OmniSwitch Anomalies

Anomaly

Description

BGP Peer State Changed

Notification sent when BGP interface status is updated. The notification contains the OmniSwitch IP Address/Hostname, BGP Peer IP Address.

Rainbow Action: Acknowledge, Ignore

Recommended Action: Acknowledge

BGP Prefix Threshold Reached

Notification sent when OmniSwitch receives from BGP peer a number of prefixes that exceed the limit.

Rainbow Action: Acknowledge, Ignore

Recommended Action: Acknowledge

Chassis Supervision

Notification sent when OmniSwitch Power Supply, Fan or any known hardware defect¹. The notification contains the OmniSwitch IP Address/Hostname and Power Supply/Fan ID when available.

Rainbow Action: Block MAC , Block IP, Disable Port, Ignore

Recommended Action: Block MAC , Block IP

DDoS Attack

When a Denial Of Service Attack is suspected we increase the log verbosity of the task ipv4. In case a Denial Of Service Attack is confirmed a notification with log collection is sent with the OmniSwitch IP Address/Hostname and interface/port number. The notification proposes remediation action (QoS policy rule) to prevent network access. Log verbosity is set back to Info. Once the action is complete, a notification with a summary and log collection is sent.

Rainbow Action: Block MAC, Block IP, DIsable Port
Ignore

Recommended Action: Block MAC, Block IP

ERP Ring state Change

Notification sent when ERP Ring status moves to Protection. The notification contains the OmniSwitch IP Address/Hostname the ERP Ring number, initial state/final state. To limit the number of notifications, we generate a notification only on the first occurrence for a particular Ring ID.

Rainbow Action: Collect Logs, Ignore, Get Logs

Recommended Action: Collect Logs

IP Address Duplication

Notification sent when a Duplicate IP Address is noticed on the OmniSwitch. The notification contains the OmniSwitch IP Address/Hostname and duplicate IP Address. The notification proposes remediation action (QOS Policy) to block the traffic from duplicate IP Address. If a duplicate IP Address is an Essential IP Address (listed in the Essential_IP.csv file) or the corresponding MAC Address matches with an OmniSwitch device, the action is aborted. Once action is complete, a notification with a summary and log collection is sent.

Rainbow Action: Block MAC, Disable Port, Ignore

Recommended Action: Block MAC, Ignore

LinkAgg Down

Notification sent when a port is leaving Link Aggregate or when Link Aggregate is DOWN. The notification contains the OmniSwitch IP Address/Hostname and Aggregate ID/Port number.

Rainbow Action: Collect Logs, Ignore, Get Logs

Recommended Action: Collect Logs

NAAS Licensing Issue

Notification sent when NAAS Licensing status is updated (switch entering into grace period or degraded mode). The notification contains the OmniSwitch IP Address/Hostname and the reason.

Rainbow Action: Acknowledge, Ignore

Recommended Action: Acknowledge

Network Loop

When a Network Loop is suspected we increase the log verbosity of the task bcmd in case the Network Loop is confirmed a notification is sent with the OmniSwitch IP Address/Hostname and interface/port number. The notification proposes remediation action (interface/port admin-state disable) to stop the network loop. Log verbosity is set back to Info. Once the action is complete, a notification with a summary and log collection is sent.

Rainbow Action: Disable port/linkagg
Ignore, Get Logs

Recommended Action: Disable port/linkagg

Network Storm

Notification sent when a Traffic Storm is noticed on an OmniSwitch. This event is triggered when unexpected traffic (unknown unicast, multicast, broadcast) exceeds the flood-limit threshold. The notification proposes remediation action (interface/port admin-state disable) to stop the storm. Once the action is complete, a notification with a summary and log collection is sent.

Rainbow Action: Disable port, Ignore, Get Logs

Recommended Action: Disable port

OmniSwitch Daemon Error

Notification sent when a daemon fails to start on an OmniSwitch. The daemon name and failure reason are collected.

Rainbow Action: Collect Logs, Ignore, Get Logs

Recommended Action: Collect Logs

OmniSwitch High Resources Load

Notification sent when a High CPU issue has been detected on OmniSwitch/a High Memory issue has been detected on OmniSwitch/a High Traffic has been detected on OmniSwitch.

Rainbow Action: Collect Logs, Ignore, Get Logs

Recommended Action: Collect Logs

OmniSwitch Internal Error

Notification sent when a Core Dump is generated by an OmniSwitch's task. The tech_support logs and core dump files are collected.

Rainbow Action: Collect Logs, Ignore, Get Logs

Recommended Action: Collect Logs

OmniSwitch NI Hardware Module Issue

Notification sent when an NI module hardware unit is Down or running abnormally on OmniSwitch.

Rainbow Action: Acknowledge, Ignore

Recommended Action: Acknowledge

OmniSwitch PoE Failure

Notification sent when LANPOWER port in Denied or Fault status is noticed on OmniSwitch. The notification contains the OmniSwitch IP Address/Hostname, port in a faulty state, and the reason. The notification proposes remediation action (lanpower disable or lanpower reload). Once the action is complete, a notification with a summary and log collection is sent.

Rainbow Action: Disable PoE, Toggle PoE, Ignore
Collect Logs

Recommended Action: Disable PoE

OmniSwitch Radius Server Failure

Notification sent when RADUIS Health check noticed the RADIUS server is unreachable. The notification contains the OmniSwitch IP Address/Hostname, the concerned RADIUS profile. 

Rainbow Action: Acknowledge, Ignore

Recommended Action: Acknowledge

OmniSwitch Service Assurance Agent

Notification sent when an OmniSwitch receives a Service Assurance Agent status/Iteration packet loss.

Rainbow Action: Acknowledge, Ignore

Recommended Action: Acknowledge

OmniSwitch Spanning Tree Storm

Notification sent when a Spanning Tree Storm is noticed on an OmniSwitch. The notification contains the OmniSwitch IP Address/Hostname and VLAN ID/Port number.

Rainbow Action: Collect Logs, Ignore, Get Logs

Recommended Action: Collect Logs

OmniSwitch STP disabled

Notification sent when an OmniSwitch with Spanning-Tree Running Mode is per VLAN has detected the STP is not enabled for that VLAN.

Rainbow Action: Enable STP, Ignore, Get Logs

Recommended Action: Enable STP,

OmniSwitch User Authentication Failure

Notification sent when an authentication failure is noticed or when an IP Address is added in the Banned list on an OmniSwitch. Notification may contain the source protocol, user login or/and the source IP Address.

Rainbow Action: Acknowledge, Ignore

Recommended Action: Acknowledge

OmniVista Unreachable

An OmniVista Unreachable Notification is sent for one of the following reasons:

• An OmniSwitch cannot resolve the OV Cirrus Activation Server FQDN

• An OmniSwitch contacted the OV Cirrus Activation Server, but the Serial Number does not exist in the Device Catalog

• An OmniSwitch cannot reach the OV Cirrus Activation Server

• An OmniSwitch OPENVPN Tunnel was not established because of TLS error

 Rainbow Action: Disable could-agent
Ignore, Restart cloud-agent, Get Logs

Recommended Action: Restart cloud-agent

OSPF Bad LSA Message

The error messages are logged due to the Grace LSAs received by the OmniSwitch from its neighbor(s) which it is unable to understand/interpret and generates the error logs.

Rainbow Action: Acknowledge, Ignore

Recommended Action: Acknowledge

OSPF LSA Message Size Exceeds MTU

OmniSwitch OSPF neighbor status is set to Load state as LSA received from Neighbor oversize the MTU value. Note that as of AOS 8.5.R01 OmniSwitch fragments the OSPF LSAs packet when it crosses the outgoing IP interface MTU size.

Rainbow Action: Acknowledge, Ignore

Recommended Action: Acknowledge

OSPF Neighbor State Change

Notification sent when OSPF interface status is updated. The notification contains the OmniSwitch IP Address/Hostname, Neighbor IP Address.

Rainbow Action: Acknowledge, Ignore

Recommended Action: Acknowledge

Perpetual PoE and Fast PoE Support

Notification sent when we detect an OmniSwitch does not have the correct FPGA version to support Perpetual PoE or Fast PoE.

Rainbow Action: Acknowledge, Ignore

Recommended Action: Acknowledge

Port Flapping

Notification sent when a Port Flapping is observed on an OmniSwitch.  The notification proposes remediation action (interface/port admin-state disable) to stop port flapping. Once the action is complete, a notification with a summary and log collection is sent.

Rainbow Action: Toggle Port, Disable Port, Acknowledge, Ignore

Recommended Action: Toggle Port is not Uplink

Port Violation

Notification sent when a port violation is noticed on an OmniSwitch. The notification contains the OmniSwitch IP Address/Hostname, interface/port number, and violation reason (LBD, QOS, Link Monitoring, etc.). The notification proposes remediation action (clear violation port) for clearing the violation. Once the action is complete, a notification with a summary and log collection is sent.

Rainbow Action: Clear violation, Ignore, Disable Port

Recommended Action: Clear violation

SFP Port Threshold Violation

Notification sent when Digital Diagnostics Monitoring exceeds the threshold. The notification contains the OmniSwitch IP Address/Hostname, SFP interface/port number, the alarm type and value.

Rainbow Action: Acknowledge, Ignore, Get Logs

Recommended Action: Acknowledge

SPB Adjacent State Change

Notification sent when SPB adjacent OmniSwitch is unreachable. The notification contains the OmniSwitch IP Address/Hostname, Adjacent OmniSwitch System ID, interface/port number.

Rainbow Action: Acknowledge, Ignore, Get Logs

Recommended Action: Acknowledge

TCAM Exceptions

Notification sent when one of the following TCAM issues occurs

• Attempt to delete a rule which ID can't be found

• Attempt to create a rule while memory is full

 Rainbow Action: Acknowledge, Ignore

Recommended Action: Acknowledge

VFL Link DOWN

Notification sent when VFL interface status is DOWN. The notification contains the OmniSwitch IP Address/Hostname, Chassis/Slot and VFL Port.

Rainbow Action: Acknowledge, Ignore

Recommended Action: Acknowledge

Virtual Chassis Takeover

Notification sent when an action is executed on a Virtual Chassis (takeover, reload, unit down). The notification contains the OmniSwitch IP Address/Hostname, action, and unit ID (depending on the use case).

Rainbow Action: Acknowledge, Ignore

Recommended Action: Acknowledge

BGP Unknown Attribute

Notification sent when an unknown attribute that is not supported by OmniSwitch is detected. User is Notified and requested to check and stop the remote device sending this attribute. 

Rainbow Action: NA

Recommended Action: NA

ARP Limit Reached

Notification message inform user that the ARP limit is reached. The user is requested to either collect logs for SR  creation or to ignore this notification. If uptime is greater than 240 days info that this issue is fixed in 89R04 will be displayed,

Rainbow Action: Collect Logs, Ignore, Get Logs

Recommended Action: Collect Logs

Virtual Chassis Split

If a VC split happens, automatically the front panel ports of slave unit will turn off entering in protection state to avoid loop. User will be notified, and logs will be collected.

*VCSP must be configured

Rainbow Action: Acknowledge, Ignore

Recommended Action: Acknowledge

POE Budget Exceeded

Notification sent when LANPOWER budget is exceeded. The notification proposes remediation action (lanpower disable or lanpower reload). Once action is complete, a notification with a summary and log collection is sent.

Rainbow Action: Reload PoE, ignore

Recommended Action: Reload PoE

POE Port Undefined

Notification sent when LANPOWER port in Denied or Fault status is noticed on OmniSwitch. The notification contains the OmniSwitch IP Address/Hostname, port in faulty state and reason. The notification proposes remediation action (lanpower disable or lanpower reload). Once action is complete, a notification with a summary and log collection is sent.

Rainbow Action: Reload PoE, ignore

Recommended Action: Reload PoE

POE Improper Capacitor

Notification sent when PoE port detect an Improper Capacitor Detection. The notification proposes remediation action (lanpower disable or lanpower reload). Once action is complete, a notification with a summary and log collection is sent.

Rainbow Action: Reload PoE, ignore

Recommended Action: Reload PoE

POE Short Condition

Notification sent when PoE port detect a Short Circuit.The notification proposes remediation action (lanpower disable or lanpower reload). Once action is complete, a notification with a summary and log collection is sent.

Rainbow Action: Reload PoE, ignore

Recommended Action: Reload PoE