IMC $SYSTEM auto recovers interface down alarms

[Edis_M]

Hello

We have strange problem with our IMC. When we get an link down alarm from trap (1.3.6.1.6.3.1.1.5.3), alarm gets recovered by $SYSTEM the same second it arrives.

We have configured recovery trap, but IMC doesn’t receive link UP during that time.

For example:

Name Link DOWN
Level Minor
OID 1.3.6.1.6.3.1.1.5.3
Alarm at 2020-02-18 15:49:20
Alarm Source XXX
Type Trap
Alarm Category Interface/Link Status Alarm
Source Interface YYY
Recovery Status $SYSTEM
Recovered at 2020-02-18 15:49:20
Acknowledgement Status Unacknowledged
Description The interface Ten-GigabitEthernet2/0/7 is DOWN.

We have configurated custom severity for some core devices. I’ve tried to remove this configuration, but nothing changed.

But we do get emails, as if alarm is not acknowledged.

Any idea how to fix this? Or this a known bug? Or something wrong with our configuration?

Our IMC version is 7.3 (E0703)

Thank you.

[jguse]

Hello,

The "Link Down" and "Link Up" alarms are already be pre-configured in iMC so that an Up event for the same interface recovers the respective Down event. Are you sure that no Link Up trap was received immediately after the Link Down (check Trap Management > Trap Browse list)? Automatically recovered alarms will always show $SYSTEM under the Recovery Status.

Here is what the default Trap Management > Trap Definition of the Link UP Trap looks like in terms of parameters and automatically restoring the Link DOWN traps:

Note that under the parameters, Interface Index should be set as the Key Parameter and Interface Index (configured like this by default). Otherwise you might see UP events from one interface recovering the DOWN status of a different interface.

Regarding receiving of e-mails - the moment any alarm is generated that matches the conditions in your mail notification rule, an e-mail will be sent. This is expected behavior, it will be sent regardless of whether the alarm gets automatically recovered a split-second later by receiving a Link UP event or not.