Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 8

Advanced Alerting Router Interfaces

So I'm looking to create a trigger action for our remote office edge devices. We are wanting to alert anytime an external interface goes down for multiple remote sites. I'm wondering what would be the best way of going about this?

Here is what I have so far...

Screen Shot 2012-11-13 at 12.51.19 PM.png

Obviously serial interface could mean any connection that is considered serial. How do I lock it down to specific WIC cards?



0 Kudos
11 Replies
Level 18

We did this by adding a custom interface property. In various installations that can be as simple as a Yes/No field called "alertifdown". Then your alert trigger would add another simple condition if "alertifdown" is equal to "yes".

We also added the exact opposite for our cellular backup circuits (alertifup). That way we get a notification if the cell circuit comes up (ie: we start getting charged by the carrier per minute).

Taking that a step further, we also have an "InterfaceCategory" custom field that is either WAN, UPLINK, VOICE or OTHER. So we can have some interfaces (serial or otherwise) alert and go to the voice team, other alerts go to the network team, etc.

For what it's worth.

Leon Adato | Head Geek
"Measure what is measurable,
and make measurable what is not so." - Gallileo

Thank you adatole this is exactly the explanation I needed. I have mimicked your alerting procedure and it is presenting the test data I need.

0 Kudos
Level 12

I believe I have accomplished this in the past with a client.  You may want to look in the DB, and find something that is common between the serial interfaces and use that as a trigger item.

Here is an example that may work.


Zak Kahl


That's somewhat what I'm doing right now. I have it set as node status is down> Interface name starts with Serial 0/1/0 and this triggers an alert after 2 minutes. I was hoping to get more general but it seems like the granular route is the best way.

Thanks everyone for the help!

0 Kudos

This might be an obvious answer but why don't you use the built in "Alert me when an interface goes down"?

I use it in conjunction with the "Alert me when a node goes down" and I get email if an interface or node goes down. You could add in a group variable if you want to only have these alerts for certain devices. And the nodes/interfaces are set to poll every 2 mins for status.

0 Kudos

We are currently using this out of the box alert, but it does not get as specific as our management team would like. We are an internet database company so statistics are key in every aspect of our days. So, incidents such as node down need more automated details.

0 Kudos

What automated details are you wanting? From your alert, all I see is you getting an email when a serial port goes down. What extra details are you getting over the built in "Alert me when an interface goes down"? Or are you adding in extra information into the email part?

This may or may not help but with my interface down alert email I also add in the interface description field so from it I can see what the interface does.

0 Kudos

what about to create a special group for your remote sites and trigger an alert when group status change? You can create dynamic rule for your group if needed based on interface/node IP or custom property - especially if you try 10.4 RC with web based custom property editor.



Yes, creating a custom property would resolve the issue, but maintaining this would not be feasible. I have not tried RC 10.4 is it stable or are there many issues? I would like to jump to 10.4 since it has better support for F5 units.

0 Kudos
Level 9

I would just create a custom property named 'type' or something along those lines then in the description put 'WIC'.  Then when you come to your advanced alert you could put in a condition that said when custom property type = WIC

0 Kudos

That sounds like a lot of work if you have lot's of remote/branch offices.

0 Kudos