Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Node DOWN, but interfaces are UP - RESOLVED

FormerMember

Can someone explain to me how this is possible?... or is it a bug?

Thx!

Find more posts tagged with

Accepted answers

All comments

aLTeReGo

I believe node up/down status is based upon ICMP "ping" tests. Interfaces status is based on SNMP queries. It sounds like you have a device that is responding to SNMP but is not responding to ICMP. Is this device a firewall, or is it behind a firewall/router that does not allow ping echo request/reply?

FormerMember

The firewalls are open for ICMP, but it looks like there's a routing issue somewhere with the one particular remote box. I'll have to investigate further, but for now this looks like someone may have had a Layer 8 issue when they set this up.

I'll update when I uncover the problem.

FormerMember

Busy, bizzare, bizzaro. Issue resolved.

It was the only switch we couldn't get ping replies from (thus the Node Down status), although we could ping the Orion box from the switch itself via Telnet.

As a last resort we changed the IP address on the switch... and the pings came back 100%. We changed it back to the original IP address... and again, replies at 100%. WTF?

Anyone ever run into this? We're still scratching our heads, but at least we got rid of the errant alert.

aLTeReGo

Sounds like poisoned ARP cache on your router or switch. It could also be sticky ARP. Anyway I'm glad you got your issue resolved.

quote:Originally posted by nwood

Busy, bizzare, bizzaro. Issue resolved.

It was the only switch we couldn't get ping replies from (thus the Node Down status), although we could ping the Orion box from the switch itself via Telnet.

As a last resort we changed the IP address on the switch... and the pings came back 100%. We changed it back to the original IP address... and again, replies at 100%. WTF?

Anyone ever run into this? We're still scratching our heads, but at least we got rid of the errant alert.

FormerMember

That's what we thought, too... and had already tried clearing the arp tables on all boxes involved. Who knows.

codyb

How was this resolved?