Interface eth1(): Ethernet has changed to lower speed than it was before

[julio.tkac]

Hi,

I have an Endian firewall, monitored by SNMP on Zabbix.
The eth1 (Gigabit) interface, was connected to a switch, to a Gigabit port.
But recently, it was switched to a 100mbps port on the same switch.
Now Zabbix constantly displays this message: "Interface eth1(): Ethernet has changed to lower speed than it was before"
and I want to adjust it so that you understand that now the speed is 100mbps.

Trigger: Interface eth1(): Ethernet has changed to lower speed than it was before

Problem expression:

{Endian Firewall:net.if.speed[ifHighSpeed.3].change()}<0 and {Endian Firewall:net.if.speed[ifHighSpeed.3].last()}>0 and ( {Endian Firewall:net.if.type[ifType.3].last()}=6 or {Endian Firewall:net.if.type[ifType.3].last()}=7 or {Endian Firewall:net.if.type[ifType.3].last()}=11 or
{Endian Firewall:net.if.type[ifType.3].last()}=62 or {Endian Firewall:net.if.type[ifType.3].last()}=69 or {Endian Firewall:net.if.type[ifType.3].last()}=117 ) and ({Endian Firewall:net.if.status[ifOperStatus.3].last()}<>2)

Recovery expression:

({Endian Firewall:net.if.speed[ifHighSpeed.3].change()}>0 and {Endian Firewall:net.if.speed[ifHighSpeed.3].prev()}>0) or ({Endian Firewall:net.if.status[ifOperStatus.3].last()}=2)


I didn't understand the logic and I don't know how to correct it.

------------------------------------------

Zabbix 4.0.0alpha7 // Endian Firewall Community release 3.2.5
Last edited by julio.tkac; 12-03-2020, 17:17.

[Noobz]

Look at the recovery expression - you can either disable and reenable the port, change it to 10Mb and back to 100Mb - or do what we did and change the recovery expression to none and only allow manual close.