Applies To:

Show Versions Show Versions

Manual Chapter: BIG-IP® Network and System Management Guide: Appendix A - Troubleshooting SNMP Traps
Manual Chapter
Table of Contents   |   << Previous Chapter   |   Next Chapter >>


A

Troubleshooting SNMP Traps


Understanding F5-specific traps

The alert system and the SNMP agent on the BIG-IP® system can send a number of notifications about the current operation of the BIG-IP system. The definitions of these notifications are known as traps, and are contained in the MIB file F5-BIGIP-COMMON-MIB.txt.

The types of notifications that the BIG-IP system can send to an SNMP manager are:

  • General traps
  • Hardware-related traps
  • License-related traps
  • Traffic management operating system (TMOSTM)-related traps
  • Authentication-related traps
  • Denial of Service (DoS)-related traps
  • Network-related traps
  • Logging-related traps
  • Application Security Manager-related traps
  • Global Traffic Manager-related traps
  • Other traps

The remainder of this appendix contains tables that list the trap names contained in the MIB file F5-BIGIP-COMMON-MIB.txt, their descriptions, and the recommended action to take if you receive one of these notifications on your SNMP manager system.

General traps

The general notifications that you might receive on an SNMP manager system are listed and described in Table A.1 .

Table A.1 General traps and recommended actions
Trap Name
Description
Recommended Action
bigipAgentStart
The SNMP agent on the BIG-IP system has been started.
For your information only. No action required.
bigipAgentShutdown
The SNMP agent on the BIG-IP system is in the process of being shut down.
bigipAgent Restart
The SNMP agent on the BIG-IP system has been restarted.
This trap is for future use only
bigipConfigLoaded
The BIG-IP system configuration data was successfully loaded.
For your information only. No action required.
bigipDiskPartitionWarn
Free space on the disk partition is limited, that is, less than a specified limit. By default, the limit is set to 30% of total disk space.
Increase the available disk space.
bigipDiskPartitionGrowth
The disk partition use exceeds the specified growth limit. By default, the limit is set to 5% of the total disk space.

 

Hardware-related traps

The hardware-related notifications that you might receive on an SNMP manager system are listed and described in Table A.2 .

Table A.2 Hardware-related traps and recommended actions
Trap Name
Description
Recommended Action
bigipCpuTempHigh
The CPU temperature is too high.
Check the CPU and air temperatures. For BIG-IP platforms C36, D39, D44, D45, D50, D51, D51C, and D62, the threshold is 75 degrees Celsius. For the BIG-IP platform C62, the threshold is 80 degrees Celsius. If the condition persists, contact F5 Networks technical support.
bigipCpuFanSpeedLow
The CPU fan speed is too low.
Check the CPU temperature. If the CPU temperature is normal, the condition is not critical. For BIG-IP platforms C36, C62, D39, D44, D45, D50, D51, D51C, and D62, the threshold is 3000 RPM.
bigipCpuFanSpeedBad
The CPU fan is not receiving a signal.
Check the CPU temperature and verify that the CPU fan is plugged in and receiving power. If the CPU temperature is normal, the condition is not critical.
bigipChassisTempHigh
The temperature of the chassis is too high.
Check the chassis and air temperatures. For BIG-IP platforms C36, D39, D44, D45, D50, D51, D51C, D62, and C62 switchboard, the threshold is 75 degrees Celsius. For the BIG-IP platform C62 non-switchboard, the threshold is 95 degrees Celsius for one chassis and 80 degrees Celsius for the other chassis. If the condition persists, contact F5 Networks technical support.
bigipChassisFanBad
The chassis fan is not operating properly.
Check the chassis temperature. Also check that the fan is receiving power, or replace the fan.
bigipChassisPowerSupplyBad
The chassis power supply is not functioning properly.
Verify that the power supply is plugged in, or contact F5 Networks technical support. For a dual-power-supply system, one power supply might not be plugged in.
bigipHardDiskFailure
The hard disk is failing.
Power off the system and replace the hard disk. Contact F5 Networks technical support.

 

License-related traps

The notifications related to licensing that you might receive on an SNMP manager system are listed and described in Table A.3

Table A.3 License traps and recommended actions
Trap Name
Description
Recommended Action
bigipLicenseFailed
Validation of a BIG-IP system license has failed, or the dossier has errors. Occurs only when first licensing the system or adding a module key (such as HTTP compression) to an existing system.
If using automatic licensing, verify connectivity to the outside world, fix the dossier if needed, and try again.
bigipLicenseExpired
The BIG-IP license has expired.
Call F5 Networks technical support.

 

TMOS-related traps

The TMOSTM-related notifications that you might receive on an SNMP manager system are listed and described in Table A.4 .

Table A.4 TMOSTM-related traps and recommended actions
Trap Name
Description
Recommended Action
bigipServiceDown
A BIG-IP system health monitor has detected a service on a node to be stopped and has therefore marked the node as down.
Restart the service on the node.
bigipServiceUp
A BIG-IP system health monitor has detected a service on a node to be running and has therefore marked the node as up.
For your information only. No action required./
bigipNodeDown
A BIG-IP system health monitor has marked a node as down.
Check the node and the cable connection.
bigipNodeUp
A BIG-IP system health monitor has marked a node as up.
For your information only. No action required.
bigipStandby
The BIG-IP system has switched to standby mode.
Review the log files in the /var/log directory and then search for core files in the /var/core directory. If you find a core file, or find text similar to fault at location xxxx stack trace:, contact F5 Networks technical support.
bigipStandByFail
In failover condition, this standby system cannot become active.
Investigate failover condition on the standby system.
bigipActive
The BIG-IP system has switched to active mode.
For your information only. No action required.
bigipActiveActive
The BIG-IP system is in active-active mode.
bigipFeatureFailed
A high-availability feature has failed.
View high-availability processes and their current status using the BIG-IP system command bigpipe ha table.
bigipFeatureOnline
A high-availability feature is responding.
For your information only. No action required.
bigipPacketRejected
The BIG-IP system has rejected some packets.
Check the detailed message within this trap and act accordingly.

 

Authentication-related traps

The notifications related to authentication that you might receive on an SNMP manager system are listed and described in Table A.5 .

Table A.5 Authentication traps and recommended actions
Trap Name
Description
Recommended Action
bigipTamdAlert
More than 60 authentication attempts have failed within one second, for a given virtual server.
Investigate for a possible intruder.
bigipAuthFailed
A login attempt failed.
Check the user name and password.

 

DoS-related traps

The notifications related to denial of service that you might receive on an SNMP manager system are listed and described in Table A.6 .

Table A.6 Denial of Service traps and recommended actions
Trap Name
Description
Recommended Action
bigipAggrReaperStateChange
The state of the aggressive reaper has changed, indicating that the BIG-IP system is moving to a distress mode.
We recommend that you use our default Denial of Service settings. However, you can add rate filters to survive the attack.

 

Network-related traps

The network-related notifications that you might receive on an SNMP manager system are listed and described in Table A.7 .

Table A.7 Network traps and recommended actions
Trap Name
Description
Recommended Action
bigipARPConflict
The BIG-IP system has detected an ARP advertisement for any of its own ARP-enabled addresses. This can occur for a virtual server address or a self IP address.
Check IP addresses and routes.
bigipNetLinkDown
An interface link is down. This applies to L1 and L2, which are internal links within the box connecting the CPU and Switch subsystems. These links should never be down. If this occurs, the condition is serious.
Contact F5 Networks technical support.

 

Logging-related traps

The notifications related to logging that you might receive on an SNMP manager system are listed and described in Table A.8 .

Table A.8 Logging-related traps and recommended actions
Trap Name
Description
Recommended Action
bigipLogEmerg
The BIG-IP system is unusable. This notification occurs when the system logs a message with the log level LOG_EMERG.
Check the detailed message within this trap and within the /var/log files to determine which process has the emergency.
Then act accordingly.
bigipLogAlert
You must take action immediately for the BIG-IP system to function properly. This notification occurs when the system logs a message with the log level LOG_ALERT.
Check the detailed message within this trap and within the /var/log files to determine which process has the alert situation.
Then act accordingly.
bigipLogCrit
The BIG-IP system is in a critical condition. This notification occurs when the system logs a message with the log level LOG_CRIT.
Check the detailed message within this trap and within the /var/log files to determine which process has the critical situation.
Then act accordingly.
bigipLogErr
The BIG-IP system has some error conditions. This notification occurs when the system logs a message with the log level LOG_ERR.
Check the detailed message within this trap and within the /var/log files to determine which processes have the error conditions.
Then act accordingly.
bigipLogWarning
The BIG-IP system is experiencing some warning conditions. This notification occurs when the system logs a message with the log level LOG_WARNING.
Check the detailed message within this trap and within the /var/log files to determine which processes have the warning conditions.
Then act accordingly.

 

Note

You can also view logging information using the Logs screen of the Configuration utility.

Application Security Manager-related traps

The notifications related to application security management that you might receive on an SNMP manager system are listed and described in Table A.9 .

Table A.9 Application Security Manager traps and recommended actions
Trap Name
Description
Recommended Action
bigipAsmRequestBlocked
The system blocked an HTTP request because the request contained at least one violation to the active security policy.
Check the HTTP request to determine the cause of the violation.
bigipAsmRequestViolation
The system issued an alert because an HTTP request violated the active security policy.
Check the HTTP request to determine the cause of the violation.

 

Global Traffic Manager-related traps

The notifications related to BIG-IP Global Traffic Manager that you might receive on an SNMP manager system are listed and described in Table A.10 .

Table A.10 Global Traffic Manager traps and recommended actions
Trap Name
Description
Recommended Action
bigipGtmPoolAvail
A pool is becoming available in the Global Traffic Manager module.
For your information only. No action required.
bigipGtmPoolNotAvail
A pool is becoming unavailable in the Global Traffic Manager module.
Check the status of the pool, as well as the relevant detailed log message.
bigipGtmPoolDisabled
A pool is disabled in the Global Traffic Manager module.
Check the status of the pool.
bigipGtmPoolEnabled
A pool is enabled in the Global Traffic Manager module.
For your information only. No action required.
bigipGtmLinkAvail
A link is becoming available in the Global Traffic Manager module.
bigipGtmLinkNotAvail
A link is becoming unavailable in the Global Traffic Manager module.
Check the status of the link, as well as the relevant detailed log message.
bigipGtmLinkDisabled
A link is disabled in the Global Traffic Manager module.
Check the status of the link.
bigipGtmLinkEnabled
A link is enabled in the Global Traffic Manager module.
For your information only. No action required.
bigipGtmWideIpAvail
A wide IP is becoming available in the Global Traffic Manager module.
bigipGtmWideIpNotAvail
A wide IP is becoming unavailable in the Global Traffic Manager module.
Check the status of the wide IP, as well as the relevant detailed log message.
bigipGtmWideIpDisabled
A wide IP is disabled in the Global Traffic Manager module.
Check the status of the wide IP.
bigipGtmWideIpEnabled
A wide IP is enabled in the Global Traffic Manager module.
For your information only. No action required.
bigipGtmPoolMbrAvail
A pool member is becoming available in the Global Traffic Manager module.
bigipGtmPoolMbrNotAvail
A pool member is becoming unavailable in the Global Traffic Manager module.
Check the status of the pool member, as well as the relevant detailed log message.
bigipGtmPoolMbrDisabled
A pool member is disabled in the Global Traffic Manager module.
Check the status of the pool member.
bigipGtmPoolMbrEnabled
A pool member is enabled in the Global Traffic Manager module.
For your information only. No action required.
bigipGtmServerAvail
A server is becoming available in the Global Traffic Manager module.
bigipGtmServerNotAvail
A server is becoming unavailable in the Global Traffic Manager module.
Check the status of the server, as well as the relevant detailed log message.
bigipGtmServerDisabled
A server is disabled in the Global Traffic Manager module.
Check the status of the server.
bigipGtmServerEnabled
A server is enabled in the Global Traffic Manager module.
For your information only. No action required.
bigipGtmVsAvail
A virtual server is becoming available in the Global Traffic Manager module.
bigipGtmVsNotAvail
A virtual server is becoming unavailable in the Global Traffic Manager module.
Check the status of the virtual server, as well as the relevant detailed log message.
bigipGtmVsDisabled
A virtual server is disabled in the Global Traffic Manager module.
Check the status of the virtual server.
bigipGtmVsEnabled
A virtual server is enabled in the Global Traffic Manager module.
For your information only. No action required.
bigipGtmDcAvail
A data center is becoming available in the Global Traffic Manager module.
bigipGtmDcNotAvail
A data center is becoming unavailable in the Global Traffic Manager module.
Check the status of the data center, as well as the relevant detailed log message.
bigipGtmDcDisabled
A data center is disabled in the Global Traffic Manager module.
Check the status of the data center.
bigipGtmDcEnabled
A data center is enabled in the Global Traffic Manager module.
For your information only. No action required.
bigipGtmAppObjAvail
An application object is becoming available in the Global Traffic Manager module.
bigipGtmAppObjNotAvail
An application object is becoming unavailable in the Global Traffic Manager module.
Check the status of the application object, as well as the relevant detailed log message.
bigipGtmAppAvail
An application is becoming available in the Global Traffic Manager module.
For your information only. No action required.
bigipGtmAppNotAvail
An application is becoming unavailable in the Global Traffic Manager module.
Check the status of the application, as well as the relevant detailed log message.
bigipGtmJoinedGroup
The Global Traffic Manager module joined a sync group.
For your information only. No action required.
bigipGtmLeftGroup
The Global Traffic Manager module left a sync group.

 

Other traps

Other notifications that you might receive on an SNMP manager system are listed and described in Table A.11 .

Table A.11 Other traps and recommended actions
Trap Name
Description
Recommended Action
bigipCompLimitExceeded
The compression license limit is exceeded.
Purchase additional compression licensing from F5 Networks.
bigipSslLimitExceeded
The SSL license limit is exceeded, either for transactions per second (TPS) or for megabits per second (MPS).
Purchase additional SSL licensing from F5 Networks.
bigipExternalLinkChange
The status of an external interface link has changed to either DOWN or UP. This occurs when network cables are added or removed, and the network is reconfigured.
Determine whether the link should be down or up, and then take the appropriate action.

 




Table of Contents   |   << Previous Chapter   |   Next Chapter >>

Was this resource helpful in solving your issue?




NOTE: Please do not provide personal information.



Incorrect answer. Please try again: Please enter the words to the right: Please enter the numbers you hear:

Additional Comments (optional)