Cisco Prime Nerk 43 User Guide

 
C-29
Cisco Prime Network 4.3.2 User Guide
Appendix C      Event Correlation Examples
  Correlation Scenarios
Figure C-30 Device Unreachable on CE
EFP Down Correlation Scenarios
An Ethernet Flow Point (EFP) is a forwarding decision point in the PE switch or router that gives 
network designers the flexibility to make many Layer 2 flow decisions at the interface level. Many EFPs 
can be configured on a single physical port. These EFPs can be configured on any Layer 2 traffic port 
(usually on the UNI...

 
C-30
Cisco Prime Network 4.3.2 User Guide
Appendix C      Event Correlation Examples
  Correlation Scenarios
The physical link (Gi0/3 < > Gi4/3) is shut down. The expected alarm hierarchy:
Link down
–EFP down
–Link down syslogs
–Other related faults
EFP Down Correlation Example 2
Figure C-32 provides an example of devices with EFPs and a pseudowire provisioned.
Figure C-32 EFP Down Example 2
Service instances 900 and 901 are configured on port Gi4/3, and a local pseudowire is configured 
between Gi4/3...

 
C-31
Cisco Prime Network 4.3.2 User Guide
Appendix C      Event Correlation Examples
  Correlation Scenarios
EFP Down Correlation Example 4
Example 4 also uses Figure C-32. Service instance 900 is configured on port Gi4/3 and connects to a 
pseudowire through a bridge domain.
Generate traffic to switch the service instance status to error disabled. The expected alarm hierarchy:
EFP down due to error disabled
–EFP syslogs 
–Pseudowire tunnel down
–Other related faults
HSRP Scenarios
These topics...

 
C-32
Cisco Prime Network 4.3.2 User Guide
Appendix C      Event Correlation Examples
  Correlation Scenarios
Figure C-33 Example
In this case, the system provides the following report:
Root cause: [Link Down, Router 2 < > Switch 2]
Correlated events:
–[Primary HSRP Interface is Not Active, Router 2]
%HSRP-6-STATECHANGE: FastEthernet0/0 Grp 1 state Active -> Speak (source: 
Router 2)
–[Secondary HSRP Interface is Active, Router 3]
%STANDBY-6-STATECHANGE: Ethernet0/0 Group 1 state Standby -> Active...

 
C-33
Cisco Prime Network 4.3.2 User Guide
Appendix C      Event Correlation Examples
  Correlation Scenarios
An Interface Status Down alarm is generated when the status of an IP interface (whether over an 
interface or a subinterface) changes from up to down or any other nonoperational state (seeTa b l e C - 2). 
All events sourced from the subinterfaces correlate to this alarm. In addition, an All IP Interfaces Status 
Down alarm is generated when all the IP interfaces above a physical port change...

 
C-34
Cisco Prime Network 4.3.2 User Guide
Appendix C      Event Correlation Examples
  Correlation Scenarios
Correlation of Syslogs and Traps
Upon receipt of a trap or syslog for the subinterface level, Cisco ANA immediately polls the status of 
the relevant IP interface and creates a polled parent event (such as Interface Status Down). The trap or 
syslog is correlated to this alarm.
In a multipoint setup when only some circuits under an IP interface go down do not cause the state of 
the IP interface...

 
C-35
Cisco Prime Network 4.3.2 User Guide
Appendix C      Event Correlation Examples
  Correlation Scenarios
Interface Example 1
Figure C-34 represents an environment with multipoint connectivity between a PE and number of CEs 
through an unmanaged Frame Relay network. All CEs (Router2 and Router3) have logical connectivity 
to the PE through a multipoint subinterface on the PE (Router10). The keepalive option is enabled for 
all circuits. A link is disconnected inside the unmanaged network, causing...

 
C-36
Cisco Prime Network 4.3.2 User Guide
Appendix C      Event Correlation Examples
  Correlation Scenarios
Figure C-35 Interface Example 2
The following failures are identified in the network:
A Device Unreachable alarm is generated on the CE.
An Interface Status Down alarm is generated on the PE.
The following correlation information is provided:
The root cause is Device Unreachable:
–The Interface Status Down alarm is correlated to the Device Unreachable alarm.
–The syslogs and traps for the...

 
C-37
Cisco Prime Network 4.3.2 User Guide
Appendix C      Event Correlation Examples
  Correlation Scenarios
The following failures are identified in the network:
All the CEs become unreachable.
An Interface Status Down alarm is generated for each IP interface above Serial0/0 that has failed.
The following correlation information is provided:
The root cause is All IP Interfaces Down on Serial0/0 port:
–The Interface Status Down alarms are correlated to the All IP Interfaces Down alarm.
–The Device...

 
C-38
Cisco Prime Network 4.3.2 User Guide
Appendix C      Event Correlation Examples
  Correlation Scenarios
The All IP Interfaces Down alarm is correlated to the Link Down alarm.
All the traps and syslogs for the subinterfaces are correlated to the Link Down alarm.
Interface Example 5
Figure C-38 represents an environment in which a PE1 device has multipoint connectivity, one of the 
circuits under the IP interface has gone down, and the CE1 device has become unreachable. The status 
of the IP...