Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Node is showing as down(red) but its interface is up(green)

Hello sir

Thanks to all the members for their helpful responses for all my quries. I hope i will continue to get this. I am facing a very peculiar problem. I have added internet router 211.212.101.107 as "internet link" name in NPM and i am monitoring only one interface "FastEthernet0/1 xyz" of this router. Basically on this interface ISP line is terminated and description is given as XYZ. Now what i saw was that the Node( 211.212.101.107 ) as a whole is showing down (red) but when i clicked on this it shows the interface FastEthernet0/1 as up (green). If i am right then node as a whole down(red) means either the node is unreachable or all its interfaces are down. I am pasting below events from "events" of NPM for this particular node. I have done nothing except adding the node in NMS (as SNMP enabled). For past some days it was working fine but today i got this problem.

Events:

8/1/2010 2:06 PM    Added Internet Link FastEthernet0/1 xyz
8/1/2010 2:06 PM    Internet Link FastEthernet0/1 xyz Statistics Collection Interval changed from 9 to 7 Minutes
8/1/2010 2:06 PM    Added Internet Link
8/1/2010 2:06 PM    Internet Link Statistics Collection Interval changed from 10 to 8 Minutes
8/1/2010 2:06 PM    Node name was changed from 211.212.101.107 to Internet Link
8/1/2010 2:05 PM    Removed Internet Link FastEthernet0/1 xyz
8/1/2010 1:51 PM    Added Internet Link FastEthernet0/1 xyz
8/1/2010 1:51 PM    Internet Link FastEthernet0/1 xyz Statistics Collection Interval changed from 9 to 7 Minutes
8/1/2010 1:50 PM    Added Internet Link
8/1/2010 1:50 PM    Internet Link Statistics Collection Interval changed from 10 to 8 Minutes
8/1/2010 1:50 PM    Node name was changed from 211.212.101.107 to Internet Link
8/1/2010 1:49 PM    Removed Internet Link FastEthernet0/1 xyz
8/1/2010 1:34 PM    Internet Link is responding again. Response time is 30 milliseconds
8/1/2010 12:37 PM   Internet Link has stopped responding (Request Timed Out)

The above log says "Statistics Collection Interval changed, Node name was changed , Removed Internet Link FastEthernet0/1 xyz , Added Internet Link etc but i have not done any of these activities. I have just added the node with default configuration past few days back and it was ok for some days. Kindly help me out

Thanks

Ronit

Find more posts tagged with

Accepted answers

robertcbrowning

ICMP & SNMP are doing completely independant tests.
The ICMP poll will show whether or not the device is reachable, while the SNMP poll will show (for example) the status of interfaces. So it is quite possible for a device to be showing as red and down while still reporting the detail of its interfaces, disks and services. You will need to open the firewall ports for both ICMP & SNMP to get the responses that you are expecting.

All comments

zizi

Can you check Orion Events table for multiple "Removed" or "Added" messages about Nodes, Interfaces and Volumes occurring at the same time? Also check Debug.log for database connectivity issues. I remember a case, where all nodes were removed and re-added every morning, because of broken database connectivity.

Questionario

btw, when will this be fixed that orion re-adds all nodes,interfaces and volumes everytime a database connection is lost?

wbrown

Verify that ICMP is allowed to the firewall's interface.

A node may be manageable via SNMP, but will show down if ICMP is blocked. And if you're curious: per support, there is no means to disable ICMP polling while retaining SNMP polling.

wbrown

Correction: verify ICMP is allowed to the management address of the router, in this case your FastEthernet port.

Questionario

that depends on your firewall rules or ACLs.

but good point... never noticed that you cant SNMP a device if you disallow ping...

but usually if I want to monitor it with SNMP I also want to know if its up or down so I allow ICMP as well

wbrown

I'm not trying to say the poll depends on ping: you can still SNMP poll a device w/o ICMP, but the up/down status is dependent on ping.

ronit

Dear sir

Thanks for giving time to my problem. Kindly tell me Debug.log is for what purpose and where it is located. I search it using the windows search utility but unable to find it.

Regards

Ronit

ronit

Dear Sir

How to check for broken database connectivity issues in the log. Which log to examine and search for what terms in that log.

Regards

Ronit