Administer > Configure Incidents > Manage Incidents Using Incident Configurations > Incident Configurations Provided by NNMi > SNMP Trap Incident Configurations Provided by NNMi

SNMP Trap Incident Configurations Provided by NNMi

If an SNMP Trap Incident configuration's Author value is Network Node Manager, it can be overwritten by NNMi. See Author form for important information.

NNMi provides the SNMP trap incident configurations described in the following table.

You might also choose to create your own configurations for additional SNMP traps that are important to you.

SNMP Trap Configurations Provided by NNMi
Incident Configuration Name Description
BGPBackward Transition Generated when the BGP Finite State Machine moves from a higher numbered state to a lower numbered state.
BGPEstablished Generated when the BGP Finite State Machine enters the ESTABLISHED state.
CempMemBufferNotify Signifies that a cempMemBufferPeak object has been updated in the buffer pool.
CiscoChassisAlarmOff Signifies that the agent entity has detected the chassisTempAlarm, chassisMinorAlarm, or chassisMajorAlarm object in this MIB has transitioned to the off(1) state.
CiscoChassisAlarmOn Signifies that the agent entity has detected the chassisTempAlarm, chassisMinorAlarm, or chassisMajorAlarm object in this MIB has transitioned to the on(2) state.
CiscoChassisChangeNotification Agent detects any hot-swap Physical Component change or changes in the chassis.
CiscoColdStart Occurs when a Cisco Agent is powered up.
CiscoDemand NeighborLayer2Change Sent to the manager whenever the D-channel of an interface changes state.
CiscoEnvMonFanNotification Physical Sensor object incident: Indicates at least one of the fans in the fan array has failed.
CiscoEnvMonFanStatusChangeNotif Physical Sensor object incident: Indicates a state change for a device being monitored by ciscoEnvMonFanState.
CiscoEnvMonRedundantSupplyNotification Physical Sensor object incident: Physical Sensor object incident: Indicates the redundant power supply failed.
CiscoEnvMonSuppStatusChangeNotification Physical Sensor object incident: Indicates a change in the state of a device being monitored by ciscoEnvMonSupplyState.
CiscoEnvMonTemperatureNotification Physical Sensor object incident: Indicates the temperature measured at a given testpoint is outside the normal range for the testpoint, For example, it is at the warning, critical, or shutdown stage.
CiscoEnvMonTempStatusChangeNotification Physical Sensor object incident: Indicates a change in the state of a device being monitored by ciscoEnvMonTemperatureState.
CiscoEnvMonVoltageNotification Physical Sensor object incident: Indicates the voltage measured at a given testpoint is outside the normal range for the testpoint. For example, it is at the warning, critical, or shutdown stage.
CiscoEnvMonVoltStatusChangeNotification Physical Sensor object incident: Indicates a change in the state of a device being monitored by ciscoEnvMonVoltageState.
CiscoFRUInserted Indicates a Field Replaceable Unit (FRU) was inserted into the source node.
CiscoFRURemoved Indicates a Field Replaceable Unit (FRU) was removed from the source node.
CiscoLinkDown Occurs when the Cisco agent detects an interface has gone down.
CiscoLinkUp Occurs when the Cisco agent detects an interface has come back up.
CiscoModuleDown Signifies that the SNMP Agent has detected that the card has gone down.
CiscoModuleStatusChange Indicates the Operational State of the card has changed.
CiscoModuleUp Signifies that the SNMP Agent has detected that the card has come back up.
CiscoRFProgressionNotif Notification sent by the active Card (for example Card Active), whenever its Redundancy Framework (RF) state changes or the RF state of the second card in the Card Redundancy Group changes.
CiscoRFSwatcNotif Sent by the newly Active Card (for example Card Active). Indicates that a card state has been switched to a different state.
CiscoUnrecognizedFRU Indicates the Field Replaceable Unit (FRU) has a product identification that is not recognized.
CiscoVlanPortStatusChange Generated by a device when the value of vlanTrunkPortDynamicStatus object has been changed.
CiscoWarmStart Occurs when an Cisco agent is reconfigured.
HSRPStateChange Sent when an HSRP interface transitions to or from an Active or Standby state in a particular HSRP Group.
IetfVrrpStateChange Sent when a standard VRRP interface transitions to or from a Master State in a particular VRRP Group. This trap is used by the standard VRRP protocol. It corresponds to the vrrpTrapNewMaster trap name.
OSPFIfStateChange Signifies that there has been a change in the state of a nonvirtual OSPF interface.
OSPFNbrStateChange Signifies that there has been a change in the state of a nonvirtual OSPF neighbor.
OSPFVirtIfStateChange Signifies that there has been a change in the state of an OSPF virtual interface.
RMONFallingAlarm Sent when an RMON device falls below a preconfigured threshold.
Rc2kTemperature Physical Sensor object incident: Signifies the SNMPv2c entity acting as an SNMP agent, has detected the chassis is overheating.
RcAggLinkDown (NNMi Advanced) Signifies the operational state of the Multi-Link Trunk (MLT) Aggregator changed from Up to Down. (Link AggregationProtocols used on Switches to configure multiple Interfaces (Aggregation Member Interfaces) to function as if they were one (an Aggregator Interface). When two Aggregator Interfaces establish a connection, that connection is an Aggregator Layer 2 Connection. The Aggregator Layer 2 Connection appears on Layer 2 Neighbor View maps as a thick line with an Interface icon at each end (representing the Aggregator Interface). or Split Link AggregationLink Aggregation with more than two endpoints. Some vendors refer to this as Multi-Chassis Link Aggregation, SLAG, MLAG, or MC-LAG.)
RcAggLinkUp (NNMi Advanced) Signifies the operational state of the Multi-Link Trunk (MLT) Aggregator changed from Down to Up. (Link AggregationProtocols used on Switches to configure multiple Interfaces (Aggregation Member Interfaces) to function as if they were one (an Aggregator Interface). When two Aggregator Interfaces establish a connection, that connection is an Aggregator Layer 2 Connection. The Aggregator Layer 2 Connection appears on Layer 2 Neighbor View maps as a thick line with an Interface icon at each end (representing the Aggregator Interface). or Split Link AggregationLink Aggregation with more than two endpoints. Some vendors refer to this as Multi-Chassis Link Aggregation, SLAG, MLAG, or MC-LAG.)
RcChasFanDown Physical Sensor object incident: Signifies the SNMPv2c entity, acting as an SNMP agent, has detected that the rcChasFanOperStatus object for one of its power supply units is about to transition to the Down state.
RcChasFanUp Physical Sensor object incident: Signifies the SNMPv2c entity, acting as an SNMP agent, has detected that the rcChasFanOperStatus object for one of its power supply units is about to transition to the Up state.
RcChasPowerSupplyDown Physical Sensor object incident: Signifies the rcChasPowerSupplyOperStatus object for one of its power supply units is about to transition to the Down state.
RcChasPowerSupplyUp Physical Sensor object incident: Signifies the SNMPv2c entity, acting as an SNMP Agent, has detected that the rcChasPowerSupplyOperStatus object for one of its power supply units is about to transition to the Up state.
Rcn2kTemperature Physical Sensor object incident: Signifies that the SNMPv2c entity, acting as an SNMP agent, has detected the chassis is overheating.
RcnAggLinkDown (NNMi Advanced) Signifies the operational state of the Multi-Link Trunk (MLT) Aggregator Link changed from Up to Down. (Link AggregationProtocols used on Switches to configure multiple Interfaces (Aggregation Member Interfaces) to function as if they were one (an Aggregator Interface). When two Aggregator Interfaces establish a connection, that connection is an Aggregator Layer 2 Connection. The Aggregator Layer 2 Connection appears on Layer 2 Neighbor View maps as a thick line with an Interface icon at each end (representing the Aggregator Interface). or Split Link AggregationLink Aggregation with more than two endpoints. Some vendors refer to this as Multi-Chassis Link Aggregation, SLAG, MLAG, or MC-LAG.)
RcnAggLinkUp (NNMi Advanced) Signifies the operational state of the Multi-Link Trunk (MLT) Aggregator Interface has changed from Down to Up. (Link AggregationProtocols used on Switches to configure multiple Interfaces (Aggregation Member Interfaces) to function as if they were one (an Aggregator Interface). When two Aggregator Interfaces establish a connection, that connection is an Aggregator Layer 2 Connection. The Aggregator Layer 2 Connection appears on Layer 2 Neighbor View maps as a thick line with an Interface icon at each end (representing the Aggregator Interface). or Split Link AggregationLink Aggregation with more than two endpoints. Some vendors refer to this as Multi-Chassis Link Aggregation, SLAG, MLAG, or MC-LAG.)
RcnChasFanDown Physical Sensor object incident: Signifies the SNMPv2c entity, acting as an SNMP agent, has detected that the rcChasFanOperStatus object for one of its power supply units is about to transition into the Down state.
RcnChasFanUp Physical Sensor object incident: Signifies the SNMPv2c entity, acting as an SNMP agent, has detected that the rcChasFanOperStatus object for one of its power supply units is about to transition into the Up state.
RcnPowerSupplyDown Physical Sensor object incident: Signifies the SNMPv2c entity, acting as an SNMP agent, has detected that the rcChasPowerSupplyOperStatus object for one of its power supply units is about to transition into the Up state.
RcnPowerSupplyUp Physical Sensor object incident: Signifies the SNMPv2c entity, acting as an SNMP agent, has detected that the rcChasPowerSupplyOperStatus object for one of its power supply units is about to transition into the Up state.
RcnSmltIsLinkDown Signifies the rcChasPowerSupplyOperStatus object for one of its power supply units is about to transition into the Down state.
RcnSmltIsLinkUp Signifies the rcChasPowerSupplyOperStatus object for one of its power supply units is about to transition into the Up state.
RcSmltIsLinkDown (NNMi Advanced) Signifies the operational state of the Split Multi-Link Trunk (SMLT) Aggregator Link is transitioning from Up to Down. (Link AggregationProtocols used on Switches to configure multiple Interfaces (Aggregation Member Interfaces) to function as if they were one (an Aggregator Interface). When two Aggregator Interfaces establish a connection, that connection is an Aggregator Layer 2 Connection. The Aggregator Layer 2 Connection appears on Layer 2 Neighbor View maps as a thick line with an Interface icon at each end (representing the Aggregator Interface). or Split Link AggregationLink Aggregation with more than two endpoints. Some vendors refer to this as Multi-Chassis Link Aggregation, SLAG, MLAG, or MC-LAG.)
RcSmltIsLinkUp (NNMi Advanced) Signifies the operational state of the Split Multi-Link Trunk (SMLT) Aggregator Link is transitioning from Down to Up. (Link Aggregation)
RcVrrpStateChange Sent when a Rapid City (RC) Nortel interface transitions to or from a Master state in a particular VRRP Group. This trap is used by the Rapid City (RC) Nortel proprietary VRRP protocol. It corresponds to the rcVrrpTrapNewMaster trap name.
RMONFallingAlarm Sent when an RMON device falls below a preconfigured threshold.
RMONRiseAlarm Sent when an RMON device exceeds a preconfigured threshold.
SNMPColdStart Signifies that the sending protocol entity is reinitializing itself. Therefore, the agent's configuration or protocol might change.
SNMPLinkDown Signifies that the sending protocol entity recognizes a failure in one of the communication links represented in the agent's configuration.
SNMPLinkUp Signifies that the sending protocol entity recognizes that one of the communication links represented in the agent's configuration has come up.
SNMPWarmStart Signifies that the sending protocol entity is reinitializing itself such that neither the agent configuration nor the protocol entity implementation is altered.
STPNewRoot Indicates that the sending agent has become the new root of the Spanning Tree.
STPTopologyChange Sent by a node when any of its configured ports transitions from the Learning state to the Forwarding state, or from the Forwarding state to the Blocking state.

 

SNMP Trap Incident Configurations for Route Analytics Management System (RAMS)
Incident Configuration Name Description
RexAdjStateDown Signifies the adjacency went down.
RexAdjStateFlap

Signifies the adjacency's flap count (rexEventCount) in the duration given by rexCountDuration has become greater than or equal to rexEventThreshold.

Both adjacency up and adjacency down count as flaps. For example: An adjacency going down and coming up increments the flap count by two.
RexAdjStateUp Signifies the adjacency came up.
RexASPathChange Signifies the AS path to a route has changed.
RexBgpRedundChange Signifies a change in the number of next hops available for reaching a prefix
RexBgpVpnReachByCustGain

Signifies the routes in the Customer announced by Provider Edge (PEProvider Edge router. The Internet Service Provider's router that receives your data on the path to your data's final desination. The Customer Edge (CE) router in your network connects to this PE. ) that are up and not baselined as compared to the threshold value. The deviation is represented as either of the following:

  • The number of routes in the Customer that are up and not baselined
  • The percentage of participating routes in the Customer that are up and not baselined
RexBgpVpnReachByCustLoss

Signifies the routes in the Customer announced by PE that are down and not baselined as compared to the threshold value. The deviation is represented as either of the following:

  • The number of routes in the Customer that are down and not baselined
  • The percentage of participating routes in the Customer that are down and not baselined
RexBgpVpnReachByRtGain

Signifies the routes in the Route Target announced by PE that are up and not baselined as compared to the threshold value. The deviation is represented as either of the following:

  • The number of routes in the Route Target that are up and not baselined
  • The percentage of participating routes in the Route Target that are up and not baselined
RexBgpVpnReachByRtLoss

Signifies the routes in the Route Target announced by PE that are down and not baselined as compared to the threshold value. The deviation is represented as either of the following:

  • The number of routes in the Route Target that are down and not baselined
  • The percentage of participating routes in the Route Target that are down and not baselined
RexPathChange Indicates the a path attributes such as metric, number of hops, intermediate hops from a source router to a IP prefix or NSAP address have changed.
RexPeeringStateDown Indicates a peering between a router and RAMS has gone down
RexPeeringStateFlap Indicates a peering between a router and RAMS has gone down.
RexPeeringStateUp Indicates a peering between a router and RAMS has come up.
RexPrefixDrought Signifies a particular BGP Peer Rib has decreased significantly from the Baseline Size as a percentage of the baseline
RexPrefixFlood Signifies a particular BGP Peer Rib has increased significantly from the Baseline Size as a percentage of the baseline.
RexPrefixStateDown Indicates the prefix(rexDstPrfx,rexDstMask) announced by Router(rexSrcRtrSysID, rexSrcRtrIP, rexSrcRtrName) has gone down.
RexPrefixStateFlap

Indicates the prefix (rexDstPrfx,rexDstMask) flap count (rexEventCount) in the duration given by rexCountDuration becomes greater than or equal to rexEventThreshold.

Both prefix up and prefix down count as flaps. For example: A prefix going down and coming up increments the flap count by two.
RexPrefixStateUp Indicates the prefix(rexDstPrfx,rexDstMask) announced by Router(rexSrcRtrSysID, rexSrcRtrIP, rexSrcRtrName) has come up.
RexRtrConnected Indicates the first adjacency of a router becomes full duplex. This means the neighbor sends an LSA and the previously isolated router sends an LSA across that adjacency.
RexRtrIsolated Signifies a router has become isolated from the rest of the topology as all of its duplex connections it has to other routers which are not overloaded with respect to a particular routing protocol have gone down.
RexRtrStateFlap Signifies the router's flap count (rexEventCount) in the duration given by rexCountDuration has become greater than or equal to rexEventThreshold. Both router isolation and router connection count as flaps. For example: A router getting isolated and then connected increments the flap count by two.
RexTest This trap is sent for test purposes
RexVpnPEParticipationByCustGain

Signifies the Provider Edges (PEs) participating in the Customer that are up and not baselined as compared to the threshold value. The deviation is represented as either of the following:

  • The number of PEs that are up and not baselined
  • The percentage of participating PEs that are up and not baselined
RexVpnPEParticipationByCustLoss

Signifies the Provider Edges (PEs) participating in the Customer that are down and not baselined as compared to the threshold value. The deviation is represented as either of the following:

  • The number of PEs that are down and not baselined
  • The percentage of participating PEs that are down and not baselined
RexBgpVpnReachByRtGain

Signifies the routes in the Route Target announced by PE that are up and not baselined as compared to the threshold value. The deviation is represented as either of the following:

  • The number of routes in the Route Target that are up and not baselined
  • The percentage of participating routes in the Route Target that are up and not baselined
RexVpnPEParticipationByRtLoss

Signifies the PEs participating in the Route Target (RT) that are down and not baselined as compared to the threshold value. The deviation is represented as either of the following:

  • The number of PEs that are down and not baselined
  • The percentage of participating PEs that are down and not baselined
RexVpnReachByCustPEGain

Signifies the routes in the Customer announced by PE that are up and not baselined as compared to the threshold value. The deviation is represented as either of the following:

  • The number of routes in the Customer that are up and not baselined
  • The percentage of participating routes in the Customer that are up and not baselined
RexVpnReachByCustPELoss

Signifies the routes in the Customer announced by PE that are down and not baselined as compared to the threshold value. The deviation is represented as either of the following:

  • The number of routes in the Customer that are down and not baselined
  • The percentage of participating routes in the Customer that are down and not baselined
RexVpnReachByCustPrefixDown Signifies that the prefix has become unreachable in Customer.
RexVpnReachByCustPrefixUp Signifies that the prefix has become reachable in Customer.
RexVpnReachByRtPEGain

Signifies the routes in the Route Target announced by PE that are up and not baselined as compared to the threshold value. The deviation is represented as either of the following:

  • The number of routes in the Route Target that are up and not baselined
  • The percentage of participating routes in the Route Target that are up and not baselined
RexVpnReachByRtPELoss

Signifies the routes in the Route Target announced by PE that are down and not baselined as compared to the threshold value. The deviation is represented as either of the following:

  • The number of routes in the Route Target that are down and not baselined
  • The percentage of participating routes in the Route Target that are down and not baselined
RexVpnReachByRtPrefixDown Signifies the prefix has become unreachable in RT.
RexVpnReachByRtPrefixUp Signifies that the prefix has become reachable in RT.
RexVpnSiteExpectedAnncdPfxLoss Signifies that there is a decrease in the number of prefixes announced by the Vpn/Site pair.
RexVpnSiteExpectedRcvdPfxLoss Signifies that there is a decrease in the number of prefixes received by the Vpn/Site pair.
RexVpnSitePrefixStateDown Signifies the prefix(rexDstPrfx,rexDstMask) announced by Router(rexSrcRtrSysID, rexSrcRtrIP, rexSrcRtrName) in VPN(rexVpnName) and site(rexSiteName), has gone down.
RexVpnSitePrefixStateFlap

Signifies the prefix (rexDstPrfx,rexDstMask) flap count (rexEventCount) in the duration given by rexCountDuration becomes greater than or equal to rexEventThreshold.

The prefix is announced by Router (rexSrcRtrSysID, rexSrcRtrIP, rexSrcRtrName) in VPN (rexVpnName) and site (rexSiteName).

Both prefix up and prefix down count as flaps. For example: A prefix going down and coming up increments the flap count by two.
RexVpnSitePrefixStateUp

Signifies the prefix (rexDstPrfx,rexDstMask) has come up.

The  prefix is announced by Router (rexSrcRtrSysID, rexSrcRtrIP, rexSrcRtrName) in VPN (rexVpnName) and site (rexSiteName).
RexVpnSiteUnexpectedAnncdPfxGain Signifies there is an increase in the number of prefixes announced by the Vpn/Site pair.
RexVpnSiteUnexpectedRcvdPfxGain Signifies there is an increase in the number of prefixes received by the Vpn/Site pair.
TrafficHighLinkUtilization Indicates the traffic volume has exceeded a specified threshold on a link. Specify the threshold as an absolute number in kilobytes per second or in terms of percentage of link capacity.
TrafficLinkCoSUtilization Indicates the traffic volume has exceeded a specified threshold for a CoS queue on a link. Specify the threshold as an absolute number in kilobytes per second or in terms of a percentage of link capacity.
TrafficLowLinkUtilization Indicates the traffic volume has fallen below a specified threshold on a link. Specify the threshold as an absolute number in kilobytes per second or in terms of percentage of link capacity.
TrafficQuantityAlert A generic trap for all non-link related traffic alerts. Specify the threshold as an absolute number in kilobytes per second or in terms of percentage of link capacity.

To see or modify these SNMP trap incident configurations:

  1. ClosedNavigate to the SNMP Trap Configuration form.
    1. In the Workspace navigation panel, select the Configuration workspace.
    2. Select SNMP Trap Configurations
  2. Select a row and click the Open icon.
  3. When you finish, click  Save and Close.

Send Help Center feedback