I wonder if there is a way to automatically audit every AP after it is detected. I assumed that when APs were detected and then polled the very first time, they should be automatically audited (i.e, their configs are stored on ADSP), but they are not. RFMS did so, by the way. The problem is that my customer has about 2000+ AP5131, and selecting them by hand and then auditing them is simply not an option -it takes ages!
Auto-audit for many APs?// Expert user has replied. |
4 Replies
Many customers use ADSP to monitor for configuration changes on the AP infrastructure. A core component of this is to automatically audit the device upon the first data collection after discovery. The infrastructure is audited automatically when the polling profile inherited to the device is set to Enabled for "Device Configuration Management" and "Audit Only". Once the data collection happens the system will monitor for device configuration changes and store the baseline configuration on ADSP database. If template based configuration management is used it would require a configuration push before having a baseline configuration to ensure it is running configuration compliant with the expected template.
These are exactly the settings I tested (with just 3 APs, not all of the 2000) "Audit only". I also temporary set Polling interval to 1 minute, just to be sure I did not have to wait for one hour to get APs polled and see the results. Then again, after actually 10 minutes (so 10 pollings should have been happened) APs were not audited. I have to say that I did not discover the APs using SNMP Discovery, instead I used a remote file containing their name, MAC, IP, etc... This is what my customer wants, I actually have another post on devcentral about this. When this file is imported (via SCP, which fyi can be used with smxmgr user), all three are displayed with a red cross, but after one minute (after being polled for the first time) they have this cross removed. However, they are not audited: I know this because FW version is not shown. If I audit them by hand, then yes the FW version is properly displayed. I have then to test discovering them via SNMP and see if they get audited, as you mentioned. thanks!
Nice feature to have. You should GRIP this. Mark
So my assumption was wrong... LOL OK, I'll write the GRIP. Is there someone else (that has thousands of APX131 managed by ADSP) who would like to subscribe to this GRIP?