R3721-F3210-F3171-HP High-End Firewalls System Management and Maintenance Command Reference-6PW101

154
You cannot create an entry that has the same alarm variable formula (prialarm-formula), sampling type
(absolute changeratio or delta), rising threshold (threshold-value1), and falling threshold
(threshold-value2) as an existing private alarm entry.
You can create up to 50 private alarm entries.
The system handles private alarm entries as follows:
1. Samples the private alarm variables in the private alarm formula at the specified sampling interval.
2. Performs calculation on the sampled values with the formula.
3. Compares the calculation result with the predefined thresholds and does the following:
{ If the result is equal to or greater than the rising threshold, triggers the event specified by the
event-entry1 argument.
{ If the result is equal to or smaller than the falling threshold, triggers the event specified by the
event-entry2 argument.
Related commands: display rmon prialarm, rmon event, rmon history, and rmon statistics.
Examples
# Monitor the ratio of the broadcast packets received on the interface by using the private alarm.
C a l c u l a t e t h e p ri va t e a l a rm v a ri a b l e s w i t h t h e (1.3. 6 .1. 2.1.16.1.1.1. 6.1 * 10 0 / .1.3. 6 .1. 2.1.16.1.1.1.5.1) fo r m u l a
and sample the corresponding variables at 10-second intervals. (Broadcast packet ratio= total number of
broadcast packets received on the interface/total number of packets received on the interface; the
formula is customized by users.)
The rising threshold (80%) triggers event 1 to log the event. The falling threshold (5%) triggers event 2, but
the event defines neither log nor trap action.
Set the lifetime of the entry to forever and owner to user1.
<Sysname> system-view
[Sysname] rmon event 1 log
[Sysname] rmon event 2 none
[Sysname] interface GigabitEthernet 0/1
[Sysname-GigabitEthernet0/1] rmon statistics 1
[Sysname-GigabitEthernet0/1] quit
[Sysname] rmon prialarm 1 (.1.3.6.1.2.1.16.1.1.1.6.1*100/.1.3.6.1.2.1.16.1.1.1.5.1)
BroadcastPktsRatioOfGE0/1 10 absolute rising-threshold 80 1 falling-threshold 5 2
entrytype forever owner user1
1. 3 . 6 .1. 2 .1.16 .1.1.1. 6 .1 i s t h e O I D o f t h e n o d e e t h e r S t a t s B r o a d c a s t P k t s .1, a n d 1. 3 . 6 .1. 2.1.16 .1.1.1. 5 .1 i s t h e
OID of the node etherStatsPkts.1. 1 indicates the serial number of the interface statistics entry. Therefore,
if you execute the rmon statistics 5 c o m m a n d , yo u s h ou l d u s e 1.3. 6 .1. 2.1.16.1.1.1. 6. 5 a n d
1. 3. 6 .1. 2.1.16 .1.1.1. 5. 5.
This example enables the RMON agent to do the following:
• Samples and monitors interface GigabitEthernet 0/1.
• If the portion of incoming broadcast packets in the total traffic crosses 80%, the system logs the
event. If the portion is less than or equal to 5%, the system takes no action. To view the event log,
use the display rmon eventlog command.