Table of Contents
![[Note]](images/note.png) |
Note: This document is also available in other formats |
|---|---|
|
A PDF version of this document along with all current and older documentation in PDF format can be found at https://my.clavister.com. It is also available in a framed HTML version. |
The Clavister cOS Stream supports both proprietary and standard SNMPv2c traps. This guide is a reference for all supported SNMP traps. It is designed to be a valuable information source for both management and troubleshooting.
The main part of this guide lists the individual SNMP traps that are supported. This chapter explains how the traps are grouped and how to interpret the information presented for each.
The guide is divided into two major sections:
-
Clavister cOS Stream proprietary traps
This section lists the Clavister proprietary trap notifications supported by the Clavister cOS Stream. Proprietary traps may include several parameters controlled by Clavister.
Each individual trap is then grouped into a specific trap category that mirrors subsystems.
The trap MIB file is supplied with the Clavister cOS Stream and has the filename CLAVISTER-STREAM-TRAPS.mib. This can be downloaded using SCP from the system's top-level directory.
-
Supported Standard MIB traps
This section describes standard MIB traps files and individual trap notifications from those MIBs that are supported by the Clavister cOS Stream.
It is divided into one section per standard MIB that is at least partially supported. Subsections then list the traps from that MIB that are supported, grouped by category. Each category represents a system area.
The supported standard MIBs files are not supplied by Clavister but are available from third parties. The traps listed are those supported by the Clavister cOS Stream and may not include all the trap notifications present in a specifc MIB.
SNMP Trap Structure
SNMP traps are linked to specific log events, and are triggered if the log event is triggered. Each trap identified in this document always identifies its associated log. For completness, the administrator should use this reference guide in conjunction with the separate Log Reference Guide. The following information is provided for each specific trap message:- Category
-
Traps belong to categories, where each category maps to a specific subsystem or event group. A trap can belong to only one category.
In this guide, categories are listed as sections, where each section includes the traps for that category.
- MIB Name
-
The MIB identifier for the trap. Each MIB name is unique.
- MIB OID
-
The MIB OID is a string of digits which uniquely identifies the trap. This entry also has information on the MIB file that is used to identify the value with a trap receiving agent. For standard trap OIDs, information about the reference RFC number is also included.
- MIB Parameters
-
Used only for standard traps. Identifies the parameters that are sent within the trap PDU, as defined in the reference RFC. Parameter names are consistent with names on the MIB.
- Trigger Log ID
-
This field identifies the log ID of the event responsible for triggering the trap.
- Event Message
-
A brief explanation of the event that took place.
- Parameters
-
The name of the parameters that are included in this trap. If a parameter is specified within square brackets (for example, [username]), then the parameter is optional and may or may not be included in the trap. Some parameters are only sent for enterprise traps.
- Explanation
-
A detailed explanation of the event.
Note that this information is only featured in this reference guide, and is never included in the SNMP trap itself.
- Gateway Action
-
1 to 3 words separated by "_" describing what action the system will take, if any. If the trap is purely informative, this is set to "None".
- Action Description
-
A short string describing the selected system action. Some actions are self explanatory.
- Proposed Action
-
If applicable, this will give a short explanation of what measures the administrator might take to address the triggered event.
Clavister proprietary SNMP traps defined in the CLAVISTER-STREAM-TRAPS.mib file.
HA category traps.
- Category
- HA
- MIB Name
- ssmHAActivePeerDead
- MIB OID
- 1.3.6.1.4.1.5089.3.0.2010.0.1005 (STREAM-TRAPS-MIB)
- Trigger Log ID
- 237
- Event Message
- Going HA ACTIVE since HA peer is dead.
- Parameters
- node
- Explanation
- The previously active HA peer became offline and the inactive node took over in a failover.
- Gateway Action
- Failover
- Action Description
- None
- Proposed Action
- If this was an unplanned event, check the logs for hints on why the peer node became offline.
- Category
- HA
- MIB Name
- ssmHAActiveOutrankingPeer
- MIB OID
- 1.3.6.1.4.1.5089.3.0.2010.0.1010 (STREAM-TRAPS-MIB)
- Trigger Log ID
- 317
- Event Message
- Going HA ACTIVE since outranking peer.
- Parameters
- node, decider, localcriteria, peercriteria
- Explanation
- The previously active HA peer had some sort of malfunction and the inactive node took over.
- Gateway Action
- Failover
- Action Description
- None
- Proposed Action
- If this was an unplanned event, check the logs for hints on what type of malfunction occurred on the peer node.
- Category
- HA
- MIB Name
- ssmHAActiveUserRequest
- MIB OID
- 1.3.6.1.4.1.5089.3.0.2010.0.1015 (STREAM-TRAPS-MIB)
- Trigger Log ID
- 275
- Event Message
- Going HA ACTIVE due to user request.
- Parameters
- node
- Explanation
- The system administrator triggered a hand-over and the node became HA active.
- Gateway Action
- Failover
- Action Description
- None
- Proposed Action
- None
- Category
- HA
- MIB Name
- ssmHAInactiveOutrankedByPeer
- MIB OID
- 1.3.6.1.4.1.5089.3.0.2010.0.1020 (STREAM-TRAPS-MIB)
- Trigger Log ID
- 130
- Event Message
- Going HA INACTIVE due to being outranked by peer.
- Parameters
- node, failure, decider, localcriteria, peercriteria
- Explanation
- A hand-over was performed due to the peer node being deemed to be better fit to be active.
- Gateway Action
- Failover
- Action Description
- None
- Proposed Action
- Review the listed failures and check for related logs to determine the cause of the hand-over.
- Category
- HA
- MIB Name
- ssmHAInactiveUserRequest
- MIB OID
- 1.3.6.1.4.1.5089.3.0.2010.0.1025 (STREAM-TRAPS-MIB)
- Trigger Log ID
- 146
- Event Message
- Going HA INACTIVE due to user request.
- Parameters
- node
- Explanation
- The system administrator triggered a hand-over and the node became HA inactive.
- Gateway Action
- Failover
- Action Description
- None
- Proposed Action
- None
SHUTDOWN category traps.
Standard SNMP traps supported by Clavister cOS Stream, with one subsection per standard MIB that is at least partially supported. Each subsection lists the traps supported by Clavister cOS Stream in that MIB.
IF-MIB (RFC2863) traps.
LINK category traps.
- Category
- LINK
- MIB Name
- linkDown
- MIB OID
- 1.3.6.1.6.3.1.1.5.3 (IF-MIB, RFC2863)
- MIB Parameters
- ifIndex, ifAdminStatus, ifOperStatus
- Trigger Log ID
- 1054
- Event Message
- Ethernet link down.
- Explanation
- An Ethernet interface lost its link.
- Gateway Action
- None
- Action Description
- None
- Proposed Action
- If the condition persists then verify cabling and hardware on both the firewall and the peer device.
- Category
- LINK
- MIB Name
- linkUp
- MIB OID
- 1.3.6.1.6.3.1.1.5.4 (IF-MIB, RFC2863)
- MIB Parameters
- ifIndex, ifAdminStatus, ifOperStatus
- Trigger Log ID
- 1055
- Event Message
- Ethernet link up.
- Explanation
- An Ethernet interface's link has been successfully established/negotiated.
- Gateway Action
- None
- Action Description
- None
- Proposed Action
- None
SNMPv2-MIB (RFC3418) traps.
SNMP category traps.
- Category
- SNMP
- MIB Name
- authenticationFailure
- MIB OID
- 1.3.6.1.6.3.1.1.5.5 (SNMPv2-MIB, RFC3418)
- MIB Parameters
- None
- Trigger Log ID
- 1506
- Event Message
- SNMP authentication failure.
- Explanation
- The system has received a protocol message that is not properly authenticated. The packet was thus silently dropped.
- Gateway Action
- None
- Action Description
- None
- Proposed Action
- Check the configured authentication items. If the problem persist check for abnormal traffic.
STARTUP category traps.
- Category
- STARTUP
- MIB Name
- warmStart
- MIB OID
- 1.3.6.1.6.3.1.1.5.2 (SNMPv2-MIB, RFC3418)
- MIB Parameters
- None
- Trigger Log ID
- 355
- Event Message
- New configuration activated.
- Explanation
- The firewall is up and running using the new configuration.
- Gateway Action
- None
- Action Description
- None
- Proposed Action
- None
- Category
- STARTUP
- MIB Name
- coldStart
- MIB OID
- 1.3.6.1.6.3.1.1.5.1 (SNMPv2-MIB, RFC3418)
- MIB Parameters
- None
- Trigger Log ID
- 427
- Event Message
- System started.
- Explanation
- The system has started and loaded the configuration.
- Gateway Action
- None
- Action Description
- None
- Proposed Action
- None
