Interface(s) in error-disable state-juniper-junos

Interface(s) in error-disable state-juniper-junos

Vendor: juniper

OS: junos

Description:
Interfaces can be put in err-disable state if certain errors are detected by the devices. Indeni will alert if this happens.

Remediation Steps:
Review the causes why some interfaces were put in error-disable state.
|1. On the device command line interface execute the “show ethernet-switching interfaces” command to review the status of interfaces.
|2. Check if the MAC limit or MAC move limit is not exceeded.
|3. Check if the storm control is in effect.
|4. Review whether multiple devices are connected to the port.
|5. Check if the device is not moving too frequently or rate-limiting is not exceeded.
|6. Review the following article on Juniper tech support site: Ethernet Switching Feature Guide: show ethernet-switching interfaces.

How does this work?
The script runs “show ethernet-switching interfaces” command via ssh connection to the device and retrieves the port status related to port-error-disable rules configured.

Why is this important?
The port is disabled if port-error-disable is enabled and the port is configured to be shut down when it vilates the rules specified.

Without Indeni how would you find this?
An administrator could login to the device to manually run the command.

junos-show-ethernet-switching-interfaces

name: junos-show-ethernet-switching-interfaces
description: JUNOS SRX identifying which interface is disabled because of the vilation
    of the port-error-disable configuration
type: monitoring
monitoring_interval: 5 minute
requires:
    vendor: juniper
    os.name: junos
    product: firewall
    high-availability:
        neq: true
comments:
    network-interface-err-disable-description:
        why: |
            This metric tells why the port is disabled.
        how: |
            The script runs "show ethernet-switching interfaces"  command via ssh connection to the device and retrieves the description for the disabled port.
        can-with-snmp: false
        can-with-syslog: true
    network-interface-err-disable:
        why: "The port is disabled if port-error-disable is enabled and the port is\
            \ configured to be shut down when it vilates the rules specified.    \
            \ \n"
        how: |
            The script runs "show ethernet-switching interfaces" command via ssh connection to the device and retrieves the port status related to port-error-disable rules configured.
        can-with-snmp: true
        can-with-syslog: true
steps:
-   run:
        type: SSH
        command: show ethernet-switching interfaces | display xml
    parse:
        type: XML
        file: show-ethernet-switching-interfaces.parser.1.xml.yaml

CrossVendorInterfaceErrorDisableState

Failed to fetch the data: https://bitbucket.org/indeni/indeni-knowledge/src/master/rules/templatebased/crossvendor/CrossVendorInterfaceErrorDisableState.scala