IDS-4260 SNMP TRAPS SUPPORT....

Hello,
I received the following traps while disconnecting the fiber from the IDS:
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (97610796) 11 days,
7:08:27.96
SNMPv2-MIB::snmpTrapOID.0 = OID:
SNMPv2-SMI::enterprises.9.9.138.2.0.1
SNMPv2-SMI::enterprises.9.9.138.1.3.3.1.3 = Gauge32: 4
SNMPv2-SMI::enterprises.9.9.138.1.3.3.1.4 = Gauge32: 3
SNMPv2-SMI::enterprises.9.9.138.1.3.3.1.5 = INTEGER: 4
SNMPv2-SMI::enterprises.9.9.138.1.3.3.1.6 = Gauge32: 97610796
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (97611029) 11 days,
7:08:30.29
SNMPv2-MIB::snmpTrapOID.0 = OID:
SNMPv2-SMI::enterprises.9.9.138.2.0.1
SNMPv2-SMI::enterprises.9.9.138.1.3.3.1.3 = Gauge32: 4
SNMPv2-SMI::enterprises.9.9.138.1.3.3.1.4 = Gauge32: 1
SNMPv2-SMI::enterprises.9.9.138.1.3.3.1.5 = INTEGER: 4
SNMPv2-SMI::enterprises.9.9.138.1.3.3.1.6 = Gauge32: 97611029
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (97611229) 11 days,
7:08:32.29
SNMPv2-MIB::snmpTrapOID.0 = OID:
SNMPv2-SMI::enterprises.9.9.138.2.0.1
SNMPv2-SMI::enterprises.9.9.138.1.3.3.1.3 = Gauge32: 4
SNMPv2-SMI::enterprises.9.9.138.1.3.3.1.4 = Gauge32: 2
SNMPv2-SMI::enterprises.9.9.138.1.3.3.1.5 = INTEGER: 4
SNMPv2-SMI::enterprises.9.9.138.1.3.3.1.6 = Gauge32: 97611229
I am not being able to decode the message using de CIDS-MIB, does anybody know what else do I need???
Regards,

Hi Javier,
This should help:
http://jaguar.ir.miami.edu/~marcus/snmptrans.html
replace: "SNMPv2-SMI::enterprises" in any of these objects with ".1.3.6.1.4.1" and you'll be able to see what that trap is. For instance, let's look at:
SNMPv2-SMI::enterprises.9.9.138.1.3.3.1.3=Gauge32:4
I'll go to the OID translator, and in the "Object Identifier or Object Name" field, I put in:
.1.3.6.1.4.1.9.9.138.1.3.3.1.3
and it returns the following:
.1.3.6.1.4.1.9.9.138.1.3.3.1.3
ceAlarmHistEntPhysicalIndex OBJECT-TYPE
-- FROM CISCO-ENTITY-ALARM-MIB
-- TEXTUAL CONVENTION PhysicalIndex
SYNTAX Integer (1..2147483647)
MAX-ACCESS read-only
STATUS Current
DESCRIPTION "This object specifies the physical entity that generated
the alarm."
::= { iso(1) org(3) dod(6) internet(1) private(4) enterprises(1) cisco(9) ciscoMgmt(9) ciscoEntityAlarmMIB(138) ciscoEntityAlarmMIBObjects(1) ceAlarmHistory(3) ceAlarmHistTable(3) ceAlarmHistEntry(1) 3 }
Anyway, you can look up each of those in the same way.
These are all part of the CISCO-ENTITY-ALARM-MIB
Regards,
-Joe

Similar Messages

LMS 3.2.1 integration with Clarity NMS for snmp trap forwarding

Our client have integrated Clarity NMS to Ciscoworks LMS 3.2.1. So far they are receiving raw alarms/snmp traps but it lacks information/inventory of the originating device. Kindly see sample raw alarms below:
2420: 2011-11-25 12:10:46 Received trap ==> Received SNMPv1 Trap
Community=ciscoworks
Enterprise=1.3.6.1.6.3.1.1.5
Generip trap type=2
Specific Trap Type=0
Trap From=10.220.10.1
Trap ID=1.3.6.1.6.3.1.1.5.2
Trap Time=-1436283373
1.3.6.1.2.1.2.2.1.1.83=83
1.3.6.1.2.1.2.2.1.2.83=GigabitEthernet1/40
1.3.6.1.2.1.2.2.1.3.83=6
1.3.6.1.4.1.9.2.2.1.1.20.83=Lost Carrier
EndTrap
10933: 2011-11-24 11:57:53 Received trap ==> Received SNMPv1 Trap
Community=ciscoworks
Enterprise=1.3.6.1.4.1.9.1.291
Generip trap type=2
Specific Trap Type=0
Trap From=10.220.10.1
Trap ID=1.3.6.1.4.1.9.1.291.2
Trap Time=1628056965
1.3.6.1.2.1.2.2.1.1.8=8
1.3.6.1.2.1.2.2.1.2.8=E1 0/0/0
1.3.6.1.2.1.2.2.1.3.8=18
EndTrap
As you can see, those raw alarms doesn’t contain any information about the originating equipment or the physical card, port related information where those alarms were generated. Instead those alarms received are just NMS level alarms.
How do we resolve this so that the inventory of the equipment would be part of the trap to be received by Clarity from Ciscoworks.

Hi,
Is the issue you have the source IP address of the forwarded trap? Per RFC it is the IP of the actual device sending the trap. The originating IP should be contained within the packet. I have included some additional information you may find helpful.
Q. What is the difference between SNMP Raw Trap Forwarding and SNMP Trap alert/event Trap Forwarding? Does DFM support both?
A. You can configure raw trap forwarding at DFM > Other configuration > SNMP Trap forwarding, and processed event/alert trap forwarding at DFM > Notification Services > SNMP Trap Forwarding. Processed trap is "when DFM receives certain SNMP traps, it analyzes the data found in fields (Enterprise/Generic trap identifier/Specific Trap identifier/variable−bindings) of each SNMP trap message, and changes the property value of the object property (if required)". Raw trap is the trap that the device forwards to DFM and DFM has yet to process it. For more information, refer to the DFM User Guide. Yes, DFM supports both ways of trap forwarding.
http://www.cisco.com/en/US/products/sw/cscowork/ps2421/products_qanda_item09186a0080a9b35b.shtml
DFM will only forward SNMP traps from devices in the DFM inventory. It will not change the trap format—it will forward the raw trap in the format in which the trap was received from the device. However, you must enable SNMP on your devices and you must do one of the following:
Configure SNMP to send traps directly to DFM
Integrate SNMP trap receiving with an NMS or a trap daemon
The versions of SNMP traps supported by DFM are described in SNMP and ICMP Polling. For information on forwarding processed and pass-through traps, see Processed and Pass-Through Traps, and Unidentified Traps and Events.
Pass-through traps are traps that DFM receives from devices that are not in the DFM inventory, and DFM has not processed. Forwarding these traps is controlled using Configuration > Other Configurations > SNMP Trap Forwarding. These traps are shown in the Alerts and Activities display because of their relevance to fault monitoring. Pass-through traps are displayed as follows:
As one of the following events:
> InformAlarm
> MinorAlarm
> MajorAlarm
With the device type and the device name from which it was generated.
If DFM does not know which device generated the trap, it ignores the trap. Pass-through traps will be cleared after a default interval of 10 minutes to one hour
http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_device_fault_manager/3.2/user/guide/dfm32ug_Book.html

Cisco ISE supported SNMP traps

What's the supported SNMP traps on Cisco ISE.
I am able to retrieve the supported MIBs, however not able to find any information on traps.
I have reviewed these previous thread, but not clear to me which traps are supported by Cisco ISE ?
https://supportforums.cisco.com/thread/2165257
https://supportforums.cisco.com/message/4021560#4021560
Testing the Cisco ISE in a lab, I notice that interface up/down and authentication traps are being sent to SNMP server. Any docummentation or full list of the traps would be appreciated.
Regards,
Ahmed Ramadan.

Please see the attached file for SNMP and radius attribute.

What is the minimum server layer OEM version supports SNMP trap reception ?

Hi:
- I have been trying to enable SNMP trap reception on an OEM plug-in.
- I turned on debug channel for recvlets.snmp and saw:
2009-10-16 16:07:42,808 Thread-3028552624 ERROR recvlets.snmp: Duplicate threshold : test900, oracle_guide, interfaces, status
and
2009-10-16 16:09:08,382 Thread-3021634480 INFO recvlets.snmp: Trap received is to convert Data Point
2009-10-16 16:09:08,379 Thread-3021634480 INFO recvlets.snmp: Sending Data Point ...
2009-10-16 16:09:08,379 Thread-3021634480 INFO recvlets.snmp: Listening for TRAP
So, it looks like the OEM agent can receive traps but no data point or alert appears.
And, the agent always issues an error about duplicate thresholds.
- Does the agent have to be patched ?
My agent is:
Oracle Enterprise Manager 10g Release 5 Grid Control 10.2.0.5.0.
Copyright (c) 1996, 2009 Oracle Corporation. All rights reserved.
Agent Version : 10.2.0.5.0
OMS Version : 10.2.0.1.0
Protocol Version : 10.2.0.0.0
Agent is Running and Ready
- on the server layer, the oms is:
Oracle Enterprise Manager 10g Release 10.2.0.1.0
Copyright (c) 1996, 2005 Oracle Corporation. All rights reserved.
Oracle Management Server is Up.
Is a patch needed for OMS ?
Should OMS be version 10.2.0.5.0 ?
Thanks
John
Edited by: user8826739 on Feb 23, 2010 7:17 AM

10.2.0.5 should be fine ...
Dave

Anm 4.1 support for receiving snmp traps from CSS / ACE

Hi
Does anyone have an ANM 4.1 installation that is accepting snmp traps from their CSSes / ACEs?
If I configure CSSes / ACEs to send snmp v1 traps to anm, they never appear in the Monitor -> Events view.
I've tried both the ANM 4.1 Virtual Appliance and ANM 4.1 running on RHEL and it seems that there's nothing listening on udp port 162 to receive the snmp traps.
From the virtual appliance:
admin# show ports
Process : java (5999)
     tcp: 0.0.0.0:40000, 0.0.0.0:40001, 127.0.0.1:10023, 0.0.0.0:10443, 0.0.0.0:
10003, 0.0.0.0:10004, 0.0.0.0:8443
     udp: 0.0.0.0:39182, 0.0.0.0:10003, 0.0.0.0:6120
Process : rpc.statd (2348)
     tcp: 0.0.0.0:834
     udp: 0.0.0.0:828, 0.0.0.0:831
Process : mysqld (3125)
     tcp: 0.0.0.0:3306
Process : java (5992)
     tcp: 0.0.0.0:10444, 0.0.0.0:10445
Process : portmap (2312)
     tcp: 0.0.0.0:111
     udp: 0.0.0.0:111
Process : monit (2779)
     tcp: 0.0.0.0:2812
Process : java (2952)
     tcp: :::40002
Process : java (2966)
     tcp: :::40003
Process : sshd (2625)
     tcp: :::22
Process : ntpd (2606)
     udp: 127.0.0.1:123, 0.0.0.0:123, ::1:123, :::123
I notice that port 443 isn't in here and I'm accessing the web interface using this port so perhaps there's something else going on behind the scenes.
Can anyone point me in the right direction to get snmp traps shown as events in ANM 4.1?
Thanks very much

hi.
as per documentation:
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/application_networking_manager/4.1/user/guide/UG_monitor.html#wp1176870
you need to send snmpv2 to anm. can you try v2 traps and see if it works?
Regards,
Fadi.

SCOM 2012 SNMP Trap - Does anyone have it working?

I am wondering if anyone out there has had any luck with getting SNMP Traps to be captured by SCOM 2012? Probes work fine.
We have been unable to get SCOM 2012 to receive a SNMP Trap from network devices. We currently have a case open with Microsoft, but they dont have any answers as of yet.
Here are the cliff notes version of what we have done so far.
Discovery - OK
The nodes discover without issue. I made sure they were set to SNMP only. I did this to verify we were talking SNMP and not just ICMP.
Open Ports/Firewall Issues
No firewalls are in place on the SCOM server and none exist between devices we are trying to get traps from. Using a port tool, I can see that UDP 162 is listening as expected and its the System Center Management Host Process that is running the
process. We have tried having SNMP installed, but disabled, installed and running, and uninstalled. Currently we have the SNMP service installed and running. The SNMP Trap Service is NOT installed.
Data Validation
Using Wireshark running on the SCOM box I have been able to validate the OIDs we are searching for are hitting the SCOM server. I installed an SNMP Trap generator and Receiver on my local machine as well as Jalasoft SNMP Simulator. I was able
to discover my local machine as a network device and if I send a TRAP from the TRAP generator on my local machine to the receiver on my local machine I can validate the data is coming through ok.
What has been done on SCOM side
The simplest place to look for data is with an Event Collection Rule and then an Event View Monitor. We have set up an Event Based Monitor to search for an OID that I know to be accurate and then I set up an Event monitor to look for
anything hitting that Collection Rule. The Event monitor showed nothing so we changed the EVent Monitor to look for anything that hit Node which should show any SNMP traps that have hit from network devices. No results.
We tried to run WFAnalyzer from the 2007R2 Authoring Console, but it wont run against 2012 and from what I have found the 2012 edition doesnt exist anywhere yet.
So has anyone succesfully received a SNMP TRAP into SCOM 2012?

Hi,
As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as "Answered" as the previous steps should be helpful for many similar scenarios.
In addition, we’d love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems.
Thanks,
Yog Li
TechNet Community Support
How could you possibly mark this as answered? No answer was given, it was quiet for a couple of days including one of which was a holiday in the US. The previous steps are NOT helpful. The question remains, Does anyone have it working?
People have given troubleshooting advice, but nobody has actually answered the simple question. Do they have it actually WORKING?

Problem with Generating SNMP traps from Windows Events

Hi Supporter,
I configured some events to be translated to traps using evntwin for Service Control Manager and Local Session Manager events. But I just got traps from Service Control Manager event. There is no Local Session Manager events are generated. I checked
with Event Viewer that events are created. Do you have any idea to fix my problem?
Thank you!
Here is my config file from evntwin:
#pragma add "System" "Microsoft-Windows-TerminalServices-LocalSessionManager" 2952790037 1 0
#pragma add "System" "Microsoft-Windows-TerminalServices-LocalSessionManager" 2952790039 1 0
#pragma add "System" "Microsoft-Windows-TerminalServices-LocalSessionManager" 2952790040 1 0
#pragma add "System" "Microsoft-Windows-TerminalServices-LocalSessionManager" 2952790041 1 0
#pragma add "System" "Service Control Manager" 1073748864 1 0

#pragma ADD<EventLogFile> <EventSource> <EventID> [<Count> [<Period>]]
The parameter EventSource specifies the application that generates the event.
those maybe helpful...
http://www.questiondriven.com/2012/03/08/windows-server-20032008-event-log-snmp-traps/
http://www.networkcircus.com/articles/20050715.html
Best,
Howtodo

Cisco WLC 5508 not sending SNMP Traps

Hello Everyone.
I'm having a weird error on our WLC environment. We have an HA with two cisco WLC 5508 and i cannot get SNMP Traps working on a Windows PC running Kiwi Syslog server (free ed.).
I can receive correctly Syslog messages, but not traps.
I Tried also to send SNMP Traps from WLC to a different PC using Linux with snmptrapd and it works fine.
I tried then to send from my Linux box a snmp trap to my Windows PC, and it works fine, but i still cannot receive anything from WLC.
Using Wireshark to detect traffic, i cannot see any packet on udp port 162.
I cannot figure out any problem with my scenario, but i can see the following errors on syslog:
*rmgrTrasport: Mar 30 16:08:22.602: #RMGR-3-INVALID_PING_RESPONSE: rmgr_utils.c:270 Ping response from <my_windows_PC> is invalid. Ip address do not match.
My WLC Version is 7.6.130.0
Thank you for your support.

I have gone through your query and found the following fruitful links ,please let me know if it helps and mark it correct answer if it is.
https://www.manageengine.com/network-monitoring/help/userguide/processing_traps.html
https://rscciew.wordpress.com/2014/10/12/snmp-configuration-on-wlc/
Thanks :)

LMS 3.2 not forwarding SNMP Traps

I am using LMS 3.2 and under DFM... Notification Services... SNMP Trap Notification, I have a Subscription set up to forward Traps to Unicenter 11.1. I have tried a combination of sending Alerts and Events, Critical and Informational, Active and Cleared messages.
At this time I have it set to send:
Alerts Informational and Cleared
Events Critical and Informational, Active and Cleared.
Every Trap that is forwarded from LMS I get in the Unicenter console Twice. Also, I occasionally get a clear in Unicenter, but normally clears are not being forwaded.
Any ideas on this issue?
Thanks
-Scott

You should first install the consolidated DFM 3.2 patch from http://tools.cisco.com/support/downloads/go/ImageList.x?relVer=3.2.0&mdfid=282640771&sftType=CiscoWorks+Device+Fault+Manager+Patches&optPlat=Windows&nodecount=2&edesignator=null&modelName=CiscoWorks+Device+Fault+Manager+3.2&treeMdfId=268439477&treeName=Network+Management&modifmdfid=&imname=&hybrid=Y&imst=N&lr=Y (patch for CSCta56151). If the problem persists after that, post the NMSROOT/log/dfmLogs/NOS/nos.log after reproducing the problem with a new event/alert.

Using SNMP traps

Hello,
We are trying to get our Ironports to send out SNMP traps.
At this moment we use a M1050 for testing. we have no test C series and I do not want to pull out a power supply or disk on one of our production systems, just for testing :wink:
At this moment the experiences with the M1050 are not very hopeful.
At first the cold-start trap was send out on the default interface (data1) instead of the management interface which we configured for SNMP, most of the other traps where not send out at all. This was confirmed by support and they promised a better behavior for next versions.
When we upgraded the M1050 to version 6 we expected to gain some traps but the result was disappointing. The cold start trap was now send out over the expected (configured) interface but all the other traps where not send out at all.
Does anyone have other experiences with the C series?
All input is appreciated.
Regards Steven

There is a known issue affecting SNMP traps in AsyncOS versions 5.5 and above. Look for a maintenance release next week and then try your tests again.
cheers,
Chris
Do you have a link to that case, as i have some issues in my own setup. We are using Cacti to monitor our 2 C350. From time to time, we get a timeout on SNMP, but the C350 i proccesesing mail.
/Thorsten

Can SOA suite send SNMP traps?

Hi!
I've looked in a lot documentation to find whether the SOA suite supports sending SNMP traps or not.
It can be done in Oracle Enterprise Manager 10.2.0.3 10g Release 3, but can it be done in EM 10.1.3.1.0 10g Application Manager Control?
(I can't find it there anyway)
/Per

IMHO the SOA Suite itseld is not able to send SNMP traps. You could implement it in for example in BPEL, with sensors. You call a java class that performs the SNMP trap. Or you make a generic BPEL process that sends SNMP traps based on the incoming payload via embedded java, and call this process from ESB or BPEL whenever you want to send a SNMP trap.

Anyone have succes configuring SNMP traps?

anyone have succes testing SNMP with snmptrap command?
Hello,
I am new to Ironport and the setup configuration of these devices. I am in the process of testing the snmp feature of these servers. As such I have configured the SNMP via snmpconfig command. From customer support I tried to enter the process for alerts and have not been able to get anything. https://ironport.custhelp.com/cgi-bin/ironport.cfg/php/enduser/std_adp.php?p_faqid=949&p_li=cF91c2VyaWQ9MXJvblAwcnQmcF9wYXNzd2Q9Zm8wQmE1
Is the link to process. I suspect that the traps are not being sent from the appliance. I have gone over the Doc for the configuration and can't see any errors. I have AsyncOS 6.4 for IronPort M660. This is the Admin server for a C150 and C350. Of which I can get no snmp traps either. The snmp manager is CA if that helps. Is there a log file on Ironport to verify taht traps have been sent? I see my command in the CLI log file.

The main issue is not being able to send a snmp trap to a CA NSM agent. Anyone been down this road before????

Cisco ACS SNMP Traps

Is it possible to send an SNMP trap from Cisco ACE 4710 for any configuration changes that occurs?
Regards,
Hesham

Hi Hesham,
these are the traps which are supported by ACE.
http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/vA5_1_0/configuration/administration/guide/snmp.html#wp1177230
read section "ACE SNMP Notifications (Traps)"
I do not see a trap which is useful for your requirement.
regards,
Ajay Kumar

Curious message during activation of snmp traps in cisco router 2800

I activated snmp traps in cisco router 2800 (I didn't specify a set of them, so all of them were activated). The thing is, when i configure "snmp-server enable traps", appears a message in the next line :
" %Cannot enable both sham-link state-change interface traps.
%New sham link interface trap not enabled "
Anyway, traps are activated and are completely functional.
I would like to know, why this message appears... and also what is the difference between informs and traps, because I can activate both of the in a router to be sent to the network admin pc.
Thanks in advance.

Hi Marcelo,
the snmp-server enable traps command enables just all types of traps that the IOS version supports.
The message apperes because of this two, which are mutually exclusive:
R1(config)#snmp-server enable traps ospf cisco-specific state-change shamlink interfaceR1(config)#snmp-server enable traps ospf cisco-specific state-change shamlink interface-old% Cannot enable both sham-link state-change interface traps.% Deprecated sham link interface trap not enabled.
It's recommended to only enable the traps you really need.
Informs were introduced with SNMPv2, and they have the same format and purpose as traps.
The main difference is that traps are send in a hit-or-miss fashion whereas informs expect an acknowledge and will be re-send if unacknowledged.
Hope that helps
Rolf

SNMP TRAPS and SLA

HI
I am trying to configure IP SLA to send SNMP TRAPS but looks like doing some mistake ..
i have following configured
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-ascii-font-family:Cambria;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Cambria;
mso-hansi-theme-font:minor-latin;}
ip sla monitor 2
type echo protocol ipIcmpEcho 150.1.3.3 source-ipaddr 1.1.98.7
frequency 10!
ip sla monitor schedule 2 start-time now recurring
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-ascii-font-family:Cambria;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Cambria;
mso-hansi-theme-font:minor-latin;}
ip sla reaction-configuration 2 react rtt threshold-type immediate action-type trapOnly
ip sla logging traps
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-ascii-font-family:Cambria;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Cambria;
mso-hansi-theme-font:minor-latin;}
snmp-server community public RO
snmp-server enable traps rtr
snmp-server host 1.1.128.226 public
1.1.98.7 is the loopback ip on my network. To test the snmp traps, i enabled debug snmp packets and shutdown loopback interface (1.1.98.7)
I don't see any snmp message in debug output ..
am i missing something or it is not possible to get traps directly from ip sla .. do i need EEM for this?

sorry, it actually worked .. i just gave a restart to ip sla and it worked.
looks like router was already in threshold stage when i was activating reaction-config ..
but i am still confused which command is actualluy generating these traps since i have taken out some of the snmp config out and i stil get traps ..
below is the oputput of traps which i get when i restart ip sla .
*Feb 15 17:10:43.453: SNMP: 150.150.1.1 queue overflow, dropping packet
*Feb 15 17:10:43.453: SNMP: Queuing packet to 150.150.1.1
*Feb 15 17:10:43.453: SNMP: V1 Trap, ent rttMonNotificationsPrefix, addr 65.65.2.2, gentrap 6, spectrap 3
rttMonCtrlAdminTag.1 =
rttMonHistoryCollectionAddress.1 = 41 41 03 03
rttMonCtrlOperOverThresholdOccurred.1 = 1
*Feb 15 17:10:43.497: SNMP: 150.150.1.1 queue overflow, dropping packet
*Feb 15 17:10:43.501: SNMP: Queuing packet to 150.150.1.1
*Feb 15 17:10:43.501: SNMP: V1 Trap, ent rttMonNotificationsPrefix, addr 65.65.2.2, gentrap 6, spectrap 5
rttMonCtrlAdminTag.1 =
rttMonHistoryCollectionAddress.1 = 41 41 03 03
rttMonReactVar.1 = 1
rttMonReactOccurred.1 = 1
rttMonReactValue.1 = 12
rttMonReactThresholdRising.1 = 5
rttMonReactThresholdFalling.1 = 1
rttMonEchoAdminLSPSelector.1 = 00 00 00 00
*Feb 15 17:10:43.585: SNMP: 150.150.1.1 queue overflow, dropping packet
*Feb 15 17:10:43.585: SNMP: Queuing packet to 150.150.1.1
*Feb 15 17:10:43.585: SNMP: V1 Trap, ent rttMonNotificationsPrefix, addr 65.65.2.2, gentrap 6, spectrap 5
rttMonCtrlAdminTag.1 =
rttMonHistoryCollectionAddress.1 = 41 41 03 03
rttMonReactVar.1 = 1
rttMonReactOccurred.1 = 1
rttMonReactValue.1 = 12
rttMonReactThresholdRising.1 = 5
rttMonReactThresholdFalling.1 = 1
rttMonEchoAdminLSPSelector.1 = 00 00 00 00
below is my running config and sh ver
R2#sh ver
Cisco IOS Software, 2800 Software (C2800NM-ADVENTERPRISEK9-M), Version 12.4(24)T1, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Fri 19-Jun-09 15:13 by prod_rel_team
ROM: System Bootstrap, Version 12.4(1r) [hqluong 1r], RELEASE SOFTWARE (fc1)
R2 uptime is 8 hours, 9 minutes
System returned to ROM by power-on
System image file is "flash:c2800nm-adventerprisek9-mz.124-24.T1.bin"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
Cisco 2811 (revision 53.50) with 237568K/24576K bytes of memory.
Processor board ID FTX0952C333
2 FastEthernet interfaces
4 Serial(sync/async) interfaces
1 Virtual Private Network (VPN) Module
DRAM configuration is 64 bits wide with parity enabled.
239K bytes of non-volatile configuration memory.
62720K bytes of ATA CompactFlash (Read/Write)
Configuration register is 0x2102
R2#
R2#sh run
Building configuration...
Current configuration : 2233 bytes
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname R2
boot-start-marker
boot-end-marker
no aaa new-model
memory-size iomem 10
dot11 syslog
ip source-route
ip cef
ipv6 unicast-routing
ipv6 cef
multilink bundle-name authenticated
voice-card 0
vtp domain 29
vtp mode transparent
archive
log config
hidekeys
interface Loopback0
ip address 65.65.2.2 255.255.255.0
interface FastEthernet0/0
shutdown
duplex auto
speed auto
interface FastEthernet0/1
ip address 65.65.128.193 255.255.255.224
shutdown
duplex auto
speed auto
interface Serial0/2/0
ip address 65.65.13.2 255.255.255.224
encapsulation ppp
clock rate 2000000
interface Serial0/3/0
no ip address
shutdown
router ospf 65
router-id 65.65.2.2
log-adjacency-changes
network 65.65.2.2 0.0.0.0 area 1
network 65.65.13.2 0.0.0.0 area 1
network 65.65.128.193 0.0.0.0 area 1
ip forward-protocol nd
no ip http server
no ip http secure-server
ip sla 1
icmp-echo 65.65.3.3 source-ip 65.65.2.2
request-data-size 1500
frequency 10
ip sla schedule 1 life forever start-time now
ip sla reaction-configuration 1 react rtt threshold-value 5 1 threshold-type immediate action-type trapOnly
snmp-server community public RO
snmp-server host 150.150.1.1 public
control-plane
mgcp fax t38 ecm
mgcp behavior g729-variants static-pt
line con 0
line aux 0
line vty 0 4
login
scheduler allocate 20000 1000
end
R2#
R2#

IDS-4260 SNMP TRAPS SUPPORT....

Similar Messages

Maybe you are looking for