Source: https://git.zabbix.com/projects/ZBX/repos/zabbix/browse/templates/net/cisco/cisco_snmp

Cisco IOS by SNMP

Overview

Known Issues

Description: no if(in|out)(Errors|Discards) are available for vlan ifType Version: IOS for example: 12.1(22)EA11, 15.4(3)M2 Device: C2911, C7600

Requirements

Zabbix version: 7.0 and higher.

Tested versions

This template has been tested on:

  • Cisco IOS Software releases 12.2(3.5)

Configuration

Zabbix should be configured according to the instructions in the Templates out of the box section.

Setup

Refer to the vendor documentation.

Macros used

Name Description Default
{$MEMORY.UTIL.MAX} 90
{$CPU.UTIL.CRIT} 90
{$TEMP_CRIT} 60
{$TEMP_CRIT_LOW} 5
{$TEMP_WARN} 50
{$TEMP_CRIT:"CPU"} 75
{$TEMP_WARN:"CPU"} 70
{$TEMP_WARN_STATUS} 2
{$TEMP_CRIT_STATUS} 3
{$TEMP_DISASTER_STATUS} 4
{$PSU_CRIT_STATUS:"critical"} 3
{$PSU_CRIT_STATUS:"shutdown"} 4
{$PSU_WARN_STATUS:"warning"} 2
{$PSU_WARN_STATUS:"notFunctioning"} 6
{$FAN_CRIT_STATUS:"critical"} 3
{$FAN_CRIT_STATUS:"shutdown"} 4
{$FAN_WARN_STATUS:"warning"} 2
{$FAN_WARN_STATUS:"notFunctioning"} 6
{$SNMP.TIMEOUT} 5m
{$ICMP_LOSS_WARN} 20
{$ICMP_RESPONSE_TIME_WARN} 0.15
{$IF.ERRORS.WARN} 2
{$IF.UTIL.MAX} 90
{$IFCONTROL} 1
{$NET.IF.IFNAME.MATCHES} ^.*$
{$NET.IF.IFNAME.NOT_MATCHES}

Filter out loopbacks, nulls, docker veth links and docker0 bridge by default

Macro too long. Please see the template.
{$NET.IF.IFOPERSTATUS.MATCHES} ^.*$
{$NET.IF.IFOPERSTATUS.NOT_MATCHES}

Ignore notPresent(6)

^6$
{$NET.IF.IFADMINSTATUS.MATCHES} ^.*
{$NET.IF.IFADMINSTATUS.NOT_MATCHES}

Ignore down(2) administrative status

^2$
{$NET.IF.IFDESCR.MATCHES} .*
{$NET.IF.IFDESCR.NOT_MATCHES} CHANGE_IF_NEEDED
{$NET.IF.IFALIAS.MATCHES} .*
{$NET.IF.IFALIAS.NOT_MATCHES} CHANGE_IF_NEEDED
{$NET.IF.IFTYPE.MATCHES} .*
{$NET.IF.IFTYPE.NOT_MATCHES} CHANGE_IF_NEEDED

Items

Name Description Type Key and additional info
Cisco IOS: SNMP walk memory

MIB: CISCO-MEMORY-POOL-MIB

Discovery of ciscoMemoryPoolTable, a table of memory pool monitoring entries.

http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15216-contiguous-memory.html.

SNMP agent vm.memory.walk
Cisco IOS: SNMP walk system CPUs

If your IOS device has several CPUs, you must use CISCO-PROCESS-MIB and its object cpmCPUTotal5minRev from the table called cpmCPUTotalTable,

indexed with cpmCPUTotalIndex.

This table allows CISCO-PROCESS-MIB to keep CPU statistics for different physical entities in the router,

like different CPU chips, group of CPUs, or CPUs in different modules/cards.

In case of a single CPU, cpmCPUTotalTable has only one entry.

SNMP agent system.cpu.walk
Cisco IOS: SNMP walk entity serial numbers

MIB: ENTITY-MIB

Entity Serial Numbers Discovery.

SNMP agent system.hw.serialnumber.walk
Cisco IOS: Hardware model name

MIB: ENTITY-MIB

SNMP agent system.hw.model

Preprocessing

  • Discard unchanged with heartbeat: 1d

Cisco IOS: Hardware serial number

MIB: ENTITY-MIB

SNMP agent system.hw.serialnumber

Preprocessing

  • Discard unchanged with heartbeat: 1d

Cisco IOS: Operating system

MIB: SNMPv2-MIB

SNMP agent system.sw.os[sysDescr.0]

Preprocessing

  • Regular expression: Version (.+), RELEASE \1

  • Discard unchanged with heartbeat: 1d

Cisco IOS: SNMP walk temperature sensors

Discovery of ciscoEnvMonTemperatureTable (ciscoEnvMonTemperatureDescr), a table of ambient temperature status maintained by the environmental monitor.

SNMP agent sensor.temp.walk
Cisco IOS: SNMP walk PSUs

The table of power supply status maintained by the environmental monitor card.

SNMP agent sensor.psu.walk
Cisco IOS: SNMP walk fans

Discovering system fans.

SNMP agent sensor.fans.walk
Cisco IOS: Uptime (network)

MIB: SNMPv2-MIB

The time (in hundredths of a second) since the network management portion of the system was last re-initialized.

SNMP agent system.net.uptime[sysUpTime.0]

Preprocessing

  • Custom multiplier: 0.01

Cisco IOS: Uptime (hardware)

MIB: HOST-RESOURCES-MIB

The amount of time since this host was last initialized. Note that this is different from sysUpTime in the SNMPv2-MIB [RFC1907] because sysUpTime is the uptime of the network management portion of the system.

SNMP agent system.hw.uptime[hrSystemUptime.0]

Preprocessing

  • Check for not supported value: any error

    ⛔️Custom on fail: Set value to: 0

  • Custom multiplier: 0.01

Cisco IOS: SNMP traps (fallback)

The item is used to collect all SNMP traps unmatched by other snmptrap items

SNMP trap snmptrap.fallback
Cisco IOS: System location

MIB: SNMPv2-MIB

The physical location of this node (e.g., `telephone closet, 3rd floor'). If the location is unknown, the value is the zero-length string.

SNMP agent system.location[sysLocation.0]

Preprocessing

  • Discard unchanged with heartbeat: 12h

Cisco IOS: System contact details

MIB: SNMPv2-MIB

The textual identification of the contact person for this managed node, together with information on how to contact this person. If no contact information is known, the value is the zero-length string.

SNMP agent system.contact[sysContact.0]

Preprocessing

  • Discard unchanged with heartbeat: 12h

Cisco IOS: System object ID

MIB: SNMPv2-MIB

The vendor's authoritative identification of the network management subsystem contained in the entity. This value is allocated within the SMI enterprises subtree (1.3.6.1.4.1) and provides an easy and unambiguous means for determiningwhat kind of box' is being managed. For example, if vendorFlintstones, Inc.' was assigned the subtree1.3.6.1.4.1.4242, it could assign the identifier 1.3.6.1.4.1.4242.1.1 to its `Fred Router'.

SNMP agent system.objectid[sysObjectID.0]

Preprocessing

  • Discard unchanged with heartbeat: 12h

Cisco IOS: System name

MIB: SNMPv2-MIB

An administratively-assigned name for this managed node.By convention, this is the node's fully-qualified domain name. If the name is unknown, the value is the zero-length string.

SNMP agent system.name

Preprocessing

  • Discard unchanged with heartbeat: 12h

Cisco IOS: System description

MIB: SNMPv2-MIB

A textual description of the entity. This value should

include the full name and version identification of the system's hardware type, software operating-system, and

networking software.

SNMP agent system.descr[sysDescr.0]

Preprocessing

  • Discard unchanged with heartbeat: 12h

Cisco IOS: SNMP agent availability

Availability of SNMP checks on the host. The value of this item corresponds to availability icons in the host list.

Possible value:

0 - not available

1 - available

2 - unknown

Zabbix internal zabbix[host,snmp,available]
Cisco IOS: ICMP ping Simple check icmpping
Cisco IOS: ICMP loss Simple check icmppingloss
Cisco IOS: ICMP response time Simple check icmppingsec
Cisco IOS: SNMP walk network interfaces

Discovering interfaces from IF-MIB.

SNMP agent net.if.walk
Cisco IOS: SNMP walk EtherLike-MIB interfaces

Discovering interfaces from IF-MIB and EtherLike-MIB. Interfaces with up(1) Operational Status are discovered.

SNMP agent net.if.duplex.walk

Triggers

Name Description Expression Severity Dependencies and additional info
Cisco IOS: Device has been replaced

Device serial number has changed. Acknowledge to close the problem manually.

last(/Cisco IOS by SNMP/system.hw.serialnumber,#1)<>last(/Cisco IOS by SNMP/system.hw.serialnumber,#2) and length(last(/Cisco IOS by SNMP/system.hw.serialnumber))>0 Info Manual close: Yes
Cisco IOS: Operating system description has changed

The description of the operating system has changed. Possible reasons are that the system has been updated or replaced. Acknowledge to close the problem manually.

last(/Cisco IOS by SNMP/system.sw.os[sysDescr.0],#1)<>last(/Cisco IOS by SNMP/system.sw.os[sysDescr.0],#2) and length(last(/Cisco IOS by SNMP/system.sw.os[sysDescr.0]))>0 Info Manual close: Yes
Depends on:
  • Cisco IOS: System name has changed
Cisco IOS: Host has been restarted

Uptime is less than 10 minutes.

(last(/Cisco IOS by SNMP/system.hw.uptime[hrSystemUptime.0])>0 and last(/Cisco IOS by SNMP/system.hw.uptime[hrSystemUptime.0])<10m) or (last(/Cisco IOS by SNMP/system.hw.uptime[hrSystemUptime.0])=0 and last(/Cisco IOS by SNMP/system.net.uptime[sysUpTime.0])<10m) Warning Manual close: Yes
Depends on:
  • Cisco IOS: No SNMP data collection
Cisco IOS: System name has changed

The name of the system has changed. Acknowledge to close the problem manually.

last(/Cisco IOS by SNMP/system.name,#1)<>last(/Cisco IOS by SNMP/system.name,#2) and length(last(/Cisco IOS by SNMP/system.name))>0 Info Manual close: Yes
Cisco IOS: No SNMP data collection

SNMP is not available for polling. Please check device connectivity and SNMP settings.

max(/Cisco IOS by SNMP/zabbix[host,snmp,available],{$SNMP.TIMEOUT})=0 Warning Depends on:
  • Cisco IOS: Unavailable by ICMP ping
Cisco IOS: Unavailable by ICMP ping

Last three attempts returned timeout. Please check device connectivity.

max(/Cisco IOS by SNMP/icmpping,#3)=0 High
Cisco IOS: High ICMP ping loss min(/Cisco IOS by SNMP/icmppingloss,5m)>{$ICMP_LOSS_WARN} and min(/Cisco IOS by SNMP/icmppingloss,5m)<100 Warning Depends on:
  • Cisco IOS: Unavailable by ICMP ping
Cisco IOS: High ICMP ping response time avg(/Cisco IOS by SNMP/icmppingsec,5m)>{$ICMP_RESPONSE_TIME_WARN} Warning Depends on:
  • Cisco IOS: High ICMP ping loss
  • Cisco IOS: Unavailable by ICMP ping

LLD rule Memory Discovery

Name Description Type Key and additional info
Memory Discovery

Discovery of ciscoMemoryPoolTable, a table of memory pool monitoring entries.

http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15216-contiguous-memory.html

Dependent item memory.discovery

Preprocessing

  • SNMP walk to JSON

  • Discard unchanged with heartbeat: 1h

Item prototypes for Memory Discovery

Name Description Type Key and additional info
{#SNMPVALUE}: Used memory

MIB: CISCO-MEMORY-POOL-MIB

Indicates the number of bytes from the memory pool that are currently in use by applications on the managed device.

Reference: http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15216-contiguous-memory.html

Dependent item vm.memory.used[ciscoMemoryPoolUsed.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.48.1.1.1.5.{#SNMPINDEX}

{#SNMPVALUE}: Free memory

MIB: CISCO-MEMORY-POOL-MIB

Indicates the number of bytes from the memory pool that are currently unused on the managed device. Note that the sum of ciscoMemoryPoolUsed and ciscoMemoryPoolFree is the total amount of memory in the pool

Reference: http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15216-contiguous-memory.html

Dependent item vm.memory.free[ciscoMemoryPoolFree.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.48.1.1.1.6.{#SNMPINDEX}

{#SNMPVALUE}: Memory utilization

Memory utilization in %.

Calculated vm.memory.util[vm.memory.util.{#SNMPINDEX}]

Trigger prototypes for Memory Discovery

Name Description Expression Severity Dependencies and additional info
{#SNMPVALUE}: High memory utilization

The system is running out of free memory.

min(/Cisco IOS by SNMP/vm.memory.util[vm.memory.util.{#SNMPINDEX}],5m)>{$MEMORY.UTIL.MAX} Average

LLD rule CPU Discovery

Name Description Type Key and additional info
CPU Discovery

If your IOS device has several CPUs, you must use CISCO-PROCESS-MIB and its object cpmCPUTotal5minRev from the table called cpmCPUTotalTable,

indexed with cpmCPUTotalIndex.

This table allows CISCO-PROCESS-MIB to keep CPU statistics for different physical entities in the router,

like different CPU chips, group of CPUs, or CPUs in different modules/cards.

In case of a single CPU, cpmCPUTotalTable has only one entry.

Dependent item cpu.discovery

Preprocessing

  • SNMP walk to JSON

  • Discard unchanged with heartbeat: 1h

Item prototypes for CPU Discovery

Name Description Type Key and additional info
#{#SNMPINDEX}: CPU utilization

MIB: CISCO-PROCESS-MIB

The cpmCPUTotal5minRev MIB object provides a more accurate view of the performance of the router over time than the MIB objects cpmCPUTotal1minRev and cpmCPUTotal5secRev . These MIB objects are not accurate because they look at CPU at one minute and five second intervals, respectively. These MIBs enable you to monitor the trends and plan the capacity of your network. The recommended baseline rising threshold for cpmCPUTotal5minRev is 90 percent. Depending on the platform, some routers that run at 90 percent, for example, 2500s, can exhibit performance degradation versus a high-end router, for example, the 7500 series, which can operate fine.

Reference: http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15215-collect-cpu-util-snmp.html

Dependent item system.cpu.util[cpmCPUTotal5minRev.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.109.1.1.1.1.8.{#SNMPINDEX}

  • Discard unchanged with heartbeat: 5m

Trigger prototypes for CPU Discovery

Name Description Expression Severity Dependencies and additional info
#{#SNMPINDEX}: High CPU utilization

The CPU utilization is too high. The system might be slow to respond.

min(/Cisco IOS by SNMP/system.cpu.util[cpmCPUTotal5minRev.{#SNMPINDEX}],5m)>{$CPU.UTIL.CRIT} Warning

LLD rule Entity Serial Numbers Discovery

Name Description Type Key and additional info
Entity Serial Numbers Discovery Dependent item entity_sn.discovery

Preprocessing

  • SNMP walk to JSON

  • Discard unchanged with heartbeat: 1h

Item prototypes for Entity Serial Numbers Discovery

Name Description Type Key and additional info
{#ENT_NAME}: Hardware serial number

MIB: ENTITY-MIB

Dependent item system.hw.serialnumber[entPhysicalSerialNum.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.47.1.1.1.1.11.{#SNMPINDEX}

  • Discard unchanged with heartbeat: 1d

Trigger prototypes for Entity Serial Numbers Discovery

Name Description Expression Severity Dependencies and additional info
{#ENT_NAME}: Device has been replaced

Device serial number has changed. Acknowledge to close the problem manually.

last(/Cisco IOS by SNMP/system.hw.serialnumber[entPhysicalSerialNum.{#SNMPINDEX}],#1)<>last(/Cisco IOS by SNMP/system.hw.serialnumber[entPhysicalSerialNum.{#SNMPINDEX}],#2) and length(last(/Cisco IOS by SNMP/system.hw.serialnumber[entPhysicalSerialNum.{#SNMPINDEX}]))>0 Info Manual close: Yes

LLD rule Temperature Discovery

Name Description Type Key and additional info
Temperature Discovery

Discovery of ciscoEnvMonTemperatureTable (ciscoEnvMonTemperatureDescr), a table of ambient temperature status

maintained by the environmental monitor.

Dependent item temperature.discovery

Preprocessing

  • SNMP walk to JSON

    ⛔️Custom on fail: Discard value

  • Discard unchanged with heartbeat: 1h

Item prototypes for Temperature Discovery

Name Description Type Key and additional info
{#SNMPVALUE}: Temperature

MIB: CISCO-ENVMON-MIB

The current measurement of the test point being instrumented.

Dependent item sensor.temp.value[ciscoEnvMonTemperatureValue.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.13.1.3.1.3.{#SNMPINDEX}

  • Discard unchanged with heartbeat: 3m

{#SNMPVALUE}: Temperature status

MIB: CISCO-ENVMON-MIB

The current state of the test point being instrumented.

Dependent item sensor.temp.status[ciscoEnvMonTemperatureState.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.13.1.3.1.6.{#SNMPINDEX}

  • Discard unchanged with heartbeat: 3m

Trigger prototypes for Temperature Discovery

Name Description Expression Severity Dependencies and additional info
{#SNMPVALUE}: Temperature is above warning threshold

This trigger uses temperature sensor values as well as temperature sensor status if available

avg(/Cisco IOS by SNMP/sensor.temp.value[ciscoEnvMonTemperatureValue.{#SNMPINDEX}],5m)>{$TEMP_WARN:"{#SNMPVALUE}"} or last(/Cisco IOS by SNMP/sensor.temp.status[ciscoEnvMonTemperatureState.{#SNMPINDEX}])={$TEMP_WARN_STATUS} Warning Depends on:
  • {#SNMPVALUE}: Temperature is above critical threshold
{#SNMPVALUE}: Temperature is above critical threshold

This trigger uses temperature sensor values as well as temperature sensor status if available

avg(/Cisco IOS by SNMP/sensor.temp.value[ciscoEnvMonTemperatureValue.{#SNMPINDEX}],5m)>{$TEMP_CRIT:"{#SNMPVALUE}"} or last(/Cisco IOS by SNMP/sensor.temp.status[ciscoEnvMonTemperatureState.{#SNMPINDEX}])={$TEMP_CRIT_STATUS} or last(/Cisco IOS by SNMP/sensor.temp.status[ciscoEnvMonTemperatureState.{#SNMPINDEX}])={$TEMP_DISASTER_STATUS} High
{#SNMPVALUE}: Temperature is too low avg(/Cisco IOS by SNMP/sensor.temp.value[ciscoEnvMonTemperatureValue.{#SNMPINDEX}],5m)<{$TEMP_CRIT_LOW:"{#SNMPVALUE}"} Average

LLD rule PSU Discovery

Name Description Type Key and additional info
PSU Discovery

The table of power supply status maintained by the environmental monitor card.

Dependent item psu.discovery

Preprocessing

  • SNMP walk to JSON

    ⛔️Custom on fail: Discard value

  • Discard unchanged with heartbeat: 1h

Item prototypes for PSU Discovery

Name Description Type Key and additional info
{#SENSOR_INFO}: Power supply status

MIB: CISCO-ENVMON-MIB

Dependent item sensor.psu.status[ciscoEnvMonSupplyState.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.13.1.5.1.3.{#SNMPINDEX}

  • Discard unchanged with heartbeat: 3m

Trigger prototypes for PSU Discovery

Name Description Expression Severity Dependencies and additional info
{#SENSOR_INFO}: Power supply is in critical state

Please check the power supply unit for errors

count(/Cisco IOS by SNMP/sensor.psu.status[ciscoEnvMonSupplyState.{#SNMPINDEX}],#1,"eq","{$PSU_CRIT_STATUS:\"critical\"}")=1 or count(/Cisco IOS by SNMP/sensor.psu.status[ciscoEnvMonSupplyState.{#SNMPINDEX}],#1,"eq","{$PSU_CRIT_STATUS:\"shutdown\"}")=1 Average
{#SENSOR_INFO}: Power supply is in warning state

Please check the power supply unit for errors

count(/Cisco IOS by SNMP/sensor.psu.status[ciscoEnvMonSupplyState.{#SNMPINDEX}],#1,"eq","{$PSU_WARN_STATUS:\"warning\"}")=1 or count(/Cisco IOS by SNMP/sensor.psu.status[ciscoEnvMonSupplyState.{#SNMPINDEX}],#1,"eq","{$PSU_WARN_STATUS:\"notFunctioning\"}")=1 Warning Depends on:
  • {#SENSOR_INFO}: Power supply is in critical state

LLD rule FAN Discovery

Name Description Type Key and additional info
FAN Discovery

The table of fan status maintained by the environmental monitor.

Dependent item fan.discovery

Preprocessing

  • SNMP walk to JSON

    ⛔️Custom on fail: Discard value

  • Discard unchanged with heartbeat: 1h

Item prototypes for FAN Discovery

Name Description Type Key and additional info
{#SENSOR_INFO}: Fan status

MIB: CISCO-ENVMON-MIB

Dependent item sensor.fan.status[ciscoEnvMonFanState.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.13.1.4.1.3.{#SNMPINDEX}

  • Discard unchanged with heartbeat: 3m

Trigger prototypes for FAN Discovery

Name Description Expression Severity Dependencies and additional info
{#SENSOR_INFO}: Fan is in critical state

Please check the fan unit

count(/Cisco IOS by SNMP/sensor.fan.status[ciscoEnvMonFanState.{#SNMPINDEX}],#1,"eq","{$FAN_CRIT_STATUS:\"critical\"}")=1 or count(/Cisco IOS by SNMP/sensor.fan.status[ciscoEnvMonFanState.{#SNMPINDEX}],#1,"eq","{$FAN_CRIT_STATUS:\"shutdown\"}")=1 Average
{#SENSOR_INFO}: Fan is in warning state

Please check the fan unit

count(/Cisco IOS by SNMP/sensor.fan.status[ciscoEnvMonFanState.{#SNMPINDEX}],#1,"eq","{$FAN_WARN_STATUS:\"warning\"}")=1 or count(/Cisco IOS by SNMP/sensor.fan.status[ciscoEnvMonFanState.{#SNMPINDEX}],#1,"eq","{$FAN_WARN_STATUS:\"notFunctioning\"}")=1 Warning Depends on:
  • {#SENSOR_INFO}: Fan is in critical state

LLD rule Network interfaces discovery

Name Description Type Key and additional info
Network interfaces discovery

Discovering interfaces from IF-MIB.

Dependent item net.if.discovery

Preprocessing

  • SNMP walk to JSON

  • Discard unchanged with heartbeat: 1h

Item prototypes for Network interfaces discovery

Name Description Type Key and additional info
Interface {#IFNAME}({#IFALIAS}): Operational status

MIB: IF-MIB

The current operational state of the interface.

- The testing(3) state indicates that no operational packet scan be passed

- If ifAdminStatus is down(2) then ifOperStatus should be down(2)

- If ifAdminStatus is changed to up(1) then ifOperStatus should change to up(1) if the interface is ready to transmit and receive network traffic

- It should change todormant(5) if the interface is waiting for external actions (such as a serial line waiting for an incoming connection)

- It should remain in the down(2) state if and only if there is a fault that prevents it from going to the up(1) state

- It should remain in the notPresent(6) state if the interface has missing(typically, hardware) components.

Dependent item net.if.status[ifOperStatus.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.2.2.1.8.{#SNMPINDEX}

Interface {#IFNAME}({#IFALIAS}): Bits received

MIB: IF-MIB

The total number of octets received on the interface, including framing characters. This object is a 64-bit version of ifInOctets. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.

Dependent item net.if.in[ifHCInOctets.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.31.1.1.1.6.{#SNMPINDEX}

  • Change per second
  • Custom multiplier: 8

Interface {#IFNAME}({#IFALIAS}): Bits sent

MIB: IF-MIB

The total number of octets transmitted out of the interface, including framing characters. This object is a 64-bit version of ifOutOctets.Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.

Dependent item net.if.out[ifHCOutOctets.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.31.1.1.1.10.{#SNMPINDEX}

  • Change per second
  • Custom multiplier: 8

Interface {#IFNAME}({#IFALIAS}): Inbound packets with errors

MIB: IF-MIB

For packet-oriented interfaces, the number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. For character-oriented or fixed-length interfaces, the number of inbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.

Dependent item net.if.in.errors[ifInErrors.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.2.2.1.14.{#SNMPINDEX}

  • Change per second
  • Discard unchanged with heartbeat: 3m

Interface {#IFNAME}({#IFALIAS}): Outbound packets with errors

MIB: IF-MIB

For packet-oriented interfaces, the number of outbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. For character-oriented or fixed-length interfaces, the number of outbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.

Dependent item net.if.out.errors[ifOutErrors.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.2.2.1.20.{#SNMPINDEX}

  • Change per second
  • Discard unchanged with heartbeat: 3m

Interface {#IFNAME}({#IFALIAS}): Outbound packets discarded

MIB: IF-MIB

The number of outbound packets which were chosen to be discarded

even though no errors had been detected to prevent their being deliverable to a higher-layer protocol.

One possible reason for discarding such a packet could be to free up buffer space.

Discontinuities in the value of this counter can occur at re-initialization of the management system,

and at other times as indicated by the value of ifCounterDiscontinuityTime.

Dependent item net.if.out.discards[ifOutDiscards.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.2.2.1.19.{#SNMPINDEX}

  • Change per second
  • Discard unchanged with heartbeat: 3m

Interface {#IFNAME}({#IFALIAS}): Inbound packets discarded

MIB: IF-MIB

The number of inbound packets which were chosen to be discarded

even though no errors had been detected to prevent their being deliverable to a higher-layer protocol.

One possible reason for discarding such a packet could be to free up buffer space.

Discontinuities in the value of this counter can occur at re-initialization of the management system,

and at other times as indicated by the value of ifCounterDiscontinuityTime.

Dependent item net.if.in.discards[ifInDiscards.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.2.2.1.13.{#SNMPINDEX}

  • Change per second
  • Discard unchanged with heartbeat: 3m

Interface {#IFNAME}({#IFALIAS}): Interface type

MIB: IF-MIB

The type of interface.

Additional values for ifType are assigned by the Internet Assigned Numbers Authority (IANA),

through updating the syntax of the IANAifType textual convention.

Dependent item net.if.type[ifType.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.2.2.1.3.{#SNMPINDEX}

  • Discard unchanged with heartbeat: 1d

Interface {#IFNAME}({#IFALIAS}): Speed

MIB: IF-MIB

An estimate of the interface's current bandwidth in units of 1,000,000 bits per second. If this object reports a value of n' then the speed of the interface is somewhere in the range of n-500,000' to`n+499,999'. For interfaces which do not vary in bandwidth or for those where no accurate estimation can be made, this object should contain the nominal bandwidth. For a sub-layer which has no concept of bandwidth, this object should be zero.

Dependent item net.if.speed[ifHighSpeed.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.31.1.1.1.15.{#SNMPINDEX}

  • Custom multiplier: 1000000

  • Discard unchanged with heartbeat: 1h

Trigger prototypes for Network interfaces discovery

Name Description Expression Severity Dependencies and additional info
Interface {#IFNAME}({#IFALIAS}): Link down

This trigger expression works as follows:
1. It can be triggered if the operations status is down.
2. {$IFCONTROL:"{#IFNAME}"}=1 - a user can redefine context macro to value - 0. That marks this interface as not important. No new trigger will be fired if this interface is down.
3. {TEMPLATE_NAME:METRIC.diff()}=1 - the trigger fires only if the operational status was up to (1) sometime before (so, do not fire for the 'eternal off' interfaces.)

WARNING: if closed manually - it will not fire again on the next poll, because of .diff.

{$IFCONTROL:"{#IFNAME}"}=1 and last(/Cisco IOS by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])=2 and (last(/Cisco IOS by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#1)<>last(/Cisco IOS by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#2)) Average Manual close: Yes
Interface {#IFNAME}({#IFALIAS}): High bandwidth usage

The utilization of the network interface is close to its estimated maximum bandwidth.

(avg(/Cisco IOS by SNMP/net.if.in[ifHCInOctets.{#SNMPINDEX}],15m)>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*last(/Cisco IOS by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}]) or avg(/Cisco IOS by SNMP/net.if.out[ifHCOutOctets.{#SNMPINDEX}],15m)>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*last(/Cisco IOS by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])) and last(/Cisco IOS by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])>0 Warning Manual close: Yes
Depends on:
  • Interface {#IFNAME}({#IFALIAS}): Link down
Interface {#IFNAME}({#IFALIAS}): High error rate

It recovers when it is below 80% of the {$IF.ERRORS.WARN:"{#IFNAME}"} threshold.

min(/Cisco IOS by SNMP/net.if.in.errors[ifInErrors.{#SNMPINDEX}],5m)>{$IF.ERRORS.WARN:"{#IFNAME}"} or min(/Cisco IOS by SNMP/net.if.out.errors[ifOutErrors.{#SNMPINDEX}],5m)>{$IF.ERRORS.WARN:"{#IFNAME}"} Warning Manual close: Yes
Depends on:
  • Interface {#IFNAME}({#IFALIAS}): Link down
Interface {#IFNAME}({#IFALIAS}): Ethernet has changed to lower speed than it was before

This Ethernet connection has transitioned down from its known maximum speed. This might be a sign of autonegotiation issues. Acknowledge to close the problem manually.

change(/Cisco IOS by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])<0 and last(/Cisco IOS by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])>0 and ( last(/Cisco IOS by SNMP/net.if.type[ifType.{#SNMPINDEX}])=6 or last(/Cisco IOS by SNMP/net.if.type[ifType.{#SNMPINDEX}])=7 or last(/Cisco IOS by SNMP/net.if.type[ifType.{#SNMPINDEX}])=11 or last(/Cisco IOS by SNMP/net.if.type[ifType.{#SNMPINDEX}])=62 or last(/Cisco IOS by SNMP/net.if.type[ifType.{#SNMPINDEX}])=69 or last(/Cisco IOS by SNMP/net.if.type[ifType.{#SNMPINDEX}])=117 ) and (last(/Cisco IOS by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])<>2) Info Manual close: Yes
Depends on:
  • Interface {#IFNAME}({#IFALIAS}): Link down

LLD rule EtherLike-MIB Discovery

Name Description Type Key and additional info
EtherLike-MIB Discovery

Discovering interfaces from IF-MIB and EtherLike-MIB. Interfaces with up(1) Operational Status are discovered.

Dependent item net.if.duplex.discovery

Preprocessing

  • SNMP walk to JSON

  • Discard unchanged with heartbeat: 1h

Item prototypes for EtherLike-MIB Discovery

Name Description Type Key and additional info
Interface {#IFNAME}({#IFALIAS}): Duplex status

MIB: EtherLike-MIB

The current mode of operation of the MAC

entity. 'unknown' indicates that the current

duplex mode could not be determined.

Management control of the duplex mode is

accomplished through the MAU MIB. When

an interface does not support autonegotiation,

or when autonegotiation is not enabled, the

duplex mode is controlled using

ifMauDefaultType. When autonegotiation is

supported and enabled, duplex mode is controlled

using ifMauAutoNegAdvertisedBits. In either

case, the currently operating duplex mode is

reflected both in this object and in ifMauType.

Note that this object provides redundant

information with ifMauType. Normally, redundant

objects are discouraged. However, in this

instance, it allows a management application to

determine the duplex status of an interface

without having to know every possible value of

ifMauType. This was felt to be sufficiently

valuable to justify the redundancy.

Reference: [IEEE 802.3 Std.], 30.3.1.1.32,aDuplexStatus.

Dependent item net.if.duplex[dot3StatsDuplexStatus.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.10.7.2.1.19.{#SNMPINDEX}

Trigger prototypes for EtherLike-MIB Discovery

Name Description Expression Severity Dependencies and additional info
Interface {#IFNAME}({#IFALIAS}): In half-duplex mode

Please check autonegotiation settings and cabling

last(/Cisco IOS by SNMP/net.if.duplex[dot3StatsDuplexStatus.{#SNMPINDEX}])=2 Warning Manual close: Yes

Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP

Overview

This template is designed for the effortless deployment of Cisco IOS versions 12.0_3_T-12.2_3.5 monitoring by Zabbix via SNMP and doesn't require any external scripts.

Requirements

Zabbix version: 7.0 and higher.

Tested versions

This template has been tested on:

  • Cisco IOS Software releases later to 12.0(3)T and prior to 12.2(3.5)

Configuration

Zabbix should be configured according to the instructions in the Templates out of the box section.

Setup

Refer to the vendor documentation.

Macros used

Name Description Default
{$MEMORY.UTIL.MAX} 90
{$CPU.UTIL.CRIT} 90
{$TEMP_CRIT} 60
{$TEMP_CRIT_LOW} 5
{$TEMP_WARN} 50
{$TEMP_CRIT:"CPU"} 75
{$TEMP_WARN:"CPU"} 70
{$TEMP_WARN_STATUS} 2
{$TEMP_CRIT_STATUS} 3
{$TEMP_DISASTER_STATUS} 4
{$PSU_CRIT_STATUS:"critical"} 3
{$PSU_CRIT_STATUS:"shutdown"} 4
{$PSU_WARN_STATUS:"warning"} 2
{$PSU_WARN_STATUS:"notFunctioning"} 6
{$FAN_CRIT_STATUS:"critical"} 3
{$FAN_CRIT_STATUS:"shutdown"} 4
{$FAN_WARN_STATUS:"warning"} 2
{$FAN_WARN_STATUS:"notFunctioning"} 6
{$SNMP.TIMEOUT} 5m
{$ICMP_LOSS_WARN} 20
{$ICMP_RESPONSE_TIME_WARN} 0.15
{$IF.ERRORS.WARN} 2
{$IF.UTIL.MAX} 90
{$IFCONTROL} 1
{$NET.IF.IFNAME.MATCHES} ^.*$
{$NET.IF.IFNAME.NOT_MATCHES}

Filter out loopbacks, nulls, docker veth links and docker0 bridge by default

Macro too long. Please see the template.
{$NET.IF.IFOPERSTATUS.MATCHES} ^.*$
{$NET.IF.IFOPERSTATUS.NOT_MATCHES}

Ignore notPresent(6)

^6$
{$NET.IF.IFADMINSTATUS.MATCHES} ^.*
{$NET.IF.IFADMINSTATUS.NOT_MATCHES}

Ignore down(2) administrative status

^2$
{$NET.IF.IFDESCR.MATCHES} .*
{$NET.IF.IFDESCR.NOT_MATCHES} CHANGE_IF_NEEDED
{$NET.IF.IFALIAS.MATCHES} .*
{$NET.IF.IFALIAS.NOT_MATCHES} CHANGE_IF_NEEDED
{$NET.IF.IFTYPE.MATCHES} .*
{$NET.IF.IFTYPE.NOT_MATCHES} CHANGE_IF_NEEDED

Items

Name Description Type Key and additional info
Cisco IOS: SNMP walk memory

MIB: CISCO-MEMORY-POOL-MIB

Discovery of ciscoMemoryPoolTable, a table of memory pool monitoring entries.

http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15216-contiguous-memory.html.

SNMP agent vm.memory.walk
Cisco IOS: SNMP walk system CPUs

If your IOS device has several CPUs, you must use CISCO-PROCESS-MIB and its object cpmCPUTotal5minRev from the table called cpmCPUTotalTable,

indexed with cpmCPUTotalIndex.

This table allows CISCO-PROCESS-MIB to keep CPU statistics for different physical entities in the router,

like different CPU chips, group of CPUs, or CPUs in different modules/cards.

In case of a single CPU, cpmCPUTotalTable has only one entry.

SNMP agent system.cpu.walk
Cisco IOS: SNMP walk entity serial numbers

MIB: ENTITY-MIB

Entity Serial Numbers Discovery.

SNMP agent system.hw.serialnumber.walk
Cisco IOS: Hardware model name

MIB: ENTITY-MIB

SNMP agent system.hw.model

Preprocessing

  • Discard unchanged with heartbeat: 1d

Cisco IOS: Hardware serial number

MIB: ENTITY-MIB

SNMP agent system.hw.serialnumber

Preprocessing

  • Discard unchanged with heartbeat: 1d

Cisco IOS: Operating system

MIB: SNMPv2-MIB

SNMP agent system.sw.os[sysDescr.0]

Preprocessing

  • Regular expression: Version (.+), RELEASE \1

  • Discard unchanged with heartbeat: 1d

Cisco IOS: SNMP walk temperature sensors

Discovery of ciscoEnvMonTemperatureTable (ciscoEnvMonTemperatureDescr), a table of ambient temperature status maintained by the environmental monitor.

SNMP agent sensor.temp.walk
Cisco IOS: SNMP walk PSUs

The table of power supply status maintained by the environmental monitor card.

SNMP agent sensor.psu.walk
Cisco IOS: SNMP walk fans

Discovering system fans.

SNMP agent sensor.fans.walk
Cisco IOS: Uptime (network)

MIB: SNMPv2-MIB

The time (in hundredths of a second) since the network management portion of the system was last re-initialized.

SNMP agent system.net.uptime[sysUpTime.0]

Preprocessing

  • Custom multiplier: 0.01

Cisco IOS: Uptime (hardware)

MIB: HOST-RESOURCES-MIB

The amount of time since this host was last initialized. Note that this is different from sysUpTime in the SNMPv2-MIB [RFC1907] because sysUpTime is the uptime of the network management portion of the system.

SNMP agent system.hw.uptime[hrSystemUptime.0]

Preprocessing

  • Check for not supported value: any error

    ⛔️Custom on fail: Set value to: 0

  • Custom multiplier: 0.01

Cisco IOS: SNMP traps (fallback)

The item is used to collect all SNMP traps unmatched by other snmptrap items

SNMP trap snmptrap.fallback
Cisco IOS: System location

MIB: SNMPv2-MIB

The physical location of this node (e.g., `telephone closet, 3rd floor'). If the location is unknown, the value is the zero-length string.

SNMP agent system.location[sysLocation.0]

Preprocessing

  • Discard unchanged with heartbeat: 12h

Cisco IOS: System contact details

MIB: SNMPv2-MIB

The textual identification of the contact person for this managed node, together with information on how to contact this person. If no contact information is known, the value is the zero-length string.

SNMP agent system.contact[sysContact.0]

Preprocessing

  • Discard unchanged with heartbeat: 12h

Cisco IOS: System object ID

MIB: SNMPv2-MIB

The vendor's authoritative identification of the network management subsystem contained in the entity. This value is allocated within the SMI enterprises subtree (1.3.6.1.4.1) and provides an easy and unambiguous means for determiningwhat kind of box' is being managed. For example, if vendorFlintstones, Inc.' was assigned the subtree1.3.6.1.4.1.4242, it could assign the identifier 1.3.6.1.4.1.4242.1.1 to its `Fred Router'.

SNMP agent system.objectid[sysObjectID.0]

Preprocessing

  • Discard unchanged with heartbeat: 12h

Cisco IOS: System name

MIB: SNMPv2-MIB

An administratively-assigned name for this managed node.By convention, this is the node's fully-qualified domain name. If the name is unknown, the value is the zero-length string.

SNMP agent system.name

Preprocessing

  • Discard unchanged with heartbeat: 12h

Cisco IOS: System description

MIB: SNMPv2-MIB

A textual description of the entity. This value should

include the full name and version identification of the system's hardware type, software operating-system, and

networking software.

SNMP agent system.descr[sysDescr.0]

Preprocessing

  • Discard unchanged with heartbeat: 12h

Cisco IOS: SNMP agent availability

Availability of SNMP checks on the host. The value of this item corresponds to availability icons in the host list.

Possible value:

0 - not available

1 - available

2 - unknown

Zabbix internal zabbix[host,snmp,available]
Cisco IOS: ICMP ping Simple check icmpping
Cisco IOS: ICMP loss Simple check icmppingloss
Cisco IOS: ICMP response time Simple check icmppingsec
Cisco IOS: SNMP walk network interfaces

Discovering interfaces from IF-MIB.

SNMP agent net.if.walk

Triggers

Name Description Expression Severity Dependencies and additional info
Cisco IOS: Device has been replaced

Device serial number has changed. Acknowledge to close the problem manually.

last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/system.hw.serialnumber,#1)<>last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/system.hw.serialnumber,#2) and length(last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/system.hw.serialnumber))>0 Info Manual close: Yes
Cisco IOS: Operating system description has changed

The description of the operating system has changed. Possible reasons are that the system has been updated or replaced. Acknowledge to close the problem manually.

last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/system.sw.os[sysDescr.0],#1)<>last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/system.sw.os[sysDescr.0],#2) and length(last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/system.sw.os[sysDescr.0]))>0 Info Manual close: Yes
Depends on:
  • Cisco IOS: System name has changed
Cisco IOS: Host has been restarted

Uptime is less than 10 minutes.

(last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/system.hw.uptime[hrSystemUptime.0])>0 and last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/system.hw.uptime[hrSystemUptime.0])<10m) or (last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/system.hw.uptime[hrSystemUptime.0])=0 and last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/system.net.uptime[sysUpTime.0])<10m) Warning Manual close: Yes
Depends on:
  • Cisco IOS: No SNMP data collection
Cisco IOS: System name has changed

The name of the system has changed. Acknowledge to close the problem manually.

last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/system.name,#1)<>last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/system.name,#2) and length(last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/system.name))>0 Info Manual close: Yes
Cisco IOS: No SNMP data collection

SNMP is not available for polling. Please check device connectivity and SNMP settings.

max(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/zabbix[host,snmp,available],{$SNMP.TIMEOUT})=0 Warning Depends on:
  • Cisco IOS: Unavailable by ICMP ping
Cisco IOS: Unavailable by ICMP ping

Last three attempts returned timeout. Please check device connectivity.

max(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/icmpping,#3)=0 High
Cisco IOS: High ICMP ping loss min(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/icmppingloss,5m)>{$ICMP_LOSS_WARN} and min(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/icmppingloss,5m)<100 Warning Depends on:
  • Cisco IOS: Unavailable by ICMP ping
Cisco IOS: High ICMP ping response time avg(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/icmppingsec,5m)>{$ICMP_RESPONSE_TIME_WARN} Warning Depends on:
  • Cisco IOS: High ICMP ping loss
  • Cisco IOS: Unavailable by ICMP ping

LLD rule Memory Discovery

Name Description Type Key and additional info
Memory Discovery

Discovery of ciscoMemoryPoolTable, a table of memory pool monitoring entries.

http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15216-contiguous-memory.html

Dependent item memory.discovery

Preprocessing

  • SNMP walk to JSON

  • Discard unchanged with heartbeat: 1h

Item prototypes for Memory Discovery

Name Description Type Key and additional info
{#SNMPVALUE}: Used memory

MIB: CISCO-MEMORY-POOL-MIB

Indicates the number of bytes from the memory pool that are currently in use by applications on the managed device.

Reference: http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15216-contiguous-memory.html

Dependent item vm.memory.used[ciscoMemoryPoolUsed.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.48.1.1.1.5.{#SNMPINDEX}

{#SNMPVALUE}: Free memory

MIB: CISCO-MEMORY-POOL-MIB

Indicates the number of bytes from the memory pool that are currently unused on the managed device. Note that the sum of ciscoMemoryPoolUsed and ciscoMemoryPoolFree is the total amount of memory in the pool

Reference: http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15216-contiguous-memory.html

Dependent item vm.memory.free[ciscoMemoryPoolFree.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.48.1.1.1.6.{#SNMPINDEX}

{#SNMPVALUE}: Memory utilization

Memory utilization in %.

Calculated vm.memory.util[vm.memory.util.{#SNMPINDEX}]

Trigger prototypes for Memory Discovery

Name Description Expression Severity Dependencies and additional info
{#SNMPVALUE}: High memory utilization

The system is running out of free memory.

min(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/vm.memory.util[vm.memory.util.{#SNMPINDEX}],5m)>{$MEMORY.UTIL.MAX} Average

LLD rule CPU Discovery

Name Description Type Key and additional info
CPU Discovery

If your IOS device has several CPUs, you must use CISCO-PROCESS-MIB and its object cpmCPUTotal5minRev from the table called cpmCPUTotalTable,

indexed with cpmCPUTotalIndex.

This table allows CISCO-PROCESS-MIB to keep CPU statistics for different physical entities in the router,

like different CPU chips, group of CPUs, or CPUs in different modules/cards.

In case of a single CPU, cpmCPUTotalTable has only one entry.

Dependent item cpu.discovery

Preprocessing

  • SNMP walk to JSON

  • Discard unchanged with heartbeat: 1h

Item prototypes for CPU Discovery

Name Description Type Key and additional info
{#SNMPVALUE}: CPU utilization

MIB: CISCO-PROCESS-MIB

The overall CPU busy percentage in the last 5 minute

period. This object deprecates the avgBusy5 object from

the OLD-CISCO-SYSTEM-MIB. This object is deprecated

by cpmCPUTotal5minRev which has the changed range

of value (0..100).

Reference: http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15215-collect-cpu-util-snmp.html

Dependent item system.cpu.util[cpmCPUTotal5min.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.109.1.1.1.1.5.{#SNMPINDEX}

  • Discard unchanged with heartbeat: 5m

Trigger prototypes for CPU Discovery

Name Description Expression Severity Dependencies and additional info
{#SNMPVALUE}: High CPU utilization

The CPU utilization is too high. The system might be slow to respond.

min(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/system.cpu.util[cpmCPUTotal5min.{#SNMPINDEX}],5m)>{$CPU.UTIL.CRIT} Warning

LLD rule Entity Serial Numbers Discovery

Name Description Type Key and additional info
Entity Serial Numbers Discovery Dependent item entity_sn.discovery

Preprocessing

  • SNMP walk to JSON

  • Discard unchanged with heartbeat: 1h

Item prototypes for Entity Serial Numbers Discovery

Name Description Type Key and additional info
{#ENT_NAME}: Hardware serial number

MIB: ENTITY-MIB

Dependent item system.hw.serialnumber[entPhysicalSerialNum.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.47.1.1.1.1.11.{#SNMPINDEX}

  • Discard unchanged with heartbeat: 1d

Trigger prototypes for Entity Serial Numbers Discovery

Name Description Expression Severity Dependencies and additional info
{#ENT_NAME}: Device has been replaced

Device serial number has changed. Acknowledge to close the problem manually.

last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/system.hw.serialnumber[entPhysicalSerialNum.{#SNMPINDEX}],#1)<>last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/system.hw.serialnumber[entPhysicalSerialNum.{#SNMPINDEX}],#2) and length(last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/system.hw.serialnumber[entPhysicalSerialNum.{#SNMPINDEX}]))>0 Info Manual close: Yes

LLD rule Temperature Discovery

Name Description Type Key and additional info
Temperature Discovery

Discovery of ciscoEnvMonTemperatureTable (ciscoEnvMonTemperatureDescr), a table of ambient temperature status

maintained by the environmental monitor.

Dependent item temperature.discovery

Preprocessing

  • SNMP walk to JSON

    ⛔️Custom on fail: Discard value

  • Discard unchanged with heartbeat: 1h

Item prototypes for Temperature Discovery

Name Description Type Key and additional info
{#SNMPVALUE}: Temperature

MIB: CISCO-ENVMON-MIB

The current measurement of the test point being instrumented.

Dependent item sensor.temp.value[ciscoEnvMonTemperatureValue.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.13.1.3.1.3.{#SNMPINDEX}

  • Discard unchanged with heartbeat: 3m

{#SNMPVALUE}: Temperature status

MIB: CISCO-ENVMON-MIB

The current state of the test point being instrumented.

Dependent item sensor.temp.status[ciscoEnvMonTemperatureState.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.13.1.3.1.6.{#SNMPINDEX}

  • Discard unchanged with heartbeat: 3m

Trigger prototypes for Temperature Discovery

Name Description Expression Severity Dependencies and additional info
{#SNMPVALUE}: Temperature is above warning threshold

This trigger uses temperature sensor values as well as temperature sensor status if available

avg(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/sensor.temp.value[ciscoEnvMonTemperatureValue.{#SNMPINDEX}],5m)>{$TEMP_WARN:"{#SNMPVALUE}"} or last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/sensor.temp.status[ciscoEnvMonTemperatureState.{#SNMPINDEX}])={$TEMP_WARN_STATUS} Warning Depends on:
  • {#SNMPVALUE}: Temperature is above critical threshold
{#SNMPVALUE}: Temperature is above critical threshold

This trigger uses temperature sensor values as well as temperature sensor status if available

avg(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/sensor.temp.value[ciscoEnvMonTemperatureValue.{#SNMPINDEX}],5m)>{$TEMP_CRIT:"{#SNMPVALUE}"} or last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/sensor.temp.status[ciscoEnvMonTemperatureState.{#SNMPINDEX}])={$TEMP_CRIT_STATUS} or last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/sensor.temp.status[ciscoEnvMonTemperatureState.{#SNMPINDEX}])={$TEMP_DISASTER_STATUS} High
{#SNMPVALUE}: Temperature is too low avg(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/sensor.temp.value[ciscoEnvMonTemperatureValue.{#SNMPINDEX}],5m)<{$TEMP_CRIT_LOW:"{#SNMPVALUE}"} Average

LLD rule PSU Discovery

Name Description Type Key and additional info
PSU Discovery

The table of power supply status maintained by the environmental monitor card.

Dependent item psu.discovery

Preprocessing

  • SNMP walk to JSON

    ⛔️Custom on fail: Discard value

  • Discard unchanged with heartbeat: 1h

Item prototypes for PSU Discovery

Name Description Type Key and additional info
{#SENSOR_INFO}: Power supply status

MIB: CISCO-ENVMON-MIB

Dependent item sensor.psu.status[ciscoEnvMonSupplyState.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.13.1.5.1.3.{#SNMPINDEX}

  • Discard unchanged with heartbeat: 3m

Trigger prototypes for PSU Discovery

Name Description Expression Severity Dependencies and additional info
{#SENSOR_INFO}: Power supply is in critical state

Please check the power supply unit for errors

count(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/sensor.psu.status[ciscoEnvMonSupplyState.{#SNMPINDEX}],#1,"eq","{$PSU_CRIT_STATUS:\"critical\"}")=1 or count(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/sensor.psu.status[ciscoEnvMonSupplyState.{#SNMPINDEX}],#1,"eq","{$PSU_CRIT_STATUS:\"shutdown\"}")=1 Average
{#SENSOR_INFO}: Power supply is in warning state

Please check the power supply unit for errors

count(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/sensor.psu.status[ciscoEnvMonSupplyState.{#SNMPINDEX}],#1,"eq","{$PSU_WARN_STATUS:\"warning\"}")=1 or count(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/sensor.psu.status[ciscoEnvMonSupplyState.{#SNMPINDEX}],#1,"eq","{$PSU_WARN_STATUS:\"notFunctioning\"}")=1 Warning Depends on:
  • {#SENSOR_INFO}: Power supply is in critical state

LLD rule FAN Discovery

Name Description Type Key and additional info
FAN Discovery

The table of fan status maintained by the environmental monitor.

Dependent item fan.discovery

Preprocessing

  • SNMP walk to JSON

    ⛔️Custom on fail: Discard value

  • Discard unchanged with heartbeat: 1h

Item prototypes for FAN Discovery

Name Description Type Key and additional info
{#SENSOR_INFO}: Fan status

MIB: CISCO-ENVMON-MIB

Dependent item sensor.fan.status[ciscoEnvMonFanState.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.13.1.4.1.3.{#SNMPINDEX}

  • Discard unchanged with heartbeat: 3m

Trigger prototypes for FAN Discovery

Name Description Expression Severity Dependencies and additional info
{#SENSOR_INFO}: Fan is in critical state

Please check the fan unit

count(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/sensor.fan.status[ciscoEnvMonFanState.{#SNMPINDEX}],#1,"eq","{$FAN_CRIT_STATUS:\"critical\"}")=1 or count(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/sensor.fan.status[ciscoEnvMonFanState.{#SNMPINDEX}],#1,"eq","{$FAN_CRIT_STATUS:\"shutdown\"}")=1 Average
{#SENSOR_INFO}: Fan is in warning state

Please check the fan unit

count(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/sensor.fan.status[ciscoEnvMonFanState.{#SNMPINDEX}],#1,"eq","{$FAN_WARN_STATUS:\"warning\"}")=1 or count(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/sensor.fan.status[ciscoEnvMonFanState.{#SNMPINDEX}],#1,"eq","{$FAN_WARN_STATUS:\"notFunctioning\"}")=1 Warning Depends on:
  • {#SENSOR_INFO}: Fan is in critical state

LLD rule Network interfaces discovery

Name Description Type Key and additional info
Network interfaces discovery

Discovering interfaces from IF-MIB.

Dependent item net.if.discovery

Preprocessing

  • SNMP walk to JSON

  • Discard unchanged with heartbeat: 1h

Item prototypes for Network interfaces discovery

Name Description Type Key and additional info
Interface {#IFNAME}({#IFALIAS}): Operational status

MIB: IF-MIB

The current operational state of the interface.

- The testing(3) state indicates that no operational packet scan be passed

- If ifAdminStatus is down(2) then ifOperStatus should be down(2)

- If ifAdminStatus is changed to up(1) then ifOperStatus should change to up(1) if the interface is ready to transmit and receive network traffic

- It should change todormant(5) if the interface is waiting for external actions (such as a serial line waiting for an incoming connection)

- It should remain in the down(2) state if and only if there is a fault that prevents it from going to the up(1) state

- It should remain in the notPresent(6) state if the interface has missing(typically, hardware) components.

Dependent item net.if.status[ifOperStatus.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.2.2.1.8.{#SNMPINDEX}

Interface {#IFNAME}({#IFALIAS}): Bits received

MIB: IF-MIB

The total number of octets received on the interface, including framing characters. This object is a 64-bit version of ifInOctets. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.

Dependent item net.if.in[ifHCInOctets.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.31.1.1.1.6.{#SNMPINDEX}

  • Change per second
  • Custom multiplier: 8

Interface {#IFNAME}({#IFALIAS}): Bits sent

MIB: IF-MIB

The total number of octets transmitted out of the interface, including framing characters. This object is a 64-bit version of ifOutOctets.Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.

Dependent item net.if.out[ifHCOutOctets.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.31.1.1.1.10.{#SNMPINDEX}

  • Change per second
  • Custom multiplier: 8

Interface {#IFNAME}({#IFALIAS}): Inbound packets with errors

MIB: IF-MIB

For packet-oriented interfaces, the number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. For character-oriented or fixed-length interfaces, the number of inbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.

Dependent item net.if.in.errors[ifInErrors.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.2.2.1.14.{#SNMPINDEX}

  • Change per second
  • Discard unchanged with heartbeat: 3m

Interface {#IFNAME}({#IFALIAS}): Outbound packets with errors

MIB: IF-MIB

For packet-oriented interfaces, the number of outbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. For character-oriented or fixed-length interfaces, the number of outbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.

Dependent item net.if.out.errors[ifOutErrors.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.2.2.1.20.{#SNMPINDEX}

  • Change per second
  • Discard unchanged with heartbeat: 3m

Interface {#IFNAME}({#IFALIAS}): Outbound packets discarded

MIB: IF-MIB

The number of outbound packets which were chosen to be discarded

even though no errors had been detected to prevent their being deliverable to a higher-layer protocol.

One possible reason for discarding such a packet could be to free up buffer space.

Discontinuities in the value of this counter can occur at re-initialization of the management system,

and at other times as indicated by the value of ifCounterDiscontinuityTime.

Dependent item net.if.out.discards[ifOutDiscards.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.2.2.1.19.{#SNMPINDEX}

  • Change per second
  • Discard unchanged with heartbeat: 3m

Interface {#IFNAME}({#IFALIAS}): Inbound packets discarded

MIB: IF-MIB

The number of inbound packets which were chosen to be discarded

even though no errors had been detected to prevent their being deliverable to a higher-layer protocol.

One possible reason for discarding such a packet could be to free up buffer space.

Discontinuities in the value of this counter can occur at re-initialization of the management system,

and at other times as indicated by the value of ifCounterDiscontinuityTime.

Dependent item net.if.in.discards[ifInDiscards.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.2.2.1.13.{#SNMPINDEX}

  • Change per second
  • Discard unchanged with heartbeat: 3m

Interface {#IFNAME}({#IFALIAS}): Interface type

MIB: IF-MIB

The type of interface.

Additional values for ifType are assigned by the Internet Assigned Numbers Authority (IANA),

through updating the syntax of the IANAifType textual convention.

Dependent item net.if.type[ifType.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.2.2.1.3.{#SNMPINDEX}

  • Discard unchanged with heartbeat: 1d

Interface {#IFNAME}({#IFALIAS}): Speed

MIB: IF-MIB

An estimate of the interface's current bandwidth in units of 1,000,000 bits per second. If this object reports a value of n' then the speed of the interface is somewhere in the range of n-500,000' to`n+499,999'. For interfaces which do not vary in bandwidth or for those where no accurate estimation can be made, this object should contain the nominal bandwidth. For a sub-layer which has no concept of bandwidth, this object should be zero.

Dependent item net.if.speed[ifHighSpeed.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.31.1.1.1.15.{#SNMPINDEX}

  • Custom multiplier: 1000000

  • Discard unchanged with heartbeat: 1h

Trigger prototypes for Network interfaces discovery

Name Description Expression Severity Dependencies and additional info
Interface {#IFNAME}({#IFALIAS}): Link down

This trigger expression works as follows:
1. It can be triggered if the operations status is down.
2. {$IFCONTROL:"{#IFNAME}"}=1 - a user can redefine context macro to value - 0. That marks this interface as not important. No new trigger will be fired if this interface is down.
3. {TEMPLATE_NAME:METRIC.diff()}=1 - the trigger fires only if the operational status was up to (1) sometime before (so, do not fire for the 'eternal off' interfaces.)

WARNING: if closed manually - it will not fire again on the next poll, because of .diff.

{$IFCONTROL:"{#IFNAME}"}=1 and last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])=2 and (last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#1)<>last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#2)) Average Manual close: Yes
Interface {#IFNAME}({#IFALIAS}): High bandwidth usage

The utilization of the network interface is close to its estimated maximum bandwidth.

(avg(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/net.if.in[ifHCInOctets.{#SNMPINDEX}],15m)>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}]) or avg(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/net.if.out[ifHCOutOctets.{#SNMPINDEX}],15m)>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])) and last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])>0 Warning Manual close: Yes
Depends on:
  • Interface {#IFNAME}({#IFALIAS}): Link down
Interface {#IFNAME}({#IFALIAS}): High error rate

It recovers when it is below 80% of the {$IF.ERRORS.WARN:"{#IFNAME}"} threshold.

min(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/net.if.in.errors[ifInErrors.{#SNMPINDEX}],5m)>{$IF.ERRORS.WARN:"{#IFNAME}"} or min(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/net.if.out.errors[ifOutErrors.{#SNMPINDEX}],5m)>{$IF.ERRORS.WARN:"{#IFNAME}"} Warning Manual close: Yes
Depends on:
  • Interface {#IFNAME}({#IFALIAS}): Link down
Interface {#IFNAME}({#IFALIAS}): Ethernet has changed to lower speed than it was before

This Ethernet connection has transitioned down from its known maximum speed. This might be a sign of autonegotiation issues. Acknowledge to close the problem manually.

change(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])<0 and last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])>0 and ( last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/net.if.type[ifType.{#SNMPINDEX}])=6 or last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/net.if.type[ifType.{#SNMPINDEX}])=7 or last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/net.if.type[ifType.{#SNMPINDEX}])=11 or last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/net.if.type[ifType.{#SNMPINDEX}])=62 or last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/net.if.type[ifType.{#SNMPINDEX}])=69 or last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/net.if.type[ifType.{#SNMPINDEX}])=117 ) and (last(/Cisco IOS versions 12.0_3_T-12.2_3.5 by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])<>2) Info Manual close: Yes
Depends on:
  • Interface {#IFNAME}({#IFALIAS}): Link down

Cisco IOS prior to 12.0_3_T by SNMP

Overview

This template is designed for the effortless deployment of Cisco IOS prior to 12.0_3_T monitoring by Zabbix via SNMP and doesn't require any external scripts.

Requirements

Zabbix version: 7.0 and higher.

Tested versions

This template has been tested on:

  • Cisco IOS Software releases prior to 12.0(3)T

Configuration

Zabbix should be configured according to the instructions in the Templates out of the box section.

Setup

Refer to the vendor documentation.

Macros used

Name Description Default
{$MEMORY.UTIL.MAX} 90
{$CPU.UTIL.CRIT} 90
{$TEMP_CRIT} 60
{$TEMP_CRIT_LOW} 5
{$TEMP_WARN} 50
{$TEMP_CRIT:"CPU"} 75
{$TEMP_WARN:"CPU"} 70
{$TEMP_WARN_STATUS} 2
{$TEMP_CRIT_STATUS} 3
{$TEMP_DISASTER_STATUS} 4
{$PSU_CRIT_STATUS:"critical"} 3
{$PSU_CRIT_STATUS:"shutdown"} 4
{$PSU_WARN_STATUS:"warning"} 2
{$PSU_WARN_STATUS:"notFunctioning"} 6
{$FAN_CRIT_STATUS:"critical"} 3
{$FAN_CRIT_STATUS:"shutdown"} 4
{$FAN_WARN_STATUS:"warning"} 2
{$FAN_WARN_STATUS:"notFunctioning"} 6
{$SNMP.TIMEOUT} 5m
{$ICMP_LOSS_WARN} 20
{$ICMP_RESPONSE_TIME_WARN} 0.15

Items

Name Description Type Key and additional info
Cisco IOS: SNMP walk memory

MIB: CISCO-MEMORY-POOL-MIB

Discovery of ciscoMemoryPoolTable, a table of memory pool monitoring entries.

http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15216-contiguous-memory.html.

SNMP agent vm.memory.walk
Cisco IOS: CPU utilization

MIB: OLD-CISCO-CPU-MIB

5 minute exponentially-decayed moving average of the CPU busy percentage.

Reference: http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15215-collect-cpu-util-snmp.html

SNMP agent system.cpu.util[avgBusy5]
Cisco IOS: SNMP walk entity serial numbers

MIB: ENTITY-MIB

Entity Serial Numbers Discovery.

SNMP agent system.hw.serialnumber.walk
Cisco IOS: Hardware model name

MIB: ENTITY-MIB

SNMP agent system.hw.model

Preprocessing

  • Discard unchanged with heartbeat: 1d

Cisco IOS: Hardware serial number

MIB: ENTITY-MIB

SNMP agent system.hw.serialnumber

Preprocessing

  • Discard unchanged with heartbeat: 1d

Cisco IOS: Operating system

MIB: SNMPv2-MIB

SNMP agent system.sw.os[sysDescr.0]

Preprocessing

  • Regular expression: Version (.+), RELEASE \1

  • Discard unchanged with heartbeat: 1d

Cisco IOS: SNMP walk temperature sensors

Discovery of ciscoEnvMonTemperatureTable (ciscoEnvMonTemperatureDescr), a table of ambient temperature status maintained by the environmental monitor.

SNMP agent sensor.temp.walk
Cisco IOS: SNMP walk PSUs

The table of power supply status maintained by the environmental monitor card.

SNMP agent sensor.psu.walk
Cisco IOS: SNMP walk fans

Discovering system fans.

SNMP agent sensor.fans.walk
Cisco IOS: Uptime (network)

MIB: SNMPv2-MIB

The time (in hundredths of a second) since the network management portion of the system was last re-initialized.

SNMP agent system.net.uptime[sysUpTime.0]

Preprocessing

  • Custom multiplier: 0.01

Cisco IOS: Uptime (hardware)

MIB: HOST-RESOURCES-MIB

The amount of time since this host was last initialized. Note that this is different from sysUpTime in the SNMPv2-MIB [RFC1907] because sysUpTime is the uptime of the network management portion of the system.

SNMP agent system.hw.uptime[hrSystemUptime.0]

Preprocessing

  • Check for not supported value: any error

    ⛔️Custom on fail: Set value to: 0

  • Custom multiplier: 0.01

Cisco IOS: SNMP traps (fallback)

The item is used to collect all SNMP traps unmatched by other snmptrap items

SNMP trap snmptrap.fallback
Cisco IOS: System location

MIB: SNMPv2-MIB

The physical location of this node (e.g., `telephone closet, 3rd floor'). If the location is unknown, the value is the zero-length string.

SNMP agent system.location[sysLocation.0]

Preprocessing

  • Discard unchanged with heartbeat: 12h

Cisco IOS: System contact details

MIB: SNMPv2-MIB

The textual identification of the contact person for this managed node, together with information on how to contact this person. If no contact information is known, the value is the zero-length string.

SNMP agent system.contact[sysContact.0]

Preprocessing

  • Discard unchanged with heartbeat: 12h

Cisco IOS: System object ID

MIB: SNMPv2-MIB

The vendor's authoritative identification of the network management subsystem contained in the entity. This value is allocated within the SMI enterprises subtree (1.3.6.1.4.1) and provides an easy and unambiguous means for determiningwhat kind of box' is being managed. For example, if vendorFlintstones, Inc.' was assigned the subtree1.3.6.1.4.1.4242, it could assign the identifier 1.3.6.1.4.1.4242.1.1 to its `Fred Router'.

SNMP agent system.objectid[sysObjectID.0]

Preprocessing

  • Discard unchanged with heartbeat: 12h

Cisco IOS: System name

MIB: SNMPv2-MIB

An administratively-assigned name for this managed node.By convention, this is the node's fully-qualified domain name. If the name is unknown, the value is the zero-length string.

SNMP agent system.name

Preprocessing

  • Discard unchanged with heartbeat: 12h

Cisco IOS: System description

MIB: SNMPv2-MIB

A textual description of the entity. This value should

include the full name and version identification of the system's hardware type, software operating-system, and

networking software.

SNMP agent system.descr[sysDescr.0]

Preprocessing

  • Discard unchanged with heartbeat: 12h

Cisco IOS: SNMP agent availability

Availability of SNMP checks on the host. The value of this item corresponds to availability icons in the host list.

Possible value:

0 - not available

1 - available

2 - unknown

Zabbix internal zabbix[host,snmp,available]
Cisco IOS: ICMP ping Simple check icmpping
Cisco IOS: ICMP loss Simple check icmppingloss
Cisco IOS: ICMP response time Simple check icmppingsec

Triggers

Name Description Expression Severity Dependencies and additional info
Cisco IOS: High CPU utilization

The CPU utilization is too high. The system might be slow to respond.

min(/Cisco IOS prior to 12.0_3_T by SNMP/system.cpu.util[avgBusy5],5m)>{$CPU.UTIL.CRIT} Warning
Cisco IOS: Device has been replaced

Device serial number has changed. Acknowledge to close the problem manually.

last(/Cisco IOS prior to 12.0_3_T by SNMP/system.hw.serialnumber,#1)<>last(/Cisco IOS prior to 12.0_3_T by SNMP/system.hw.serialnumber,#2) and length(last(/Cisco IOS prior to 12.0_3_T by SNMP/system.hw.serialnumber))>0 Info Manual close: Yes
Cisco IOS: Operating system description has changed

The description of the operating system has changed. Possible reasons are that the system has been updated or replaced. Acknowledge to close the problem manually.

last(/Cisco IOS prior to 12.0_3_T by SNMP/system.sw.os[sysDescr.0],#1)<>last(/Cisco IOS prior to 12.0_3_T by SNMP/system.sw.os[sysDescr.0],#2) and length(last(/Cisco IOS prior to 12.0_3_T by SNMP/system.sw.os[sysDescr.0]))>0 Info Manual close: Yes
Depends on:
  • Cisco IOS: System name has changed
Cisco IOS: Host has been restarted

Uptime is less than 10 minutes.

(last(/Cisco IOS prior to 12.0_3_T by SNMP/system.hw.uptime[hrSystemUptime.0])>0 and last(/Cisco IOS prior to 12.0_3_T by SNMP/system.hw.uptime[hrSystemUptime.0])<10m) or (last(/Cisco IOS prior to 12.0_3_T by SNMP/system.hw.uptime[hrSystemUptime.0])=0 and last(/Cisco IOS prior to 12.0_3_T by SNMP/system.net.uptime[sysUpTime.0])<10m) Warning Manual close: Yes
Depends on:
  • Cisco IOS: No SNMP data collection
Cisco IOS: System name has changed

The name of the system has changed. Acknowledge to close the problem manually.

last(/Cisco IOS prior to 12.0_3_T by SNMP/system.name,#1)<>last(/Cisco IOS prior to 12.0_3_T by SNMP/system.name,#2) and length(last(/Cisco IOS prior to 12.0_3_T by SNMP/system.name))>0 Info Manual close: Yes
Cisco IOS: No SNMP data collection

SNMP is not available for polling. Please check device connectivity and SNMP settings.

max(/Cisco IOS prior to 12.0_3_T by SNMP/zabbix[host,snmp,available],{$SNMP.TIMEOUT})=0 Warning Depends on:
  • Cisco IOS: Unavailable by ICMP ping
Cisco IOS: Unavailable by ICMP ping

Last three attempts returned timeout. Please check device connectivity.

max(/Cisco IOS prior to 12.0_3_T by SNMP/icmpping,#3)=0 High
Cisco IOS: High ICMP ping loss min(/Cisco IOS prior to 12.0_3_T by SNMP/icmppingloss,5m)>{$ICMP_LOSS_WARN} and min(/Cisco IOS prior to 12.0_3_T by SNMP/icmppingloss,5m)<100 Warning Depends on:
  • Cisco IOS: Unavailable by ICMP ping
Cisco IOS: High ICMP ping response time avg(/Cisco IOS prior to 12.0_3_T by SNMP/icmppingsec,5m)>{$ICMP_RESPONSE_TIME_WARN} Warning Depends on:
  • Cisco IOS: High ICMP ping loss
  • Cisco IOS: Unavailable by ICMP ping

LLD rule Memory Discovery

Name Description Type Key and additional info
Memory Discovery

Discovery of ciscoMemoryPoolTable, a table of memory pool monitoring entries.

http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15216-contiguous-memory.html

Dependent item memory.discovery

Preprocessing

  • SNMP walk to JSON

  • Discard unchanged with heartbeat: 1h

Item prototypes for Memory Discovery

Name Description Type Key and additional info
{#SNMPVALUE}: Used memory

MIB: CISCO-MEMORY-POOL-MIB

Indicates the number of bytes from the memory pool that are currently in use by applications on the managed device.

Reference: http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15216-contiguous-memory.html

Dependent item vm.memory.used[ciscoMemoryPoolUsed.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.48.1.1.1.5.{#SNMPINDEX}

{#SNMPVALUE}: Free memory

MIB: CISCO-MEMORY-POOL-MIB

Indicates the number of bytes from the memory pool that are currently unused on the managed device. Note that the sum of ciscoMemoryPoolUsed and ciscoMemoryPoolFree is the total amount of memory in the pool

Reference: http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15216-contiguous-memory.html

Dependent item vm.memory.free[ciscoMemoryPoolFree.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.48.1.1.1.6.{#SNMPINDEX}

{#SNMPVALUE}: Memory utilization

Memory utilization in %.

Calculated vm.memory.util[vm.memory.util.{#SNMPINDEX}]

Trigger prototypes for Memory Discovery

Name Description Expression Severity Dependencies and additional info
{#SNMPVALUE}: High memory utilization

The system is running out of free memory.

min(/Cisco IOS prior to 12.0_3_T by SNMP/vm.memory.util[vm.memory.util.{#SNMPINDEX}],5m)>{$MEMORY.UTIL.MAX} Average

LLD rule Entity Serial Numbers Discovery

Name Description Type Key and additional info
Entity Serial Numbers Discovery Dependent item entity_sn.discovery

Preprocessing

  • SNMP walk to JSON

  • Discard unchanged with heartbeat: 1h

Item prototypes for Entity Serial Numbers Discovery

Name Description Type Key and additional info
{#ENT_NAME}: Hardware serial number

MIB: ENTITY-MIB

Dependent item system.hw.serialnumber[entPhysicalSerialNum.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.2.1.47.1.1.1.1.11.{#SNMPINDEX}

  • Discard unchanged with heartbeat: 1d

Trigger prototypes for Entity Serial Numbers Discovery

Name Description Expression Severity Dependencies and additional info
{#ENT_NAME}: Device has been replaced

Device serial number has changed. Acknowledge to close the problem manually.

last(/Cisco IOS prior to 12.0_3_T by SNMP/system.hw.serialnumber[entPhysicalSerialNum.{#SNMPINDEX}],#1)<>last(/Cisco IOS prior to 12.0_3_T by SNMP/system.hw.serialnumber[entPhysicalSerialNum.{#SNMPINDEX}],#2) and length(last(/Cisco IOS prior to 12.0_3_T by SNMP/system.hw.serialnumber[entPhysicalSerialNum.{#SNMPINDEX}]))>0 Info Manual close: Yes

LLD rule Temperature Discovery

Name Description Type Key and additional info
Temperature Discovery

Discovery of ciscoEnvMonTemperatureTable (ciscoEnvMonTemperatureDescr), a table of ambient temperature status

maintained by the environmental monitor.

Dependent item temperature.discovery

Preprocessing

  • SNMP walk to JSON

    ⛔️Custom on fail: Discard value

  • Discard unchanged with heartbeat: 1h

Item prototypes for Temperature Discovery

Name Description Type Key and additional info
{#SNMPVALUE}: Temperature

MIB: CISCO-ENVMON-MIB

The current measurement of the test point being instrumented.

Dependent item sensor.temp.value[ciscoEnvMonTemperatureValue.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.13.1.3.1.3.{#SNMPINDEX}

  • Discard unchanged with heartbeat: 3m

{#SNMPVALUE}: Temperature status

MIB: CISCO-ENVMON-MIB

The current state of the test point being instrumented.

Dependent item sensor.temp.status[ciscoEnvMonTemperatureState.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.13.1.3.1.6.{#SNMPINDEX}

  • Discard unchanged with heartbeat: 3m

Trigger prototypes for Temperature Discovery

Name Description Expression Severity Dependencies and additional info
{#SNMPVALUE}: Temperature is above warning threshold

This trigger uses temperature sensor values as well as temperature sensor status if available

avg(/Cisco IOS prior to 12.0_3_T by SNMP/sensor.temp.value[ciscoEnvMonTemperatureValue.{#SNMPINDEX}],5m)>{$TEMP_WARN:"{#SNMPVALUE}"} or last(/Cisco IOS prior to 12.0_3_T by SNMP/sensor.temp.status[ciscoEnvMonTemperatureState.{#SNMPINDEX}])={$TEMP_WARN_STATUS} Warning Depends on:
  • {#SNMPVALUE}: Temperature is above critical threshold
{#SNMPVALUE}: Temperature is above critical threshold

This trigger uses temperature sensor values as well as temperature sensor status if available

avg(/Cisco IOS prior to 12.0_3_T by SNMP/sensor.temp.value[ciscoEnvMonTemperatureValue.{#SNMPINDEX}],5m)>{$TEMP_CRIT:"{#SNMPVALUE}"} or last(/Cisco IOS prior to 12.0_3_T by SNMP/sensor.temp.status[ciscoEnvMonTemperatureState.{#SNMPINDEX}])={$TEMP_CRIT_STATUS} or last(/Cisco IOS prior to 12.0_3_T by SNMP/sensor.temp.status[ciscoEnvMonTemperatureState.{#SNMPINDEX}])={$TEMP_DISASTER_STATUS} High
{#SNMPVALUE}: Temperature is too low avg(/Cisco IOS prior to 12.0_3_T by SNMP/sensor.temp.value[ciscoEnvMonTemperatureValue.{#SNMPINDEX}],5m)<{$TEMP_CRIT_LOW:"{#SNMPVALUE}"} Average

LLD rule PSU Discovery

Name Description Type Key and additional info
PSU Discovery

The table of power supply status maintained by the environmental monitor card.

Dependent item psu.discovery

Preprocessing

  • SNMP walk to JSON

    ⛔️Custom on fail: Discard value

  • Discard unchanged with heartbeat: 1h

Item prototypes for PSU Discovery

Name Description Type Key and additional info
{#SENSOR_INFO}: Power supply status

MIB: CISCO-ENVMON-MIB

Dependent item sensor.psu.status[ciscoEnvMonSupplyState.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.13.1.5.1.3.{#SNMPINDEX}

  • Discard unchanged with heartbeat: 3m

Trigger prototypes for PSU Discovery

Name Description Expression Severity Dependencies and additional info
{#SENSOR_INFO}: Power supply is in critical state

Please check the power supply unit for errors

count(/Cisco IOS prior to 12.0_3_T by SNMP/sensor.psu.status[ciscoEnvMonSupplyState.{#SNMPINDEX}],#1,"eq","{$PSU_CRIT_STATUS:\"critical\"}")=1 or count(/Cisco IOS prior to 12.0_3_T by SNMP/sensor.psu.status[ciscoEnvMonSupplyState.{#SNMPINDEX}],#1,"eq","{$PSU_CRIT_STATUS:\"shutdown\"}")=1 Average
{#SENSOR_INFO}: Power supply is in warning state

Please check the power supply unit for errors

count(/Cisco IOS prior to 12.0_3_T by SNMP/sensor.psu.status[ciscoEnvMonSupplyState.{#SNMPINDEX}],#1,"eq","{$PSU_WARN_STATUS:\"warning\"}")=1 or count(/Cisco IOS prior to 12.0_3_T by SNMP/sensor.psu.status[ciscoEnvMonSupplyState.{#SNMPINDEX}],#1,"eq","{$PSU_WARN_STATUS:\"notFunctioning\"}")=1 Warning Depends on:
  • {#SENSOR_INFO}: Power supply is in critical state

LLD rule FAN Discovery

Name Description Type Key and additional info
FAN Discovery

The table of fan status maintained by the environmental monitor.

Dependent item fan.discovery

Preprocessing

  • SNMP walk to JSON

    ⛔️Custom on fail: Discard value

  • Discard unchanged with heartbeat: 1h

Item prototypes for FAN Discovery

Name Description Type Key and additional info
{#SENSOR_INFO}: Fan status

MIB: CISCO-ENVMON-MIB

Dependent item sensor.fan.status[ciscoEnvMonFanState.{#SNMPINDEX}]

Preprocessing

  • SNMP walk value: 1.3.6.1.4.1.9.9.13.1.4.1.3.{#SNMPINDEX}

  • Discard unchanged with heartbeat: 3m

Trigger prototypes for FAN Discovery

Name Description Expression Severity Dependencies and additional info
{#SENSOR_INFO}: Fan is in critical state

Please check the fan unit

count(/Cisco IOS prior to 12.0_3_T by SNMP/sensor.fan.status[ciscoEnvMonFanState.{#SNMPINDEX}],#1,"eq","{$FAN_CRIT_STATUS:\"critical\"}")=1 or count(/Cisco IOS prior to 12.0_3_T by SNMP/sensor.fan.status[ciscoEnvMonFanState.{#SNMPINDEX}],#1,"eq","{$FAN_CRIT_STATUS:\"shutdown\"}")=1 Average
{#SENSOR_INFO}: Fan is in warning state

Please check the fan unit

count(/Cisco IOS prior to 12.0_3_T by SNMP/sensor.fan.status[ciscoEnvMonFanState.{#SNMPINDEX}],#1,"eq","{$FAN_WARN_STATUS:\"warning\"}")=1 or count(/Cisco IOS prior to 12.0_3_T by SNMP/sensor.fan.status[ciscoEnvMonFanState.{#SNMPINDEX}],#1,"eq","{$FAN_WARN_STATUS:\"notFunctioning\"}")=1 Warning Depends on:
  • {#SENSOR_INFO}: Fan is in critical state

Feedback

Please report any issues with the template at https://support.zabbix.com

You can also provide feedback, discuss the template, or ask for help at ZABBIX forums

Articles and documentation

+ Propose new article

Didn't find integration you need?