ACE SNMP

Hi All
Currently we have the context name set up correctly but it inherits the admin's context sysname in our monitoring system.
Is there a way to set up a host name for the context with out the admin context or is there any other way to do this?
So when viewing the SNMP messages we can see the ADMIN name at the beginning of the SNMP message.
Regards Craig

Hi Craig,
I think that this is what you are looking for:
http://www.cisco.com/en/US/customer/docs/interfaces_modules/services_modules/ace/vA5_1_0/configuration/system/message/guide/config.html#wp1060131
Cesar R
ANS Team

Similar Messages

ACE - SNMP OBJECT not-accesible

Hello,
I'm trying to monitor certain SNMP Objects from the CISCO-SLB-MIB but I'm getting a permission "not-accesible" from the NMS. Does anybody know what could be the problem?
Many thanks for your support.

An example of this is the object "slbServerFarmName" wich is "not-accesible" from the MIB definition. Then, what can i do to get this value from the ACE to my NMS??

ACE SNMP OIDs

Good afternoon
I need your help.
I´m trying to extract some information through SNMP queries to my ACE, specifically, in each serverfarm the rserver weight state (if he is OPERATIONAL or OUTOFSERVICE, etc), and the number of current conns he has.
Now I´ve been trying to find the Cisco OIDs to extract that info but with no luck.
I´ve managed to find out how to find the Hex-STRING that corresponds to each rserver.
For example, the rserver 10.134.53.111 which converted to hexadecimal is 0A 86 35 6F:
snmpwalk -v 2c -c dsws3g! 192.168.1.1 1.3.6.1.4.1.9.9.470.1.1.1.1.4 | grep 0A 86 35 6F
iso.3.6.1.4.1.9.9.470.1.1.1.1.4.9.8.69.83.66.45.70.69.48.49 = Hex-STRING: 0A 86 35 6F
After that I´ve searched in the CISCO cesRealServer table for the number of current conns and the correspondent OID concatenated with the rserver string discovered previously returns me the number of conns the rserver has:
snmpwalk -v 2c -c dsws3g! 10.167.2.227 1.3.6.1.4.1.9.9.470.1.1.1.1.19.9.8.69.83.66.45.70.69.48.49
iso.3.6.1.4.1.9.9.470.1.1.1.1.19.9.8.69.83.66.45.70.69.48.49 = Counter64: 99
The problem is that this rserver is being used in 2 different serverfarms, and the number of connections it returns me does not correspond to the number of connections of a specific farm...it seems to be adding the number of conns it currently has on both serverfarms.
How can I filter the results through each serverfarm?
I´ve found how to discover the correspondent OID to each serverfarm:
snmpwalk -v 2c -c dsws3g! 10.167.2.227 1.3.6.1.4.1.9.9.161.1.4.2.1.2.9 | grep TEST
iso.3.6.1.4.1.9.9.161.1.4.2.1.2.9.76 = STRING: "TEST-HTTP"
iso.3.6.1.4.1.9.9.161.1.4.2.1.2.9.77 = STRING: "TEST-HTTPS"
but I don´t know how to match all this info in order to get the data I need.
I apreciate your input.

Ok, so after a couple of hours searching for the right OID tree I finally found it: cesServerFarmRserverTable:
http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?local=en&translate=Translate&objectInput=1.3.6.1.4.1.9.9.470.1.1.3.1#oidContent
Here you can get the data you need from a rserver from a specific serverfarm

ACE SNMP cesRserverTotalConns "There is no such variable name in this MIB"

I have an ACE 4710 appliance currently running version A3(2.6), though earlier revisions had the same behavior. I am able to query some parts of the CISCO-ENHANCED-SLB-MIB, but others result in "(noSuchName) [t]here is no such variable name in this MIB." For instance, I can successfully `snmpwalk` cesRserverOperStatus, cesRserverStatechangeDescr, and several other OIDs, but not cesRserverTotalConns, cesRserverFailedConns, nor cesRserverCurrConns. I've also tried `snmpget` of specific real servers with the same results. Things like OperStatus and IpAddress work, but Total, Failed, and CurrConns do not.
Here is an snmp debug from the ACE:
First, a query that works:
2010 Aug 23 18:19:46.930481 snmpd[1372]: (ctx:3)asn_parse_objid :   from asn1.c asn_objid, length is 0
2010 Aug 23 18:19:46.930582 snmpd[1372]: (ctx:3)178189364.000000:iso.3.6.1.4.1.9.9.470.1.1.1.1.14.1.4.116.101.115.116 = NULL SNMPPKTEND
2010 Aug 23 18:19:46.931635 snmpd[1372]: (ctx:3) SNMPPKTSTRT: 0.000000 160 178189364.000000 0.000000 0.000000 0.000000 0 0 1 1 0   <removed-community-for-security> 12 0 0 0.000000 0.000000 0.0.0.0 0 0 0 0 0 0 0 19
2010 Aug 23 18:19:46.931661 snmpd[1372]: (ctx:3)snmpv3_get_engineID : context id in snmpv3_get_engineID = 3
2010 Aug 23 18:19:46.931683 snmpd[1372]: (ctx:3)snmpv3_get_engineID : length in snmpv3_get_engineID = 9
2010 Aug 23 18:19:46.931725 snmpd[1372]: (ctx:3)snmpv3_get_engineID : context id in snmpv3_get_engineID = 3
2010 Aug 23 18:19:46.931747 snmpd[1372]: (ctx:3)snmpv3_get_engineID : length in snmpv3_get_engineID = 9
2010 Aug 23 18:19:46.931780 snmpd[1372]: (ctx:3)var_cesRserverTable : var_cesRserverTable : Request 1 length = 20
2010 Aug 23 18:19:46.931803 snmpd[1372]: (ctx:3)var_cesRserverTable : GET: rservNameLen = 4 groupSubtreeLen 4
2010 Aug 23 18:19:46.931824 snmpd[1372]: (ctx:3)var_cesRserverTable : GET: Incoming rservName test
2010 Aug 23 18:19:46.931846 snmpd[1372]: (ctx:3)var_cesRserverTable :   GET rservname test magic 17
2010 Aug 23 18:19:46.931384 snmpd[1372]: (ctx:3)var_cesRserverTable : rs name from tnrpc : test and rs ip 192.0.2.1
2010 Aug 23 18:19:46.931424 snmpd[1372]: (ctx:3)var_cesRserverTable : tnrpc mesg recv successful from rservers stub code
2010 Aug 23 18:19:46.931446 snmpd[1372]: (ctx:3)var_cesRserverTable : *length 20 rservertype 2 ipaddresstype 1 description
2010 Aug 23 18:19:46.931504 snmpd[1372]: (ctx:3)178189364.000000:iso.3.6.1.4.1.9.9.470.1.1.1.1.14.1.4.116.101.115.116 = STRING: "ARP-FAILURE" SNMPPKTEND
2010 Aug 23 18:19:46.931548 snmpd[1372]: (ctx:3) SNMPPKTSTRT: 0.000000 162 178189364.000000 0.000000 0.000000 0.000000 0 0 1 1 0   <removed-community-for-security> 12 0 0 0.00000
Next, a query that does not work:
2010 Aug 23 18:20:55.096428 snmpd[1372]: (ctx:3)asn_parse_objid :   from asn1.c asn_objid, length is 0
2010 Aug 23 18:20:55.096531 snmpd[1372]: (ctx:3)497544101.000000:iso.3.6.1.4.1.9.9.470.1.1.1.1.17.1.4.116.101.115.116 = NULL SNMPPKTEND
2010 Aug 23 18:20:55.096577 snmpd[1372]: (ctx:3) SNMPPKTSTRT: 0.000000 160 497544101.000000 0.000000 0.000000 0.000000 0 0 1 1 0   <removed-community-for-security> 12 0 0 0.000000 0.000000 0.0.0.0 0 0 0 0 0 0 0 19
2010 Aug 23 18:20:55.096603 snmpd[1372]: (ctx:3)snmpv3_get_engineID : context id in snmpv3_get_engineID = 3
2010 Aug 23 18:20:55.096625 snmpd[1372]: (ctx:3)snmpv3_get_engineID : length in snmpv3_get_engineID = 9
2010 Aug 23 18:20:55.095827 snmpd[1372]: (ctx:3)snmpv3_get_engineID : context id in snmpv3_get_engineID = 3
2010 Aug 23 18:20:55.095849 snmpd[1372]: (ctx:3)snmpv3_get_engineID : length in snmpv3_get_engineID = 9
2010 Aug 23 18:20:55.095883 snmpd[1372]: (ctx:3)var_cesRserverTable : var_cesRserverTable : Request 1 length = 20
2010 Aug 23 18:20:55.095905 snmpd[1372]: (ctx:3)var_cesRserverTable : GET: rservNameLen = 4 groupSubtreeLen 4
2010 Aug 23 18:20:55.095927 snmpd[1372]: (ctx:3)var_cesRserverTable : GET: Incoming rservName test
2010 Aug 23 18:20:55.095948 snmpd[1372]: (ctx:3)var_cesRserverTable :   GET rservname test magic 26
2010 Aug 23 18:20:55.106549 snmpd[1372]: (ctx:3)var_cesRserverTable : rs name from tnrpc : test and rs ip 192.0.2.1
2010 Aug 23 18:20:55.106580 snmpd[1372]: (ctx:3)var_cesRserverTable : tnrpc mesg recv successful from rservers stub code
2010 Aug 23 18:20:55.106602 snmpd[1372]: (ctx:3)var_cesRserverTable : *length 20 rservertype 2 ipaddresstype 1 description
2010 Aug 23 18:20:55.106669 snmpd[1372]: (ctx:3)497544101.000000:iso.3.6.1.4.1.9.9.470.1.1.1.1.17.1.4.116.101.115.116 = NULL SNMPPKTEND
2010 Aug 23 18:20:55.105723 snmpd[1372]: (ctx:3) SNMPPKTSTRT: 0.000000 162 497544101.000000 0.000000 2.000000 1.000000 0 0 1 1 0   <removed-community-for-security> 12 0 0 0.0000
I have reviewed the Cisco ACE 4700 Series Appliance Administration Guide - Configuring SNMP document and read the "SNMP Limitations" which states "[i]f an SNMP MIB table has more than one string index that contains more than 48 characters, the index may not appear in the MIB table when you perform an SNMP walk. According to SNMP standards, the SNMP requests, response, or traps cannot have more than 128 subidentifiers."
If that is the reason this doesn't work, could someone please more adequately explain the difference between querying the OperStatus versus the CurrConns when the OID I'm querying in each instance is the exact same length? And is there anything that I could change in my configuration so that I can query connection information with SNMP?
If that documented SNMP limitation is not the reason that those particular queries fail, does anyone have any idea what the problem might be and/or next steps I should take in troubleshooting and resolving the issue?

Are you using snmp v1? If so, please try snmp v2.
The following is the test result in my lab.
### snmp v1
lin168:~# snmpget -c cdn -v 1 1.164.0.51 .1.3.6.1.4.1.9.9.470.1.1.1.1.17.1.3.115.118.49
Error in packet
Reason: (noSuchName) There is no such variable name in this MIB.
Failed object: SNMPv2-SMI::enterprises.9.9.470.1.1.1.1.17.1.3.115.118.49
### snmp v2
lin168:~# snmpget -c cdn -v 2c 1.164.0.51 .1.3.6.1.4.1.9.9.470.1.1.1.1.17.1.3.115.118.49
SNMPv2-SMI::enterprises.9.9.470.1.1.1.1.17.1.3.115.118.49 = Counter64: 251118
snmpwalk also works with snmp v2 as below.
lin168:~# snmpwalk -c cdn -v 2c 1.164.0.51 .1.3.6.1.4.1.9.9.470.1.1.1.1.17
SNMPv2-SMI::enterprises.9.9.470.1.1.1.1.17.1.3.115.118.49 = Counter64: 251118
SNMPv2-SMI::enterprises.9.9.470.1.1.1.1.17.1.3.115.118.50 = Counter64: 0
SNMPv2-SMI::enterprises.9.9.470.1.1.1.1.17.1.11.65.86.83.45.82.83.69.82.86.69.82 = Counter64: 0
SNMPv2-SMI::enterprises.9.9.470.1.1.1.1.17.1.12.65.86.83.45.82.82.83.69.82.86.69.82 = Counter64: 0
lin168:~#
ACE4710/Admin# show rserver
rserver              : sv1, type: HOST
state                : OPERATIONAL (verified by arp response)
                                                ----------connections-----------
       real                  weight state        current    total
   ---+---------------------+------+------------+----------+--------------------
   serverfarm: sf
       192.168.222.20:0      8      OPERATIONAL 0          251118
rserver              : sv2, type: HOST
state                : OPERATIONAL (verified by arp response)
                                                ----------connections-----------
       real                  weight state        current    total
   ---+---------------------+------+------------+----------+--------------------
   serverfarm: sf
       192.168.222.21:0      8      STANDBY      0          0
If you use snmp v1, the behavior looks expected since syntax is not convertable to SMIv1 as below.
It means you have to use snmp v2 if you want to get Total, Failed, and CurrConns MIBs.
### snmp v1 mib
cesRserverTotalConns OBJECT-TYPE
    SYNTAX --?? syntax is not convertable to SMIv1
           Counter
-- Units
--    connections
    ACCESS read-only
    STATUS mandatory
    DESCRIPTION
        "The total number of connections loadbalanced to
        this real server."
    ::= { cesRserverEntry 17 }
ftp://ftp.cisco.com/pub/mibs/v1/CISCO-ENHANCED-SLB-MIB-V1SMI.my
### snmp v2 mib
cesRserverTotalConns OBJECT-TYPE
    SYNTAX          Counter64
    UNITS           "connections"
    MAX-ACCESS      read-only
    STATUS          current
    DESCRIPTION
        "The total number of connections loadbalanced to
        this real server."
    ::= { cesRserverEntry 17 }
ftp://ftp.cisco.com/pub/mibs/v2/CISCO-ENHANCED-SLB-MIB.my
Regards,
Yuji

Cisco ACS SNMP Traps

Is it possible to send an SNMP trap from Cisco ACE 4710 for any configuration changes that occurs?
Regards,
Hesham

Hi Hesham,
these are the traps which are supported by ACE.
http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/vA5_1_0/configuration/administration/guide/snmp.html#wp1177230
read section "ACE SNMP Notifications (Traps)"
I do not see a trap which is useful for your requirement.
regards,
Ajay Kumar

Monitoring the Cisco ACE module with SNMP

We use 2 redundant Cisco ACE loadbalancer in our datacenter
The models are ACE20-MOD-K9 with software A2(2.0)
Does anybod know how to monitor the environment (cpu, memory) of such a module with snmp?
We were not able to find an applicable MIB for that module.
The CISCO-PROCESS-MIB.oid (ftp://ftp.cisco.com/pub/mibs/oid/CISCO-PROCESS-MIB.oid) seems not to reflect the correct oid's.
What are the correct oid's for cpu and memory?
Where can I find a detailed documentation for snmp-monitoring the cisco ace module?
thanks

Hi Patrik,
to monitor the ACE I use these two MIB's:
ftp://ftp.cisco.com/pub/mibs/v2/CISCO-SLB-MIB.my
ftp://ftp.cisco.com/pub/mibs/v2/CISCO-ENHANCED-SLB-MIB.my
Example for CPU:
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Normale Tabelle";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
cpmCPUTotalEntry 1.3.6.1.4.1.9.9.109.1.1.1.1
The resource usage and other interesting things you will find with a MIB browser.
Achim

Anm 4.1 support for receiving snmp traps from CSS / ACE

Hi
Does anyone have an ANM 4.1 installation that is accepting snmp traps from their CSSes / ACEs?
If I configure CSSes / ACEs to send snmp v1 traps to anm, they never appear in the Monitor -> Events view.
I've tried both the ANM 4.1 Virtual Appliance and ANM 4.1 running on RHEL and it seems that there's nothing listening on udp port 162 to receive the snmp traps.
From the virtual appliance:
admin# show ports
Process : java (5999)
     tcp: 0.0.0.0:40000, 0.0.0.0:40001, 127.0.0.1:10023, 0.0.0.0:10443, 0.0.0.0:
10003, 0.0.0.0:10004, 0.0.0.0:8443
     udp: 0.0.0.0:39182, 0.0.0.0:10003, 0.0.0.0:6120
Process : rpc.statd (2348)
     tcp: 0.0.0.0:834
     udp: 0.0.0.0:828, 0.0.0.0:831
Process : mysqld (3125)
     tcp: 0.0.0.0:3306
Process : java (5992)
     tcp: 0.0.0.0:10444, 0.0.0.0:10445
Process : portmap (2312)
     tcp: 0.0.0.0:111
     udp: 0.0.0.0:111
Process : monit (2779)
     tcp: 0.0.0.0:2812
Process : java (2952)
     tcp: :::40002
Process : java (2966)
     tcp: :::40003
Process : sshd (2625)
     tcp: :::22
Process : ntpd (2606)
     udp: 127.0.0.1:123, 0.0.0.0:123, ::1:123, :::123
I notice that port 443 isn't in here and I'm accessing the web interface using this port so perhaps there's something else going on behind the scenes.
Can anyone point me in the right direction to get snmp traps shown as events in ANM 4.1?
Thanks very much

hi.
as per documentation:
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/application_networking_manager/4.1/user/guide/UG_monitor.html#wp1176870
you need to send snmpv2 to anm. can you try v2 traps and see if it works?
Regards,
Fadi.

VMs change OID and fails SNMP probe on ACE module

I am setting up least loaded load-balancing on a serverfarm. It seems to work fine when all servers have the same OIDs, but the VMs change OIDs for the CPU utilization every time they vMotion or reboot, and that causes the SNMP probe to fail.
Is there any known solution to fix that problem?
Thank you,
Mark

Hi Mark,
If the OID's change itself on servers then this is expected. I am aware of anything that we can do on ACE to update the OID's automatically.
Regards,
Kanwal

SNMP Ace client packets

Hi All,
I am doing an snmpwalk on our ACE using the following oid:
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman","serif";}
1.3.6.1.4.1.9.9.161.1.4.2.1.9
The problem is that on some vips after doing an snmp walk I am receiving 0 for bandwidth utilisation.
When I scan the device I see there is bandwidth usage.
Below is output form snmpwalk and the device itself.
SNMP-Walk
1.3.6.1.4.1.9.9.161.1.4.2.1.2.2.222 : Counter: 0
sh service policy CM-Rebranding-888-http
class: CM-Rebranding-888-http
     VIP Address:    Protocol: Port:
     10.x.x.x      tcp        eq    80
      loadbalance:
        L7 loadbalance policy: PM-Rebranding-888-http
        VIP Route Metric     : 77
        VIP Route Advertise : DISABLED
        VIP ICMP Reply       : DISABLED
        VIP State: INSERVICE
        curr conns       : 3374      , hit count        : 8113708
        dropped conns    : 82195
        client pkt count : 186343165 , client byte count: 17308888870
       server pkt count : 292836401 , server byte count: 362759465286
        conn-rate-limit      : -         , drop-count : -
        bandwidth-rate-limit : -         , drop-count : -
        L7 Loadbalance policy : PM-Rebranding-888-http
          class/match : class-default
             LB action: :
               sticky group: Rebranding-888-http
                  primary serverfarm: SF-Rebranding-888-http
                    state: UP
                  backup serverfarm : -
            hit count        : 8113703
            dropped conns    : 0
        Parameter-map(s):
          Rebranding-888-http-Idle
It looks like a bug to me.
Any help would be appreciated in understanding this issue.
If anyone has encounterd this issue and overcome it please let me know.
Thanks.
Jack.

Jack
Probably easiest if we can set it up in the lab and test it. Would you be willing to share your config ? Or maybe open a tac case and I can take a look at it. Which version of s/w ?
Matthew

Shutdown service in ACE using SNMP

Dear Mister
Is possible to configure, shutdown a service using SNMP? More than this, in a context???
I am searching the OIDs about it, but, I am not lucky.
Regards and thank in advance

Hi,
I don't think so. You have list of MIB's available which can fetch data from ACE but there is no such provision to shut down the service using SNMP. The ACE supports traps and SNMP get requests but does not support set requests to configure values on the device. Please visit the below link for more information:
http://www.cisco.com/c/en/us/td/docs/interfaces_modules/services_modules/ace/vA5_1_0/configuration/administration/guide/admgd/snmp.html
Regards,
Kanwal

Ace 4710 active/standby SNMP config

We have 2 x Ace 4710 deployed in Active/Standby config. Since the configuration mode is disabled on the Standby unit, how can we configure the SNMP settings (such as location etc.) on the standby unit different from the active unit?
The 2 devices are in physically separated data centers so the SNMP location settings need to be set differently on both units. The standby unit does not allow any configuration.

Comments inline:
Since this is the admin context, we would better not do this. As i understand correctly, this will turn off the config sync on the 2 units and we may end up with some issues.
KM - Correct, you need to manually manage the configurations of both devices.
Also, if at a later stage, we sync the configs again in the admin context, it will overwrite the different config on the standby unit with that from the active unit?
KM - Correct, the device with the lower priority will be overwritten when config-sync is re-enabled. This is one of the reasons you need to be careful in the Admin context. For example: Ff the lower priority device has contexts defined that the primary does not, they would be removed when you re-enablethis command.
Since my requirement is just the SNMP location config, I do not think i should go for this; rather i can have some descriptive location setting identifying the 2 units in cluster mode...
KM - This would be more ideal than disabling config sync. You could also put both locations like this:
snmp-server location "San Jose, CA & Seattle, WA"
Regards
Kris

Design ? about SNMP operation in ACE module ... Traps sent to different Mgmt Stations

Good Day everyone,
I searched the site, and I could not find the answer I was looking for, so If anyone happens to know or point me to a link I would greatly appreciate it.
Topic:
Can ACE module sent different Traps (oid) to different management station? Split decision processing to send specific traffic to specific stations, based on the alert it has detected.
Scenario:
Our network equipments have a demarc point on what devices are managed via SNMP (Traps, syslog, EMS, etc...); Routers, Switches, ACE modules, and so forth.
However, we are not responsible for the App Servers assigned to various broadcast domains.
Customer would like to receive Notification from the ACE module when a Real Server is taken out of rotation , when specific probes have failed.
My team manages the ACE module, so any alerts from the ACE will be sent to the management station configured in our network.
Unfortunately I do not have a Test Lab to test my theory, so any help would be greatly appreciated before I submit my Production configs.
Design Requirements:
Customer would like the following traps generated and sent to their management station:
1) Real Server host name
2) TCP port
3) Real Server IP address
4) If capable, percentage threshold for each real server, based on the prediction configured for each Server Farm
5) Can a NetIQ agent be download on the ACE module to communicate with the NetIQ management station?
As always thank you for any help you can provide, and if you happen to be around Huntsville Alabama/USA.. you got a cold beer waiting for you!!!!
Cheers,
-raman

Gilles,
Thank you for your prompt answer.
When you have time please look over the following question and let me know if it is possible to implement, if the Proxy server is not an option?
Can a Custom TCL script be executed to sent an notification via SMPT if a health probe fails?
The SMTP message will contain the server info (IP address, Host name, TCP port).
The script procedure will execute certain actions based on the returned result.
Thanks,
raman
P.S
Sorry about not being up to speed on TCL. I am reading up on the TCL capability, and trying to provide some options to my customer.

ACE 4710 SNMP false linkup/down trap notification?

We have two ACE4710 in a failover configuration with Software version A4(2.0). SNMP is setup and the receiver is able to receive SNMP traps.
The issue is we are receiving a linkDown trap notification at least once every other day, followed shortly by a linkUp notification a minute later. We have checked all layer 2 devices connected to the ACE and cannot see any evidence that any link actually disconnected. We experienced no traffic lost, but this could be because a couple of the ACE links are bundled. The trap notification does not actually indicate which interface changed status. All links are Gigabits, and there are no packet drops either on the ACE or the layer 2 switch. What could be causing this?
Thanks in advance.

Hi Matthew, apologies for the late reply, and thanks for getting back to me. Please find below the output on our SNMP receiver today. As you will see from the log timestamp the linkdown and linkup occurred within a minute which is typical. We get this issue at least once every other day!
Notification Type: PROBLEM
Service: Link
Host: ldmzbmh001
Address: x.x.x.x
State: CRITICAL
Date/Time: Thu Feb 21 11:18:35 GMT 2013
Additional Info:
A linkDown trap signifies that the SNMP entity, acting in 16777312 up down
Notification Type: PROBLEM
Service: Link
Host: ldmzbmh001
Address: x.x.x.x
State: CRITICAL
Date/Time: Thu Feb 21 11:18:35 GMT 2013
Additional Info:
A linkDown trap signifies that the SNMP entity, acting in 65540 up down
Notification Type: RECOVERY
Service: Link
Host: ldmzbmh001
Address: x.x.x.x
State: OK
Date/Time: Thu Feb 21 11:19:05 GMT 2013
Additional Info:
A linkUp trap signifies that the SNMP entity, acting in an 16777312 up up
Regards,
Sam

ACE Module SNMP limits

I am monitoring an ACE module using snmp. The values returned from certain OIDs are graphed using Cacti. I found the 64 bit counters on interfaces for the ACE wrap at 10,000,000,000 instead of 2^64. Now that I have configured cacti to expect the wrap at 10 billion, I am concerned about the 32 bit counters. I am querying this snmp oid to get L7 connection counter
cslbxStatsL7PolicyConns
1.3.6.1.4.1.9.9.254.1.1.1.1.8
Should I expect this counter to wrap at 2^32 or a lower value?

The maximum value for a 32bit OID should be 4294967296, I do have a value in my lab that is above 1 billion for that counter, so I wouldn't think there is an issue immediately. One common issue - when you clear stats manually, the counter will reset to 0. As well, I found an internal bug that that suggested some pocket case within the code could have cleared stats incorrectly, but it has never been seen since. There is a guess that someone logged into the test bed and cleared it without permission, but it was not able to be verified. Hence the bug was created to investigate the code, turned up nothing, and was junked accordingly.
What you might want to do is keep a sharp eye on the counter. When it looks like it rolls, login to the context you are polling and take a look at the accounting log. If you find that someone cleared the logging, that answers the question. If not - log a TAC case and we can replicate your exact configuration/code version in our lab to see if there what the deviation is that causes it to clear. A bug would be logged and fixed.
Regards,
Chris Higgins

SNMP for ACE Failover.

Hi Experts,
Could someone please let me know the SNMP settings for my ACE failover.
Query:-
When my active 4710 ACE load balancer fails for any reason(due to s/w or h/w) and the second 4710 ACE load balancer take over (becoming active), will there be a SNMP alarm send from the ACE?
If so, which SNMP alarm will that be and which SNMP settings need to be applied for this?
Thanks in advance. Appriciate your comment on this.
Regards
Fari

Hi Christopher,
I configured the SNMP but nothing is been seen on SYSLOG Server. But I am able to ping the syslog server from ACE as it is in the same subnet.
But the messeges are not getting recored to the syslog server. I reloaded the ACE and saw OID getting generated for link up/dow and restart but nothing been recorded on the syslog server.
Is this a bug?
Generating configuration....
Logging part config:
logging trap 3
logging history 4
logging host 10.10.10.5 udp/514
SNMP part config:
snmp-server host 10.10.10.5 traps version 2c private
snmp-server trap-source vlan 32
snmp-server enable traps snmp coldstart
snmp-server enable traps virtual-context
snmp-server enable traps license
snmp-server enable traps slb vserver
snmp-server enable traps slb real
snmp-server enable traps syslog
snmp-server enable traps snmp authentication
snmp-server enable traps snmp linkup
snmp-server enable traps snmp linkdown
However, I don’t see the OIDs you mentioned.Alsothere is no incoming syslog message from any of the ACE load balancer IP addresses shown.
Anyhelp would be appriciated. Thanks in advance.
Regards,
Fari

ACE SNMP

Similar Messages

Maybe you are looking for