Configure VOS Device Alarms

Modify General Alarms

To modify the settings for VOS device alarms:

1. In Director view:
   1. Select the Configuration tab in the top menu bar.
   2. Select Templates > Templates in the horizontal menu bar.
   3. Select an organization in the left menu bar.
   4. Select a template in the main pane. The view changes to Appliance view.
2. Select the Configuration tab in the top menu bar.
3. Select Others > Alarms in the left menu bar.
4. Select the Alarms tab and click the  Add icon. The Add Alarm popup window displays.
   
   
5. To configure an alarm's owner and severity, enter information for the following fields
   
   
    

   Field	Description
   Alarm Type (Required)	Select an alarm type from the list in Supported Alarm Types, above.
   Severity	Select a severity for the alarm type: Cleared Indeterminate Major Minor Warning
   Soak Time	Enter how long the VOS device waits to determine whether a condition is transient or whether the condition is persistent and an alarm needs to be raised. The soak time is a method for damping repetitive alarms. Range: 0 through 65535 seconds Default: 10 seconds; 0 seconds (for bgp-nbr-state-change alarm)
   Destination (Required)	Select a destination for the alarm. Click the Add icon to add a destination to the list. You can configure multiple destinations.

6. Select the Threshold Alarms tab and click the  Add icon. The Add Threshold Alarm popup window displays.
7. To configure alarm threshold values, enter information for the following fields.
   
   

   Field	Description
   Alarm Type (Required)	Select a utilization or threshold alarm type: CGNAT pool utilization (cgnat-pool-utilization) CPU utilization (cpu-utilization) DDoS threshold (ddos-threshold) Device session utilization (device-session-utilization) DHCP IP declined (dhcp-ip-declined) DHCP pool utilization (dhcp-pool-utilization) Disk utilization (disk-utilization) Downlink bandwidth threshold (dnlink-bw-threshold) LEF collector queue utilization (lef-collector-queue-utilization) Log disk utilization Memory utilization (memory-utilization) Port scan flood (port-scan-flood) SNAT pool utilization (snat-pool-utilization) Tenant session utilization (org-session-utilization) Uplink bandwidth threshold (uplink-bw-threshold) Zone protection flood (zone-protection-flood)
   Low Severity	Select a severity to assign to the the low end of the alarm threshold: Cleared Critical Indeterminate Major Minor Warning
   High Severity	Select a severity to assign to the high end of the alarm threshold: Cleared Critical Indeterminate Major Minor Warning
   Low Threshold	Enter a percentage value for the low threshold. Range: 0 through 100 percent Default: 75 percent
   High Threshold	Enter a percentage value for the high threshold. Range: 0 through 100 percent Default: 95 percent
   Soak Time	Enter how long the VOS device waits to determine whether a condition is transient or whether the condition is persistent and an alarm needs to be raised. The soak time is a method for damping repetitive alarms. Range: 0 through 65535 seconds Default: 10 seconds; 0 seconds (for bgp-nbr-state-change alarm)
   Destination (Required)	Select a destination for the alarm. Click the Add icon to add a destination to the list. You can configure multiple destinations.

8. Click OK.

Note that when you change the low-threshold or high-threshold settings for the CPU utilization, but the CPU load itself does not change, no alarm is generated if a violation of the new threshold value occurs. However, as soon as the CPU load changes, an alarm is generated if the load value violates the new threshold value. This same behavior applies when you change the memory and session utilization on a VOS device.

Enable BGP Alarms

To enable BGP alarms on a virtual router:

1. In Director view:
   1. Select the Configuration tab in the top menu bar.
   2. Select Templates > Templates in the horizontal menu bar.
   3. Select an organization in the left menu bar.
   4. Select a post-staging template in the main pane. The view changes to Appliance view.
2. Select the Configuration tab in the top menu bar.
3. Select Networking > Virtual Routers in the left menu bar.
4. Select a routing instance in the main pane. The Edit Provider-Control-VR popup window displays.
5. Select BGP and click the instance ID. The Edit BGP Instance popup window displays.
   
   
    
6. Click Enable Alarms to enable the alarms for the instance.
7. Click OK.
8. Repeat Steps 5 through 7 to enable alarms for other BGP routing instances.

Enable Monitor Alarms

VOS devices monitor the reachability of IP addresses by sending ICMP probe packets, and they update static routes based on the reachability. These probe packet states generate monitor alarms.

To enable monitor alarms, first configure an IP-SLA monitor profile, and then associate this profile with the routing instance.

1. In Director view:
   1. Select the Configuration tab in the top menu bar.
   2. Select Devices > Devices in the horizontal menu bar.
   3. Select an organization in the left menu bar.
   4. Select a Controller in the main pane. The view changes to Appliance view.
2. Select the Configuration tab in the top menu bar.
3. Select Networking > IP-SLA > Monitor in the left menu bar.
4. In the main pane, click the  Add icon. In the Add IP-SLA Monitors popup window, enter information for the following fields.
   
   
    

   Field	Description
   Name (Required)	Enter a name for the IP SLA monitor object.
   Interval	Click, and enter the frequency, in seconds, at which to send ICMP packets to the IP address. Range: 1 through 60 seconds Default: 3 seconds
   Interval Milliseconds	Click, and enter the frequency, in milliseconds, at which to send ICMP packets to the IP address. Range: 100 through 60000 milliseconds Default: 3000 milliseconds
   Threshold	Enter the maximum number of ICMP packets to send to the IP address. If the IP address does not respond after this number of packets, the monitor object, and hence the IP address, is marked as down. Range: 1 through 60 Default: 5
   Monitor Type (Required)	Select the type of packets to send to the IP address: DNS (For Releases 22.1.1 and later.) HTTP (For Releases 22.1.1 and later.) HTTP Raw ICMP TCP
   Domain Name (Required)	For DNS monitors and if you configure an FQDN, enter the domain name for the IP SLA monitor.
   Destination Port (Required)	For DNS, HTTP, raw HTTP, and TCP monitor types, enter the destination port for the IP SLA monitor.
   HTTP Response Code	(For Releases 22.1.1 and later.) For HTTP and raw HTTP monitors, enter a numeric range of status codes to indicate that an HTTP request has been received from the remote endpoint.
   HTTP Response Code Low (Required)	Enter the lowest value of the status code.
   HTTP Response Code High (Required)	Enter the highest value of the status code range.
   HTTP Raw Request (Required)	(For Releases 22.1.1 and later.) For HTTP raw monitors, enter the HTTP request string to send generic HTTP requests to the remote endpoint. For example, if you issue the HTTP request GET/get HTTP/1.1\r\n, the monitor sends a GET request to retrieve information from the remote endpoint.
   Monitor Subtype	Select the monitor subtype: HA probe type—Select to avoid interchassis HA split brain. For more information, see Configure Stateful Interchassis HA. Layer 2 loopback type—Select to monitor an external service node configured as a Layer 2 loopback (virtual wire). No subtype—Do not use a monitor subtype. This is the default. Default: No subtype
   Source Interface (Required)	Select the source interface on which to send the probe packets. This interface determines the routing instance through which to send the probe packets. This routing instance is the target routing instance for the probe packets.
   Routing Instance	Select the routing instance for the monitor object to use to reach the target IP addresses and FQDNs.
   Networks
   IP Address	Click to configure one or more IP addresses to monitor. You must configure either IP addresses or FQDNs.
   IP Address (Required)	Click the Add icon, and then select the IP address to monitor. If you select more than one IP address, all the IP addresses must be reachable for the IP monitor to be applied (this is an AND condition).
   FQDN	(For Releases 22.1.1 and later.) Click to configure one or more FQDNs to monitor. You must configure either IP addresses or FQDNs.
   FQDN List (Required)	Click the Add icon, and then enter the FQDN to monitor. If you select more than one FQDN, all the FQDNs must be reachable for the IP monitor to be applied (that is; it is an AND condition). When you configure FQDNs, you must also configure the system DNS server to use for the name resolution.
   Forwarding Class	(For Releases 21.1.1 and later.) Select a forwarding class for the IP SLA monitor to override the default forwarding class.
   Next Hop	Select the device to use as the next hop.

5. Click OK.
6. Repeats Steps 4 and 5 to configure addition IP-SLA monitor profiles.
7. Select Virtual Routers in the left menu bar.
8. Select a device in the main pane.
9. In the Edit Virtual Router popup window, select the Static Routing tab.
10. Click an existing route, or click the  Add icon to add a new static route. The Edit IPv4/v6 Unicast/Add IPv4/v6 Unicast popup window displays.
    
    
11. In the Monitor field, select the IP-SLA profile to associate the IP-SLA profile with a static route.
12. Click OK.