cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Customer receives the error message "%RMON-5-FALLINGTRAP: Falling trap is generated" SNMP trap in Catalyst switches running Cisco IOS

5558
Views
0
Helpful
0
Comments

Core issue

This is an example of the error message:

RMON-5-FALLINGTRAP: Falling trap is generated because the value of [chars] has fallen below the falling-threshold value [dec]

This means a falling trap has been generated. The value of the specified MIB object has fallen below the falling threshold value. [chars] is the MIB object, and [dec] is the threshold value. This message applies to Catalyst 3750, 3560, 3550, 2970, 2960, 4000/4500 and 6000/6500 Switches.

If you have the configuration as this example shows:

rmon alarm 1771 ifEntry.8.10040 60 absolute rising-threshold 2 175 falling-threshold 1 176 owner "CISCO"

where, "CISCO" is the Hostname or Server name, then you may see the RMON message as this example shows:

%RMON-5-FALLINGTRAP: Falling trap is generated because the value of ifEntry.8.10040 has fallen below the falling-threshold value 1

The ifEntry.8.10040 value indicates the current operational state of the interface f1/0/40. A value of 1 indicates that the interface is up and a 2 indicates that the interface is down.

Hence, whenever the interface f1/0/40 goes down, you see this message:

Aug 20 00:50:30.663: %RMON-5-RISINGTRAP: Rising trap is generated because the value of ifEntry.8.10040 exceeded the rising-threshold value 2

Whenever the interface f1/0/40 goes up, you see this message:

Aug 20 00:56:30.745: %RMON-5-FALLINGTRAP: Falling trap is generated because the value of ifEntry.8.10040 has fallen below the falling-threshold value 1

Resolution

The best way to find out whether the ifEntry.8.10040 is interface fa1/0/40, and the location of the Server (as per the "CISCO" example) is to use an snmpwalk command as this example shows:

snmpwalk -c public ifDescr

This configuration is present in the show running-config command and is set up on the router:

rmon alarm 1771 ifEntry.8.10040 60 absolute rising-threshold 2 175 falling-threshold 1 176 owner "CISCO"

For additional help, refer to How To Configure RMON Alarm and Event Settings Using SNMP Commands.

In order to use the snmpwalk command, you need to use an SNMP manager that provides the snmpwalk functionality.

If you need further assistance and support, open a service request with Cisco Technical Support.

CreatePlease to create content
Content for Community-Ad
July's Community Spotlight Awards