Interface(s) in error-disable state-juniper-junos
Vendor: juniper
OS: junos
Description:
Interfaces can be put in err-disable state if certain errors are detected by the devices. Indeni will alert if this happens.
Remediation Steps:
Review the causes why some interfaces were put in error-disable state.
|1. On the device command line interface execute the “show ethernet-switching interfaces” command to review the status of interfaces.
|2. Check if the MAC limit or MAC move limit is not exceeded.
|3. Check if the storm control is in effect.
|4. Review whether multiple devices are connected to the port.
|5. Check if the device is not moving too frequently or rate-limiting is not exceeded.
|6. Review the following article on Juniper tech support site: Ethernet Switching Feature Guide: show ethernet-switching interfaces.
How does this work?
The script runs “show ethernet-switching interfaces” command via ssh connection to the device and retrieves the port status related to port-error-disable rules configured.
Why is this important?
The port is disabled if port-error-disable is enabled and the port is configured to be shut down when it vilates the rules specified.
Without Indeni how would you find this?
An administrator could login to the device to manually run the command.
junos-show-ethernet-switching-interfaces
name: junos-show-ethernet-switching-interfaces
description: JUNOS SRX identifying which interface is disabled because of the vilation
of the port-error-disable configuration
type: monitoring
monitoring_interval: 5 minute
requires:
vendor: juniper
os.name: junos
product: firewall
high-availability:
neq: true
comments:
network-interface-err-disable-description:
why: |
This metric tells why the port is disabled.
how: |
The script runs "show ethernet-switching interfaces" command via ssh connection to the device and retrieves the description for the disabled port.
can-with-snmp: false
can-with-syslog: true
network-interface-err-disable:
why: "The port is disabled if port-error-disable is enabled and the port is\
\ configured to be shut down when it vilates the rules specified. \
\ \n"
how: |
The script runs "show ethernet-switching interfaces" command via ssh connection to the device and retrieves the port status related to port-error-disable rules configured.
can-with-snmp: true
can-with-syslog: true
steps:
- run:
type: SSH
command: show ethernet-switching interfaces | display xml
parse:
type: XML
file: show-ethernet-switching-interfaces.parser.1.xml.yaml
CrossVendorInterfaceErrorDisableState
Failed to fetch the data: https://bitbucket.org/indeni/indeni-knowledge/src/master/rules/templatebased/crossvendor/CrossVendorInterfaceErrorDisableState.scala