ON THIS PAGE
Alarm Overview
This section describes interface alarms and how to configure them.
Alarms alert you to conditions on a network interface, on the device chassis, or in the system software that might prevent the device from operating normally. You can set the conditions that trigger alarms on an interface. Chassis and system alarm conditions are preset.
An active alarm lights the ALARM LED on the front panel of the device. You can monitor active alarms from the J-Web user interface or the CLI. When an alarm condition triggers an alarm, the device lights the yellow (amber) ALARM LED on the front panel. When the condition is corrected, the light turns off.
Alarm Types
The device supports three types of alarms:
Interface alarms indicate a problem in the state of the physical links on fixed or installed Physical Interface Modules (PIMs). To enable interface alarms, you must configure them.
Chassis alarms indicate a failure on the device or one of its components. Chassis alarms are preset and cannot be modified.
System alarms indicate a missing rescue configuration or software license, where valid. System alarms are preset and cannot be modified, although you can configure them to appear automatically in the J-Web user interface or CLI.
A system alarm is triggered, when the Network Security Process (NSD) is unable to restart due to
the failure of one or more NSD subcomponents. The
alarm logs about the NSD are saved in the messages
log. The alarm is automatically cleared when NSD
restarts successfully. The show chassis
alarms and show system
alarms commands are updated to display
the following output when NSD is unable to restart
- NSD fails to restart because
subcomponents fail.
Run the following commands when the CLI prompt indicates that an alarm has been raised:
show system alarmsshow chassis alarmsshow chassis fpc pic-status
For more information about the CLI commands, see show system alarms, show chassis alarms, and show chassis fpc.
Alarm Severity
Alarms have two severity levels:
Major (red)—Indicates a critical situation on the device that has resulted from one of the following conditions. A red alarm condition requires immediate action.
One or more hardware components have failed.
One or more hardware components have exceeded temperature thresholds.
An alarm condition configured on an interface has triggered a critical warning.
Minor (yellow)—Indicates a noncritical condition on the device that, if left unchecked, might cause an interruption in service or degradation in performance. A yellow alarm condition requires monitoring or maintenance.
A missing rescue configuration or software license generates a yellow system alarm.
Alarm Conditions
To enable alarms on a device interface, you must select an alarm condition and an alarm severity. In contrast, alarm conditions and severity are preconfigured for chassis alarms and system alarms.
For information about chassis alarms for your device, see the Hardware Guide for your device.
This section contains the following topics:
Interface Alarm Conditions
Table 1 lists the interface conditions, sorted by interface type, that you can configure for an alarm. You can configure each alarm condition to trigger either a major (red) alarm or minor a (yellow) alarm. The corresponding configuration option is included.
For the services stateful firewall filters (NAT, IDP, and IPsec), which operate on an internal adaptive services module within a device, you can configure alarm conditions on the integrated services and services interfaces.
Interface |
Alarm Condition |
Description |
Configuration Option |
|---|---|---|---|
Ethernet |
Link is down |
The physical link is unavailable. |
link-down |
Integrated services |
Hardware or software failure |
On the adaptive services module, either the hardware associated with the module or the software that drives the module has failed. |
failure |
Serial |
Clear-to-send (CTS) signal absent |
The remote endpoint of the serial link is not transmitting a CTS signal. The CTS signal must be present before data can be transmitted across a serial link. |
cts-absent |
Data carrier detect (DCD) signal absent |
The remote endpoint of the serial link is not transmitting a DCD signal. Because the DCD signal transmits the state of the device, no signal probably indicates that the remote endpoint of the serial link is unavailable. |
dcd-absent |
|
Data set ready (DSR) signal absent |
The remote endpoint of the serial link is not transmitting a DSR signal. The DSR signal indicates that the remote endpoint is ready to receive and transmit data across the serial link. |
dsr-absent |
|
Loss of receive clock |
The clock signal from the remote endpoint is not present. Serial connections require clock signals to be transmitted from one endpoint and received by the other endpoint of the link. |
loss-of-rx-clock |
|
Loss of transmit clock |
The local clock signal is not present. Serial connections require clock signals to be transmitted from one endpoint and received by the other endpoint of the link. |
loss-of-tx-clock |
|
Services |
Services module hardware down |
A hardware problem has occurred on the device's services module. This error typically means that one or more of the CPUs on the module has failed. |
hw-down |
Services link down |
The link between the device and its services module is unavailable. |
linkdown |
|
Services module held in reset |
The device's services module is stuck in reset mode. If the services module fails to start up five or more times in a row, the services module is held in reset mode. Startup fails when the amount of time from CPU release to CPU halt is less than 300 seconds. |
pic-hold-reset |
|
Services module reset |
The device's services module is resetting. The module resets after it crashes or is reset from the CLI, or when it takes longer than 60 seconds to start up. |
pic-reset |
|
Services module software down |
A software problem has occurred on the device's services module. |
sw-down |
System Alarm Conditions
Table 2 lists the two preset system alarms, the condition that triggers each alarm, and the action you take to correct the condition.
Alarm Type |
Alarm Condition |
Corrective Action |
|---|---|---|
Configuration |
The rescue configuration is not set. |
Set the rescue configuration. |
License |
You have configured at least one software feature that requires a feature license, but no valid license for the feature is currently installed. Note:
This alarm indicates that you are in violation of the software license agreement. You must install a valid license key to be in compliance with all agreements. |
Install a valid license key. |
Change History Table
Feature support is determined by the platform and release you are using. Use Feature Explorer to determine if a feature is supported on your platform.
show chassis
alarms and show system
alarms commands are updated to display
the following output when NSD is unable to restart
- NSD fails to restart because
subcomponents fail.