List of switch SNMP trap events

This section lists the switch SNMP trap events that can be viewed in the Lenovo XClarity Administrator event log or audit log.

Table 1 lists SNMP traps from supported RackSwitch and Flex switches that can be included in the event log. Each SNMP trap ID is prefixed with the ID for the switch model.

Table 2 lists events from supported Flex switches that can be included in the audit log.

Table 3 lists events from supported Lenovo ThinkSystem DB series switches that can be included in the event log. Note that some traps might be disabled on your switch. XClarity Administrator does not received events for disabled traps. To determine which traps are enabled or disabled, run the following command on the switch: snmpconfig --show mibcapability. To enable the traps, run the following command on the switch: snmpconfig –set mibcapability.

Table 1. SNMP traps in the event log for RackSwitch and Flex switches
Trap ID Severity Automatically Notify Support Message text and description
x.x.x.x.x.x.x.x.x.x.3.0.1 Error Yes Power supply ID: {0}, Name: {1}, State: {2} has failed.

This trap signifies that a power supply has failed.

Arguments:

  • {0}. The power supply ID

  • {1}. The power supply name

  • {2}. The power supply state

x.x.x.x.x.x.x.x.x.x.3.0.2 Informational No Power supply ID: {0}, Name: {1}, State: {2} has been restored.

This trap signifies that a power supply has been restored.

Arguments:

  • {0}. The power supply ID

  • {1}. The power supply name

  • {2}. The power supply state

x.x.x.x.x.x.x.x.x.x.3.0.3 Error Yes Fan ID: {0}, Name: {1}, State: {2}, Speed (RPM): {3} has failed.

This trap signifies that a fan failure has been detected.

Arguments:

  • {0}. The fan ID

  • {1}. The fan name

  • {2}. The fan state

  • {3}. The fan speed

x.x.x.x.x.x.x.x.x.x.3.0.4 Informational No Fan ID: {0}, Name: {1}, State: {2}, Speed (RPM): {3} has been fixed.

This trap signifies that a fan failure has been fixed.

Arguments:

  • {0}. The fan ID

  • {1}. The fan name

  • {2}. The fan state

  • {3}. The fan speed

x.x.x.x.x.x.x.x.x.x.3.0.5 Error No Temperature sensor ID: {0}, Name: {1}, State: {2}, Temperature: {3} Celsius has exceeded maximum safety limits. Threshold: {4}.

This trap signifies that a temperature sensor has exceeded maximum safety limits.

Arguments:

  • {0}. The temperature sensor ID

  • {1}. The temperature sensor name

  • {2}. The temperature sensor state

  • {3}. The temperature

  • {4}. The threshold limit

x.x.x.x.x.x.x.x.x.x.3.0.6 Informational No Temperature sensor ID: {0}, Name: {1}, State: {2}, Temperature: {3} Celsius has returned below the maximum safety limits. Threshold: {4}.

This trap signifies that a temperature sensor has returned below maximum safety limits.

Arguments:

  • {0}. The temperature sensor ID

  • {1}. The temperature sensor name

  • {2}. The temperature sensor state

  • {3}. The temperature

  • {4}. The threshold limit

x.x.x.x.x.x.x.x.x.x.7.0.1 Error Yes The primary power supply failed.

This trap signifies that the primary power supply failed.

x.x.x.x.x.x.x.x.x.x.7.0.2 Informational No Gateway {1} is up.

This trap signifies that the default gateway is alive.

Arguments:
  • {1}. The default gateway IP address.

x.x.x.x.x.x.x.x.x.x.7.0.3 Warning No Gateway {1} is down.

This trap signifies that the default gateway is down.

Arguments:
  • {1}. The default gateway IP address

x.x.x.x.x.x.x.x.x.x.7.0.4 Informational No Default Gateway {1} is in service.

This trap signifies that the default gateway is up and in service.

Arguments:
  • {1}. The default gateway IP address

x.x.x.x.x.x.x.x.x.x.7.0.5 Informational No Default Gateway {1} is not in service.

This trap signifies that the default gateway is alive but not in service.

Arguments:
  • {1}. The default gateway IP address.

x.x.x.x.x.x.x.x.x.x.7.0.16 Informational No A VRRP routing device at index {0} with address {1} changed state to master.

This trap indicates that the sending agent has transitioned to 'Master' state.

Arguments:
  • {0}. The gateway index

  • {1}. The IP address

x.x.x.x.x.x.x.x.x.x.7.0.17 Informational No A VRRP routing device at index {0} with address {1} changed state to backup.

This trap indicates that the sending agent has transitioned to 'Backup' state.

Arguments:
  • {0}. The gateway index

  • {1}. The IP address

x.x.x.x.x.x.x.x.x.x.7.0.18 Error No A VRRP routing device at index {0} authentication failed.

This trap signifies that a packet has been received from a router whose authentication key or authentication type conflicts with this router's authentication key or authentication type.

Arguments:
  • {0}. The gateway index.

x.x.x.x.x.x.x.x.x.x.7.0.19 Error No A user login failed.

This trap signifies that someone failed to enter a valid username/password combination. swTrapDisplayString specifies whether the login attempt was from CONSOLE or TELNET. In case of TELNET login, it also specifies the IP address of the host from which the attempt was made.

x.x.x.x.x.x.x.x.x.x.7.0.22 Error No The actual temperature reading is above the warning temperature threshold.

This trap signifies that the switch temperature has exceeded maximum safety limits.

x.x.x.x.x.x.x.x.x.x.7.0.24 Error Yes The fan failure has been detected.

This trap signifies that the fan failure has been detected.

x.x.x.x.x.x.x.x.x.x.7.0.25 Informational No A user logged in to a device.

This trap signifies that a user login has occurred.

x.x.x.x.x.x.x.x.x.x.7.0.27 Informational No A new configuration has been applied.

This trap signifies that new configuration has been applied.

x.x.x.x.x.x.x.x.x.x.7.0.28 Informational No A new configuration has been saved.

This trap signifies that new configuration has been saved.

x.x.x.x.x.x.x.x.x.x.7.0.29 Informational No The firmware has been downloaded successfully.
x.x.x.x.x.x.x.x.x.x.7.0.30 Warning No The firmware download failed.

This trap signifies that firmware downloaded failed to [image1|image2|boot image].

x.x.x.x.x.x.x.x.x.x.7.0.33 Error No The fan failure has been fixed.

This trap signifies that the fan failure has been fixed.

x.x.x.x.x.x.x.x.x.x.7.0.42 Informational No NewRoot: The sending agent at index {0} has become the new root of the Spanning Tree

This trap signifies that the bridge has become the new root of the STG.

Arguments:
  • {0}. The gateway index

x.x.x.x.x.x.x.x.x.x.7.0.43 Informational No NewRoot: The sending agent has become CIST - common and internal spanning tree New Root.

This trap signifies that the bridge has become the new root of the CIST.

x.x.x.x.x.x.x.x.x.x.7.0.44 Informational No There was an STG topology change at index {0}.

This trap signifies that there was an STG topology change.

Arguments:
  • {0}. The gateway index

x.x.x.x.x.x.x.x.x.x.7.0.45 Informational No TopologyChange: CIST - common and internal spanning tree Topology Changed.

This trap signifies that there was a CIST topology change.

x.x.x.x.x.x.x.x.x.x.7.0.46 Informational No The Master interface is active.

This trap signifies that the Master interface is active.

x.x.x.x.x.x.x.x.x.x.7.0.47 Informational No The Master interface is not active.

This trap signifies that the Master interface is not active.

x.x.x.x.x.x.x.x.x.x.7.0.48 Informational No The Backup interface is active.

This trap signifies that the Backup interface is active.

x.x.x.x.x.x.x.x.x.x.7.0.49 Informational No The Backup interface is not active.

This trap signifies that the Backup interface is not active.

x.x.x.x.x.x.x.x.x.x.7.0.50 Informational No There are no active interfaces at device.

This trap signifies that there are no active interfaces.

x.x.x.x.x.x.x.x.x.x.7.0.51 Informational No SFP (small form-factor pluggable transceiver) is inserted.
x.x.x.x.x.x.x.x.x.x.7.0.52 Informational No SFP (small form-factor pluggable transceiver) is removed.
x.x.x.x.x.x.x.x.x.x.7.0.61 Warning No Primary or secondary Network Time Protocol (NTP) server cannot be contacted.
x.x.x.x.x.x.x.x.x.x.7.0.62 Informational No Received Network Time Protocol (NTP) update.

This trap is sent when received NTP update.

x.x.x.x.x.x.x.x.x.x.7.0.63 Informational No A user logged out of a device.

This trap signifies that a user logout has occurred.

x.x.x.x.x.x.x.x.x.x.7.0.64 Informational No Port state is changed to blocking state.
x.x.x.x.x.x.x.x.x.x.7.0.65 Informational No ECMP gateway is up.

This trap signifies that the ECMP gateway is up.

x.x.x.x.x.x.x.x.x.x.7.0.66 Warning No ECMP gateway is down.

This trap signifies that the ECMP gateway is down.

x.x.x.x.x.x.x.x.x.x.7.0.67 Informational No A swTeamingCtrlUp trap signifies that the teaming is up.

This trap signifies that the teaming is up.

x.x.x.x.x.x.x.x.x.x.7.0.68 Warning No A swTeamingCtrlDown trap signifies that the teaming control is down.

This trap signifies that the teaming control is down.

x.x.x.x.x.x.x.x.x.x.7.0.69 Warning No A swTeamingCtrlDownTearDownBlked trap signifies that the teaming control is down but teardown is blocked.

This trap signifies that the teaming control is down but teardown is blocked.

x.x.x.x.x.x.x.x.x.x.7.0.70 Warning No A swTeamingCtrlError trap signifies error, action is undefined.

This trap signifies error, action is undefined.

x.x.x.x.x.x.x.x.x.x.7.0.71 Warning No LACP is operationally down and traffic is blocked on the port.

This trap signifies that LACP is operationally down on a port, and traffic is blocked on the port.

x.x.x.x.x.x.x.x.x.x.7.0.72 Informational No LACP is operationally up and traffic is no longer blocked on the port.

This trap signifies that LACP is operationally up on a port, and traffic is no longer blocked on the port.

x.x.x.x.x.x.x.x.x.x.7.0.73 Informational No A new switch has attached to the stack.

This trap signifies that a new switch has attached to the stack.

x.x.x.x.x.x.x.x.x.x.7.0.74 Informational No A switch has detached from the stack.

This trap signifies that a new switch has detached from the stack.

x.x.x.x.x.x.x.x.x.x.7.0.75 Informational No A new backup switch for a stack has been set.

This trap signifies that a new backup has been set.

x.x.x.x.x.x.x.x.x.x.7.0.76 Warning No The backup switch has been made unavailable.

This trap signifies that the backup switch has been made unavailable.

x.x.x.x.x.x.x.x.x.x.7.0.77 Informational No A virtual machine has moved from a port to another.

This trap signifies that a virtual machine has moved from a port to another.

x.x.x.x.x.x.x.x.x.x.7.0.78 Informational No An advance provisioned virtual machine came online.

This trap signifies that an advance provisioned virtual machine has came online.

x.x.x.x.x.x.x.x.x.x.7.0.79 Informational No A virtual machine has entered into a VLAN, or changed the VLAN.

This trap signifies that a virtual machine has entered into a vlan, or changed the vlan.

x.x.x.x.x.x.x.x.x.x.7.0.80 Informational No The switch has become master after init.

This trap signifies that the switch has become master after init.

x.x.x.x.x.x.x.x.x.x.7.0.81 Informational No The switch in a stack has become master from backup.

This trap signifies that the switch has become master from backup.

x.x.x.x.x.x.x.x.x.x.7.0.82 Informational No A new switch with duplicate UUID/bay has tried to join the stack.

This trap signifies that a new switch with duplicate UUID/bay has tried to join the stack.

x.x.x.x.x.x.x.x.x.x.7.0.83 Informational No A stack link is up.

This trap signifies that a stack link has become up.

x.x.x.x.x.x.x.x.x.x.7.0.84 Warning No A stack link is down.

This trap signifies that a stack link has become down.

x.x.x.x.x.x.x.x.x.x.7.0.85 Warning No The transfer between the master and a member has terminated with error.

This trap signifies that a transfer between the master and a member has terminated with error.

x.x.x.x.x.x.x.x.x.x.7.0.86 Informational No The transfer between the master and a member has terminated with no error.

This trap signifies that a transfer between the master and a member has terminated with no errors.

x.x.x.x.x.x.x.x.x.x.7.0.87 Informational No A new switch of different type has attempted to join the stack.

This trap signifies that a new switch of different type has attempted to join the stack.

x.x.x.x.x.x.x.x.x.x.7.0.88 Warning No The slot of the boot image of a newly attached switch does not match that of the master.

This trap signifies that the slot of the boot image of a newly attached switch does not match that of the master.

x.x.x.x.x.x.x.x.x.x.7.0.89 Warning No The version of the boot image of a newly attached switch does not match that of the master.

This trap signifies that the version of the boot image of a newly attached switch does not match that of the master.

x.x.x.x.x.x.x.x.x.x.7.0.90 Warning No A new switch in a chassis of different and incompatible type has attempted to join the stack.

This trap signifies that a new switch in a chassis of different and incompatible type has attempted to join the stack.

x.x.x.x.x.x.x.x.x.x.7.0.91 Warning No A new switch in a BCS chassis in bay with different and incompatible port mapping has attempted to joint the stack.
x.x.x.x.x.x.x.x.x.x.7.0.92 Informational No The booted config of a newly attached switch does not match that of the master.

This trap signifies that the booted config of a newly attached switch does not match that of the master.

x.x.x.x.x.x.x.x.x.x.7.0.93 Informational No A switch which was configured as a master in NVRAM has attached to the stack.

This trap signifies that a switch which was configured as a master in NVRAM has attached to the stack.

x.x.x.x.x.x.x.x.x.x.7.0.94 Informational No The master has sent a FORCE DETACH message to a member.

This trap signifies that the master has sent a FORCE DETACH message to a member.

x.x.x.x.x.x.x.x.x.x.7.0.95 Informational No The switch temperature has returned below maximum safety limits.

This trap signifies that the switch temperature has returned below maximum safety limits.

x.x.x.x.x.x.x.x.x.x.7.0.97 Error No The primary power supply has been restored.

This trap signifies that the primary power supply has been restored.

x.x.x.x.x.x.x.x.x.x.7.0.103 Informational No A port is error-disabled due to excessive link flaps.

This trap signifies that a port is error-disabled due to excessive link flaps.

x.x.x.x.x.x.x.x.x.x.7.0.106 Informational No vLAG instance is up.

This trap signifies that vLAG instance is up identified in the trap message.

x.x.x.x.x.x.x.x.x.x.7.0.107 Informational No vLAG is down but remote instance is up.

This trap signifies that vLAG is down but remote instance is Up.

x.x.x.x.x.x.x.x.x.x.7.0.108 Informational No vLAG is down but local instance is up.

This trap signifies that vLAG is down but local instance is Up.

x.x.x.x.x.x.x.x.x.x.7.0.109 Informational No vLAG instance is down.

This trap signifies that vLAG instance is down identified in the trap message.

x.x.x.x.x.x.x.x.x.x.7.0.110 Informational No The connection between vLAG switches is up.

This trap signifies that connection between vLAG switches is up.

x.x.x.x.x.x.x.x.x.x.7.0.111 Informational No The connection between vLAG switches is down.

This trap signifies that connection between vLAG switches is down.

x.x.x.x.x.x.x.x.x.x.7.0.112 Informational No A spoofed VM MAC was found.

This trap signifies that a spoofed VM MAC was found.

x.x.x.x.x.x.x.x.x.x.7.0.144 Warning No The connection to openflow controller is broken.

This trap signifies that the connection to openflow controller is broken.

x.x.x.x.x.x.x.x.x.x.7.0.145 Informational No The connection to openflow controller is successful.

This trap signifies that the connection to openflow controller is successful.

x.x.x.x.x.x.x.x.x.x.7.0.146 Warning No The openflow switch moving to emergency state.

This trap signifies that the openflow switch moving to emergency state.

x.x.x.x.x.x.x.x.x.x.7.0.147 Informational No The openflow switch came out of emergency state.

This trap signifies that the openflow switch came out of emergency state.

x.x.x.x.x.x.x.x.x.x.7.0.148 Informational No The device is working in openflow switch mode.

This trap signifies that the device working in openflow switch mode.

x.x.x.x.x.x.x.x.x.x.7.0.149 Informational No The device is in normal mode.

This trap signifies that the device working in normal switch mode.

x.x.x.x.x.x.x.x.x.x.7.0.150 Informational No The flow table entries cleared from the device table.

This trap signifies that the flow table entries being cleared from the device.

x.x.x.x.x.x.x.x.x.x.7.0.151 Informational No Openflow statistics being cleared from the device.

This trap signifies that the openflow statistics being cleared from the device.

x.x.x.x.x.x.x.x.x.x.7.0.152 Warning No The device unable to add flow entry in openflow due to unavailability of system resources.

This trap signifies that the device unable to add flow entry in openflow due to unavailability of system resources.

x.x.x.x.x.x.x.x.x.x.7.0.153 Informational No The device reached its configured flow limit.

This trap signifies that the device reaches its configured flow limit.

x.x.x.x.x.x.x.x.x.x.7.0.154 Informational No The port operationally down by openflow controller.

This trap signifies that the port operationally down by openflow controller.

x.x.x.x.x.x.x.x.x.x.7.0.155 Informational No The port operationally up by openflow controller.

This trap signifies that the port operationally up by openflow controller.

x.x.x.x.x.x.x.x.x.x.7.0.156 Warning No The device unable to connect to controller Openflow due to bad versions, or negotiation failure.

This trap signifies that the device unable to connect to controller either due to bad version, or negotiation/hello failure.

x.x.x.x.x.x.x.x.x.x.7.0.158 Informational No Dot1x feature is enabled.

This trap is sent when dot1x feature is enabled.

x.x.x.x.x.x.x.x.x.x.7.0.162 Informational No Default admin account has been disabled.

This trap signifies that default admin account has been disabled.

x.x.x.x.x.x.x.x.x.x.7.0.163 Informational No The configured password does not match strong password complexity.

This trap signifies that configured password does not match strong password complexity.

x.x.x.x.x.x.x.x.x.x.7.0.164 Informational No An account has been locked.

This trap signifies that account has been unlocked.

x.x.x.x.x.x.x.x.x.x.7.0.165 Informational No An account has been unlocked.

This trap signifies that account has been unlocked.

x.x.x.x.x.x.x.x.x.x.7.0.166 Informational No A Stack Member is reinitializing itself such that the agent configuration nor the protocol entity implementation is altered.

This trap signifies that a Stack Member is reinitializing itself such that the agent configuration nor the protocol entity implementation is altered.

x.x.x.x.x.x.x.x.x.x.7.0.167 Informational No A Stack Member is reinitializing itself such that the agent configuration nor the protocol entity implementation is altered.

This trap signifies that a Stack Member is reinitializing itself such that the agent configuration nor the protocol entity implementation is altered.

x.x.x.x.x.x.x.x.x.x.7.0.173 Informational No When SNMP requests are blocked, a trap is sent showing the blocked up.

This trap is sent when SNMP requests are blocked, a trap is sent showing the blocked IP.

x.x.x.x.x.x.x.x.x.x.7.0.178 Informational No ARP Table is full.

This trap signifies that ARP table is full.

x.x.x.x.x.x.x.x.x.x.7.0.184 Informational No ARP table is full.

This trap signifies that ARP table is full.

x.x.x.x.x.x.x.x.x.x.7.0.185 Informational No An incorrect ARP was received.

This trap signifies that an incorrect ARP was received.

x.x.x.x.x.x.x.x.x.x.7.1000.0 Informational No A user login failed.

This trap signifies that someone failed to enter a valid user name and password combination. This trap specifies whether the login attempt was from CONSOLE or TELNET. In case of TELNET login, it also specifies the IP address of the host from which the attempt was made.

1.0.8802.1.1.2.1.5.6945.0.1 Warning No An error occurs with DCBX control on port {0} and there is no other trap defined for the specific error condition.
Arguments:
  • {0}. The port number

1.0.8802.1.1.2.1.5.6945.0.2 Warning No An error has occurred during the configuration exchange with the peer. lldpXdcbxFeatError is true and there is no other trap defined for the specific error condition.
1.0.8802.1.1.2.1.5.6945.0.3 Informational No Multiple LLDP neighbors are detected on port {0}.
Arguments:
  • {0}. The port number.

1.0.8802.1.1.2.1.5.6945.0.3 Informational No Multiple LLDP neighbors are detected on port {0}.
Arguments:
  • {0}. The port number

1.0.8802.1.1.2.1.5.6945.0.4 Warning No The LLDP transmit has been disabled on port {0}.
Arguments:
  • {0}. The port number

1.0.8802.1.1.2.1.5.6945.0.5 Warning No The LLDP receive has been disabled on port {0}.
Arguments:
  • {0}. The port number

1.0.8802.1.1.2.1.5.6945.0.6 Informational No A duplicate control Sub-TLV is detected on port {0}.
Arguments:
  • {0}. The port number

1.0.8802.1.1.2.1.5.6945.0.7 Informational No A duplicate feature {0} Sub-TLV is detected.
Arguments:
  • {0}. The feature type.

1.0.8802.1.1.2.1.5.6945.0.8 Informational No Feature type {0} is not supported on by a peer.
Arguments:
  • {0}. The feature type

1.0.8802.1.1.2.1.5.6945.0.9 Warning No The peer has stopped responding, port number {0}.

The peer has stopped responding as evidenced by an LLDP time-out event.

Arguments:
  • {0}. The port number

1.0.8802.1.1.2.1.5.6945.0.10 Warning No The configuration received from peer results into partial or complete mismatch on port {0} snmp_dot1dStpVersion=The version of Spanning Tree Protocol the bridge is running.
Arguments:
  • {0}. The port number

1.3.6.1.2.1.17.0.1 Informational No NewRoot: The sending agent has become the new root of the Spanning Tree.
1.3.6.1.2.1.17.0.2 Informational No TopologyChange: Is sent by a bridge when any of its configured ports change from the Learning state to the Forwarding state, or from the Forwarding state to the Blocking state.
1.3.6.1.2.1.17.1.1.0 Informational No The MAC address used by this bridge when it must be referred to in a unique fashion.
1.3.6.1.2.1.17.2.5.0 Informational No The bridge identifier of the root of the spanning tree as determined by the Spanning Tree Protocol as run by this node.
1.3.6.1.2.1.17.11.1.1.16.0 Informational   The version of Spanning Tree Protocol the bridge is running.
1.3.6.1.2.1.47.2.0.1 Informational No A change in the Entity tables has taken place.

This trap occurs at the time a conceptual row is created, modified, or deleted in any of these tables: entPhysicalTable, entLogicalTable, entLPMappingTable, entAliasMappingTable, entPhysicalContainsTable.

1.3.6.1.6.3.1.1.5.1 Informational No The SNMP entity, supporting a notification originator application, is reinitializing itself and that its configuration might have been altered.
1.3.6.1.6.3.1.1.5.2 Informational No The SNMP entity, supporting a notification originator application, is reinitializing itself and that its configuration is not altered.
1.3.6.1.6.3.1.1.5.3 Warning No A failure in one of the communication link with ifIndex {0}.
Arguments:
  • {0}. The ifIndex of the port

1.3.6.1.6.3.1.1.5.4 Informational No The communication link with ifIndex {0} is up.
Arguments:
  • {0}. The ifIndex of the port

1.3.6.1.6.3.1.1.5.5 Warning No The sending protocol entity is the addressee of a protocol message that is not properly authenticated.
1.3.6.1.6.3.1.1.5.6 Warning No An EGP neighbor {0} for whom the sending protocol entity was an EGP peer has been marked down and the peer relationship no longer obtains.
Arguments:
  • {0}. The EGP neighbor

Table 2. Events in the audit log for Flex switches
Event ID Message text and description
1.3.6.1.4.1.2.6.249.0.1 AUDIT_LOGIN

User login/logout activity. Triggered when user login/logout with telnet/ssh/http/https/SNMPv1/SNMPv3.

1.3.6.1.4.1.2.6.249.0.1 AUDIT_PASSWD

User passwords modify. Triggered when the local login user password has been modified.

1.3.6.1.4.1.2.6.249.0.1 AUDIT_USER

Create user, role change Triggered when new local user created or local user privilege changed.

1.3.6.1.4.1.2.6.249.0.1 AUDIT_CONFIG

Configuration change. When the switch configuration changed by an operation manually, a corresponding audit event is generated.

1.3.6.1.4.1.2.6.249.0.1 AUDIT_AUTH

When authentication failed in a protocol (such as NTP, BGP, or VRRP) that might affect running business in security perspective, a corresponding audit log event is generated.

1.3.6.1.4.1.2.6.249.0.1 AUDIT_RESOURCE

When hardware resource (like memory, CPU, flash) or software resource (such as ARP table, IP route table, or OSPF route table) reach the capacity limitation, corresponding audit log event is generated.

1.3.6.1.4.1.2.6.249.0.1 AUDIT_CLEAR

Triggered when audit log cleared by privileged login user or SNMPv3 user.

1.3.6.1.4.1.2.6.249.0.1 AUDIT_SNMPV3_TEST

Triggered for test purpose to verify the path after audit log SNMPv3 account is configured.

1.3.6.1.4.1.2.6.249.0.1 (Lenovo Flex switch only) AUDIT_LENOVO_L3_LINK

Layer three link status change which might affect running business in security perspective like default gateway change or up/down status change.

Table 3. SNMP traps in the event log for Lenovo ThinkSystem DB series switches
Trap ID Severity Automatically Notify Support Message text and description
1.3.6.1.2.1.160.0.1 Informational No

The Zone Server has rejected the request.

This notification is generated whenever a Zone Server (indicated by the value of t11FamLocalSwitchWwn) rejects a request. The value of t11ZsRejectCtCommandString indicates the rejected request, and the values of t11ZsRejectReasonCode, t11ZsRejectReasonCodeExp and t11ZsRejectReasonVendorCode indicate the reason for the rejection. The value of t11ZsRequestClient indicates the source of the request.

1.3.6.1.2.1.160.0.2 Informational No

A Zone merge failure has occurred on the Fabric.

This notification indicates that a Zone merge failure has occurred on the Fabric indicated by the value of t11ZsFabricIndex, on the interface indicated by the value of ifIndex. If multiple Virtual Fabrics are configured on an interface, and all have a Zone merge failure at the same time, then just one notification is generated and t11ZsFabricIndex has the value 4096.

1.3.6.1.2.1.160.0.3 Informational No

A successful Zone merge has occurred on the Fabric.

This notification indicates that a successful Zone merge has occurred on the Fabric indicated by the value of t11ZsFabricIndex, on the interface indicated by the value of ifIndex. If multiple Virtual Fabrics are configured on an interface, and all have a successful Zone Merge at the same time, then just one notification is generated and t11ZsFabricIndex has the value 4096.

1.3.6.1.2.1.160.0.4 Informational No

The value of a Default Zone Setting has changed.

This notification indicates that the value of a Default Zone Setting has changed. The value of t11ZsServerDefaultZoneSetting contains the value after the change.

1.3.6.1.2.1.160.0.5 Informational No

A Zone Set on a Fabric has been activated / deactivated.

This notification is generated whenever a switch (indicated by the value of t11FamLocalSwitchWwn) activates/deactivates a Zone Set on a Fabric. The t11ZsActivateResult object denotes the outcome of the activation/deactivation.

1.3.6.1.3.94.0.1 Informational No

The overall status of the unit status has changed.

Generated when connUnitStatus changes.

1.3.6.1.3.94.0.4 Informational No

An event has been generated by the connectivity unit.

1.3.6.1.3.94.0.6 Informational No

The overall status of the connectivity unit changed.

This trap sends the instance of connUnitPortName as part of the trap; the instance string is NULL, if the port name is not defined for the specified port.

1.3.6.1.4.1.1588.2.1.1.1.0.3 Informational No

Port Index {0}. changed state to {1}. Port Name: {2} and SSN is # {3}

A swFCPortScn (3) is generated whenever an FC port changes its operational state or port type.

Arguments:
  • {0}. Port number
  • {1}. Port state
  • {2}. Port name
  • {2}. Switch serial number
1.3.6.1.4.1.1588.2.1.1.1.0.4 Informational No

Event with index {0} (severity level {0}) and description: {2} occurred on the switch.

This trap is generated when an event occurs with a level that is at or below swEventTrapLevel

Arguments:
  • {0}. Event index
  • {1}. security level
  • {2}. Event description
1.3.6.1.4.1.1588.2.1.1.1.0.7 Informational No

An IPv6 address status change occurred.

This trap is generated when an IPv6 address status change event occurs. It is generated only when the IPv6 stateless state changes to the deprecation state and not for address change notification.

1.3.6.1.4.1.1588.2.1.1.1.0.8 Informational No

A partition manager change happened.

This trap is generated when any partition manager change happens. This trap is generated when:
  • Logical switch is created or deleted.

  • Port is moved between logical switches.

  • Switch FID changes.

  • When any logical switch is changed to a base switch.

  • VF is enabled or disabled.
1.3.6.1.4.1.1588.2.1.1.1.0.9 Informational No

The fabric has been reconfigurated

The trap to be sent for tracking fabric reconfiguration. This trap is generated under the following circumstances:
  • Two switches with the same domain ID have connected to one another.

  • Two fabrics have joined.

  • An E_Port has gone offline.

  • A principal link has segmented from the fabric.

  • Zone has conflicts.

  • Domain has conflicts.

  • Segmentation of the principal link between two switches.

  • Incompatible link parameters. During E_Port initialization, ports exchange link parameters. Rarely, incompatible parameters result in segmentation

1.3.6.1.4.1.1588.2.1.1.1.0.10 Informational No

The segmentation has changed.

The trap to be sent for tracking segmentation changes.

1.3.6.1.4.1.1588.2.1.1.1.0.12 Informational No

The state of the switch has changed. The switch is offline.

This trap is sent when the switch changes it state to online or offline.

1.3.6.1.4.1.1588.2.1.1.1.0.13 Informational No

The ports have been moved from a switch to another.

This trap is sent when the ports are moved from one switch to another.

1.3.6.1.4.1.1588.2.1.1.1.0.14 Informational No

An event has occurred on the switch

This trap is sent for one of the following events:
  • Fabric change

  • Device change

  • FAPWWN change

  • FDMI events

  • Routing policy change

  • Diagnostics port configuration change

  • Polling status

  • Dynamic port name change

  • Dynamic port name feature enable/disable event

1.3.6.1.4.1.1588.2.1.1.1.0.15 Informational No

A login /logout has occurred on the switch.

This trap is sent whenever a device logs in or logs out.

1.3.6.1.4.1.1588.2.1.1.1.0.16 Informational No

There is a change in local zone database

This trap is sent whenever there is change in local zone database.

1.3.6.1.4.1.1588.2.1.1.50.21.0.1 Informational No

A device registered with the switch

1.3.6.1.4.1.1588.2.1.1.50.21.0.2 Informational No

A device deregistered with the switch.

1.3.6.1.4.1.1588.2.1.1.50.21.0.3 Informational No

A listener for a link failure incident was added.

1.3.6.1.4.1.1588.2.1.1.50.21.0.4 Informational No

A listener for a link failure incident was removed.

1.3.6.1.4.1.1588.2.1.1.50.21.0.5 Informational No

A link failure incident has occurred.

A link failure incident has occurred. The value of lIRRIndex will be –2147483647 and IIRRListenerPID will be 0 if there is no listener for the incident

1.3.6.1.4.1.1588.2.1.2.2.0.1 Informational No

The FRU status has changed.

This trap is generated under the following events:

  • When the FRU is added, is removed, or fails

  • When the FRU is powered on or off

  • When the switch is rebooted

  • When there is a fault in the blade

1.3.6.1.4.1.1588.2.1.2.2.0.2 Informational No

The status of CP has changed.

This trap is sent when the status of any CP object changes.

The cpLastEvent variable provides the information about the event that occurred. Some of the triggers that generate this trap are:

  • Reboot

  • Firmware download

  • Fast boot

  • HA failover

1.3.6.1.4.1.1588.2.1.2.2.0.3 Informational No

A FRU has been added, removed or fails.

This trap is generated when an FRU is added, is removed, or fails.

1.3.6.1.4.1.1588.3.1.4.0.1 Informational No

A MAPS threshold event has occurred.

This trap is sent for MAPS threshold events..

1.3.6.1.4.1.1588.3.1.4.0.2 Informational No

Quiet Time expiration for MAPS has been reached.

This trap is sent for MAPS upon quiet time (QT) expiration.

1.3.6.1.6.3.1.1.5.1 Informational No

The SNMP entity, supporting a notification originator application, is reinitializing itself and that its configuration might have been altered.

1.3.6.1.6.3.1.1.5.2 Informational No

The SNMP entity, supporting a notification originator application, is reinitializing itself and that its configuration is not altered.

1.3.6.1.6.3.1.1.5.3 Warning No

A failure in one of the communication link with ifIndex {0}.

Arguments:
  • {0}. The ifIndex of the port

1.3.6.1.6.3.1.1.5.4 Informational No

The communication link with ifIndex {0} is up.

Arguments:
  • {0}. The ifIndex of the port