Performance Monitoring and Alarms
152
Document #: LTRT-32111
Mediant 3000 with TP-6310
3.4.5
IDS Policy Alarm
IDS Policy Alarm
Description
The alarm is raised whenever a threshold is crossed in the IDS
system.
The alarm is associated with the MO pair IDSMatch & IDSRule.
SNMP Alarm
acIDSPolicyAlarm
SNMP OID
1.3.6.1.4.1.5003.9.10.1.21.2.0.99
Default Severity
Alarm Type
Other
Probable Cause
Alarm Text
Policy NUM (NAME) minor/major/critical threshold (NUM) of REASON
cross in global/ip/ip+port scope (triggered by IP)
Status Changes
Corrective Action
1.
Identify additional traps (acIDSThresholdCrossNotification) that
were sent alongside this Intrusion Detection System (IDS) alarm.
2.
Locate the remote hosts (IP addresses) that are specified in the
traps.
3.
Examine the behavior of those hosts (with regard to the reason
specified in the alarm), and attempt to fix incorrect operation.
4.
If necessary, change the configured thresholds in the IDS Rule
table under the IDS Policy table.
