Scan Config 4200vl-Switches

[LTNhup]

Hello everybody,

we got a bunch of 4200vl-switches recently.

For security reasons (school environment) we configured them with
ip ssh
ip ssh filetransfer
no tftp-enable
and appropriate keys.

After doing so, the PNM (2.1 with SP6) is not longer able to retrieve configuration information from them.

When doing a manual scan, the answer is Failure:Timeout immediatly.

Further examination using a network sniffer showed SNMP-requests from the management station for object
.iso.org.dod.internet.private.enterprises.hp.nm.icf.hpicfObjects.hpicfSwitch.hpSwitch.hpConfig.hpSwitchConfig.hpSwitchIpConfig.hpSwitchIpTftpMode
which appears to be inaccessible (response: no such object) in SFTP mode.
Also, TFTP and SFTP can't be used together.

What do we miss, how can we scan (and store) configurations in PNM?

Regards, Mark

PS: The CFG-CfgMgr.log file shows:

Aug 9, 12:57:21:859 ConfigManagerServer::showScanProgress Posting event: payload=CfgMgrScanPayload {
dbid=4068359
isDifferent=false
Message=Timeout
progressComplete=false
success=-1
keytoken=2
}

Aug 9, 12:57:21:939 ConfigManagerServer::showScanProgress Posting event: payload=CfgMgrScanPayload {
dbid=0
isDifferent=false
Message=
progressComplete=true
success=0
keytoken=2
}

Aug 9, 13:05:28:920 ConfigManagerServer::ScanThread::run
com.hp.nis.doloader.CfgMgrException: ERROR: com.hp.nis.doloader.CfgMgrException: SNMP Timeout: Accessing TFTP mode: SNMP Get Failure: java.io.IOException: getLong failed
at com.hp.nis.drivers.cfgmgr.alphinity.CmAlphinity.getSwConfig(CmAlphinity.java:77)
at com.hp.nis.cfgmgr.ConfigManagerServer.captureConfig(ConfigManagerServer.java:590)
at com.hp.nis.cfgmgr.ConfigManagerServer.access$400(ConfigManagerServer.java:77)
at com.hp.nis.cfgmgr.ConfigManagerServer$ScanThread.run(ConfigManagerServer.java:1183)
at com.hp.jcore.util.ThreadPool$PoolThread.run(ThreadPool.java:799)
at java.lang.Thread.run(Unknown Source)

[Matt Hobbs]

I don't think PCM is quite ready for SFTP yet, so you will probably need to re-enable TFTP in the meantime.

[LTNhup]

Same config
ip ssh
ip ssh filetransfer
no tftp-enable
works with both 2800 and 3400 switches in PCM.
Although they enable TFTP, PCM can work with them (judging from network monitoring, the config is being read by snmp).
Could be a problem with 4200vl firmware or with the pcm device definition.

Regards, Mark

[Mohieddin Kharnoub]

Hi

I advice you to use the Test Communication Parameters option to compare CLI and SNMP
communication parameters stored on the 4200vl with those stored in PCM.

And you can also use the Communcation Parameters in PCM Wizard to override the global
PCM settings and set the device access parameters for the 4200vl Switch.

Be sure to verify the SSH settings between PCM and 4200vl switches, like the Primary key, SSH version, SSH key-size, ....

Good Luck !!!

[LTNhup]

All communication tests run just fine,
I get most of the info (e.g. VLAN config, LLDP neighbours and so on).

Just "scan config" fails immediatly.

As noted in the first post, the reason is, that the snmp object "hpSwitchIpTftpMode" seems to be gone in 4200vl Firmware.

So either it should be made available again in switch firmware or the PCM device driver should not request it.

Regardsm, Mark