Two questions, probably related:
1) SNMP listener is working great. Here is an example of an alert I am receiving:
Test: SNMP Trap
IP Addr: 192.168.25.60
Trap Type: Link Down (2.0)
Enterprise: 1.3.6.1.4.1.9.1.503
MIB OID: 1.3.6.1.2.1.2.2.1.1.3
MIB Type: 2
MIB Value: 3
MIB Relative:
Method: SNMP Trap
Date & Time: 5/30/2006 9:05:44 AM
This is a Cisco 4503 switch. We are wondering how we should know what interface has gone down? MIB Value 3 is likely very important, but I am unclear how to translate a value of "3" into an interface name?
2) From the reading I've done on this forum so far, it appears I should be using MIB Browser to import a MIB file for this switch... then maybe it would convert the OID to something more meaningful? If so, I'm stumped on what MIB(s) I would need... here is Cisco's web site listing the MIBs for a 4500:
http://tools.cisco.com/ITDIT/MIBS/MainS ... 9&fsSel=45
There must a hundred of them, just for my specific version of 4500 and IOS??
Sorry for these basic questions, but I have read the AHM docs, scoured this forum, and googled... I'm just stumped.
- Scott
SNMP Basic Questions
1.3.6.1.2.1.2.2.1.1.3 = .iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifEntry.ifIndex.3. So, message informs you about network interface with index=3This is a Cisco 4503 switch. We are wondering how we should know what interface has gone down? MIB Value 3 is likely very important, but I am unclear how to translate a value of "3" into an interface name?
If you want to receive description of that interface, send SNMP Get request to the router with OID=1.3.6.1.2.1.2.2.1.2.3 (.iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifEntry.ifDescr.3)
If you have imported MIB files, that you may use additional macro variables: %EnterpriseName%, %EnterpriseNameShort%, %MibName% , %MibNameShort%. HostMonitor will translate OID from its numeric form to a MIB name.From the reading I've done on this forum so far, it appears I should be using MIB Browser to import a MIB file for this switch... then maybe it would convert the OID to something more meaningful?
If you are receiving all kind of traps from the router and you want to be able to request any counter by name, then you should import all or most of that MIB files. Its better to ask Cisco support team about details.If so, I'm stumped on what MIB(s) I would need... here is Cisco's web site listing the MIBs for a 4500
Sorry, you will not find much information about CISCO routers on this forum. Its better to visit some Cisco forums or contact Cisco support staff. They know much more about their own products than we do.Sorry for these basic questions, but I have read the AHM docs, scoured this forum, and googled... I'm just stumped.
Regards
Alex
KS-Soft wrote:I actually did later figure that out. My understanding, though, is that there are two problems with using Indexes. 1) of course when you get an alert that "IfIndex 3 is Link Down" for a certain switch, you don't really know what port that is. FastEthernet 0/3 would be more interesting, and a real interface description would be even better. 2) the Interface Indexes can change, when a port is added or etc., which can then renumber the interfaces to a new index number. So, if inteface index 3 is port Gig 4/3 today, it may be 4/4 tomorrow. Maybe this isn't much of a concern, especially in a somewhat static environment.1.3.6.1.2.1.2.2.1.1.3 = .iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifEntry.ifIndex.3. So, message informs you about network interface with index=3
If you want to receive description of that interface, send SNMP Get request to the router with OID=1.3.6.1.2.1.2.2.1.2.3 (.iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifEntry.ifDescr.3)
Anyway, I'm hopeful that your suggestions below will give me more meaningful information, and I realize this is not an AHM problem but a general SNMP issue... I do appreciate the advice.
I have added these variables to my alerts -- I will see what happens -- thanks!If you have imported MIB files, that you may use additional macro variables: %EnterpriseName%, %EnterpriseNameShort%, %MibName% , %MibNameShort%. HostMonitor will translate OID from its numeric form to a MIB name.
I kind of assumed that a majority of users of your software are monitoring some type of Cisco equipment, so the answers to these questions would be easy for many of the readers of this forum. If nothing else, the answers derived will help others searching the forums like I was trying to do. I can certainly go back to Cisco on this, and dig further... and of course I can just import all 100 MIBs.If you are receiving all kind of traps from the router and you want to be able to request any counter by name, then you should import all or most of that MIB files. Its better to ask Cisco support team about details. Sorry, you will not find much information about CISCO routers on this forum. Its better to visit some Cisco forums or contact Cisco support staff. They know much more about their own products than we do.
Regards
Alex
Thanks again for help -- I will keep plugging away!
- Scott
I am afraid universal solution is not possible. SNMP devices may send different messages that may have totally different meanings and various relations with other counters.1) of course when you get an alert that "IfIndex 3 is Link Down" for a certain switch, you don't really know what port that is. FastEthernet 0/3 would be more interesting, and a real interface description would be even better. 2) the Interface Indexes can change, when a port is added or etc., which can then renumber the interfaces to a new index number.
If you create separate SNMP Trap test items to filter specific events, then its more easy to configure context specific alerts.
Sure. We are trying to help everybody but we are not Cisco guru. Just average SNMP knowledge base...I kind of assumed that a majority of users of your software are monitoring some type of Cisco equipment, so the answers to these questions would be easy for many of the readers of this forum.
Regards
Alex