how to disable monitoring of Tunnel

[Aamir Khan]

Dear team

 

From the monitoring screen, we are getting alarms that the WAN Links are down and when we check root cause, we discovered it's tunnel connected to router that are down. We don't want Spectrum to monitor connection between the tunnels.

 

Please advise on the method(s) to be used in order for the tunnels to be disabled for monitoring on spectrum.This is to ensure that only the branch LAN IP addresses are monitored going forward but not the Tunnel.

 

Thanks

 

[Aamir Khan]

okasi01 can you pls help

[Jason Volpini]

Hello La-Qa

 

You can disable tunnel monitoring by setting the Interface_Polling_Interval attribute to "0"

 

Tunnel Interface Modeling - CA Spectrum - 10.1 to 10.1.2 - CA Technologies Documentation 

 

 

Configure Interface_Polling_Interval

The Interface_Polling_Interval attribute defines the tunnel table polling interval in seconds. If set to 0, the table is not polled.

Follow these steps:

1. Navigate to the Locater tab, expand the Application Models folder, and double-click By Device IP Address.
   The Search dialog opens.
2. Enter the IP address of the Cisco IPSec-capable device you want to configure and click OK.
   The device appears in the Contents panel.
3. Select the device in the Contents panel.
4. Select the Attributes tab in the Component Detail panel.
5. Select Interface_Polling_Interval in the left pane and click the right arrow button to move it to the right pane.
6. Double-click Interface_Polling_Interval in the right pane to change its value.

 

Regards, 

Jay V

[Aamir Khan]

Hi Volja

 

Please be informed that the tunnels are still being monitored after the changes implemented on one of the branch(See screenshot below)

 

Kindly advise on the way forward.

[Jason Meader]

It’s because you have WA_Links attached to the tunnels.  The WA_Links automatically monitor the tunnels by default.  If you don’t want them monitored I would suggest destroying the WA_Link models then make sure the following attributes on the tunnel interfaces are false:

Pollportstatus

Ok_to_poll

Generateportstatusalarms

Alarmonlinkdowntrap

 

Cheers

Jay

[Aamir Khan]

Dear Jason

 

Please can you tell how to destroy wa_links and to check attributes whether they are false...Awaiting your feedback

[Jason Volpini]

Hello La-Qa

 

By Destroy Wa_link model, Jason is simply referring to the Destroy/Delete button. Select the WA_link model and click "delete."

 

 

 

 

As for checking status of the attributes, view the Attributes tab on the Interface Tunnel linked to the WA_Link and find the attributes mentioned, and double-click to check the value. 

 

 

 

 

Regards, 

Jay V

[Jason Meader]

Hi Aamir, were you able to stop monitoring those interfaces with the information provided?

Thank you

Jay

[Aamir Khan]

YEs Thankyou volja01 & jason

[Legacy User]

Suppose there is a Spectrum global policy which sets for all ports (network gear and systemEdge agent monitored hosts)

'generateportstatusalarms' attributes to NO.   The policy is said to impact approx. 700K ports.

 

For Spectrum SMEs, what would be recommended way to 'turn' port monitoring back on wisely without getting flooded with false positive alarms?

 

[Jason Meader]

I think the best way to do this is to make sure that your GC searches are correct BEFORE you change the generateportstatus alarms back to yes (ie if you only want to monitor connected ports then make sure networklinktype attribute is set correctly etc).  If your GC searching is correct, when you enable the policy you shouldn’t have any unexpected alarms…

Cheers

Jay