Check Reachable Check

This scenario shows how to configure a reachability checking before sending any trap.

../../../../_images/common1.svg

Test SNMPv1 Send Traps

Description

This scenario tests reachability checking for traps in SNMPv1. Initially, the DUT0 is not reachable from DUT1, so no traps are received. After the DUT0 is reachable from DUT1, the traps are received.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces dummy dum0 address 20.0.0.1/24
set interfaces dummy dum0 alarm down ALARM2TEST
set interfaces ethernet eth0 address 10.0.0.1/24
set service nsm operation CHECK_REACHABILITY alarm ALARM_REACHABILITY activate loss 1
set service nsm operation CHECK_REACHABILITY alarm ALARM_REACHABILITY deactivate loss 0
set service nsm operation CHECK_REACHABILITY destination-address 10.0.0.2
set service nsm operation CHECK_REACHABILITY type icmp
set service nsm operation CHECK_REACHABILITY window 2
set service snmp community 'COMMUNITY2TEST!' notify-traps advisor ADVISOR2TEST
set service snmp community 'COMMUNITY2TEST!' notify-traps alarm ALARM2TEST
set service snmp trap-target 10.0.0.2 reachability-checking ADVISOR_REACHABLE
set service snmp trap-target 10.0.0.2 version v1 community 'COMMUNITY2TEST!'
set service snmp trap-target 10.0.0.2 version v1 source 10.0.0.1
set system advisor ADVISOR2TEST test ALARM2TEST
set system advisor ADVISOR_REACHABLE test 'not ALARM_REACHABILITY'
set system alarm ALARM2TEST
set system alarm ALARM_REACHABILITY initial-state true
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Set the following configuration in DUT1 :

set interfaces ethernet eth0 address 10.0.0.2/24
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

No traps would be received if DUT1 is not reachable from DUT0, and this traps are
saved for later when DUT1 is reachable again.

Step 3: Modify the following configuration lines in DUT0 :

set interfaces ethernet eth0 disable

Step 4: Run command service snmp monitor traps community COMMUNITY2TEST! at DUT1.

Step 5: Modify the following configuration lines in DUT0 :

set interfaces dummy dum0 disable

Now DUT1 is reachable from DUT0, so traps should be received, including the ones
that were saved before.

Step 6: Run command service snmp monitor traps community COMMUNITY2TEST! at DUT1.

Step 7: Modify the following configuration lines in DUT0 :

delete interfaces ethernet eth0 disable

Step 8: Modify the following configuration lines in DUT0 :

delete interfaces dummy dum0 disable

Test SNMPv2c Send Traps

Description

Same as the previous test, but for SNMPv2c.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces dummy dum0 address 20.0.0.1/24
set interfaces dummy dum0 alarm down ALARM2TEST
set interfaces ethernet eth0 address 10.0.0.1/24
set service nsm operation CHECK_REACHABILITY alarm ALARM_REACHABILITY activate loss 1
set service nsm operation CHECK_REACHABILITY alarm ALARM_REACHABILITY deactivate loss 0
set service nsm operation CHECK_REACHABILITY destination-address 10.0.0.2
set service nsm operation CHECK_REACHABILITY type icmp
set service nsm operation CHECK_REACHABILITY window 2
set service snmp community 'COMMUNITY2TEST!' notify-traps advisor ADVISOR2TEST
set service snmp community 'COMMUNITY2TEST!' notify-traps alarm ALARM2TEST
set service snmp trap-target 10.0.0.2 reachability-checking ADVISOR_REACHABLE
set service snmp trap-target 10.0.0.2 version v2c community 'COMMUNITY2TEST!'
set system advisor ADVISOR2TEST test ALARM2TEST
set system advisor ADVISOR_REACHABLE test 'not ALARM_REACHABILITY'
set system alarm ALARM2TEST
set system alarm ALARM_REACHABILITY initial-state true
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Set the following configuration in DUT1 :

set interfaces ethernet eth0 address 10.0.0.2/24
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

No traps would be received if DUT1 is not reachable from DUT0, and this traps are
saved for later when DUT1 is reachable again.

Step 3: Modify the following configuration lines in DUT0 :

set interfaces ethernet eth0 disable

Step 4: Run command service snmp monitor traps community COMMUNITY2TEST! at DUT1.

Step 5: Modify the following configuration lines in DUT0 :

set interfaces dummy dum0 disable

Now DUT1 is reachable from DUT0, so traps should be received, including the ones
that were saved before.

Step 6: Run command service snmp monitor traps community COMMUNITY2TEST! at DUT1.

Step 7: Modify the following configuration lines in DUT0 :

delete interfaces ethernet eth0 disable

Step 8: Modify the following configuration lines in DUT0 :

delete interfaces dummy dum0 disable

Test SNMPv2 Send Informs

Description

Same as the previous test, but for SNMPv2c informs.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces dummy dum0 address 20.0.0.1/24
set interfaces dummy dum0 alarm down ALARM2TEST
set interfaces ethernet eth0 address 10.0.0.1/24
set service nsm operation CHECK_REACHABILITY alarm ALARM_REACHABILITY activate loss 1
set service nsm operation CHECK_REACHABILITY alarm ALARM_REACHABILITY deactivate loss 0
set service nsm operation CHECK_REACHABILITY destination-address 10.0.0.2
set service nsm operation CHECK_REACHABILITY type icmp
set service nsm operation CHECK_REACHABILITY window 2
set service snmp community 'COMMUNITY2TEST!' notify-traps advisor ADVISOR2TEST
set service snmp community 'COMMUNITY2TEST!' notify-traps alarm ALARM2TEST
set service snmp trap-target 10.0.0.2 reachability-checking ADVISOR_REACHABLE
set service snmp trap-target 10.0.0.2 version v2c community 'COMMUNITY2TEST!'
set service snmp trap-target 10.0.0.2 version v2c type inform
set system advisor ADVISOR2TEST test ALARM2TEST
set system advisor ADVISOR_REACHABLE test 'not ALARM_REACHABILITY'
set system alarm ALARM2TEST
set system alarm ALARM_REACHABILITY initial-state true
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Set the following configuration in DUT1 :

set interfaces ethernet eth0 address 10.0.0.2/24
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

No traps would be received if DUT1 is not reachable from DUT0, and this traps are
saved for later when DUT1 is reachable again.

Step 3: Modify the following configuration lines in DUT0 :

set interfaces ethernet eth0 disable

Step 4: Run command service snmp monitor traps community COMMUNITY2TEST! at DUT1.

Step 5: Modify the following configuration lines in DUT0 :

set interfaces dummy dum0 disable

Now DUT1 is reachable from DUT0, so traps should be received, including the ones
that were saved before.

Step 6: Run command service snmp monitor traps community COMMUNITY2TEST! at DUT1.

Step 7: Modify the following configuration lines in DUT0 :

delete interfaces ethernet eth0 disable

Step 8: Modify the following configuration lines in DUT0 :

delete interfaces dummy dum0 disable

Test SNMPv3 Send Traps

Description

Same as the previous test, but for SNMPv3.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces dummy dum0 address 20.0.0.1/24
set interfaces dummy dum0 alarm down ALARM2TEST
set interfaces ethernet eth0 address 10.0.0.1/24
set service nsm operation CHECK_REACHABILITY alarm ALARM_REACHABILITY activate loss 1
set service nsm operation CHECK_REACHABILITY alarm ALARM_REACHABILITY deactivate loss 0
set service nsm operation CHECK_REACHABILITY destination-address 10.0.0.2
set service nsm operation CHECK_REACHABILITY type icmp
set service nsm operation CHECK_REACHABILITY window 2
set service snmp engine-id 0x80000009010a0101c1
set service snmp trap-target 10.0.0.2 reachability-checking ADVISOR_REACHABLE
set service snmp trap-target 10.0.0.2 version v3 user USER2TEST
set service snmp user USER2TEST notify-traps advisor ADVISOR2TEST
set service snmp user USER2TEST notify-traps alarm ALARM2TEST
set system advisor ADVISOR2TEST test ALARM2TEST
set system advisor ADVISOR_REACHABLE test 'not ALARM_REACHABILITY'
set system alarm ALARM2TEST
set system alarm ALARM_REACHABILITY initial-state true
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Set the following configuration in DUT1 :

set interfaces ethernet eth0 address 10.0.0.2/24
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

No traps would be received if DUT1 is not reachable from DUT0, and this traps are
saved for later when DUT1 is reachable again.

Step 3: Modify the following configuration lines in DUT0 :

set interfaces ethernet eth0 disable

Step 4: Run command service snmp monitor traps user USER2TEST engine-id 0x80000009010a0101c1 at DUT1.

Step 5: Modify the following configuration lines in DUT0 :

set interfaces dummy dum0 disable

Now DUT1 is reachable from DUT0, so traps should be received, including the ones
that were saved before.

Step 6: Run command service snmp monitor traps user USER2TEST engine-id 0x80000009010a0101c1 at DUT1.

Step 7: Modify the following configuration lines in DUT0 :

delete interfaces ethernet eth0 disable

Step 8: Modify the following configuration lines in DUT0 :

delete interfaces dummy dum0 disable

Test SNMPv3 Send Informs

Description

Same as the previous test, but for SNMPv3 informs.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces dummy dum0 address 20.0.0.1/24
set interfaces dummy dum0 alarm down ALARM2TEST
set interfaces ethernet eth0 address 10.0.0.1/24
set service nsm operation CHECK_REACHABILITY alarm ALARM_REACHABILITY activate loss 1
set service nsm operation CHECK_REACHABILITY alarm ALARM_REACHABILITY deactivate loss 0
set service nsm operation CHECK_REACHABILITY destination-address 10.0.0.2
set service nsm operation CHECK_REACHABILITY type icmp
set service nsm operation CHECK_REACHABILITY window 2
set service snmp trap-target 10.0.0.2 reachability-checking ADVISOR_REACHABLE
set service snmp trap-target 10.0.0.2 version v3 type inform
set service snmp trap-target 10.0.0.2 version v3 user USER2TEST
set service snmp user USER2TEST notify-traps advisor ADVISOR2TEST
set service snmp user USER2TEST notify-traps alarm ALARM2TEST
set system advisor ADVISOR2TEST test ALARM2TEST
set system advisor ADVISOR_REACHABLE test 'not ALARM_REACHABILITY'
set system alarm ALARM2TEST
set system alarm ALARM_REACHABILITY initial-state true
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Set the following configuration in DUT1 :

set interfaces ethernet eth0 address 10.0.0.2/24
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

No traps would be received if DUT1 is not reachable from DUT0, and this traps are
saved for later when DUT1 is reachable again.

Step 3: Modify the following configuration lines in DUT0 :

set interfaces ethernet eth0 disable

Step 4: Run command service snmp monitor traps user USER2TEST at DUT1.

Step 5: Modify the following configuration lines in DUT0 :

set interfaces dummy dum0 disable

Now DUT1 is reachable from DUT0, so traps should be received, including the ones
that were saved before.

Step 6: Run command service snmp monitor traps user USER2TEST at DUT1.

Step 7: Modify the following configuration lines in DUT0 :

delete interfaces ethernet eth0 disable

Step 8: Modify the following configuration lines in DUT0 :

delete interfaces dummy dum0 disable

Test Notifications Reachability Check

Description

This scenario tests the reachability checking for notifications traps. The DUT0 is configured to send traps to DUT1, and the reachability checking is enabled. Initialilly, the DUT0 is not reachable from DUT1, so no traps are received. After the DUT0 is reachable from DUT1, the traps are received, including the ones that were saved before.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces dummy dum0 address 20.0.0.1/24
set interfaces dummy dum0 alarm down ALARM2TEST
set interfaces ethernet eth0 address 10.0.0.1/24
set service nsm operation CHECK_REACHABILITY alarm ALARM_REACHABILITY activate loss 1
set service nsm operation CHECK_REACHABILITY alarm ALARM_REACHABILITY deactivate loss 0
set service nsm operation CHECK_REACHABILITY destination-address 10.0.0.2
set service nsm operation CHECK_REACHABILITY type icmp
set service nsm operation CHECK_REACHABILITY window 2
set service snmp engine-id 0x80000009010a0101c1
set service snmp trap-target 10.0.0.2 reachability-checking ADVISOR_REACHABLE
set service snmp trap-target 10.0.0.2 version v3 user USER2TEST
set service snmp user USER2TEST notify-traps advisor ADVISOR2TEST
set service snmp user USER2TEST notify-traps alarm ALARM2TEST
set system advisor ADVISOR2TEST test ALARM2TEST
set system advisor ADVISOR_REACHABLE test 'not ALARM_REACHABILITY'
set system alarm ALARM2TEST
set system alarm ALARM_REACHABILITY initial-state true
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Set the following configuration in DUT1 :

set interfaces ethernet eth0 address 10.0.0.2/24
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

No traps would be received if DUT1 is not reachable from DUT0, and this traps are
saved for later when DUT1 is reachable again.

Step 3: Modify the following configuration lines in DUT0 :

set interfaces ethernet eth0 disable

Step 4: Run command service snmp monitor traps user USER2TEST engine-id 0x80000009010a0101c1 at DUT1.

Step 5: Modify the following configuration lines in DUT0 :

set service snmp log-level debug

Step 6: Modify the following configuration lines in DUT0 :

set interfaces dummy dum0 disable

Now DUT1 is reachable from DUT0, so traps should be received, including the ones
that were saved before.

Step 7: Run command service snmp monitor traps user USER2TEST engine-id 0x80000009010a0101c1 at DUT1.

Step 8: Modify the following configuration lines in DUT0 :

delete interfaces ethernet eth0 disable

Step 9: Modify the following configuration lines in DUT0 :

delete interfaces dummy dum0 disable