Objective of this white paper is to validate existing CFM (Connectivity Fault Management for Ethernet) Service diagnostics Scripts for Cisco® Integrated Services Routers (ISRs) and provide step-by-step instructions for troubleshooting Ethernet problems. This testing was implemented using the EEM (Embedded Event Manager) framework, which comes with Cisco IOS® Software IPBase images on the Cisco ISRs. This document also contains testbed topology, configuration, snapshots of script output recorded during testing, syslog and email notifications, and logging information.
Introduction and Summary:
Cisco CFM Service Diagnostics offers a collection of powerful onboard diagnostic tools to identify commonly encountered network problems, provide real-time alerts, automatically collect relevant information, and conduct root cause analysis. These Connectivity Fault Management Diagnostics Scripts run over the EEM (Embedded Event Manager) Infrastructure.
EEM brings the management capability inside the Cisco devices. Using EEM you can monitor events and take informational and corrective action when the monitored events occur or when a threshold is reached. The EEM framework comprises Event Detectors and Events Policy. Event Detectors detect events and notify the EEM Server. The EEM policies are configured using the Cisco IOS Software command-line interface (CLI) or TCL script; then recovery is implemented on the basis of the current state of the system and the actions specified in the policy for the given event. EEM provides very sophisticated and distributed control on automated configuration, event detection, remote monitoring, recovery, and device availability. Components of the EEM Architecture are shown in Figure 1.
Figure 1. EEM Architecture
With Ethernet moving toward the Service Provider Network, the requirement of a connectivity fault management tool becomes a high-demand requirement. High Industry interest in Ethernet connectivity fault management tools forced the IEEE to develop a standard 802.1ag (CFM). This standard specifies protocols, procedures, and managed objects to support transport fault management (detection and isolation of connectivity faults). CFM frames are distinguishable by Ether-Type 89-02 (and MAC Address for multicast messages). CFM employs regular Ethernet frames that travel in-band with the customer traffic. Devices that cannot interpret CFM Messages forward them as normal data frames. Connectivity Fault Management is end-to-end Fault Management, as shown in Figure 2.
Figure 2. CFM Positioning
This standard divides a network into administrative domains in the form of hierarchy levels. This division helps define the relationships among all entities from a maintenance perspective, to allow each entity to monitor the layers under its responsibility and easily localize problems. Basic components of CFM are shown in Figure 3.
Figure 3. CFM MEP/MIP (Maintenance Association End Points/Maintenance Association Intermediate Point)
CFM functions include Connectivity Check (for fault detection), Loopback (for fault verification), and Traceroute (for fault isolation).
Service Diagnostics tools are TCL scripts that use the capabilities of the CFM and EEM infrastructure to develop a framework that is ideal for automated fault diagnostics, analysis, and recovery. These diagnostic tools can help you increase network uptime, reduce time to repair, and improve service levels. These policies in the form of TCL scripts isolate the complex troubleshooting and manual fault diagnostics steps. TCL scripts also include an onboard menu system (EMM) to support interactive installation and deployment. Service Diagnostics Scripts cover all functions of CFM (i.e., Connectivity Check, Loopback, and Traceroute) and use EEM capabilities to use events generated by cctimeout to confirm connectivity breaks and verify the status of the network by performing a Loopback check and traceroute and notifying the service manager the status of the network through syslog/email/snmp notifications based on the configuration. The interaction between Service diagnostics with EEM and CFM is shown in Figure 4.
Figure 4. Service Diagnostics Interaction Feature
CFM and EEM Interworking
Ethernet is rapidly gaining acceptance in carrier networks and replacing traditional technologies. This rapid growth of Ethernet is also supported by IEEE 802.1ag (CFM) standard specifications. Because of its end-to-end reachability and hierarchical structures, CFM is very popular in Carrier Ethernet, and service managers like to use it for fault detection and isolation. However, Configuring CFM domains, MIPs, MEPs, and hierarchical levels, and looking at various databases and error status require in-depth understanding and knowledge of this new technology. Network Managers also need to deploy an OAM management infrastructure to monitor the network status. Most of event monitoring and management is performed by devices external to the network that add extra costs of hardware and networking.
Prior to CFM Diagnostics scripts, the following diagnostics scripts are already deployed and being used by the user community:
CFM diagnostic scripts also use EEM infrastructure. EEM Infrastructure is embedded in Cisco IOS Software and widely used in distributed and customized environments for event detection and automated recovery. CFM Fault detection capabilities combined with EEM event detections and policy infrastructure, and Cisco developed an innovative solution of automated service diagnostics scripts that will simplify service managers' efforts. These automated scripts are deployed in Cisco Integrated Services Routers; they can be executed on demand or scheduled for any specific time. These scripts. when executed, collect all network status information and necessary logs and if necessary bounce the interfaces and send the status through email notification. These scripts also use SNMP notification and syslog messages and notify users accordingly. Figure 5 shows the CFM Service Diagnostics scripts currently employed.
Figure 5. Service Diagnostics: Carrier Ethernet Scenarios
Currently we have limited scripts ready for use on Cisco ISRs, and they can be found at CBeyond. You can create your own scripts as per your requirement by following EEM user guidelines and using this innovative technology on Cisco routers. Following is a list of scripts available at Cbeyond.
Supported platforms include the Cisco 3945, 3945E, 3925, 3925E, 2951, 2921, 2911, 2901, 1941, 1921, 1905, 880, and 890 Integrated Services Routers and the Cisco 3800, 2800, and 1800 Series Integrated Services Routers.
Tested Cisco IOS Software Images
• Cisco IOS Software Release 15.1(1)T
• EEM Version 3.10
Testbed Topology
Logical Topology
In this logical topology (Figure 6), CPE1 and CPE2 are connected to provider network (PE1 and PE2).
Figure 6. Logical Topology
Physical Topology
Figure 7 shows the physical topology with the concepts of Maintenance Domain (MD), Maintenance Association (MA), Maintenance Association Endpoint (MEP), and Maintenance Association Intermediate Point (MIP). These components play a vital role in Connectivity Fault Management.
Figure 7. Physical Topology
MEP defines the boundaries of Maintenance Domain, and it is associated with the association of Maintenance with MEPID. MIPs are configured at intermediate point, and they support the discovery of paths among MEPs and location of faults along those paths. MIPs can add, check, and respond to received CFM PDUs. In the topology shown in Figure 8, MEPs are depicted with an arrow and MIPs are shown by small circles in Figure 7. Please note that Customer Domain is from end to end (CPE1 to CPE2) and configured with the highest level 7, whereas the Provider domain is from PE1 to PE2 configured with level 5. Connectiveity Check Messages are catalogued in Connectivity Check Message Database and errors are catalogued in Error DB. MEP connectivity check database (CCDB) contains only Active entries, and MIP CCDB contains both active and archived entries. Please note that MAs are end to end and defined by a set of Maintenance Endpoints (associated with different MEPIDs at the ends). Maintenance Total of 4 maintenance associations (MAs) are configured in this testbed as shown in Figure 8.
Figure 8. Maintenance Association Configurations
Configurations
3845 Configuration
2811 Configuration
agam-3845#show run
Building configuration...
Current configuration : 3562 bytes
version 15.1
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
no service password-encryption
hostname agam-3845
boot-start-marker
boot system flash c3845-entservices-mz.151-0.26.T0.5
boot-end-marker
logging buffered 20000
no aaa new-model
ethernet cfm ieee
ethernet cfm global
ethernet cfm traceroute cache
ethernet cfm traceroute cache hold-time 120
ethernet cfm domain CUST1 level 7
service SID_3 vlan 800 direction down
continuity-check
service SID_4 vlan 801 direction down
continuity-check
service SID_1 vlan 700 direction down
continuity-check
service SID_2 vlan 701 direction down
continuity-check
!
ethernet cfm logging
ethernet cfm ais link-status global
disable
clock timezone EST -5
!
ip source-route
ip cef
ip domain name cisco.com
no ipv6 cef
multilink bundle-name authenticated
!
voice-card 0
!
license udi pid CISCO3845-MB sn FOC10181Y2U
interface GigabitEthernet0/0
ip address 10.0.0.22 255.255.255.0
duplex auto
speed auto
media-type rj45
!
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
media-type rj45
ethernet cfm mep domain CUST1 mpid 7000 vlan 700
ethernet cfm mep domain CUST1 mpid 720 vlan 800
ethernet cfm mep domain CUST1 mpid 721 vlan 801
ethernet cfm mep domain CUST1 mpid 402 vlan 701
!
interface GigabitEthernet0/1.1000
encapsulation dot1Q 700
!
interface GigabitEthernet0/1.1001
encapsulation dot1Q 701
!
interface GigabitEthernet0/1.2000
encapsulation dot1Q 800
!
interface GigabitEthernet0/1.2001
encapsulation dot1Q 801
interface GigabitEthernet1/0
no ip address
shutdown
negotiation auto
!
ip forward-protocol nd
no ip http server
ip route 0.0.0.0 0.0.0.0 10.0.0.1
snmp-server community public RO
snmp-server enable traps event-manager
snmp-server host 10.10.10.30 version 2c nmscore
snmp-server host 172.16.61.90 public
control-plane
line con 0
exec-timeout 0 0
speed 115200
line aux 0
line vty 0 4
login
length 0
transport input all
exception data-corruption buffer truncate
scheduler allocate 20000 1000
end
7604-1
agam-7604-1#show run
Building configuration...
Current configuration : 6292 bytes
!
! Last configuration change at 23:19:27 UTC Wed Apr 7 2010
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
service counters max age 10
!
hostname agam-7604-1
!
boot-start-marker
boot system sup-bootdisk:c7600s72033-adventerprisek9_dbg-mz.122-32.8.13.REC186
1 system Thu Feb 7 01:28:15 2036 ap_perf_test_base_cpu.tcl
2 user Fri Apr 5 15:25:20 1940 cfm_autotrace.tcl
3 user Fri Apr 5 15:25:22 1940 cfm_cctimeout.tcl
4 user Fri Apr 5 15:25:22 1940 cfm_ondemand.tcl
5 user Mon Apr 8 14:34:22 1940 cfm_router_shut.tcl
6 user Fri Apr 5 15:25:24 1940 cfmod.tcl
7 system Thu Feb 7 01:28:15 2036 cl_show_eem_tech.tcl
8 user Fri Apr 5 15:25:24 1940 collectEmailParameters.tcl
9 system Thu Feb 7 01:28:15 2036 no_perf_test_init.tcl
10 user Fri Apr 5 15:25:18 1940 sdiag_router_cfm.tcl
11 user Fri Apr 5 15:25:20 1940 sdiag_router_cfm_display.tcl
12 user Fri Apr 5 15:25:20 1940 sdiag_router_cfm_undeploy.tcl
13 system Thu Feb 7 01:28:15 2036 sl_intf_down.tcl
14 system Thu Feb 7 01:28:15 2036 tm_cli_cmd.tcl
15 system Thu Feb 7 01:28:15 2036 tm_crash_reporter.tcl
16 system Thu Feb 7 01:28:15 2036 tm_fsys_usage.tcl
agam-3845#show event manager version
Embedded Event Manager Version 3.10
Component Versions:
eem: (v310_throttle)4.1.18
eem-gold: (v310_throttle)1.0.7
eem-call-home: (v310_throttle)1.0.6
Event Detectors:
Name Version Node Type
application 01.00 node0/0 RP
syslog 01.00 node0/0 RP
track 01.00 node0/0 RP
resource 01.00 node0/0 RP
routing 02.00 node0/0 RP
cli 01.00 node0/0 RP
counter 01.00 node0/0 RP
interface 01.00 node0/0 RP
ioswdsysmon 01.00 node0/0 RP
none 01.00 node0/0 RP
oir 01.00 node0/0 RP
snmp 01.00 node0/0 RP
snmp-notification 01.00 node0/0 RP
timer 01.00 node0/0 RP
ipsla 01.00 node0/0 RP
test 01.00 node0/0 RP
config 01.00 node0/0 RP
env 01.00 node0/0 RP
gold 01.00 node0/0 RP
nf 01.00 node0/0 RP
agam-3845#show event manager detector all
No. Name Version Node Type
1 application 01.00 node0/0 RP
2 syslog 01.00 node0/0 RP
3 track 01.00 node0/0 RP
4 resource 01.00 node0/0 RP
5 routing 02.00 node0/0 RP
6 cli 01.00 node0/0 RP
7 counter 01.00 node0/0 RP
8 interface 01.00 node0/0 RP
9 ioswdsysmon 01.00 node0/0 RP
10 none 01.00 node0/0 RP
11 oir 01.00 node0/0 RP
12 snmp 01.00 node0/0 RP
13 snmp-notification 01.00 node0/0 RP
14 timer 01.00 node0/0 RP
15 ipsla 01.00 node0/0 RP
16 test 01.00 node0/0 RP
17 config 01.00 node0/0 RP
18 env 01.00 node0/0 RP
19 gold 01.00 node0/0 RP
20 nf 01.00 node0/0 RP
agam-3845#
Prerequisites of CFM Diagnostics Deployment
Before deployment of Service Diagnostics Scripts, verify that:
• CFM is configured in ieee mode; i.e.,
ethernet cfm ieee
ethernet cfm global
• CFM MEP, MIP, MD, and MA are configured; verify remote connectivity through show ethernet cfm maintenance-association remote command.
• CFM Traceroute cache is enabled for CFM EEM policies (cfm_autotrace.tcl, cfm_ondemand.tcl)
• CFM alarm syslogs are enabled (ethernet cfm logging) for CFM EEM policies (cfm_cctimeout.tcl, cfm_shut.tcl, cfm_unshut.tcl)
• SNMP community/manager are configured
• EEM SNMP traps are enabled
• Domain name (ip domain-name "domainname.com") for email notification is configured; ensure that the correct email server IP or FQDN is known.
• CFM MA input file for CFM EEM policies (cfm_cctimeout.tcl, cfm_autotrace.tcl, cfm_shut.tcl) exists
CFM Service Diagnostics Deployment Considerations
Some of the known CFM SD deployment considerations follow:
• Execution time of CFM SD EEM policy is directly proportional to the number of remote MEPs and corresponding operations (e.g., ping/traceroute) performed. Ethernet ping / traceroute timeout is 5 seconds (Applicable to cfm_ondemand.tcl, cfm_cctimeout.tcl, cfm_autotrace.tcl).
• In case of concurrent syslogs triggering the same or different policies (i.e., cfm_cctimeout.tcl, cfm_shut.tcl), the execution is always done in sequence.
• Automatic Diagnostics and Shutdown Port policies (cfm_cctimeout.tcl, cfm_shut.tcl) have a common trigger (network failure event [remote mepTimeout]). This situation may cause both policies to trigger at the same time if input MA files have common entries. In this case, the order of policy deployment determines the execution order. Thus, it is recommended to always deploy first the Shutdown Port policy.
• On-demand Diagnostics policy parses out the content of CFM traceroute cache. Therefore, it is recommended to deploy and run the Autotrace policy in order to maintain the traceroute cache populated.
• Syslog and SNMP notifications are faster compared to Email. Email is sent at the end of processing.
Installing CFM SD (Service Diagnostics) Scripts in Cisco Access Router:
1. Installation Steps Using tclsh CLI parser mode
a) Download the CFM SD scripts zip file in local TFTP server.
b) Unzip the CFM SD zip file.
c) Create policy directory (i.e. svc_diag).
d) Copy policy scripts in newly created directory (i.e. svc_dir).
e) Create Library Directory (i.e. user_lib).
f) Copy library scripts in newly created library directory (i.e. lib_dir).
2. Installation Steps Using EMM
a) Download the mdf file (cfm_router.mdf) in local TFTP server.
Policy Directory contains following policy scripts:
1. sdiag_router_cfm.tcl
2. sdiag_router_cfm_undeploy.tcl
3. sdiag_router_cfm_display.tcl
4. cfm_autotrace.tcl
5. cfm_router_shut.tcl
6. cfm_ondemand.tcl
7. cfm_cctimeout.tcl
8. cfmod.tcl
9. collectEmailParameters.tcl
Service diagnostics Library contains following Library scripts:
1. cfm_lib.tcl
2. diag_lib.tcl
3. lib.tcl
4. lib_2.tcl
5. userlib.tcl
6. userlib_2.tcl
7. tclIndex
8. email_template_cmd
Carrier Ethernet Scenarios - Diagnostics
ON-DEMAND Diagnostics
Upon customer request to troubleshoot a given service, EEM script automatically verifies and isolates faults to remote MEPs affected by service failure. It could also search traceroute-cache. A diagnostics report is sent to NOC/Service Center (Figure 9).
Place together the following information in report
• Number of active MEPs in CCDB with port state == UP
• Details of active MEPs in CCDB with port state <> UP
• Details of entries in Error DB
• Number of remote MEPs with verified connectivity
• Details of remote MEPs with connectivity problems
• Traceroute results for MEPs with connectivity problems
• Results of traceroute cache examination
Automatic Diagnostics
Upon a Service failure, EEM script automatically verifies and isolates faults to the remote MEPs affected. A diagnostics report is sent to NOC/Service Center (Figure 10).
Figure 10. Automatic Diagnostics
EEM event detector: CFM MEP Down (timeout) syslog
Script variables: Input file with list of shortMA names
Working steps of automatic diagnostics after even is detected are described as under.
Inspect CFM Connectivity Check Message DB
Examine MEP CCDB for entry logged against it.
show ethernet cfm maintenace remote detail mpid iii domain zzz vlan xxx
Script variables: Input file with list of shortMA names
Timer value
Working steps of automatic diagnostics after even is detected are described as under.
Verify If Cache Is Enabled
Verify if traceroute cache is enabled. Also verify the size and the hold-time of traceroute cache.
show ethernet cfm traceroute-cache
Parse CFM CCM DB
Initialize these variables for the desired MAs:
• cfm Domains
• rmep mpids
• rmep MAC addresses
• vlan number
Verify with following show commands:
show ethernet cfm domain brief
show ethernet cfm domain <domain>
show ethernet cfm maintenance-points remote
show ethernet cfm maintenance-points remote domain <domain>
Path Discovery (trace ethernet mac)
Issue LTM for each of the rmeps discovered.
traceroute ethernet H.H.H domain zzz vlan xxx
Generate Report
Report. Gather the following information:
• Total number of traceroute operations performed
• rmep details
Action Scripts
Shut/No-shut Script
Shut/No-shut script is a combination of shut and no-shut script with DOWN MEPs. In point-to-point environments with NON-ELMI capable CEs, Shut/No-shut script bounces the interface, thus reducing CE blackholing of traffic when EVC or remote UNI failures occur (Figure 11).
Figure 11. Shut / No-shut operation
EEM event detector:
REMOTE_MEP_UP
REMOTE_MEP_DOWN
Script variables: Input file with list of shortMA names
Working steps of Shut/No-shut Diagnostics are given as under.
Assumptions: Single service (no multiplexing), CFM from UNI to UNI
Parse Collect Data:
Initialize CFM Domain name, S-VLAN ID, Mepid and verify with following command
show ethernet cfm maintenance-points remote
Inspect CFM CCM DB:
IF MEP UP IF state syslog
THEN verify if IF State == DOWN
Continue next step
Inspect CFM Local DB:
Examine the CFM maintenance point local DB to determine the interface that holds the MEP associated with the service under monitoring.
· Deploy cfm_router.tcl scenario (use either emm or tclsh CLI parser)
· Simulate fault in remote side by shutting down sub-interface .1000. Syslog and email notification is display on the screen. (debug snmp detail on).
agam-3845#
*Apr 15 16:43:33.593 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 420 vlan 701 MA name SID_2 in domain CUST1 changed state to down with event code TimeOut.
*Apr 15 16:43:33.593 EST: %E_CFM-6-ENTER_AIS: local mep with mpid 402 level 7 VLAN 701 dir D Interface Gi0/1 enters AIS defect condition
*Apr 15 16:43:34.325 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: WARNING: Configuration, Event, Command history cannot be sent along with syslog/snmp notification
*Apr 15 16:43:34.361 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: Domain from syslog is: CUST1
*Apr 15 16:43:34.361 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: MA from syslog is: SID_2
*Apr 15 16:43:35.265 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: 1
*Apr 15 16:43:35.265 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: Shutting down: Gi0/1.1001
*Apr 15 16:43:35.841 EST: %SYS-5-CONFIG_I: Configured from console by on vty1 (EEM:cfm_router_shut.tcl)
*Apr 15 16:43:35.953 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: No shut on Gi0/1.1001 ...
*Apr 15 16:43:36.153 EST: %E_CFM-3-FAULT_ALARM: A fault has occurred in the network for the local MEP having mpid 402 vlan 701 for service MA name SID_2 with the event code DefRemoteCCM.
*Apr 15 16:43:36.513 EST: %SYS-5-CONFIG_I: Configured from console by on vty0 (EEM:cfm_router_shut.tcl)
*Apr 15 16:43:36.633 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: TRIGGERED_BY "*Apr 15 16:43:33.593 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 420 vlan 701 MA name SID_2 in domain CUST1 changed state to down with event code TimeOut. ":: SERV-DIAG_CFM_shut: Service failure detected on vlan 701, CFM MD CUST1. Reason: Remote MEP timeout. Action: Interface Gi0/1.1001 with local MEP 420 has been shut and unshut.
*Apr 15 16:43:42.853 EST: %HA_EM-6-LOG: cfm_router_shut.tcl:
Email has been sent to arshadm@cisco.com, please check your email box for diagnostic details
Email details:
-----Original Message-----
From: c3845@cisco.com [mailto:c3845@cisco.com]
Sent: Thursday, April 15, 2010 5:48 PM
To: Arshad Mahmood (arshadm)
Cc: arsham@cisco.com
Subject: From router agam-3845:
TRIGGERED_BY "*Apr 15 16:47:54.481 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 420 vlan 701 MA name SID_2 in domain CUST1 changed state to down with event code TimeOut. ":: SERV-DIAG_CFM_shut: Service failure detected on vlan 701, CFM MD CUST1. Reason: Remote MEP timeout. Action: Interface Gi0/1.1001 with local MEP 420 has been shut and unshut.
*Apr 15 16:46:40.017 EST: %SYS-5-CONFIG_I: Configured from console by console
*Apr 15 16:47:09.309 EST: %E_CFM-6-EXIT_AIS: local mep with mpid 402 level 7 VLAN 701 dir D Interface Gi0/1 exited AIS defect condition
*Apr 15 16:47:09.309 EST: %E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 420 vlan 701 MA name SID_2 domain CUST1 interface status Up event code Returning.
*Apr 15 16:47:54.481 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 420 vlan 701 MA name SID_2 in domain CUST1 changed state to down with event code TimeOut.
*Apr 15 16:47:54.481 EST: %E_CFM-6-ENTER_AIS: local mep with mpid 402 level 7 VLAN 701 dir D Interface Gi0/1 enters AIS defect condition
*Apr 15 16:47:55.217 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: WARNING: Configuration, Event, Command history cannot be sent along with syslog/snmp notification
*Apr 15 16:47:55.241 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: Domain from syslog is: CUST1
*Apr 15 16:47:55.241 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: MA from syslog is: SID_2
*Apr 15 16:47:56.145 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: 1
*Apr 15 16:47:56.145 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: Shutting down: Gi0/1.1001
*Apr 15 16:47:56.721 EST: %SYS-5-CONFIG_I: Configured from console by on vty1 (EEM:cfm_router_shut.tcl)
*Apr 15 16:47:56.833 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: No shut on Gi0/1.1001 ...
*Apr 15 16:47:57.041 EST: %E_CFM-3-FAULT_ALARM: A fault has occurred in the network for the local MEP having mpid 402 vlan 701 for service MA name SID_2 with the event code DefRemoteCCM.
*Apr 15 16:47:57.393 EST: %SYS-5-CONFIG_I: Configured from console by on vty0 (EEM:cfm_router_shut.tcl)
*Apr 15 16:47:57.513 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: TRIGGERED_BY "*Apr 15 16:47:54.481 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 420 vlan 701 MA name SID_2 in domain CUST1 changed state to down with event code TimeOut. ":: SERV-DIAG_CFM_shut: Service failure detected on vlan 701, CFM MD CUST1. Reason: Remote MEP timeout. Action: Interface Gi0/1.1001 with local MEP 420 has been shut and unshut.
Thu Apr 15 16:47:55 EST 2010 show event manager environ
Thu Apr 15 16:47:55 EST 2010 show ethernet cfm maintenance-points remote detail mpid 420 domain CUST1 vlan 701
Thu Apr 15 16:47:56 EST 2010 show ethernet cfm mpdb domain-id CUST1 service SID_2
Thu Apr 15 16:47:56 EST 2010 interface Gi0/1.1001
Thu Apr 15 16:47:56 EST 2010 shut
Thu Apr 15 16:47:57 EST 2010 interface Gi0/1.1001
Thu Apr 15 16:47:57 EST 2010 no shut
Syslogs and email notification after Shutting interface on remote 7604
agam-3845#
*Apr 15 17:02:35.377 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 4200 vlan 800 MA name SID_3 in domain CUST1 changed state to down with event code TimeOut.
*Apr 15 17:02:35.377 EST: %E_CFM-6-ENTER_AIS: local mep with mpid 720 level 7 VLAN 800 dir D Interface Gi0/1 enters AIS defect condition
*Apr 15 17:02:35.377 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 420 vlan 701 MA name SID_2 in domain CUST1 changed state to down with event code TimeOut.
*Apr 15 17:02:35.377 EST: %E_CFM-6-ENTER_AIS: local mep with mpid 402 level 7 VLAN 701 dir D Interface Gi0/1 enters AIS defect condition
*Apr 15 17:02:36.117 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: WARNING: Configuration, Event, Command history cannot be sent along with syslog/snmp notification
*Apr 15 17:02:36.141 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: Domain from syslog is: CUST1
*Apr 15 17:02:36.141 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: MA from syslog is: SID_3
*Apr 15 17:02:37.049 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: 0
*Apr 15 17:02:37.049 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: Shutting down: Gi0/1.2000
*Apr 15 17:02:37.625 EST: %SYS-5-CONFIG_I: Configured from console by on vty1 (EEM:cfm_router_shut.tcl)
*Apr 15 17:02:37.737 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: No shut on Gi0/1.2000 ...
*Apr 15 17:02:37.937 EST: %E_CFM-3-FAULT_ALARM: A fault has occurred in the network for the local MEP having mpid 720 vlan 800 for service MA name SID_3 with the event code DefRemoteCCM.
*Apr 15 17:02:37.937 EST: %E_CFM-3-FAULT_ALARM: A fault has occurred in the network for the local MEP having mpid 402 vlan 701 for service MA name SID_2 with the event code DefRemoteCCM.
*Apr 15 17:02:38.193 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 42 vlan 700 MA name SID_1 in domain CUST1 changed state to down with event code TimeOut.
*Apr 15 17:02:38.193 EST: %E_CFM-6-ENTER_AIS: local mep with mpid 7000 level 7 VLAN 700 dir D Interface Gi0/1 enters AIS defect condition
*Apr 15 17:02:38.297 EST: %SYS-5-CONFIG_I: Configured from console by on vty0 (EEM:cfm_router_shut.tcl
*Apr 15 17:02:38.417 ES: %HA_EM-6-LOG: cfm_router_shut.tcl: TRIGGERED_BY "*Apr 15 17:02:35.377 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 4200 vlan 800 MA name SID_3 in domain CUST1 changed state to down with event code TimeOut. ":: SERV-DIAG_CFM_shut: Service failure detected on vlan 800, CFM MD CUST1. Reason: Remote MEP timeout. Action: Interface Gi0/1.2000 with local MEP 4200 has been shut and unshut.
*Apr 15 17:02:38.705 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 4201 vlan 801 MA name SID_4 in domain CUST1 changed state to down with event code TimeOut.
*Apr 15 17:02:38.705 EST: %E_CFM-6-ENTER_AIS: local mep with mpid 721 level 7 VLAN 801 dir D Interface Gi0/1 enters AIS defect condition
*Apr 15 17:02:40.925 EST: %E_CFM-3-FAULT_ALARM: A fault has occurred in the network for the local MEP having mpid 7000 vlan 700 for service MA name SID_1 with the event code DefRemoteCCM.
*Apr 15 17:02:41.477 EST: %E_CFM-3-FAULT_ALARM: A fault has occurred in the network for the local MEP having mpid 721 vlan 801 for service MA name SID_4 with the event code DefRemoteCCM.
*Apr 15 17:02:47.569 EST: %HA_EM-6-LOG: cfm_router_shut.tcl:
Email has been sent to arshadm@cisco.com, please check your email box for diagnostic details
*Apr 15 17:02:48.361 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: WARNING: Configuration, Event, Command history cannot be sent along with syslog/snmp notification
*Apr 15 17:02:48.385 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: Domain from syslog is: CUST1
*Apr 15 17:02:48.385 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: MA from syslog is: SID_2
*Apr 15 17:02:49.285 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: 1
*Apr 15 17:02:49.285 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: Shutting down: Gi0/1.1001
*Apr 15 17:02:49.861 EST: %SYS-5-CONFIG_I: Configured from console by on vty1 (EEM:cfm_router_shut.tcl)
*Apr 15 17:02:49.973 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: No shut on Gi0/1.1001 ...
*Apr 15 17:02:50.533 EST: %SYS-5-CONFIG_I: Configured from console by on vty0 (EEM:cfm_router_shut.tcl)
*Apr 15 17:02:50.653 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: TRIGGERED_BY "*Apr 15 17:02:35.377 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 420 vlan 701 MA name SID_2 in domain CUST1 changed state to down with event code TimeOut. ":: SERV-DIAG_CFM_shut: Service failure detected on vlan 701, CFM MD CUST1. Reason: Remote MEP timeout. Action: Interface Gi0/1.1001 with local MEP 420 has been shut and unshut.
*Apr 15 17:02:59.809 EST: %HA_EM-6-LOG: cfm_router_shut.tcl:
Email has been sent to arshadm@cisco.com, please check your email box for diagnostic details
*Apr 15 17:03:00.609 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: WARNING: Configuration, Event, Command history cannot be sent along with syslog/snmp notification
*Apr 15 17:03:00.637 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: Domain from syslog is: CUST1
*Apr 15 17:03:00.637 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: MA from syslog is: SID_1
*Apr 15 17:03:01.537 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: 1
*Apr 15 17:03:01.537 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: Shutting down: Gi0/1.1000
*Apr 15 17:03:02.113 EST: %SYS-5-CONFIG_I: Configured from console by on vty1 (EEM:cfm_router_shut.tcl)
*Apr 15 17:03:02.225 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: No shut on Gi0/1.1000 ...
*Apr 15 17:03:02.789 EST: %SYS-5-CONFIG_I: Configured from console by on vty0 (EEM:cfm_router_shut.tcl)
*Apr 15 17:03:02.909 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: TRIGGERED_BY "*Apr 15 17:02:38.193 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 42 vlan 700 MA name SID_1 in domain CUST1 changed state to down with event code TimeOut. ":: SERV-DIAG_CFM_shut: Service failure detected on vlan 700, CFM MD CUST1. Reason: Remote MEP timeout. Action: Interface Gi0/1.1000 with local MEP 42 has been shut and unshut.
*Apr 15 17:03:12.069 EST: %HA_EM-6-LOG: cfm_router_shut.tcl:
Email has been sent to arshadm@cisco.com, please check your email box for diagnostic details
*Apr 15 17:03:12.861 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: WARNING: Configuration, Event, Command history cannot be sent along with syslog/snmp notification
*Apr 15 17:03:12.889 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: Domain from syslog is: CUST1
*Apr 15 17:03:12.889 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: MA from syslog is: SID_4
*Apr 15 17:03:13.793 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: 0
*Apr 15 17:03:13.793 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: Shutting down: Gi0/1.2001
*Apr 15 17:03:14.369 EST: %SYS-5-CONFIG_I: Configured from console by on vty1 (EEM:cfm_router_shut.tcl)
*Apr 15 17:03:14.481 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: No shut on Gi0/1.2001 ...
*Apr 15 17:03:15.041 EST: %SYS-5-CONFIG_I: Configured from console by on vty0 (EEM:cfm_router_shut.tcl)
*Apr 15 17:03:15.161 EST %HA_EM-6-LOG: cfm_router_shut.tcl: TRIGGERED_BY "*Apr 15 17:02:38.705 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 4201 vlan 801 MA name SID_4 in domain CUST1 changed state to down with event code TimeOut. ":: SERV-DIAG_CFM_shut: Service failure detected on vlan 801, CFM MD CUST1. Reason: Remote MEP timeout. Action: Interface Gi0/1.2001 with local MEP 4201 has been shut and unshut.
*Apr 15 17:03:23.329 EST: %HA_EM-6-LOG: cfm_router_shut.tcl:
Email has been sent to arshadm@cisco.com, please check your email box for diagnostic details
Email details with logging buffer 200000
-----Original Message-----
From: c3845@cisco.com [mailto:c3845@cisco.com]
Sent: Thursday, April 15, 2010 6:03 PM
To: Arshad Mahmood (arshadm)
Cc: arsham@cisco.com
Subject: From router agam-3845:
TRIGGERED_BY "*Apr 15 17:02:38.705 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 4201 vlan 801 MA name SID_4 in domain CUST1 changed state to down with event code TimeOut. ":: SERV-DIAG_CFM_shut: Service failure detected on vlan 801, CFM MD CUST1. Reason: Remote MEP timeout. Action: Interface Gi0/1.2001 with local MEP 4201 has been shut and unshut.
*Apr 15 17:01:12.505 EST: %E_CFM-6-EXIT_AIS: local mep with mpid 721 level 7 VLAN 801 dir D Interface Gi0/1 exited AIS defect condition
*Apr 15 17:01:12.505 EST: %E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 4201 vlan 801 MA name SID_4 domain CUST1 interface status Up event code Returning.
*Apr 15 17:01:13.001 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: WARNING: Configuration, Event, Command history cannot be sent along with syslog/snmp notification
*Apr 15 17:01:13.025 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: Domain from syslog is: CUST1
*Apr 15 17:01:13.025 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: MA from syslog is: SID_4
*Apr 15 17:01:13.477 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: WARNING: Interface status associated with remote MEP with mpid 4201 vlan 801 MA name CUST1 is already Up. Aborting CFM shut script for this instance.
*Apr 15 17:01:14.241 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: WARNING: Configuration, Event, Command history cannot be sent along with syslog/snmp notification
*Apr 15 17:01:14.265 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: Domain from syslog is: CUST1
*Apr 15 17:01:14.265 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: MA from syslog is: SID_3
*Apr 15 17:01:14.717 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: WARNING: Interface status associated with remote MEP with mpid 4200 vlan 800 MA name CUST1 is already Up. Aborting CFM shut script for this instance.
*Apr 15 17:02:35.377 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 4200 vlan 800 MA name SID_3 in domain CUST1 changed state to down with event code TimeOut.
*Apr 15 17:02:35.377 EST: %E_CFM-6-ENTER_AIS: local mep with mpid 720 level 7 VLAN 800 dir D Interface Gi0/1 enters AIS defect condition
*Apr 15 17:02:35.377 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 420 vlan 701 MA name SID_2 in domain CUST1 changed state to down with event code TimeOut.
*Apr 15 17:02:35.377 EST: %E_CFM-6-ENTER_AIS: local mep with mpid 402 level 7 VLAN 701 dir D Interface Gi0/1 enters AIS defect condition
*Apr 15 17:02:36.117 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: WARNING: Configuration, Event, Command history cannot be sent along with syslog/snmp notification
*Apr 15 17:02:36.141 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: Domain from syslog is: CUST1
*Apr 15 17:02:36.141 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: MA from syslog is: SID_3
*Apr 15 17:02:37.049 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: 0
*Apr 15 17:02:37.049 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: Shutting down: Gi0/1.2000
*Apr 15 17:02:37.625 EST: %SYS-5-CONFIG_I: Configured from console by on vty1 (EEM:cfm_router_shut.tcl)
*Apr 15 17:02:37.737 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: No shut on Gi0/1.2000 ...
*Apr 15 17:02:37.937 EST: %E_CFM-3-FAULT_ALARM: A fault has occurred in the network for the local MEP having mpid 720 vlan 800 for service MA name SID_3 with the event code DefRemoteCCM.
*Apr 15 17:02:37.937 EST: %E_CFM-3-FAULT_ALARM: A fault has occurred in the network for the local MEP having mpid 402 vlan 701 for service MA name SID_2 with the event code DefRemoteCCM.
*Apr 15 17:02:38.193 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 42 vlan 700 MA name SID_1 in domain CUST1 changed state to down with event code TimeOut.
*Apr 15 17:02:38.193 EST: %E_CFM-6-ENTER_AIS: local mep with mpid 7000 level 7 VLAN 700 dir D Interface Gi0/1 enters AIS defect condition
*Apr 15 17:02:38.297 EST: %SYS-5-CONFIG_I: Configured from console by on vty0 (EEM:cfm_router_shut.tcl)
*pr 15 17:02:38.417 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: TRIGGERED_BY "*Apr 15 17:02:35.377 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 4200 vlan 800 MA name SID_3 in domain CUST1 changed state to down with event code TimeOut. ":: SERV-DIAG_CFM_shut: Service failure detected on vlan 800, CFM MD CUST1. Reason: Remote MEP timeout. Action: Interface Gi0/1.2000 with local MEP 4200 has been shut and unshut.
*Apr 15 17:02:38.705 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 4201 vlan 801 MA name SID_4 in domain CUST1 changed state to down with event code TimeOut.
*Apr 15 17:02:38.705 EST: %E_CFM-6-ENTER_AIS: local mep with mpid 721 level 7 VLAN 801 dir D Interface Gi0/1 enters AIS defect condition
*Apr 15 17:02:40.925 EST: %E_CFM-3-FAULT_ALARM: A fault has occurred in the network for the local MEP having mpid 7000 vlan 700 for service MA name SID_1 with the event code DefRemoteCCM.
*Apr 15 17:02:41.477 EST: %E_CFM-3-FAULT_ALARM: A fault has occurred in the network for the local MEP having mpid 721 vlan 801 for service MA name SID_4 with the event code DefRemoteCCM.
*Apr 15 17:02:47.569 EST: %HA_EM-6-LOG: cfm_router_shut.tcl:
Email has been sent to arshadm@cisco.com, please check your email box for diagnostic details
*Apr 15 17:02:48.361 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: WARNING: Configuration, Event, Command history cannot be sent along with syslog/snmp notification
*Apr 15 17:02:48.385 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: Domain from syslog is: CUST1
*Apr 15 17:02:48.385 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: MA from syslog is: SID_2
*Apr 15 17:02:49.285 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: 1
*Apr 15 17:02:49.285 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: Shutting down: Gi0/1.1001
*Apr 15 17:02:49.861 EST: %SYS-5-CONFIG_I: Configured from console by on vty1 (EEM:cfm_router_shut.tcl)
*Apr 15 17:02:49.973 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: No shut on Gi0/1.1001 ...
*Apr 15 17:02:50.533 EST: %SYS-5-CONFIG_I: Configured from console by on vty0 (EEM:cfm_router_shut.tcl)
*Apr 15 17:02:50.653 EST: %HA_EM-6-LOG: cfm_router_shut.tcl: TRIGGERED_BY "*Apr 15 17:02:35.377 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 420 vlan 701 MA name SID_2 in domain CUST1 changed state to down with event code TimeOut. ":: SERV-DIAG_CFM_shut: Service failure detected on vlan 701, CFM MD CUST1. Reason: Remote MEP timeout. Action: Interface Gi0/1.1001 with local MEP 420 has been shut and unshut.
*Apr 15 17:02:59.809 EST: %HA_EM-6-LOG: cfm_router_shut.tcl:
Email has been sent to arshadm@cisco.com, please check your email box for diagnostic details
Thu Apr 15 17:03:12 EST 2010 show event manager environ
Thu Apr 15 17:03:13 EST 2010 show ethernet cfm maintenance-points remote detail mpid 4201 domain CUST1 vlan 801
Thu Apr 15 17:03:13 EST 2010 show ethernet cfm mpdb domain-id CUST1 service SID_4
Thu Apr 15 17:03:14 EST 2010 interface Gi0/1.2001
Thu Apr 15 17:03:14 EST 2010 shut
Thu Apr 15 17:03:14 EST 2010 interface Gi0/1.2001
Thu Apr 15 17:03:15 EST 2010 no shut
Executing cctimeout scenario:
Create a fault on the remote side to trigger cctimeout event. Following syslogs and email notification is displayed (debug SNMP detail enabled)
agam-3845#
*Apr 15 17:22:22.017 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 42 vlan 700 MA name SID_1 in domain CUST1 changed state to down with event code TimeOut.
*Apr 15 17:22:22.017 EST: %E_CFM-6-ENTER_AIS: local mep with mpid 7000 level 7 VLAN 700 dir D Interface Gi0/1 enters AIS defect condition
*Apr 15 17:22:22.749 EST: %HA_EM-6-LOG: cfm_cctimeout.tcl: WARNING: Configuration, Event, Command history cannot be sent along with syslog/snmp notification
*Apr 15 17:22:24.577 EST: %E_CFM-3-FAULT_ALARM: A fault has occurred in the network for the local MEP having mpid 7000 vlan 700 for service MA name SID_1 with the event code DefRemoteCCM.
*Apr 15 17:22:56.765 EST: %HA_EM-6-LOG: cfm_cctimeout.tcl: TRIGGERED_BY "*Apr 15 17:22:22.017 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 42 vlan 700 MA name SID_1 in domain CUST1 changed state to down with event code TimeOut. ":: SERV-DIAG_CFM_timeout: Diagnostics for rmep 0024.14f6.80c1 on vlan 700, CFM MD CUST1.CCDB: 0 found; ErrorDB: 1 found; Reasons: Timeout; Ping: fail; Trace: fail
*Apr 15 17:23:04.917 EST: %HA_EM-6-LOG: cfm_cctimeout.tcl:
Email has been sent to arshadm@cisco.com, please check your email box for diagnostic details
TRIGGERED_BY "*Apr 15 17:22:22.017 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 42 vlan 700 MA name SID_1 in domain CUST1 changed state to down with event code TimeOut. ":: SERV-DIAG_CFM_timeout: Diagnostics for rmep 0024.14f6.80c1 on vlan 700, CFM MD CUST1.CCDB: 0 found; ErrorDB: 1 found; Reasons: Timeout; Ping: fail; Trace: fail
DETAILED MESSAGE:
Diagnostics for rmep 0024.14f6.80c1 on vlan 700, CFM MD CUST1, level = 7 ;
(1) Details of remote MEP was not found in CCDB.
(2) Details of remote MEP collected from Error DB
(a) MEP ID - 42
(b) MAC Address - 0024.14f6.80c1
(c) Reason - "Lifetime Timer Expired"
(3) Output of loopback operation performed to remote MEP :
Ping to "0024.14f6.80c1" failed.
(4) Output from Traceroute operation to remote MEP : Traceroute failed.
(5) TRACEROUTE OUTPUT:
Type escape sequence to abort. TTL 64. Linktrace Timeout is 5 seconds
Tracing the route to 0024.14f6.80c1 on Domain CUST1, Level 7, vlan 700
*Apr 15 17:15:31.913 EST: %SYS-5-CONFIG_I: Configured from console by console
*Apr 15 17:20:55.697 EST: %E_CFM-6-EXIT_AIS: local mep with mpid 721 level 7 VLAN 801 dir D Interface Gi0/1 exited AIS defect condition
*Apr 15 17:20:55.697 EST: %E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 4201 vlan 801 MA name SID_4 domain CUST1 interface status Up event code Returning.
*Apr 15 17:20:55.953 EST: %E_CFM-6-EXIT_AIS: local mep with mpid 7000 level 7 VLAN 700 dir D Interface Gi0/1 exited AIS defect condition
*Apr 15 17:20:55.953 EST: %E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 42 vlan 700 MA name SID_1 domain CUST1 interface status Up event code Returning.
*Apr 15 17:20:58.513 EST: %E_CFM-6-EXIT_AIS: local mep with mpid 720 level 7 VLAN 800 dir D Interface Gi0/1 exited AIS defect condition
*Apr 15 17:20:58.513 EST: %E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 4200 vlan 800 MA name SID_3 domain CUST1 interface status Up event code Returning.
*Apr 15 17:20:59.281 EST: %E_CFM-6-EXIT_AIS: local mep with mpid 402 level 7 VLAN 701 dir D Interface Gi0/1 exited AIS defect condition
*Apr 15 17:20:59.281 EST: %E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 420 vlan 701 MA name SID_2 domain CUST1 interface status Up event code Returning.
*Apr 15 17:22:22.017 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 42 vlan 700 MA name SID_1 in domain CUST1 changed state to down with event code TimeOut.
*Apr 15 17:22:22.017 EST: %E_CFM-6-ENTER_AIS: local mep with mpid 7000 level 7 VLAN 700 dir D Interface Gi0/1 enters AIS defect condition
*Apr 15 17:22:22.749 EST: %HA_EM-6-LOG: cfm_cctimeout.tcl: WARNING: Configuration, Event, Command history cannot be sent along with syslog/snmp notification
*Apr 15 17:22:24.577 EST: %E_CFM-3-FAULT_ALARM: A fault has occurred in the network for the local MEP having mpid 7000 vlan 700 for service MA name SID_1 with the event code DefRemoteCCM.
*Apr 15 17:22:56.765 EST: %HA_EM-6-LOG: cfm_cctimeout.tcl: TRIGGERED_BY "*Apr 15 17:22:22.017 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 42 vlan 700 MA name SID_1 in domain CUST1 changed state to down with event code TimeOut. ":: SERV-DIAG_CFM_timeout: Diagnostics for rmep 0024.14f6.80c1 on vlan 700, CFM MD CUST1.CCDB: 0 found; ErrorDB: 1 found; Reasons: Timeout; Ping: fail; Trace: fail
*Apr 15 17:15:31.913 EST: %SYS-5-CONFIG_I: Configured from console by console
*Apr 15 17:20:55.697 EST: %E_CFM-6-EXIT_AIS: local mep with mpid 721 level 7 VLAN 801 dir D Interface Gi0/1 exited AIS defect condition
*Apr 15 17:20:55.697 EST: %E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 4201 vlan 801 MA name SID_4 domain CUST1 interface status Up event code Returning.
*Apr 15 17:20:55.953 EST: %E_CFM-6-EXIT_AIS: local mep with mpid 7000 level 7 VLAN 700 dir D Interface Gi0/1 exited AIS defect condition
*Apr 15 17:20:55.953 EST: %E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 42 vlan 700 MA name SID_1 domain CUST1 interface status Up event code Returning.
*Apr 15 17:20:58.513 EST: %E_CFM-6-EXIT_AIS: local mep with mpid 720 level 7 VLAN 800 dir D Interface Gi0/1 exited AIS defect condition
*Apr 15 17:20:58.513 EST: %E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 4200 vlan 800 MA name SID_3 domain CUST1 interface status Up event code Returning.
*Apr 15 17:20:59.281 EST: %E_CFM-6-EXIT_AIS: local mep with mpid 402 level 7 VLAN 701 dir D Interface Gi0/1 exited AIS defect condition
*Apr 15 17:20:59.281 EST: %E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 420 vlan 701 MA name SID_2 domain CUST1 interface status Up event code Returning.
*Apr 15 17:22:22.017 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 42 vlan 700 MA name SID_1 in domain CUST1 changed state to down with event code TimeOut.
*Apr 15 17:22:22.017 EST: %E_CFM-6-ENTER_AIS: local mep with mpid 7000 level 7 VLAN 700 dir D Interface Gi0/1 enters AIS defect condition
*Apr 15 17:22:22.749 EST: %HA_EM-6-LOG: cfm_cctimeout.tcl: WARNING: Configuration, Event, Command history cannot be sent along with syslog/snmp notification
*Apr 15 17:22:24.577 EST: %E_CFM-3-FAULT_ALARM: A fault has occurred in the network for the local MEP having mpid 7000 vlan 700 for service MA name SID_1 with the event code DefRemoteCCM.
*Apr 15 17:22:56.765 EST: %HA_EM-6-LOG: cfm_cctimeout.tcl: TRIGGERED_BY "*Apr 15 17:22:22.017 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 42 vlan 700 MA name SID_1 in domain CUST1 changed state to down with event code TimeOut. ":: SERV-DIAG_CFM_timeout: Diagnostics for rmep 0024.14f6.80c1 on vlan 700, CFM MD CUST1.CCDB: 0 found; ErrorDB: 1 found; Reasons: Timeout; Ping: fail; Trace: fail
*Apr 15 17:23:04.917 EST: %HA_EM-6-LOG: cfm_cctimeout.tcl:
Email has been sent to arshadm@cisco.com, please check your email box for diagnostic details
*Apr 15 17:23:13.937 EST: %E_CFM-6-EXIT_AIS: local mep with mpid 7000 level 7 VLAN 700 dir D Interface Gi0/1 exited AIS defect condition
*Apr 15 17:23:13.941 EST: %E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 42 vlan 700 MA name SID_1 domain CUST1 interface status Up event code Returning.
*Apr 15 18:04:13.657 EST: %SYS-5-CONFIG_I: Configured from console by console
*Apr 15 18:08:03.785 EST: %HA_EM-6-LOG: cfm_ondemand.tcl: TRIGGERED_BY "Ondemand script run manually":: SERV-DIAG_CFM_ondemand: Diagnostics for vlan 700, CFM MD CUST1, rmep:all. CCDB: 1 found, 1 with UP IF state; ErrorDB: 0 found; Reasons: Ping: 1/0 total/fail;
Autotrace scenario automatically triggers the cfm_autotrace policy after a specified interval. This action is very useful and it does not require any human intervention. You are notified through syslog or email notification after regular time intervals. Following are details that are sent as an email notification every hour (60 Min):
-----Original Message-----
From: c3845@cisco.com [mailto:c3845@cisco.com]
Sent: Friday, April 16, 2010 1:05 PM
To: Arshad Mahmood (arshadm)
Cc: arsham@cisco.com
Subject: From router agam-3845:
TRIGGERED_BY "auto-trace watchdog timer every 60 minutes.":: SERV-DIAG_CFM_autotrace: A total of 4 MEPS for valid MAs specified in ma_test have been automatically tracerouted. Results stored in the CFM traceroute cache.
*Apr 15 17:15:31.913 EST: %SYS-5-CONFIG_I: Configured from console by console
*Apr 15 17:20:55.697 EST: %E_CFM-6-EXIT_AIS: local mep with mpid 721 level 7 VLAN 801 dir D Interface Gi0/1 exited AIS defect condition
*Apr 15 17:20:55.697 EST: %E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 4201 vlan 801 MA name SID_4 domain CUST1 interface status Up event code Returning.
*Apr 15 17:20:55.953 EST: %E_CFM-6-EXIT_AIS: local mep with mpid 7000 level 7 VLAN 700 dir D Interface Gi0/1 exited AIS defect condition
*Apr 15 17:20:55.953 EST: %E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 42 vlan 700 MA name SID_1 domain CUST1 interface status Up event code Returning.
*Apr 15 17:20:58.513 EST: %E_CFM-6-EXIT_AIS: local mep with mpid 720 level 7 VLAN 800 dir D Interface Gi0/1 exited AIS defect condition
*Apr 15 17:20:58.513 EST: %E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 4200 vlan 800 MA name SID_3 domain CUST1 interface status Up event code Returning.
*Apr 15 17:20:59.281 EST: %E_CFM-6-EXIT_AIS: local mep with mpid 402 level 7 VLAN 701 dir D Interface Gi0/1 exited AIS defect condition
*Apr 15 17:20:59.281 EST: %E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 420 vlan 701 MA name SID_2 domain CUST1 interface status Up event code Returning.
*Apr 15 17:22:22.017 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 42 vlan 700 MA name SID_1 in domain CUST1 changed state to down with event code TimeOut.
*Apr 15 17:22:22.017 EST: %E_CFM-6-ENTER_AIS: local mep with mpid 7000 level 7 VLAN 700 dir D Interface Gi0/1 enters AIS defect condition
*Apr 15 17:22:22.749 EST: %HA_EM-6-LOG: cfm_cctimeout.tcl: WARNING: Configuration, Event, Command history cannot be sent along with syslog/snmp notification
*Apr 15 17:22:24.577 EST: %E_CFM-3-FAULT_ALARM: A fault has occurred in the network for the local MEP having mpid 7000 vlan 700 for service MA name SID_1 with the event code DefRemoteCCM.
*Apr 15 17:22:56.765 EST: %HA_EM-6-LOG: cfm_cctimeout.tcl: TRIGGERED_BY "*Apr 15 17:22:22.017 EST: %E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 42 vlan 700 MA name SID_1 in domain CUST1 changed state to down with event code TimeOut. ":: SERV-DIAG_CFM_timeout: Diagnostics for rmep 0024.14f6.80c1 on vlan 700, CFM MD CUST1.CCDB: 0 found; ErrorDB: 1 found; Reasons: Timeout; Ping: fail; Trace: fail
*Apr 15 17:23:04.917 EST: %HA_EM-6-LOG: cfm_cctimeout.tcl:
Email has been sent to arshadm@cisco.com, please check your email box for diagnostic details
*Apr 15 17:23:13.937 EST: %E_CFM-6-EXIT_AIS: local mep with mpid 7000 level 7 VLAN 700 dir D Interface Gi0/1 exited AIS defect condition
*Apr 15 17:23:13.941 EST: %E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 42 vlan 700 MA name SID_1 domain CUST1 interface status Up event code Returning.
*Apr 15 18:04:13.657 EST: %SYS-5-CONFIG_I: Configured from console by console
*Apr 15 18:08:03.785 EST: %HA_EM-6-LOG: cfm_ondemand.tcl: TRIGGERED_BY "Ondemand script run manually":: SERV-DIAG_CFM_ondemand: Diagnostics for vlan 700, CFM MD CUST1, rmep:all. CCDB: 1 found, 1 with UP IF state; ErrorDB: 0 found; Reasons: Ping: 1/0 total/fail;
*Apr 15 18:08:12.025 EST: %HA_EM-6-LOG: cfm_ondemand.tcl:
Email has been sent to arshadm@cisco.com, please check your email box for diagnostic details
THE COMMAND HISTORY is:
Fri Apr 16 12:04:41 EST 2010 show event manager environ
Fri Apr 16 12:04:41 EST 2010 show ethernet cfm traceroute-cache