suppress specific traps on Netsight server

  • 0
  • 1
  • Question
  • Updated 2 years ago
  • Answered
we have in our network nearly 500 Switches. Unfortunately EXOS sending to every netlogin process (login and logout) an trap. To disable this on the switch is currently (16.1.x) not possible. So the trap log is overloaded and the really important traps are out of sight.

I am looking now for a way to suppress or discard this specific traps (oid) on the netsight trap daemon.

Is there a way ? if yes how ?
Photo of M.Nees

M.Nees, Embassador

  • 9,126 Points 5k badge 2x thumb

Posted 2 years ago

  • 0
  • 1
Photo of aloeffle

aloeffle

  • 934 Points 500 badge 2x thumb

Hello Matthias.

you can use the "Filter" settings in Trap-View of NetSight Console.

Klick the "Traps" tap and then the orange wrench. Now you can filter what you want to see or not.



hth

Alex

(Edited)
Photo of M.Nees

M.Nees, Embassador

  • 9,126 Points 5k badge 2x thumb
I know this function - it is excellent to find or filter for something (i hope this function will be available in NS V7.X).

But the above mentioned netlogin traps expand and blow up my trap log.
Because i am not interesseted on that kind trap i want to discard them directly a the trap daemon level.

i hope someone can tell me how this can be done with netsight. 
Photo of Tony Thornton

Tony Thornton, Extreme Alumnus

  • 1,412 Points 1k badge 2x thumb
Hi Matthias,

Not sure how to do this in NetSight natively, but there may be an alternative you can do on the switches:

To exclude netlogin user logout traps from being sent to NMS:
conf snmpv3 add mib-view defaultnetofyview subtree 1.3.6.1.4.1.1916.4.3.0.5 type exclude 

To prevent netlogin user login traps from being sent to NMS:

conf snmpv3 add mib-view defaultnetofyview subtree 1.3.6.1.4.1.1916.4.3.0.4 type exclude 

You would need to push these 2 commands to each switch using NetSight or another script.

Regards
Tony
Photo of M.Nees

M.Nees, Embassador

  • 9,126 Points 5k badge 2x thumb
it seems there is no way to do that on netsight trap daemon ;-((

With EXOS switches the exclude filter is one alternative - in which i have to reconfigure 500 switches ...

But what is a possibility for EOS Switches ?

i think that 's call for a new feature at netsight trap daemon.
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 45,044 Points 20k badge 2x thumb
You'd create a new script in Extreme Management Center and then deploy in on all 500 switches with just a click ... or two :-)
Photo of Tony Thornton

Tony Thornton, Extreme Alumnus

  • 1,412 Points 1k badge 2x thumb
Unfortunately,  I don't know about how to do that with EOS devices.  Maybe another forum user has insight into doing that for EOS.
Photo of Erik Auerswald

Erik Auerswald, Embassador

  • 12,782 Points 10k badge 2x thumb
The relevant configuration command for EOS seems to be
set multiauth trap
(not actually tested, but this could be a starting point for further investigation).
Photo of M.Nees

M.Nees, Embassador

  • 9,126 Points 5k badge 2x thumb
Hi Erik,

thanks for your advice - great.

This CLI Command is avaiable on both - SecureStack and S-Series!