Cisco router interface threshold

[ncd]

Hello,

I have a question about getting threshold information out of a specific interface. I have a customer with DSL on a cisco 887 router.

This customer has 2 different pvc's on the ATM0 interface, 2 dialer's (1 for voice, one for data) 2 vlan's (1 for voice, one for data).

What I would like is that the cisco router wil send me a message that only the voice dialer or voice vlan has exceeded it's threshold limit.

I can configure this with the "rmon alarm" command, but then it isn't specific for the voice dialer, it gives me info on both the dialers.

I also tried it with SNMP traps, but this isn't "real-time"

Does anyone know if there is a different solution to solve this?

[Joe Clarke]

You could use the interface event detector to look at a specific interface.  Take a look at the help for "event interface" when configuring an "event manager applet".

[ncd]

Thank you Joseph, I found this page:

https://supportforums.cisco.com/document/117596/cisco-eem-basic-overview-and-sample-configurations

the problem is that i can't find the object id for certain interfaces. For example when I have an interface Dialer1 and Dialer2 or Vlan1 and Vlan2. What is the object ID of Dialer2 and Vlan2?

Can't seem to find any info about that.

Regards

[Joe Clarke]

You don't need object IDs for the interface event detector.  Look at http://www.cisco.com/c/en/us/td/docs/ios/netmgmt/configuration/guide/12_2sx/nm_12_2sx_book/nm_eem_policy_cli.html then search on page for "Interface Counter Event Detector".  You can match on the interface name and a slew of parameters, include load and bps.

[ncd]

Thanks Joseph, I configured the applet like this:

event manager applet int-rate-test
event interface name Dialer2 entry-op gt entry-val 110 entry-type rate exit-op lt exit-val 50 exit-type rate average-factor 1 poll-interval 1 parameter receive_rate_bps

this way it should send an snmp trap when it reaches above 110kb and reaches below 50kb right?

I'm not receiving any SNMP messages regarding above config though. But I'm getting SNMP traps every 5min.

Do you know what i'm doing wrong?

[Joe Clarke]

The parameter you specified is bps, not kbps.  Multiply by 1000.

[ncd]

Sorry, small mistake :-)

Heres my configuration:

event manager applet int-rate-test
 event interface name Dialer1 parameter receive_rate_bps entry-op gt entry-val 110000 entry-type rate exit-op lt exit-val 50000 exit-type rate average-factor 1 poll-interval 1

snmp-server community G***** RO
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps vrrp
snmp-server enable traps call-home message-send-fail server-fail
snmp-server enable traps tty
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps ospf retransmit
snmp-server enable traps ospf lsa
snmp-server enable traps ospf cisco-specific state-change nssa-trans-change
snmp-server enable traps ospf cisco-specific state-change shamlink interface
snmp-server enable traps ospf cisco-specific state-change shamlink neighbor
snmp-server enable traps ospf cisco-specific errors
snmp-server enable traps ospf cisco-specific retransmit
snmp-server enable traps ospf cisco-specific lsa
snmp-server enable traps license
snmp-server enable traps ethernet cfm cc mep-up mep-down cross-connect loop config
snmp-server enable traps ethernet cfm crosscheck mep-missing mep-unknown service-up
snmp-server enable traps flash insertion removal
snmp-server enable traps adslline
snmp-server enable traps vdsl2line
snmp-server enable traps envmon
snmp-server enable traps c3g
snmp-server enable traps isdn call-information
snmp-server enable traps isdn layer2
snmp-server enable traps isdn chan-not-avail
snmp-server enable traps isdn ietf
snmp-server enable traps mac-notification
snmp-server enable traps energywise
snmp-server enable traps cef resource-failure peer-state-change peer-fib-state-change inconsistency
snmp-server enable traps aaa_server
snmp-server enable traps atm subif
snmp-server enable traps bfd
snmp-server enable traps memory bufferpeak
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps config-ctid
snmp-server enable traps entity
snmp-server enable traps fru-ctrl
snmp-server enable traps resource-policy
snmp-server enable traps event-manager
snmp-server enable traps hsrp
snmp-server enable traps ipmulticast
snmp-server enable traps msdp
snmp-server enable traps mvpn
snmp-server enable traps cpu threshold
snmp-server enable traps ipsla
snmp-server enable traps syslog
snmp-server enable traps l2tun session
snmp-server enable traps l2tun pseudowire status
snmp-server enable traps vtp
snmp-server enable traps pw vc
snmp-server enable traps firewall serverstatus
snmp-server enable traps nhrp nhs
snmp-server enable traps nhrp nhc
snmp-server enable traps nhrp nhp
snmp-server enable traps nhrp quota-exceeded
snmp-server enable traps isakmp policy add
snmp-server enable traps isakmp policy delete
snmp-server enable traps isakmp tunnel start
snmp-server enable traps isakmp tunnel stop
snmp-server enable traps ipsec cryptomap add
snmp-server enable traps ipsec cryptomap delete
snmp-server enable traps ipsec cryptomap attach
snmp-server enable traps ipsec cryptomap detach
snmp-server enable traps ipsec tunnel start
snmp-server enable traps ipsec tunnel stop
snmp-server enable traps ipsec too-many-sas
snmp-server enable traps vrfmib vrf-up vrf-down vnet-trunk-up vnet-trunk-down
snmp-server host *.*.*.30 G****

interface Dialer1
 description tbv Internet KPN-lijn
 ip address negotiated
 ip nat outside
 no ip virtual-reassembly in
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 ppp authentication chap pap callin
 ppp chap hostname test-vdsl-inet
 ppp chap password 7 051F031C3501580D0A095A1B050910
 ppp pap sent-username test-vdsl-inet password 7 111D1C16035F1D081726662D263621
 no cdp enable

When I download something from the internet it only shows the interface bandwidth usage stats every 5min. I'm not getting any event messages to my Zenoss server that a threshold has been reached or anything like that.

I have attached a file with the results.

[Joe Clarke]

Try configuring:

load-interval 30

Under your interface.  This will get you down to 30 seconds of refresh.

[ncd]

Hi Joseph,

Still no luck... still getting the same results.

[Joe Clarke]

What exactly do you have configured now, and what does show interface show when you think the applet should trigger?  Essentially, the applet will look at the same values as show interface.

[ncd]

Here's the total configuration of the cisco router. I added the show interface while it was doing nothing and while I was downloading.

[Joe Clarke · Accepted solution]

Your applet doesn't have any actions.  Add something like:

action 1.0 syslog msg "Threshold exceeded!"

So you can at least see if it's working.

[ncd]

Thank you Joseph, it is working now :)