Message Source Configuration: SNMP Trap Interception

1
Message Source ConfigurationSNMP Trap
Interception

2
Section Overview

• SNMP Traps as a Message Source
• SNMP Trap process on the Management Server
• VPO Distributed Event Interception
• Avoiding Duplicate Messages
• SNMP Trap Configuration
• Configuration GUI
• Generating Traps/Events
• Examples

3
SNMP Traps
SNMPTrap
SNMP Agent
SNMP Manager
Enterprise ID Generic Trap ID Specific
Trap ID Varbind 1
. Varbind n
Managed Node
Management Server
4
SNMP Trap Interception
SNMP Agent
VPO agent only
SNMP Agent
NNM and VPOworking inparallel
SNMP Manager
SNMP Agent
Management Server
NNM softwareonly
SNMP Agent
No NNM orVPO software
5
SNMP Trap Interceptor on The Management Server
Conditions
VPO Trap Interceptor
ovtrapd
pmd
port 162
Message Agent

• Community
• Generic Trap ID
• Specific Trap ID
• Number of parameters
• Parameters

VPO Message

• Severity
• Application
• Message Group
• Object

SNMP Trap Arguments
Default Message Attributes
Traps from Systems and Applications
6
VPO Distributed Event Interception
VPO Management Server
RPC
TCP
NNM
RPC
opcmsga
opcmsga
pmd
NNM
opctrapi
opctrapi
pmd
ovtrapd
ovtrapd
7
Distributed Event Interception Benefits

• Reduced Network Traffic and Management Server
  Workload through VPO-Specific Features for Local
  Processing
• More attributes to suppress messages (e.g. SNMP
  Trap Variables)
• Duplicate message suppression, local actions etc.
• Event Correlation Services
• Secure Communication between Agent and Management
  Server through DCE/RPC-Based Implementation
• Authentication, Encryption
• Flexible Management through VPO Flexible Manager
  Concepts
• Follow-the-Sun, Competence Centers, Backup
  Manager

8
Distributed Event Interception Configuration

• Supported Platforms
• all Platforms, where NNM is supported
• Novell NetWare 4.1, 4.11, 5.0, 5.1 with NMA 2.1
  installed
• Configuration Steps
• Configure Event Interception Template in Message
  Source Templates window and in Add SNMP Trap
  window.
• Assign Event Interception Template to agents and
  distribute the templates.
• If NNM is not to be used on agent for event
  interception (i.e. SNMP traps intercepted
  directly by opctrapi), then add the following
  line to file opcinfo
• SNMP_SESSION_MODE NO_TRAPD
• Restart the VPO agents

9
How to Avoid Duplicate Messages
Problem Situation

• Node pepper
• SNMP Destinations
• curry
• nutmeg

Original methodand showing howduplicates can
occur
SNMP Agent
Node curry
Node nutmeg
opctrapi
Using local interception and avoiding duplicates
opctrapi
OV pmd
OV pmd
opcmsga
opcmsga
Solution with VPO

• SNMP Agents must have only one trap destination
  configured
• An VPO event interceptor runs on all possible
  SNMP destinations

10
SNMP Template Configuration
Add Trap within Message Source Templates and
define defaults
Match/Suppress Condition Window
11
SNMP Trap Condition Example
SNMP trap generated by OmniBack snmptrap
hpbblcs1.bbn.hp.com .1.3.6.1.4.1.11.2.3.2.15.136
.120.34 15.136.120.161. 6 58916871 0
\ .1.3.6.1.4.11.2.15.2.0 Integer 1
\ .1.3.6.1.4.11.2.15.3.0 OctetString
doghouse.bbn.hp.com \ .1.3.6.1.4.11.2.15.4.0
OctetStringHP OmniBackError(Worklist Syntax)
\ Cant open worklist file/etc/omniback/work
Status Critical \ .1.3.6.1.4.11.2.15.5.0
OctetString Critical \ .1.3.6.1.4.11.2.15.6.0
OctetString Omniback