trap manager - use snmp 'specific number' to set event text

Question

Hi there,

the task is to make snmp traps received by exploder and forwarded to receiver and shown in sm_gui human readable.

(Using IPM 7.2 / SAM 7.0)

Device is sending snmp trap for OSPF. (.1.3.6.1.2.1.14.16.2)

Generic 6

Specific 1-20 (or a subset of)

I changed trap_mgr.conf to recognize this.

BEGIN_TRAP .1.3.6.1.2.1.14.16.2 6 *

ClassName: OSPFLink

InstanceName: $SYS$

EventName: OSPF Trap $S$

END_TRAP

This will create me a notification with EvenName e.g. "OSPF Trap 12", so far, so good.

Of course, I CAN enter these lines for each and every specific number and set related event name, but I want to avoid that as I expect this should have been easily achieved by some functionality.

The Adapter Platform User Guide points to mapping which can be used for varbinds for example as follows

EventText: Reason - $V1$

Map: {

V1

1= UP

2= DOWN

}

I did not see any point to hook in with $S$ (Specific trap number of the SNMP Trap) there. $V1$ points to first Varbind, $V2$ to second and so on.

The trap I am receiving has no indication in Varbinds pointing to this specific number.

Event: This is a trap from 11.22.33.44 Trap:6, Specific:16, String=

Event Text: V1=10.10.10.10, V2=10.20.30.40 V3=0, V4=4, All Varbinds: 10.10.10.10 10.20.30.40 0 4 11.22.33.44

Is there any builtin function I did not recognized so far to achieve this ?

Thanks

Christian

Shyamjayachandr · Accepted Answer

Hi ,

Easy way out for the following issue.

1) Discover your devices to SMARTS IP manager.

...IP/smarts/bin/sm_tpmgr -s --add-agent= --snmp= --community=

2) Add IP domain as source to OI

Can be done from the global manager adminsitration console for the OI, check SAM adapter configuration guide for more info.

3) Set the eventname in the ASL from the specific name.

set this in the trap configuraiton

ASL: .asl

Put the asl in the SAM conf icoi-trapd folder

you cna set eventname as below

if (SPECIFIC == 4) {

EVENTNAME = " ";

}

if (SPECIFIC == 5) {

EVENTNAME = " ";

}

Hemulll · Answer

Hi Christian! One question? why you don't send ospf traps directly to the ospf manager? Is not really crazy to see all ospf traps like events in console?

choefing · Answer

Thanks for your reply Hemulll,

I'm not quite sure what you talking about... does either SAM or IPM contain a dedicated manager for that ? Or its maybe just another purchaseable product?

For now the flow is:

trap --> exploder --> receiver --> (i guess) OI --> SAM and thus shown as notifications on sm_gui.

That points me also to another issue I am facing.

As per Q&A on EMC support I should only insert devices into the IP manager.. but there is no IP manager on the way shown above. I can't "seed" any devices into OI nor can i see anything like I see in IPM (Classes.. Host, Router, Switches) in OI's when using admin console or dmctl.

Hemulll · Answer

Hi Christian.

Do you have installed EMC Ionix Network Protorol Manager (BGP, OSPF, ISIS, EIGRP)?

If yes so you can forward ospf, bgp traps directly to NPM manager to impact on defined instance and generate event - problem in SAM with Impact and RCA

choefing · Answer

Hi Hemull,

unfortunately we don't have this installed and I guess its also no part of the license we have.. and most probably nothing more will be purchased.

One brought to my attention that varbind3 indicates the event from opposite devices and for now I am using only varbind 3 to identify which event this is but I would like to also map the "enterprise specific" and build the notification.

BEGIN_TRAP .1.3.6.1.4.1.9.10.101 6 *

InstanceName: $SYS$

EventName: OSPF Trap specific $S$ : $V3$

Map: {

V3

1 = cospfIfConfigError

2 = cospfShamLinkConfigError

3 = cospfShamLinkAuthFailure

4 = cospfShamLinkRxBadPacket

5 = cospfShamLinkTxRetransmit

6 = cospfShamLinksStateChange

7 = cospfVirtIfConfigError

8 = cospfTxRetransmit

9 = cospfVirtIfTxRetransmit

10 = cospfOriginateLsa

11 = cospfMaxAgeLsa

12 = cospfNssaTranslatorStatusChange

13 = cospfShamLinkStateChange

14 = cospfShamLinkNbrStateChange

default = not found

}

END_TRAP

$S$ matches the specific number but it seems I can't map this as I do with varbind 3. I also did not found any information if it's possible to set a variable e.g. Z to match $S$ and map Z then. Maybe I should check what can be achieved with ASL script for this.

Can you imagin eany possible way to achieve this ?

Despite that.. my $SYS$ reflects the IP all the time. for now no way to map this to FQDN.

I've read in KB# emc144408

Problem:

SAM notifications from Trap Receiver with ElementName displaying IP instead of device name.

Root Cause:

The device does not exist in OI when the traps are received.

Fix:

To resolve this issue, discover the device into your IP domain using one of the mechanisms described in the IP Discovery Guide. Once the device is discovered to the IP domain, it will synchronize with the OI domain. Once the OI domain synchronization is complete, future traps from this device will notify using the device name instead of the IP address.

For me that sounds like OI should be populated with devices I seed in ANY of our IP managers ?

I can't see any Host or Router or Switch within OI when using dmctl -s OUR_OI_SERVER getInstances Host or something like that. Sounds like something does not work here properly ?

choefing · Answer

Great Adding the IP Domains into OI fixes my problem with hostname.I'll go on including every IPM now and have a look afterwards into the ASL script part.Thank you both a lot.

choefing · Answer

Just wanted to let you know that even setting parts of the notification using ASL file and 'SPECIFIC' in there provided me with anything I needed to accomplish the task. Thanks both again.

Smarts

trap manager - use snmp 'specific number' to set event text

Was this post helpful?