- Index
- Preface
- Overview
- Using the Command-Line Interface
- Configuring Switch Alarms
- Assigning the Switch IP Address and Default Gateway
- Configuring Cisco EnergyWise
- Configuring Cisco IOS Configuration Engine
- Clustering Switches
- Administering the Switch
- Configuring PTP
- Configuring SDM Templates
- Configuring Switch-Based Authentication
- Configuring IEEE 802.1x Port-Based Authentication
- Configuring Interface Characteristics
- Configuring Smartports Macros
- Configuring VLANs
- Configuring VTP
- Configuring Voice VLAN
- Configuring STP
- Configuring MSTP
- Configuring Optional Spanning-Tree Features
- Configuring Resilient Ethernet Protocol
- Configuring Flex Links and the MAC Address-Table Move Update Feature
- Configuring DHCP Features and IP Source Guard
- Configuring Dynamic ARP Inspection
- Configuring IGMP Snooping and MVR
- Configuring Port-Based Traffic Control
- Configuring LLDP, LLDP-MED, and Wired Location Service
- Configuring CDP
- Configuring UDLD
- Configuring SPAN and RSPAN
- Configuring RMON
- Configuring System Message Logging
- Configuring SNMP
- Configuring Network Security with ACLs
- Configuring Cisco IOS IP SLAs Operations
- Configuring QoS
- Configuring IPv6 Unicast Routing
- Configuring EtherChannels and Link-State Tracking
- Troubleshooting
- Supported MIBs
- Working with the Cisco IOS File System, Configuration Files, and Software Images
- Unsupported Commands in Cisco IOS Release 12.2(50)SE
- Understanding IE 3000 Switch Alarms
- Configuring IE 3000 Switch Alarms
- Displaying IE 3000 Switch Alarms Status
Configuring Cisco IE 3000 Switch Alarms
This section describes how to configure the different alarms for the Cisco IE 3000 switch.
This chapter consists of these sections:
•Understanding IE 3000 Switch Alarms
•Configuring IE 3000 Switch Alarms
•Displaying IE 3000 Switch Alarms Status
Note For complete syntax and usage information for the commands used in this chapter, see the switch command reference for this release.
Understanding IE 3000 Switch Alarms
The IE 3000 switch software monitors switch conditions on a per port or a switch basis. If the conditions present on the switch or a port do not match the set parameters, the switch software triggers an alarm or a system message. By default, the switch software sends the system messages to a system message logging facility, or a syslog facility. You can also configure the switch to send Simple Network Management Protocol (SNMP) traps to an SNMP server. You can configure the switch to trigger an external alarm device by using the two independent alarm relays (major or minor). For more information on how to configure the alarms, see the "Configuring IE 3000 Switch Alarms" section.
This section includes information about these topics:
•Global Status Monitoring Alarms
•FCS Error Hysteresis Threshold
•Port Status Monitoring Alarms
Global Status Monitoring Alarms
The IE 3000 switch can process alarms related to temperature and power supply conditions, referred to as global or facility alarms. Table 3-1 lists the global alarms, their descriptions, and functions.
|
|
---|---|
Power Supply Alarm |
The switch monitors dual DC power supply levels. If the system is configured to operate in a dual power mode, an alarm triggers if a power supply fails or is missing. The alarm is automatically cleared when both power supplies are present or working. You can configure the power supply alarm to be connected to the hardware relays. For more information, see the "Configuring the Power Supply Alarm" section. |
Temperature Alarms |
The switch contains two temperature sensors that monitor the environmental conditions inside the switch. •The primary alarm is enabled automatically to trigger both at a low temperature, -4°F (-20°C) and a high temperature, 203°F (95°C). It cannot be disabled. By default, the primary temperature alarm is associated with the major relay. •The secondary alarm triggers when the system temperature is higher or lower than the configured high and low temperature thresholds. The secondary alarm is disabled by default. For more information, see the "Configuring the Switch Temperature Alarms" section. |
FCS Error Hysteresis Threshold
The Ethernet standard calls for a maximum bit-error rate of 10-8. In the IE 3000 switch, the bit error-rate range is from 10-6 to 10-11. The bit error-rate input to the switch is a positive exponent. If you want to configure the bit error-rate of 10-9, you enter the value 9 for the exponent. By default, the FCS bit error-rate is 10-8.
You can set the FCS error hysteresis threshold to prevent the toggle of the alarm when the actual bit-error rate fluctuates near the configured rate. The hysteresis threshold is defined as the ratio between the alarm clear threshold to the alarm set threshold, expressed as a percentage value.
For example, if the FCS bit error-rate alarm value is configured to 10-8, that value is the alarm set threshold. To set the alarm clear threshold at 5*10-10, the hysteresis, value h, is determined as follows:
h = alarm clear threshold / alarm set threshold
h = 5*10-10 / 10-8 = 5*10-2 = 0.05 = 5 percent
The FCS hysteresis threshold is applied to all ports on the switch. The allowable range is from 1 to 10 percent. The default value is 10 percent. See the "Configuring the FCS Bit Error Rate Alarm" section for more information.
Port Status Monitoring Alarms
The IE 3000 switch can also monitor the status of the Ethernet ports and generate alarm messages based on the alarms listed in Table 3-2. To save user time and effort, the switch supports changing alarm configurations by using alarm profiles. You can create a number of profiles and assign one of these profiles to each Ethernet port.
Alarm profiles provide a mechanism for you to enable or disable alarm conditions for a port and associate the alarm conditions with one or both alarm relays. You can also use alarm profiles to set alarm conditions to send alarm traps to an SNMP server and system messages to a syslog server. The alarm profile defaultPort is applied to all interfaces in the factory configuration (by default).
Note You can associate multiple alarms to one relay or one alarm to both relays.
Table 3-2 lists the port status monitoring alarms and their descriptions and functions. Each fault condition is assigned a severity level based on the Cisco IOS System Error Message Severity Level.
|
|
---|---|
Link Fault alarm |
The switch generates a link fault alarm when problems with a port physical layer cause unreliable data transmission. A typical link fault condition is loss of signal or clock. The link fault alarm is cleared automatically when the link fault condition is cleared. The severity for this alarm is error condition, level 3. |
Port not Forwarding alarm |
The switch generates a port not-forwarding alarm when a port is not forwarding packets. This alarm is cleared automatically when the port begins to forward packets. The severity for this alarm is warning, level 4. |
Port not Operating alarm |
The switch generates a port not-operating alarm when a port fails during the startup self-test. When triggered, the port not-operating alarm is only cleared when the switch is restarted and the port is operational. The severity for this alarm is error condition, level 3. |
FCS Bit Error Rate alarm |
The switch generates an FCS bit error-rate alarm when the actual FCS bit error-rate is close to the configured rate. You can set the FCS bit error-rate by using the interface configuration CLI for each of the ports. See the "Configuring the FCS Bit Error Rate Alarm" section for more information. The severity for this alarm is error condition, level 3. |
Triggering Alarm Options
The switch supports these methods for triggering alarms:
•Configurable Relays
The switch is equipped with two independent alarm relays that can be triggered by alarms for global and port status conditions. You can configure the relays to send a fault signal to an external alarm device, such as a bell, light, or other signaling device. You can associate any alarm condition with either alarm relay or both relays. Each fault condition is assigned a severity level based on the Cisco IOS System Error Message Severity Level.
See the "Configuring IE 3000 Switch Alarms" section for more information on configuring the relays.
•SNMP Traps
SNMP is an application-layer protocol that provides a message format for communication between managers and agents. The SNMP system consists of an SNMP manager, an SNMP agent, and a management information base (MIB).
The snmp-server enable traps command can be changed so that the user can send alarm traps to an SNMP server. You can use alarm profiles to set environmental or port status alarm conditions to send SNMP alarm traps. See the "Enabling SNMP Traps" section for more information.
•Syslog Messages
You can use alarm profiles to send system messages to a syslog server. See the "Configuring IE 3000 Switch Alarms" section for more information.
Configuring IE 3000 Switch Alarms
This section describes how to configure the IE 3000 switch alarms:
•Default IE 3000 Switch Alarm Configuration
•Configuring the Power Supply Alarm
•Configuring the Switch Temperature Alarms
•Configuring the FCS Bit Error Rate Alarm
Default IE 3000 Switch Alarm Configuration
Table 3-3 shows the default IE 3000 switch alarm configuration.
Configuring the Power Supply Alarm
This section describes how to configure the power supply alarm on your switch. It contains this configuration information:
•Setting the Power Supply Alarm Options
Setting the Power Mode
The IE 3000 switch has two DC power inputs. By default, the system operates in the single-power mode. You can use the power-supply dual global configuration command to set the dual-mode operation. In dual-power mode, a second power supply gives power to the switch if the primary power supply fails.
Beginning in privileged EXEC mode, follow these steps to set the switch to dual power mode operation:
Use the no power-supply dual command to disable this alarm by setting the switch back to single power mode operation.
Setting the Power Supply Alarm Options
Use the alarm facility power-supply global configuration command to associate the power supply alarm to a relay. You can also configure all alarms and traps associated with the power supply alarm to be sent to syslog and the SNMP server.
Beginning in privileged EXEC mode, follow these steps to associate the power supply alarm to a relay:
To disable sending the alarm to a relay, to syslog, or to an SNMP server, use the no alarm facility power-supply relay, no alarm facility power-supply notifies, or no alarm facility power-supply syslog global configuration commands.
Note Before you can use the notifies command to send alarm traps to an SNMP server, you must first set up the SNMP server by using the snmp-server enable traps alarms global configuration command. See the "Enabling SNMP Traps" section.
This example sets the power-supply monitoring alarm to the minor relay.
Switch(config) # alarm facility power-supply relay minor
Configuring the Switch Temperature Alarms
You can change the temperature thresholds for both the primary and secondary temperature alarms. You can also change the association of the primary and secondary temperature alarms to either the major or minor relay.
This section describes how to configure the temperature alarms on your switch. It contains this configuration information:
•Setting the Primary Temperature Threshold for the Switch
•Setting a Secondary Temperature Threshold for the Switch
•Associating the Temperature Alarms to a Relay
Setting the Primary Temperature Threshold for the Switch
You can use the alarm facility temperature primary global configuration command to set low and high temperature thresholds for the primary temperature monitoring alarm.
Beginning in privileged EXEC mode, follow these steps to set the high temperature threshold:
Use the no alarm facility temperature primary high threshold global configuration command to delete the temperature monitoring alarm configuration and return to the default setting.
This example shows how to delete the primary temperature monitoring alarm configuration and return to the default setting.
Switch(config) # no alarm facility temperature primary high 45
Setting a Secondary Temperature Threshold for the Switch
You can use the alarm facility temperature secondary global configuration command to set the low and high temperature thresholds for the secondary temperature monitoring alarm.
Beginning in privileged EXEC mode, follow these steps to set the low temperature threshold:
Use the no alarm facility temperature secondary threshold global configuration command to disable the secondary temperature threshold alarm.
This example disables the secondary temperature threshold alarm.
Switch(config) # no alarm facility temperature secondary 45
Associating the Temperature Alarms to a Relay
By default, the primary temperature alarm is associated to the major relay. You can use the alarm facility temperature global configuration command to associate the primary temperature alarm to the minor relay, to an SNMP trap, to a syslog message, or to associate the secondary temperature alarm to the major or minor relay, an SNMP trap, or a syslog message.
Beginning in privileged EXEC mode, follow these steps to associate the secondary temperature alarm to a relay:
Note Before you use the notifies command to send alarm traps to an SNMP server, you must first set up the SNMP server by using the snmp-server enable traps alarms global configuration command. See the "Enabling SNMP Traps" section.
Use the no alarm facility temperature secondary to disable the secondary temperature alarm.
This example sets the secondary temperature alarm to the minor relay, with a high temperature threshold value of 113oF (45oC). All alarms and traps associated with this alarm are sent to a syslog server and an SNMP server.
Switch(config) # alarm facility temperature secondary high 45
Switch(config) # alarm facility temperature secondary relay minor
Switch(config) # alarm facility temperature secondary syslog
Switch(config) # alarm facility temperature secondary notifies
This example sets the first (primary) temperature alarm to the major relay. All alarms and traps associated with this alarm are sent to a syslog server.
Switch(config) # alarm facility temperature primary syslog
Switch(config) # alarm facility temperature primary relay major
Configuring the FCS Bit Error Rate Alarm
This section describes how to configure the FCS bit-error rate alarm on your switch:
•Setting the FCS Error Threshold
•Setting the FCS Error Hysteresis Threshold
Setting the FCS Error Threshold
The switch generates an FCS bit error-rate alarm when the actual rate is close to the configured rate. Use the fcs-threshold interface configuration command to set the FCS error threshold.
Beginning in privileged EXEC mode, follow these steps to set the bit error-rate value for a port:
Use the no fcs-threshold interface configuration command to return to the default FCS threshold value.
This example shows how to set the FCS bit error rate for a port to 10-10.
Switch#
configure terminal
Switch(config)# interface fastethernet1/1
Switch(config-if) # fcs-threshold 10
Setting the FCS Error Hysteresis Threshold
The hysteresis setting prevents the toggle of an alarm when the actual bit error-rate fluctuates near the configured rate. Use the alarm facility fcs-hysteresis global configuration command to set the FCS error hysteresis threshold.
Note The FCS hysteresis threshold is applied to all ports of an IE 3000 switch.
Beginning in privileged EXEC mode, follow these steps to set the FCS error hysteresis threshold for a switch:
Use the no alarm facility fcs-hysteresis command to set the FCS error hysteresis threshold to its default value.
Note The show running config command displays any FCS error hysteresis that is not the default value.
This example shows how to set the FCS error hysteresis at 5 percent.
Switch(config)# alarm facility fcs-hysteresis 5
Configuring Alarm Profiles
This section describes how to configure alarm profiles on your switch. It contains this configuration information:
•Creating or Modifying an Alarm Profile
•Attaching an Alarm Profile to a Specific Port
Creating or Modifying an Alarm Profile
You can use the alarm profile global configuration command to create an alarm profile or to modify an existing profile. When you create a new alarm profile, none of the alarms are enabled.
Note The only alarm enabled in the defaultPort profile is the Port not operating alarm.
Beginning in privileged EXEC mode, follow these steps to create an alarm profile:
|
|
|
---|---|---|
Step 1 |
configure terminal |
Enter global configuration mode. |
Step 2 |
alarm profile name |
Create the new profile or identify an existing profile, and enter alarm profile configuration mode. |
Step 3 |
alarm alarm-id |
Add or modify alarm parameters for a specific alarm (see Table 3-4). The values are 1 to 4. You an enter more than one alarm ID separated by a space. |
Step 4 |
notifies alarm-id |
(Optional) Configure the alarm to send an SNMP trap to an SNMP server. |
Step 5 |
relay-major alarm-id |
(Optional) Configure the alarm to send an alarm trap to the major relay. (Optional) Configure the alarm to send an alarm trap to the minor relay. |
Step 6 |
syslog alarm-id |
(Optional) Configure the alarm to send an alarm trap to a syslog server. |
Step 7 |
end |
Return to privileged EXEC mode. |
Step 8 |
show alarm profile name |
Verify the configuration. |
Step 9 |
copy running-config startup-config |
(Optional) Save your entries in the configuration file. |
To delete an alarm profile, use the no alarm profile name global configuration command.
This example creates or modifies the alarm profile fastE for the fastEthernetPort with link-down (alarmList ID 3) and an FCS error rate of 30 percent (alarmList ID 4) alarms enabled. The link-down alarm is connected to the minor relay, and the FCS error rate alarm is connected to the major relay. These alarms also send notifications to an SNMP server and send system messages to a syslog server.
Switch(config)# alarm profile fastE
Switch(config-alarm- prof)# alarm 3 4
Switch(config-alarm- prof)# relay major 4
Switch(config-alarm- prof)# relay minor 3
Switch(config-alarm- prof)# notifies 3 4
Switch(config-alarm- prof)# syslog 3 4
Note Before you use the notifies command to send alarm traps to an SNMP server, you must first set up the SNMP server by using the snmp-server enable traps alarms global configuration command. See the "Enabling SNMP Traps" section.
Table 3-4 lists the alarmList IDs and their corresponding alarm definitions. For a description of these alarms, see the "Port Status Monitoring Alarms" section.
|
|
---|---|
1 |
Link fault |
2 |
Port not forwarding |
3 |
Port not operating |
4 |
FCS error rate exceeds threshold |
Attaching an Alarm Profile to a Specific Port
In interface configuration mode, you can use the alarm-profile command to attach an alarm profile to a specific port.
Beginning in privileged EXEC mode, follow these steps to attach an alarm profile to a port:
To detach an alarm profile from a specific port, use the no alarm-profile name interface configuration command.
This example attaches an alarm profile named fastE to a port.
Switch(config)# interface fastethernet 1/2
Switch(config-if)# alarm profile fastE
This example detaches an alarm profile named fastE from a port.
Switch(config)# interface fastethernet 1/2
Switch(config-if)# no alarm profile fastE
Enabling SNMP Traps
Use the snmp-server enable traps alarms global configuration command to enable the switch to send alarm traps.
Note Before using alarm profiles to set the switch to send SNMP alarm trap notifications to an SNMP server, you must first enable SNMP by using the snmp-server enable traps alarms global configuration command.
Beginning in privileged EXEC mode, follow these steps to enable the switch to send alarm traps:
Displaying IE 3000 Switch Alarms Status
To display the global and port alarm status, use one or more of the privileged EXEC commands in Table 3-5: