06-13-2007 07:02 AM
I have LMS 2.6 installed and have successfully added a new Cisco 3650 Switch. I've verified the Switch is added correctly both in RME and DFM.
I have configured an Event Set to notify me of "unresponsive" Events and set the Notification Group to receive Events only (No Alerts). The Events settings are set for Critical and Informational (with Active and Cleared checked).
My intent is to receive an e-mail notification whenever the Switch loses overall connectivity to the network.
When I reload the Switch, I receive 3 e-mail notifications.
The 1st E-mail shows:
EVENT ID = 0000124
ALERT ID = 00000S8
TIME = Wed 13-Jun-2007 10:26:27 EDT
STATUS = Active
SEVERITY = Critical
MANAGED OBJECT = 172.20.254.100
MANAGED OBJECT TYPE = Switches and Hubs
EVENT DESCRIPTION = ** DEVICE DOWN **::Component=172.20.254.100;Type=SWITCH;Description=Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(25)SEB4, RELEASE SOFTWARE (fc1)\X0D\X0ACopyright (c) 1986-2005 by Cisco Systems, Inc.\X0D\X0ACompiled Tue 30-Aug-05 14:19 by yenanh;Vendor=CISCO;SystemObjectID=.1.3.6.1.4.1.9.1.563;ReadCommunity=XXXXX;DiscoveredFirstAt=30-May-2007 2:27:40 PM;DisplayClassName=Switch;IsManaged=true;SNMPAddress=172.16.254.106;DiscoveredLastAt=12-Jun-2007 4:05:29 PM;
The 2nd E-Mail shows:
EVENT ID = 0000127
ALERT ID = 00000S8
TIME = Wed 13-Jun-2007 10:28:13 EDT
STATUS = Cleared
SEVERITY = Informational
MANAGED OBJECT = 172.20.254.100
MANAGED OBJECT TYPE = Switches and Hubs
EVENT DESCRIPTION = ** DEVICE DOWN **::Component=172.20.254.100;Type=SWITCH;Description=Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(25)SEB4, RELEASE SOFTWARE (fc1)\X0D\X0ACopyright (c) 1986-2005 by Cisco Systems, Inc.\X0D\X0ACompiled Tue 30-Aug-05 14:19 by yenanh;Vendor=CISCO;SystemObjectID=.1.3.6.1.4.1.9.1.563;ReadCommunity=XXXXX;DiscoveredFirstAt=30-May-2007 2:27:40 PM;DisplayClassName=Switch;IsManaged=true;SNMPAddress=172.20.254.100;DiscoveredLastAt=12-Jun-2007 4:05:29 PM;
The 3rd E-Mail shows:
EVENT ID = 0000126
ALERT ID = 00000S8
TIME = Wed 13-Jun-2007 10:28:13 EDT
STATUS = Active
SEVERITY = Critical
MANAGED OBJECT = 172.20.254.100
MANAGED OBJECT TYPE = Switches and Hubs
EVENT DESCRIPTION = ** DEVICE DOWN **::Component=SNMPAgent-172.16.254.106;sysName=SwCMH10W06;ReadCommunity=XXXXX;AgentAddress=172.20.254.100;AgentAddressList=172.20.254.100;SNMPVersion=V2C;sysDescr=Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(25)SEB4, RELEASE SOFTWARE (fc1)\X0D\X0ACopyright (c) 1986-2005 by Cisco Systems, Inc.\X0D\X0ACompiled Tue 30-Aug-05 14:19 by yenanh;PortNumber=161;SNMPStatus=TIMEDOUT;
NOTE: The "XXXXX" shown above was changed by me for this posting.
Under DFM>Device Management>Device Details, I have the "Interface" for the Management VLAN set to "True" and all "Port" settings set to "False"
I have the Polling Thresholds<Polling Parameters<Reachability setting set for 120 seconds.
Ideally, I'll receive an E-mail when the Switch loses network connectivity and another when connectivity is restored.
I'm not sure why I'm getting the 3rd E-Mail. I have the
06-13-2007 07:53 AM
the 1st and 2nd are for the system, the 3rd is for the SNMP-Agent on the device;
unresponsive Events are triggered for both, the system and the SNMP-Agent:
06-13-2007 07:56 AM
The third is an SNMP reachability problem. Given its time, it's probably a race with the device coming online (port negotiations, spanning-tree, other CPU activities). You might try increasing the DFM SNMP timeout and retries to see if this problem goes away.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: