Forum Discussion

Jason_40887's avatar
Jason_40887
Icon for Nimbostratus rankNimbostratus
Jul 16, 2012

Ok Signal After SNMP Trap Alert

I am helping develop a system that will consume SNMP trap information from several devices including an F5 LTM. As I'm new to SNMP, I have what might be a noob question for you all. In the documentation for other devices, a trap that informs of an error (such as a fan not working) will either have a stated repeat interval or have a corresponding ok message. What practice does the F5 follow? Is there any other documentation besides http://www.juniper.net/techpubs/en_US/junos11.1/topics/reference/general/chassistraps-nm-mib.html that I should be looking at?

 

management
monitoring
  • vaibhav's avatar
    vaibhav
    Icon for Cirrostratus rankCirrostratus
    Jul 16, 2012
    This might help you to understand how it works....

     

     

    http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos_management_guide_10_1/tmos_snmp.html?sr=22744042

     

  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Jul 16, 2012
    you may review list of snmp trap bigip sends using mib browser, e.g. ireasoning. it is under bigipnotifications (.1.3.6.1.4.1.3375.2.4.0).

     

     

    mib file is available at about tab in webui.

     

  • Jason_40887's avatar
    Jason_40887
    Icon for Nimbostratus rankNimbostratus
    Jul 16, 2012
    Looking over both of those I am still a bit confused.

     

    For example with a Juniper switch (http://www.juniper.net/techpubs/en_US/junos11.1/topics/reference/general/chassistraps-nm-mib.html)

     

    in the event of a fan failure it woudl send the trap jnxFanFailure 1.3.6.1.4.1.2636.4.1 this is repeated every hour until the issue is resolved at this point a jnxFanOK 1.3.6.1.4.1.2636.4.2 is sent.

     

     

    With the f5 is there anyway to know that the issue is resolved. Looking at the MIB there are 3 different fan failure traps but none defined that state that there is no longer an issue http://ipmsupport.solarwinds.com/mibs/F5-BIGIP-COMMON-MIB/tree.aspx

     

    I also have not been able to find any documentation on a repeat interval that would let you know the issue is resolved when it is no longer seen repeating.

     

     

  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Jul 18, 2012
    With the f5 is there anyway to know that the issue is resolved. Looking at the MIB there are 3 different fan failure traps but none defined that state that there is no longer an issue http://ipmsupport.solarwinds.com/mibs/F5-BIGIP-COMMON-MIB/tree.aspx

     

    I also have not been able to find any documentation on a repeat interval that would let you know the issue is resolved when it is no longer seen repeating. as i understand, not every trap has clear trap message. interval depends on how log is generated e.g. by who (daemon or something else).
  • Jason_40887's avatar
    Jason_40887
    Icon for Nimbostratus rankNimbostratus
    Jul 19, 2012
    I found a doc that does have clear codes in it. http://www.google.com/url?sa=t&rct=j&q=f5%20dnsnameupdateclear&source=web&cd=1&ved=0CC8QFjAA&url=http%3A%2F%2Fsupport.f5.com%2Fcontent%2Fkb%2Fen-us%2Fproducts%2Farx%2Fmanuals%2Fproduct%2Farx_snmp_reference_6_0_0%2F_jcr_content%2FpdfAttach%2Fdownload%2Ffile.res%2FsnmpRef.pdf&ei=Og0IUOT7NuTW2AXOm_HHBA&usg=AFQjCNHottWgJus0mtvk2gDiWfm-CSPDTQ

     

     

    It is odd that most docs do not.

     

     

    Thanks

     

     

  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Jul 19, 2012
    i thought you are using bigip but it is arx, isn't it??