Configuring SNMP RMON Alarms and Events (NSM Procedure)

You can configure SNMP remote monitoring (RMON) alarms and events to monitor integer-valued MIB objects, standard or enterprise-specific, on the device. You can set the alarm values against thresholds and trigger events when the thresholds are crossed.

To configure the SNMP RMON alarms and events in NSM:

  1. In the navigation tree, select Device Manager > Devices.
  2. In the Devices list, double-click the device to select it.
  3. Click the Configuration tab.
  4. In the configuration tree, expand SNMP.
  5. Select Rmon.
  6. Enter the parameters as specified in Table 77.
  7. Click one:
    • OK—To save the changes.
    • Cancel—To cancel the modifications.
    • Apply—To apply the SNMP settings.

Note: After you make changes to a device configuration, you must push that updated device configuration to the physical security device for those changes to take effect. You can update multiple devices at one time. See the Updating Devices section in the Network and Security Manager Administration Guide for more information.

Table 77: Configuring Rmon Fields

Option

Function

Your Action

Comment

Specifies the comment for the RMON configuration.

Enter the comment.

Alarm

Specifies the attributes of the RMON alarm entry. An alarm entry monitors the value of a MIB variable. You can configure how often the value is sampled, the type of sampling to perform, and what event to trigger if a threshold is crossed.

  1. Expand the Rmon tree and select Alarm.
  2. Click the New button or select a client address and click the Edit button.
  3. Configure the following to create and define an RMON alarm entry:
  • Name—Enter a name for the alarm entry.
  • Comment—Enter a comment for the alarm entry.
  • Description—Enter a text description for the alarm entry.
  • Interval—Enter the interval (in seconds) over which data is sampled and compared with the rising and falling thresholds.
  • Falling Threshold Interval—Enter the interval (in seconds) between samples when the rising threshold is crossed. After the alarm crosses the falling threshold, the regular sampling interval is used. You can enter a value from 1 through 2,147,483,647. The default is 60.
  • Variable—Enter the variable with which you wish to identify the MIB object that is being monitored.
  • Sample Type—Choose the sample type to identify the method of sampling the selected variable and calculating the value to be compared against the thresholds:

    • none
    • absolute-value—The value of the selected variable is compared directly with the thresholds at the end of the sampling interval.
    • delta-value—The value of the selected variable at the last sample is subtracted from the current value, and the difference is compared with the thresholds.
  • Request Type—Specify the scope of the RMON alarm:

    • get-request—Monitor a specific object instance.
    • walk-request—Monitor all object instances belonging to a MIB branch.
    • get-next-request—Monitor the next object instance after the instance specified in the configuration.
  • Startup Alarm—Specify the type of alarm that can be sent when this entry is first activated:

    • falling-alarm—First sample after the alarm entry becomes active is less than or equal to the falling threshold.
    • rising-alarm—First sample after the alarm entry becomes active is greater than or equal to the rising threshold.
    • rising-or-falling-alarm—First sample after the alarm entry becomes active satisfies either of the corresponding thresholds.
  • Rising Threshold—Specify the upper threshold for the sampled variable. When the current sampled value is greater than or equal to this threshold and the value at the last sampling interval is less than this threshold, a single event is generated. A single event is also generated if the first sample after this entry becomes valid is greater than or equal to this threshold and the associated startup alarm is equal to the falling alarm or the rising-or-falling alarm. After a rising event is generated, another rising event cannot be generated until the sampled value falls below this threshold and reaches the falling threshold. You can enter a value from -2,147,483,648 through 2,147,483,647.
  • Falling Threshold—Specify the lower threshold for the sampled variable. When the current sampled value is less than or equal to this threshold and the value at the last sampling interval is greater than this threshold, a single event is generated. A single event is also generated if the first sample after this entry becomes valid is less than or equal to this threshold and the associated startup alarm is equal to the falling alarm or the rising-or-falling alarm. After a falling event is generated, another falling event cannot be generated until the sampled value rises above this threshold and reaches the rising threshold. You can enter a value from -2,147,483,648 through 2,147,483,647. The default is 20 percent less than the rising threshold.
  • Rising Event Index—Specify the event entry that is triggered when a rising threshold is crossed. You can enter a value from 0 through 65,535. The default is 0.
  • Falling Event Index—Specify the event entry that is triggered when a falling threshold is crossed. You can enter a value from 0 through 65,535. The default is 0.
  • Syslog Subtag—Specify the tag to be added to the system log message. You can specify a string of not more than 80 uppercase characters as the system log tag.

Event

Specifies the attributes of the RMON event entry. An event entry generates a notification for an alarm entry when its rising or falling threshold is crossed. You can configure the type of notification that is generated.

  1. Expand the Rmon tree and select Event.
  2. Click the New button or select a client address and click the Edit button.
  3. Configure the following to create and define an RMON event entry:
  • Name—Enter a name for the event entry.
  • Comment—Enter a comment for the event entry.
  • Description—Enter a text description for the event entry.
  • Type—Specify the type of notification generated and where the event is to be logged when a threshold is crossed:

    • none
    • log—Adds the event entry to the logTable.
    • log-and-trap—Sends an SNMP trap and creates a log entry.
    • snmptrap—Sends an SNMP trap.
  • Community—Specify the trap group that is used when generating a trap. If that trap group has the rmon-alarm trap category configured, a trap is sent to all the targets configured for that trap group. The community string in the trap matches the name of the trap group. If nothing is configured, traps are sent to each group with the rmon-alarm category set.

Related Documentation