Southbound gateway EventAdmin mapping InetAddress as target IP address Var 8

[Ramanan.Raveendran.1]

Hello Spectrum experts,

 

The following mapping is for Cisco Prime Infrastructure (CPI v2.2) traps  (for the wireless devices that it manages).

 

CPI is sending the IP address of the client encoded as InetAddress on OID “1.3.6.1.4.1.9.9.712.1.1.2.1.8.0” .

I am only using "Variable ID Field 8 (Target Address)" for event model creation. The trap does not contain model name or IP address else where.

 

Spectrum is not able to convert the IP address encoded as octet string and assign (forward) it to the models already in Spectrum.

 

Event message:  Device CPI of type EventAdmin - Error processing event 0xfff0ff90 - Details: A trap specified the following illegal network address: .

 

/EventAdmin/AlertMap file has the following mapping....

 

# ciscoWirelessMOStatusNotification             cWNotificationTimestamp

1.3.6.1.4.1.9.9.712.0.1              0xfff00090 1.3.6.1.4.1.9.9.712.1.1.2.1.2(101,102)\

                                                # cWNotificationManagedObjectAddressType

                                                1.3.6.1.4.1.9.9.712.1.1.2.1.7(107,0)\

                                                # cWNotificationManagedObjectAddress

                                                1.3.6.1.4.1.9.9.712.1.1.2.1.8(8,0)\

                                                # cWNotificationSourceDisplayName

                                                1.3.6.1.4.1.9.9.712.1.1.2.1.9(109,0)\

                                                ....

 

 

 

 

The following trap has "10.165.76.5" encoded as InetAddress - OCTET STRING - 0a a5 4c 05

 

 

Any help to map this properly please.

Does Spectrum has any inbuilt mechanism to handle this?

 

Thanks

Ramanan

 

[Legacy User]

Hi,

I cannot help to convert the Octetstring into an IP but lets check some other common pitfalls...

 

Where are the EVENTDISP-Files located for this Trap/Event?

 

The right Directory is:

(Windows)

C:\win32app\SPECTRUM\custom\Events\gen_app_gw\EventAdmin\EventDisp

Please copy only the needed EventDisp-Configurations into this File.

Then Reload the Event-Configuration...

 

What is the value of the Attribute SBG_AlertForwardingEnabled of the EventAdmin?

This is the Switch to create EventModels or to forward the Alert to the right model.

 

These are only some checks which I wrote down for my own EventAdmins....

 

Best Regards

Erich

 

 

 

[Ramanan.Raveendran.1]

Hi Erich,

 

Many thanks for your help / reply.

 

I can confirm that the files (EventDisp, AlertMap files) are in the appropriate directory, as this was a working solution before our CPI (3rd party Mgmt System) upgrade from v2.1 to v2.2.

 

In v2.1, the OID (1.3.6.1.4.1.9.9.712.1.1.2.1.8) is encoded as IP address. 

Sadly, in v2.2, they did a bug-fix to encode it, as an InetAddress (as defined in the MIB) rather than an IP address.

 

 

<from CISCO-WIRELESS-NOTIFICATION-MIB>

Trap:  ciscoWirelessMOStatusNotification - 1.3.6.1.4.1.9.9.712.0.1

http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?objectInput=1.3.6.1.4.1.9.9.712.0.1&translate=Translate&submitValue=SUBMIT

cWNotificationManagedObjectAddress OBJECT-TYPE

    SYNTAX          InetAddress

    MAX-ACCESS      read-only

    STATUS          current

    DESCRIPTION

        "This object represents the network address of the Managed

        Object. The type of the address stored in this object is

        determined by the

cWNotificationManagedObjectAddressType object."

    ::= { cwNotificationHistoryEntry 8 }

 

 

<from INET-ADDRESS-MIB>

InetAddress ::= TEXTUAL-CONVENTION

    STATUS      current

DESCRIPTION        "Denotes a generic Internet address.

    SYNTAX       OCTET STRING (SIZE (0..255))

 

Thanks

Ramanan

[Justin_Kulikowski]

Hi Ramanan.Raveendran.1

 

Did you ever get this working?  I am seeing the same issue after upgrading to 2.2

[Ramanan.Raveendran.1]

Hello,

 

I got away with a work around (and some residues).

 

Note: The IP address (as string) of the WLC, is also contained within the cWNotificationSpecialAttributes OID on the trap [as reportingEntityAddress].

 

Say "0xfff00001" is the AlertMap'ed event on the back of 'ciscoWirelessMOStatusNotification' trap, I temporarily used 'cwNotificationCategory' as a unique ID variable (5).

This will create EventModels with category values as names. [i.e.  0, 1, 2 etc...]. These are unwanted residues. Put them in maintenance mode.

 

Then on the gen_app_GW/EventAdmin/EventDisp file, use a procedure to create a new event (say 0xfff0002) to get the IP address from within the cWNotificationSpecialAttributes OID, and assign it to  Variable ID 8 (i.e. Target Address).

Since this mapping is on the EventAdmin's model ({ C CURRENT_MODEL }), the new event also gets processed like a southbound gateway event. But, this time with IP Address on Variable 8 (which is the target address). The new event gets sent to the WLC.

 

Hope this helps.

 

 

 

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

FILE NAME:   custom/Events/gen_app_gw/EventAdmin/AlertMap

 

# ciscoWirelessMOStatusNotification     cWNotificationTimestamp

1.3.6.1.4.1.9.9.712.0.1    0xfff00001   1.3.6.1.4.1.9.9.712.1.1.2.1.2(101,102)\

                                        # cWNotificationUpdatedTimestamp

                                        1.3.6.1.4.1.9.9.712.1.1.2.1.3(103,0)\

                                        # cWNotificationKey

                                        1.3.6.1.4.1.9.9.712.1.1.2.1.4(104,0)\

                                        # cWNotificationCategory

                                        1.3.6.1.4.1.9.9.712.1.1.2.1.5(5,0)\

                                        # cWNotificationSubCategory

                                        1.3.6.1.4.1.9.9.712.1.1.2.1.6(106,0)\

                                        # cWNotificationManagedObjectAddressType

                                        1.3.6.1.4.1.9.9.712.1.1.2.1.7(107,0)\

                                        # cWNotificationManagedObjectAddress

                                        1.3.6.1.4.1.9.9.712.1.1.2.1.8(108,0)\

                                        # cWNotificationSourceDisplayName

                                        1.3.6.1.4.1.9.9.712.1.1.2.1.9(109,0)\

                                        # cWNotificationDescription

                                        1.3.6.1.4.1.9.9.712.1.1.2.1.10(110,0)\

                                        # cWNotificationSeverity

                                        1.3.6.1.4.1.9.9.712.1.1.2.1.11(111,0)\

                                        # cWNotificationSpecialAttributes

                                        1.3.6.1.4.1.9.9.712.1.1.2.1.12(112,0)\

                                        # cWNotificationVirtualDomains

                                        1.3.6.1.4.1.9.9.712.1.1.2.1.14(113,0)

 

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

 

 

FILE NAME:  custom/Events/gen_app_gw/EventAdmin/EventDisp

 

0xfff00001 P "CreateEventWithAttributes( \

      { C CURRENT_MODEL }, \

      { H 0xfff00002 }, \

      SetEventVariable( \

          { U 8 }, \

              GetRegexp( \

                GetEventVariable( { U 112 } ), \

                { S \"reportingEntityAddress=(.*?)\\\\,\" }, \

                { U 1 } )     ) )"

 

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

FILE NAME:   custom/Events/gen_app_gw/EventDisp

 

# No processing required on EventModel' EventDisp file, hence commented out

#0xfff00001

#0xfff00002

 

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

FILE NAME:   custom/Events/EventDisp

 

#Original Event (remove the logging 'E 50' once testing is done)

0xfff00000 E 50

 

# Use this to further convert into alarm. This event will be raised on WLC

0xfff00001 E 50

 

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[Justin_Kulikowski]

Thank you Ramanan.Raveendran.1 !

 

We've successfully tested and deployed the same workaround.

[ackjo04]

Ramanan,

 

OneClick does have the ability to convert an octet sting to text with the user of a renderer. We see this all the time in some of the different OneClick subviews. OneClick requests Spectrum to read the value and the renderer converts the octet string to a text readable format when displayed in the OneClick subview.

 

Unfortunately, there is no such functionality that I am aware of for doing this in an event.