[tac_plus] TAC+ and Solarwinds Orion NCM don't play well together

[Daniel Schmidt]

Rancid isn't PCI compliant, but TAC+ is?

On Tue, Oct 20, 2015 at 6:01 PM, Heasley <heas at shrubbery.net> wrote:

>
>
> > Am 20.10.2015 um 13:12 schrieb Matt Almgren <matta at surveymonkey.com>:
> >
> > So we moved away from Rancid for something that is more PCI compliant.
> So far so good, until very recently we see this problem.
> >
> > I have 26 juniper devices in a job in Orion NCM.  For some reason, for
> the last week, the daily backup job reports that 8-10 devices were “unable
> to login” or “connection refused”. However, when I switch Orion NCM to use
> local Admin logins on the Junipers versus TAC+ accounts, I see no errors.
>  Something with the communication between the network devices and TAC+
> isn’t playing nice together.
> >
> > I’ve tried the following:
> >
> > Increased the SSH Timeout settings on Orion to 120 seconds.
> > Decreased the # of concurrent connections from default 11 to 1.
> > Reinstalled Orion Job Engine + other tweaks on the Orion NCM side.
> > Tried only Juniper devices, or only Arista devices, or 8 instead of 27
> devices = all had mixed failures.
> >
>
> How many concurrent jobs did you use eirh rancid?
>
> > None of the failures are consistent.  Job 1 has 8/27 failures.  Job 2
> has 10/27 failures with some that failed in the first job passing in this
> one.  Etc…
> >
> > Remember, local NAS accounts setup in Orion work just fine – TAC+ isn’t
> even talked to when this happens.
> >
> > Is there any tuning I can do to the TAC+ server to make sure its able to
> handle the connections?   What debug log level should I be looking at to
> get the best information?  I’ve tried 24, 60, and even the higher ones, but
> they’re too noisy.
> >
> >
> > —
> > Matt Almgren, Sr. Network Engineer
> > [cid:29988614-ECDA-44BA-8377-ABD3ACFBCD1C]
> > 101 Lytton Avenue, Palo Alto, CA 94301
> > m: 408.499.9669
> > www.surveymonkey.com
> > -------------- next part --------------
> > An HTML attachment was scrubbed...
> > URL: <
> http://www.shrubbery.net/pipermail/tac_plus/attachments/20151020/1db9bcf7/attachment.html
> >
> > -------------- next part --------------
> > A non-text attachment was scrubbed...
> > Name: 7B2F1B3D-E309-404C-ADEF-2AE84F8259F4[35].png
> > Type: image/png
> > Size: 8698 bytes
> > Desc: 7B2F1B3D-E309-404C-ADEF-2AE84F8259F4[35].png
> > URL: <
> http://www.shrubbery.net/pipermail/tac_plus/attachments/20151020/1db9bcf7/attachment.png
> >
> > _______________________________________________
> > tac_plus mailing list
> > tac_plus at shrubbery.net
> > http://www.shrubbery.net/mailman/listinfo/tac_plus
> _______________________________________________
> tac_plus mailing list
> tac_plus at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo/tac_plus
>

-- 

E-Mail to and from me, in connection with the transaction 
of public business, is subject to the Wyoming Public Records 
Act and may be disclosed to third parties.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/tac_plus/attachments/20151021/e6a41939/attachment.html>