Skip to content

Network

Network | BFD | Session Down

Variables

NameDescriptionDefaults
interfaceBFD interface
peerBFD Peer
descriptionInterface description

Related Events

Event ClassRole
Network | BFD | Session Down opening event
Network | BFD | Session Up closing event

Network | BGP | Peer Down

Variables

NameDescriptionDefaults
peerBGP Peer
vrfVRF
reasonReason
asBGP Peer AS
local_asLocal AS
descriptionBGP Peer Description
import_filterBGP Import Filter
export_filterBGP Export Filter

Related Events

Event ClassRole
Network | BGP | Backward Transition opening event
Network | BGP | Established closing event
Network | BGP | Peer Down opening event
Network | BGP | Peer State Changed opening event
Network | BGP | Peer State Changed closing event

Network | BGP | Prefix Limit Exceeded

Variables

NameDescriptionDefaults
peerBGP Peer
vrfVRF
asBGP Peer AS

Related Events

Event ClassRole
Network | BGP | Established closing event
Network | BGP | Peer State Changed closing event
Network | BGP | Prefix Limit Exceeded opening event

Network | CEF | Resource Failure

Variables

NameDescriptionDefaults
peerBFD Peer
reasonReason failed

Related Events

Event ClassRole
Network | CEF | Resource Failure opening event

Network | DHCP | Untrusted Server

Variables

NameDescriptionDefaults
ipSource IP
interfaceSource interface

Related Events

Event ClassRole
Network | DHCP | Untrusted Server opening event

Network | DNS | Bad Query

Variables

NameDescriptionDefaults
ipSource IP

Related Events

Event ClassRole
Network | DNS | Bad Query opening event

Network | DOCSIS | BPI Unautorized

Probable Causes

An unauthorized cable modem has been deleted to enforce BPI authorization for the specified cable modem. The specified cable modem was not performing BPI negotiation.

Recommended Actions

Check the modem interface configuration for privacy mandatory, or check for errors in the TFTP configuration file.

Variables

NameDescriptionDefaults
macCable Modem MAC
sidCable Modem SID
interfaceCable interface

Related Events

Event ClassRole
Network | DOCSIS | BPI Unautorized opening event

Network | DOCSIS | Bad Timing Offset

Probable Causes

The cable modem is not using the correct starting offset during initial ranging, causing a zero, negative timing offset to be recorded by the CMTS for this modem. The CMTS internal algorithms that rely on the timing offset parameter will not analyze any modems that do not use the correct starting offset. The modems may not be able to function, depending on their physical location on the cable plant.

Recommended Actions

Locate the cable modem based on the MAC address and report the initial timing offset problem to the cable modem vendor.

Variables

NameDescriptionDefaults
macCable Modem MAC
sidCable Modem SID
offsetTime offset

Related Events

Event ClassRole
Network | DOCSIS | Bad Timing Offset opening event

Network | DOCSIS | Invalid CoS

Probable Causes

The registration of the specified modem has failed because of an invalid or unsupported CoS setting.

Recommended Actions

Ensure that the CoS fields in the configuration file are set correctly.

Variables

NameDescriptionDefaults
macCable Modem MAC
sidCable Modem SID
interfaceCable interface

Related Events

Event ClassRole
Network | DOCSIS | Invalid CoS opening event

Network | DOCSIS | Invalid DOCSIS Message

Probable Causes

A cable modem that is not DOCSIS-compliant has attempted to send an invalid DOCSIS message.

Recommended Actions

Locate the cable modem that sent this message and replace it with DOCSIS-compliant modem.

Variables

NameDescriptionDefaults
interfaceCable interface
macCable Modem MAC
sidCable Modem SID

Related Events

Event ClassRole
Network | DOCSIS | Invalid DOCSIS Message opening event

Network | DOCSIS | Invalid QoS

Probable Causes

The registration of the specified modem has failed because of an invalid or unsupported QoS setting.

Recommended Actions

Ensure that the QoS fields in the configuration file are set correctly.

Variables

NameDescriptionDefaults
macCable Modem MAC
sidCable Modem SID
interfaceCable interface

Related Events

Event ClassRole
Network | DOCSIS | Invalid QoS opening event

Network | DOCSIS | Invalid Shared Secret

Probable Causes

The registration of this modem has failed because of an invalid MIC string.

Recommended Actions

Ensure that the shared secret that is in the configuration file is the same as the shared secret that is configured in the cable modem.

Variables

NameDescriptionDefaults
macCable Modem MAC
sidCable Modem SID
interfaceCable interface

Related Events

Event ClassRole
Network | DOCSIS | Invalid Shared Secret opening event

Network | DOCSIS | Max CPE Reached

Probable Causes

The maximum number of devices that can be attached to the cable modem has been exceeded. Therefore, the device with the specified IP address will not be added to the modem with the specified SID.

Recommended Actions

Locate the specified device and place the device on a different cable modem with another SID.

Variables

NameDescriptionDefaults
macCPE MAC
ipCPE IP
modem_macCable Modem MAC
sidCable Modem SID
interfaceCable interface

Related Events

Event ClassRole
Network | DOCSIS | Max CPE Reached opening event

Network | DOCSIS | Maximum Capacity Reached

Probable Causes

The currently reserved capacity on the upstream channel already exceeds its virtual reservation capacity, based on the configured subscription level limit. Increasing the subscription level limit on the current upstream channel will place you at risk of being unable to guarantee the individual reserved rates for modems since this upstream channel is already oversubscribed.

Recommended Actions

Load-balance the modems that are requesting the reserved upstream rate on another upstream channel.

Variables

NameDescriptionDefaults
interfaceCable interface
upstreamUpstream
cur_bpsCurrent bps reservation
res_bpsReserved bps

Related Events

Event ClassRole
Network | DOCSIS | Maximum Capacity Reached opening event

Network | DOCSIS | Maximum SIDs

Probable Causes

The maximum number of SIDs has been allocated to the specified line card.

Recommended Actions

Assign the cable modem to another line card.

Variables

NameDescriptionDefaults
interfaceCable interface

Related Events

Event ClassRole
Network | DOCSIS | Maximum SIDs opening event

Network | EIGRP | Neighbor Down

Symptoms

Routing table changes and possible lost of connectivity

Probable Causes

Link failure or protocol misconfiguration

Recommended Actions

Check links and local and neighbor router configuration

Variables

NameDescriptionDefaults
asEIGRP autonomus system
interfaceInterface
neighborNeighbor's Router ID
reasonAdjacency lost reason
descriptionInterface description

Related Events

Event ClassRole
Network | EIGRP | Neighbor Down opening event
Network | EIGRP | Neighbor Up closing event

Network | IMPB | Unauthenticated IP-MAC

Symptoms

Discard user connection attempts

Recommended Actions

Check user IP and MAC, check IMPB entry, check topology

Variables

NameDescriptionDefaults
ipUser IP
macUser MAC
interfaceAffected interface
descriptionInterface description

Related Events

Event ClassRole
Network | IMPB | Recover IMPB stop learning state closing event
Network | IMPB | Unauthenticated IP-MAC opening event

Network | IP | ARP Moved

Variables

NameDescriptionDefaults
interfaceBFD interface
ipIP
from_macFrom MAC
to_macTo MAC

Related Events

Event ClassRole
Network | IP | ARP Moved opening event

Network | IP | Address Conflict

Variables

NameDescriptionDefaults
ipConflicting IP
macMAC
interfaceInterface

Related Events

Event ClassRole
Network | IP | Address Conflict opening event

Network | IP | IP Flap

Variables

NameDescriptionDefaults
ipFlapped IP
from_interfaceFrom interface
to_interfaceTo interface
macMAC

Related Events

Event ClassRole
Network | IP | IP Flap opening event

Network | IS-IS | Adjacency Down

Symptoms

Routing table changes and possible lost of connectivity

Probable Causes

Link failure or protocol misconfiguration

Recommended Actions

Check links and local and neighbor router configuration

Variables

NameDescriptionDefaults
interfaceInterface
neighborNeighbor's NSAP or name
levelLevel
reasonAdjacency lost reason

Related Events

Event ClassRole
Network | IS-IS | Adjacency Down opening event
Network | IS-IS | Adjacency Up closing event

Network | LBD | Loop Detected

Recommended Actions

Check hardware link and topology

Variables

NameDescriptionDefaults
interfaceinterface
descriptionInterface description

Related Events

Event ClassRole
Network | LBD | Loop Cleared closing event
Network | LBD | Loop Detected opening event

Network | LBD | Vlan Loop Detected

Symptoms

Lost traffic on specific vlan

Recommended Actions

Check topology or use STP to avoid loops

Variables

NameDescriptionDefaults
interfaceinterface
vlanVlan
descriptionInterface description
vlan_nameVlan name
vlan_descriptionVlan description
vlan_l2_domainL2 domain

Related Events

Event ClassRole
Network | LBD | Vlan Loop Cleared closing event
Network | LBD | Vlan Loop Detected opening event

Symptoms

Connection lost

Variables

NameDescriptionDefaults
interfacePhysical port
thresholdThreshold type
sensorMeasured name
ovalueOperating value
tvalueThreshold value
descriptionInterface description

Related Events

Event ClassRole
Network | Link | DOM | Alarm: Out of Threshold opening event
Network | Link | DOM | Alarm: Out of Threshold Recovered closing event

Symptoms

Connection lost

Variables

NameDescriptionDefaults
interfacePhysical port
thresholdThreshold type
sensorMeasured name
ovalueOperating value
tvalueThreshold value
descriptionInterface description

Related Events

Event ClassRole
Network | Link | DOM | Warning: Out of Threshold opening event
Network | Link | DOM | Warning: Out of Threshold Recovered closing event

Variables

NameDescriptionDefaults
interfaceinterface name
descriptionInterface description

Related Events

Event ClassRole
Network | Link | Duplex Mismatch opening event

Variables

NameDescriptionDefaults
interfaceinterface name
reasonerr-disable reason
descriptionInterface description

Related Events

Event ClassRole
Network | Link | Err-Disable opening event
Network | Link | Link Flap Error Detected opening event
Network | Link | Link Flap Error Recovery closing event
Network | Link | Link Up closing event

Variables

NameDescriptionDefaults
interfaceinterface name
descriptionInterface description

Related Events

Event ClassRole
Network | Link | Full-Duplex closing event
Network | Link | Half-Duplex opening event

Symptoms

Connection lost

Probable Causes

Administrative action, cable damage, hardware or software error either from this or from another side

Recommended Actions

Check configuration, both sides of links and hardware

Variables

NameDescriptionDefaults
interfaceinterface name
descriptionInterface description
linkLink ID

Related Events

Event ClassRole
Network | Link | Link Down opening event
Network | Link | Link Up closing event

Network | MAC | Duplicate MAC

Variables

NameDescriptionDefaults
macMAC Address
one_interfaceFirst interface
two_interfaceSecond interface
one_descriptionInterface description
two_descriptionInterface description

Related Events

Event ClassRole
Network | MAC | Duplicate MAC opening event

Network | MAC | Invalid MAC

Variables

NameDescriptionDefaults
macMAC Address
interfaceAffected interface
vlanAffected vlan
descriptionInterface description

Related Events

Event ClassRole
Network | MAC | Invalid MAC opening event

Variables

NameDescriptionDefaults
mac_limitMAC Address Limit
utilizationUtilization
interfaceInterface

Related Events

Event ClassRole
Network | MAC | Link MAC Exceed opening event

Network | MAC | MAC Flap

Probable Causes

The system found the specified host moving between the specified ports.

Recommended Actions

Examine the network for possible loops.

Variables

NameDescriptionDefaults
macMAC Address
vlanVLAN
from_interfaceFrom interface
to_interfaceTo interface
from_descriptionInterface description
to_descriptionInterface description
vlan_nameVlan name
vlan_descriptionVlan description
vlan_l2_domainL2 domain

Related Events

Event ClassRole
Network | MAC | MAC Flap opening event

Network | MAC | MAC Flood

Variables

NameDescriptionDefaults
macMAC Address
vlanVLAN
interfaceInterface
vlan_nameVlan name
vlan_descriptionVlan description
vlan_l2_domainL2 domain

Related Events

Event ClassRole
Network | MAC | MAC Flood opening event

Network | MPLS | LDP Neighbor Down

Variables

NameDescriptionDefaults
neighborLDP Neighbor
stateState
reasonReason

Related Events

Event ClassRole
Network | MPLS | LDP Neighbor Down opening event
Network | MPLS | LDP Neighbor Up closing event

Network | MPLS | LDP Session Down

Variables

NameDescriptionDefaults
interfaceinterface name
stateState
reasonReason

Related Events

Event ClassRole
Network | MPLS | LDP Session Down opening event
Network | MPLS | LDP Session Up closing event

Network | MPLS | LSP Down

Variables

NameDescriptionDefaults
nameLSP name
stateState
reasonReason

Related Events

Event ClassRole
Network | MPLS | LSP Down opening event
Network | MPLS | LSP Up closing event

Network | MPLS | Path Down

Variables

NameDescriptionDefaults
namePath name
reasonReason

Related Events

Event ClassRole
Network | MPLS | Path Down opening event
Network | MPLS | Path Up closing event

Network | MPLS | TDP Neighbor Down

Variables

NameDescriptionDefaults
neighborTDP Neighbor
reasonReason

Related Events

Event ClassRole
Network | MPLS | TDP Neighbor Down opening event
Network | MPLS | TDP Neighbor Up closing event

Network | MSDP | Peer Down

Recommended Actions

Check msdp peer aviability, check msdp peer configuration changes

Variables

NameDescriptionDefaults
peerPeer's IP
vrfVRF
reasonReason

Related Events

Event ClassRole
Network | MSDP | Peer Down opening event
Network | MSDP | Peer Up closing event

Network | Monitor | CRC Error Detected

Variables

NameDescriptionDefaults
interfaceinterface
descriptionInterface description

Related Events

Event ClassRole
Network | Monitor | CRC Error Cleared closing event
Network | Monitor | CRC Error Detected opening event

Network | OSPF | Neighbor Down

Symptoms

Routing table changes and possible lost of connectivity

Probable Causes

Link failure or protocol misconfiguration

Recommended Actions

Check links and local and neighbor router configuration

Variables

NameDescriptionDefaults
areaOSPF area
interfaceInterface
neighborNeighbor's Router ID
reasonAdjacency lost reason
vrfVRF
descriptionInterface description

Related Events

Event ClassRole
Network | OSPF | Neighbor Down opening event
Network | OSPF | Neighbor Up closing event

Network | PIM | DR Change

Symptoms

Some multicast flows lost

Probable Causes

Link failure or protocol misconfiguration

Recommended Actions

Check links and local and neighbor router configuration

Variables

NameDescriptionDefaults
interfaceInterface
from_drFrom DR
to_drTo DR
vrfVRF

Related Events

Event ClassRole
Network | PIM | DR Change opening event

Network | PIM | Invalid RP

Probable Causes

A PIM router received a register message from another PIM router that identifies itself as the rendezvous point. If the router is not configured for another rendezvous point, it will not accept the register message.

Recommended Actions

Configure all leaf routers (first-hop routers to multicast sources) with the IP address of the valid rendezvous point.

Variables

NameDescriptionDefaults
pim_routerPIM router IP
invalid_rpInvalid RP IP

Related Events

Event ClassRole
Network | PIM | Invalid RP opening event

Network | PIM | MSDP Peer Down

Symptoms

Multicast flows lost

Probable Causes

Link failure or protocol misconfiguration

Recommended Actions

Check links and local and neighbor router configuration

Variables

NameDescriptionDefaults
peerPeer's IP
vrfVRF
reasonReason

Related Events

Event ClassRole
Network | PIM | MSDP Peer Down opening event
Network | PIM | MSDP Peer Up closing event

Network | PIM | Neighbor Down

Symptoms

Multicast flows lost

Probable Causes

Link failure or protocol misconfiguration

Recommended Actions

Check links and local and neighbor router configuration

Variables

NameDescriptionDefaults
interfaceInterface
neighborNeighbor's IP
vrfVRF
reasonReason
descriptionInterface description

Related Events

Event ClassRole
Network | PIM | Neighbor Down opening event
Network | PIM | Neighbor Up closing event

Network | Port Security | Port Security Violation

Variables

NameDescriptionDefaults
interfaceInterface
macMAC Address
descriptionInterface description

Related Events

Event ClassRole
Network | Port Security | Port Security Violation opening event

Network | Port | Loss of Signal

Symptoms

Connection lost

Probable Causes

Administrative action, cable damage, hardware or software error either from this or from another side

Recommended Actions

Check configuration, both sides of links and hardware

Variables

NameDescriptionDefaults
interfaceinterface name
descriptionInterface description
slotSlot name
catrdCard name

Related Events

Event ClassRole
Network | Port | Loss of Signal opening event
Network | Port | Loss of Signal Resume closing event

Network | RSVP | Neighbor Down

Symptoms

Routing table changes and possible lost of connectivity

Probable Causes

Link failure or protocol misconfiguration

Recommended Actions

Check links and local and neighbor router configuration

Variables

NameDescriptionDefaults
interfaceInterface
neighborNeighbor's NSAP or name
reasonNeighbor lost reason

Related Events

Event ClassRole
Network | RSVP | Neighbor Down opening event
Network | RSVP | Neighbor Up closing event

Network | STP | BPDU Guard Violation

Variables

NameDescriptionDefaults
interfaceinterface
descriptionInterface description

Related Events

Event ClassRole
Network | Link | Link Up closing event
Network | STP | BPDU Guard Recovery closing event
Network | STP | BPDU Guard Violation opening event

Network | STP | Root Guard Violation

Variables

NameDescriptionDefaults
interfaceinterface
descriptionInterface description

Related Events

Event ClassRole
Network | Link | Link Up closing event
Network | STP | BPDU Root Violation opening event
Network | STP | Root Guard Recovery closing event

Network | STP | STP Loop Detected

Variables

NameDescriptionDefaults
interfaceinterface
descriptionInterface description

Related Events

Event ClassRole
Network | STP | STP Loop Cleared closing event
Network | STP | STP Loop Detected opening event

Network | STP | STP Vlan Loop Detected

Variables

NameDescriptionDefaults
interfaceinterface
vlanvlan
descriptionInterface description
vlan_nameVlan name
vlan_descriptionVlan description
vlan_l2_domainL2 domain

Related Events

Event ClassRole
Network | STP | STP Vlan Loop Cleared closing event
Network | STP | STP Vlan Loop Detected opening event

Network | Storm Control | Broadcast Storm Detected

Variables

NameDescriptionDefaults
interfaceinterface
descriptionInterface description

Related Events

Event ClassRole
Network | Storm Control | Broadcast Storm Cleared closing event
Network | Storm Control | Broadcast Storm Detected opening event

Network | Storm Control | Multicast Storm Detected

Variables

NameDescriptionDefaults
interfaceinterface
descriptionInterface description

Related Events

Event ClassRole
Network | Storm Control | Multicast Storm Cleared closing event
Network | Storm Control | Multicast Storm Detected opening event

Network | Storm Control | Storm Detected

Variables

NameDescriptionDefaults
interfaceinterface
descriptionInterface description

Related Events

Event ClassRole
Network | Storm Control | Storm Cleared closing event
Network | Storm Control | Storm Detected opening event

Network | Storm Control | Unicast Storm Detected

Recommended Actions

Enable DLF (destination lookup failure) filter

Variables

NameDescriptionDefaults
interfaceinterface
descriptionInterface description

Related Events

Event ClassRole
Network | Storm Control | Unicast Storm Cleared closing event
Network | Storm Control | Unicast Storm Detected opening event

Network | UDLD | UDLD Protocol Error Detected

Variables

NameDescriptionDefaults
interfaceinterface
descriptionInterface description

Related Events

Event ClassRole
Network | UDLD | UDLD Protocol Error Detected opening event
Network | UDLD | UDLD Protocol Recovery closing event