AAA Thresholds

AAA Thresholds
 
 
Threshold monitoring can be enabled for the AAA-related values described in the following table.
 
Value
Description
To configure, go to section:
Archive size
Enables the generation of alerts or alarms based on the number of AAA (RADIUS and/or GTPP) accounting messages archived during the polling interval.
AAA Accounting Message Archive Size Thresholds
Archive Queue size
Enables the generation of alerts or alarms per Session Manager instance based on the queue size for AAA (RADIUS and/or GTPP) accounting messages being archived during the polling interval.
AAA Accounting Message Archive Queue Size Thresholds
Accounting Failures
Enables the generation of alerts or alarms based on the number of failed AAA accounting requests that occur during the polling interval.
AAA Accounting Failure Thresholds
Accounting Failure Rate
Enables the generation of alerts or alarms based on the percentage of AAA accounting requests that failed during the polling interval.
AAA Accounting Failure Rate Thresholds
Authentication Failures
Enables the generation of alerts or alarms based on the number of failed AAA authentication requests that occur during the polling interval.
AAA Authentication Failure Thresholds
Authentication Failure Rate
Enables the generation of alerts or alarms based on the percentage of AAA authentication requests that failed during the polling interval.
AAA Authentication Failure Rate Thresholds
Retry Rate
Enables the generation of alerts or alarms based on the percentage of AAA requests (both accounting and authentication) that were re-tried during the polling interval.
AAA Request Message Retry Rate Thresholds
AAA Manager Request Queue Usage
Enables the generation of alarms or alerts when the AAA Manager request queue usage reaches a specified percentage level.
AAA Manager Request Queue Threshold
‌
 
Saving Your Configuration
When you configure thresholds they are not permanent unless you save the changes. When you have completed configuring thresholds, save your configuration as described in the Verifying and Saving Your Configuration chapter.
 
AAA Accounting Message Archive Size Thresholds
In the event that the system cannot communicate with configured AAA accounting servers (RADIUS or CGFs), either due to the server being busy or loss of network connectivity, the system buffers, or archives, the accounting messages.
Accounting message archive size thresholds generate alerts or alarms based on the number of AAA accounting messages buffered in the archive during the specified polling interval. Accounting requests are counted for all AAA accounting servers that the system is configured to communicate with.
Alerts or alarms are triggered for accounting message archive size threshold based on the following rules:
•
Enter condition: Actual number of archived messages > or = High Threshold
•
Clear condition: Actual number of archived messages < Low Threshold
If a trigger condition occurs within the polling interval, the alert or alarm will not be generated until the end of the polling interval.
 
Configuring AAA Accounting Message Archive Size Threshold
Use the following example to configure the accounting message archive size threshold:
configure
   threshold aaa-acct-archive-size <high_thresh> [ clear <low_thresh> ]
   threshold poll aaa-acct-archive-size interval <time>
   threshold monitoring aaa-acct-archive-size
   end
 
AAA Accounting Message Archive Queue Size Thresholds
The Session Manager can buffer around 26400 CDRs per Session Manager instance in ASR5K. Once the above limit is breached the oldest CDRs will be purged to make room for the new CDRs. Since purging can happen as soon as the Session Manager queue size reaches the maximum allowed limit, there is a need for the alarms to be generated during this scenario.
Accounting message archive queue size thresholds generate alerts or alarms per Session Manager instance based on the queue percentage of accounting messages archived in the buffer. The alarm will typically be generated when the message archival begins, and as and when the buffer is filled up to say, 50%, 70% and 90% during the specified polling interval.
Important: AcctArchiveStarted trap will be generated if the queue size exceeds 15% of the maximum number of session manager items per instance. The queue size is indicative of the maximum of ACS manager queue size and session manager queue size.
Alerts or alarms are triggered for accounting message archive queue size thresholds based on the following rules:
•
Enter condition: Actual queue percentage of archived messages > or = High Threshold
•
Clear condition: Actual queue percentage of archived messages < Low Threshold
If a trigger condition occurs within the polling interval, the alert or alarm will not be generated until the end of the polling interval.
 
Configuring AAA Accounting Message Archive Queue Size Threshold
Use the following example to configure the accounting message archive queue size threshold:
configure
   threshold aaa-acct-archive-queue-size1 <high_thresh> [ clear <low_thresh> ]
   threshold aaa-acct-archive-queue-size2 <high_thresh> [ clear <low_thresh> ]
   threshold aaa-acct-archive-queue-size3 <high_thresh> [ clear <low_thresh> ]
   threshold monitoring aaa-acct-archive-queue
   threshold poll aaa-acct-archive-queue-size1 interval <time>
   threshold poll aaa-acct-archive-queue-size2 interval <time>
   threshold poll aaa-acct-archive-queue-size3 interval <time>
   end
 
AAA Accounting Failure Thresholds
Accounting failure thresholds generate alerts or alarms based on the number of failed AAA accounting message requests that occur during the specified polling interval. Accounting requests are counted for all AAA accounting servers that the system is configured to communicate with.
Alerts or alarms are triggered for accounting failures based on the following rules:
•
Enter condition: Actual number of failures > or = High Threshold
•
Clear condition: Actual number of failures < Low Threshold
If a trigger condition occurs within the polling interval, the alert or alarm will not be generated until the end of the polling interval.
 
Configuring AAA Accounting Failure Threshold
Use the following example to configure AAA accounting failure threshold:
configure
   threshold aaa-acct-failure <high_thresh> [ clear <low_thresh> ]
   threshold poll aaa-acct-failure interval <time>
   threshold monitoring aaa-acct-failure
   end
 
AAA Accounting Failure Rate Thresholds
Accounting failure rate thresholds generate alerts or alarms based on the percentage of AAA accounting message requests that failed during the specified polling interval. Accounting requests are counted for all AAA accounting servers that the system is configured to communicate with.
Alerts or alarms are triggered for accounting failure rates based on the following rules:
•
Enter condition: Actual number of failures > or = High Threshold
•
Clear condition: Actual number of failures < Low Threshold
If a trigger condition occurs within the polling interval, the alert or alarm will not be generated until the end of the polling interval.
 
Configuring AAA Accounting Failure Rate Threshold
Use the following example to configure AAA accounting failure rate threshold:
configure
   threshold aaa-acct-failure-rate <high_thresh>[ clear <low_thresh> ]
   threshold poll aaa-acct-failure-rate interval <time>
   threshold monitoring aaa-acct-failure
   end
 
AAA Authentication Failure Thresholds
Authentication failure thresholds generate alerts or alarms based on the number of failed AAA authentication message requests that occur during the specified polling interval. Authentication requests are counted for all AAA authentication servers that the system is configured to communicate with.
Alerts or alarms are triggered for authentication failures based on the following rules:
•
Enter condition: Actual number of failures > or = High Threshold
•
Clear condition: Actual number of failures < Low Threshold
If a trigger condition occurs within the polling interval, the alert or alarm will not be generated until the end of the polling interval.
 
Configuring AAA Authentication Failure Threshold
Use the following example to configure AAA authentication failure threshold:
configure
   threshold aaa-auth-failure <high_thresh>[ clear <low_thresh> ]
   threshold poll aaa-auth-failure interval <time>
   threshold monitoring aaa-auth-failure
   end
 
AAA Authentication Failure Rate Thresholds
Authentication failure rate thresholds generate alerts or alarms based on the percentage of AAA authentication message requests that failed during the specified polling interval. Authentication requests are counted for all AAA authentication servers that the system is configured to communicate with.
Alerts or alarms are triggered for authentication failure rates based on the following rules:
•
Enter condition: Actual failure percentage > or = High Threshold
•
Clear condition: Actual failure percentage < Low Threshold
If a trigger condition occurs within the polling interval, the alert or alarm will not be generated until the end of the polling interval.
 
Configuring AAA Authentication Failure Rate Threshold
Use the following example for configuring AAA authentication failure rate threshold:
configure
   threshold aaa-auth-failure-rate <high_thresh>[ clear <low_thresh> ]
   threshold poll aaa-auth-failure-rate interval <time>
   threshold monitoring aaa-auth-failure
   end
 
AAA Request Message Retry Rate Thresholds
AAA request message retry rate thresholds generate alerts or alarms based on the percentage of request messages (both authentication and accounting) that were retried during the specified polling interval. The percentage is based on a message count taken for all AAA authentication and accounting servers that the system is configured to communicate with.
Alerts or alarms are triggered for request message retries based on the following rules:
•
Enter condition: Actual failure percentage > or = High Threshold
•
Clear condition: Actual failure percentage < Low Threshold
If a trigger condition occurs within the polling interval, the alert or alarm will not be generated until the end of the polling interval.
 
Configuring AAA Authentication Failure Rate Threshold
Use the following example for configuring AAA request message retriy rate threshold:
configure
   threshold aaa-retry-rate <high_thresh>[ clear <low_thresh> ]
   threshold poll aaa-retry-rate interval <time>
   threshold monitoring aaa-retry-rate
   end
 
AAA Manager Request Queue Threshold
The AAA Manager request queue threshold generates an alert or alarm based on the usage percentage of the AAA Manager request queue during the specified polling interval. The percentage is based on the total number of pending requests for the AAA Manager and the total size allowed for the queue. This is polled for each AAA Manager process.
Alerts or alarms are triggered for the AAA Manager request queue threshold based on the following rules:
•
Enter condition: Actual AAA Manager request queue percentage used > or = High Threshold
•
Clear condition: Actual AAA Manager request queue percentage used < Low Threshold
If a trigger condition occurs within the polling interval, the alert or alarm is not generated until the end of the polling interval.
 
Configuring AAA Manager Request Queue Threshold
Use the following example for configuring AAA Manager request queue threshold.
configure
   threshold aaamgr-request-queue <high_thresh>[ clear <low_thresh> ]
   threshold poll aaamgr-request-queue interval <time>
   threshold monitoring aaamgr-request-queue
   end
 
 
Cisco Systems Inc.
Tel: 408-526-4000
Fax: 408-527-0883