Re: BGP state change alert (1390 Views)
Reply
Valued Contributor
bebu
Posts: 113
Registered: ‎06-14-2011
Message 1 of 17 (1,493 Views)

BGP state change alert

Hi,

 

I needed to monitor BGP state change alerts for the devices "ciscoNexusC7010" series, in which mib i could find this bgp parameters? please provide inputs.

 

Thanks!

Please use plain text.
Honored Contributor
David Campeau
Posts: 1,058
Registered: ‎04-12-2007
Message 2 of 17 (1,466 Views)

Re: BGP state change alert

[ Edited ]

NNM will monitoring BGP for Nexus gear with no issues when using the correct MIB.

 

1. Load the BGP4-MIB into NNM.

    a. Download from here >>>>>  http://www.oidview.com/mibs/0/BGP4-MIB.html

 

2. Create a MIB Expression for BGP.

    a. Fill out a new Mib Expression form.

    b. The expression will be the following OID  .1.3.6.1.2.1.15.3.1.2

    c. Conversion Algorithm = MIB Variable

    d. Display Variable = bgpPeerState

 

3a. Create a new Cusom Poller Collection. "MIB Filter Variable" Use the following > "bgpPeerRemoteAddr". For the threshold use a Comparison Maps.  Make the Value to Critical if = to 3

 

3b. Create a new Policy. Make the MIB Filter = to the bgpPeerRemoteAddresses you're wanting to monitor.

 

After the forms are saved, verify by going to the "custom NOde Collections " group under Monitoring and look for the "Policy" column and find the BGP custom polling. Verify the status is "Green" and that the data is being collected.

 

Essentially when it comes to BGP you're looking for "ACTIVE". If BGP goes into ACTIVE state there is a problem. If BGP is working correctly then the integer pulled will be = to 6 if the BGP remote peer goes into ACTIVE status then it will be = to 3.

 

Example - snmpwalk to verify SNMP is working and to verify the Nexus gear will respond to the OID requested. The following test was donw on a Cisco Nexus C7010 in my environement.

 

EXAMPLE# nnmsnmpwalk.ovpl -c community IPADDRESS 1.3.6.1.2.1.15.3.1.2
bgpPeerTable.bgpPeerEntry.bgpPeerState.IPADDRESS: INTEGER: 6
bgpPeerTable.bgpPeerEntry.bgpPeerState.IPADDRESS : INTEGER: 6
bgpPeerTable.bgpPeerEntry.bgpPeerState.IPADDRESS : INTEGER: 6
bgpPeerTable.bgpPeerEntry.bgpPeerState.IPADDRESS : INTEGER: 6
bgpPeerTable.bgpPeerEntry.bgpPeerState.IPADDRESS : INTEGER: 6

 

Let me know if I can be of more help.

 

David

    

 

Please use plain text.
Valued Contributor
bebu
Posts: 113
Registered: ‎06-14-2011
Message 3 of 17 (1,459 Views)

Re: BGP state change alert

Thanks a lot David,for step by step information

 

But, I found below is the result.

 

MIB Variable requested .1.3.6.1.2.1.15.3.1.2 does not exist on node
 
i tried snmp walk, i have no information for bgpstate, it proceeds till 1.3.6.1.2.1.15
 

C:\>nnmsnmpwalk.ovpl -c public 169.15.31.44 1.3.6.1.2.1.15
bgpVersion.0 : OCTET STRING- (hex): length = 1
     0:  10 -- -- -- -- -- -- -- -- -- -- -- -- -- -- --     ................

bgpLocalAs.0 : INTEGER: 65500
bgpIdentifier.0 : IpAddress: 10.10.10.10

 

 

What could be an issue?

 

Bebu

Please use plain text.
Honored Contributor
David Campeau
Posts: 1,058
Registered: ‎04-12-2007
Message 4 of 17 (1,453 Views)

Re: BGP state change alert

Is BGP enabled on the Nexus and working?

 

 

Please use plain text.
Valued Contributor
bebu
Posts: 113
Registered: ‎06-14-2011
Message 5 of 17 (1,434 Views)

Re: BGP state change alert

Hi David,

 

Network administrator have configured bgp-traps on this device. is it anything? they needed to configure bgp peer state on device, if so can i able to access bgp peer state mib ?

 

Thanks!

Please use plain text.
Honored Contributor
David Campeau
Posts: 1,058
Registered: ‎04-12-2007
Message 6 of 17 (1,420 Views)

Re: BGP state change alert

There are two different schools of thought, when it comes to SNMP; Push or Pull.

 

Do I poll for state changes? or do I wait for the device to send BGP state change traps?  That's a good question because it tends to define a path of alerting, so it's very important.

 

My gut tells me if you can't poll the Nexus gear for BGP state changes then it's either not configured or not configured properly. My recommendation, though completely up to you, would be to see if you can work with Cisco to find out why it can not be polled for the BGP OID (who knows, it might be a defect). If that isn't an option then you're definitely going to be depending on those BGP traps the "administrators" configured.

 

If you have access to the Nexus gear then I would run the following command to see if BGP is available.

 

"#sh ip bgp summ"   < This command will produce a list of BGP peers configured.

 

Example:

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

IPAddress 4 65510 219077 224856 10199 0      0      21w5d            1

 

Please use plain text.
Valued Contributor
bebu
Posts: 113
Registered: ‎06-14-2011
Message 7 of 17 (1,394 Views)

Re: BGP state change alert

Thanks david, 

 

Here are the outputs, the device gave to me

 

show ip bgp summary vrf meb

BGP summary information for VRF MeB, address family IPv4 Unicast
BGP router identifier 172.31.11.20, local AS number 65500
BGP table version is 3987, IPv4 Unicast config peers 2, capable peers 2
238 network entries and 423 paths using 31412 bytes of memory
BGP attribute entries [41/5084], BGP AS path entries [24/412]
BGP community entries [3/96], BGP clusterlist entries [0/0]

Neighbor        V    AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
172.31.11.21    4 65200  146593  133203     3987    0    0    13w1d 189
172.31.52.3     4 65501  133360  133702     3987    0    0     2w4d 217


Nonnia-DC1-N7k-Pri#
Nonnia-DC1-N7k-Pri#
Nonnia-DC1-N7k-Pri# show ip bgp summary vrf Cruise


BGP summary information for VRF Cruise, address family IPv4 Unicast
BGP router identifier 172.31.11.5, local AS number 65500
BGP table version is 41645, IPv4 Unicast config peers 4, capable peers 4
502 network entries and 919 paths using 67220 bytes of memory
BGP attribute entries [23/2852], BGP AS path entries [7/102]
BGP community entries [3/96], BGP clusterlist entries [0/0]

Neighbor        V    AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
172.16.1.2      4 65505 3522291 3594709    41645    0    0     8w2d 431
172.16.1.3      4 65505 3470935 3541341    41645    0    0    17w2d 416
172.31.11.3     4 15404 1738153 1652612    41645    0    0    11w4d 1
172.31.42.3     4 65501 3660735 3662550    41645    0    0    13w1d 0

 

Seems, it has configured, so i need to check with Cisco for right MIB ?

 

Please use plain text.
Honored Contributor
AndyKemp
Posts: 720
Registered: ‎05-17-2010
Message 8 of 17 (1,390 Views)

Re: BGP state change alert

And Cisco will immdiately backtrack. Cisco and thier BGP support by platform is different across the board. For Cisco there are three different versions of BGP MIB support .. the best way to determine which version your particular software supports is dropping a BGP link and observing the peer drop trap.

 

If you get .1.3.6.1.2.1.15.0.1  Its Cisco's RFC 1269 implmentation. Cisco hates me when I tell them to fix thier support for this RFC as its a superceeded version of the BGP4 MIB where they dropped an entire clause (the .7) which produced this malformed trap which does not include the IP address of the peer as a varbind.

 

If you get .1.3.6.1.2.1.15.7.1 Its at least RFC 4723 which is good as the .7 clause is back and the peer

IP address is back as a varbind.

 

If you get .1.3.6.1.4.1.9.9.187.0.6 its Cisco's own propriatary version of BGP aka CBGP.

 

Have a nice day :)

Andy Kemp,  CISSP
Please use plain text.
Honored Contributor
David Campeau
Posts: 1,058
Registered: ‎04-12-2007
Message 9 of 17 (1,386 Views)

Re: BGP state change alert

[ Edited ]

Good information Andy........

 

Kudo'd you for it :)

 

David

Please use plain text.
Valued Contributor
bebu
Posts: 113
Registered: ‎06-14-2011
Message 10 of 17 (1,356 Views)

Re: BGP state change alert

Hi Andy,

 

I am able to pull the information through snmpwalk on following OID's and its classes

 

1.   .1.3.6.1.2.1.15  i can see output till class .15,  not after this 15.0.1. & .15.7.1

 

2.  1.3.6.1.4.1.9.9 i can see outpuit till class .9 , not after this .9.187.0.6

 

due to production environment, i cant create new dummy neighbor session to generate down trap.

 

any idea ? Thanks for your help on this!

 

Regards,

Bebu

 

Please use plain text.
Regular Advisor
Chetan_J
Posts: 169
Registered: ‎01-02-2013
Message 11 of 17 (1,047 Views)

Re: BGP state change alert

Hello David,

 

Is this issue resolved ?

 

Can you provide the configuration screenshot for the same ((Custom poller for BGP State change).

 

I am also facing same issue.

 

Regards,

Chetan

Please use plain text.
Occasional Advisor
SangReal
Posts: 14
Registered: ‎07-21-2013
Message 12 of 17 (1,027 Views)

Re: BGP state change alert

Hi David,

 

I configured Custom Poller as suggested but facing the error "MIB Variable requested .1.3.6.1.2.1.15.3.1.2 does not exist on node", though I've tried SNMP walk and it was successful. Attaching screenshot for the sameSNMPwalk.jpg below -

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Please help in resolving below error -

Customnodecollection.jpg

 

Regards,

SYED

Please use plain text.
Occasional Advisor
SangReal
Posts: 14
Registered: ‎07-21-2013
Message 13 of 17 (1,024 Views)

Re: BGP state change alert

Hi David,

 

After doing some changes now NNM has started polling for BGP peer state. Incidents are also being created but information related to peer remote address is not coming. Please help in getting bgppeerremote address in incident.

Attaching snapshot of Incidents created -

BGP Status Incidents.jpg

 

Regards,

SYED

Please use plain text.
Honored Contributor
AndyKemp
Posts: 720
Registered: ‎05-17-2010
Message 14 of 17 (1,013 Views)

Re: BGP state change alert

You need to go to the Cisco.com site and check to see which BGP MIB your device and software supports. If its the RFC 1267 version you will not have the necessary information available as the entire clause that contains it was omitted from it when they did the conversion from SNMPv1 to SNMPv2  in BGP3 .

Have a nice day :)

Andy Kemp,  CISSP
Please use plain text.
Occasional Visitor
Vijethkumar
Posts: 1
Registered: ‎12-20-2013
Message 15 of 17 (842 Views)

Re: BGP state change alert

Hi David,

 

How is it possible to know the AS number of BGP in NNMi when the state change.

 

We are using NNmi 9.22 versin.

 

Thanks

Vijeth kumar

Please use plain text.
Trusted Contributor
mostafa_hassan
Posts: 258
Registered: ‎12-11-2011
Message 16 of 17 (831 Views)

Re: BGP state change alert

If it's Coming with the Trap Attributes ,
All the best .
Saying Thanks by hitting Kudos :)

Regards
Mostafa Hassan
HP AIS NNM-NA-OO
CCNA-CCNP-ITIL-VCA-Cloud-VCA DataCenter
Please use plain text.
Trusted Contributor
mostafa_hassan
Posts: 258
Registered: ‎12-11-2011
Message 17 of 17 (830 Views)

Re: BGP state change alert

Guys ,

 

You can check All Cisco MIB's with device Category ,

 

http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml

 

for All Cisco Traps , check that

 

ftp://ftp.cisco.com/pub/mibs/traps

All the best .
Saying Thanks by hitting Kudos :)

Regards
Mostafa Hassan
HP AIS NNM-NA-OO
CCNA-CCNP-ITIL-VCA-Cloud-VCA DataCenter
Please use plain text.
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation