Monitoring Alarms : Understanding Alarms

Understanding Alarms
This section defines the four alarm severity categories and lists all Silver Peak appliance alarms.
The Alarms - Current Alarms page lists alarm conditions on the appliance. Each entry represents one current condition that may require human intervention. Because alarms are conditions, they may come and go without management involvement.
Whereas merely acknowledging most alarms does not clear them, some alarm conditions are set up to be self-clearing when you acknowledge them. For example, if you remove a hard disk drive, it generates an alarm; once you’ve replaced it and it has finished rebuilding itself, the alarm clears.
Categories of Alarms
The Appliance Manager categorizes alarms at four preconfigured severity levels: Critical, Major, Minor, and Warning.
n
Critical and Major alarms are both service-affecting. Critical alarms require immediate attention, and reflect conditions that affect an appliance or the loss of a broad category of service.
n
Major alarms, while also service-affecting, are less severe than Critical alarms. They reflect conditions which should be addressed in the next 24 hours. An example would be an unexpected traffic class error.
n
Minor alarms are not service-affecting, and you can address them at your convenience. An example of a minor alarm would be a user not having changed their account’s default password, or a degraded disk.
n
Warnings are also not service-affecting, and warn you of conditions that may become problems over time. For example, a software version mismatch.
Types of Alarms
The appliance can raise alarms based on issues with tunnels, software, equipment, and Threshold Crossing Alerts (TCAs). The latter are visible on the appliance but managed by the GMS (Global Management System).
Although Appliance Manager doesn’t display Alarm Type ID (Hex) codes, the data is available for applications that can do their own filtering, such as SNMP.
Alarm Type ID (Hex)
Alarm Severity
RESOLUTION: Tunnel peers are running incompatible software versions.
RESOLUTION: Cannot reach tunnel peer.
Check tunnel configuration
[Admin state, Source IP/Dest IP, IPsec]
RESOLUTION: Check for tunnel encapsulation mismatch.
Duplicate license detected in peer
(only applies to virtual appliance)
RESOLUTION: Install unique license on all virtual appliances. To check and/or change license:
In GMS: Initial Configuration page at Configuration > System (Single Appliance)
In WebUI: Configuration - System page
RESOLUTION: System ID is not unique.
Physical Appliance: Change System ID in the rare case of a duplicate ID (CLI command: system id < >)
RESOLUTION: Upgrade all connected appliances for full optimization.
RESOLUTION: Tunnel are not running the same release of software. They will function, but with reduced functionality.
RESOLUTION: Enter a new license.
RESOLUTION: Enter a valid license.
RESOLUTION: Enter a new license key on the <System Page> to proceed.
RESOLUTION: Enter a new license key on the <System Page> to avoid loss of optimization or potential traffic disruption.
RESOLUTION: Reboot the appliance. Traffic will not be optimized until this is performed.
Significant change in time of day has occurred, and might compromise statistics. Please contact TAC.
RESOLUTION: Appliance statistics could be missing for a substantial period of time. Contact Customer Service.
RESOLUTION: Contact Customer Service.
RESOLUTION: Create an additional bridge and use previous second WAN next-hop as its WAN next-hop.
NOTE: Second Silver Peak requires another IP address that is in the same network as the first bridge.
RESOLUTION: New QoS traffic class/Queue configuration has changed from a tunnel-based QoS system to one based on the system/WAN interface. Automatic mapping of existing tunnel traffic class configuration to new QoS Shaper traffic has failed. Check QoS Shaper configuration and adjust Traffic Class settings as necessary.
RESOLUTION: IP Header configuration has moved from tunnel context to the Optimization Policy. Use Optimization Policy to disable IP Header compression.
RESOLUTION: Enter a new license key on the <System Page> to avoid loss of optimization or potential traffic disruption.
Software
(cont.)
RESOLUTION: The SSL certificate has a future start date. It will correct itself when the future date becomes current. Otherwise, install a certificate that is current.
RESOLUTION: Reinstall a valid SSL certificate that is current.
RESOLUTION: Check the appliance’s NTP server IP and version configuration:
RESOLUTION: The key is not an RSA standard key that meets the minimum requirement of 1024 bits. Regenerate a key that meets this minimum requirement.
RESOLUTION: No action required. Current system is capable of using multiple WAN next-hops. It routes tunnel traffic to tunnel’s source IP interface’s WAN next-hop.
RESOLUTION: New QoS traffic class/Queue configuration has changed from a tunnel-based QoS system to one based on the system/WAN interface. Automatic mapping of existing tunnel traffic class configuration to new QoS Shaper traffic has failed. Check QoS Shaper configuration and adjust Traffic Class settings as necessary.
RESOLUTION: Subnet sharing/advertisement module has detected a network mask of less than 8 bits. Verify your configured subnets in the Configuration > Subnets page.
RESOLUTION: Contact Customer Service.
RESOLUTION: Contact Customer Service.
RESOLUTION: Assign more memory to the virtual machine, and restart the appliance. Traffic will not be optimized until this is resolved.
RESOLUTION: Assign more processors to the virtual machine, and restart the appliance. Traffic will not be optimized until this is resolved.
Equipment (cont.)
RESOLUTION: Assign more storage to the virtual machine, and restart the appliance. Traffic will not be optimized until this is resolved.
RESOLUTION: Contact Customer Service.
RESOLUTION: Contact Customer Service.
RESOLUTION: Normal with factory default configuration, during reboot, and if user has put the appliance in Bypass mode. Contact Customer Service if the condition persists.
RESOLUTION: Check interface speed/duplex settings and negotiated values on wan0/wan1 and lan0/lan1 etherchannel groups.
RESOLUTION: Normal during disk replacement. Insert disk using UI/GMS. Contact Customer Service if insertion fails.
RESOLUTION: Contact Customer Service to replace disk.
RESOLUTION: Check speed/duplex settings on the router/switch port.
Equipment (cont.)
LAN next-hop unreachable2
RESOLUTION: Check appliance configuration:
RESOLUTION: Check cables and connectivity. For example, if lan0 is shut down, check why wan0 is down. Applicable only to in-line (bridge) mode.
RESOLUTION: Check interface admin configuration for lan0/wan0 (and lan1/wan1). Applicable only to in-line mode.
RESOLUTION: Check interface configured speed settings and current values (an0/wan0, lan1/wan1). Applicable only to in-line mode.
RESOLUTION: Is the system in Bypass mode?
RESOLUTION: Power issues? Was the appliance shutdown ungracefully? Contact Customer Service if the shutdown was not planned.
RESOLUTION: Check the interface. Is the link down?
Equipment (cont.)
Check IP/mask on Silver Peak appliance and router. Next-hop should be only a single IP hop away.
To troubleshoot, use:
show cdp neighbor,
show arp,
and ping -I <appliance IP> <next-hop IP>.
RESOLUTION: Cannot establish WCCP neighbor:
Enable debugging on router: debug ip wccp packet
RESOLUTION: Check WCCP mask/hash assignment configuration on all Silver Peak appliances and ensure that they match.
RESOLUTION: Wait for disk to recover. If it does not recover, contact Customer Service.
RESOLUTION: Normal. If rebuilding is unsuccessful, contact Customer Service.
RESOLUTION: Contact Customer Service to replace disk.
RESOLUTION: Check Silver Peak interface configuration.
RESOLUTION: VRRP state has changed from Master to Backup.
Threshold Crossing Alerts (TCAs)
The average WAN–side transmit throughput of X Mbps over the last minute [exceeded, fell below] the threshold of Y Mbps
RESOLUTION: User configured. Check bandwidth reports for tunnel bandwidth.
The average LAN–side receive throughput of X Mbps over the last minute [exceeded, fell below] the threshold of Y Mbps
RESOLUTION: User configured. Check bandwidth reports.
Threshold Crossing Alerts (TCAs)
(cont.)
The total number of X optimized flows at the end of the last minute [exceeded, fell below] the threshold of Y
RESOLUTION: User configured. Check flow and real-time connection reports.
The total number of X flows at the end of the last minute [exceeded, fell below] the threshold of Y
RESOLUTION: User configured. Check flow and real-time connection reports.
RESOLUTION: Contact Customer Service.
RESOLUTION: User configured.
Check Latency Reports. If latency is too high, check routing between the appliances and QoS policy on upstream routers.
The average pre-FEC loss of X% over the last minute [exceeded, fell below] the threshold of Y%
RESOLUTION: User configured.
The average post-FEC loss of X% over the last minute [exceeded, fell below] the threshold of Y%
RESOLUTION: User configured.
The average pre-POC out-of-order packets of X% over the last minute [exceeded, fell below] the threshold of Y%
RESOLUTION: User configured.
Threshold Crossing Alerts (TCAs)
(cont.
The average post-POC out-of-order packets of X% over the last minute [exceeded, fell below] the threshold of Y%
RESOLUTION: User configured.
The average tunnel utilization of X% over the last minute [exceeded, fell below] the threshold of Y%
RESOLUTION: User configured.
The average tunnel reduction of X% over the last minute [exceeded, fell below] the threshold of Y%
RESOLUTION: User configured.
The total number of flows <num-of-flows> is approaching the capacity of this appliance. Once the capacity is exceeded, new flows will be <dropped|bypassed>.
RESOLUTION: If this condition persists, a larger appliance will be necessary to fully optimize all flows.

1

2
If there is either a LAN Next-Hop Unreachable or WAN Next-Hop Unreachable alarm, resolve the alarm(s) immediately by configuring the gateway(s) to respond to ICMP pings from the Silver Peak appliance IP Address.


Please send comments or suggestions regarding user documentation to techpubs@silver-peak.com.