 Select Campus Manager > Administration > Groups.

The Group Management window appears.

Step 2 Click Create.

The Properties: Create window opens.

Step 3 Enter details as explained in Table 5-11:

Table 5-11 Creating Properties Field Description 

Field
Usage Notes

Group Name

The group name should be unique within the Parent group. However, it need not be so across groups. The same group name cannot be used in the same group hierarchy.

Copy Attributes from Group

1. Click Select Group to copy attributes from a previously selected defined group.

The Replicate Attributes dialog box appears.

2. Select the devices from the Replicate Attributes dialog box.

3. Click OK to select the devices or click Cancel to exit.

Parent Group

1. Click Change Parent to change the Parent group under which you want to define the group.

2. Select the devices from the Select Parent window.

3. Click OK to select the devices or click Cancel to exit.

Description

You can enter a detailed description of the group identifying its characteristics in this field.

Membership Update

Select a membership update mode.

Automatic—The membership of the group is automatically recomputed each time the group is invoked.

Only upon user request—The membership of the group is recomputed only when an explicit request is made, using the Refresh option.

If you select Automatic, the group will be a Dynamic group.

If you select Only Upon User Request, the group will be a Static group.

Visibility Scope

Select the mode of visibility.

Private

Public


Step 4 Click Next.

The Rules window appears. To enter the details in the Rules: Create dialog box, see Creating Rules for Groups.


Creating Rules for Groups

After entering the details for creating properties for the Group, you must create rules for the Group. To create rules for the Group, either you must use the parameters specified, or manually enter the rule text.

To create rules using parameters:


Step 1 Enter details for Rule Expression, in the Rules Window.

Table 5-12 describes the fields in the Rule Expression area.

Table 5-12 Rules: Create Field Description 

Field
Description

Select the Boolean expression.

OR

AND

EXCLUDE

The Boolean Operators OR, AND, or EXCLUDE appear in the Rules:Create dialog box only when you have entered at least one rule expression.

For an example of Composite rule using boolean operatots, see Composite Rule.

Object Type

The type of devices that form the group. Rules are evaluated on the list of devices discovered.

Campus Manager supports only one object type:Device

Variable

Attribute of a device. The available variables are:

DiscoveryStatus

HostName

ImageVersion

IP Subnet

IP SubnetMask

IPAddress

IPv6 Subnet

IPv6 SubnetMask

SysName

SysObjectID

SystemContact

SystemLocation

For more details, see Rules Editor.

Operator

Operator used in forming a rule.

For a variable equal to DiscoveryStatus, the only available Operator variables is equals.

For all the variables, the available Operator variables are:

equals

contains

startswith

endswith

Apart from the operator variables listed above, for variable equal to IPAddress or IP.SubnetMask or IPv6.Subnet or IPv6.SubnetMask, an extra Operator variables range is added.

For more details, see Operator.

Value

Enter the desired value for the variable you have selected.


Step 2 Click Add Rule Expression.

The Rule Text field shows the rule you are creating.

You can also enter the rules directly in the Rule Text field.

To see an example of a rule, see Example of Rule.

Step 3 Click Check Syntax to validate the rules syntax entered.

Step 4 Click View Parent Rules to view rules defined for the Parent Groups.

Step 5 Click Next to create Memberships to specify the devices available to the group.

For entering details for creating Memberships, see Creating Memberships.


Creating Memberships

You can create memberships to specify the devices available to the group. The devices appear in Available Objects From Parent Group or Objects Matching Membership Criteria, based on the properties and rules you specified in the previous steps.

Available Objects From Parent Group is the set of objects in the Parent group not selected by the Child group's rule.

To add the selected devices from the Available Objects From Parent Group list to the Objects Matching Membership Criteria list:


Step 1 Select one or more IP addresses of the devices from the Available Objects From Parent Group list on the left pane.

Step 2 Click Add.

The devices appear in Objects Matching Membership Criteria list, based on the properties and rules you specified in the previous steps.

If you want to remove devices from the Objects Matching Membership Criteria list, select the device from the list of Objects Matching Membership Criteria, and click Remove.

Step 3 Click Next to view the summary of the details of the newly created group.

Table 5-13 describes the entries in the Summary: Create table.

Table 5-13 Create Group Summary Entry Description 

Entry
Description

Group Name

Name of the group.

Parent Group

Name of the Parent group.

Description

Description for the group.

Membership Update

Automatic or Only Upon User Request.

If you had selected Automatic, the group will be a Dynamic group.

If you had selected Only Upon User Request, the group will be a Static group.

Rules

Rule you entered for the group.

Visibility Scope

Visibility scope that you selected.


Step 4 Click either:

Finish to create the group,

or

Cancel to exit the wizard and go back to the Group Management window.


Membership Update

The membership of a group is governed by the rule associated with a group. The changes in the membership is reflected in the Network Topology View of the group. To view a topology view, select Campus Manager > Topology Views.

Moreover, while groups with evaluation type Automatic have membership that is current, groups with evaluation type Only Upon User Request retain the membership at creation time or on subsequent re-evaluation.

Two modes of membership updates are available:

Automatic

The membership of a group is recomputed automatically after every Data Collection.

If the node or view has been displayed, you must close all of Topology Services and re-open it to display the revised group membership.

Only Upon User Request

The membership of the group is recomputed only when an explicit request is made, using the Refresh option. For more information on the Refresh option, see Recomputing Group Membership.

Modifying Groups

You can modify most attributes of a group in the Edit mode, except the Parent group.

To modify groups:


Step 1 Select a group, and click Edit.

You can modify the Group Name, Description, and Membership Update Type.

Step 2 Click Next.

To modify group rule, edit the rule either using the Rule Expression fields or edit the rule in the Rule Text field and click Next.

To add or remove devices from the Objects in Group, click Add or Remove, as appropriate and click Next.

To modify access permissions, select the access levels in the Permission field and click Next.

Step 3 Click Finish to save the modified groups.


Viewing Group Details

To view the attributes of a group:


Step 1 Select Campus Manager > Administration > Groups.

Step 2 Select a group.

Group information is displayed in the right window.

To view detailed attributes for the group, click Details.

To view the rules attributes of the Parent group, click View Parent Rules.

To view the list of devices in the group, click Membership Details.


Deleting a Group

You can delete a group and all Child groups under it.

To delete a group:


Step 1 Select Campus Manager > Administration > Groups.

The Group Management window appears.

Step 2 Select a group.

Step 3 Click Delete to remove the group.

Step 4 Click Yes to confirm.

The selected group is deleted.


Recomputing Group Membership

You can re-evaluate and re-apply the rules of a group to recompute the membership of groups.

To recompute group membership:


Step 1 Select Campus Manager > Administration > Groups.

Step 2 Select a group.

Step 3 Select Refresh to recompute the membership of the group.

Step 4 Click Yes to confirm.

The group membership is recomputed.


Using Administration Reports

You can view an analysis of the ANI Server, details of devices discovered, Data Collection metrics, and list of devices supported using the Reports tab of Campus Manager Administration window.

Analyzing ANI Server

You can analyze the ANI server for its performance using the Analyze ANI Server option in the Reports tab of Campus Manager Administration window.

To analyze the ANI server:


Step 1 Go to Campus Manager > Administration > Reports.

The Reports dialog box appears with a list of reports that you can generate.

Step 2 Choose Analyze ANI Server and click Generate Report.

The ANI Server details appear.


Viewing Data Collection Metrics

Data Collection Metrics report gives you details about the duration of each Data Collection and the count of devices for which data was collected.

To view the Data Collection metrics:


Step 1 Go to Campus Manager > Administration > Reports.

The Reports dialog box appears with a list of reports that you can generate.

Step 2 Choose Data Collection Metrics.

Step 3 Enter the number of Data Collection cycles for which data is to be archived and click Apply.

The Data Collection cycles will be removed from the metrics report only after the next Data Collection.

It is not mandatory to set this property, whenever you launch the report.

Step 4 Click Generate Report.

The Data Collection metrics appear.

Table 5-14 describes the columns of the Data Collection Metrics report.

Table 5-14 Data Collection Metrics 

Field
Description

Start Time

Time at which Data Collection was started.

Percent Complete

Percentage of Data Collection that has been completed.

End Time

Time at which Data Collection was completed.

Total Time

Total time taken for Data Collection.

Total Devices

Total number of devices from which data was collected. When you click on the hyperlink, the Data Collection Detail page appears.

New Devices

Number of devices from which data was collected. When you click on the hyperlink, the Data Collection Detail page appears.

Devices Deleted

Number of devices that were deleted. When you click on the hyperlink, the Data Collection Details page appears.

Devices Per Hour

Number of devices in each hour for which data was collected.

Objects Per Hour

Number of objects in each hour for which data was collected.



Viewing Data Collection Details

You can launch this report from:

Campus Manager Home page

See Table 5-15 for the description of this report.

Data Collection Metrics Report

The Data Collection Metrics report displays the total number of Devices, the number of New Devices, and the number of Deleted Devices for which data was collected during the Data Collection cycle.

You can click on the hyperlink in the above mentioned fields to view the Data Collection Details page.

See Table 5-15 for the description of this report.

Table 5-15 Data Collection Detail

Field
Description

IPAddress

IP address (IPv4 or IPv6 address) of the device for which data is collected

HostName

DNS name of the device

DeviceName

DCR display name of the device

DeviceType

Type of the device for which data is collected - the device family it belongs to.

Neighbors

Host names of the neighboring devices


Viewing List of Devices Supported

You can view the icon, name and object ID of the supported devices using the Device Support option. This list does not indicate whether you have these devices in your network.

To view the devices supported:


Step 1 Go to Campus Manager > Administration > Reports.

The Reports dialog box appears with a list of reports that you can generate.

Step 2 Select Device Support and click Generate Report.

The details of supported devices appear.

Table 5-16 describes the columns of the Devices Supported report.

Table 5-16 Devices Supported Report 

Field
Description

Icon

Icon of the device.

Name

Name of the device.

OID

sysobject ID of the device.



Using Other Admin Settings

The following Administrative settings can be done from this page:

Discrepancies

At the end of Data Collection, Campus Manager computes the Discrepancies & Best Practice Deviations present in the network. You can configure Campus Manager to:

Receive Syslog messages for the required Discrepancies and Best Practice Deviations.

Include only the required Discrepancies and Best Practice Deviations in reports, for which you need complete details.

For details, see Configuring Discrepancy Reporting and Syslog Message Generation.

Purge Settings

You can configure purging interval for Campus Manager Report Jobs and Archives.

For details, see Purging Reports Jobs and Archived Reports.

RME Server Credentials

Campus Manager uses the CLI framework (cwcli) of Resource Manager Essentials (RME) for the following functionalities:

Fixing discrepancies and best practices deviations

Enabling MAC notification traps

Inter-VLAN Routing

To invoke the CWCLI commands from a remote client, you need to provide the credentials of the RME Server that you need to access.

For details, see Setting RME Credentials

Configuring Discrepancy Reporting and Syslog Message Generation

You can customize the Discrepancy Report and the Best Practice Deviation Report to display only those discrepancies about which you want to be notified.

To customize the reports:


Step 1 Select Campus Manager > Administration > Discrepancies, from the LMS Portal.

Alternatively, if you are in Campus Manager Administration page, click Other Admin Settings and choose Discrepancies from the Table of Contents (TOC).

The discrepancies page appears. You can view the list of Network discrepancies, and Discrepancies configured to send Syslog messages by clicking the corresponding View Details link.

Step 2 Click Configure to do the required configuration.

The Configuring Network Discrepancies page appears.

To include a Discrepancy or Best Practice Deviation in the Report, check the box next to it.

Checking all the boxes results in a report displaying all Discrepancies/Best Practice Deviations in the network.

To exclude a Discrepancy or Best Practice Deviation from the corresponding report, uncheck the box.

Step 3 Select Configure Syslog to receive Syslog messages for the selected Discrepancies and Best Practice Deviations.

Step 4 Click Next.

The list of selected Discrepancies and Best Practice Deviations appears.

Step 5 Select Send Syslogs and enter the name of the server in the Syslog Server field.

Step 6 Click Next.

A summary of the selected Discrepancies and Best Practice Deviations appears.

Step 7 Click Finish.


You can use the filters to display Discrepancy/Best Practice Deviation reports for specific devices, link or network types. This makes it easy to find a particular Discrepancy/Best Practice Deviation for a particular type.

You can use more than one filter at the same time, but results will vary.

If you select more than one filter in the same top-level category, Boolean OR is used.

For example, if you select Duplex, Speed under Link, any link or port that fulfils at least one filter criteria will be displayed in the report.

If you select more than one filter from different top-level categories, Boolean AND is used.

For example, if you select both a Link type and a Port type filter from the discrepancy filter, any link that fulfils both filter criteria will appear in the report.

Purging Reports Jobs and Archived Reports

You can purge jobs or report archives in Campus Manager. By default, purging is disabled.

To enable the Purge option for report jobs and archives:


Step 1 Select Campus Manager > Administration > Purge Settings.

Alternatively, if you are in Campus Manager Administration page, click Other Admin Settings tab and choose Purge Settings from the Table of Contents (TOC).

The Report Settings dialog box appears. You can specify the Purge Policy for archives or jobs here.

Step 2 Check the Purge Archives Older Than to specify the number of days, or weeks, or months to purge archives.

For instance, if you select 44 days, Campus Manager purges archives that are older than 44 days.

Step 3 Check the Purge Jobs Older Than to specify the number of days, or weeks, or months to purge jobs.

For instance, if you select 2 weeks, Campus Manager purges jobs that are older than 2 weeks.

Step 4 Click Save.


Setting RME Credentials

Campus Manager uses the CLI framework (cwcli) of Resource Manager Essentials (RME) for the following functionalities:

Fixing discrepancies and best practices deviations

Enabling MAC notification traps

Inter-VLAN Routing

CLI framework (cwcli) is a Command-Line Interface (CLI). CLI framework (cwcli) offers remote access facilities that allow you to invoke cwcli commands from the client in the same way as they run on the RME server.

To invoke the CWCLI commands from a remote client, you must enter the credentials of the RME Server that you need to access.

For more details on CWCLI, see the section, cwcli Framework in the User Guide for Resource Manager Essentials 4.3.

CWCLI feature uses various protocols to configure devices. Details of this is available in the help page for RME > Admin> Config Mgmt > Transport Settings, and in the User Guide for Resource Manager Essentials 4.3.

To set RME credentials:


Step 1 Go to Campus Manager > Administration > RME Server Credentials.

Alternatively, if you are in Campus Manager Administration page, click Other Admin Settings tab and select RME Server Credentials from the Table of Contents (TOC).

The RME Credentials dialog box appears.

Step 2 Enter details in the RME Credentials dialog box.

Table 5-17 describes the fields in the RME Credentials dialog box.

Table 5-17 RME Credentials 

Field
Explanation

RME Server Name

DNS name or IP address of the RME server. local host or 127.0.0.1 should not be given.

RME Server Port

Port number of the RME server. For example, 1741.

For https, the port number is 443.

RME Server Protocol

Protocol used by RME server. For example, http or https.

User Name

User name of the RME server.

User Password

Password of the RME server.

Verify User Password

Password of the RME server for confirmation.


If you have specified https as the server protocol, make sure that the Peer Server Certificate is properly imported. Peer Server Certificate is mandatory for communication between CiscoWorks servers in SSL mode.

To add Peer Server Certificate, go to Common Services > Server > Security> Peer Server Certificate Setup. Launch Help and follow the instructions to add the certificate.

Step 3 Click OK to apply the changes

or

Click Cancel to discard the values you have entered.


Possible Cause and Solution for Error Conditions

If you cannot connect to the RME server, it could be because of the following reasons:

RME Server name or IP address is wrong.

Enter correct DNS name or IP address of the RME server. Do not enter local host or 127.0.0.1.

RME Server Protocol is wrong.

Enter either http or https as the server protocol.

RME Server Port is wrong.

Port number for http is 1741 and that for https is 443.

RME Server is down.

Try connecting to the server after it is up.

RME Server is not installed in the specified machine.

Either:

Install RME in the specified machine and try again.

Or:

Provide machine details where RME is installed.

Peer Server Certificate is not imported properly

If you have specified https as the server protocol, make sure that the Peer Server Certificate is properly imported. Peer Server Certificate is mandatory for communication between CiscoWorks servers in SSL mode.

To add Peer Server Certificate, go to Common Services > Server > Security> Peer Server Certificate Setup. Launch Help and follow the instructions to add the certificate.

Setting Debugging Options

If you face issues while running Campus Manager, you can enable logging to debug the same. You can set debugging options for the following functions:

Data Collection (see Setting up Debugging Options for Data Collection)

Configuration and Reports (see Setting up Debugging Options for Configuration and Reports)

Device Groups (see Setting Debugging Options for Device Groups)

Topology (see Setting Debugging Options for Topology)

User Tracking Server (see Debugging Options for User Tracking Server)

Dynamic User Tracking (see Debugging Dynamic Updates)

User Tracking Reports (see Debugging Options for User Tracking Reports)

Dynamic User Tracking Console (see Dynamic User Tracking Console)

Setting up Debugging Options for Data Collection

You can set the trace, and debugging, for Campus Manager Data Collection as follows:


Step 1 Select Campus Manager > Administration >Debugging Options >Data Collection.

The Debugging Options dialog box appears.

Step 2 Modify the debugging options as specified in Table 5-18.

Table 5-18 Data Collection Debugging Options  for Data Collection

Field
Description
Usage Notes

Enable Debug

Select this option to enable logging for Data Collection.

You can select the modules for debugging only if you select this option.

Modules

Specify the modules on which you need to enable debugging.

Click Select to view the available modules and select the modules in which you want to enable debug.

For details on Debug modules, see Selecting Data Collection Debug Modules

File Name

Name of the log file in which the trace messages are to be recorded.

The default log file is NMSROOT\log\ani.log

Maximum File Size (lines)

Maximum size of the log file in lines

None

Enable Device Level Debugging

Device IP(s)

IP Addresses (IPv4 or IPv6 Addresses) of devices for which you need to log debugging messages.

You can enter multiple IP addresses, separated by commas.

This field is enabled only when the Device Level Debugging option is enabled.


Step 3 Click Apply.


Selecting Data Collection Debug Modules

Table 5-19 describes the debug modules available for Data Collection in Campus Manager.

Table 5-19 Data Collection Debug Modules 

Module
Description

framework

Constructs and maintains data in the memory.

Provides framework for Campus Manager features.

Enable debugging for this module only when requested by TAC. This is because enabling debugging for this module creates huge logs.

topo

Provides network topology computation and layouts.

Enable debugging for this module if you have problems with Topology computation of devices.

vlad

Discovers VTP domains, VLANs, port-in-VLAN configurations

Performs VLAN configuration tasks

Determines Spanning Tree state

Enable debugging for this module if you have problems with VTP, VLAN reports, and configuration.

ccm

Discovers Cisco CallManager (CCM).

Enable debugging for this module if you encounter issues with data collected for CCM.

vmpsadmin

Discovers end-user hosts on the network

Records end-user host information in the ANI database

Manages requests for scheduling user and host discoveries, ping sweeps, database queries, and updates to user and notes information

Enable debugging for this module if you have problems with User Tracking.

dcrp

Provides computation of network discrepancies.

Enable debugging for this module if you have problems in Discrepancy reports.

status

Enables status polling on previously discovered devices.

Enable debugging for this module if you have problems with device and link status polling.

apps

Discovers application hosts such as MCS.

Enable debugging for this module if you encounter issues with data collected on application hosts.

stp

Discovers all STP related information from the network.

Enable debugging for this module if you have problems with STP reports and configuration.

stpeng

Performs STP configuration tasks

Provides basic STP analysis for migration from one STP type to another

Enable debugging for this module if you have problems with STP reports and configuration.

devices

Provides specific information, if any, available for device categories.

Enable debugging for this module if you have problems specific to a particular device type.


Click OK to save the selected modules or click Cancel to exit.

Setting up Debugging Options for Configuration and Reports

If you need information on Configuration and Reports in Campus Manager, you can enable debugging for the same. To do this:


Step 1 Select Campus Manager > Administration > Debugging Options >Configuration and Reports.

The debugging page appears.

Step 2 Select the level of debugging. It can be any one of the following:

INFO

Only informational messages are recorded in the log file.

DEBUG

All messages related to Configuration and Reports are recorded in the log file.

FATAL

Messages related to fatal errors are recorded in the log file. This is the default option.

The Log File Name field specifies the location and name of the log file. The default log file is NMSROOT\log\Campus.log

Step 3 Click Apply.


Setting Debugging Options for Device Groups

If there are errors related to System defined or User defined groups in Campus Manager, you can enable debugging for the same. Its done as follows:


Step 1 Select Campus Manager > Administration > Debugging Options >Device Groups.

The debugging page appears.

Step 2 Select the level of debugging. It can be any one of the following:

INFO

Only informational messages are recorded in the log file. This is the default option.

DEBUG

All client side messages are recorded in the log file.

FATAL

Messages related to fatal errors are recorded in the log file.

The Log File Name field specifies the location and name of the log file. The default log file is NMSROOT\log\CampusDeviceSelector.log

Step 3 Click Apply.


Setting Debugging Options for Topology

You can enable debugging for Topology Services client side activities. The debugging information will be available in the Java Console.

To display Java Console:


Step 1 Select Start > Settings > Control Panel > Java.

Step 2 Select the Advanced tab.

The corresponding tree structure is displayed.

Step 3 Go to the tree and select Java Console > Show Console.

Step 4 Click Apply and then OK.

The Java console is displayed when you launch Topology Services.


Note In case you close the Java Console, to reopen it, close the Topology window and relaunch it.



To enable debugging:


Step 1 Select Campus Manager > Administration > Debugging Options >Topology.

The debugging page appears.

Step 2 Select the level of debugging. It can be any one of the following:

TRACE

Only informational messages are displayed in the Java Console.

DEBUG

All Topology Services client side messages are displayed in the Java Console.

ERROR

Messages related to all errors are displayed in the Java Console. This is the default option.

Step 3 Click Apply.


To change log level settings:


Step 1 Close the Topology Services window.

Step 2 Change the settings in the Campus Manager Administration page.

Step 3 Re-launch Topology services.


Using Campus Manager Job Browser

The Campus Manager Job Browser enables you to view the status of all Campus Manager Jobs (User Tracking jobs, Campus Manager reports).

The job details that you can view here include the job ID, the job type, the job status, the job description, the job owner, the time the job is scheduled to run at, the time of job completion, and the schedule type.

To open the job browser, select Campus Manager > Job Management.

The Campus Manager Job Browser appears.

You can filter the jobs by any specified criteria using the Show Only drop-down list. Select your criteria. The jobs pertaining to that category are displayed.

Table 5-20 displays the fields in the Campus Manager Job Browser.

Table 5-20 Campus Manager Job Browser 

Column
Description

Job ID

Unique ID of the job. For example, 1007.0.

Job IDs have N.x format, where x stands for the number of instances of that job.

For example, 1007.4 indicates that the Job ID is 1007 and it is the fifth instance of that job.

Job Type

Type of job. The jobs include, User Tracking jobs, Campus Manager reports.

Description

Description of the job.

Owner

Username of the job creator.

Scheduled At

Date and time at which the job was scheduled.

Completed At

Date and time at which the job was completed.

Run Status

Job states include:

Running

Waiting for approval

Scheduled (pending)

Succeeded

Succeeded with Info

Failed

Crashed

Cancelled

Suspended

Rejected

Missed Start

Failed at Start

Schedule Type

Type of job schedule—daily or periodic.

Status

Provides the status of the current jobs. The status of the current jobs is displayed as succeded or failed. It also displays the failure reasons.


Click the Refresh icon to refresh the Campus Manager job browser.

Use the Stop and Delete buttons to stop or delete jobs:

Stop button—Stops or cancels a running job. You will be prompted to confirm the cancellation of the job.

However, the job is stopped only after the devices currently being processed are successfully completed. This is to ensure that no device is left in an inconsistent state.

Delete button—Deletes the selected job from the job browser. You can select more than one job to delete. You will be asked to confirm the deletion.


Note You cannot delete a running job.


Administration Command Line Interface

This section describes how to administer Campus Manager database from the command line. This is explained in the following topics:

Replacing Corrupted Database

Re-initializing the Database

Deleting all Active Entries from User Tracking, and Restarting Servers

Deleting all Inactive Entries from User Tracking, and Restarting Servers

Deleting all History Entries from User Tracking, and Restarting Servers

Deleting all User Tracking Entries, and Restarting Servers

Restoring the Original Data in the Server

Restoring Data from Another Server

Performance Tuning Tool

This section also explains Configuration Settings for SNMPv3 Devices

Replacing Corrupted Database

If you have a corrupted database, you can use the database administration tools to restore the database from a previous backup. However, if you do not have a previous backup, you must re-initialize the database.

When you run this command, if Data Collection is running, it is automatically stopped and then restarted when the database initialization is complete.


Caution If you re-initialize the database, information from discovered devices will be lost. However, user and host information is retained. Replace the database only if recommended by a Cisco technical representative.


Note Your login determines whether you can use this option.


Re-initializing the Database

From the command prompt or shell window, enter:

On Solaris: NMSROOT/campus/bin/reinitdb.pl

On Windows: perl NMSROOT\campus\bin\reinitdb.pl

The following message appears:

This will erase all data from the database. Are you sure [y/n] ?

If you enter y, it erases all data (database tables Wbu*...) from the server.

Deleting all Active Entries from User Tracking, and Restarting Servers

From the command prompt or shell window, enter:

On Solaris: NMSROOT/campus/bin/reinitdb.pl -ut -active

On Windows: perl NMSROOT\campus\bin\reinitdb.pl -ut -active

where active entries are hosts that are currently logged in

Deleting all Inactive Entries from User Tracking, and Restarting Servers

From the command prompt or shell window, enter:

On Solaris: NMSROOT/campus/bin/reinitdb.pl -ut -inactive

On Windows: perl NMSROOT\campus\bin\reinitdb.pl -ut -inactive

where inactive entries are hosts that are currently not logged in

Deleting all History Entries from User Tracking, and Restarting Servers

From the command prompt or shell window, enter:

On Solaris: NMSROOT/campus/bin/reinitdb.pl -ut -history

On Windows: perl NMSROOT\campus\bin\reinitdb.pl -ut -history

where history entries are complete entries. That is, hosts that have a login and logout in the past.

Deleting all User Tracking Entries, and Restarting Servers

From the command prompt or shell window, enter:

On Solaris: NMSROOT/campus/bin/reinitdb.pl -ut -all

On Windows: perl NMSROOT\campus\bin\reinitdb.pl -ut -all

Restoring the Original Data in the Server

From the command prompt or shell window, enter:

On Solaris: NMSROOT/campus/bin/reinitdb.pl -restore

On Windows: perl NMSROOT\campus\bin\reinitdb.pl -restore


Note Before executing the -restore command, you should stop the daemon manager and start again manually. For details, see Using Daemon Manager.


Restoring Data from Another Server

When you take database backup for Campus Manager in one server and restore it in another server, the NMSROOT logfile location may not be the same in both servers.

In that case, Campus Manager will log messages to the log file stored in the default NMSROOT location in the restored machine.

where NMSROOT is the root directory where you installed CiscoWorks.

Performance Tuning Tool

When you get out of memory errors in Campus, the following command can be used to tune the performance:

NMSROOT/bin/perl NMSROOT/campus/bin/CMPTT.pl ProcessName HeapSize MaxPermSize

ProcessName should be either one of the following:

ANIServer

UTMajorAcquisition

Heap size should be multiples of 512 and should not exceed 1536 MB.

Ensure you have enough swap space in the server before tuning the heap size.

MaxPermSize will set the JVM MaxPermSize option to 64m.

Configuration Settings for SNMPv3 Devices

Campus Manager supports the following Authentication protocols for SNMP v3:

md5

SHA

Campus Manager supports the following Privacy protocols for SNMP v3:

des

3des

aes128

aes192

aes256.

For using various Campus Manager features in devices running SNMPv3, you must make specific configurations on the devices. The commands that need to be configured are:

Configuring MIB Views

Configuring Access Groups

Configuring Device with Context Name

Configuring a New User

Configuring Password for a User

Relating a User to a Group

Configuring Privacy Protocol

Configuring MIB Views

For Catalyst devices, enter the following command:

set snmp view campusview 1.3.6.1 included nonvolatile


For IOS devices, enter the following command:

snmp-server view campusview oid-tree included

Configuring Access Groups

You must set the access rights for a group with a certain security model in different security levels.

For Catalyst devices, enter the following command:

set snmp access campusgroup security-model v3 authentication read campusview write campusview nonvolatile


For IOS devices, enter the following command:

snmp-server group campusgroup v3 auth read campusview write campusview access access-list

Configuring Device with Context Name

For Catalyst devices, enter the following commands:

set snmp access campusgroup security-model v3 authentication read campusview write campusview context vlan- prefix nonvolatile


Context exact is also supported. The following is an example:

set snmp access campusgroup security-model v3 authentication read campusview write campusview context vlan-1 exact nonvolatile


For IOS devices, enter the following command:

snmp-server group campusgroup v3 auth context vlan-1 read campusview write campusview


IOS image versions prior to12.4 support only exact context name.

IOS image versions 12.4 or higher, support both exact or prefix context names.

You need to configure the device with and without context name, since Data Collection manages the device without context name and User Tracking requires context name to contact the device.

Configuring a New User

For Catalyst devices, enter the following command:

set snmp user campususer authentication md5


For IOS devices, enter the following command:

snmp-server user campususer campusgroup v3 auth md5 password1

Configuring Password for a User

For Catalyst devices, enter the following command:

set snmp user campususer authentication md5 password1


For IOS devices, enter the following command:

snmp-server user campususer campusgroup v3 auth md5 password1

Relating a User to a Group

Using a specified security model you can relate a user to a group.

For Catalyst devices, enter the following command:

set snmpw group campusgroup user campususer security-model v3 nonvolatile


For IOS devices, enter the following command:

snmp-server user campususer campusgroup v3

Configuring Privacy Protocol

For Catalyst devices:

set snmp user campususer authentication md5 password1privacy des password2


For IOS devices:

snmp-server user campususer campusgroup v3 auth md5 password1 priv des password2

Starting Campus Manager Applications

The Campus Manager Applications are:

Topology Services

User Tracking

VLAN Port Assignment

Network Discrepancies

You can select these applications from:

Campus Manager > Visualization > Topology Services

Campus Manager > User Tracking

Campus Manager > Configuration > VLAN Port Assignment

Campus Manager > Reports, then choose Report Generator to launch reports on Discrepancies or Best Practices Deviations.

Security

After a period of inactivity, the LMS Portal page times out and is no longer accessible. Close all browser instances and relaunch CiscoWorks.