cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
911
Views
0
Helpful
2
Replies

LMS 2.6 - E-Mail Event Notification

I have LMS 2.6 installed and have successfully added a new Cisco 3650 Switch. I've verified the Switch is added correctly both in RME and DFM.

I have configured an Event Set to notify me of "unresponsive" Events and set the Notification Group to receive Events only (No Alerts). The Events settings are set for Critical and Informational (with Active and Cleared checked).

My intent is to receive an e-mail notification whenever the Switch loses overall connectivity to the network.

When I reload the Switch, I receive 3 e-mail notifications.

The 1st E-mail shows:

EVENT ID = 0000124

ALERT ID = 00000S8

TIME = Wed 13-Jun-2007 10:26:27 EDT

STATUS = Active

SEVERITY = Critical

MANAGED OBJECT = 172.20.254.100

MANAGED OBJECT TYPE = Switches and Hubs

EVENT DESCRIPTION = ** DEVICE DOWN **::Component=172.20.254.100;Type=SWITCH;Description=Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(25)SEB4, RELEASE SOFTWARE (fc1)\X0D\X0ACopyright (c) 1986-2005 by Cisco Systems, Inc.\X0D\X0ACompiled Tue 30-Aug-05 14:19 by yenanh;Vendor=CISCO;SystemObjectID=.1.3.6.1.4.1.9.1.563;ReadCommunity=XXXXX;DiscoveredFirstAt=30-May-2007 2:27:40 PM;DisplayClassName=Switch;IsManaged=true;SNMPAddress=172.16.254.106;DiscoveredLastAt=12-Jun-2007 4:05:29 PM;

The 2nd E-Mail shows:

EVENT ID = 0000127

ALERT ID = 00000S8

TIME = Wed 13-Jun-2007 10:28:13 EDT

STATUS = Cleared

SEVERITY = Informational

MANAGED OBJECT = 172.20.254.100

MANAGED OBJECT TYPE = Switches and Hubs

EVENT DESCRIPTION = ** DEVICE DOWN **::Component=172.20.254.100;Type=SWITCH;Description=Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(25)SEB4, RELEASE SOFTWARE (fc1)\X0D\X0ACopyright (c) 1986-2005 by Cisco Systems, Inc.\X0D\X0ACompiled Tue 30-Aug-05 14:19 by yenanh;Vendor=CISCO;SystemObjectID=.1.3.6.1.4.1.9.1.563;ReadCommunity=XXXXX;DiscoveredFirstAt=30-May-2007 2:27:40 PM;DisplayClassName=Switch;IsManaged=true;SNMPAddress=172.20.254.100;DiscoveredLastAt=12-Jun-2007 4:05:29 PM;

The 3rd E-Mail shows:

EVENT ID = 0000126

ALERT ID = 00000S8

TIME = Wed 13-Jun-2007 10:28:13 EDT

STATUS = Active

SEVERITY = Critical

MANAGED OBJECT = 172.20.254.100

MANAGED OBJECT TYPE = Switches and Hubs

EVENT DESCRIPTION = ** DEVICE DOWN **::Component=SNMPAgent-172.16.254.106;sysName=SwCMH10W06;ReadCommunity=XXXXX;AgentAddress=172.20.254.100;AgentAddressList=172.20.254.100;SNMPVersion=V2C;sysDescr=Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(25)SEB4, RELEASE SOFTWARE (fc1)\X0D\X0ACopyright (c) 1986-2005 by Cisco Systems, Inc.\X0D\X0ACompiled Tue 30-Aug-05 14:19 by yenanh;PortNumber=161;SNMPStatus=TIMEDOUT;

NOTE: The "XXXXX" shown above was changed by me for this posting.

Under DFM>Device Management>Device Details, I have the "Interface" for the Management VLAN set to "True" and all "Port" settings set to "False"

I have the Polling Thresholds<Polling Parameters<Reachability setting set for 120 seconds.

Ideally, I'll receive an E-mail when the Switch loses network connectivity and another when connectivity is restored.

I'm not sure why I'm getting the 3rd E-Mail. I have the

2 Replies 2

Martin Ermel
VIP Alumni
VIP Alumni

the 1st and 2nd are for the system, the 3rd is for the SNMP-Agent on the device;

unresponsive Events are triggered for both, the system and the SNMP-Agent:

http://www.cisco.com/en/US/products/sw/cscowork/ps2421/products_user_guide_chapter09186a0080702b50.html

Joe Clarke
Cisco Employee
Cisco Employee

The third is an SNMP reachability problem. Given its time, it's probably a race with the device coming online (port negotiations, spanning-tree, other CPU activities). You might try increasing the DFM SNMP timeout and retries to see if this problem goes away.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: