Cisco Prime 1.2 device interface alarms

Hello All,
I am working on Cisco Prime Infrastructure 1.2.1.012. I have enabled prime to report interface up and down messages.
But I am seeing some strange messages such as below,
Alarm Condition:Link down
Message: Port '{0}' is up on device '{1}'.
This is happening for some of the interfaces of the switch. For the same switch if there is any interface activity I can see alram message as,
Message: Port 'GigabitEthernet0/43' is up on device '10.104.xx.xx'
which is good and undestandable. Why the interface name is shown as {0}?
Any suggestions would be much appreciated.
Regards,
Girish

Just found the solution to the problem!
Bug ID: CSCuf55719, Incomplete link down detection: Port '{0}' is down on device '{1}'.
It seems this issue will be fixed in PI 2.0.
Regards,

Similar Messages

Cisco Prime Configuration Archive on Interface Flap

Hey All,
We've been using Cisco Prime 2.1 for a bit now and I have a question about the configuration archive based on change events. Will Cisco Prime go and attempt to perform a config backup based on an interface flap? Looking at the audit logs it appears that it does that (see attachment). Is this a default behavior and does anyone see any benefit to this? It seems like if an interface is flapping it will continuously log into the device to see if the configuration has changed.
Brian

Hi Brian,
I don't think configuration achieve can be triggered due to interface flap ,however if there is any change in the configuration yes PI can do the config Archive
Go to Administration > System Settings > Configuration Archive
Archive Configuration on receiving configuration change events? Check box this option
Thanks-
Afroz
***Ratings Encourages Contributors *****

Cisco Prime 2.0 web interface access

We just installed Cisco Prime Infrastructure 2.0 Express. It seemed to have installed correctly? But Two oddities. First when the system is restarted it takes and inordinate amount of time before the web interface becomes available. Once the web service is responding, it will not except ANY login credentials.
I can ssh to the instance and using cli, added two additional accounts. All accounts can access the install instance using ssh. None are able to login to the webinterface.
Thoughts as to what I may have missed?
Gabe

Please login to the CLI as admin then execute the command to change the password for the root WebUI acccount
     > ncs password root password Private123
     Loading USER - root
     Validating new password..
     Resetting password ..
     Resetting password COMPLETED.
     EXECUTION STATUS : Success
Once you've changed this password please then try to use those credentials to login to
the WebUI you indicated was presented in your response above.
Let me know if this does it. If not, we'll need to go a little deeper:::

Cisco Prime Infrastructure 2.0 Alarms (switch port down)

We have a cisco Prime Infrastructure 2.0 managing switches, routers and AP.
By default, when a port of a switch goes down, the cisco Prime Infrastructre generates a Critical Alarm for that. (this is a problem, because every phone of laptop disconnection will generate a critical alarm for me)
I found out that if we go to Administration --> Alarm Severity --> Link down, I can change the Alarm from Critical to another type of alarm.(ex: warning)
The problem is that I want to keep the Critical Alarm for my Uplinks ports and for some important switch ports, and I would like to make the alarm as warning for the normal user ports.
I know that I can create Port Groupping and add ports to each group and apply monitoring templates on those groups. But This couldn't Help me solving my alarm problem.
So I just need to know how to manage the alarms severity for each group of ports.
Thank you

Hi,
Same problem here.
I am using Cisco Prime Infrastructure 2.0 (evaluation version for 60 days). I want to deploy port monitoring for my trunk ports between switches and some other important ports e.g. servers. Basically I want to get alarms when these ports are down, there are errors on ports and etc.
So in Design>Port Grouping I created User Defined group with important ports. In Deploy>Monitoring Deployment I selected Interface Health (default)>Deploy selected Port Groups and when selected port group I created.
Now the rule shows Deployed: Yes and Status: Active. After that I just pulled out one port which was in monitored group, waited 5min as it is set in Interface Health (default) template, and nothing happened, and worse, alarms started to show up of other ports where regular users are connected (computers was turned off), which I do not want to see at all. I tried redeploy template, I even created my own template but still no desired result.
Any suggestions how to make port monitoring work?

Cisco Prime Collaboration Assurance SNMP authentication

Hello
i see in Cisco Prime Collaboration the following minor alarms:
Description=SNMP entity has received a protocol message that is not properly authenticated
2014-10-16 13:37:09 Local7.Critical 62.25.80.199 Oct 16 13:37:06 HCCPCA3A CPCMHCCPCA3A:%local7-2-ALARM: 14$Description=SNMP entity has received a protocol message that is not properly authenticated.::Status=1,active^Severity=minor^Acknowledged=no^AlarmURL=https://62.25.80.199/emsam/index.html#pageId=com_cisco_ifm_web_page_alarms&queryParams=Id%3D31755519&forceLoad=true^Associated Events=https://62.25.80.199/emsam/index.html#pageId=com_cisco_ifm_web_page_alarms&queryParams=alarmId%3D31755519&tView=events^Device Work Center=https://62.25.80.199/emsam/index.html#pageId=com_cisco_emsam_page_inventory&deviceId=3827396^CUSTOMER=CUSLAB08^Private IP Address=172.29.15.5^Default Alarm Name=MinorAlarm^Managed Object=172.29.15.5^Managed Object Type=Contact Center Enterprise^MODE=2;Alarm ID=31755519^Component=172.29.15.5<000><000>
i know i can suppress the alarms, but can anyone tell me why this is generated? how is it when Cisco PCA can manage the device, i get authentication issue on SNMP v2c ?
thanks in advance

Hi Phil,
Even I am facing this issue.
The server is in managed state in Device Work Center. But still observing the Alarm " SNMP entity has received a protocol message that is not properly authenticated.".
Also it takes 15 to 20 minutes for an alarm to get cleared.
Thanks,
Dinesh

Upgradding Prime Infrastructure version 1.2 and LMS 4.x to Cisco Prime Infrastructure 2.0

Hello,
A customer currently have 2,500 Cisco Prime Infrastructure Lifecycle device license using Prime Infrastructure version 1.2 and LMS 4.x. the customer wants to upgrade to Cisco Prime Infrastructure 2.0.
Does anyone know if it is possible to upgrade to version 2.0 without additional cost? the licenses from
Cisco Prime Infrastructure 1.2 has to be upgraded or we need only to rehost the VUDI.
Also could be possible to upgrade LMS 4.x to Cisco Prime Infrastructure 2.0?
thanks!

The two features you mention are two big missing ones. Another is full syslog capability. I don't believe CiscoView or day one support via package updates is included either.
Another is less tangible - the depth of experience and documentation available for LMS vs. Prime Infrastructure (particularly the wired management features). I agree for wireless PI 2.0 looks good. Some new features are coming for wired that look promising but they are new as of PI 2.0 so I'm taking a wait and see on them.
I hope to get 2.0 up in my lab in the next week or so and will hope to be pleasantly surprised but that's seldom the case with a major new release.

Including Interface Description in Cisco PRime Infrastructure Alarm Message

Hi all,
i succesfully configured a Cisco Prime Infrastructure 2.1 applliance to display an alarm and to send me an e-mail when switch uplink ports goes down.
The text displayed in alarm message is :
port 'interface_id' is down on device 'device_ip_address'
I'd like to include in this text also the interface description so the text will display :
port 'interface_id' 'interface_descriprion' is down on device 'device_ip_address'
Is this possible?
Thankyou in advance

Hi,
i followed these steps :
SWITCH SIDE
- configured Prime Infrastructure as snmp-server host;
- enabled snmp-traps for linkup and linkdown events globally;
- disabled snmp-traps for linkup and linkdown on non relevant interfaces using the no snmp trap link-status command
PRIME INFRASTRUCTURE SIDE
- under "Deploy/Monitor Deployment" i deployed template "Interface Health" for all the interested switches
- under "Administration/System Settings/Mail Server Configuration" configured my internal SMTP server to make Prime Infrastructure able to send e-mails
- under "Operate/Alarms & Events" click on "Email Notifications" , then on "Switches and Hubs"
- check the "critical" box , insert the destination e-mail address into the "To" field then click "Save"
- check the "switches and Hubs" box and then click Save
As i know is possible to avoid to configure every single not-interesting port on the switches with "no snmp trap link-status" command (it's a bit annoying when you have tens of switches), using Port Grouping configuration on PI but i tried it without success.
Hope this helps.
Best Regards,

Cisco Prime 'Nouser' device alarms...

Dear All,
I have a recently setup Cisco Prime solution running in our test lab with a view to managing various wireless lan controllers and associated AP's. As part of the device management process we are using SNMPv3 but do not want to allow the PRIME v1.2 appliance to use HTTPS or SSH for management. So left this config empty when setting up the device telnet/SSH and HTTP fields when adding our WLC within the device centre.
We now get the following alarm regularly....Is there any way of avoiding this and disabling the telnet/SSH/HTTP options or is it a MUST DO thing?
User 'nouser' with IP Address '10.172.198.19' has made too many unsuccessful login attempts.
Any advice gratefully received.
Thanks.

Hi,
Here is the link to the document containing the detailed steps regarding Credential Sets.
After defining your sets then set up Credential Set Policies.
Thanks!

Cisco Prime: Event Larm Port 'x' is down on device.

Hi,
I'm writing regarding; event-larms; that is reporting from Cisco Prime; connected to controller. Interfaces is reporting via event-larm; that they are down.
"Virtual Domain: ROOT-DOMAIN
PI has detected a change in one or more alarms of category Controller and severity Critical in Virtual Domain ROOT-DOMAIN.
The new severity of the following items is Clear:
1. Message: Port '3' is down on device '10.1.1.2'.
(6 times)
2. Message: Port '4' is down on device '10.1.1.2'.
(6 times)
3. Message: Port '5' is down on device '10.1.1.2'.
(6 times)
4. Message: Port '6' is down on device '10.1.1.2'.
(6 times)
5. Message: Port '7' is down on device '10.1.1.2'.
(6 times)
6. Message: Port '8' is down on device '10.1.1.2'.
(6 times)
E-mail will be suppressed up to 30 minutes for these changes."
Is there a solution how to not recieve those event-larms? The only LACP interfaces that is configured is 1 & 2, in a group.
See attached screenshot, when trying to disable the other interfaces.
The LACP is enabled and configured on "management" interface.
Best Regards,
David

From: https://supportforums.cisco.com/discussion/12077376/prime-infrastructure-alarm-port-down#comment-9405836
"As far as I understand the error message you only need to disable SSO before you can disable the LAG ports."
"(Cisco Controller) >config port adminmode 3 disable
Blocked: Lag is enabled. Disabling the lag port is blocked when system is in redundancy state (SSO)"
"I would suggest to do this only in a maintenance window."

Cisco Prime Infrastructure 2.0 - no traps/info are pushed from devices

Good evening,
I have setup Cisco Prime Infrastructure 2.0 and, though I have added manually my 4 network cores as devices without any problem, I can't get a single trap or a single SNMP information to be pushed into my Cisco Prime Infra.
Here is my SNMP config on my core :
snmp-server user *edited* *edited* v3
snmp-server group *edited* v3 noauth notify *tv.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF0F
snmp-server community *edited* RO
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps flowmon
snmp-server enable traps transceiver all
snmp-server enable traps call-home message-send-fail server-fail
snmp-server enable traps tty
snmp-server enable traps rf
snmp-server enable traps memory
snmp-server enable traps cpu_threshold
snmp-server enable traps eigrp
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps ospf retransmit
snmp-server enable traps ospf lsa
snmp-server enable traps ospf cisco-specific state-change nssa-trans-change
snmp-server enable traps ospf cisco-specific state-change shamlink interface
snmp-server enable traps ospf cisco-specific state-change shamlink neighbor
snmp-server enable traps ospf cisco-specific errors
snmp-server enable traps ospf cisco-specific retransmit
snmp-server enable traps ospf cisco-specific lsa
snmp-server enable traps flex-links status
snmp-server enable traps fru-ctrl
snmp-server enable traps entity
snmp-server enable traps ethernet cfm cc mep-up mep-down cross-connect loop config
snmp-server enable traps ethernet cfm crosscheck mep-missing mep-unknown service-up
snmp-server enable traps ether-oam
snmp-server enable traps aaa_server
snmp-server enable traps flash insertion removal
snmp-server enable traps l2tc threshold sys-threshold
snmp-server enable traps power-ethernet police
snmp-server enable traps rep
snmp-server enable traps vswitch dual-active vsl
snmp-server enable traps udld link-fail-rpt status-change
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps auth-framework sec-violation
snmp-server enable traps dot1x auth-fail-vlan guest-vlan no-auth-fail-vlan no-guest-vlan
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps entity-diag boot-up-fail hm-test-recover hm-thresh-reached scheduled-test-fail
snmp-server enable traps port-security
snmp-server enable traps ethernet evc status create delete
snmp-server enable traps energywise
snmp-server enable traps ipsla
snmp-server enable traps vstack
snmp-server enable traps bfd
snmp-server enable traps bgp
snmp-server enable traps bulkstat collection transfer
snmp-server enable traps cef resource-failure peer-state-change peer-fib-state-change inconsistency
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps config-ctid
snmp-server enable traps event-manager
snmp-server enable traps hsrp
snmp-server enable traps ipmulticast
snmp-server enable traps isis
snmp-server enable traps msdp
snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-message
snmp-server enable traps bridge newroot topologychange
snmp-server enable traps stpx inconsistency root-inconsistency loop-inconsistency
snmp-server enable traps syslog
snmp-server enable traps isakmp policy add
snmp-server enable traps isakmp policy delete
snmp-server enable traps isakmp tunnel start
snmp-server enable traps isakmp tunnel stop
snmp-server enable traps ipsec cryptomap add
snmp-server enable traps ipsec cryptomap delete
snmp-server enable traps ipsec cryptomap attach
snmp-server enable traps ipsec cryptomap detach
snmp-server enable traps ipsec tunnel start
snmp-server enable traps ipsec tunnel stop
snmp-server enable traps ipsec too-many-sas
snmp-server enable traps errdisable
snmp-server enable traps ethernet cfm alarm
snmp-server enable traps vlan-membership
snmp-server enable traps mac-notification change move threshold
snmp-server enable traps vrfmib vrf-up vrf-down vnet-trunk-up vnet-trunk-down
snmp-server host *ip-address-edited* version 3 noauth *edited*
Basically all traps are enabled but absolutely nothing is showing up in my Prime Infra except that my 4 devices are "Reachable".
Here is a show snmp on the same device :
sh snmp
Chassis: *S/N Edited*
38554534 SNMP packets input
    0 Bad SNMP version errors
    14 Unknown community name
    0 Illegal operation for community name supplied
    0 Encoding errors
    38453185 Number of requested variables
    0 Number of altered variables
    17790703 Get-request PDUs
    20583581 Get-next PDUs
    0 Set-request PDUs
    0 Input queue packet drops (Maximum queue size 1000)
38490708 SNMP packets output
    0 Too big errors (Maximum packet size 1500)
    0 No such name errors
    0 Bad values errors
    0 General errors
    38371069 Response PDUs
    13 Trap PDUs
SNMP global trap: enabled
SNMP agent enabled
SNMP logging: enabled
    Logging to *edited*, 0/10, 13 sent, 0 dropped.
Can anyone point out what is wrong or missing in my configuration? I can't seem to single it out myself.
Thanks
Jeremy

Hi Jeremy,
SNMP traps are shown in the events and alerts section of PI.
SNMP config looks fine. Can you run the SNMP debug (debug snmp packets ) .check the logs and see if the device is actually sending the TRAPS to the PI server.
Thanks-
Afroz
[Do rate the useful post]
****Ratings Encourages Contributors ****

Change Interface availability threshold from Cisco Prime Infrastructure 2.0

Dear Community,
I’m working in Cisco Prime Infrastructure 2.0 and I’m having the following problem:
I want to monitor the interfaces availability from all the devices of my network. But only makes sense send an email notification for the most critical interfaces. I don´t want to receive an email notification every time anyone unplugs the network wire.
How can I achieve this?
I already tried to change the interface availability threshold from the Interface Health Threshold Template, but this one isn´t available to configure.
The idea was to change the severity of the alarm so I could distinguish what type of alarm would send email notification.
I also created a Custom SNMP Template that gets the ifOperStatus using the MIB IF-MIB. This also didn’t work because Prime Infrastructure doesn’t allow me to define thresholds to a Custom SNMP Template.
Without threshold, no alarm, without no alarm, no email notification!
Can you help?
Regards,
Daniel CJ

Only on the HA pair which would be the secondary.
High Availability (HA) RTU: If Cisco Prime Infrastructure is deployed in a high availability configuration with one primary and one secondary instance in an HA pair, then an HA RTU is required. You only need to purchase a single set of the regular licenses (for example, Base, Lifecycle, and so on) for the primary instance.
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

Cisco prime Infrastructure alarms by e-mail

hi all,
my Cisco PI1.2 not send me a notification e-mail with specific alarm if occurred twice and the first time is not cleared or deleted.
i.e.
if a switch is down it send me a notification e-mail, and this switch comes up again but i did not remove the first alarm, the PI not send me a notification.
please advice
thanks in advance

Alarm Status
Description
New
When an event triggers a new alarm or an event is associated with an existing alarm.
Acknowledged
When you acknowledge an alarm, the status changes from New to Acknowledged.
Cleared
An alarm can be in these statuses:
Auto-clear from the device—The fault is resolved on the device and an event is triggered for the same. For example, a device-reachable event clears the device-unreachable event. This in-turn, clears the device-unreachable alarm.
Manual-clear from Prime Infrastructure users: You can manually clear an active alarm without resolving the fault in the network. A clearing event is triggered and this event clears the alarm.
If the fault continues to exist in the network, a new event and alarm are created subsequently based on the event notification (traps/syslogs).
This might be the reason, I believe.
Please refer the following link for better understanding.
http://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/1-2/user/guide/prime_infra_ug/alarms.html
Hope that helps.

Deleted WLC from its folder under the Device work center of Cisco prime 1.2

I kindly need your help as regarding cisco prime infrastructure.
I added the wireless LAN controller to the prime. I later had to troubleshoot the WLC because the reachability status showed UNREACHABLE.
Due to my troubleshooting, I synched the WLC a couples of times and the collection status has been showing SYNCHING since then.
I also tried deleting the WLC from its folder under device work center and it deleted but it still reflects under the ALL folder.
Please would I have to wait for the SYNCHRONIZATION of the WLC to stop before I can completely delete it and re-add??
Also I noticed that after deploying ''Interface Health'' under Monitoring Configurations, the CPU and memory utilization did not reflect for the devices cisco
prime is managing.
What have I missed out?
Kindly help.

Prime Infrastructure won't support those legacy models.

Cisco Prime Infrastructure 1.4 SNMP Traps are not converted into Alarms

Hi everybody,
I just configured SNMP Traps on a Cisco Catalyst 3750-x to send to our Cisco Prime Infrastructure 1.4 Appliance.
Now I forced the Switch to send some traps (Power off a Power Supply, Interface errdisable). The only events I see in Alarms & Events on PI is the same information message everytime:
Configuration management event has been recorded in ccmHistoryEventTable.
I think the forced traps should be converted into alarms? Why can't I see them?
Thanks,
Marc

Ok, I started debugging as you said. I get the following output:
Mar 13 09:28:13.711: SNMP: V2 Trap, reqid 11689, errstat 0, erridx 0
sysUpTime.0 = 198609846
snmpTrapOID.0 = ciscoSyslogMIB.2.0.1
clogHistoryEntry.2.1688 = PM
clogHistoryEntry.3.1688 = 5
clogHistoryEntry.4.1688 = ERR_RECOVER
clogHistoryEntry.5.1688 = Attempting to recover from bpduguard err-disable state on Gi1/0/13
clogHistoryEntry.6.1688 = 198609844
Mar 13 09:28:13.737: SNMP: Queuing packet to xx.xx.xx.xx
Looks like the Switch is sending SNMP Traps from the ciscoSyslogMIB. Is this why PI can't show the Traps and convert it into a alarm?
After this test I configured logging (syslog) to the PI. Now the errors are showed but still not converted into alarms. I just want to be notified by email when such errors occurs.
Thanks,
Marc

Cisco Prime device challenge

How do I connect via server console to cisco prime infrastructure?
I can ssh and telnet to it.
What happens if the CPI is not pingable?
Kindly revert,
Regards,
Tioluwani

Please see a description of the issue below as regarding my first discussion above
a description of the problem(s)I am facing with the Cisco Prime device.
I can't connect to it via the web management interface
It takes several attempts to boot the device... most cases it hangs in the initial stages of booting. At times it is able to boot into console mode.
I would appreciate if someone could come and look at the device
Regards,
Tioluwani.

Cisco Prime 1.2 device interface alarms

Similar Messages

Maybe you are looking for