Alarms¶
NETCONF alarms can be configured on Virtual Service Router. Those alarms are triggered when an event occurs on the system, for instance when a configured service or interface goes down.
When an alarm is triggered or cleared, a NETCONF notification is sent, and the alarm status change is stored. Then, when the problem is resolved, the alarm will clear itself.
The alarms are enabled by default.
System alarms¶
Here is a configuration that will ensure that only the last four status changes are stored, and that all state changes are notified.
vsr running config# / system alarm max-alarm-status-changes 4
vsr running config# / system alarm notify-status-changes all-state-changes
To show the list of available alarms, use show alarm inventory
or show state
system alarm alarm-inventory
.
vsr> show alarm inventory
show-alarm-inventory
alarm-type service-alarm ipv6-autoconf
description "Monitor the ipv6-autoconf service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type link-alarm bridge
description "Monitor the bridge link status. A link is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm certificate-expiration
description "Monitor the certificate expiration."
will-clear true
severity-level major
severity-level critical
..
alarm-type service-alarm dhcp-relay
description "Monitor the dhcp-relay service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm dhcp-server
description "Monitor the dhcp-server service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm dns-server
description "Monitor the dns-server service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type capacity-alarm fp-if
description "Monitor the fp-if capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm fp-vrf
description "Monitor the fp-vrf capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm ip-neigh
description "Monitor the ip-neigh capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm ip-nexthop-groups
description "Monitor the ip-nexthop-groups capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm ip4-addr
description "Monitor the ip4-addr capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm ip4-route
description "Monitor the ip4-route capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm ip6-addr
description "Monitor the ip6-addr capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm ip6-route
description "Monitor the ip6-route capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm pbr-rule
description "Monitor the pbr-rule capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm filter4-rule
description "Monitor the filter4-rule capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm filter4-ct
description "Monitor the filter4-ct capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm filter6-rule
description "Monitor the filter6-rule capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm filter6-ct
description "Monitor the filter6-ct capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm filter-ipset
description "Monitor the filter-ipset capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm vxlan-port
description "Monitor the vxlan-port capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm vxlan-if
description "Monitor the vxlan-if capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm vxlan-fdb
description "Monitor the vxlan-fdb capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm ipsec-sp
description "Monitor the ipsec-sp capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm ipsec-sa
description "Monitor the ipsec-sa capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm ip-lpm-table
description "Monitor the ip-lpm-table capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm ip-lpm-memory
description "Monitor the ip-lpm-memory capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm vlan-if
description "Monitor the vlan-if capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm vlan-lower-if
description "Monitor the vlan-lower-if capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm macvlan-if
description "Monitor the macvlan-if capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm gre-if
description "Monitor the gre-if capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm svti-if
description "Monitor the svti-if capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm pppoe-channel
description "Monitor the pppoe-channel capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm ipoe-session
description "Monitor the ipoe-session capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm mpls-route
description "Monitor the mpls-route capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm mpls-lwt
description "Monitor the mpls-lwt capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm qos-schedulers
description "Monitor the qos-schedulers capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm qos-classifiers
description "Monitor the qos-classifiers capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm qos-queues
description "Monitor the qos-queues capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm bridge-if
description "Monitor the bridge-if capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm bridge-ports
description "Monitor the bridge-ports capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm bridge-fdb
description "Monitor the bridge-fdb capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm fp-conntracks
description "Monitor the fp-conntracks capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm gtp-if
description "Monitor the gtp-if capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm gtp-pdp
description "Monitor the gtp-pdp capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm gtp-qos-flow
description "Monitor the gtp-qos-flow capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm gtp-qos-policy
description "Monitor the gtp-qos-policy capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm tc-policers
description "Monitor the tc-policers capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm pmtud-entries
description "Monitor the pmtud-entries capacity status."
will-clear true
severity-level major
..
alarm-type service-alarm fast-path
description "Monitor the fast-path service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type link-alarm gre
description "Monitor the gre link status. A link is monitored only if configured."
will-clear true
severity-level major
..
alarm-type link-alarm gretap
description "Monitor the gretap link status. A link is monitored only if configured."
will-clear true
severity-level major
..
alarm-type link-alarm ipip
description "Monitor the ipip link status. A link is monitored only if configured."
will-clear true
severity-level major
..
alarm-type link-alarm lag
description "Monitor the lag link status. A link is monitored only if configured."
will-clear true
severity-level major
..
alarm-type capacity-alarm linux-memory
description "Monitor the linux-memory capacity status."
will-clear true
severity-level major
..
alarm-type service-alarm lldp
description "Monitor the lldp service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm syslog
description "Monitor the syslog service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type link-alarm loopback
description "Monitor the loopback link status. A link is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm netconf-snmp
description "Monitor the netconf-snmp service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm ntp
description "Monitor the ntp service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type link-alarm physical
description "Monitor the physical link status. A link is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm snmp
description "Monitor the snmp service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm ssh-server
description "Monitor the ssh-server service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type link-alarm veth
description "Monitor the veth link status. A link is monitored only if configured."
will-clear true
severity-level major
..
alarm-type link-alarm vlan
description "Monitor the vlan link status. A link is monitored only if configured."
will-clear true
severity-level major
..
alarm-type link-alarm vxlan
description "Monitor the vxlan link status. A link is monitored only if configured."
will-clear true
severity-level major
..
alarm-type link-alarm xvrf
description "Monitor the xvrf link status. A link is monitored only if configured."
will-clear true
severity-level major
..
alarm-type capacity-alarm cg-nat-nat
description "Monitor the cg-nat-nat capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm cg-nat-users
description "Monitor the cg-nat-users capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm cg-nat-blocks
description "Monitor the cg-nat-blocks capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm cg-nat-pools
description "Monitor the cg-nat-pools capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm cg-nat-rules
description "Monitor the cg-nat-rules capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm cg-nat-block-translation-ips
description "Monitor the cg-nat-block-translation-ips capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm cg-nat-port-translation-ips
description "Monitor the cg-nat-port-translation-ips capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm ddos-protection-entries
description "Monitor the ddos-protection-entries capacity status."
will-clear true
severity-level major
..
alarm-type service-alarm embedded
description "Monitor the confirm pending leaf that tells when a reboot is scheduled."
will-clear true
severity-level major
..
alarm-type capacity-alarm fp-firewall-rules
description "Monitor the fp-firewall-rules capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm fp-firewall-network-groups
description "Monitor the fp-firewall-network-groups capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm fp-firewall-networks
description "Monitor the fp-firewall-networks capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm fp-firewall-applications
description "Monitor the fp-firewall-applications capacity status."
will-clear true
severity-level major
..
alarm-type service-alarm ha-neighbor
description "Monitor the ha-neighbor service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm ha-conntrack
description "Monitor the ha-conntrack service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type capacity-alarm ipfix-flows
description "Monitor the ipfix-flows capacity status."
will-clear true
severity-level major
..
alarm-type capacity-alarm ipfix-probes
description "Monitor the ipfix-probes capacity status."
will-clear true
severity-level major
..
alarm-type service-alarm ipfix
description "Monitor the ipfix service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm ipoe-server
description "Monitor the ipoe-server service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm license
description "Monitor the license service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm license-connected
description "Monitor the license server connectivity."
will-clear true
severity-level warning
severity-level minor
severity-level major
severity-level critical
..
alarm-type service-alarm license-valid
description "Monitor the license validity."
will-clear true
severity-level critical
..
alarm-type service-alarm ppp-server
description "Monitor the ppp-server service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type link-alarm pppoe
description "Monitor the pppoe link status. A link is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm bgp
description "Monitor the bgp service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm isis
description "Monitor the isis service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm ldp
description "Monitor the ldp service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm nhrp
description "Monitor the nhrp service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm ospf
description "Monitor the ospf service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm ospf6
description "Monitor the ospf6 service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm rip
description "Monitor the rip service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm ripng
description "Monitor the ripng service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm pim
description "Monitor the pim service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm ike
description "Monitor the ike service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type link-alarm svti
description "Monitor the svti link status. A link is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm sflow
description "Monitor the sflow service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm twamp-server
description "Monitor the twamp-server service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm twamp-client
description "Monitor the twamp-client service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type link-alarm gtp
description "Monitor the gtp link status. A link is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm pfcp
description "Monitor the pfcp service status. A service is monitored only if configured."
will-clear true
severity-level major
..
alarm-type link-alarm vrrp
description "Monitor the vrrp link status. A link is monitored only if configured."
will-clear true
severity-level major
..
alarm-type service-alarm vrrp
description "Monitor the vrrp service status. A service is monitored only if configured."
will-clear true
severity-level major
..
..
To show the list of alarms that have been triggered on the system, use show
alarm list
or show state system alarm alarm-list
. Let’s trigger an alarm to
be shown.
vsr running config# / vrf main interface loopback lo1 ipv4 address 1.1.1.1/24
vsr> show alarm list
show-alarm-list
number-of-alarms 1
last-changed 2025-04-07T17:49:27.122589+02:00
alarm "/vrf[name=\"main\"]/interface/loopback[name=\"lo1\"]/enabled" link-alarm loopback
time-created 2025-04-07T17:49:26.988120+02:00
is-cleared true
last-raised 2025-04-07T17:49:26.988116+02:00
last-changed 2025-04-07T17:49:27.122589+02:00
perceived-severity major
alarm-text "The lo1 loopback is up as configured in vrf main."
status-change 2025-04-07T17:49:27.122589+02:00
perceived-severity cleared
alarm-text "The lo1 loopback is up as configured in vrf main."
..
status-change 2025-04-07T17:49:26.988116+02:00
perceived-severity major
alarm-text "The lo1 loopback is unknown when configured up in vrf main."
..
..
..
To show a summary of the alarm state, use show alarm summary
, or show state
system alarm summary
.
vsr> show alarm summary
show-alarm-summary
alarm-summary indeterminate
total 0
not-cleared 0
cleared 0
..
alarm-summary warning
total 0
not-cleared 0
cleared 0
..
alarm-summary minor
total 0
not-cleared 0
cleared 0
..
alarm-summary major
total 1
not-cleared 0
cleared 1
..
alarm-summary critical
total 0
not-cleared 0
cleared 0
..
..
The alarms can be compressed (i.e. only the last status change is kept) using
the cmd compress-alarm
command. They can be removed using the flush alarm
command.
See also
The Automation section of the User Guide to learn how to subscribe to notifications.
Note
The alarms are purged after a reboot or a restart of the management system.
The same configuration can be made using this NETCONF XML configuration:
vsr> show config xml absolute / system alarm
<config xmlns="urn:6wind:vrouter">
<system xmlns="urn:6wind:vrouter/system">
<alarm xmlns="urn:6wind:vrouter/alarm">
<enabled>true</enabled>
<max-alarm-status-changes>4</max-alarm-status-changes>
<notify-status-changes>all-state-changes</notify-status-changes>
</alarm>
</system>
</config>
Override system alarms¶
The system alarms are enabled by default. Their configuration can be overriden. The autocompletion feature suggests the valid system alarm names during configuration.
To disable the dhcp-relay service alarm.
vsr running config# / system alarm service-alarm dhcp-relay enabled false
To override the fp-vrf capacity alarm.
vsr running config# / system alarm capacity-alarm fp-vrf severity-level-trigger major range-min 90 range-max 100
Note
It is possible to create a system alarm with an arbitrary name, but it will not be taken into account.
User alarms¶
As mentioned above, static alarms are automatically generated at startup. With user alarms, it is possible to manually configure alarms offering enhanced customization and flexibility in alert management.
In this example, an alarm is triggered when an ICMP tracker named ICMP-TRACKER goes down.
First, purge any residual alarm, and create a loopback interface with its tracker as well as the alarm configuration:
vsr> flush alarm alarm-clearance-status any
purge-alarm
purged-alarms 1
..
vsr running config# / vrf main interface loopback lo1 ipv4 address 1.1.1.1/24
vsr running config# / tracker icmp ICMP-TRACKER address 1.1.1.1 vrf main
vsr running config# / system alarm user-alarm icmp-tracker-down description "Alarm raising when the ICMP tracker ICPM-TRACKER goes down."
vsr running config#! / system alarm user-alarm icmp-tracker-down resource "/tracker/icmp[name='ICMP-TRACKER']/state"
vsr running config#! / system alarm user-alarm icmp-tracker-down severity-level-trigger critical text "Tracker ICMP-TRACKER {value}, alarm {name}"
vsr running config# / system alarm user-alarm icmp-tracker-down severity-level-trigger critical equal down
vsr running config# / system alarm user-alarm icmp-tracker-down severity-level-trigger cleared text "Tracker ICMP-TRACKER {value}"
vsr> show state / system alarm user-alarm
user-alarm icmp-tracker-down
enabled true
severity-level-trigger critical
text "Tracker ICMP-TRACKER {value}, alarm {name}"
equal down
..
severity-level-trigger cleared
text "Tracker ICMP-TRACKER {value}"
..
resource "/tracker/icmp[name='ICMP-TRACKER']/state"
description "Alarm raising when the ICMP tracker ICPM-TRACKER goes down."
..
Note
The path to the resource must contain outer quotes if it contains any inside as in our example. Otherwise, the inner quotes will be deleted by nc-cli and the path will become incorrect.
Then, disable the interface to trigger the alarm:
vsr running config# / vrf main interface loopback lo1 enabled false
vsr> show alarm list
show-alarm-list
number-of-alarms 2
last-changed 2025-04-07T17:49:31.453250+02:00
alarm "/vrf[name=\"main\"]/interface/loopback[name=\"lo1\"]/enabled" link-alarm loopback
time-created 2025-04-07T17:49:31.311502+02:00
is-cleared true
last-raised 2025-04-07T17:49:31.311497+02:00
last-changed 2025-04-07T17:49:31.445008+02:00
perceived-severity major
alarm-text "The lo1 loopback is down as configured in vrf main."
status-change 2025-04-07T17:49:31.445008+02:00
perceived-severity cleared
alarm-text "The lo1 loopback is down as configured in vrf main."
..
status-change 2025-04-07T17:49:31.311497+02:00
perceived-severity major
alarm-text "The lo1 loopback is up when configured down in vrf main."
..
..
alarm "/vrouter:state/vrouter-tracker:tracker/vrouter-pm:icmp[name='ICMP-TRACKER']/state" user-alarm icmp-tracker-down
time-created 2025-04-07T17:49:31.453255+02:00
is-cleared false
last-raised 2025-04-07T17:49:31.453250+02:00
last-changed 2025-04-07T17:49:31.453250+02:00
perceived-severity critical
alarm-text "Tracker ICMP-TRACKER down, alarm icmp-tracker-down"
status-change 2025-04-07T17:49:31.453250+02:00
perceived-severity critical
alarm-text "Tracker ICMP-TRACKER down, alarm icmp-tracker-down"
..
..
..
And finally, reenable the interface to clear the alarm:
vsr running config# / vrf main interface loopback lo1 enabled true
vsr> show alarm list
show-alarm-list
number-of-alarms 2
last-changed 2025-04-07T17:49:32.745723+02:00
alarm "/vrf[name=\"main\"]/interface/loopback[name=\"lo1\"]/enabled" link-alarm loopback
time-created 2025-04-07T17:49:31.311502+02:00
is-cleared true
last-raised 2025-04-07T17:49:32.604546+02:00
last-changed 2025-04-07T17:49:32.736412+02:00
perceived-severity major
alarm-text "The lo1 loopback is up as configured in vrf main."
status-change 2025-04-07T17:49:32.736412+02:00
perceived-severity cleared
alarm-text "The lo1 loopback is up as configured in vrf main."
..
status-change 2025-04-07T17:49:32.604546+02:00
perceived-severity major
alarm-text "The lo1 loopback is down when configured up in vrf main."
..
status-change 2025-04-07T17:49:31.445008+02:00
perceived-severity cleared
alarm-text "The lo1 loopback is down as configured in vrf main."
..
status-change 2025-04-07T17:49:31.311497+02:00
perceived-severity major
alarm-text "The lo1 loopback is up when configured down in vrf main."
..
..
alarm "/vrouter:state/vrouter-tracker:tracker/vrouter-pm:icmp[name='ICMP-TRACKER']/state" user-alarm icmp-tracker-down
time-created 2025-04-07T17:49:31.453255+02:00
is-cleared true
last-raised 2025-04-07T17:49:31.453250+02:00
last-changed 2025-04-07T17:49:32.745723+02:00
perceived-severity critical
alarm-text "Tracker ICMP-TRACKER up"
status-change 2025-04-07T17:49:32.745723+02:00
perceived-severity cleared
alarm-text "Tracker ICMP-TRACKER up"
..
status-change 2025-04-07T17:49:31.453250+02:00
perceived-severity critical
alarm-text "Tracker ICMP-TRACKER down, alarm icmp-tracker-down"
..
..
..
The same configuration can be made using this NETCONF XML configuration:
vsr> show config xml absolute / system alarm
<config xmlns="urn:6wind:vrouter">
<system xmlns="urn:6wind:vrouter/system">
<alarm xmlns="urn:6wind:vrouter/alarm">
<enabled>true</enabled>
<max-alarm-status-changes>4</max-alarm-status-changes>
<notify-status-changes>all-state-changes</notify-status-changes>
<user-alarm>
<alarm-type-qualifier>icmp-tracker-down</alarm-type-qualifier>
<enabled>true</enabled>
<severity-level-trigger>
<severity-level-id>critical</severity-level-id>
<text>Tracker ICMP-TRACKER {value}, alarm {name}</text>
<equal>down</equal>
</severity-level-trigger>
<severity-level-trigger>
<severity-level-id>cleared</severity-level-id>
<text>Tracker ICMP-TRACKER {value}</text>
</severity-level-trigger>
<resource>/tracker/icmp[name='ICMP-TRACKER']/state</resource>
<description>Alarm raising when the ICMP tracker ICPM-TRACKER goes down.</description>
</user-alarm>
</alarm>
</system>
</config>
See also
The command reference for details.