(Accidentally posted this to the VPN Network Management forum earlier today.)
I'm in the process of deploying an SNMP infrastructure for our network using OpenNMS, and am wondering if I should use either traps or thresholds (or both?) to detect Cisco events such as high router/switch temperature, high CPU usage, etc.
I've always thought of traps as being the standard way to be notified of such things, but with UDP there's no guarantee that the NMS will ever see a given trap. By using thresholds (i.e., monitoring an OID an alarming when it exceeds a certain value), the NMS will detect the event on it's own and can react accordingly. So I am undecided on which method to use.
I'd appreciate any advice from those of you who use SNMP.
Both traps and RMON (rising / falling ) alarms are both send via UDP trap/syslog. The NMS, in these settings has no idea this is happening without the agent/device sending an alarm to the NMS system or having a very aggressing polling interval gathering these stats. Event traps work but will not get you the granularity of events (CPU/errors/etc) that you might want. RMON will and can offer you the ability to get traps based on your needs. See this link for your information.
Thanks for the response. When I say "thresholds" I'm referring to the NMS regularly polling OID's and alarming if a pre-configured limit is reached (e.g., CPU usage above 75%). So in this case, there aren't any traps sent -- the NMS discovers the problem via regular polling.
The tradeoff to me when using thresholds instead of traps seems to be a higher assurance of an alert (because the NMS polls the OIDs every 5 minutes as opposed to traps which are only sent once) vs. a higher amount of traffic on the LAN (for the same reason). So I'm wondering how others handle alert monitoring. Do people tend to rely on traps, or NMS polling?
Hi everyone, I would like to thank you in advance for any help you can provide a newcomer like myself!
Im studying the 100-105 book by Odom and am currently on the topic of Port security. I purchased a used 2960 and I'm trying to follow a...
While deploying a number of 18xx/2802/3802 model access points (APs), which run AP-COS as their operating platform. It can be observed on some occasions that while many of their access points were able to join the fabric WLC withou...
I am going to design and build an LAN network under a tunnel underground with long distance between the switches.
I will have 2 Catalyst switches and 8 Industrial IE3000, and they will be connected with fiber.
For now I am planning on use Layer-2 s...