cOS Stream 3.80.12 SNMP Trap Reference Guide


Table of Contents

1. Introduction
2. Clavister cOS Stream Traps
2.1. HA
2.1.1. Going HA ACTIVE since HA peer is dead
2.1.2. Going HA ACTIVE since outranking peer
2.1.3. Going HA ACTIVE due to user request
2.1.4. Going HA INACTIVE due to being outranked by peer
2.1.5. Going HA INACTIVE due to user request
2.2. SHUTDOWN
2.2.1. System shutting down
3. Supported Standard MIB traps
3.1. IF-MIB (RFC2863)
3.1.1. LINK
3.2. SNMPv2-MIB (RFC3418)
3.2.1. SNMP
3.2.2. STARTUP

Chapter 1: Introduction

[Note] Note: This document is also available in other formats

A PDF version of this document along with all current and older documentation in PDF format can be found at https://my.clavister.com.

It also available in a framed HTML version.

The Clavister cOS Stream supports both proprietary and standard SNMPv2c traps. This guide is a reference for all supported SNMP traps. It is designed to be a valuable information source for both management and troubleshooting.

The main part of this guide lists the individual SNMP traps that are supported. This chapter explains how the traps are grouped and how to interpret the information presented for each.

The guide is divided into two major sections:

  • Clavister cOS Stream proprietary traps

    This section lists the Clavister proprietary trap notifications supported by the Clavister cOS Stream. Proprietary traps may include several parameters controlled by Clavister.

    Each individual trap is then grouped into a specific trap category that mirrors subsystems.

    The trap MIB file is supplied with the Clavister cOS Stream and has the filename CLAVISTER-STREAM-TRAPS.mib. This can be downloaded using SCP from the system's top-level directory.

  • Supported Standard MIB traps

    This section describes standard MIB traps files and individual trap notifications from those MIBs that are supported by the Clavister cOS Stream.

    It is divided into one section per standard MIB that is at least partially supported. Subsections then list the traps from that MIB that are supported, grouped by category. Each category represents a system area.

    The supported standard MIBs files are not supplied by Clavister but are available from third parties. The traps listed are those supported by the Clavister cOS Stream and may not include all the trap notifications present in a specifc MIB.

SNMP Trap Structure

SNMP traps are linked to specific log events, and are triggered if the log event is triggered. Each trap identified in this document always identifies its associated log. For completness, the administrator should use this reference guide in conjunction with the separate Log Reference Guide. The following information is provided for each specific trap message:

Category

Traps belong to categories, where each category maps to a specific subsystem or event group. A trap can belong to only one category.

In this guide, categories are listed as sections, where each section includes the traps for that category.

MIB Name

The MIB identifier for the trap. Each MIB name is unique.

MIB OID

The MIB OID is a string of digits which uniquely identifies the trap. This entry also has information on the MIB file that is used to identify the value with a trap receiving agent. For standard trap OIDs, information about the reference RFC number is also included.

MIB Parameters

Used only for standard traps. Identifies the parameters that are sent within the trap PDU, as defined in the reference RFC. Parameter names are consistent with names on the MIB.

Trigger Log ID

This field identifies the log ID of the event responsible for triggering the trap.

Event Message

A brief explanation of the event that took place.

Parameters

The name of the parameters that are included in this trap. If a parameter is specified within square brackets (for example, [username]), then the parameter is optional and may or may not be included in the trap. Some parameters are only sent for enterprise traps.

Explanation

A detailed explanation of the event.

Note that this information is only featured in this reference guide, and is never included in the SNMP trap itself.

Gateway Action

1 to 3 words separated by "_" describing what action the system will take, if any. If the trap is purely informative, this is set to "None".

Action Description

A short string describing the selected system action. Some actions are self explanatory.

Proposed Action

If applicable, this will give a short explanation of what measures the administrator might take to address the triggered event.

Chapter 2: Clavister cOS Stream Traps

Clavister proprietary SNMP traps defined in the CLAVISTER-STREAM-TRAPS.mib file.

2.1. HA

HA category traps.

2.1.1. Going HA ACTIVE since HA peer is dead

Category
HA
MIB Name
ssmHAActivePeerDead
MIB OID
1.3.6.1.4.1.5089.3.0.2010.0.1005   (STREAM-TRAPS-MIB)
Trigger Log ID
237
Event Message
Going HA ACTIVE since HA peer is dead.
Parameters
node
Explanation
The previously active HA peer became offline and the inactive node took over in a failover.
Gateway Action
Failover
Action Description
None
Proposed Action
If this was an unplanned event, check the logs for hints on why the peer node became offline.

2.1.2. Going HA ACTIVE since outranking peer

Category
HA
MIB Name
ssmHAActiveOutrankingPeer
MIB OID
1.3.6.1.4.1.5089.3.0.2010.0.1010   (STREAM-TRAPS-MIB)
Trigger Log ID
317
Event Message
Going HA ACTIVE since outranking peer.
Parameters
node, decider, localcriteria, peercriteria
Explanation
The previously active HA peer had some sort of malfunction and the inactive node took over.
Gateway Action
Failover
Action Description
None
Proposed Action
If this was an unplanned event, check the logs for hints on what type of malfunction occurred on the peer node.

2.1.3. Going HA ACTIVE due to user request

Category
HA
MIB Name
ssmHAActiveUserRequest
MIB OID
1.3.6.1.4.1.5089.3.0.2010.0.1015   (STREAM-TRAPS-MIB)
Trigger Log ID
275
Event Message
Going HA ACTIVE due to user request.
Parameters
node
Explanation
The system administrator triggered a hand-over and the node became HA active.
Gateway Action
Failover
Action Description
None
Proposed Action
None

2.1.4. Going HA INACTIVE due to being outranked by peer

Category
HA
MIB Name
ssmHAInactiveOutrankedByPeer
MIB OID
1.3.6.1.4.1.5089.3.0.2010.0.1020   (STREAM-TRAPS-MIB)
Trigger Log ID
130
Event Message
Going HA INACTIVE due to being outranked by peer.
Parameters
node, failure, decider, localcriteria, peercriteria
Explanation
A hand-over was performed due to the peer node being deemed to be better fit to be active.
Gateway Action
Failover
Action Description
None
Proposed Action
Review the listed failures and check for related logs to determine the cause of the hand-over.

2.1.5. Going HA INACTIVE due to user request

Category
HA
MIB Name
ssmHAInactiveUserRequest
MIB OID
1.3.6.1.4.1.5089.3.0.2010.0.1025   (STREAM-TRAPS-MIB)
Trigger Log ID
146
Event Message
Going HA INACTIVE due to user request.
Parameters
node
Explanation
The system administrator triggered a hand-over and the node became HA inactive.
Gateway Action
Failover
Action Description
None
Proposed Action
None

2.2. SHUTDOWN

SHUTDOWN category traps.

2.2.1. System shutting down

Category
SHUTDOWN
MIB Name
ssmShutdown
MIB OID
1.3.6.1.4.1.5089.3.0.2020.0.1005   (STREAM-TRAPS-MIB)
Trigger Log ID
361
Event Message
System shutting down.
Parameters
reason
Explanation
System shutting down.
Gateway Action
None
Action Description
None
Proposed Action
None

Chapter 3: Supported Standard MIB traps

Standard SNMP traps supported by Clavister cOS Stream, with one subsection per standard MIB that is at least partially supported. Each subsection lists the traps supported by Clavister cOS Stream in that MIB.

3.1. IF-MIB (RFC2863)

IF-MIB (RFC2863) traps.

3.1.1. LINK

LINK category traps.

3.1.1.1. linkDown

Category
LINK
MIB Name
linkDown
MIB OID
1.3.6.1.6.3.1.1.5.3   (IF-MIB, RFC2863)
MIB Parameters
ifIndex, ifAdminStatus, ifOperStatus
Trigger Log ID
1054
Event Message
Ethernet link down.
Explanation
An Ethernet interface lost its link.
Gateway Action
None
Action Description
None
Proposed Action
If the condition persists then verify cabling and hardware on both the firewall and the peer device.

3.1.1.2. linkUp

Category
LINK
MIB Name
linkUp
MIB OID
1.3.6.1.6.3.1.1.5.4   (IF-MIB, RFC2863)
MIB Parameters
ifIndex, ifAdminStatus, ifOperStatus
Trigger Log ID
1055
Event Message
Ethernet link up.
Explanation
An Ethernet interface's link has been successfully established/negotiated.
Gateway Action
None
Action Description
None
Proposed Action
None

3.2. SNMPv2-MIB (RFC3418)

SNMPv2-MIB (RFC3418) traps.

3.2.1. SNMP

SNMP category traps.

3.2.1.1. authenticationFailure

Category
SNMP
MIB Name
authenticationFailure
MIB OID
1.3.6.1.6.3.1.1.5.5   (SNMPv2-MIB, RFC3418)
MIB Parameters
None
Trigger Log ID
1506
Event Message
SNMP authentication failure.
Explanation
The system has received a protocol message that is not properly authenticated. The packet was thus silently dropped.
Gateway Action
None
Action Description
None
Proposed Action
Check the configured authentication items. If the problem persist check for abnormal traffic.

3.2.2. STARTUP

STARTUP category traps.

3.2.2.1. warmStart

Category
STARTUP
MIB Name
warmStart
MIB OID
1.3.6.1.6.3.1.1.5.2   (SNMPv2-MIB, RFC3418)
MIB Parameters
None
Trigger Log ID
355
Event Message
New configuration activated.
Explanation
The firewall is up and running using the new configuration.
Gateway Action
None
Action Description
None
Proposed Action
None

3.2.2.2. coldStart

Category
STARTUP
MIB Name
coldStart
MIB OID
1.3.6.1.6.3.1.1.5.1   (SNMPv2-MIB, RFC3418)
MIB Parameters
None
Trigger Log ID
427
Event Message
System started.
Explanation
The system has started and loaded the configuration.
Gateway Action
None
Action Description
None
Proposed Action
None