I will check for all of this.
thks
Cordialement.
Maxime TRANNOY
IGS - Network Delivery Support Center
Tel : +33 (0) 492 114 767
mailto:mtrannoy@fr.ibm.com
|---------+---------------------------->
| | Michael Webb |
| | <mlwebb@us.ibm.co|
| | m> |
| | Sent by: |
| | owner-nv-l@lists.|
| | us.ibm.com |
| | |
| | |
| | 30-03-2004 15:43 |
| | Please respond to|
| | nv-l |
| | |
|---------+---------------------------->
>--------------------------------------------------------------------------------------------------------------------------------------------------|
|
|
| To: nv-l@lists.us.ibm.com
|
| cc:
|
| Subject: Re: [nv-l] VRRP and Netview
|
|
|
|
|
>--------------------------------------------------------------------------------------------------------------------------------------------------|
Ok. Can you ping one of the VRRP virtual address from the NetView station?
I am assuming that you can. Can you SNMP query the system MIB of the same
VRRP address you just pinged? If so, what is the sysName that is returned?
Does it belong to the Nokia firewall device? If you perform this query
several times, will it always return the sysName of the Nokia device?
When you added the % in the netmon seed file for the VRRP virtual
addresses, how did you inform netmon of the changes?
If you have a limited discovery seed file configuration, are the VRRP
virtual addresses in a range that allows them to be discovered?
Have you looked at netmon tracing? If so, what activity do you see for
HSRP tracing and the virtual IP addresses? If not, you could turn on full
tracing and browse through the trace file looking for HSRP lines and lines
that contain your virtual IP addresses. This should help determine what is
going on.
Michael Webb, IBM Tivoli
Q1CA Distributed NetView / ITSA SVT
Email: mlwebb@us.ibm.com
Ext: (919) 224-1410, T/L: 687-1410
(Embedded image moved to file: pic07225.gif)Inactive hide details for
Maxime TRANNOY <MTRANNOY@fr.ibm.com>Maxime TRANNOY <MTRANNOY@fr.ibm.com>
(Embed (Embedded image moved to file: (Embedded image moved to
ded pic11328.gif) file: pic10296.gif)
image Maxime TRANNOY
moved <MTRANNOY@fr.ib To: nv-l@lists.us.ibm.com
to m.com> cc:
file: Sent by: nv-l@lists.us.ibm.com,
pic306 owner-nv-l@list owner-nv-l@lists.us.ibm.c
97.gif s.us.ibm.com om
) Subject: Re: [nv-l] VRRP
and Netview
03/30/2004
08:21 AM
Please respond
to nv-l
thanks
but I have already applied Fixpack 2
Cordialement.
Maxime TRANNOY
IGS - Network Delivery Support Center
Tel : +33 (0) 492 114 767
mailto:mtrannoy@fr.ibm.com
|---------+---------------------------->
| | Michael Webb |
| | <mlwebb@us.ibm.co|
| | m> |
| | Sent by: |
| | owner-nv-l@lists.|
| | us.ibm.com |
| | |
| | |
| | 30-03-2004 14:18 |
| | Please respond to|
| | nv-l |
| | |
|---------+---------------------------->
>--------------------------------------------------------------------------------------------------------------------------------------------------|
|
|
| To: nv-l@lists.us.ibm.com
|
| cc:
|
| Subject: Re: [nv-l] VRRP and Netview
|
|
|
|
|
>--------------------------------------------------------------------------------------------------------------------------------------------------|
Although your scenario involves VRRP, it could be that one or some of the
HSRP interim fixes may help out in your situation.
All of the following HSRP Interim fixes listed below are now included in
7.1.3 FixPack2. The first one listed below, IY38924, sounds like it may
address one of your problems. You mentioned that from time to time the VRRP
addresses appear on other devices.
In this case, for IY38924, NetView did not reassign the Virtual IP address
to the HSRP router if it was first assigned to a workstation (or some other
device) AND that workstation (or other device) had a different community
string than the HSRP router. Not sure if this applies to your current
configuration.
Nevertheless, here are some HSRP interim fixes you may be interested in:
IY38924 Windows/UNIX An HSRP interface may be assigned to the IP forwarding
workstation if it is discovered earlier than the router that actually owns
the interface.
IY42541 Windows/UNIX Multiple interface down events generated for HSRP
virtual interface.
IY43169 Windows/UNIX HSRP interface is discovered as a lone device after
fix for IY38709.
IY48203 Windows/UNIX Don't add secondary interface to HSRP interface if its
the same MAC address.
Michael Webb, IBM Tivoli
Q1CA Distributed NetView / ITSA SVT
Email: mlwebb@us.ibm.com
Ext: (919) 224-1410, T/L: 687-1410
(Embedded image moved to file: pic20009.gif)Inactive hide details for
Maxime TRANNOY <MTRANNOY@fr.ibm.com>Maxime TRANNOY <MTRANNOY@fr.ibm.com>
(Embed (Embedded image moved to file: (Embedded image moved to
ded pic18656.gif) file: pic09538.gif)
image Maxime TRANNOY
moved <MTRANNOY@fr.ib To: nv-l@lists.us.ibm.com
to m.com> cc:
file: Sent by: nv-l@lists.us.ibm.com,
pic247 owner-nv-l@list owner-nv-l@lists.us.ibm.c
14.gif s.us.ibm.com om
) Subject: Re: [nv-l] VRRP
and
Netview
03/30/2004
02:43 AM
Please
respond
to nv-l
Hi Paul,
The Device are not routers but Nokia firewall.
In fact my seedile look like this
% VRRP for zone A
% VRRP for ZONE B
% VRRP for ZONE C
@IP for FW1 zone A (my management address)
@IP for FW2 zone B (my management address)
The kind of problem is for example:
The VRRP address for zone C is not discovered on my FW1 neither on my FW2 .
The command ovtopodump | grep @VRRP (for all the zone) return no lines.
But from time to time the VRRP addresses appear on other devices. But as
soon as netview discovered that the address does not belong to this device
netmon delete the interface and my node goes down.
Cordialement.
Maxime TRANNOY
IGS - Network Delivery Support Center
Tel : +33 (0) 492 114 767
mailto:mtrannoy@fr.ibm.com
|---------+---------------------------->
| | Paul |
| | <pstroud@bellsout|
| | h.net> |
| | Sent by: |
| | owner-nv-l@lists.|
| | us.ibm.com |
| | |
| | |
| | 24-03-2004 20:38 |
| | Please respond to|
| | nv-l |
| | |
|---------+---------------------------->
>--------------------------------------------------------------------------------------------------------------------------------------------------|
|
|
| To: nv-l@lists.us.ibm.com
|
| cc:
|
| Subject: Re: [nv-l] VRRP and Netview
|
|
|
|
|
>--------------------------------------------------------------------------------------------------------------------------------------------------|
This sounds like a duplicate IP address problem, are you discovering
the device via the VRRP interface, if so, I would suggest using the
loopback address of the router for discovery.
Paul
Maxime TRANNOY wrote:
>
>
>Hi,
>
>I have nokia's FW with VRRPs.
>To defined the VRRP for Netview, I put a % in front a each VRRP address in
>the seed file.
>My problem is that the VRRP of this Firewall are not discovered and from
>time to time appeared and disappeared on other Nodes than my FW.
>And when they appeared on this devices a few second after I received a
Node
>Down from this device because netview can not reach the IP address which
>appear on the device.
>Do you have any issues on this problem?
>
>
>
>
>
>Cordialement.
>
>Maxime TRANNOY
>
>
>
>
#### pic20009.gif has been removed from this note on March 30, 2004 by
Michael Webb
#### pic24714.gif has been removed from this note on March 30, 2004 by
Michael Webb
#### pic18656.gif has been removed from this note on March 30, 2004 by
Michael Webb
#### pic09538.gif has been removed from this note on March 30, 2004 by
Michael Webb
pic07225.gif
Description: GIF image
pic30697.gif
Description: GIF image
pic11328.gif
Description: GIF image
pic10296.gif
Description: GIF image
|
