25 June, 2014

Configure simple RMON

SW1(config)#rmon alarm 1 lsystem.58.0 60 absolute rising-threshold 90 10 falling-threshold 30 20

SW1(config)#rmon event 10 trap CISCO description "Help my CPU is over 90%!"
SW1(config)#rmon event 20 trap CISCO description "It`s okey, my CPUdown to 30%!"

SW1(config)#do show run | in rmon
rmon event 10 trap CISCO description "Help my CPU is over 90%!" owner config
rmon event 20 trap CISCO description "It`s okey, my CPUdown to 30%!" owner config
rmon alarm 1 lsystem.58.0 60 absolute rising-threshold 90 10 falling-threshold 30 20 owner config

SW1(config)#rmon alarm 2 ifOutUcastPkts.1 60 delta rising-threshold 600 30 falling-threshold 60 40

SW1(config)#rmon event 30 log description "F0/1 above 100pps"
SW1(config)#rmon event 40 log description "F0/1 below 1pps"

SW1#ping 192.168.100.10 re 1000
00:57:10: %RMON-5-RISINGTRAP: Rising trap is generated because the value of ifOutUcastPkts.1 exceeded the rising-threshold value 600

00:58:10: %RMON-5-FALLINGTRAP: Falling trap is generated because the value of ifOutUcastPkts.1 has fallen below the falling-threshold value 60

SW1#show running-config | in rmon
rmon event 10 trap CISCO description "Help my CPU is over 90%!" owner config
rmon event 20 trap CISCO description "It`s okey, my CPUdown to 30%!" owner config
rmon event 30 log description "F0/1 above 100pps" owner config
rmon event 40 log description "F0/1 below 1pps" owner config
rmon alarm 1 lsystem.58.0 60 absolute rising-threshold 90 10 falling-threshold 30 20 owner config

rmon alarm 2 ifOutUcastPkts.1 60 delta rising-threshold 600 30 falling-threshold 60 40 owner config

SW1#show rmon history alarms
Alarm 1 is active, owned by config
 Monitors lsystem.58.0 every 60 second(s)
 Taking absolute samples, last value was 1
 Rising threshold is 90, assigned to event 10
 Falling threshold is 30, assigned to event 20
 On startup enable rising or falling alarm
Alarm 2 is active, owned by config
 Monitors ifOutUcastPkts.1 every 60 second(s)
 Taking delta samples, last value was 6
 Rising threshold is 600, assigned to event 30
 Falling threshold is 60, assigned to event 40
 On startup enable rising or falling alarm
History Control table is empty

SW1#show rmon history events
Event 10 is active, owned by config
 Description is Help my CPU is over 90%!
 Event firing causes trap to community CISCO,
 last event fired at  0y0w0d,00:00:00,
 Current uptime       0y0w0d,00:57:48
Event 20 is active, owned by config
 Description is It`s okey, my CPUdown to 30%!
 Event firing causes trap to community CISCO,
 last event fired at  0y0w0d,00:00:00,
 Current uptime       0y0w0d,00:57:48
Event 30 is active, owned by config
 Description is F0/1 above 100pps
 Event firing causes log,
 last event fired at  0y0w0d,00:57:10,
 Current uptime       0y0w0d,00:57:48
 Current log entries:
  index  uptime              description
  1      0y0w0d,00:55:10     F0/1 above 100pps
  2      0y0w0d,00:57:10     F0/1 above 100pps
Event 40 is active, owned by config
 Description is F0/1 below 1pps
 Event firing causes log,
 last event fired at  0y0w0d,00:56:10,
 Current uptime       0y0w0d,00:57:48
 Current log entries:
  index  uptime              description
  1      0y0w0d,00:54:10     F0/1 below 1pps
  2      0y0w0d,00:56:10     F0/1 below 1pps
History Control table is empty