RMON Alarms

October 30, 2008 at 3:11 am | Posted in System Management | Leave a comment

Configuration

Rack1R1#sh run | in snmp|rmon

snmp-server ifindex persist ! to ensure int index does not change after reload

! Note for triggering SNMP traps via RMON, we do not need to enable trap explicitly.

snmp-server host 155.1.146.100 CISCO
rmon event 1 log trap CISCO description “VLAN146 Interface Congested” owner CISCO
rmon event 2 log trap CISCO description “VLAN146 Interface UnCongested” owner CISCO
rmon alarm 1 ifInUcastPkts.1 60 delta rising-threshold 100 1 falling-threshold 50 2 owner CISCO

Verification

Rack1R1#debug snmp packets
SNMP packet debugging is on

*Mar  1 01:58:14.871: %RMON-5-FALLINGTRAP: Falling trap is generated because the value of ifInUcastPkts.1 has fallen below the falling-threshold value 50
*Mar  1 01:58:14.875: SNMP: Queuing packet to 155.1.146.100
*Mar  1 01:58:14.875: SNMP: V1 Trap, ent rmon, addr 155.1.146.1, gentrap 6, spectrap 2
alarmEntry.1.1 = 1
alarmEntry.3.1 = ifInUcastPkts.1
alarmEntry.4.1 = 2
alarmEntry.5.1 = 0
alarmEntry.8.1 = 50
*Mar  1 01:58:15.603: SNMP: Packet sent via UDP to 155.1.146.100
*Mar  1 01:58:15.855: SNMP: Packet sent via UDP to 155.1.146.100

Rack1R6#ping 155.1.146.1 rep 10000

Type escape sequence to abort.
Sending 10000, 100-byte ICMP Echos to 155.1.146.1, timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Rack1R1#
*Mar  1 01:59:15.047: %RMON-5-RISINGTRAP: Rising trap is generated because the value of ifInUcastPkts.1 exceeded the rising-threshold value 100
*Mar  1 01:59:15.051: SNMP: Queuing packet to 155.1.146.100
*Mar  1 01:59:15.051: SNMP: V1 Trap, ent rmon, addr 155.1.146.1, gentrap 6, spectrap 1
alarmEntry.1.1 = 1
alarmEntry.3.1 = ifInUcastPkts.1
alarmEntry.4.1 = 2
alarmEntry.5.1 = 3226
alarmEntry.7.1 = 100
*Mar  1 01:59:15.303: SNMP: Packet sent via UDP to 155.1.146.100

DOC CD Navigation

Advertisements

Leave a Comment »

RSS feed for comments on this post. TrackBack URI

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Create a free website or blog at WordPress.com.
Entries and comments feeds.

%d bloggers like this: