> AAA Thresholds
> Threshold monitoring can be enabled for the AAA-related values described in the following table.

> Value | Description | To configure, go to section:
> Archive size | Enables the generation of alerts or alarms based on the number of AAA (RADIUS and/or GTPP) accounting messages archived during the polling interval. | AAA Accounting Message Archive Size Thresholds
> Archive Queue size | Enables the generation of alerts or alarms per Session Manager instance based on the queue size for AAA (RADIUS and/or GTPP) accounting messages being archived during the polling interval. | AAA Accounting Message Archive Queue Size Thresholds
> Accounting Failures | Enables the generation of alerts or alarms based on the number of failed AAA accounting requests that occur during the polling interval. | AAA Accounting Failure Thresholds
> Accounting Failure Rate | Enables the generation of alerts or alarms based on the percentage of AAA accounting requests that failed during the polling interval. | AAA Accounting Failure Rate Thresholds
> Authentication Failures | Enables the generation of alerts or alarms based on the number of failed AAA authentication requests that occur during the polling interval. | AAA Authentication Failure Thresholds
> Authentication Failure Rate | Enables the generation of alerts or alarms based on the percentage of AAA authentication requests that failed during the polling interval. | AAA Authentication Failure Rate Thresholds
> Retry Rate | Enables the generation of alerts or alarms based on the percentage of AAA requests (both accounting and authentication) that were re-tried during the polling interval. | AAA Request Message Retry Rate Thresholds
> AAA Manager Request Queue Usage | Enables the generation of alarms or alerts when the AAA Manager request queue usage reaches a specified percentage level. | AAA Manager Request Queue Threshold

> ‌
> Saving Your Configuration
> When you configure thresholds they are not permanent unless you save the changes. When you have completed configuring thresholds, save your configuration to flash memory, an external memory device, and/or a network location using the Exec mode command save configuration. For additional information on how to verify and save configuration files, refer to the System Administration Guide and the Command Line Interface Reference.
> AAA Accounting Message Archive Size Thresholds
> In the event that the system cannot communicate with configured AAA accounting servers (RADIUS or CGFs), either due to the server being busy or loss of network connectivity, the system buffers, or archives, the accounting messages.
> Accounting message archive size thresholds generate alerts or alarms based on the number of AAA accounting messages buffered in the archive during the specified polling interval. Accounting requests are counted for all AAA accounting servers that the system is configured to communicate with.
> Alerts or alarms are triggered for accounting message archive size threshold based on the following rules:

> • | Enter condition: Actual number of archived messages > or = High Threshold

> • | Clear condition: Actual number of archived messages < Low Threshold

> If a trigger condition occurs within the polling interval, the alert or alarm will not be generated until the end of the polling interval.
> Configuring AAA Accounting Message Archive Size Threshold
> Use the following example to configure the accounting message archive size threshold:
> configure
> threshold aaa-acct-archive-size <high_thresh> [ clear <low_thresh> ]
> threshold poll aaa-acct-archive-size interval <time>
> threshold monitoring aaa-acct-archive-size
> end
> AAA Accounting Message Archive Queue Size Thresholds
> The Session Manager can buffer around 26400 CDRs per Session Manager instance in ASR5K. Once the above limit is breached the oldest CDRs will be purged to make room for the new CDRs. Since purging can happen as soon as the Session Manager queue size reaches the maximum allowed limit, there is a need for the alarms to be generated during this scenario.
> Accounting message archive queue size thresholds generate alerts or alarms per Session Manager instance based on the queue percentage of accounting messages archived in the buffer. The alarm will typically be generated when the message archival begins, and as and when the buffer is filled up to say, 25%, 50% and 90% during the specified polling interval.
> Important: AcctArchiveStarted trap will be generated if the queue size exceeds 15% of the maximum number of session manager items per instance. The queue size is indicative of the maximum of ACS manager queue size and session manager queue size.
> Alerts or alarms are triggered for accounting message archive queue size thresholds based on the following rules:

> • | Enter condition: Actual queue percentage of archived messages > or = High Threshold

> • | Clear condition: Actual queue percentage of archived messages < Low Threshold

> If a trigger condition occurs within the polling interval, the alert or alarm will not be generated until the end of the polling interval.
> Configuring AAA Accounting Message Archive Queue Size Threshold
> Use the following example to configure the accounting message archive queue size threshold:
> configure
> threshold aaa-acct-archive-queue-size1 <high_thresh> [ clear <low_thresh> ]
> threshold aaa-acct-archive-queue-size2 <high_thresh> [ clear <low_thresh> ]
> threshold aaa-acct-archive-queue-size3 <high_thresh> [ clear <low_thresh> ]
> threshold monitoring aaa-acct-archive-queue
> threshold poll aaa-acct-archive-queue-size1 interval <time>
> threshold poll aaa-acct-archive-queue-size2 interval <time>
> threshold poll aaa-acct-archive-queue-size3 interval <time>
> end
> AAA Accounting Failure Thresholds
> Accounting failure thresholds generate alerts or alarms based on the number of failed AAA accounting message requests that occur during the specified polling interval. Accounting requests are counted for all AAA accounting servers that the system is configured to communicate with.
> Alerts or alarms are triggered for accounting failures based on the following rules:

> • | Enter condition: Actual number of failures > or = High Threshold

> • | Clear condition: Actual number of failures < Low Threshold

> If a trigger condition occurs within the polling interval, the alert or alarm will not be generated until the end of the polling interval.
> Configuring AAA Accounting Failure Threshold
> Use the following example to configure AAA accounting failure threshold:
> configure
> threshold aaa-acct-failure <high_thresh> [ clear <low_thresh> ]
> threshold poll aaa-acct-failure interval <time>
> threshold monitoring aaa-acct-failure
> end
> AAA Accounting Failure Rate Thresholds
> Accounting failure rate thresholds generate alerts or alarms based on the percentage of AAA accounting message requests that failed during the specified polling interval. Accounting requests are counted for all AAA accounting servers that the system is configured to communicate with.
> Alerts or alarms are triggered for accounting failure rates based on the following rules:

> • | Enter condition: Actual number of failures > or = High Threshold

> • | Clear condition: Actual number of failures < Low Threshold

> If a trigger condition occurs within the polling interval, the alert or alarm will not be generated until the end of the polling interval.
> Configuring AAA Accounting Failure Rate Threshold
> Use the following example to configure AAA accounting failure rate threshold:
> configure
> threshold aaa-acct-failure-rate <high_thresh>[ clear <low_thresh> ]
> threshold poll aaa-acct-failure-rate interval <time>
> threshold monitoring aaa-acct-failure
> end
> AAA Authentication Failure Thresholds
> Authentication failure thresholds generate alerts or alarms based on the number of failed AAA authentication message requests that occur during the specified polling interval. Authentication requests are counted for all AAA authentication servers that the system is configured to communicate with.
> Alerts or alarms are triggered for authentication failures based on the following rules:

> • | Enter condition: Actual number of failures > or = High Threshold

> • | Clear condition: Actual number of failures < Low Threshold

> If a trigger condition occurs within the polling interval, the alert or alarm will not be generated until the end of the polling interval.
> Configuring AAA Authentication Failure Threshold
> Use the following example to configure AAA authentication failure threshold:
> configure
> threshold aaa-auth-failure <high_thresh>[ clear <low_thresh> ]
> threshold poll aaa-auth-failure interval <time>
> threshold monitoring aaa-auth-failure
> end
> AAA Authentication Failure Rate Thresholds
> Authentication failure rate thresholds generate alerts or alarms based on the percentage of AAA authentication message requests that failed during the specified polling interval. Authentication requests are counted for all AAA authentication servers that the system is configured to communicate with.
> Alerts or alarms are triggered for authentication failure rates based on the following rules:

> • | Enter condition: Actual failure percentage > or = High Threshold

> • | Clear condition: Actual failure percentage < Low Threshold

> If a trigger condition occurs within the polling interval, the alert or alarm will not be generated until the end of the polling interval.
> Configuring AAA Authentication Failure Rate Threshold
> Use the following example for configuring AAA authentication failure rate threshold:
> configure
> threshold aaa-auth-failure-rate <high_thresh>[ clear <low_thresh> ]
> threshold poll aaa-auth-failure-rate interval <time>
> threshold monitoring aaa-auth-failure
> end
> AAA Request Message Retry Rate Thresholds
> AAA request message retry rate thresholds generate alerts or alarms based on the percentage of request messages (both authentication and accounting) that were retried during the specified polling interval. The percentage is based on a message count taken for all AAA authentication and accounting servers that the system is configured to communicate with.
> Alerts or alarms are triggered for request message retries based on the following rules:

> • | Enter condition: Actual failure percentage > or = High Threshold

> • | Clear condition: Actual failure percentage < Low Threshold

> If a trigger condition occurs within the polling interval, the alert or alarm will not be generated until the end of the polling interval.
> Configuring AAA Authentication Failure Rate Threshold
> Use the following example for configuring AAA request message retriy rate threshold:
> configure
> threshold aaa-retry-rate <high_thresh>[ clear <low_thresh> ]
> threshold poll aaa-retry-rate interval <time>
> threshold monitoring aaa-retry-rate
> end
> AAA Manager Request Queue Threshold
> The AAA Manager request queue threshold generates an alert or alarm based on the usage percentage of the AAA Manager request queue during the specified polling interval. The percentage is based on the total number of pending requests for the AAA Manager and the total size allowed for the queue. This is polled for each AAA Manager process.
> Alerts or alarms are triggered for the AAA Manager request queue threshold based on the following rules:

> • | Enter condition: Actual AAA Manager request queue percentage used > or = High Threshold

> • | Clear condition: Actual AAA Manager request queue percentage used < Low Threshold

> If a trigger condition occurs within the polling interval, the alert or alarm is not generated until the end of the polling interval.
> Configuring AAA Manager Request Queue Threshold
> Use the following example for configuring AAA Manager request queue threshold.
> configure
> threshold aaamgr-request-queue <high_thresh>[ clear <low_thresh> ]
> threshold poll aaamgr-request-queue interval <time>
> threshold monitoring aaamgr-request-queue
> end

Cisco Systems Inc.
Tel: 408-526-4000
Fax: 408-527-0883