disable SNMP trap on subinterfaces

Unanswered Question
Mar 25th, 2007
User Badges:

Hi all,


I want to disable receiving SNMP trap status from subinterfaces but still will receive trap from physical interface st. Already entered the command "no snmp trap link-status" but still DFM keep receiving traps. See my configuration below. Any suggestion?


Thanks


interface GigabitEthernet0/0.1204

description *****for testing*****

encapsulation dot1Q 1204

ip unnumbered Loopback1001

ip helper-address ******

ip helper-address *****

no snmp trap link-status

!

interface GigabitEthernet0/0.1800

encapsulation dot1Q 1800

ip unnumbered Loopback1001

ip helper-address *****

no snmp trap link-status

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
muttman15 Sun, 03/25/2007 - 18:48
User Badges:

I would try adding this line


"no logging event link-status "


This was an issue that was hammering our syslog server and adding both your line above and this line seemed to do the trick

Joe Clarke Sun, 03/25/2007 - 21:13
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

What version of IOS is this device running? Are you certain it is traps you are receiving, and not syslog messages? Please provide an example trap.

ariesc_33 Sun, 03/25/2007 - 21:59
User Badges:

it is the interface status alarms...


ios version


(C7301-SPSERVICESK9-M), Version 12.4(6)T2


=========================================

Event_Description OperationallyDown

Component IF-10.*.*.*/1902 [Gi0/2.3535]

Type L2VLAN

OperStatus DOWN

InterfaceCode CODEUNKNOWN

DuplexMode FULLDUPLEX

AdminStatus UP

LastChangedAt 16-Mar-2007 12:26:22

IsFlapping false

MaxSpeed 1000000000

Mode NORMAL


Martin Ermel Mon, 03/26/2007 - 00:55
User Badges:
  • Blue, 1500 points or more

No DFM does not handle syslog messages, the only thing is that DFM can be configured to generate syslog messages for a specific event and forward it to a syslog receiver ( e.g RME);


Aries,

look at line 1,4,7 and 8 of the event:

'Event_Description OperationallyDown '

'OperStatus DOWN '

'AdminStatus UP '

'LastChangedAt 16-Mar-2007 12:26:22'


this indicates, that it is not an event caused by a received trap, but generated based on the responses from the device to an active poll from DFM;

Enabled by default, DFM polls the gig interface if its 'ifAdminStatus' is set to 'UP';

but as its 'ifOperStatus' indicates 'DOWN', DFM assumes this is a fault;

DFM interface rules are based on the assumtion that all interfaces which are administratively up should also forward traffic (operational up);

You have 2 Options:

in DFM set the managed state of this interface to false;

on the device,configure the 'shutdown' command on the interface;

ariesc_33 Mon, 03/26/2007 - 01:13
User Badges:

=======================================

Enabled by default, DFM polls the gig interface if its 'ifAdminStatus' is set to 'UP'

=======================================


Would it be possible to poll only the physical interface [gig 0/1] and not the subinterface [gig 0/1.222]?



Martin Ermel Mon, 03/26/2007 - 06:14
User Badges:
  • Blue, 1500 points or more

open the detailed device view for the device:

DFM > Device Management > View Device Details

select the device, go to Interface Status - Interfaces

there you should see all interfaces and you can change the managed state for each


after all changes, apply the changes by selecting

Configuration > Polling and Threshold > Apply Changes

ariesc_33 Mon, 03/26/2007 - 23:28
User Badges:

it takes about 30 minutes to open interface status probably because routers has around 4000 subinterface.


Only solution i can see right now is to disable polling from lms to router and enable on the router the manual trap sending..?


Any other suggestion?


Thanks

Martin Ermel Fri, 03/30/2007 - 09:01
User Badges:
  • Blue, 1500 points or more

what happens if you 'shutdown' the subinterace on the router?

with this command the SNMP ifAdminStatus is set to down and it shouldn't be an issue for DFM anymore.

I don?t know of a cli command to disable a bunch of (sub-)interfaces in DFM to workaround the GUI


Other possibility could be to generate an action (e.g. email) based on syslog for the physical if..


Actions

This Discussion