MIBS to Monitor Etherchannel and trunks via SNMP

I would like to monitor the status of etherchannel and trunk configurations in 6500 Catalyst switches running both CATOS and IOS. I would like to understand the specific mibs/OIDS that should be monitored for etherchannels and trunks. I am trying to get a better handle on tracking the etherchannels and trunk dynamically and then understanding when the ports are having issues (up/down and errors). I need to understand how to differentiate these type of ports from regular access ports.
Thanks,
Tim

Hi Tim,
what exactly do you want to query via SNMP?
For an (PAgP) Etherchannel, the member-interfaces might be interesting:
https://supportforums.cisco.com/message/3957914#3957914
For a trunk, you could start with the operational mode, depending on the platform you can use:
vlanTrunkPortDynamicStatus (CISCO-VTP-MIB):
vlanTrunkPortDynamicStatus.49 = notTrunking
vlanTrunkPortDynamicStatus.50 = trunking
vlanPortIslOperStatus (CISCO-STACK-MIB):
vlanPortIslOperStatus.13.43 = notTrunking
vlanPortIslOperStatus.13.44 = trunking
Hope that helps
Rolf

Similar Messages

Monitor the OSPF neighbors via snmp

Hello,
I monitor the OSPF neighbors via snmp. On the 3750 it works correctly.
http://www.cisco.com/en/US/tech/tk869/tk769/technologies_white_paper09186a00801177ff.shtml
On 3750X via snmp I do not see that OSPF neighbors in the VRF. How to see through snmp??
I use the IOS C3750E-UNIVERSALK9-M 15.0(2)SE on 3750X
best regard

The solution is to update to 12.2(55)SE5

Monitor pki certificate status via snmp

I recently discovered that a number of our remote sites could not connect to each other via dmvpn due to various certificate problems.
They could all connect to our hubs due to pre shared keys, so the problem was never discovered before a colleague discovered MM_KEY_EXCH states on some of the routers.
I therefore want to monitor the state of the certificates, preferably via snmp.
I found a nice looking mib,CISCO-PKI-PARTICIPATION-MIB, on http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?local=en&translate=Translate&objectInput=1.3.6.1.4.1.9.9.505
but none of our routers seem to support it, and when you click on "view supporting images", it also specifies: "There is no supporting images available for
CISCO-PKI-PARTICIPATION-MIB"
Do you have any experience on how to monitor certificate status on your Cisco routers?

No real solution. I found that they all needed to connect to one specific router, so I fire off "show crypto isakmp sa | inc MM_KEY_EXCH" on that specific router via our management platform, and receive a mail with the output on a daily basis.

Pvlan etherchannel and trunk

Hi all,
one simple question: is it possible to trunk a cat 6500 to a cat 4500 with an etherchannel and transport a private vlan (in my case 1 isolated lan) ?
Thanks in advance.

I don't think this is possible

ASA 5512 - monitor power supply status via snmp oid

Device – ASA 5512 running 9.1(1).
Show version:
ASA-1# sh ver
Cisco Adaptive Security Appliance Software Version 9.1(1)
Device Manager Version 6.6(1)
Compiled on Wed 28-Nov-12 11:15 PST by builders
System image file is "disk0:/asa911-smp-k8.bin"
Config file at boot was "startup-config"
ASA-1 up 8 hours 38 mins
Hardware:   ASA5512-K7, 4096 MB RAM, CPU Clarkdale 2792 MHz, 1 CPU (2 cores)
            ASA: 2048 MB RAM, 1 CPU (1 core)
Internal ATA Compact Flash, 4096MB
BIOS Flash MX25L6445E @ 0xffbb0000, 8192KB
Issue: looking for a snmp OID to poll power supply status (Inbuilt Power Supply - no redundant power supply in this scenario). Possibly what we see in show environment.
CSE analysis:
I tried using the OIDs belonging to CISCO-ENTITY-FRU-CONTROL-MIB , like cefcFRUPowerOperStatus and cefcFRUPowerAdminStatus but it didn’t return anything.
NOTE: I have done all the snmp walks from the Linux server. Do I doubt it’s something to do from the snmp manager side.
Couple of observations. The CISCO-ENTITY-FRU-CONTROL-MIB talks about the field replaceable power supplies, so I doubt if it’s going to return the value for inbuilt power supply.
Second, I noticed that there are snmp traps supported for power supply and threshold setting. See configuration below. Is it that only traps works for power supply and environment related details?
Snmpwalk on cefcFRUPowerStatusEntry returns nothing:
[root@tonbenso-eagle bin]# ./snmpwalk -v2c -c public 172.16.169.29 1.3.6.1.4.1.9.9.117.1.1.2.1
SNMPv2-SMI::enterprises.9.9.117.1.1.2.1 = No Such Object available on this agent at this OID
Snmpwalk on cefcFRUPowerOperStatus returns nothing:
[root@tonbenso-eagle bin]# ./snmpwalk -v2c -c public 172.16.169.29 1.3.6.1.4.1.9.9.117.1.1.2.1.2
SNMPv2-SMI::enterprises.9.9.117.1.1.2.1.2 = No Such Instance currently exists at this OID
Snmpwalk on cefcFRUPowerAdminStatus returns nothing:
[root@tonbenso-eagle bin]# ./snmpwalk -v2c -c public 172.16.169.29 1.3.6.1.4.1.9.9.117.1.1.2.1.1
SNMPv2-SMI::enterprises.9.9.117.1.1.2.1.1 = No Such Instance currently exists at this OID
[root@tonbenso-eagle bin]#
login as: root
I tried polling the ciscoEntityFRUControlMIB to see what all values it return. It just returned enterprises.9.9.117.1.3.1.0 = INTEGER: 2. Meaning cefcMIBEnableStatusNotification is FALSE (value 2). Meaning cefcModuleStatusChange, cefcPowerStatusChange, cefcFRUInserted, cefcFRURemoved, cefcUnrecognizedFRU and cefcFanTrayStatusChange are prevented from being sent.
Snmpwalk on ciscoEntityFRUControlMIB
[1]+ Stopped                 ./snmpwalk -v2c -c public 172.16.169.29
[root@tonbenso-eagle bin]# ./snmpwalk -v2c -c public 172.16.169.29 1.3.6.1.4.1.9.9.117
SNMPv2-SMI::enterprises.9.9.117.1.3.1.0 = INTEGER: 2
Object
cefcMIBEnableStatusNotification
OID
1.3.6.1.4.1.9.9.117.1.3.1
Type
TruthValue
Permission
read-write
Status
current
MIB
CISCO-ENTITY-FRU-CONTROL-MIB ; - View Supporting Images
Description
"This variable indicates whether the system
produces the following notifications:
cefcModuleStatusChange, cefcPowerStatusChange,
cefcFRUInserted, cefcFRURemoved,
cefcUnrecognizedFRU and cefcFanTrayStatusChange.
A false value will prevent these notifications
from being generated."
Found couple of bugs:
CSCty32558 – but then this is for 5585 and I see it is fixed in 8.4
CSCul90037 – New state
Show snmp-server oidlist:
http://www-tac.cisco.com/Teams/ks/c3/getLargeFile.php?srId=632222409&fileName=20141030-013905_ASA-show-snmp-server-oidlist.txt
Show tech:
Sh run | in snmp:
ASA-1# sh run | in snmp
snmp-server host asa 172.18.123.228 community *****
no snmp-server location
no snmp-server contact
snmp-server community *****
snmp-server enable traps entity power-supply-presence power-supply-temperature -----à I was talking about this trap above
any help will be appreciated.

Hi
I've got an ASA with redundant power supplies. An ASA5585. So I have the need to monitor them. :-) So how can we do it?
Also I've made a SNMP-Walk through the ASA v8.4(2)8 and it doesn't show up any ENV-MIB values. The
1.3.6.1.4.1.9.9.13 tree is not available. Are you shure it's available on the ASA?
Funny is also that the command "show snmp-server oidlist" from the 8.4 configuration guide is not available on the real CLI. I think the documentation guys were faster than the coders. ;-)
Kind regards
Roberto

How to monitor bandwidth on Catalyst via SNMP?

I've got c3750g with 12.2(55)SE.
When I try ifSpeed (1.3.6.1.2.1.2.2.1.5), i've got 1 peak 999999999 and then only 0. Polling is 1 second.
When I try ifHighSpeed (1.3.6.1.2.1.31.1.1.1.15), I've 0 also.
When I try ifInOctets from snmp-v2 MIB (1.3.6.1.2.1.2.2.1.10), I've got results, but since it summary - my software cannot do calculations and I cant get instant interface bandwidth.
Is there any solutions for catalyst?

Hi,
Are you saying ifSpeed. is changing value from one poll to the next? What kind of interface is it? Sounds like a bug, or an error in polling. Please post the snmpwalk of ifDescr, ifType, and ifSpeed.
For the ifHighSpeed issue, from the IF-MIB entry about that object: "For a sub-layer which has no concept of bandwidth, this object should be zero." Are you polling ifHighSpeed on a sub-layer interface?
Bandwidth utilization is always calculated by taking multiple readings of in or out counters. There will not be a separate counter kept in our snmp agent, when separate values already exist and can be calculated. Thus, since you can use ifSpeed and poll ifInOctets to get the delta, and then calculate the result, our snmp agent will not contain the utilization number.
If you want a graph of bandwidth utilization over time, I would suggest obtaining MRTG. It is available free of charge over the web, just search for MRTG download.
Hope that helps,
Curtis

Monitor SA520 via SNMP

Hi
I have a SA520 configured in load balancing. It is possible to monitor the WAN status via SNMP?
Thanks
Marco

I noticed that Staffan gave a good answer over at Stackoverflow. I'm making a copy of it here if somebody else is searching the forum and would like to know.
"The details are on [this webpage|http://java.sun.com/j2se/1.5.0/docs/guide/management/SNMP.html]. In short, what you have to do is:
* Start with -Dcom.sun.management.snmp.port=portNum
* Copy the ACL template file in JRE_HOME/lib/management/snmp.acl.template to JRE_HOME/lib/management/snmp.acl, and make it readable and writeable by only the owner."

Sharing 1 monitor, keyboard and mouse

I have a brand new macbook (bought March 1, 2007). I additionally own a Dell tower running Windows XP. Is it possible to have the macbook and Dell PC share 1 monitor, keyboard and mouse via a KVM switch? How do I do it? What cables do I need?
MacBook MA700LL/A Mac OS X (10.4.8)

USB for the Keyboard/Mouse
Mini-DVI to DVI or VGA (whichever your KVM switch uses) adapter for the video.

Monitor OSPFv3 via SNMP not working - Is OSPFv3 MIB supported?

I need to be able to query the OSPFv3-MIB via SNMP to track the status of OSPFv3.
I have setup a 3945 router in a test lab network and I have configured it in an Ipv6 network with OSPFv3. The router has an active OSPFv3 neighbor and I can use that neighbor to send/receive data (the routing is working fine). However, when I walk the SNMP MIBs I don't get a response for the OSPFv3-MIB. According to the Cisco SNMP Object Navigator this MIB should be located at 1.3.6.1.3.102.*. Below is an example trying to query a particular OID from the OSPFv3 MIB.
C:\>snmpwalk -v 2c -c public 197.16.18.1 1.3.6.1.3.102.1.5.1.8
SNMPv2-SMI::experimental.102.1.5.1.8 = No Such Object available on this agent at this OID
I can walk other parts of the MIB (For example the OSPFv2 MIB) and get responses, so I know the router has SNMP turned on.
Looking at the Cisco IOS Mib Locator tool (http://tools.cisco.com/ITDIT/MIBS/MainServlet?IMAGE_NAME=c3900-universalk9-mz.SPA.152-4.M3.bin) for the current software version I am running (c3900-universalk9-mz.SPA.152-4.M3.bin) on a 3945 router it claims that the OSPFv3 MIB is supported in this image.
Maybe I need to configure something else? Maybe my SW doesn't really support this MIB? Could it be that I have to query the router over Ipv6 to get the OSPFv3-MIB (I have only been trying Ipv4)?

Hi ,
As Vinod suggested , you need to configure the "SNMP CONTEXT"
Configure:
==========
Basic configuration consists of 4 steps:
Configure mapping between VRF name and SNMP context :
snmp-server vrf <vrf_1> context <context_1>
Create community string corresponding to the VRF :
snmp-server community <vrf_1> RW
Define context string
snmp-server context <context_1>
Configure mapping between context and community:
snmp-server community-map <vrf_1> context <context_1>
(optional) Configure snmp server traps for this VRF community
snmp-server host <IP> traps version 2c <vrf_1>
For e.g:
snmp-server vrf miki
context miki_bgp
snmp-server community miki RW
snmp-server context miki_bgp
snmp-server community-map miki context miki_bgp
Hope it will help
Thanks-
Afroz
***Ratings Encourages Contributors ***

Monitor the # of registered AP's on a 2504 via SNMP?

Does anyone know the OID to determine the number of registered AP's on a WLC (specifically the AIR-CT2504).
I've got both of the Airespace MIBs and have browsed through them but I can't seem to find the correct location. I can find a list of all of the AP's registered but our monitoring software doesn't have the ability to 'count' that index. As such, I'm looking for a count/summation of the total number of registered AP's via SNMP.
Thanks!
Brian

It's an old post, but I had the same question. After some research I found a simple answer...
Use this OID: .1.3.6.1.4.1.9.9.618.1.8.4.0
If you want to also get the total number of Clients, use: .1.3.6.1.4.1.9.9.618.1.8.12.0
It does not work on 7.0 - it does on 7.6 and 8.0.
Best regards
Christoph

N5K - monitor vPC status via SNMP

Can I monitor a vPC via SNMP?
I'm interested in "Peer status", "vPC keep-alive status", "Configuration consistency status" and "vPC role".
N5K1(config-if)# show vpc
Legend:
(*) - local vPC is down, forwarding via vPC peer-link
vPC domain id                   : 1
Peer status                     : peer adjacency formed ok
vPC keep-alive status           : peer is alive
Configuration consistency status: success
vPC role                        : primary

Good question, I also want to know how we can do that.
Sent from Cisco Technical Support iPad App

Private Vlan, Etherchannel and Isolated Trunk on Nexus 5010

I'm not sure if I'm missing something basic here however i though that I'd ask the question. I recieved a request from a client who is trying to seperate traffic out of a IBM P780 - one set of VIO servers/clients (Prod) is tagged with vlan x going out LAG 1 and another set of VIO server/clients (Test) is tagged with vlan y and z going out LAG 2. The problem is that the management subnet for these devices is on one subnet.
The infrastructure is the host device is trunked via LACP etherchannel to Nexus 2148TP(5010) which than connects to the distribution layer being a Catalyst 6504 VSS. I have tried many things today, however I feel that the correct solution to get this working is to use an Isolated trunk (as the host device does not have private vlan functionality) even though there is no requirement for hosts to be segregated. I have configured:
1. Private vlan mapping on the SVI;
2. Primary vlan and association, and isolated vlan on Distribution (6504 VSS) and Access Layer (5010/2148)
3. All Vlans are trunked between switches
4. Private vlan isolated trunk and host mappings on the port-channel interface to the host (P780).
I haven't had any luck. What I am seeing is as soon as I configure the Primary vlan on the Nexus 5010 (v5.2) (vlan y | private-vlan primary), this vlan (y) does not forward on any trunk on the Nexus 5010 switch, even without any other private vlan configuration. I believe this may be the cause to most of the issues I am having. Has any one else experienced this behaviour. Also, I haven't had a lot of experience with Private Vlans so I might be missing some fundamentals with this configuration. Any help would be appreciated.

Hello Emcmanamy, Bruce,
Thanks for your feedback.
Just like you, I have been facing the same problematic last months with my customer.
Regarding PVLAN on FEX, and as concluded in Bruce’s previous posts I understand :
You can configure a host interface as an isolated or community access port only.
We can configure “isolated trunk port” as well on a host interface. Maybe this specific point could be updated in the documentation.
This ability is documented here =>
http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/layer2/513_N2_1/b_Cisco_n5k_layer2_config_gd_rel_513_N2_1_chapter_0101.html#task_1170903
You cannot configure a host interface as a promiscuous port.
You cannot configure a host interface as a private VLAN trunk port.
Indeed a pvlan is not allowed on a trunk defined on a FEX host interface.
However since NxOS 5.1(3)N2(1), the feature 'PVLAN on FEX trunk' is supported. But a command has to be activated before => system private-vlan fex trunk . When entered a warning about the presence of ‘FEX isolated trunks’ is prompted.
http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/layer2/513_N2_1/b_Cisco_n5k_layer2_config_gd_rel_513_N2_1_chapter_0101.html#task_16C0869F1B0C4A68AFC3452721909705
All these conditions are not met on a N5K interface.
Best regards.
Karim

Monitor JRockit via SNMP

I would like to monitor my Java application (running in JRockit) via SNMP protocol. I only need some basic informations. Is there any startup parameter that I can add to my app to enable SNMP?

I noticed that Staffan gave a good answer over at Stackoverflow. I'm making a copy of it here if somebody else is searching the forum and would like to know.
"The details are on [this webpage|http://java.sun.com/j2se/1.5.0/docs/guide/management/SNMP.html]. In short, what you have to do is:
* Start with -Dcom.sun.management.snmp.port=portNum
* Copy the ACL template file in JRE_HOME/lib/management/snmp.acl.template to JRE_HOME/lib/management/snmp.acl, and make it readable and writeable by only the owner."

EtherChannel and Vlan trunk

I am trying to have 3 group of 4 GigE ports on the 3560G as a etherchannel and connect to 4 dells.
On gi0/7 - 10 the trunk config seems to work but I am not able to route between the switches. Here is the config ...
Can anyone take a look tell me what's missing? Much appreciated!
Building configuration...
Current configuration : 3422 bytes
! Last configuration change at 00:35:24 UTC Sat Jul 9 2005
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
hostname cisco_switch_b
enable secret xxxx
enable password xxx
ip subnet-zero
ip routing
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
interface Port-channel1
switchport access vlan 5
switchport trunk encapsulation dot1q
switchport mode trunk
interface GigabitEthernet0/1
description To Internet Router
no switchport
ip address 10.1.1.2 255.255.255.0
ip helper-address 10.1.1.8
interface GigabitEthernet0/2
interface GigabitEthernet0/3
interface GigabitEthernet0/4
interface GigabitEthernet0/5
interface GigabitEthernet0/6
interface GigabitEthernet0/7
description To Dell_switch_1
switchport access vlan 5
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 1 mode on
spanning-tree portfast
interface GigabitEthernet0/8
switchport access vlan 5
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 1 mode on
spanning-tree portfast
interface GigabitEthernet0/9
switchport access vlan 5
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 1 mode on
spanning-tree portfast
interface GigabitEthernet0/10
switchport access vlan 5
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 1 mode on
spanning-tree portfast
interface GigabitEthernet0/11
description To Dell_switch_2
switchport access vlan 6
spanning-tree portfast
interface GigabitEthernet0/12
switchport access vlan 6
spanning-tree portfast
interface GigabitEthernet0/13
switchport access vlan 6
spanning-tree portfast
interface GigabitEthernet0/14
switchport access vlan 6
spanning-tree portfast
interface GigabitEthernet0/15
description To Dell_switch_3
switchport access vlan 7
switchport mode access
spanning-tree portfast
interface GigabitEthernet0/16
switchport access vlan 7
switchport mode access
spanning-tree portfast
interface GigabitEthernet0/17
switchport access vlan 7
switchport mode access
spanning-tree portfast
interface GigabitEthernet0/18
switchport access vlan 7
switchport mode access
spanning-tree portfast
interface GigabitEthernet0/19
interface GigabitEthernet0/20
interface GigabitEthernet0/21
interface GigabitEthernet0/22
interface GigabitEthernet0/23
interface GigabitEthernet0/24
interface GigabitEthernet0/25
interface GigabitEthernet0/26
interface GigabitEthernet0/27
interface GigabitEthernet0/28
interface Vlan1
no ip address
shutdown
interface Vlan5
ip address 10.1.5.1 255.255.255.0
interface Vlan6
ip address 10.1.6.1 x.x.255.0
ip helper-address 10.1.5.7
interface Vlan7
ip address 10.1.7.1 x.x.x.0
ip helper-address 10.1.5.7
ip default-gateway 10.1.1.1
ip classless
ip http server
access-list 100 permit ip host 0.0.0.0 host 255.255.255.255
access-list 100 permit udp host 10.1.5.1 host 10.1.5.7 eq bootps
access-list 100 permit udp host 10.1.5.1 host 10.1.5.7 eq bootpc
access-list 100 permit udp host 10.1.5.7 host 10.1.5.1 eq bootps
access-list 100 permit udp host 10.1.5.7 host 10.1.5.1 eq bootpc
access-list 100 permit ip host 0.0.0.0 host 255.255.255.0
control-plane
line con 0
exec-timeout 0 0
line vty 0 4
password xxx
no login
line vty 5 15
password xxx
no login
ntp server 10.1.5.7
end

Here is an example to configure EtherChannel:
Cisco Catalyst 3560 Switch Configuration
Set MDIX automatic To enable cisco catalyst to accept cross cable and straight cable connection
# config t
# int range g0/1 28
# switchport mode access - Configure Cisco catalyst to normal switch port
# speed auto
# duplex auto
# mdix auto
# end
# show controllers Ethernet-controller
# copy running-config startup-config
Configure Etherchannels support redundancy and network load balancing
# config t
# int range g0/23 24
# switchport mode access
# switchport mode vlan 1
# channel-group 5 mode active
# exit
Configure Etherchannels load balancing
# config t
# port-channel load-balance src-dst-mac
# exit
Configure IP Address:
# config t
# int vlan 1
# ip address 10.xx.xx.xx 255.255.252.0
# ip default-gateway 10.xx.xx.1
# config t
# int range g0/19-20
# channel-group 2 mode active
# config t
# int range g0/17-18
# channel-group 3 mode active
# channel-group mode 3 desirable
# int port-channel 3
# switchport mode access
# config t
# int range g0/15-16
# channel-group 4 mode active
# show etherchannel summary to check Etherchannel port status
Regards,
Junhan
IT Specialist

SNMP MIBs for Monitoring IM&P

I would like to monitor CPU and memory for IM&P version 10.5.2 on four separate clusters but I'm unable to find any documentation on which MIBs should be used. Can anyone point me in the right direction?

Hi Ruben,
Please check the following link
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/service/9_1_1/admin/CUCM_BK_CE552AF7_00_cisco-unified-serviceability-administration-91/CUCM_BK_CE552AF7_00_cisco-unified-serviceability-administration-91_chapter_01100.html#CUP0_RF_SC67F734_00
HTH
Manish

MIBS to Monitor Etherchannel and trunks via SNMP

Similar Messages

Maybe you are looking for