Applies To:

Show Versions Show Versions

Manual Chapter: Troubleshooting SNMP Traps
Manual Chapter
Table of Contents   |   << Previous Chapter

The alert system and the SNMP agent on the BIG-IP® system can send a number of notifications about the current operation of the BIG-IP system. The definitions of these notifications are known as traps, and are contained in the MIB file F5-BIGIP-COMMON-MIB.txt.
Traffic management operating system® (TMOS®)-related traps
The remainder of this appendix contains tables that list the trap names contained in the MIB file F5-BIGIP-COMMON-MIB.txt, their descriptions, and the recommended action to take if you receive one of these notifications on your SNMP manager system.
The SNMP agent on the BIG-IP system has been started.
The SNMP agent on the BIG-IP system is in the process of being shut down.
The SNMP agent on the BIG-IP system has been restarted.
Free space on the disk partition is limited, that is, less than a specified limit. By default, the limit is set to 30% of total disk space.
The disk partition use exceeds the specified growth limit. By default, the limit is set to 5% of the total disk space.
The hardware-related notifications that you might receive on an SNMP manager system are listed and described in Table A.2.
Check the CPU and air temperatures. For BIG-IP platforms C36, D39, D44, D45, D50, D51, D51C, and D62, the threshold is 75 degrees Celsius. For the BIG-IP platform C62, the threshold is 80 degrees Celsius. If the condition persists, contact F5 Networks® technical support.
Check the CPU temperature. If the CPU temperature is normal, the condition is not critical. For BIG-IP platforms C36, C62, D39, D44, D45, D50, D51, D51C, and D62, the threshold is 3000 RPM.
Check the CPU temperature and verify that the CPU fan is plugged in and receiving power. If the CPU temperature is normal, the condition is not critical.
Check the chassis and air temperatures. For BIG-IP platforms C36, D39, D44, D45, D50, D51, D51C, D62, and C62 switchboard, the threshold is 75 degrees Celsius. For the BIG-IP platform C62 non-switchboard, the threshold is 95 degrees Celsius for one chassis and 80 degrees Celsius for the other chassis. If the condition persists, contact F5 Networks technical support.
Check the chassis temperature. Also check that the fan is receiving power, or replace the fan.
Verify that the power supply is plugged in, or contact F5 Networks technical support. For a dual-power-supply system, one power supply might not be plugged in.
Power off the system and replace the hard disk. Contact F5 Networks technical support.
The notifications related to licensing that you might receive on an SNMP manager system are listed and described in Table A.3.
Validation of a BIG-IP system license has failed, or the dossier has errors. Occurs only when first licensing the system or adding a module key (such as HTTP compression) to an existing system.
If using automatic licensing, verify connectivity to the outside world, fix the dossier if needed, and try again.
The TMOS-related notifications that you might receive on an SNMP manager system are listed and described in Table A.4.
A BIG-IP system health monitor has detected a service on a node to be stopped and has therefore marked the node as down.
A BIG-IP system health monitor has detected a service on a node to be running and has therefore marked the node as up.
Review the log files in the /var/log directory and then search for core files in the /var/core directory. If you find a core file, or find text similar to fault at location xxxx stack trace:, contact F5 Networks technical support.
In failover condition, this standby system cannot become active.
The BIG-IP system is in active-active mode.
Signifies that the TMM has run out of source ports and cannot open new communications channels with other machines.
Either increase the number of addresses available for SNAT automapping or SNAT pools, or lower the idle timeout value if the value is excessively high.
The notifications related to authentication that you might receive on an SNMP manager system are listed and described in Table A.5.
More than 60 authentication attempts have failed within one second, for a given virtual server.
The notifications related to denial of service that you might receive on an SNMP manager system are listed and described in Table A.6.
The state of the aggressive reaper has changed, indicating that the BIG-IP system is moving to a distress mode.
We recommend that you use our default Denial of Service settings. However, you can add rate filters to survive the attack.
The network-related notifications that you might receive on an SNMP manager system are listed and described in Table A.7.
The BIG-IP system has detected an ARP advertisement for any of its own ARP-enabled addresses. This can occur for a virtual server address or a self IP address.
An interface link is down. This applies to L1 and L2, which are internal links within the box connecting the CPU and Switch subsystems. These links should never be down. If this occurs, the condition is serious.
The notifications related to logging that you might receive on an SNMP manager system are listed and described in Table A.8.
The BIG-IP system is unusable. This notification occurs when the system logs a message with the log level LOG_EMERG.
Check the detailed message within this trap and within the /var/log files to determine which process has the emergency.
You must take action immediately for the BIG-IP system to function properly. This notification occurs when the system logs a message with the log level LOG_ALERT.
Check the detailed message within this trap and within the /var/log files to determine which process has the alert situation.
The BIG-IP system is in a critical condition. This notification occurs when the system logs a message with the log level LOG_CRIT.
Check the detailed message within this trap and within the /var/log files to determine which process has the critical situation.
The BIG-IP system has some error conditions. This notification occurs when the system logs a message with the log level LOG_ERR.
Check the detailed message within this trap and within the /var/log files to determine which processes have the error conditions.
The BIG-IP system is experiencing some warning conditions. This notification occurs when the system logs a message with the log level LOG_WARNING.
Check the detailed message within this trap and within the /var/log files to determine which processes have the warning conditions.
The notifications related to Application Security Manager that you might receive on an SNMP manager system are listed and described in Table A.9.
The system blocked an HTTP request because the request contained at least one violation to the active security policy.
The system issued an alert because an HTTP request violated the active security policy.
The notifications related to BIG-IP Global Traffic Manager that you might receive on an SNMP manager system are listed and described in Table A.10.
A Global Traffic Manager system (which equals an iquery connection to a server box) has gone UP.
A Global Traffic Manager system (which equals an iquery connection to a server box) has gone DOWN.
The certificate /config/big3d/client.crt has expired.
The certificate /config/big3d/client.crt will expire soon.
The certificate /config/gtm/server.crt has expired.
The certificate /config/gtm/server.crt will expire soon.
A pool is becoming available in the Global Traffic Manager module.
A pool is becoming unavailable in the Global Traffic Manager module.
Check the status of the pool, as well as the relevant detailed log message.
A link is becoming available in the Global Traffic Manager module.
A link is becoming unavailable in the Global Traffic Manager module.
Check the status of the link, as well as the relevant detailed log message.
A wide IP is becoming available in the Global Traffic Manager module.
A wide IP is becoming unavailable in the Global Traffic Manager module.
Check the status of the wide IP, as well as the relevant detailed log message.
A pool member is becoming available in the Global Traffic Manager module.
A pool member is becoming unavailable in the Global Traffic Manager module.
Check the status of the pool member, as well as the relevant detailed log message.
A pool member is disabled in the Global Traffic Manager module.
A pool member is enabled in the Global Traffic Manager module.
A server is becoming available in the Global Traffic Manager module.
A server is becoming unavailable in the Global Traffic Manager module.
Check the status of the server, as well as the relevant detailed log message.
A server is enabled in the Global Traffic Manager module.
A virtual server is becoming available in the Global Traffic Manager module.
A virtual server is becoming unavailable in the Global Traffic Manager module.
Check the status of the virtual server, as well as the relevant detailed log message.
A virtual server is disabled in the Global Traffic Manager module.
A virtual server is enabled in the Global Traffic Manager module.
A data center is becoming available in the Global Traffic Manager module.
A data center is becoming unavailable in the Global Traffic Manager module.
Check the status of the data center, as well as the relevant detailed log message.
An application object is becoming available in the Global Traffic Manager module.
An application object is becoming unavailable in the Global Traffic Manager module.
Check the status of the application object, as well as the relevant detailed log message.
An application is becoming available in the Global Traffic Manager module.
An application is becoming unavailable in the Global Traffic Manager module.
Check the status of the application, as well as the relevant detailed log message.
Purchase additional compression licensing from F5 Networks.
The SSL license limit is exceeded, either for transactions per second (TPS) or for megabits per second (MPS).
The status of an external interface link has changed to either DOWN or UP. This occurs when network cables are added or removed, and the network is reconfigured.
Determine whether the link should be down or up, and then take the appropriate action.
Table of Contents   |   << Previous Chapter

Was this resource helpful in solving your issue?




NOTE: Please do not provide personal information.



Incorrect answer. Please try again: Please enter the words to the right: Please enter the numbers you hear:

Additional Comments (optional)