We have recently taken on a 3rd party service to monitor our Cisco infrastructure. On Friday 3 alerts were generated related to switches in one of our stacks Not Responding/Device Down -- I'm not sure if they meant ports or the switch itself. My issue is with the below response from one of my team members regarding these alerts:
"...these were on individual ports going down and up. This could be a result of someone disconnecting a laptop from a conference room, Service Desk resetting a phone, Help Desk moving a phone/computer, etc."
Is that statment valid? Does a port on a switch go down when you connect a device to the other end? I find it hard to believe that a NOC would be monitoring for these events if such routine activities can trigger these alerts. I'm grateful for any clarification which can be provided as I obviously have much to learn.
A port will go from up to down if a device that was connected to the switch is disconnected and it will go from down to up if a device is connected to it. So it could well be a user in a conference room for example attaching a laptop and then taking it with them when their meeting was finished.