Help with IMC ..?

[MohammadH]

Hi

I want to now how backup all switch's configure  I try go to switch and select backup configure but always fails how can I use TFTP and where the  configure file save ?

and

in all the 4800G switch  when the interface go up it give me next Alarm :

---------------------------------------------------------------------------

The interface of switch in the spanning tree turns into forwarding state. Possible causes include: 1. The interface with SST enabled goes up. 2. The spanning tree calculated again and the interface turns state from discarding to forwarding.

---------------------------------------------------------------------------

how I stop it ?

thank you

[LindsayHill]

What sort of error messages are you seeing when you try and backup a device? There's a few things to check. First, if you're determined to use TFTP (although far better options exist), then make sure that the file transfer mode is set to TFTP. Service -> Configuration Center -> Options -> File Transfer Mode. Can set the default, and can have per-device exceptions.

Next, if you want to use TFTP, you will need to use Telnet for device access. On the device page, ensure Login Type is set to Telnet. If you use SSH for device access, IMC assumes you prefer secure transfer methods, and will only use SCP/SFTP/CLI. After all, why would you use one secure method, and one hopelessly insecure one for the same device?

Make sure the Telnet credentials are set correctly for this device. Double-check it.

Ensure that the device is able to TFTP to the IMC server. Test it yourself, by logging in and running "copy running-config tftp://<IMC_IP>/<device>_config.txt. You may need to check firewalls, including the host firewall.

Now run a backup again. See if it works, and if it doesn't take note of the error messages you get. You will need to click on the Details icon to see some more info. Some of those messages can be a little generic.

If you can't work out why it's failing, try looking at <install_dir>\server\conf\log\imccfgbakdm*.txt. The logs can be quite verbose, but if you follow it through, you can usually get an idea where it's failing.

Backed up configurations are stored in <install_dir>\server\data\cfgbak\. Much better to access them via the main web interface though.

Lastly, for the STP alarms, your switch is sending snmp traps when a port is moving to forwarding. Two options here: Either fix the underlying problem, or suppress the alarm. Look at the port that you're getting that alarm for. Why is that port changing state? If it's a user access port, then you should set it to portfast. If it's an inter-switch port, then  you need to investigate why your spanning tree topology is changing. Do you have a flapping link? If you can't/won't fix the underlying problem, you can suppress the alarm. In Alarm Browse, find the alarm, and click on it. Then go to "Filter the Alarm", and you'll get options for filtering it.

[MohammadH]

Hi

thank you for replay

I now now what is the problem I fix it there was another TFTP server install I remove it and it work fine for 4800G but it fail when I try backup the HP 2910al-48G switch it give me this error :

---------------------------------

Index Description Result Suggestion Begin Time Finish Time 1 Initialize task parameters. Succeeded.   2013-02-04 08:13:26 2013-02-04 08:13:27 2 Back up device startup configuration file to iMC Server. SNMP Set operation failed. 1. Check that the iCC supports the device in Hardware and Software Compatibility Matrix.
2. Check that the SNMP parameters are correct. With SNMPv3 adopted, the username, authentication password, privacy password and privacy mode for the device and the iMC should be the same.
3. Check the MIB style (Execute the display mib-style command. If the MIB style is displayed as new, but it displays that the node sending the Set request is 2011 after packet capturing, synchronize the device. Check the MIB style again. If the MIB style is still inconsistent, execute the mib-style [ new | compatible ] command, and then restart the device.).
4. Error code such as no such name may occur for the Set operation. You need to capture packets to analyze whether such error occurs in the response received by the device.
5. Device busy, please retry later. 2013-02-04 08:13:28 2013-02-04 08:14:06 3 Initialize redo task parameters. Succeeded.   2013-02-04 08:14:06 2013-02-04 08:14:07 4 Back up device startup configuration file to iMC Server by script. Failed to telnet the device. 1.Please check the Telnet user name and password are correct.
2.Please check the Telnet software exists in iMC server.
3.VTY is out of limit of device, please try later. 2013-02-04 08:14:08 2013-02-04 08:14:14

---------------------------------

you can see the Attachments if it not clear

I'm sure about the user name and password but it failed what I do ?

and

about STP it is a user access port how to make it to portfast can you tell in detail ?

and thank you again

[LindsayHill]

Are you using SNMP read-write? Go into <imc_install_dir>\server\conf\log, and find the latest imccfgbakdm*.txt file. Read through that, for entries around the time you were trying a backup. If you can't figure it out, paste the entries here, and we'll take a look.

Also, login to the IMC server, and try telneting to the switch, just to make sure all access is in place and working correctly.

For the STP issue, it's probably called an "edge" port, rather than portfast. Portfast is a Cisco term, but Edge port is more correct for RSTP. I think this is the command you want:

int Gig1/0/1

 stp edged-port enable

NOTE: This should ONLY be used for ports that are connected to PCs and servers. Do not configure that on ports connected to other switches. You should also implement other STP security features such as BPDUguard. Talk to your network admin.

[MohammadH]

Hi

the imccfgbakdm*.txt file is in the Attachments can you take a look

and

the telnet is work from the IMC server ,

for the STP issue , about the port in the switch's is already configure stp edged-port enable for for PC's  but the same Problem what I do ?

and thank you again

[LindsayHill]

This looks like the problematic lines:

2013-02-04 08:14:10.344 [INFO (0)] [THREAD(2580)] [CTclExecutor::exec_impl()] Begin to exec: spawn telnet 192.168.0.17
2013-02-04 08:14:10.361 [ERROR (1)] [THREAD(2580)] [CTclExecutor::exec_impl()] Failed to exec cmd: spawn telnet 192.168.0.17, error message: The system cannot find the file specified. 

 Look in <imc_install_dir>\server\bin, and see if there's a copy of telnet.exe. I have seen IMC end up with a missing copy of telnet if Telnet Client was not enabled as a feature on the server at install time. If you have since enabled the Telnet client on the server, try copying it over the to IMC bin directory.

[MohammadH]

Hi

there was No copy of telnet.exe in the <imc_install_dir>\server\bin directory, I enabled Telnet Client in the server ant try again but it failed again, where i can get the copy of Telnet client ?

and

for the STP issue , about the port in the switch's is already configure stp edged-port enable for for PC's  but the same Problem it give me Warning what I do?

and thank you again

[LindsayHill]

If you enabled it, it will be somewhere under the Windows directory. Use 'where' to find out where Windows puts it, or use the Windows search functions that you would normally use to locate a file in Windows. 

Find it and copy it to the IMC bin directory.

[LindsayHill]

For the STP alarm, can you post all the content of the alarm? I want to see where it's coming from.

Also browse through SNMP traps, and post the whole content here.

[MohammadH]

Hi

i want to say For the STP alarm not one port but all the port's connect to PC , by content you mean this ?

----------------------------

The interface of switch in the spanning tree turns into forwarding state. Possible causes include:

1. The interface with STP enabled goes up.

2. The spanning tree calculated again and the interface turns state from discarding to forwarding.

----------------------------

 and

about the telnet i enabled in the server and copy it to the IMC bin directory but still not working for switch 2910G and i restart the server but still not working, what i do ?

and thank you

[LindsayHill]

What do your inccfgbakdm logs say now?

Maybe screenshots of the alarm and the SNMP trap would be useful

[MohammadH]

Hi

the inccfgbakdm logs file and screenshots of the alarm is in the Attachments, about the screenshots SNMP trap which part you mean where i can get it ?

and thank you

[LindsayHill · Accepted solution]

Here's the problem area in the logfiles:

2013-02-06 13:08:25.789 [INFO (0)] [THREAD(4432)] [CTelnetScriptProcessor::login()] Begin ...
2013-02-06 13:08:25.789 [INFO (0)] [THREAD(4432)] [CTclExecutor::exec_impl()] Begin to exec: spawn telnet 192.168.0.17
2013-02-06 13:08:25.791 [ERROR (1)] [THREAD(4432)] [CTclExecutor::exec_impl()] Failed to exec cmd: spawn telnet 192.168.0.17, error message: The request is not supported. 
2013-02-06 13:08:25.791 [ERROR (11)] [THREAD(4432)] [CTelnetScriptProcessor::login()] Fail to call oTclExecutor.exec().AdaptName=HPProcurve2500.DevIP =192.168.0.17.script = spawn telnet 192.168.0.17.
2013-02-06 13:08:25.797 [ERROR (6)] [THREAD(4432)] [CTelnetScriptProcessor::exec()] Fail to login. AdaptName = HPProcurve2500. DevIP = 192.168.0.17
2013-02-06 13:08:25.798 [INFO (0)] [THREAD(4432)] [ScriptTool::execScriptAction()] ResultNo: 6, CmdResp: The request is not supported. , ResultMap: 

2013-02-06 13:08:25.809 [INFO (0)] [THREAD(5452)] [imcscriptttol] log: =============================== End===============================
2013-02-06 13:08:25.809 [INFO (6)] [THREAD(5452)] [CScriptProcessor::exec()] Success to check result file. resp: The request is not supported., out_map: 
2013-02-06 13:08:25.809 [ERROR (6)] [THREAD(5452)] [CScriptProcessor::exec()] Failed to execute by cli method.
2013-02-06 13:08:25.810 [INFO (6)] [THREAD(5452)] [CScriptProcessor::exec()] Finished to execute, result:
ServiceName = ConfigBackup

 See how the telnet command is returning "The request is not supported" ?

I might have put you wrong a bit. My memory is a bit hazy on this, but I think that what I've sometimes seen in the past is that IMC doesn't unpack telnet.exe into the right directory, if you don't have Telnet Client enabled on the server at install time.

BUT, now I think about it, I remember that you can't just use the default Windows version - I think IMC likes to have its own copy, which is a slightly earlier version. If you look at the file details for the Windows copy of Telnet, in C:\Windows\System32\telnet.exe, it's version 6.1.7600.16385.

But if you've got a version of telnet installed by IMC, it's version 5.1.2600.5829. If you've still got your original installation files for IMC, look in the windows/install/components/common/server/commonserver_win.zip file. In there, in server/bin/, you should find the IMC version of telnet.exe. If you don't have the original install files, I've made my copy of telnet.exe available via Dropbox: http://db.tt/HRrcubdr

Hopefully it's not a matter of missing DLLs too. 

As an experiment, can you try changing that version of telnet.exe in <imc>\server\bin, and then open a command window, cd to <IMC_DIR>\server\bin\, and run "telnet 192.168.0.17" ?

If we're still having problems with this, there are two other things you could do - either enable SNMP read-write on the switch, or use SSH. But we should definitely be able to get it working - I have it working for the same sort of device.

For the SNMP trap, can you go to Alarm -> Trap Management -> Browse Trap, find the trap, and get a screenshot of its details?

[MohammadH]

Hi

thank you for your help the TFTP work fine when I copy the telnet ,

and

about the SNMP trap screenshot it in the attachments.

and thank you again.

[LindsayHill]

Hey, that is good news - we've got something working!

For the trap, could you click on that trap description, and get those details? In particular, I'm interested in seeing what the trap OID is.

[MohammadH]

Hi

I upload the file in the attachments this is the alarm I don't want them.

and thank you

[LindsayHill]

OK, there's a few things going on here. Let's deal with the separately.

Firstly, the UP/Down Alarms. Can you find the device in IMC, click on "Interface List", and scroll down to find a specific interface that you're interested in stopping Up/Down alarms for? Look at that interface in the list, and look at the right-hand column. Does it say "Disconnected Interface" ? It should do, if this is a port that a PC is plugged into. If it's another switch, or a server that IMC is managing, you will see different details listed here.

IMC has the ability to automatically filter interface Up/Down alarms for interfaces, depending on what's plugged into them.  It can automatically filter out alarms, or allow them through. This can be done globally, or you can over-ride it on a per-interface basis. Presumably you want to do this on a global basis, rather than having to go and edit every single interface. Go to System -> System Configuration -> System Settings. Scroll down to "Interface Up/Down Alarm", and change the settings for "Alarms for PC-connected links" and "Alarms for disconnected links" to "Filter", and click OK.

If you go into a specific interface, you can over-ride these settings. Go to a device, then Interface list, and drill into a specific interface. Then click on "Up/Down Alarm Filter" - you can set to this to "System Settings", "Filter" or "No Filter". This means you can have global policies, and you can over-ride on a per-port basis as required.

Secondly, the Performance Alert. Do you want to raise the threshold, or do you not want to monitor that value - on all ports, or just on this one?

If you go to Resource -> Performance Management -> Performance Option, then click on the "Monitor Option" tab, you'll see some settings for the defaults for which interfaces are polled when a device is discovered. You may wish to set this to only be "Interfaces Connected to SNMP Devices".

If you want to change the threshold for all devices, go to Global Index Settings,Interface Statistics, find the relevant metric, double click on it, and you'll get options for thresholds and values. Change as desired.

If you want to change the alarm threshold for a specific interface on a specific device, go to Monitoring Settings. Find the device you're interested in. Click on "Modify Index". Find the relevant monitor and instance. Uncheck "Global Index Settings". Set new values as required for that specific instance.

I'll have to do a little research into the STP trap. If you just want to filter the STP trap at the IMC level (rather than stop the switch generating the traps), then just use the "Filter Trap" option when viewing the trap's details. I'll see if I can work out why the switch is sending that in the first place.

[LindsayHill]

I haven't been able to find any good Comware references for changing SNMP traps for STP. 

Your best option might be to filter the traps in IMC.

[MohammadH]

Hi

I raise the threshold so I think the problem will be solve,

and about the UP/Down Alarms it connect to PC and the I Filter it before but no working,

then I filter the (STP Instance on Forwarding State) like you told me then the Alarms stop for both interface UP/Down and the STP,

so it work fine thank you very mach for your help.

[LindsayHill]

Well, we got there in the end!

Thanks for taking the time to post back here with your results. Hopefully the next person with a similar problem can resolve it quicker.