No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Alarm Handling

CloudEngine 8800, 7800, 6800, and 5800 V200R002C50

This document provides the explanations, causes, and recommended actions of alarms on the product.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
SECURITYTRAP_1.3.6.1.4.1.2011.5.25.165.2.2.1.2 hwStrackIfVlanInfo

SECURITYTRAP_1.3.6.1.4.1.2011.5.25.165.2.2.1.2 hwStrackIfVlanInfo

Description

Attack occurred. (Interface=[Interface], CVLAN=[CVLAN], PVLAN=[PVLAN], EndTime=[EndTime], TotalPackets=[TotalPackets])

The system detected attacks on an interface.

Attributes

Attribute

Description

Alarm or Event

Event

Trap Severity

Warning

Mnemonic Code

hwStrackIfVlanInfo

Trap OID

1.3.6.1.4.1.2011.5.25.165.2.2.1.2

Alarm ID

This is an event trap and does not involve alarm ID.

Alarm Type

This is an event trap and does not involve alarm type.

Raise or Clear

This is an event trap and does not involve alarm generation or clearance.

Match trap

This is an event trap and does not involve the matching trap.

Parameters

Parameter

Description

Interface

Interface index

CVLAN

Inner VLAN tag of an attack packet sent by a user

PVLAN

Outer VLAN tag of an attack packet sent by a user

EndTime

Time when the last attack packet is received

TotalPackets

Number of received attack packets

VB

VB OID

VB Name

VB Index

1.3.6.1.4.1.2011.5.25.165.2.1.1.6

hwStrackPacketIfName

N/A

1.3.6.1.4.1.2011.5.25.165.2.1.1.5

hwStrackPacketCVlan

N/A

1.3.6.1.4.1.2011.5.25.165.2.1.1.4

hwStrackPacketPVlan

N/A

1.3.6.1.4.1.2011.5.25.165.2.1.1.2

hwStrackEndTime

N/A

1.3.6.1.4.1.2011.5.25.165.2.1.1.1

hwStrackTotalPacket

N/A

Impact on the System

The CPU is too busy processing attack packets that some normal packets are not processed in a timely manner or even dropped.

Possible Causes

The rate at which packets were sent by a user (Interface + VLAN) to the CPU exceeded the alarm threshold.

Procedure

  • The rate at which packets were sent by a user (Interface + VLAN) to the CPU exceeded the alarm threshold.
    1. Run the display auto-defend attack-source command to check potential attack sources and to determine whether the packet transmission rate is abnormal.

      • If the packet transmission rate is abnormal, go to Step 2.

      • If the packet transmission rate is normal, go to Step 7.

    2. Check the number of users on the interface that receives attack packets.

      • If there is only one user, go to Step 3.

      • If there are multiple users, go to Step 5.

    3. Check whether this user sent the attack packets.

      • If this user sent the attack packets, go to Step 4.

      • If this user did not send the attack packets, go to Step 7.

    4. Run the shutdown command to shut down the interface. Then, check whether the alarm is cleared. If the alarm persists, go to Step 7.
    5. Check whether one of the users sent the attack packets.

      • If one of the users sent the attack packets, go to Step 6.

      • If none of the users sent the attack packets, go to Step 7.

    6. Add the user who sent attack packets to a blacklist and check whether the fault is rectified. If the fault persists, go to Step 7.
    7. Collect trap, log, and configuration information, and contact technical support personnel.
Translation
Download
Updated: 2019-03-20

Document ID: EDOC1000166558

Views: 196825

Downloads: 115

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next