SNMP TRAPS and SLA

HI
I am trying to configure IP SLA to send SNMP TRAPS but looks like doing some mistake ..
i have following configured
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-ascii-font-family:Cambria;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Cambria;
mso-hansi-theme-font:minor-latin;}
ip sla monitor 2
type echo protocol ipIcmpEcho 150.1.3.3 source-ipaddr 1.1.98.7
frequency 10!
ip sla monitor schedule 2 start-time now recurring
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-ascii-font-family:Cambria;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Cambria;
mso-hansi-theme-font:minor-latin;}
ip sla reaction-configuration 2 react rtt threshold-type immediate action-type trapOnly
ip sla logging traps
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-ascii-font-family:Cambria;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Cambria;
mso-hansi-theme-font:minor-latin;}
snmp-server community public RO
snmp-server enable traps rtr
snmp-server host 1.1.128.226 public
1.1.98.7 is the loopback ip on my network. To test the snmp traps, i enabled debug snmp packets and shutdown loopback interface (1.1.98.7)
I don't see any snmp message in debug output ..
am i missing something or it is not possible to get traps directly from ip sla .. do i need EEM for this?

sorry, it actually worked .. i just gave a restart to ip sla and it worked.
looks like router was already in threshold stage when i was activating reaction-config ..
but i am still confused which command is actualluy generating these traps since i have taken out some of the snmp config out and i stil get traps ..
below is the oputput of traps which i get when i restart ip sla .
*Feb 15 17:10:43.453: SNMP: 150.150.1.1 queue overflow, dropping packet
*Feb 15 17:10:43.453: SNMP: Queuing packet to 150.150.1.1
*Feb 15 17:10:43.453: SNMP: V1 Trap, ent rttMonNotificationsPrefix, addr 65.65.2.2, gentrap 6, spectrap 3
rttMonCtrlAdminTag.1 =
rttMonHistoryCollectionAddress.1 = 41 41 03 03
rttMonCtrlOperOverThresholdOccurred.1 = 1
*Feb 15 17:10:43.497: SNMP: 150.150.1.1 queue overflow, dropping packet
*Feb 15 17:10:43.501: SNMP: Queuing packet to 150.150.1.1
*Feb 15 17:10:43.501: SNMP: V1 Trap, ent rttMonNotificationsPrefix, addr 65.65.2.2, gentrap 6, spectrap 5
rttMonCtrlAdminTag.1 =
rttMonHistoryCollectionAddress.1 = 41 41 03 03
rttMonReactVar.1 = 1
rttMonReactOccurred.1 = 1
rttMonReactValue.1 = 12
rttMonReactThresholdRising.1 = 5
rttMonReactThresholdFalling.1 = 1
rttMonEchoAdminLSPSelector.1 = 00 00 00 00
*Feb 15 17:10:43.585: SNMP: 150.150.1.1 queue overflow, dropping packet
*Feb 15 17:10:43.585: SNMP: Queuing packet to 150.150.1.1
*Feb 15 17:10:43.585: SNMP: V1 Trap, ent rttMonNotificationsPrefix, addr 65.65.2.2, gentrap 6, spectrap 5
rttMonCtrlAdminTag.1 =
rttMonHistoryCollectionAddress.1 = 41 41 03 03
rttMonReactVar.1 = 1
rttMonReactOccurred.1 = 1
rttMonReactValue.1 = 12
rttMonReactThresholdRising.1 = 5
rttMonReactThresholdFalling.1 = 1
rttMonEchoAdminLSPSelector.1 = 00 00 00 00
below is my running config and sh ver
R2#sh ver
Cisco IOS Software, 2800 Software (C2800NM-ADVENTERPRISEK9-M), Version 12.4(24)T1, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Fri 19-Jun-09 15:13 by prod_rel_team
ROM: System Bootstrap, Version 12.4(1r) [hqluong 1r], RELEASE SOFTWARE (fc1)
R2 uptime is 8 hours, 9 minutes
System returned to ROM by power-on
System image file is "flash:c2800nm-adventerprisek9-mz.124-24.T1.bin"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
Cisco 2811 (revision 53.50) with 237568K/24576K bytes of memory.
Processor board ID FTX0952C333
2 FastEthernet interfaces
4 Serial(sync/async) interfaces
1 Virtual Private Network (VPN) Module
DRAM configuration is 64 bits wide with parity enabled.
239K bytes of non-volatile configuration memory.
62720K bytes of ATA CompactFlash (Read/Write)
Configuration register is 0x2102
R2#
R2#sh run
Building configuration...
Current configuration : 2233 bytes
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname R2
boot-start-marker
boot-end-marker
no aaa new-model
memory-size iomem 10
dot11 syslog
ip source-route
ip cef
ipv6 unicast-routing
ipv6 cef
multilink bundle-name authenticated
voice-card 0
vtp domain 29
vtp mode transparent
archive
log config
hidekeys
interface Loopback0
ip address 65.65.2.2 255.255.255.0
interface FastEthernet0/0
shutdown
duplex auto
speed auto
interface FastEthernet0/1
ip address 65.65.128.193 255.255.255.224
shutdown
duplex auto
speed auto
interface Serial0/2/0
ip address 65.65.13.2 255.255.255.224
encapsulation ppp
clock rate 2000000
interface Serial0/3/0
no ip address
shutdown
router ospf 65
router-id 65.65.2.2
log-adjacency-changes
network 65.65.2.2 0.0.0.0 area 1
network 65.65.13.2 0.0.0.0 area 1
network 65.65.128.193 0.0.0.0 area 1
ip forward-protocol nd
no ip http server
no ip http secure-server
ip sla 1
icmp-echo 65.65.3.3 source-ip 65.65.2.2
request-data-size 1500
frequency 10
ip sla schedule 1 life forever start-time now
ip sla reaction-configuration 1 react rtt threshold-value 5 1 threshold-type immediate action-type trapOnly
snmp-server community public RO
snmp-server host 150.150.1.1 public
control-plane
mgcp fax t38 ecm
mgcp behavior g729-variants static-pt
line con 0
line aux 0
line vty 0 4
login
scheduler allocate 20000 1000
end
R2#
R2#

Similar Messages

After upgrading to NX-OS 5.04, out snmp traps monitoring system is not generating ticket / incident for the snmp traps and my question is whether we need to apply new MIBS for that?

after upgrading to NX-OS 5.04, out snmp traps monitoring system is not generating ticket / incident for the snmp traps and my question is whether we need to apply new MIBS for that?

Looking at the error message "The Network Adapter could not establish the connection" , It appears hostname and port may be incorrect. Review the targets.xml under E:\oracle\product\10.2.0\db_1\SAP_solman_SDB\emd and
emoms.properties under E:\oracle\product\10.2.0\db_1\SAP_solman_SDB\config folder to make sure host ( sap_solman) and port (1527) are correct.
As far as setting the environment variables goes, you can go to control panel -> system -> advanced -> environment variables and set the ORACLE_HOME and ORACLE_SID
-Ramesh

SNMP Trap and logical hostname

Consider a case in which a cluster node has two public network interface in a IPMP group and a logical hostname (ip addr) is also assigned to one of the interfaces.
If an SNMP trap is generated from this cluster node, what would be the source IP address in the IP header of the trap?
Is there a way to restrict the source IP addr to one of the interfaces?

There is only IPMP group so I'm not sure what you mean by active/standby groups. If your question meant to ask whether the interfaces within the group are in active/standby, the answer is no.
Even if they were active/standby and the trap always travels over the active interface, the question still remains whether the source IP address would be the physical address or the logical address, assuming the logical address is also assigned to the same interface.

SNMP Traps and DCNM 6.1(2)

Hello Everyone,
I have DCNM 6.1(2) installed on a Windows Server 2008 R2 to monitor and manage 4 Nexus 7018 (12VDC's).
I currently have one problem left. All snmp traps send from the Nexus Switches are all dropped and none processed, and i currently rely on the syslog messages, but would prefer the snmp traps.
I start wondering if the snmp traps are only for SAN devices?
Or If I am doing something totally wrong. Port for the traps is 2162. Discovery via snmpv3 works... Traps are sent and recieved but dropped.
Perhaps someone could shed some light into this.
Thanks
Pol

Hi,
Yes, DCNM for SAN supports forwarding of alerts using Cisco Call Home, EMC Call Home, email, and Simple Network Management Protocol (SNMP) traps.
DCNM LAN supprts Syslog and E-Mail.

SNMP Traps and Monitoring UCS

Hi Guys;
During the implementation of UCS Blades I found a number of issues that have not been solved. I need to monitor the UCS solution through a NMS with traps and monitoring certain items. To do this I require deliver the MIBS to the Monitoring group and tell the OIDs to monitor certain things but I dont found especific documentation about this. I need to monitor things like the states of the fans, cpu, memory and connections.
The solution consists of:
Fabric Interconnects: 2 x 6140XP
Chassis: 9 x 5108
Servers: 70 x B230M2
UCSM v1.4
Although i need apply certain security to SNMP like ACL to secure the solution in the Customer Environment.

Hello Orlando,
UCS MIBs are available here for download
ftp://ftp.cisco.com/pub/mibs/supportlists/ucs/
MIB reference guide
http://www.cisco.com/en/US/docs/unified_computing/ucs/sw/mib/reference/UCS_MIBRef.html
Padma

Snmp trap and WLSE

hallo
in a wireless network with WDS service and WLSE, all Infrastructure APs are registered to WDS. To manage alarms, faults etc in Infrastructure APs the logs must be sent to the WDS or directly to WLSE ?
francesco

You have to send the logs to WLSE.
http://www.cisco.com/en/US/products/sw/cscowork/ps3915/index.html

SNMP Traps is not being sent clear event when DB is UP

Test Traps everything else is also coming fine. Listener, Database Errors, down etc are all coming in fine thru' SNMP. SNMP traps and OEM all working ok. Question is for database up event there is no CLEAR event being sent. Is there anything else that needs to be configured?
SQL> SELECT owner, name, enqueue_enabled, dequeue_enabled FROM dba_queues
2 WHERE name like '%NOTIFY%';
OWNER NAME ENQUEUE DEQUEUE
SYS AQ_PROP_NOTIFY YES YES
SYSMAN AQ$_MGMT_NOTIFY_QTABLE_E NO NO
SYSMAN MGMT_NOTIFY_Q YES YES
SYSMAN AQ$_MGMT_NOTIFY_INPUT_QTABLE_E NO NO
SYSMAN MGMT_NOTIFY_INPUT_Q YES YES

Hello,
Under interface for specific interface: snmp trap link-status
http://www.cisco.com/en/US/docs/ios/12_0/configfun/command/reference/frmonitr.html#wp1023375
Also in newer IOS
The snmp-server enable traps snmp [ linkup] [linkdown] form of this command replaces the snmp trap link-status interface configuration mode command.
http://www.cisco.com/en/US/tech/tk648/tk362/technologies_tech_note09186a0080094a05.shtml
HTH
Saju
Pls rate helpful posts

Snmp trap versus syslog message

Hi,
Most network devices will send snmp traps and syslog messages to a central server.
For analyzing purpose this server runs software to display the messages or traps.
My question is, what is the difference between syslog messages and snmp traps?
What is best practise?
Thank you very much.
Hansruedi

From the very basic level, traps and syslog differ in the encoding. Syslog messages are typically text messages sent within a UDP packet. There is a bit of binary encoding to indicate the syslog facility and severity. SNMP traps have encoded ASN.1 fields (called variable bindings). These varbinds are not ASCII text like syslog messages. Instead they are encoded object identifiers that can be translated into object names using MIB definitions.
More syslog messages exist than SNMP traps because syslog messages do not have as much governance associated with them. However, we typically recommend that customers enable both as there are some details available in traps that you may not get in syslog messages. Traps can also be processed in a more programmatic fashion because of the documentation that goes into the MIBs that define them.

TimesTen SNMP traps

Hello,
I have TT over Windows 32 bit (stand alone).
I'm trying to configure SNMP traps in order to maintain Alerts for the TimesTen database.
I've followed the doc *"Oracle Times Ten In-Memory Database Error Messages and SNMP Traps"*,
and comfigured the snmp.ini file.
However, when I'm trying to use the utility snmptrapd.exe in order to start listening to the snmp traps and doing my tests, I'm getting an error: snmptrapd.exe is not a valid Win32 application, and in the CMD window I also see *"Access is denied"* error.
My user in the Administrators group.
Why do I receive the error and how can I overcome it ?
Thanks in advance,
Roni.

Hi Roni,
Getting this executable working independently of TimesTen is the first thing to look at.
- Where did you get the snmptrapd.exe executable from?
- Make sure that you get this executable from a known reputable source.
There are viruses out there that use this name.
- The MKS version of this utility is supported on Windows 2000, Windows XP, Windows Server 2003 and Vista.
- Make sure that you have the correct version of the executable for your Windows platform.
Doug

EBGP PEER FLAP SNMP TRAP

Hi
Whenever there is a bgp neighbour flap, we are not getting snmp traps on the HP NNMI Server.. I believe during the neighbour flap, the device is unable to communicate with NNMI and drop the trap..
So I would like to write a custom EEM SCRIPT that can match a syslog pattern and generate a customised SNMP trap and send it to NNMI. May be I can delay the trap generation or sending so that the device restores the connectivity and then send an alert
Here are my questions:
Is this a good idea?
Can you give me a sample configuration with the MIB Values to be generated?
What MIB Should be loaded on the server?
I am curious how others are monitoring this kind of bgp flaps...
Sent from Cisco Technical Support iPad App

After i enabled snmp inform using following command
snmp-server host 100.190.19.33 informs version 2c XXXX
I see it is contineously incrementing snmp inform sent messages on the router..I am not sure what it is sending..I would like to be specific like sending only BGP snmp informs to the NMS..is it possible ?
DR1#show snmp
Chassis: FHK0850F0HL
4338622 SNMP packets input
    0 Bad SNMP version errors
    746076 Unknown community name
    0 Illegal operation for community name supplied
    0 Encoding errors
    35020739 Number of requested variables
    0 Number of altered variables
    3303916 Get-request PDUs
    97632 Get-next PDUs
    0 Set-request PDUs
    0 Input queue packet drops (Maximum queue size 1000)
6639622 SNMP packets output
    0 Too big errors (Maximum packet size 1500)
    546341 No such name errors
    0 Bad values errors
    0 General errors
    3592535 Response PDUs
    3047076 Trap PDUs
SNMP Dispatcher:
   queue 0/75 (current/max), 0 dropped
SNMP Engine:
   queue 0/1000 (current/max), 0 dropped
SNMP logging: enabled
    Logging to 10.45.224.19.162, 0/10, 761350 sent, 347 dropped.
    Logging to 10.48.176.1.162, 0/10, 759955 sent, 1886 dropped.
    Logging to 100.190.19.25.162, 0/10, 761329 sent, 368 dropped.
    Logging to 100.190.19.33.162, 0/10, 761367 sent, 474 dropped.
SNMP Manager-role output packets
    0 Get-request PDUs
    0 Get-next PDUs
    0 Get-bulk PDUs
    0 Set-request PDUs
    11 Inform-request PDUs
    0 Timeouts
    0 Drops
SNMP Manager-role input packets
    0 Inform request PDUs
    0 Trap PDUs
    11 Response PDUs
    0 Responses with errors
SNMP informs: enabled
    Informs in flight 0/25 (current/max)
    Logging to 100.190.19.33.162
        11 sent, 0 in-flight, 0 retries, 0 failed, 0 dropped

Groupwise SNMP TRAPS To Omnibus

Hello,
We are currently using Groupwise 7 however I am not the administrator.
I am more in charge of monitoring. We are looking to monitor Groupwise for issues and I have been looking to see if and how Groupwise can send SNMP TRAPS. I can not seem to find any information on this and when I called Novell they seemed lost.
Could anyone tell me....
Is Groupwise able to send SNMP TRAPs and if so where is this configured?
Thank you in advance for any help.

larryleeroberts wrote:
> Hello,
>
> We are currently using Groupwise 7 however I am not the administrator.
>
> I am more in charge of monitoring. We are looking to monitor Groupwise
> for issues and I have been looking to see if and how Groupwise can send
> SNMP TRAPS. I can not seem to find any information on this and when I
> called Novell they seemed lost.
>
> Could anyone tell me....
> Is Groupwise able to send SNMP TRAPs and if so where is this
> configured?
>
> Thank you in advance for any help.
>
>
Did you look at the MIBs included? I haven't for a long many years.
I think they are mostly get/setters not traps though

Enabled SNMP trap

Hi Experts,
When i configure Snmp trap in switches it is showing a list of commands, What exacatly is these are?
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps stpx
snmp-server enable traps port-security
snmp-server enable traps config
snmp-server enable traps entity
snmp-server enable traps copy-config
snmp-server enable traps fru-ctrl
snmp-server enable traps flash insertion removal
snmp-server enable traps syslog
snmp-server enable traps bridge
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps hsrp
snmp-server enable traps bgp
snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-message
snmp-server enable traps ipmulticast
snmp-server enable traps msdp
snmp-server enable traps rtr
snmp-server enable traps vlan-membership
Does it cause more CPU utilization? Do i need to enable snmp traps to monitor network using solarwinds NPM. I have configured community string and snmpserver host address.
Thanks
Vipin

Hi Vipin,
We usually configure SNMP traps to monitor our network reachability and availability. If anything goes on Device whether it is a link down situation or any issue with protocol running on the Device. So, whenever anything goes wrong on the device it generates an SNMP Trap and notify you if you have configure SNMP-Server host to receive the notifications/traps.
To configure SNMP host command following is the command that you need to configure:
(config)#snmp-server host
E.g.:
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
Above trap will send you send you following information :
>Authentication : if any one tries to poll the device using wrong community string
>linkdown/linkup : if any of the interface/ports/links goes down it will notify you
snmp-server enable traps bgp
Above trap will send you traps regarding problems with BGP running on your Device
Now I come to CPU part, yes it may spike CPU sometime if regular polling is done from the Management Server or if any MIB has long output. You can use Solarwinds NPM for the same however if it causes high cpu then you have to openup a TAC Case with NMS team to have the issue resolved.
To know more about MIB's on your device you can execute command on your Device 'show snmp mib' and can translate the MIB's using following link to know more about particular MIB :
http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?local=en&translate=Translate&objectInput=1.3.6.1.2.1.15
Kindly let me know in case you have any other doubts.
Thanks & Regards,
Nikhil Gakhar

SNMP Traps on ASA5585-SSP-IPS10

Hi,
I want to configure SNMP trap and Syslog on ASA5585-SSP-IPS10 with 7.x OS.
I want to send thos trap or syslog on my SNMP.
your help appreciated.

You need to do this on a per-signature basis. There is no global "send all my signature events via SNMP traps".
http://www.cisco.com/en/US/docs/security/ips/7.0/configuration/guide/cli/cli_signature_definitions.html#wp1119516
- Bob

SNMP trap on IP sla

Hi all,
Does anyone know that, how can SNMP trap the information(such as jitter, number of packet loss, process number of RTR) from a router enabled IP SLA/RTR?

SNMPv1 (Simple Network Management Protocol) and SNMPv2c, along with the associated Management Information Base (MIB), encourage trap-directed notification.
The idea behind trap-directed notification is as follows: if a manager is responsible for a large number of devices, and each device has a large number of objects, it is impractical for him to poll or request information from every object on every device. The solution is for each agent on the managed device to notify the manager without solicitation. It does this by sending a message known as a trap of the event.
After receiving the event, the manager displays it and may choose to take an action based on the event. For instance, the manager can poll the agent directly, or poll other associated device agents to get a better understanding of the event.
Trap-directed notification can result in substantial savings of network and agent resources by eliminating the need for frivolous SNMP requests. However, it is not possible to totally eliminate SNMP polling. SNMP requests are required for discovery and topology changes. In addition, a managed device agent can not send a trap, if the device has had a catastrophic outage.
http://www.cisco.com/en/US/tech/tk648/tk362/technologies_tech_note09186a0080094aa5.shtml

I can not make IP SLA to signal SNMP traps upon timeout

Hello team.
I want SNMP traps to be sent every time an IP SLA (ICMP) object times out. For that purpose, I carried out the following
ip sla monitor logging traps
ip sla monitor 1
type echo protocol ipIcmpEcho 10.1.1.254
timeout 1000
frequency 15
ip sla monitor schedule 1 life forever start-time now
snmp-server enable traps rtr
snmp-server host 10.1.1.10 mycommunity
But no SNMP trap is sent when the IP SLA object times out. ¿ Am I missing something?
Any help will be greatly appreciated.
Rogelio Alvez
Argentina

SNMP traps for IP SLAs are handled through the system logging (syslog) process. This means that system logging messages for IP SLAs violations are generated when the specified conditions are met, then sent as SNMP traps using the CISCO-SYSLOG-MIB. The ip sla monitor logging traps command is used to enable the generation of these IP SLAs specific traps. The generation of IP SLAs specific logging messages is dependant on the configuration of the standard set of logging commands (for example, logging on). IP SLAs logging messages are generated at the "informational" system logging severity level.
The command ip sla monitor logging traps is sometime hidden and may not show with ?, so just copy and paste in global config mode and have logging on and check if any traps are generated.
-Thanks
Vinod
**Encourage Contributors. RATE them**

SNMP TRAPS and SLA

Similar Messages

Maybe you are looking for