[Search for users]
[Overall Top Noters]
[List of all Conferences]
[Download this site]
| Title: | DECmcc user notes file. Does not replace IPMT. |
| Notice: | Use IPMT for problems. Newsletter location in note 6187 |
| Moderator: | TAEC::BEROUD |
|
| Created: | Mon Aug 21 1989 |
| Last Modified: | Wed Jun 04 1997 |
| Last Successful Update: | Fri Jun 06 1997 |
| Number of topics: | 6497 |
| Total number of notes: | 27359 |
4171.0. "SNMP Traps & ALARMS_FM/NOTIFICATION_FM" by ZTOIS1::VISTA (Renato VISTA, SIS Strasbourg, France) Tue Dec 01 1992 06:17
Hi,
Working on a customer DECmcc/ULTRIX/BMS V123 platform, in an heterogeneous
environment, I've noted the following behavior :
1) Let's assume the following domain containing global entities :
MCC> dir domain .test member *
SNMP LOCAL_NS:.snmp.cis114
AT 1992-12-01-11:41:26.820I-----
Directory successful.
Registered Name = LOCAL_NS:.snmp.cis114
Address = 16.188.48.114
Name = cis114
Node4 LOCAL_NS:.dna_node.chna04
AT 1992-12-01-11:41:28.430I-----
Directory successful.
Registered Name = LOCAL_NS:.dna_node.chna04
Name = CHNA04
Address = 47.994
Bridge LOCAL_NS:.bridge_node.bridge1
AT 1992-12-01-11:41:28.969I-----
Directory successful.
Name = LOCAL_NS:.bridge_node.bridge1
Address = { 08-00-2b-13-c5-38 }
Bridge LOCAL_NS:.bridge_node.bridge2
AT 1992-12-01-11:41:29.426I-----
Directory successful.
Name = LOCAL_NS:.bridge_node.bridge2
Address = { 08-00-2b-0f-be-cd }
========================================================================
2) Please note the SNMP global entity cis114 (cisco router IGS1).
I want to following asynchronous traps by using two mechanisms :
- Notification Services Messages (notification_fm) + a request
(Request 1)
- Alarms Messages (alarm_fm) + a created/enabled rule ;
The notification of those rule messages is allowed with another
only-domain-specified request (Request 2)
Of course, they are redundant... but not logically & physically the same...
MCC> enable domain test rule *
Domain LOCAL_NS:.test Rule rule_snmp_occurs
AT 1992-12-01-11:34:16.605I-----
Normal operation has begun.
MCC> sho domain .test rule * all rule attr
Domain LOCAL_NS:.test Rule rule_snmp_occurs
AT 1992-12-01-11:34:17.832I----- Rule Attributes
Name = rule_snmp_occurs
Expression = (OCCURS (SNMP * any event))
Severity = Major
Probable Cause = Unknown
State = Enabled
Substate = Running
Result of Last Evaluation = In progress
Current Severity = Major
Creation Timestamp = 1992-12-01-11:34:16.660I-----
Evaluation Error = 0
Evaluation True = 0
Evaluation False = 0
MCC> notify domain .test entity list =(snmp *),event=(any event)
%MCC-S-NOTIFSTART, Notify request 1 started
MCC> notify domain .test
%MCC-S-NOTIFSTART, Notify request 2 started
MCC> display notify
Notify requests currently in progress:
Entry Status Command
----- ------ -------
1 Running notify domain .test entity list =(snmp *),event=(any event)
2 Running notify domain .test
========================================================================
3) When I provoke on another SNMP global entity (a CHIPCOM EMM V3.0 in
this case) the sending to DECmcc of an AuthenticationFailure Trap by the
following command (PLEASE NOTE that SNMP/Chipcom etoile1 IS NOT a MEMBER
of DOMAIN .test !!!) :
MCC> show snmp etoile1 all char, by pass "bad-community"
The rule 'rule_snmp_occurs' of the domain .test is FIRED !!!, EVEN the
SNMP/chipcom global entity etoile1 is not a member of domain .test !!!!
PLEASE ALSO NOTE, that the messages received are ALARMS/RULE messages,
displayed because of Request 2 (notify domain .test)...
NO message displayed because of Request 1 -notify domain .test entity list
= (snmp *), event=(any event)- is returned...
!!!!!!!!!!!!!! Alarm, 1992-12-01-11:44:40. !!!!!!!!!!!!!! [2]
Domain: LOCAL_NS:.test Severity: Major
Notification Entity: SNMP LOCAL_NS:.snmp.etoile1
Event Source: Domain LOCAL_NS:.test Rule rule_snmp_occurs
Event: OSI Rule Fired
Event Type = QualityofServiceAlarm
Event Time = 1992-12-01-11:44:40.445I-----
Probable Cause = Unknown
Additional Info = { (
significance = True,
information = "The last event detected: SNMP
LOCAL_NS:.snmp.etoile1
authenticationFailure
1992-12-01-11:44:39.687I-----" ),
(
significance = True,
information = "Event: authenticationFailure An
authenticationFailure trap was
received: enterprise =
""1.3.6.1.4.1.49"" agent-addr =
16.188.48.108 generic-trap =
authenticationFailure
specific-trap = 0 time-stamp =
782598" ),
(
significance = True,
information = "(OCCURS (SNMP * any event))" ) }
Managed Object = SNMP LOCAL_NS:.snmp.etoile1
Perceived Severity = Major
!!!!!!!!!!!!!! Alarm, 1992-12-01-11:44:45. !!!!!!!!!!!!!! [2]
Domain: LOCAL_NS:.test Severity: Major
Notification Entity: SNMP LOCAL_NS:.snmp.etoile1
Event Source: Domain LOCAL_NS:.test Rule rule_snmp_occurs
Event: OSI Rule Fired
Event Type = QualityofServiceAlarm
Event Time = 1992-12-01-11:44:45.555I-----
Probable Cause = Unknown
Additional Info = { (
significance = True,
information = "The last event detected: SNMP
LOCAL_NS:.snmp.etoile1
authenticationFailure
1992-12-01-11:44:44.996I-----" ),
(
significance = True,
information = "Event: authenticationFailure An
authenticationFailure trap was
received: enterprise =
""1.3.6.1.4.1.49"" agent-addr =
16.188.48.108 generic-trap =
authenticationFailure
specific-trap = 0 time-stamp =
783099" ),
(
significance = True,
information = "(OCCURS (SNMP * any event))" ) }
Managed Object = SNMP LOCAL_NS:.snmp.etoile1
Perceived Severity = Major
!!!!!!!!!!!!!! Alarm, 1992-12-01-11:44:51. !!!!!!!!!!!!!! [2]
Domain: LOCAL_NS:.test Severity: Major
Notification Entity: SNMP LOCAL_NS:.snmp.etoile1
Event Source: Domain LOCAL_NS:.test Rule rule_snmp_occurs
Event: OSI Rule Fired
Event Type = QualityofServiceAlarm
Event Time = 1992-12-01-11:44:50.691I-----
Probable Cause = Unknown
Additional Info = { (
significance = True,
information = "The last event detected: SNMP
LOCAL_NS:.snmp.etoile1
authenticationFailure
1992-12-01-11:44:50.445I-----" ),
(
significance = True,
information = "Event: authenticationFailure An
authenticationFailure trap was
received: enterprise =
""1.3.6.1.4.1.49"" agent-addr =
16.188.48.108 generic-trap =
authenticationFailure
specific-trap = 0 time-stamp =
783620" ),
(
significance = True,
information = "(OCCURS (SNMP * any event))" ) }
Managed Object = SNMP LOCAL_NS:.snmp.etoile1
Perceived Severity = Major
SNMP etoile1
AT 1992-12-01-11:44:39.199I----- Characteristics
No response from entity.
==========================================================================
Is this a normal behavior of ALARMS_FM which seems to not check whether the
target entity is a member of the domain whose rule is enabled ??
Nvertheless, notification_fm request 'notify domain .test entity list =
(snmp *), event=(any event)' seems to check whether the final global
entity is a member or not of the domain specified in the request...
Thank you for your replies.
Regards,
Renato
PS : The problem also exists with DECmcc/VMS/BMS V120...
| T.R | Title | User | Personal
Name | Date | Lines |
|---|
| 4171.1 | The fix is in DECmcc T1.3. | TRM::KWAK | | Wed Dec 09 1992 17:18 | 11 |
| RE: .0
In DECmcc V1.2, the Alarms wildcarded OCCURS rule does not check
whether the entity is a member of the domain.
This problem has been QARed.
DECmcc T1.3 (Field Test version) has the fixes for this problem.
Thanks.
William
|