Alarms by Category
The table below lists the ExtremeCloud SD-WAN alarms by category and briefly describes the recovery procedure to use when an alarm condition occurs.
As a reminder, categories are the following:
| • | Underlay: physical connection between devices (LAN, WAN), VRRP or HA state change, appliance configuration |
| • | Overlay: connection between appliances or external gateways through IPsec tunnels |
| • | Services: services provided with the appliances such as application visibility, application control, WAN optimization, firewall |
| • | EQS: site EQS for applications and site connectivity |
| • | Resources: device local resources, i.e. hardware monitoring |
| • | Management: connection to components |
Underlay
|
Alarm |
Severity |
Troubleshooting |
|---|---|---|
|
Network interface down [interface name] |
Critical |
Check physical connections with the device. |
|
Network interface error [interface name] |
Critical |
Check the interface configuration parameters. |
|
No IP address [Transport Network Identifier name] |
Critical |
Define a correct IP address for the configured WAN interface. |
|
No default gateway [Transport Network Identifier name] |
Critical |
Define a default gateway for the configured WAN interface. |
|
VRRP state change |
Minor |
Status change alarm. |
|
HA state change |
Minor |
Status change alarm. |
|
Configuration failure |
Critical |
There is a configuration version mismatch between the SD-WAN application and the appliances. Contact ExtremeCloud SD-WAN Support. |
|
HA Configuration failure |
Critical |
Check the Alarms window to identify the issue. Check the Routing section of the Troubleshooting window (Appliances -> Advanced Troubleshooting) and verify the status of the HA appliances. Fix your HA configuration. |
|
HA Peer unreachable |
Critical |
The HA connection may be broken due to an appliance reboot, an unplugged cable, a power failure or an incident on another client device (for example, port down on a switch). Contact ExtremeCloud SD-WAN Support. |
Overlay
|
Alarm |
Severity |
Troubleshooting |
|---|---|---|
|
Disconnected from the overlay |
Major |
The specified site is fully isolated from the rest of the network (zero overlay tunnel). Check your appliance configuration and define at least one IPsec tunnel. |
|
Tunnel failure (appliance) |
Critical |
Refer to the Alarms window to identify the issue. Check the Tunnels/Connections supervision table you access from the main Dashboard and verify the state of the GRE/IPsec tunnels. Fix your appliance configuration. |
|
External tunnel failure (External Gateway) |
Critical |
Check that the definition of the External VPN Gateway and the configuration of tunnels match the configuration of the remote VPN gateway the appliance tries to connect to. |
|
Harmony Connect failure |
Critical |
A site in Check Point Harmony Connect is in failure. Contact ExtremeCloud SD-WAN Support. |
|
LAN BGP peering failure |
Major |
Check the Local Peer IP address in the LAN and the Site AS number. |
|
Connection to AWS failure |
Major/Critical |
May be raised when the connection is being created. If the issue persists, check that the corresponding AWS resources (Customer Gateway and VPN connection) still exist and contact ExtremeCloud SD-WAN Support. |
|
Connection to Azure failure |
Major/Critical |
May be raised when the connection is being created. If the issue persists, check that the corresponding Azure resources (local network gateway and vnet gateway connection or VPN sites and connections for Virtual WAN) still exist. Contact ExtremeCloud SD-WAN Support. |
|
Cloud connection failure |
Critical |
Check that the cloud gateway still exists and prerequisites are met. |
|
Invalid Credentials |
Critical |
Check the Cloud Access definition and contact your cloud account administrator. |
|
Cloud connection cannot be created |
Major/Critical |
Check the Cloud Access definition and contact your cloud account administrator. |
|
Cloud connection cannot be modified |
Major/Critical |
Check that the cloud gateway still exists and prerequisites are met. |
|
Cloud connection cannot be deleted |
Major/Critical |
Check that the cloud gateway still exists and prerequisites are met. |
|
IS-IS adjacency lost |
Critical |
May be raised when no IS-IS adjacency is detected by the LLDP TLV 127 subtype 7 received from the SD-WAN appliances. Check the IS-IS adjacency state on the neighbor switch and contact ExtremeCloud SD-WAN Support. |
|
LLDP neighbor disappears |
Critical |
May be raised when a LLDP neighbor disappears (detected by the absence of LLDP frames received from an SD-WAN appliance). Check the LLDP tx status on the neighbor switch and contact ExtremeCloud SD-WAN Support. |
Services
|
Alarm |
Severity |
Troubleshooting |
|---|---|---|
|
Visibility down |
Major |
Contact ExtremeCloud SD-WAN Support. |
|
Control down |
Major |
Contact ExtremeCloud SD-WAN Support. |
|
WAN Optimization down |
Major |
Contact ExtremeCloud SD-WAN Support. |
|
Synchronization lost |
Major |
Contact ExtremeCloud SD-WAN Support. |
|
Too many DTI sessions |
Major |
The number of DTI connections exceeds 95% of the maximum threshold of authorized connections. The alarm is cleared when this value decreases. |
|
Connection to the SYSLOG server is lost |
Major |
Check network connectivity between the SYSLOG server and the appliance. |
EQS
|
Alarm |
Severity |
Troubleshooting |
|---|---|---|
|
Site EQS for Top Applications dropped below 5 |
Major |
The alarm is cleared when this value increases. |
|
Site EQS for High Applications dropped below 5 |
Major |
The alarm is cleared when this value increases. |
|
End-to-end connectivity lost |
Major |
Check end-to-end connectivity between Site A and Site B for the specified WAN Service (broken NAP). |
Resources
|
Alarm |
Severity |
Troubleshooting |
|---|---|---|
|
Disk is almost full (<5% left) on the volume [volume name] |
Major |
For hardware resource alarms, contact ExtremeCloud SD-WAN Support. |
|
Disk failure |
Major |
|
|
Reboot |
Minor |
|
|
WAN out of resource |
Major |
Throughput or the number of flows exceeds the capacity of the appliance, or packet loss occurs on Ethernet interfaces. Contact Extreme Networks Support. They will determine whether a more powerful appliance needs to be installed. |
Management
|
Alarm |
Severity |
Troubleshooting |
|---|---|---|
|
Disconnected from Orchestrator |
Critical |
One or several SD-WAN platform components are disconnected (either never connected or not recently connected) from the Orchestrator. Contact ExtremeCloud SD-WAN Support. |
|
Connectivity with Orchestrator impaired |
Major |
One or several SD-WAN platform components are disconnected (either never connected or not recently connected) from ZTP (Zero Touch Provisioning server). Contact ExtremeCloud SD-WAN Support. |