Server-startup fails
Cause: During the previous run, if you had terminated the server abruptly or there was an unclean shutdown, some of the server processes would not have been terminated and the MySQL server instance would continue to run in the system.
Solution: Forcefully terminate the MySQL Server instance (mysqld-nt.exe in Windows, mysqld in Linux).
When I uninstall the product in windows, some folders are not getting deleted.
Cause: This usually happens when you try to uninstall the product immediately after shutting down the Network Configuration Manager server.
Solution: Ensure that you uninstall the product only after the MySQL Server instance (mysqld-nt.exe process in Windows Task Manager) has been terminated completely after the server shutdown.
After Network Configuration Manager server startup, I am prompted to accept a security certificate. Why?
Cause & Solution: After Network Configuration Manager server startup, a browser is launched for connecting web interface. Since Network Configuration Manager uses secure http, the security certificate is prompted. You need to accept the security certificate for connecting to the client.
How do I move Network Configuration Manager installation from one machine to another?
If you want to move the Network Configuration Manager installed in one machine to another, follow the procedure detailed below:
Prerequisite:
Do not remove existing installation of Network Configuration Manager until the new installation works fine. This is to ensure backup, to overcome disasters/data corruption during the movement.
Procedure:
Can I change the default port 6060 occupied by Network Configuration Manager?
Yes, you can change the default port as explained below:
While trying to connect web-client, I see a blank page with five small square boxes on top. Why?
Cause & Solution: In Internet Explorer, if you have tried to connect client using http://<host>:6060, this issue will arise. Since the Network Configuration Manager server and the Web Interface communicate through https, make sure that you connect to https://<host>:6060 (secure http).
I am unable to access Network Configuration Manager Web Interface (while starting the server thyrough tray-icon/commandline mode). Why?
Cause 1 & Solution: Incomplete server start-up
Ensure that the server has successfully started. This can be verified by the presence of the message "Server started in :: [xyz ms]" in the console. Connect to the web client after seeing this message.
Cause 2 & Solution: Wrong URL
Network Configuration Manager server and the Web Interface communicate through http. So ensure the URL contains HTTPS.
https://<hostname>:port/
For e.g. https://localhost:6060
Cause 3 & Solution: Do you see any "FAILED" message in the Server Console?
Check the log files available under <Network Configuration Manager_Home>/logs directory. If you find any exceptions, please send the log files to Network Configuration Manager Support.
While trying to connect web interface, I get the message "Problem in starting TFTP Server. Free the port "69".
Cause: TFTP port required by Network Configuration Manager is not free.
Solution: Free the port and then start Network Configuration Manager. In case, you are running ManageEngine OpManager or ManageEngine WiFiManager in the same machine as that of Network Configuration Manager, carryout the following changes to free the TFTP port.
Check if the TFTP service is running when OpManager/WiFiManager is running. If yes, comment out the following lines in NmsProcessesBE.conf located in <OpManager_Home>/conf or <WiFiManager_Home>/conf directory as shown below:
#java com.adventnet.nms.tftp.NmsTftpServer [TFTP_ROOT_DIRECTORY dir] [PORT portNo]
#PROCESS com.adventnet.nms.tftp.NmsTftpServer
#ARGS TFTP_ROOT_DIRECTORY /
Save the file and restart OpManager/WiFiManager. Then start Network Configuration Manager.
I forgot the password to login to Web Interface
You can a get a new password for an account using the Login Name and Email Id of that account (the Email id should match with the one that was configured for the user earlier)
How do I change the password of my login account?
While invoking deviceexpert.bat portcheck or sh deviceexpert.sh portcheck, I get a message like the one below:
-----------------------------
Port Availability Module
-----------------------------
6060 No Client
43306 No mysql
69 No TFTP
514 No Syslog
####################################################
Server is already running
Connect to https://localhost:6060 to view the client
####################################################
Press any key to continue . . .
Cause & Solution: Since all the ports required by Network Configuration Manager are not free, it indicates that Network Configuration Manager
server is already running. Try connecting to https://localhost:6060 to view the web interface
My Web Interface looks crippled
Cause 1 & Solution: Incompatible Browser
Refer to the Network Configuration Manager System Requirements, and check whether your browser is supported.
Cause 2 & Solution: JavaScript not enabled
JavaScript has to be enabled in your browser to work with the Web Interface.
Alignment in web interface is not proper
Cause: This could be a problem with browser cache
Solution: Close all browser instances, clear cache and cookies and connect a new instance. If the problem still persists, contact Network Configuration Manager support.
I have my devices listed in a text file. Can I import them to the inventory of Network Configuration Manager?
Network Configuration Manager provides the option to import devices from a text file and add them to the inventory. To import devices from a text file, Network Configuration Manager requires that the entries in the file conform to a specific format. For more details, refer to the section on "Device Addition" in help documentation.
Can I apply same set of credentials to multiple devices as a bulk operation?
Yes. You can apply the same set of credentials 'as they are' to multiple devices. In such cases, to avoid the cumbersome task of entering the credentials for each device separately, Network Configuration Manager offers the flexibility of creating common credentials and sharing the common credentials among multiple devices. This is called as 'Credential Profile'. For more details, click here.
How does Network Configuration Manager help me in keeping track of configuration changes?
One of the ways to detect configuration changes in a device is by monitoring syslog messages. Many devices generate syslog messages whenever their configuration undergoes a change. By listening to these messages, it is possible to detect any configuration change in the device. This comes in handy for administrators to keep track of the changes being made and to detect any unauthorized changes.
Network Configuration Manager leverages this change notification feature of devices to provide real-time change detection and tracking. A syslog server comes in-built with Network Configuration Manager. It occupies port 514.
Besides the real-time change detection, configuration changes could also be tracked through scheduled, periodic backup of device configuration. For more details refer to the section "Configuration Change Detection" in help documentation.
I have enabled syslog-based change detection for my device. But the product does not seem to detect any configuration changes.
Configuration change messages will be generated only at certain logging levels. So check if the logging level in the device is set to one of the values listed in the "Syslog Config for Change Detection" - logging level drop-down. Also, ensure if syslog server is running and the syslog port (514) is free for Network Configuration Manager's use.
Configuration Backup Fails (or) Credentials Test option fails
Cause & Solution:
(1) Check if the device is up and accessible to the Network Configuration Manager server
(2) The device is unable to transfer the configuration file to the TFTP server run by Network Configuration Manager. The reasons for this could be:
(3) Check if you are able to do a manual backup by connecting to the device directly:
Information on who changed the configuration is not available in reports for some devices. Why?
Network Configuration Manager registers information on 'who changed' the configuration in the following cases:
In other cases such as scheduled configuration backup and manual backup, 'who changed' information will not be available. At present, Network Configuration Manager does not support real-time change detection for Cisco CatOS devices. Hence, for those devices, if the changes are carried out outside of Network Configuration Manager, 'who changed' information will not be available.
When I use Telnet-TFTP option, configuration backup fails repeatedly. Why?
Cause: You would face this scenario if the device credentials are incorrect
Solution: Make sure that credentials are correct. Test the same using "Testing" option available in that screen. The test result will show which credentials are wrong. Change them accordingly. In case, you are not able to get it working even after ensuring this, send your log files to Network Configuration Manager Support for further assistance.
How secure are our data in Network Configuration Manager? What is the encyption standard used by Network Configuration Manager for storing sensitive data in the database?
I want to prevent unauthorized configuration changes to my core devices.
You can make use of the 'Change Management' feature of Network Configuration Manager. For more details refer to the section "Configuration Change Management " in help documentation.
What happens when I click the 'Mark as EOL' link in the GUI of end-of-life report?
Network Configuration Manager collects EOL/EOS status of devices from the vendor websites and bulletins. In case, you find any of your device status incorrectly marked here, you can notify Network Configuration Manager support by clicking the "Mark as EOL" link in the GUI.
This will trigger an E-Mail to Network Configuration Manager support for marking the device status as EOL. The E-Mail contains only the series, model and vendor details and no other details are transferred. The E-Mail is also copied to the user, who triggers this alert. Until Network Configuration Manager marks it as EOL/EOS, it will be labeled as "Marked as EOL" in the local database.
Can we install our own SSL certificate? How?
Yes, you can install your own SSL certificates in Network Configuration Manager. Please follow the steps below to do that:
Network Configuration Manager runs as a HTTPS service. It requires a valid CA-signed SSL certificate with the principal name as the name of the host on which it runs. By default, on first time startup, it creates a self signed certificate. This self signed certificate will not be trusted by the user browsers. Thus, while connecting to Network Configuration Manager, you need to manually verify the certificate information and the hostname of Network Configuration Manager server carefully and should force the browser to accept the certificate.
To make the Network Configuration Manager server identify itself correctly to the web browser and the user:
You can use OpenSSL or keytool (bundled with Java) to create your certificates, get them signed by a CA and use them with Network Configuration Manager. The choice of which tool to use is yours, based on what your security administrators say. Detailed instructions on using both the tools are provided here. If you already have a certificate signed by a CA, then we recommend using OpenSSL to create the keystore and configure it in Network Configuration Manager (steps 4 and 5 in the instructions below).
OpenSSL is available bundled with most of the Linux distributions. If you have Windows and do not have OpenSSL installed, download it from http://www.slproweb.com/products/Win32OpenSSL.html. Make sure the 'bin' folder under the OpenSSL installation is included in the 'PATH' environment variable.
Step 1: The first step is to create the public-private key pair that will be used for the SSL handshake
Step 2: Create a Certificate Signing Request (CSR) for submission to a certificate authority to create a signed certificate with the public key generated in the previous step.
Step 3 : Submit the CSR to a Certificate Authority (CA) to obtain a CA signed certificate
Step 4: Import the CA-signed certificate to a keystore
Step 5: Finally, configure the Network Configuration Manager server to use the keystore with your SSL certificate
Step 1: The first step is to create the public-private key pair that will be used for the SSL handshake
Step 2: Create a Certificate Signing Request (CSR) for submission to a certificate authority to create a signed certificate with the public key generated in the previous step.
Step 3 : Submit the CSR to a Certificate Authority (CA) to obtain a CA signed certificate
Step 4: Import the CA-signed certificate to the Network Configuration Manager server
Step 5: Finally, configure the Network Configuration Manager server to use the keystore with your SSL certificate
Note : Tomcat by default accepts only the JKS (Java Key Store) and PKCS #12 format keystores. In case, the keystore is of PKCS #12 format, include the following option in the server.xml file along with the keystore name, keystoreType="PKCS12?This tells tomcat that the format is PKCS12. Restart the server after this change.
To enable SSL in NCM for versions 123181 and above, refer here
Note : Please refer your CA's documentation for more details and troubleshooting
When I try to import users from AD, the operation fails ...
Following are the possible causes for AD import failure:
Can Network Configuration Manager be configured to use HTTP mode instead of HTTPS?
Yes, Network Configuration Manager can be configured to use HTTP instead of HTTPS. To do this, changes have to be made in the server.xml file present under <Network Configuration Manager_Installation_Folder>/conf directory. Follow the steps detailed below:
I deleted a user that had created some of the groups and now the groups are gone.
Cause & Solution: The user might have created "Private DeviceGroups", which are user specific data. So, when you delete a user, the "Private DeviceGroups" created by that user will get deleted. However, the "Public DeviceGroups" created by the user will not get deleted.
Mail sent from product does not reach the intended recipient
Cause: Mail settings might be incorrect
Solution:(1) Verify Mail Server settings and test the same using "Test" option.
(2) Also, check if the default from address is properly configured in Mail Settings page. Some mail servers will reject the mail if the from address is invalid or does not exist at all.
(3) Check if you are able to send emails from Reports ---> Email option. Mails will be sent instantly. If you do not receive mails, contact Network Configuration Manager support.
'Upload' button present in the 'View Draft Details' / 'View Config File Details' pages are shownn as 'disabled'
Cause & Solution:
The 'Upload' button will be shown as disabled in the following two scenarios:
(1) When the viewing configuration is a current configuration
(2) When the viewing configuration type Upload is not supported by the device
So, check if you have disabled it in the above scenarios.
Can I receive automatically generated reports on Device Configuration in my mailbox?
Yes, Network Configuration Manager provides option to mail reports to email IDs. You can schedule reports to be generated at any point of time and reports will be mailed to your email ID.
Can Network Configuration Manager generate email alerts?
Yes, Network Configuration Manager can be configured to send email alerts whenever there happens a change in configuration. For more details refer to the section "Change Management" in help documentation.
Does Network Configuration Manager maintain historical data about Device Configuration?
'Yes it maintains historical data of device configuration. The historical data are available in the device properties page of each device. For more details refer to the section "Device Configuration Details" in help documentation.
Can I replace the JRE bundled with Network Configuration Manager? How?
Yes, you can replace the bundled JRE with any other desired version.
Note: The JRE being replaced should correspond to the OS in which Network Configuration Manager is running. For example, if Network Configuration Manager is running in Windows, you need to install the JRE for Windows only.
I have created a scheduled task for Network Configuration Manager Database Backup. But, the task fails to execute. I get a notification saying "Error occurred while executing the scheduled database backup operation". Why?
During MySQL database backup, some temporary files are created by MySQL process, which are sometimes denied by the virus scanner softwares. Exempting Network Configuration Manager installation folder from virus scans should solve this issue. If it is not excluded, database backup might fail. In case, it is not possible to exclude the entire Network Configuration Manager installation directory from scans, exclude at least <Network Configuration Manager Installation Folder>/MySQL from scanning. Database backup will work fine.
If the issue persists even after ensuring the above, contact Network Configuration Manager Support.
What is ManageEngine Network Configuration Manager?
ManageEngine Network Configuration Manager is a comprehensive Network Change and Configuration Management (NCCM) solution that enables the Network Administrator to efficiently and effortlessly manage the configurations of Network Devices. Network Configuration Manager offers multi-vendor network device configuration, continuous monitoring of configuration changes, notifications on respective changes, detailed operation audit and trails, examining device configurations for compliance to a defined set of policies and standards, real-time compliance status reporting, easy and safe recovery to trusted configurations, automation of configuration tasks and insightful reporting. For more details, click here.
What does Network Configuration Manager do?
Network Configuration Manager can manage network devices such as switches, routers, firewalls wireless access points and integrated access devices etc. from multiple vendors such as Cisco, HP, Nortel, Juniper, Force10, 3Com, D-link, Foundry, Dell, Aruba, Extreme, ADTRAN, Enterasys, Huawei, Blue Coat, Proxim, NetScreen, NETGEAR, FortiNet, ALAXALA, Brocade, Radware, DAX, H3C, Yamaha, Vanguard, Allied Telesis, Alcatel. It discovers network devices, builds up an inventory database and allows IT administrators to take control of configuring the devices from a central console. The web-based administrator console provides the User Interface to perform all the configuration operations. Additionally, it can be accessed from anywhere using any standard web browser.
Can Network Configuration Manager Manage the Configurations of Cisco Devices?
Yes, Network Configuration Manager can manage the configurations of cisco devices. Cisco router configuration, Cisco switch configuration and Cisco firewall configuration can be done using Network Configuration Manager. Apart from cisco devices, Network Configuration Manager can be used to manage the configurations of switches, routers, firewalls, wireless access points and integrated access devices from other vendors such as HP, 3com, Foundry, FortiGate and NetScreen.
Can Network Configuration Manager be used to manage router configuration / switch configuration / firewall configuration?
Yes, Network Configuration Manager can be used to manage router configuration, switch configuration and firewall configuration from multiple vendors such as Cisco, HP, Nortel, Juniper, Force10, 3Com, D-link, Foundry, Dell, Aruba, Extreme, ADTRAN, Enterasys, Huawei, Blue Coat, Proxim, NetScreen, NETGEAR, FortiNet, ALAXALA, Brocade, Radware, DAX, H3C, Yamaha, Vanguard, Allied Telesis, Alcatel.
What are the devices supported by Network Configuration Manager?
Network Configuration Manager at present supports switches, routers, firewalls, wireless access points and integrated access devices. For new device support, send your request.
What are the vendors supported by Network Configuration Manager?
Network Configuration Manager at present supports Cisco, HP, Nortel, Juniper, Force10, 3Com, D-link, Foundry, Dell, Aruba, Extreme, ADTRAN, Enterasys, Huawei, Blue Coat, Proxim, NetScreen, NETGEAR, FortiNet, ALAXALA, Brocade, Radware, DAX, H3C, Yamaha, Vanguard, Allied Telesis, Alcatel. For new vendor support, send your request.
Is Network Configuration Manager available for evaluation or direct purchasing?
Network Configuration Manager is available for both evaluation and direct purchase. Please contact our sales team at +1-888-720-9500 or email sales@manageengine.com.
Do I need any prerequisite software to be installed before using Network Configuration Manager?
There is no prerequisite software installation required to use Network Configuration Manager. MySQL, TFTP server and Syslog server are bundled with the product itself. If you want to received change management notifications via email, you need to configure an external SMTP server (optional).
What is the Licensing Policy for Network Configuration Manager?
Do I have to reinstall Network Configuration Manager when moving to the Professional Edition?
No. You need not have to reinstall or shut down the server. You just need to enter the new license file in the "Register" link present in the top right corner of the Network Configuration Manager web interface.
I do not see "Register" link on the top-right hand corner of Network Configuration Manager GUI. How do I apply the license?
In Network Configuration Manager GUI, navigate to Admin >> Rebranding Settings and uncheck the textbox "Hide the links Register, About, Feedback". This would enable the Register button at the top right corner.
What are the browser versions supported by Network Configuration Manager?
Web Interface requires one of the following browsers** to be installed in the system:
** Network Configuration Manager is optimized for 1024 x 768 resolution and above
What are the System Configuration Requirements for Network Configuration Manager?
Refer to the information available in the System Requirements section.