AD v2.14 SNMP Traps

AppDi recto r SNMP T raps
Updated for:
AppDirector 2.14
North America
Radware Inc.
575 Corporate Dr. Suite 205
Mahwah, NJ 07430
Tel 888 234 5763
International
Radware Ltd.
22 Raoul Wallenberg St.
Tel Aviv 69710, Israel
Tel 972 3 766 8666
www.radware.com
AppDirector 2.14 SNMP Traps
Date: December 31, 2010
Page - 2 -
Introduction
This document discusses SNMP traps generated by AppDirector.
Part of the traps will use the same OID and specific trap ID for different events. The
difference between each event can be seen only on the message text, transferred
on the value of object 1.3.6.1.4.1.89.2.3.1.0 as text.
The trap severity is passed on the value of the object 1.3.6.1.4.1.89.2.3.2.0
(rndErrorSeverity) as a number as listed:
1 = Info
2 = Warning
3 = Error
Standard Traps
When sending SNMPv1 standard traps, the Enterprise ID is set to a different OID for
each product. The options for AppDirector are:
1.3.6.1.4.1.89.1.1.62.20 for AppDirector
1.3.6.1.4.1.89.1.1.62.21 for AppDirector-Global
Name .coldStart
Generic Trap
(SNMPv1) .0
Trap OID (SNMP
v2/3) .1.3.6.1.6.3.1.1.5.1
A coldStart trap signifies that the sending protocol entity is reinitializing
itself so that the agent's configuration or the protocol entity implementation
Description can be altered.
Trap Text Cold Start
Name .warmStart
Generic Trap
(SNMPv1) .1
Trap OID (SNMP
v2/3) .1.3.6.1.6.3.1.1.5.2
A warmStart trap signifies that the sending protocol entity is reinitializing
itself so that neither the agent configuration nor the protocol entity
Description implementation can be altered.
Trap Text Warm Start
Page - 3 -
Name .linkDown
Generic Trap
(SNMPv1) .2
Trap OID (SNMP
v2/3) .1.3.6.1.6.3.1.1.5.3
A linkDown trap signifies that the sending protocol entity recognizes a
failure in one of the communication links represented in the agent's
configuration.
A Trap-PDU of type linkDown contains, as the first element of its variable-
bindings, the name and value of the ifIndex instance for the affected
Description interface.
Trap Text VLAN <id> Down
SFP module was removed in port <Port Id>. Auto Negotiation was enabled
on the port
Name .linkUp
Generic Trap
(SNMPv1) .3
Trap OID (SNMP
v2/3) .1.3.6.1.6.3.1.1.5.4
A linkUp trap signifies that the sending protocol entity recognizes that one
of the communication links represented in the agent's configuration has
come up.
A Trap-PDU of type linkUp contains, as the first element of its variable-
bindings, the name and value of the ifIndex instance for the affected
Description interface.
Trap Text VLAN <id> Up
SFP module was detected in port <port id>. Auto Negotiation on the port is
enabled
SFP module was detected in port <port id>. SFP has precedence over the
copper port. Auto Negotiation on the port is enabled
Name .authenticationFailure
Generic Trap
(SNMPv1) .4
Trap OID (SNMP
v2/3) .1.3.6.1.6.3.1.1.5.5
An authenticationFailure trap signifies that the sending protocol entity is the
Description addressee of a protocol message that is not properly authenticated.
Page - 4 -
Login failed user <user> via [web | terminal | telnet | ssh | ftp | soap |
Trap Text unknown]: radius problems
Login via ssh failed!
secure SNMP: password authentication failure
AppDirector Traps
The list of AppDirector specific traps uses the following format:
Name <Trap name> = <Enterprise ID>.<Specific trap number>

Description <Trap description>
Trap Severity [Info | Warning | Error]
Trap text <Possible device trap messages>
Note: The Enterprise ID is shown in string representation, while the Specific trap number
is in numerical format.
In SNMPv1 traps:
Enterprise = Enterprise ID
Generic Trap Type = 6 (Enterprise specific)
Specific Trap Code = Specific trap number
In SNMPv2 traps:
Trap OID = <Enterprise ID>.<Specific trap number>
Page - 5 -
Enterprise ID .iso.org.dod.internet.private.enterprises.rnd = .1.3.6.1.4.1.89

Name .routeTableOverflow = rnd.5
An overflow condition has occurred in the ARP Table or in the Routing
Description Table. The Routing Table is used for IP routing algorithm (RIP).
Trap severity Warning
Trap Text IP RIP actv chg: RT overflow, unreachable-route not added
ARP Table Overflow
IP RIP upd_entr: RT overflow, failed to add route
Name .resetRequired = rnd.10

This trap indicates that in order to perform the last SET request, a reset
operation of the router/bridge is required. This occurs when the layer 2
routing algorithm is changed between SPF and Spanning Tree. The reset
Description can be performed manually or using the variable rndAction.
Trap severity Info
Trap Text
Name .endTftp = rnd.12

This trap indicates that in the device finished a TFTP transaction with the
Description management station.
Trap severity Info
Trap Text Configuration Upload has been completed
Configuration Download has been completed
Program Download completed
Name .abortTftp = rnd.13

This trap indicates that in the device aborted a TFTP session with the
Description management station.
Trap Text Configuration upload has been aborted
Program download aborted
Program code file is too long
Can not open remote file
Only one file is used to download code
Error writing configuration file
Page - 6 -
Name .startTftp = rnd.14

Description Informational trap indicating that the device has initiated a TFTP session.
Trap severity Info
Trap Text Configuration Upload has been started
Configuration Download has been started
Program Download started
Name .deviceTemperatureNormal = rnd.15

Description Sent whenever the temperature changes back to normal
Trap severity Info
Trap Text CPU <number> temperature is normal - <number> degrees
Name .deviceTemperatureHigh = rnd.16

Description Sent whenever the temperature changes to high
Trap Text CPU <number> temperature is high - <number> degrees
Name .deviceTemperatureCritical = rnd.17

Description Sent whenever the temperature changes to critical
Trap severity Error
Trap Text CPU <id> temperature is critical - <temperature> degrees
CPU <id> temperature is critical - <temperature> degrees (shutting down
system)
Name .forwardingTabOverflow = rnd.51

This trap indicates that an overflow condition has occurred in the layer II
Description Forward
Table.
Trap Text Bridge Forwarding Table Overflow
Page - 7 -
Name .errorsDuringInit = rnd.61

Description This trap indicates that errors occurred during device initiation.
Trap severity Error
Trap Text Errors occurred during init in function: XXX
Invalid IP address for server <IP>, remove illegal server to avoid problems
Name .vlanDynPortAdded = rnd.66

Description This trap indicates that a port was added to a VLAN configuration.
Trap severity Info
Trap Text Dynamic port <number> was added to VLAN <number>
Name .vlanDynPortRemoved = rnd.67

Description This trap indicates that a port was removed from a VLAN configuration.
Trap severity Info
Trap Text Dynamic port <number> was removed from VLAN <number>
AppDirector SNMP Traps

Name .rsSDclientsTableOverflow = rnd.68
This warning is generated when an overflow occurs in the Client Table. It is
Description recommended to enlarge Client Table size set in Tuning.
Trap Text Client table full, see Device Tuning in AppDirector manual
Name .rsSDinactiveServer = rnd.69

This warning is generated when a server does not respond to the
Description dispatchers polling and is thought to be inactive.
Trap Text Farm <Farm Name> Loopback Interface of Server <Server IP> Is Down
Farm <Farm Name> Server <Server IP> Is Not Responding to Ping
Farm <Farm Name> Server <Server IP> Port <check port> TCP Is Not
Responding,
Farm <Farm Name> Server <Server IP> is not listening to UDP port
<check port>
Farm <Farm Name> Radius <Server IP> Port <check port>: User rejected.
Page - 8 -
Farm <Farm Name> Radius <Server IP> Port <check port>: Unauthorized
user.
Farm <Farm Name> Radius <Server IP> Port <check port>: Unfamiliar
reply code.
Farm <Farm Name> Radius <Server IP> Port <check port>: Unavailable.
Farm <Farm Name> Radius <Server IP> Port <check port>: Configuration
error.
Farm <Farm Name> Server <Server IP> Web Page Unavailable on Port
<check port>
Farm <Farm Name> Server <Server IP> Content Check Failure.
Farm <Farm Name> Server <Server IP> No Page on Port <check port>,
Code <response code>
Name .rsSnmpSetRequestInSpecialCfgState = rnd.74

An incoming SNMP SET request was rejected because no such requests
(except action requests) are accepted after start of new configuration
Description reception or during sending the current configuration to an NMS.
Trap Text SNMP SET attempt during reception of new configuration !
SNMP SET attempt while sending configuration !
SNMP SET attempt after reception of new configuration !
Name .rsConfigurationAuditEvent = rnd.75

Description Triggered by an audit event.
Trap severity Info
Trap Text The configuration event
Name .rdwrFanNotWorking = rnd.76

Description Triggered by fan failure.
Trap Text Fan failure was detected. 1 fan is not operational (one fan is down)
Fan failure was detected. <number> fans are not operational (more than
one fan are down)
Name .rdwrFanInfo = rnd.77

Description Triggered by fan information.
Page - 9 -
Trap severity Info

Trap Text All fans are operational
Name .rdwrCertExpiration = rnd.78

Description Certificate expiration notification.
Trap Text Certificate named <certificate name> will expire in <Number> days on
<Date>
Certificate named <certificate name> expired on <Date>
Name .cdeConnected = rnd.81

Description Config Sync Master Connected to Slave.
Trap severity Info
Trap Text Configuration master connected to slave <master IP>-><slave IP>
Name .cdeConfigUpdateFailed = rnd.82

Description Config Sync Master Failed to update the slave with a specific change.
Trap severity Error
Update to slave <IP> failed due to communication errors.\nDevice will
Trap Text resynchronise once communication is reestablished
Name .cdeSlaveReboot = rnd.83

Description Config Sync Master Send reboot command to the slave.
Trap severity Info
Trap Text Slave reboot started
Name .cdeSlaveRebootFailed = rnd.84

Description Config Sync Slave Reboot has failed.
Trap severity Error
Trap Text CDE <Slave IP>: Failed to reboot slave
Page - 10 -
Name .rsWSDRedundancySwitch = rnd.141

Whenever main server fails and backup takes over or server comes up
Description after failure a trap of this type is issued.
Trap severity Info

Trap Text Redundancy: main AppDirector ready on Interface <IP address>
Redundancy: Backup AppDirector take Interface <IP address>
Redundancy: Backup AppDirector release Interface <IP address>
Redundancy: Interface <IP address> is up. Not taking interfaces
Redundancy: Interface <IP address> is still down. Not releasing
Redundancy: Interface <IP address> is up
VRRP: VRID <VRID>, IF <interface index>, VR <IP> is master
VRRP: VRID <VRID>, IF <interface index>, VR <IP>, Priority <priority> is
master
VRRP: VRID <VRID>, IF <interface index>, VR <IP> is backup
VRRP: VRID <VRID>, IF <interface index>, VR <IP>, Priority <priority> is
backup
VRRP: VRID <VRID>, IF <interface index>, VR <IP> is forced down
Enterprise ID .iso.org.dod.internet.private.enterprises.rnd.rndApplications.rsServer
Dispatcher. = .1.3.6.1.4.1.89.35.1
Name .rsWSDConnectionLimitReached = rnd.rndApplications.rsServerDispatcher.1
This warning is generated when the users connection limit of an application
Description or a physical server is reached.
Trap Text Connection limit reached for server <IP> farm <Name>
Connection limit reached for physical server <server name>
Name .rsWSDReadyForShutDown = rnd.rndApplications.rsServerDispatcher.2

This warning is generated when all the clients' sessions of an application or
a physical server are finished and so, the application or server is ready to be
Description shut down.
Trap Text Physical Server <server name> is Ready For Shut Down
Server <IP address> from Farm <farm name> is Ready For Shut Down
Page - 11 -
Name .rsWSDIllegalReport = rnd.rndApplications.rsServerDispatcher.3

This warning is generated when an LRP message arrives with illegal
Description information.
Trap Text No IP addresses defined for this VRID
Unsupported version of LRP (<version>) packet received in Load Report
from <IP> please upgrade the device
Illegal checksum received in Load Report (<Version>) from <IP>. Got
<Checksum> expected <Checksum>
Illegal subnet received in Load Report from <IP>
Illegal address received in Load Report from <IP>
Illegal Farm name received in Load Report <IP>
Illegal Load Report received, the host is not AppDirector Global
AppDirector <IP> is running an older software version. Upgrade
recommended
AppDirector Global <IP> supports newer proximity checks. Upgrade
recommended
Illegal Load Report received from non-distributed server <IP>
Illegal Load Report received from unknown server IP <IP>
Name .rsWSDRemoteWSDUnavailable = rnd.rndApplications.rsServerDispatcher.4

This warning is generated when a remote AppDirector is in full capacity, not
Description in service or disabled. This server is then unavailable
Trap Text [Remote | Local] [AppDirector | AppDirectorXL] server <IP> is disabled
[Remote | Local] [AppDirector | AppDirectorXL] server <IP> is not in service
[Remote | Local] [AppDirector | AppDirectorXL] server <IP> is in full capacity
Farm <Name> Distributed Server <IP> Is Not Responding
Name .rsWSDCapacityLimitReached = rnd.rndApplications.rsServerDispatcher.5

This warning is generated in global configurations when a distributed
AppDirector cannot receive traffic redirected to it by another AppDirector
device. This can happen when the local farm that participates in the global
configuration has either reached its capacity limit or all its local servers are
Description unavailable.
Trap Text Capacity Limit Reached, farm <Name>
All local servers are shut down, farm <Name>
Page - 12 -
Name .rsWSDStatusMonitoring = rnd.rndApplications.rsServerDispatcher.6

Description This warning is generated for unavailable SNMP parameter from a server.
Trap Text Status for Open Sessions unavailable from NT server <IP>
Status for Incoming Packets unavailable from NT server <IP>
Status for Outgoing Packets unavailable from NT server <IP>
Status for Average Response Time unavailable from NT server <IP>
Status for Users Limit unavailable from NT server <IP>
Status for TCP connections limit unavailable from NT server <IP>
Private SNMP parameter [1 | 2] unavailable from server <IP>
Name .rsWSDWrongPassword = rnd.rndApplications.rsServerDispatcher.7

This warning is generated when a wrong software download password is
Description provided, or when user login failed
Trap Text Wrong password, software download aborted
Login failed for user <user> via [terminal | web | telnet | ssh | ftp | soap |
unknown]
Login failed via [terminal | web | telnet | ssh | ftp | soap | unknown]: empty
user-name or password
Name .rsWSDInternalTableOverflow = rnd.rndApplications.rsServerDispatcher.8

Description This warning is generated when there are no more free entries in the table.
Trap Text Dynamic proximity table is full
Dynamic proximity table was full, oldest entries were cleared
Server NAT Internal table overflow - Increase farm table size
Server to VIP Internal table overflow - Increase farm table size
Vlan Arp Internal table overflow
Dynamic DNS persistency table is full
Name .rsWSDServerUp = rnd.rndApplications.rsServerDispatcher.9

Description This informational trap is sent when a server correctly responds to a farm
Page - 13 -
connectivity check for the first time.

Trap severity Info
Trap Text Farm <Name> Server <IP> Up
Farm <Name> Radius Server <IP> is Up
Name .rsWSDPoliciesUpdated = rnd.rndApplications.rsServerDispatcher.10

Description This informational trap is sent when the policies are updated.
Trap severity Info
Trap Text Updating policy database...
Name .rsWSDUserLocked = rnd.rndApplications.rsServerDispatcher.12

This warning trap is sent when a user is locked from managing the device
Description because of login failure
Trap Text Login locked user <user>: exceeded retries
Name .rsWSDAuthenticationSuccess = rnd.rndApplications.rsServerDispatcher.13

Description This informational trap is sent when a user authentication succeeded
Trap Text User <user> logged in via [terminal | web | telnet | ssh | ftp | soap | unknown]
Name .rsRadwareNTPUpdateProblem = rnd.rndApplications.rsServerDispatcher.14

This warning trap is sent when the device NTP client encounters problem
Description updating the system clock
Trap Text NTP - DNS disabled, or NTP server URL problem
NTP server URL name error
NTP server DNS resolve timeout
NTP - DNS resolver internal problem
NTP - DNS server error
NTP - DNS disabled
NTP message from an unknown server
NTP server unsynchronized according to leap indicator
NTP server version not compatible
Page - 14 -
NTP server mode flag incorrect

NTP Stratum unspecified
NTP message timed out
NTP server routing problem
Name .rdwrDualPowerSupplyProblem = rnd.rndApplications.rsServerDispatcher.16

This warning trap is sent when a power supply becomes inactive on a dual
Description power supply device.
Trap Text Power supply failure detected
Name .rdwrDualPowerSupplyUp = rnd.rndApplications.rsServerDispatcher.17

This info trap is sent when a power supply changes state from inactive to
Description active on a dual power supply device.
Trap severity Info
Trap Text Power supply fully operational
Name .rdwrMngmntPortDisabled = rnd.rndApplications.rsServerDispatcher.18

This info trap is sent when a user tries to access a management port via a
Description protocol, which is disabled on this port.
Trap severity Info
Telnet access attempted through protected port <number> from [unknown IP
Trap Text | IP: <IP address>]
SSH access attempted through protected port <number> from [unknown IP |
IP: <IP address>]
SNMP access attempted through protected port <number> from [unknown IP
| IP: <IP address>]
Web access attempted through protected port <number> from [unknown IP |
IP: <IP address>]
SSL access attempted through protected port <number> from [unknown IP |
IP: <IP address>]
Name .rdwrUnauthorizedSourceIP = rnd.rndApplications.rsServerDispatcher.19

This info trap is sent when a user tries to access a management port from an
Description IP address, that is not authorized to perform access.
Trap severity Info
Page - 15 -
User <user> access attempted with unauthorized source IP <IP>. This

Trap Text address is not a peer IP address.
Name .rsARPTableIpConflict = rnd.rndApplications.rsServerDispatcher.21

Description Indicate IP Conflicts on ARP table.
Trap severity Info
IP conflict was detected for IP address <IP>. This IP is also used by host
Trap Text with MAC <MAC>
.iso.org.dod.internet.private.enterprises.rnd.rndApplications.rsServerDi
Enterprise ID spatcher.rsNWSD = .1.3.6.1.4.1.89.35.1.40
.rsWSD.rsWSDDynamicNATOutOfPorts =
Name rnd.rndApplications.rsServerDispatcher.rsNWSD.7
Description This warning is sent when the allocation for Client NAT ports is exhausted.
Trap Text No more free dynamic NAT ports
Name .rsWSD.rsWSDNHRUp = rnd.rndApplications.rsServerDispatcher.rsNWSD.8

This informational trap is sent when an NHR correctly responds to a
Description connectivity check for the first time.
Trap severity Info
Trap Text NHR <NHR IP> is up
.rsWSD.rsWSDNHRDown =
This warning trap is sent when an NHR does not respond to connectivity
Description checks within the defined timeout.
Trap Text NHR <NHR IP> is down
Invalid route has located NHR <NHR IP> on management port
.rsWSDRequestTablesFull =
Description The Request Table is full. Increase table size in Tuning
Page - 16 -

Trap Text Request table full, see Device Tuning in AppDirector manual
.rsWSDDynamicSIDTablesFull =
Description The Dynamic Session ID Table is full. Increase table size in Tuning
Trap Text Dynamic SID table full, see Device Tuning in AppDirector manual
Name .rsWSDLRPActive = rnd.rndApplications.rsServerDispatcher.rsNWSD.13

An entry in the Report Table changes state to Active. The <report> variable in
Description the text is the name of the connectivity check associated with the report entry.
Trap severity Informational
Trap Text Report <report> is active
Name .rsWSDLRPNIS = rnd.rndApplications.rsServerDispatcher.rsNWSD.14

An entry in the Report Tale changes state to Not In Service. The <report>
variable in the text is the name of the connectivity check associated with the
Description report entry.
Trap Text Report <report> is not in service
.rsWSDClientNATPortsThresholdReached =
The configured Threshold Warning for Client NAT Ports was reached for one
Description of the configured client NAT Addresses.
Trap Text Client NAT Port Number Threshold Reached, NAT address <address>
. rsWSDOutboundNATPortsThresholdReached =
The configured Threshold Warning for Outbound NAT Ports was reached for
Description one of the configured Outbound NAT Addresses
Trap Text Outbound NAT Port Number Threshold Reached, NAT address <address>
Page - 17 -
.rsWSDDSIDTableEntriesThresholdReached =
Description The configured Threshold Warning for the Session ID Table was reached.
Trap Text Dynamic Session Id entries number threshold reached
.rsWSDRequestTableEntriesThresholdReached =
Description The configured Threshold Warning for the Request Table was reached.
Trap Text Request Table entries number threshold reached
.rsWSDClientTableThresholdReached =
Description The configured Threshold Warning for the Client Table was reached.
Trap Text Client table threshold level was reached
.rsWSDAppServerConnectionThresholdReached =
The configured Threshold Warning for Application Server Connection was
Description reached for one of the Application Servers
Trap Text Connection limit threshold reached for server <IP address> farm <Name >
.rsWSDPhyServerConnectionThresholdReached =
The configured Threshold Warning for Physical Server Connection was
Description reached for one of the Physical Servers
Trap Text Connection limit threshold reached for physical server <server name>
Page - 18 -
.rsWSDFarmCapacityThresholdReached =
The configured Threshold Warning for Farm Capacity was reached for one of
Description the farms
Trap Text Capacity Threshold Reached, farm <farm name>
rdwrVrrpAutomatedConfigurationVIPNotAssociated =
Description This trap is sent when new L4 policy is not entered to the associated IP table
Could not automatically determine a VRID for VIP <IP address>; this VIP was
Trap Text excluded from the Automated VRRP Configuration updates
VIP <IP address> already associated to VRID
Name rsWSDPrxChkFailure = rnd.rndApplications.rsServerDispatcher.rsNWSD.31

Description This info trap is sent when proximity check of client failure
Trap severity Info
Proximity data for client <Client IP> was not learned from device <IP
Trap Text address> due to pre-existing entry for subnet
Proximity check for client <Client IP> failed because AD didn't get PRP
response
Proximity check from device AD IP <IP address> to IP <IP address> failed
Proximity check to IP <IP address> failed
rsWSDAuxiliaryTableThresholdReached =
Description This informational trap is sent when L3 client table threshold is reached
Trap Text L3 Client table threshold level was reached
L3 client table is full, please increase its percentage of the client table
rsWSDRemoteWSDAvailable =
Description This info is generated after remote AppDirector server became available
Trap severity Info
Page - 19 -
Trap Text [Remote | Local] [AppDirector | AppDirectorXL] server <IP> now available
Name rsWSDFarmActive= rnd.rndApplications.rsServerDispatcher.rsNWSD.34

This trap is sent when the Farm Operational Status becomes Active because
Description at least one server is active
Trap Text Farm <name> status is Active; servers became available
Name rsWSDFarmNIS= rnd.rndApplications.rsServerDispatcher.rsNWSD.35

This trap is sent when Farm Operational Status becomes NotInService
Description because no server is available
Trap Text Farm <name> status is NotInService; all of its servers are unavailable
rsADFailedL7ModificationOfServerSidToken =
This warning trap is sent when using L7 Modification containing the
$Server_SID_Cookie token (usually utilizing the Insert Cookie feature), and
no static SID is configured for the server that belongs to a treated session.
Description The Modification is not performed and the packet is discarded.
L7 Modification using $Server_SID_Cookie was aborted because there was
Trap Text no static SID entry in the static SID table
rdwr30SecCpuUtilizationAvarageExceededThreshold =
This trap is sent when the 30 seconds CPU utilization average has exceeded
Description the defined threshold
30 seconds average of Device CPU Utilization has exceeded a threshold of
Trap Text <threshold>
rdwr30SecCpuUtilizationAvarageBelowThreshold=
Page - 20 -
This trap is sent when the 30 seconds CPU utilization average has returned
Description below the defined threshold
Trap severity Info
30 seconds average of Device CPU Utilization has returned to a value below
Trap Text threshold <threshold>
Name rdwrShutdownOrReset = rnd.rndApplications.rsServerDispatcher.rsNWSD.39

Description This trap is sent when the device is shutdown or reset
Trap severity Info
Trap Text [AppDirector | AppDirectorXL] was rebooted
[AppDirector | AppDirectorXL] was powered off
[AppDirector | AppDirectorXL] was reset
rdwrTrafficThroughputLimitReached =
Description This trap is sent when the traffic throughput limit is reached
Trap severity Info
Trap Text Maximum licensed throughput reached
.rsWSDDXPChannelActive =
Description This warning trap is sent when DXP channel changes state to Active.
Trap Text Management-Engine ID <CPU ID> status is Active
Accel -Engine ID <CPU ID> status is Active
Name .rsWSDDXPChannelNIS = rnd.rndApplications.rsServerDispatcher.rsNWSD.42

Description This warning trap is sent when DXP channel changes state to Not In Service.
Trap Text Accel-Engine ID <CPU ID> status is unavailable
.rsWSDDXPFailedDXPConfigUpdate =
Page - 21 -
Description This warning trap is sent when DXP channel fails on config update notify.
Trap Text Accel-Engine ID <CPU ID> Failed to update last configuration change
.rsWSDDXPSystemActive =
Description This warning trap is sent when DXP system changes state to Active.
Accel-Engine System ID <CPU ID> status is Backup connected with
Trap Text <Number> applications
.rsWSDProxyTempCECLimitStop =
Temporary limitation of maximum number of connections due to memory
Description limitation has stopped.
Trap severity Info
Temporary limiting of maximum number of connections due to memory
Trap Text pressure has stopped.
.rsWSDProxyCacheLimitShortSpace =
Description Temporary limiting caching due to critical cache space shortage.
Trap Text Critical cache capacity usage, Temporary avoiding caching of new objects
.rsWSDProxyCacheReached80Percent =
Description Cache space has reached 80%.
Trap severity Info
Trap Text Cache capacity usage is above 80%
.rsWSDProxyCacheBelow80Percent =
Description Cache space is below 80%.
Page - 22 -
Trap severity Info

Trap Text Cache capacity usage is below 80%
.rsWSDProxyCPUCrossed80Percent =
Description CPU utilization has reached 80%, while before that it was below 80%.
Trap Text CPU utilization has reached 80
.rsWSDProxyCPUFell80Percent =
Description utilization has dropped below 80%, while before that it was above 80%.
Trap severity Info
Trap Text CPU utilization has dropped below 80
.rsWSDProxyOCSPServerError =
Failed to connect to OCSP server to verify certificate validity. Certificates will
Description be rejected until connection is reestablished.
Trap severity Error
Client certificate OCSP validation Could not connect to OCSP Responder
Trap Text [<OCSP-hostname>].
.rsWSDProxyOCSPResponseVerificationError =
Description Failed to verify OCSP response. Certificate will be rejected.
Trap severity Error
Trap Text Client certificate OCSP validation, Response signature verification mismatch.
.rsWSDProxyOCSPQueryingError =
Failed to query <OCSP-hostname> OCSP server for certificate validity.
Description Certificate will be rejected.
Trap severity Error
Page - 23 -
Client certificate OCSP validation, certificate:<Certificate Name>, No

Trap Text response from OCSP responder [<OCSP-hostname>].
.rsWSDProxyCertificateRevokedRevocation =
Description Certificate was revoked.
Trap severity Info
Client certificate OCSP validation Response [Served from OCSP cache | "" ]:
Trap Text certificate revoked.
.rsWSDProxyCompDisableDueMemoryLimit =
Description Compression disabled due memory limit.
Trap Text Temporary disabling compression due to memory shortage
.rsWSDProxyCompEnableAfterMemoryLimit =
Description Compression enabled after memory limit.
Trap Text Re-enabling compression due to memory shortage relief
.rsWSDProxyCompLicenseOverFlow =
Description Compression License over flow.
Trap Text Compression license overflow
.rsWSDProxyTslOcspCertificateRevoked =
Description TSL OCSP Certificate revoced.
Client certificate OCSP validation Response [Served from OCSP cache | ""]:
Trap Text certificate revoked.
Page - 24 -
.rsWSDProxyTslOcspCertificateUnknown =
Description TSL OCSP Certificate unkonwn.
Client certificate OCSP validation, certificate: <Certificate Name>, response:
Trap Text certificate status unknown
.rsWSDProxyTslSignValidationFailure =
Description TSL sign validation failure.
TSL update error: <String>. TSL file chain <Chain Name>, root certificate
Trap Text <Certificate Name>.
.rsWSDProxyTslNewSeqLessThanExisting =
Description TSL new sequence less than existing.
TSL update error: New TSL file <File Name> validity period (\"NextUpdate\")
Trap Text cannot be extracted from file. TSL file chain <Chain Name>.
.rdwrThroughputLicenseThresholdReache =
Description This trap is sent when the traffic throughput threshold is reached
Trap Text Licensed throughput threshold reached
.rsADSSLThresholdReached =
Description This trap is sent when the ssl traffic throughput threshold is reached
Trap Text SSL CPS limit threshold of <Percent> percents is reached
Page - 25 -
.rsADCompressionThresholdReached =
Description This trap is sent when the traffic compression rate threshold is reached
Trap Text Compression rate limit threshold of <Percent> percents is reached
.rsWSDProxyTslInvalidOcspSigningAlg =
This trap is sent when the OCSP response is signed using non-authorized
Description signing algorithm
Trap severity Error
TSL update error: TSL file signing certificate OCSP validation failed. TSL file
Trap Text chain<Chain Name>, File recieved from <URI> URI.
.rsWSDProxyTslFetcherFetchingError =
Description This trap is sent when a error occurs during TSL file fetching
Trap severity Error
Fetching error: unable to fetch TSL, file Chain [<File Name>] chain <Chain
Trap Text Name>.
.rsWSDProxyTslFetcherSignatureError =
Description This trap is sent when the TSL signature fails to verify
Trap severity Error
TSL update error: Error validating TSL XML file: <File Name>. TSL file chain
<File Name>, root certificate <Certificate Name>, File recieved from <URI>
Trap Text URI.
.rsWSDProxyTslFetcherOcspError =
Description This trap is sent when a TSL signature OCSP request fails
Trap severity Error
Trap Text TSL update error: TSL file signing certificate OCSP validation failed. TSL file
Page - 26 -
chain <Chain Name>, File recieved from <URI> URI.
.rsWSDProxyTslFetcherXmlParsingError =
Description This trap is sent when AppDirector fails to parse an TSL XML file
Trap severity Error
TSL update error: TSL XML malformed file, TSL file chain <Chain Name>, from
Trap Text the <URI> location.
.rsWSDProxyTslFetcherIdenticalSequenceNumber =
Description This trap is sent when a new fetched TSL file is identical to the existing one
Trap severity Info
TSL update info: No need to update configuration due to identical sequence
numbers (<Seq Number>) and TSL Id's (<TSL Id>) for new and existing TSL
Trap Text files. File chain <Chain Name>
.rsWSDProxyTslTslFetchingDone =
Description This trap is sent when a new TSL file is fetched successfuly
Trap severity Info
Fetching info: Newly received "\"next root\" will be updated in TSL file chain
Trap Text [<Chain Name>].
.rsWSDProxySSLCpsLicenseOverFlow =
Description SSL Cps License overflow
Trap Text CPS license overflow
Page - 27 -
Enterprise ID spatcher.rsBWM = .1.3.6.1.4.1.89.35.1.60
Name .rsBWMPacketBlocked = rnd.rndApplications.rsServerDispatcher.rsBWM.1
Description This informational trap is sent when packets are blocked.
Trap severity Info
Packet(s) blocked by policy <policy name> <number> packet(s): src <IP>,
Trap Text dest <IP>
Additional <number> packet(s) blocked by policy <policy name>
Not enough discrete IP's: <IP> was not added to network <name>
Traffic overload terminated: Processing all packets (DoS Shield)
Traffic Overload! Currently processing <num>% percent of traffic (DoS
Shield)
.rsBWMFilterCreationFailed =
Name rnd.rndApplications.rsServerDispatcher.rsBWM.3
Description An error occurred while the user configured a new filter (NOT IN USE)
Trap Text BWM: Filter creation error.
Name .rsBWMAttackReportTrap = rnd.rndApplications.rsServerDispatcher.rsBWM.5

A policy can be defined to limit the amount of HTTP requests per session.
Description The trap is sent when the number of requests exceeds the configured limit.
Http Requests Attack detected for Policy <Policy Name> from Source IP <IP
Trap Text Address> <Req Number> requests last second
Note: The BWM traps are only relevant when a BWM license is present
.iso.org.dod.internet.private.enterprises.rnd.rndApplications.rsServerDisp
Enterprise ID atcher.rsCCK = .1.3.6.1.4.1.89.35.1.79
Name .rsCCKElemIsUp = rnd.rndApplications.rsServerDispatcher.rsCCK.1
This informational trap is sent when the Health Monitoring module set the status
Description of an element to Active.
Trap severity Info
Trap Text Health Monitoring: check <Check Name> is up
Page - 28 -
Name .rsCCKElemIsDown = rnd.rndApplications.rsServerDispatcher.rsCCK.2

This informational trap is sent when the Health Monitoring module set the status
Description of an element to Not in Service.
Trap Text <Element Name> <Element Description> is down
Name .rsCCKElemIsNNS = rnd.rndApplications.rsServerDispatcher.rsCCK. 3

This error trap is sent when the Health Monitoring module set the status of an
Description element to No New Sessions.
Trap severity Info
Trap Text <Element Name> <Element Description> is set to no new sessions
.iso.org.dod.internet.private.enterprises.rnd.rndApplications.rsServerDisp
Enterprise ID atcher.rsSESSION = .1.3.6.1.4.1.89.35.1.88
Name .rsACCFlowTableFull = rnd.rndApplications.rsServerDispatcher.rsSESSION.1
Description Flow table is full!!!
Trap Text Flow table is full!!!
Name .rsACCFlowEntryExists = rnd.rndApplications.rsServerDispatcher.rsSESSION.2

Description Flow table entry already exists
Trap Text Flow table entry already exists
Note: The Flow Table traps are relevant only on ODS 3.
.iso.org.dod.internet.private.enterprises.rnd.rndApplications.rsServerDis
Enterprise ID patcher.rsSESSION = .1.3.6.1.4.1.89.35.1.104
Name .rsSESSIONTablesFull = rnd.rndApplications.rsServerDispatcher.rsSESSION.1
Description Session table is full
Trap severity Error
Page - 29 -
Trap Text Session table SYN protection triggering table is full

Session Table is full. Use tuning to increase table size
Session table for special protocols support is full
Session table for syn targets in L3 support is full
ACK reflection IPs table is full. Use tuning to increase table size
SYN-protection rqst table is full. Use tuning
SYN-protection table is full. Use tuning
SYN protection triggers table is full. Use tuning to increase table size
.rsSESSIONSynTriggerUpdate =
Name rnd.rndApplications.rsServerDispatcher.rsSESSION.2
Description
Trap severity Error
Trap Text Syn Attack warning - Traps limit reached. Some traps were not sent
Syn-Ack Reflection Attack <name> for source IP <IP>
Enterprise ID spatcher.rsStatistics = .1.3.6.1.4.1.89.35.1.73
.rsStatisticsReportingProblems =
Name rnd.rndApplications.rsServerDispatcher.rsStatistics.1
Description This trap is sent to inform the user about problems in statistics reporting.
Trap severity Error
Trap Text Unable to establish TCP connection
statistics_max_ODTP_packet_size_update: Invalid MTU
statistics_max_ODTP_packet_size_update: Unable to find destination
interface for <IP>
Entry binding failed while creating statistics for TCP session
Entry binding failed while creating statistics for HTTP session

AD v2.14 SNMP Traps

Hochgeladen von

Dokumentinformationen

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

AD v2.14 SNMP Traps

Hochgeladen von

Copyright:

Verfügbare Formate

AppDi recto r SNMP T raps

Name <Trap name> = <Enterprise ID>.<Specific trap number>

Enterprise ID .iso.org.dod.internet.private.enterprises.rnd = .1.3.6.1.4.1.89

Name .resetRequired = rnd.10

Name .endTftp = rnd.12

Name .abortTftp = rnd.13

Name .startTftp = rnd.14

Name .deviceTemperatureNormal = rnd.15

Name .deviceTemperatureHigh = rnd.16

Name .deviceTemperatureCritical = rnd.17

Name .forwardingTabOverflow = rnd.51

Name .errorsDuringInit = rnd.61

Name .vlanDynPortAdded = rnd.66

Name .vlanDynPortRemoved = rnd.67

AppDirector SNMP Traps

Name .rsSDinactiveServer = rnd.69

Name .rsSnmpSetRequestInSpecialCfgState = rnd.74

Name .rsConfigurationAuditEvent = rnd.75

Name .rdwrFanNotWorking = rnd.76

Name .rdwrFanInfo = rnd.77

Trap severity Info

Name .rdwrCertExpiration = rnd.78

Name .cdeConnected = rnd.81

Name .cdeConfigUpdateFailed = rnd.82

Name .cdeSlaveReboot = rnd.83

Name .cdeSlaveRebootFailed = rnd.84

Name .rsWSDRedundancySwitch = rnd.141

Trap severity Info

Name .rsWSDReadyForShutDown = rnd.rndApplications.rsServerDispatcher.2

Name .rsWSDIllegalReport = rnd.rndApplications.rsServerDispatcher.3

Name .rsWSDRemoteWSDUnavailable = rnd.rndApplications.rsServerDispatcher.4

Name .rsWSDCapacityLimitReached = rnd.rndApplications.rsServerDispatcher.5

Name .rsWSDStatusMonitoring = rnd.rndApplications.rsServerDispatcher.6

Name .rsWSDWrongPassword = rnd.rndApplications.rsServerDispatcher.7

Name .rsWSDInternalTableOverflow = rnd.rndApplications.rsServerDispatcher.8

Name .rsWSDServerUp = rnd.rndApplications.rsServerDispatcher.9

connectivity check for the first time.

Name .rsWSDPoliciesUpdated = rnd.rndApplications.rsServerDispatcher.10

Name .rsWSDUserLocked = rnd.rndApplications.rsServerDispatcher.12

Name .rsWSDAuthenticationSuccess = rnd.rndApplications.rsServerDispatcher.13

Name .rsRadwareNTPUpdateProblem = rnd.rndApplications.rsServerDispatcher.14

NTP server mode flag incorrect

Name .rdwrDualPowerSupplyProblem = rnd.rndApplications.rsServerDispatcher.16

Name .rdwrDualPowerSupplyUp = rnd.rndApplications.rsServerDispatcher.17

Name .rdwrMngmntPortDisabled = rnd.rndApplications.rsServerDispatcher.18

Name .rdwrUnauthorizedSourceIP = rnd.rndApplications.rsServerDispatcher.19

User <user> access attempted with unauthorized source IP <IP>. This

Name .rsARPTableIpConflict = rnd.rndApplications.rsServerDispatcher.21

Name .rsWSD.rsWSDNHRUp = rnd.rndApplications.rsServerDispatcher.rsNWSD.8

Trap severity Warning

Name .rsWSDLRPActive = rnd.rndApplications.rsServerDispatcher.rsNWSD.13

Name .rsWSDLRPNIS = rnd.rndApplications.rsServerDispatcher.rsNWSD.14

Name rsWSDPrxChkFailure = rnd.rndApplications.rsServerDispatcher.rsNWSD.31

Name rsWSDFarmActive= rnd.rndApplications.rsServerDispatcher.rsNWSD.34

Name rsWSDFarmNIS= rnd.rndApplications.rsServerDispatcher.rsNWSD.35

Name rdwrShutdownOrReset = rnd.rndApplications.rsServerDispatcher.rsNWSD.39

Name .rsWSDDXPChannelNIS = rnd.rndApplications.rsServerDispatcher.rsNWSD.42

Trap severity Info

Client certificate OCSP validation, certificate:<Certificate Name>, No

chain <Chain Name>, File recieved from <URI> URI.

Name .rsBWMAttackReportTrap = rnd.rndApplications.rsServerDispatcher.rsBWM.5

Name .rsCCKElemIsDown = rnd.rndApplications.rsServerDispatcher.rsCCK.2

Name .rsCCKElemIsNNS = rnd.rndApplications.rsServerDispatcher.rsCCK. 3

Name .rsACCFlowEntryExists = rnd.rndApplications.rsServerDispatcher.rsSESSION.2