Archived community.zenoss.org | full text search
Skip navigation
71846 Views 8 Replies Latest reply: Jan 12, 2010 5:05 PM by tcount RSS
scottyd Newbie 4 posts since
Dec 21, 2009
Currently Being Moderated

Dec 21, 2009 6:45 AM

Cisco Switch Monitoring

Hi, Zenoss looks great but...

I have just run up the Zenoss rPath appliance and installed the Cisco Mibs from here: docs/DOC-3404

 

 

I can see all the MIBS in the Cisco Subfolder. However any SNMP events can not be translated. I have set up on the switch these commands:

-----------------------

snmp-server community ABC RO
snmp-server community DEF RW
snmp-server enable traps snmp authentication warmstart linkdown linkup coldstart
snmp-server enable traps config
snmp-server enable traps syslog
snmp-server enable traps entity
snmp-server enable traps flash insertion removal
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps port-security
snmp-server enable traps MAC-Notification
snmp-server enable traps envmon fan shutdown supply temperature
snmp-server enable traps cluster
snmp-server enable traps vlan-membership

snmp-server host 172.16.201.138 version 2c ABC

-------------------------

 

This switch is a common old 2950t24, If I shut down an interface it produces an "unknown class" event:

 

----------------------------

prodState1000 stateChange2009/12/22 13:10:36.000 facilityunknown eventClassKeyclogMessageGenerated agentzentrap dedupid10.218.240.242||||3|snmp trap clogMessageGenerated managerSERVER LocationowneridfirstTime2009/12/22 00:10:36.000 eventClass/Unknown messagesnmp trap clogMessageGenerated DevicePriority3 suppidmonitorlocalhost priority-1 DeviceClass/Network/Router/Cisco eventState0 evid97673c83-2ece-42ce-b0cf-fce30a816e9f eventClassMappingcomponentclearidDeviceGroups| eventGrouptrap device10.218.240.242 severity3 count1 ntevid0 summarysnmp trap clogMessageGenerated eventKeylastTime2009/12/22 00:10:36.000 ipAddress10.218.240.242 Systems| clogHistMsgName.778UPDOWN clogHistMsgText.778Interface FastEthernet0/13, changed state to down clogHistMsgNameUPDOWN clogHistTimestamp3610852942 oid1.3.6.1.4.1.9.9.41.1.2.3.1.6.778 clogHistFacility.778LINK clogHistSeverity4 clogHistFacilityLINK community ABCclogHistSeverity.7784 clogHistMsgTextInterface FastEthernet0/13, changed state to down clogHistTimestamp.7783610852942 sysUpTimeInstance3610852942

--------------------------

 

I have followed these instructions, as best as I can. docs/DOC-4132

I can not see a class :/Devices/Network/Cisco so I moved them to /Network/Cisco/Router, this at least got the perf graphs working that way.

 

Am I missing something fundamental here? I see there is mention about a Cisco/ASA class also, but I can not see that either.

Cheers

  • ericv Rank: White Belt 34 posts since
    May 5, 2008
    Currently Being Moderated
    1. Jan 11, 2010 6:44 PM (in response to scottyd)
    Re: Cisco Switch Monitoring

    The eventclass might need to be mapped manually as they arrive. However, that is the least of my worries, it is the correlating that its giving a headache.

    I loaded the Cisco Zenpack as well succesfully and have similar issues. Once the traps arrive, zenoss does not seem to be translating the numeric OID ( which does not tell anything to the event) to the alphabethic which could be abit more descriptive.

     

    I have loaded many other Mibs manualy for Juniper, IBM , Dell and other and it is a hit and miss. Sometimes it would translate the numeric OID to the alphabetic one and other times just will not. I have been using Zenoss since the early version and I have been always having these issues with mibs.

     

    anyone has any idea how to troubleshoot this and find the root cause of the problem?

     

     

    Thanks in advance.

  • tcount Rank: White Belt 23 posts since
    Jun 26, 2009
    Currently Being Moderated
    2. Jan 12, 2010 8:19 AM (in response to ericv)
    Re: Cisco Switch Monitoring
    Our zenoss is reading the snmp traps from multiple Cisco devices. Don't force the the Cisco MIBS into another area, just let the installer place them properly and the system will interpret the traps and syslog correctly.
  • jmp242 ZenossMaster 4,060 posts since
    Mar 7, 2007
    Currently Being Moderated
    4. Jan 12, 2010 2:37 PM (in response to scottyd)
    Re: Cisco Switch Monitoring

    Yes, as noted, the actual Cisco zenpack is an Enterprise Zenpack, so the

    only way to get it is to purchase Enterprise so you can download and

    install the Zenpack. I think there may be some community Zenpacks, but

    they're not going to be the one you link to.

    --

    James Pulver

    Information Technology Area Supervisor

    LEPP Computer Group

    Cornell University

     

     

     

    scottyd wrote, On 1/12/2010 2:34 PM:

    Thanks for the replies guys, I think I have done it right as you state. But is it true that you need Zenoss Enterprise for these to work?

    As I don't.

    Cheers

    Scott

    >

  • tcount Rank: White Belt 23 posts since
    Jun 26, 2009
    Currently Being Moderated
    6. Jan 12, 2010 4:17 PM (in response to scottyd)
    Re: Cisco Switch Monitoring
    I've got it running with the community version, not enterprise. Loaded the Cisco ASA and Cisco MIBS, they work very well. SolarWinds is an excellent product, I've installed a number of Orion systems. The problem here was they did not have a Network Monitoring budget.
  • tcount Rank: White Belt 23 posts since
    Jun 26, 2009
    Currently Being Moderated
    8. Jan 12, 2010 5:05 PM (in response to scottyd)
    Re: Cisco Switch Monitoring
    It's all on the Zenpacks page.

More Like This

  • Retrieving data ...

Legend

  • Correct Answers - 4 points
  • Helpful Answers - 2 points