Skip to main content

List of switch SNMP trap events

This section lists the switch SNMP trap events that can be viewed in the Lenovo XClarity Administrator event log or audit log.

Table 1 lists SNMP traps from supported RackSwitch and Flex switches that can be included in the event log. Each SNMP trap ID is prefixed with the ID for the switch model.

Table 2 lists events from supported Flex switches that can be included in the audit log.

Table 3 lists events from supported Lenovo ThinkSystem DB series switches that can be included in the event log. Note that some traps might be disabled on your switch. XClarity Administrator does not received events for disabled traps. To determine which traps are enabled or disabled, run the following command on the switch: snmpconfig --show mibcapability. To enable the traps, run the following command on the switch: snmpconfig –set mibcapability.

Table 1. SNMP traps in the event log for RackSwitch and Flex switches
Trap IDSeverityAutomatically Notify SupportMessage text and description
x.x.x.x.x.x.x.x.x.x.3.0.1ErrorYesPower supply ID: {0}, Name: {1}, State: {2} has failed.

This trap signifies that a power supply has failed.

Arguments:

  • {0}. The power supply ID

  • {1}. The power supply name

  • {2}. The power supply state

x.x.x.x.x.x.x.x.x.x.3.0.2InformationalNoPower supply ID: {0}, Name: {1}, State: {2} has been restored.

This trap signifies that a power supply has been restored.

Arguments:

  • {0}. The power supply ID

  • {1}. The power supply name

  • {2}. The power supply state

x.x.x.x.x.x.x.x.x.x.3.0.3ErrorYesFan ID: {0}, Name: {1}, State: {2}, Speed (RPM): {3} has failed.

This trap signifies that a fan failure has been detected.

Arguments:

  • {0}. The fan ID

  • {1}. The fan name

  • {2}. The fan state

  • {3}. The fan speed

x.x.x.x.x.x.x.x.x.x.3.0.4InformationalNoFan ID: {0}, Name: {1}, State: {2}, Speed (RPM): {3} has been fixed.

This trap signifies that a fan failure has been fixed.

Arguments:

  • {0}. The fan ID

  • {1}. The fan name

  • {2}. The fan state

  • {3}. The fan speed

x.x.x.x.x.x.x.x.x.x.3.0.5ErrorNoTemperature sensor ID: {0}, Name: {1}, State: {2}, Temperature: {3} Celsius has exceeded maximum safety limits. Threshold: {4}.

This trap signifies that a temperature sensor has exceeded maximum safety limits.

Arguments:

  • {0}. The temperature sensor ID

  • {1}. The temperature sensor name

  • {2}. The temperature sensor state

  • {3}. The temperature

  • {4}. The threshold limit

x.x.x.x.x.x.x.x.x.x.3.0.6InformationalNoTemperature sensor ID: {0}, Name: {1}, State: {2}, Temperature: {3} Celsius has returned below the maximum safety limits. Threshold: {4}.

This trap signifies that a temperature sensor has returned below maximum safety limits.

Arguments:

  • {0}. The temperature sensor ID

  • {1}. The temperature sensor name

  • {2}. The temperature sensor state

  • {3}. The temperature

  • {4}. The threshold limit

x.x.x.x.x.x.x.x.x.x.7.0.1ErrorYesThe primary power supply failed.

This trap signifies that the primary power supply failed.

x.x.x.x.x.x.x.x.x.x.7.0.2InformationalNoGateway {1} is up.

This trap signifies that the default gateway is alive.

Arguments:
  • {1}. The default gateway IP address.

x.x.x.x.x.x.x.x.x.x.7.0.3WarningNoGateway {1} is down.

This trap signifies that the default gateway is down.

Arguments:
  • {1}. The default gateway IP address

x.x.x.x.x.x.x.x.x.x.7.0.4InformationalNoDefault Gateway {1} is in service.

This trap signifies that the default gateway is up and in service.

Arguments:
  • {1}. The default gateway IP address

x.x.x.x.x.x.x.x.x.x.7.0.5InformationalNoDefault Gateway {1} is not in service.

This trap signifies that the default gateway is alive but not in service.

Arguments:
  • {1}. The default gateway IP address.

x.x.x.x.x.x.x.x.x.x.7.0.16InformationalNoA VRRP routing device at index {0} with address {1} changed state to master.

This trap indicates that the sending agent has transitioned to 'Master' state.

Arguments:
  • {0}. The gateway index

  • {1}. The IP address

x.x.x.x.x.x.x.x.x.x.7.0.17InformationalNoA VRRP routing device at index {0} with address {1} changed state to backup.

This trap indicates that the sending agent has transitioned to 'Backup' state.

Arguments:
  • {0}. The gateway index

  • {1}. The IP address

x.x.x.x.x.x.x.x.x.x.7.0.18ErrorNoA VRRP routing device at index {0} authentication failed.

This trap signifies that a packet has been received from a router whose authentication key or authentication type conflicts with this router's authentication key or authentication type.

Arguments:
  • {0}. The gateway index.

x.x.x.x.x.x.x.x.x.x.7.0.19ErrorNoA user login failed.

This trap signifies that someone failed to enter a valid username/password combination. swTrapDisplayString specifies whether the login attempt was from CONSOLE or TELNET. In case of TELNET login, it also specifies the IP address of the host from which the attempt was made.

x.x.x.x.x.x.x.x.x.x.7.0.22ErrorNoThe actual temperature reading is above the warning temperature threshold.

This trap signifies that the switch temperature has exceeded maximum safety limits.

x.x.x.x.x.x.x.x.x.x.7.0.24ErrorYesThe fan failure has been detected.

This trap signifies that the fan failure has been detected.

x.x.x.x.x.x.x.x.x.x.7.0.25InformationalNoA user logged in to a device.

This trap signifies that a user login has occurred.

x.x.x.x.x.x.x.x.x.x.7.0.27InformationalNoA new configuration has been applied.

This trap signifies that new configuration has been applied.

x.x.x.x.x.x.x.x.x.x.7.0.28InformationalNoA new configuration has been saved.

This trap signifies that new configuration has been saved.

x.x.x.x.x.x.x.x.x.x.7.0.29InformationalNoThe firmware has been downloaded successfully.
x.x.x.x.x.x.x.x.x.x.7.0.30WarningNoThe firmware download failed.

This trap signifies that firmware downloaded failed to [image1|image2|boot image].

x.x.x.x.x.x.x.x.x.x.7.0.33ErrorNoThe fan failure has been fixed.

This trap signifies that the fan failure has been fixed.

x.x.x.x.x.x.x.x.x.x.7.0.42InformationalNoNewRoot: The sending agent at index {0} has become the new root of the Spanning Tree

This trap signifies that the bridge has become the new root of the STG.

Arguments:
  • {0}. The gateway index

x.x.x.x.x.x.x.x.x.x.7.0.43InformationalNoNewRoot: The sending agent has become CIST - common and internal spanning tree New Root.

This trap signifies that the bridge has become the new root of the CIST.

x.x.x.x.x.x.x.x.x.x.7.0.44InformationalNoThere was an STG topology change at index {0}.

This trap signifies that there was an STG topology change.

Arguments:
  • {0}. The gateway index

x.x.x.x.x.x.x.x.x.x.7.0.45InformationalNoTopologyChange: CIST - common and internal spanning tree Topology Changed.

This trap signifies that there was a CIST topology change.

x.x.x.x.x.x.x.x.x.x.7.0.46InformationalNoThe Master interface is active.

This trap signifies that the Master interface is active.

x.x.x.x.x.x.x.x.x.x.7.0.47InformationalNoThe Master interface is not active.

This trap signifies that the Master interface is not active.

x.x.x.x.x.x.x.x.x.x.7.0.48InformationalNoThe Backup interface is active.

This trap signifies that the Backup interface is active.

x.x.x.x.x.x.x.x.x.x.7.0.49InformationalNoThe Backup interface is not active.

This trap signifies that the Backup interface is not active.

x.x.x.x.x.x.x.x.x.x.7.0.50InformationalNoThere are no active interfaces at device.

This trap signifies that there are no active interfaces.

x.x.x.x.x.x.x.x.x.x.7.0.51InformationalNoSFP (small form-factor pluggable transceiver) is inserted.
x.x.x.x.x.x.x.x.x.x.7.0.52InformationalNoSFP (small form-factor pluggable transceiver) is removed.
x.x.x.x.x.x.x.x.x.x.7.0.61WarningNoPrimary or secondary Network Time Protocol (NTP) server cannot be contacted.
x.x.x.x.x.x.x.x.x.x.7.0.62InformationalNoReceived Network Time Protocol (NTP) update.

This trap is sent when received NTP update.

x.x.x.x.x.x.x.x.x.x.7.0.63InformationalNoA user logged out of a device.

This trap signifies that a user logout has occurred.

x.x.x.x.x.x.x.x.x.x.7.0.64InformationalNoPort state is changed to blocking state.
x.x.x.x.x.x.x.x.x.x.7.0.65InformationalNoECMP gateway is up.

This trap signifies that the ECMP gateway is up.

x.x.x.x.x.x.x.x.x.x.7.0.66WarningNoECMP gateway is down.

This trap signifies that the ECMP gateway is down.

x.x.x.x.x.x.x.x.x.x.7.0.67InformationalNoA swTeamingCtrlUp trap signifies that the teaming is up.

This trap signifies that the teaming is up.

x.x.x.x.x.x.x.x.x.x.7.0.68WarningNoA swTeamingCtrlDown trap signifies that the teaming control is down.

This trap signifies that the teaming control is down.

x.x.x.x.x.x.x.x.x.x.7.0.69WarningNoA swTeamingCtrlDownTearDownBlked trap signifies that the teaming control is down but teardown is blocked.

This trap signifies that the teaming control is down but teardown is blocked.

x.x.x.x.x.x.x.x.x.x.7.0.70WarningNoA swTeamingCtrlError trap signifies error, action is undefined.

This trap signifies error, action is undefined.

x.x.x.x.x.x.x.x.x.x.7.0.71WarningNoLACP is operationally down and traffic is blocked on the port.

This trap signifies that LACP is operationally down on a port, and traffic is blocked on the port.

x.x.x.x.x.x.x.x.x.x.7.0.72InformationalNoLACP is operationally up and traffic is no longer blocked on the port.

This trap signifies that LACP is operationally up on a port, and traffic is no longer blocked on the port.

x.x.x.x.x.x.x.x.x.x.7.0.73InformationalNoA new switch has attached to the stack.

This trap signifies that a new switch has attached to the stack.

x.x.x.x.x.x.x.x.x.x.7.0.74InformationalNoA switch has detached from the stack.

This trap signifies that a new switch has detached from the stack.

x.x.x.x.x.x.x.x.x.x.7.0.75InformationalNoA new backup switch for a stack has been set.

This trap signifies that a new backup has been set.

x.x.x.x.x.x.x.x.x.x.7.0.76WarningNoThe backup switch has been made unavailable.

This trap signifies that the backup switch has been made unavailable.

x.x.x.x.x.x.x.x.x.x.7.0.77InformationalNoA virtual machine has moved from a port to another.

This trap signifies that a virtual machine has moved from a port to another.

x.x.x.x.x.x.x.x.x.x.7.0.78InformationalNoAn advance provisioned virtual machine came online.

This trap signifies that an advance provisioned virtual machine has came online.

x.x.x.x.x.x.x.x.x.x.7.0.79InformationalNoA virtual machine has entered into a VLAN, or changed the VLAN.

This trap signifies that a virtual machine has entered into a vlan, or changed the vlan.

x.x.x.x.x.x.x.x.x.x.7.0.80InformationalNoThe switch has become master after init.

This trap signifies that the switch has become master after init.

x.x.x.x.x.x.x.x.x.x.7.0.81InformationalNoThe switch in a stack has become master from backup.

This trap signifies that the switch has become master from backup.

x.x.x.x.x.x.x.x.x.x.7.0.82InformationalNoA new switch with duplicate UUID/bay has tried to join the stack.

This trap signifies that a new switch with duplicate UUID/bay has tried to join the stack.

x.x.x.x.x.x.x.x.x.x.7.0.83InformationalNoA stack link is up.

This trap signifies that a stack link has become up.

x.x.x.x.x.x.x.x.x.x.7.0.84WarningNoA stack link is down.

This trap signifies that a stack link has become down.

x.x.x.x.x.x.x.x.x.x.7.0.85WarningNoThe transfer between the master and a member has terminated with error.

This trap signifies that a transfer between the master and a member has terminated with error.

x.x.x.x.x.x.x.x.x.x.7.0.86InformationalNoThe transfer between the master and a member has terminated with no error.

This trap signifies that a transfer between the master and a member has terminated with no errors.

x.x.x.x.x.x.x.x.x.x.7.0.87InformationalNoA new switch of different type has attempted to join the stack.

This trap signifies that a new switch of different type has attempted to join the stack.

x.x.x.x.x.x.x.x.x.x.7.0.88WarningNoThe slot of the boot image of a newly attached switch does not match that of the master.

This trap signifies that the slot of the boot image of a newly attached switch does not match that of the master.

x.x.x.x.x.x.x.x.x.x.7.0.89WarningNoThe version of the boot image of a newly attached switch does not match that of the master.

This trap signifies that the version of the boot image of a newly attached switch does not match that of the master.

x.x.x.x.x.x.x.x.x.x.7.0.90WarningNoA new switch in a chassis of different and incompatible type has attempted to join the stack.

This trap signifies that a new switch in a chassis of different and incompatible type has attempted to join the stack.

x.x.x.x.x.x.x.x.x.x.7.0.91WarningNoA new switch in a BCS chassis in bay with different and incompatible port mapping has attempted to joint the stack.
x.x.x.x.x.x.x.x.x.x.7.0.92InformationalNoThe booted config of a newly attached switch does not match that of the master.

This trap signifies that the booted config of a newly attached switch does not match that of the master.

x.x.x.x.x.x.x.x.x.x.7.0.93InformationalNoA switch which was configured as a master in NVRAM has attached to the stack.

This trap signifies that a switch which was configured as a master in NVRAM has attached to the stack.

x.x.x.x.x.x.x.x.x.x.7.0.94InformationalNoThe master has sent a FORCE DETACH message to a member.

This trap signifies that the master has sent a FORCE DETACH message to a member.

x.x.x.x.x.x.x.x.x.x.7.0.95InformationalNoThe switch temperature has returned below maximum safety limits.

This trap signifies that the switch temperature has returned below maximum safety limits.

x.x.x.x.x.x.x.x.x.x.7.0.97ErrorNoThe primary power supply has been restored.

This trap signifies that the primary power supply has been restored.

x.x.x.x.x.x.x.x.x.x.7.0.103InformationalNoA port is error-disabled due to excessive link flaps.

This trap signifies that a port is error-disabled due to excessive link flaps.

x.x.x.x.x.x.x.x.x.x.7.0.106InformationalNovLAG instance is up.

This trap signifies that vLAG instance is up identified in the trap message.

x.x.x.x.x.x.x.x.x.x.7.0.107InformationalNovLAG is down but remote instance is up.

This trap signifies that vLAG is down but remote instance is Up.

x.x.x.x.x.x.x.x.x.x.7.0.108InformationalNovLAG is down but local instance is up.

This trap signifies that vLAG is down but local instance is Up.

x.x.x.x.x.x.x.x.x.x.7.0.109InformationalNovLAG instance is down.

This trap signifies that vLAG instance is down identified in the trap message.

x.x.x.x.x.x.x.x.x.x.7.0.110InformationalNoThe connection between vLAG switches is up.

This trap signifies that connection between vLAG switches is up.

x.x.x.x.x.x.x.x.x.x.7.0.111InformationalNoThe connection between vLAG switches is down.

This trap signifies that connection between vLAG switches is down.

x.x.x.x.x.x.x.x.x.x.7.0.112InformationalNoA spoofed VM MAC was found.

This trap signifies that a spoofed VM MAC was found.

x.x.x.x.x.x.x.x.x.x.7.0.144WarningNoThe connection to openflow controller is broken.

This trap signifies that the connection to openflow controller is broken.

x.x.x.x.x.x.x.x.x.x.7.0.145InformationalNoThe connection to openflow controller is successful.

This trap signifies that the connection to openflow controller is successful.

x.x.x.x.x.x.x.x.x.x.7.0.146WarningNoThe openflow switch moving to emergency state.

This trap signifies that the openflow switch moving to emergency state.

x.x.x.x.x.x.x.x.x.x.7.0.147InformationalNoThe openflow switch came out of emergency state.

This trap signifies that the openflow switch came out of emergency state.

x.x.x.x.x.x.x.x.x.x.7.0.148InformationalNoThe device is working in openflow switch mode.

This trap signifies that the device working in openflow switch mode.

x.x.x.x.x.x.x.x.x.x.7.0.149InformationalNoThe device is in normal mode.

This trap signifies that the device working in normal switch mode.

x.x.x.x.x.x.x.x.x.x.7.0.150InformationalNoThe flow table entries cleared from the device table.

This trap signifies that the flow table entries being cleared from the device.

x.x.x.x.x.x.x.x.x.x.7.0.151InformationalNoOpenflow statistics being cleared from the device.

This trap signifies that the openflow statistics being cleared from the device.

x.x.x.x.x.x.x.x.x.x.7.0.152WarningNoThe device unable to add flow entry in openflow due to unavailability of system resources.

This trap signifies that the device unable to add flow entry in openflow due to unavailability of system resources.

x.x.x.x.x.x.x.x.x.x.7.0.153InformationalNoThe device reached its configured flow limit.

This trap signifies that the device reaches its configured flow limit.

x.x.x.x.x.x.x.x.x.x.7.0.154InformationalNoThe port operationally down by openflow controller.

This trap signifies that the port operationally down by openflow controller.

x.x.x.x.x.x.x.x.x.x.7.0.155InformationalNoThe port operationally up by openflow controller.

This trap signifies that the port operationally up by openflow controller.

x.x.x.x.x.x.x.x.x.x.7.0.156WarningNoThe device unable to connect to controller Openflow due to bad versions, or negotiation failure.

This trap signifies that the device unable to connect to controller either due to bad version, or negotiation/hello failure.

x.x.x.x.x.x.x.x.x.x.7.0.158InformationalNoDot1x feature is enabled.

This trap is sent when dot1x feature is enabled.

x.x.x.x.x.x.x.x.x.x.7.0.162InformationalNoDefault admin account has been disabled.

This trap signifies that default admin account has been disabled.

x.x.x.x.x.x.x.x.x.x.7.0.163InformationalNoThe configured password does not match strong password complexity.

This trap signifies that configured password does not match strong password complexity.

x.x.x.x.x.x.x.x.x.x.7.0.164InformationalNoAn account has been locked.

This trap signifies that account has been unlocked.

x.x.x.x.x.x.x.x.x.x.7.0.165InformationalNoAn account has been unlocked.

This trap signifies that account has been unlocked.

x.x.x.x.x.x.x.x.x.x.7.0.166InformationalNoA Stack Member is reinitializing itself such that the agent configuration nor the protocol entity implementation is altered.

This trap signifies that a Stack Member is reinitializing itself such that the agent configuration nor the protocol entity implementation is altered.

x.x.x.x.x.x.x.x.x.x.7.0.167InformationalNoA Stack Member is reinitializing itself such that the agent configuration nor the protocol entity implementation is altered.

This trap signifies that a Stack Member is reinitializing itself such that the agent configuration nor the protocol entity implementation is altered.

x.x.x.x.x.x.x.x.x.x.7.0.173InformationalNoWhen SNMP requests are blocked, a trap is sent showing the blocked up.

This trap is sent when SNMP requests are blocked, a trap is sent showing the blocked IP.

x.x.x.x.x.x.x.x.x.x.7.0.178InformationalNoARP Table is full.

This trap signifies that ARP table is full.

x.x.x.x.x.x.x.x.x.x.7.0.184InformationalNoARP table is full.

This trap signifies that ARP table is full.

x.x.x.x.x.x.x.x.x.x.7.0.185InformationalNoAn incorrect ARP was received.

This trap signifies that an incorrect ARP was received.

x.x.x.x.x.x.x.x.x.x.7.1000.0InformationalNoA user login failed.

This trap signifies that someone failed to enter a valid user name and password combination. This trap specifies whether the login attempt was from CONSOLE or TELNET. In case of TELNET login, it also specifies the IP address of the host from which the attempt was made.

1.0.8802.1.1.2.1.5.6945.0.1WarningNoAn error occurs with DCBX control on port {0} and there is no other trap defined for the specific error condition.
Arguments:
  • {0}. The port number

1.0.8802.1.1.2.1.5.6945.0.2WarningNoAn error has occurred during the configuration exchange with the peer. lldpXdcbxFeatError is true and there is no other trap defined for the specific error condition.
1.0.8802.1.1.2.1.5.6945.0.3InformationalNoMultiple LLDP neighbors are detected on port {0}.
Arguments:
  • {0}. The port number.

1.0.8802.1.1.2.1.5.6945.0.3InformationalNoMultiple LLDP neighbors are detected on port {0}.
Arguments:
  • {0}. The port number

1.0.8802.1.1.2.1.5.6945.0.4WarningNoThe LLDP transmit has been disabled on port {0}.
Arguments:
  • {0}. The port number

1.0.8802.1.1.2.1.5.6945.0.5WarningNoThe LLDP receive has been disabled on port {0}.
Arguments:
  • {0}. The port number

1.0.8802.1.1.2.1.5.6945.0.6InformationalNoA duplicate control Sub-TLV is detected on port {0}.
Arguments:
  • {0}. The port number

1.0.8802.1.1.2.1.5.6945.0.7InformationalNoA duplicate feature {0} Sub-TLV is detected.
Arguments:
  • {0}. The feature type.

1.0.8802.1.1.2.1.5.6945.0.8InformationalNoFeature type {0} is not supported on by a peer.
Arguments:
  • {0}. The feature type

1.0.8802.1.1.2.1.5.6945.0.9WarningNoThe peer has stopped responding, port number {0}.

The peer has stopped responding as evidenced by an LLDP time-out event.

Arguments:
  • {0}. The port number

1.0.8802.1.1.2.1.5.6945.0.10WarningNoThe configuration received from peer results into partial or complete mismatch on port {0} snmp_dot1dStpVersion=The version of Spanning Tree Protocol the bridge is running.
Arguments:
  • {0}. The port number

1.3.6.1.2.1.17.0.1InformationalNoNewRoot: The sending agent has become the new root of the Spanning Tree.
1.3.6.1.2.1.17.0.2InformationalNoTopologyChange: Is sent by a bridge when any of its configured ports change from the Learning state to the Forwarding state, or from the Forwarding state to the Blocking state.
1.3.6.1.2.1.17.1.1.0InformationalNoThe MAC address used by this bridge when it must be referred to in a unique fashion.
1.3.6.1.2.1.17.2.5.0InformationalNoThe bridge identifier of the root of the spanning tree as determined by the Spanning Tree Protocol as run by this node.
1.3.6.1.2.1.17.11.1.1.16.0Informational The version of Spanning Tree Protocol the bridge is running.
1.3.6.1.2.1.47.2.0.1InformationalNoA change in the Entity tables has taken place.

This trap occurs at the time a conceptual row is created, modified, or deleted in any of these tables: entPhysicalTable, entLogicalTable, entLPMappingTable, entAliasMappingTable, entPhysicalContainsTable.

1.3.6.1.6.3.1.1.5.1InformationalNoThe SNMP entity, supporting a notification originator application, is reinitializing itself and that its configuration might have been altered.
1.3.6.1.6.3.1.1.5.2InformationalNoThe SNMP entity, supporting a notification originator application, is reinitializing itself and that its configuration is not altered.
1.3.6.1.6.3.1.1.5.3WarningNoA failure in one of the communication link with ifIndex {0}.
Arguments:
  • {0}. The ifIndex of the port

1.3.6.1.6.3.1.1.5.4InformationalNoThe communication link with ifIndex {0} is up.
Arguments:
  • {0}. The ifIndex of the port

1.3.6.1.6.3.1.1.5.5WarningNoThe sending protocol entity is the addressee of a protocol message that is not properly authenticated.
1.3.6.1.6.3.1.1.5.6WarningNoAn EGP neighbor {0} for whom the sending protocol entity was an EGP peer has been marked down and the peer relationship no longer obtains.
Arguments:
  • {0}. The EGP neighbor

Table 2. Events in the audit log for Flex switches
Event IDMessage text and description
1.3.6.1.4.1.2.6.249.0.1AUDIT_LOGIN

User login/logout activity. Triggered when user login/logout with telnet/ssh/http/https/SNMPv1/SNMPv3.

1.3.6.1.4.1.2.6.249.0.1AUDIT_PASSWD

User passwords modify. Triggered when the local login user password has been modified.

1.3.6.1.4.1.2.6.249.0.1AUDIT_USER

Create user, role change Triggered when new local user created or local user privilege changed.

1.3.6.1.4.1.2.6.249.0.1AUDIT_CONFIG

Configuration change. When the switch configuration changed by an operation manually, a corresponding audit event is generated.

1.3.6.1.4.1.2.6.249.0.1AUDIT_AUTH

When authentication failed in a protocol (such as NTP, BGP, or VRRP) that might affect running business in security perspective, a corresponding audit log event is generated.

1.3.6.1.4.1.2.6.249.0.1AUDIT_RESOURCE

When hardware resource (like memory, CPU, flash) or software resource (such as ARP table, IP route table, or OSPF route table) reach the capacity limitation, corresponding audit log event is generated.

1.3.6.1.4.1.2.6.249.0.1AUDIT_CLEAR

Triggered when audit log cleared by privileged login user or SNMPv3 user.

1.3.6.1.4.1.2.6.249.0.1AUDIT_SNMPV3_TEST

Triggered for test purpose to verify the path after audit log SNMPv3 account is configured.

1.3.6.1.4.1.2.6.249.0.1(Lenovo Flex switch only) AUDIT_LENOVO_L3_LINK

Layer three link status change which might affect running business in security perspective like default gateway change or up/down status change.

Table 3. SNMP traps in the event log for Lenovo ThinkSystem DB series switches
Trap IDSeverityAutomatically Notify SupportMessage text and description
1.3.6.1.2.1.160.0.1InformationalNo

The Zone Server has rejected the request.

This notification is generated whenever a Zone Server (indicated by the value of t11FamLocalSwitchWwn) rejects a request. The value of t11ZsRejectCtCommandString indicates the rejected request, and the values of t11ZsRejectReasonCode, t11ZsRejectReasonCodeExp and t11ZsRejectReasonVendorCode indicate the reason for the rejection. The value of t11ZsRequestClient indicates the source of the request.

1.3.6.1.2.1.160.0.2InformationalNo

A Zone merge failure has occurred on the Fabric.

This notification indicates that a Zone merge failure has occurred on the Fabric indicated by the value of t11ZsFabricIndex, on the interface indicated by the value of ifIndex. If multiple Virtual Fabrics are configured on an interface, and all have a Zone merge failure at the same time, then just one notification is generated and t11ZsFabricIndex has the value 4096.

1.3.6.1.2.1.160.0.3InformationalNo

A successful Zone merge has occurred on the Fabric.

This notification indicates that a successful Zone merge has occurred on the Fabric indicated by the value of t11ZsFabricIndex, on the interface indicated by the value of ifIndex. If multiple Virtual Fabrics are configured on an interface, and all have a successful Zone Merge at the same time, then just one notification is generated and t11ZsFabricIndex has the value 4096.

1.3.6.1.2.1.160.0.4InformationalNo

The value of a Default Zone Setting has changed.

This notification indicates that the value of a Default Zone Setting has changed. The value of t11ZsServerDefaultZoneSetting contains the value after the change.

1.3.6.1.2.1.160.0.5InformationalNo

A Zone Set on a Fabric has been activated / deactivated.

This notification is generated whenever a switch (indicated by the value of t11FamLocalSwitchWwn) activates/deactivates a Zone Set on a Fabric. The t11ZsActivateResult object denotes the outcome of the activation/deactivation.

1.3.6.1.3.94.0.1InformationalNo

The overall status of the unit status has changed.

Generated when connUnitStatus changes.

1.3.6.1.3.94.0.4InformationalNo

An event has been generated by the connectivity unit.

1.3.6.1.3.94.0.6InformationalNo

The overall status of the connectivity unit changed.

This trap sends the instance of connUnitPortName as part of the trap; the instance string is NULL, if the port name is not defined for the specified port.

1.3.6.1.4.1.1588.2.1.1.1.0.3InformationalNo

Port Index {0}. changed state to {1}. Port Name: {2} and SSN is # {3}

A swFCPortScn (3) is generated whenever an FC port changes its operational state or port type.

Arguments:
  • {0}. Port number
  • {1}. Port state
  • {2}. Port name
  • {2}. Switch serial number
1.3.6.1.4.1.1588.2.1.1.1.0.4InformationalNo

Event with index {0} (severity level {0}) and description: {2} occurred on the switch.

This trap is generated when an event occurs with a level that is at or below swEventTrapLevel

Arguments:
  • {0}. Event index
  • {1}. security level
  • {2}. Event description
1.3.6.1.4.1.1588.2.1.1.1.0.7InformationalNo

An IPv6 address status change occurred.

This trap is generated when an IPv6 address status change event occurs. It is generated only when the IPv6 stateless state changes to the deprecation state and not for address change notification.

1.3.6.1.4.1.1588.2.1.1.1.0.8InformationalNo

A partition manager change happened.

This trap is generated when any partition manager change happens. This trap is generated when:
  • Logical switch is created or deleted.

  • Port is moved between logical switches.

  • Switch FID changes.

  • When any logical switch is changed to a base switch.

  • VF is enabled or disabled.
1.3.6.1.4.1.1588.2.1.1.1.0.9InformationalNo

The fabric has been reconfigurated

The trap to be sent for tracking fabric reconfiguration. This trap is generated under the following circumstances:
  • Two switches with the same domain ID have connected to one another.

  • Two fabrics have joined.

  • An E_Port has gone offline.

  • A principal link has segmented from the fabric.

  • Zone has conflicts.

  • Domain has conflicts.

  • Segmentation of the principal link between two switches.

  • Incompatible link parameters. During E_Port initialization, ports exchange link parameters. Rarely, incompatible parameters result in segmentation

1.3.6.1.4.1.1588.2.1.1.1.0.10InformationalNo

The segmentation has changed.

The trap to be sent for tracking segmentation changes.

1.3.6.1.4.1.1588.2.1.1.1.0.12InformationalNo

The state of the switch has changed. The switch is offline.

This trap is sent when the switch changes it state to online or offline.

1.3.6.1.4.1.1588.2.1.1.1.0.13InformationalNo

The ports have been moved from a switch to another.

This trap is sent when the ports are moved from one switch to another.

1.3.6.1.4.1.1588.2.1.1.1.0.14InformationalNo

An event has occurred on the switch

This trap is sent for one of the following events:
  • Fabric change

  • Device change

  • FAPWWN change

  • FDMI events

  • Routing policy change

  • Diagnostics port configuration change

  • Polling status

  • Dynamic port name change

  • Dynamic port name feature enable/disable event

1.3.6.1.4.1.1588.2.1.1.1.0.15InformationalNo

A login /logout has occurred on the switch.

This trap is sent whenever a device logs in or logs out.

1.3.6.1.4.1.1588.2.1.1.1.0.16InformationalNo

There is a change in local zone database

This trap is sent whenever there is change in local zone database.

1.3.6.1.4.1.1588.2.1.1.50.21.0.1InformationalNo

A device registered with the switch

1.3.6.1.4.1.1588.2.1.1.50.21.0.2InformationalNo

A device deregistered with the switch.

1.3.6.1.4.1.1588.2.1.1.50.21.0.3InformationalNo

A listener for a link failure incident was added.

1.3.6.1.4.1.1588.2.1.1.50.21.0.4InformationalNo

A listener for a link failure incident was removed.

1.3.6.1.4.1.1588.2.1.1.50.21.0.5InformationalNo

A link failure incident has occurred.

A link failure incident has occurred. The value of lIRRIndex will be –2147483647 and IIRRListenerPID will be 0 if there is no listener for the incident

1.3.6.1.4.1.1588.2.1.2.2.0.1InformationalNo

The FRU status has changed.

This trap is generated under the following events:

  • When the FRU is added, is removed, or fails

  • When the FRU is powered on or off

  • When the switch is rebooted

  • When there is a fault in the blade

1.3.6.1.4.1.1588.2.1.2.2.0.2InformationalNo

The status of CP has changed.

This trap is sent when the status of any CP object changes.

The cpLastEvent variable provides the information about the event that occurred. Some of the triggers that generate this trap are:

  • Reboot

  • Firmware download

  • Fast boot

  • HA failover

1.3.6.1.4.1.1588.2.1.2.2.0.3InformationalNo

A FRU has been added, removed or fails.

This trap is generated when an FRU is added, is removed, or fails.

1.3.6.1.4.1.1588.3.1.4.0.1InformationalNo

A MAPS threshold event has occurred.

This trap is sent for MAPS threshold events..

1.3.6.1.4.1.1588.3.1.4.0.2InformationalNo

Quiet Time expiration for MAPS has been reached.

This trap is sent for MAPS upon quiet time (QT) expiration.

1.3.6.1.6.3.1.1.5.1InformationalNo

The SNMP entity, supporting a notification originator application, is reinitializing itself and that its configuration might have been altered.

1.3.6.1.6.3.1.1.5.2InformationalNo

The SNMP entity, supporting a notification originator application, is reinitializing itself and that its configuration is not altered.

1.3.6.1.6.3.1.1.5.3WarningNo

A failure in one of the communication link with ifIndex {0}.

Arguments:
  • {0}. The ifIndex of the port

1.3.6.1.6.3.1.1.5.4InformationalNo

The communication link with ifIndex {0} is up.

Arguments:
  • {0}. The ifIndex of the port