Use Cisco Resource Manager Essentials. It logs all configuration changes
using Cisco's syslog reporting. You can then view the config. changes made
via the web reports that come with Essentials. I would talk to the Cisco
TAC regarding your exact errors below. It very well may be an IOS issue, as
I have seen similar FMT errors when the NV trapd.conf tries to reference a
variable binding that it expects to see in a Cisco trap, but the Cisco
device did not send the variable. An upgraded IOS version resolved my
problem. Perhaps this would resolve your problem too, but I would consult
the TAC first.
Joe Prokott - West Group
Network Architect
610 Opperman Drive
St. Paul, MN 55123
Phone: 651-687-4536
Fax: 651-687-6946
E-mail: joe.prokott AT westgroup DOT com
-----Original Message-----
From: Vigil, Ed [mailto:EVigil AT MPTN DOT ORG]
Sent: Monday, July 12, 1999 3:33 PM
To: NV-L AT UCSBVM.UCSB DOT EDU
Subject: ciscoConfigManMIB
NetView 5.1.0 for AIX 4.2.1.0
I would like to monitor whenever there is a configuration change done to a
Cisco router or switch.
A technician from Cisco System suggested that the following commands
"snmp-server enable traps config" and "snmp-server host <ip address>
<community string> " would generate and send a trap to the specified host
<ip address>.
After implementing the above commands, I tested a router and noticed the
syslog file had the following entries:
SNMP: Queuing packet to 10.1.39.137
SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 128.201.200.2, gentrap 6,
spectrap1
ccmHistoryEventEntry.3.148 = 1
ccmHistoryEventEntry.4.148 = 2
ccmHistoryEventEntry.5.148 = 3
SNMP: Packet sent via UDP to 10.1.39.137
SNMP: Packet received via UDP from 128.3.10.137 on Serial0
SNMP: Queuing packet to 10.1.39.137
SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 128.201.200.2, gentrap 6,
spectrap1
ccmHistoryEventEntry.3.149 = 2
ccmHistoryEventEntry.4.149 = 3
ccmHistoryEventEntry.5.149 = 6
SNMP: Response, reqid 11, errstat 0, erridx 0
lsystem.55.128.1.10.137 =
19990612032621-b184-dm-2511-1.network.mptn.org.cfg
NetView event workspace displayed the following traps from the router:
931809864 11 Mon Jul 12 16:04:24 1999 ps-dm-7507-1.network.mptn.org A TCP
connection has been terminated. (tcpConnectClose Trap) tsLineUser: FMT ERR
OR: accessing element #6, only 3 available
931809892 11 Mon Jul 12 16:04:52 1999 ps-dm-7507-1.network.mptn.org A TCP
connection has been terminated. (tcpConnectClose Trap) tsLineUser: FMT ERR
OR: accessing element #6, only 3 available
931809925 11 Mon Jul 12 16:05:25 1999 ps-dm-7507-1.network.mptn.org A TCP
connection has been terminated. (tcpConnectClose Trap) tsLineUser: FMT ERR
OR: accessing element #6, only 3 available
931809951 11 Mon Jul 12 16:05:51 1999 ps-dm-7507-1.network.mptn.org A TCP
connection has been terminated. (tcpConnectClose Trap) tsLineUser: FMT ERR
OR: accessing element #6, only 3 available
Any ideas why this is happening?
|
