Submit a ticketCall us

Announcing NPM 12.2
With NPM 12.2 you can monitor your Cisco ASA firewalls, to monitor VPN tunnels for basic visibility and troubleshooting tunnels. NPM 12.2 also uses the SolarWinds Orion Installer so you can easily install and upgrade one or more Orion Platform products simultaneously.
See new features and improvements.

Home > Success Center > Network Configuration Manager (NCM) > NCM missing support for Cisco device Enable levels

NCM missing support for Cisco device Enable levels

Table of contents
No headers

Issue:

In NCM 7.3, in backing up Cisco config files, the software user can no longer set a specific Enable level at which NCM would operate.

The level of access the account has is generally set in the User configuration in the device or the authentication server and not during a login process.

However, if the login practice in ones environment, even outside of NCM would be to enter "enable 15" , for example, to get into enable mode then the following solution would be sufficient.  It should be a very rare case one would need to do this.

 

Before making any changes to the template, be sure to validate with the following queustion:

 

When accessing the device outside of NCM, when required to log into the enable level, do you type just "en" or do you type out, enable with a numeric value?

if just "en" or "enable" no changes are required.

if they do actually type out the numeric value of the permission level then see the solution below

Solution:

Edit the device template for Cisco devices to include an Enable command. For example, to make NCM capable of accessing devices at Enable level 3, add this line:

<Command Name="EnableCommand" Value="enable 3"/>

Save the template with a name that indicates the change. Only use this template with a device that requires Enable level 3.

Note: This Enable value has potential to limit the function of  NCM based on the level. A level less than 15 should be configured at the device or authentication server level as opposed to the device template to prevent varying permission issues from one device to another.

Last modified
14:20, 13 Nov 2015

Tags

Classifications

Public