Legal Disclaimer: The resource assets in this website may include abbreviated and/or legacy terminology for HPE Aruba Networking products. See www.arubanetworks.com for current and complete HPE Aruba Networking product lines and names.
HPE Aruba Networking Central allows network administrators and users with admin permissions to configure alerts.
The following are the SD-WAN Software-Defined Wide Area Network. SD-WAN is an application for applying SDN technology to WAN connections that connect enterprise networks across disparate geographical locations. and Gateway appliance-related alerts that you can configure:
To enable or disable all the gateway alerts on a single click, you can use the Enable All or Disable All button respectively.
- —Generates an alert when the WAN Wide Area Network. WAN is a telecommunications network or computer network that extends over a large geographical distance. policy does not meet the compliance criteria.
- —Generates an alert when a new Branch Gateway is connected.
- —Generates an alert when a Branch Gateway is disconnected. When a gateway disconnects because of license expiry, the alert description displays 'Reason: Device unlicensed'.
- —Generates an alert when a blocked session is detected.
- —Generates an alert when the Branch Gateway CPU Central Processing Unit. A CPU is an electronic circuitry in a computer for processing instructions. utilization exceeds the threshold value. You can add additional rule(s) for this alert.
- —Generates an alert when the Branch Gateway memory utilization exceeds the threshold value. You can add additional rule(s) for this alert.
- —Generates an alert when an OSPF Open Shortest Path First. OSPF is a link-state routing protocol for IP networks. It uses a link-state routing algorithm and falls into the group of interior routing protocols that operates within a single Autonomous System (AS). session fails.
- —Generates an alert when a BGP Border Gateway Protocol. BGP is a routing protocol for exchanging data and information between different host gateways or autonomous systems on the Internet. session fails.
- —Generates an alert when a Gateway with Foundation-Base Capacity subscription exceeds the client capacity threshold.
- —Generates an alert when the routing table size exceeds the 90% of the capacity. This alert is auto-acknowledged when the Routing table size goes below 85% of the capacity.
- —Generates an alert when the number of routes received from a BGP neighbor exceeds the configured limit. This alert is auto-acknowledged when the number of routes from the BGP neighbor goes below the configured limit.
- —Generates an alert when the control connection between the Branch Gateway and the Overlay Route Orchestration (ORO) is down. This alert is auto-acknowledged when the control connection is re-established.
- —Generates an alert when the cellular data usage exceeds the threshold value. You must set the and in the configuration page for this alert to generate.
- —Generates an alert when WAN health check fails.
- —Generates an alert when the WAN VPN Virtual Private Network. VPN enables secure access to a corporate network when located remotely. It enables a computer to send and receive data across shared or public networks as if it were directly connected to the private network, while benefiting from the functionality, security, and management policies of the private network. This is done by establishing a virtual point-to-point connection through the use of dedicated connections, encryption, or a combination of the two. peer is unreachable. This alert will not be raised for down tunnels associated with a disconnected or standby uplink.
- —Generates an alert when the WAN uplink status changes.
- —Generates an alert when the WAN uplink automatic negotiation status changes.
- —Generates an alert when the percentage of WAN uplink input errors exceed the threshold value. In the field, enter the interface name. You can add additional rule(s) for this alert.
- —Generates an alert when the percentage WAN uplink output errors exceed the threshold value. In the field, enter the interface name. You can add additional rule(s) for this alert.
- —Generates an alert when the percentage WAN uplink PHY errors exceed the threshold value. In the field, enter the interface name. You can add additional rule(s) for this alert.
- —Generates an alert when the percentage DHCP Dynamic Host Configuration Protocol. A network protocol that enables a server to automatically assign an IP address to an IP-enabled device from a defined range of numbers configured for a given network. pool consumption exceeds the threshold value. In the field, enter the subnet Subnet is the logical division of an IP network. address to filter the alert based on subnet.
- —Generates an alert when the IPsec Internet Protocol security. IPsec is a protocol suite for secure IP communications that authenticates and encrypts each IP packet in a communication session. tunnel fails to establish.
- —Generates an alert when the IPsec SA Security Association. SA is the establishment of shared security attributes between two network entities to support secure communication. is down.
- —Generates an alert when all the IPsec SAs are down.
- —Generates an alert when the CFG-SET advertisement fails.
- —Generates an alert when the uplink state changes frequently. In the field, enter the interface name. You can add additional rule(s) for this alert.
- —Generates an alert when the tunnel state changes frequently. In the field, enter the interface name. You can add additional rule(s) for this alert.
- —Generates an alert when the uplink speed changes. In the field, enter the interface name. You can add additional rule(s) for this alert.
- —Generates an alert when gateways fail to enroll or re-enroll with the EST server. To view the gateway EST alert, you must enable EST Enrolment Failure alerts in gateway alert configuration page. EST enrollment and re-enrollment failure alerts automatically closes after a success event is received.
- —Generates an alert when an HPE Aruba Networking Virtual Gateway deployed as a Virtual Machine is down.
- —Generates an alert when one or more gateway(s) in a cluster have a mismatch in the VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN..
- —Generates an alert when a gateway joins the cluster.
- —Generates an alert when a gateway leaves the cluster.
- —Generates an alert when there is cluster leader change.
- —Generates an alert when the cluster client capacity exceeds the configured threshold.
- —Generates an alert when there is a firmware upgrade failure.
- —Generates an alert when the Gateway’s IDS Intrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network./IPS Intrusion Prevention System. The IPS monitors a network for malicious activities such as security threats or policy violations. The main function of an IPS is to identify suspicious activity, log the information, attempt to block the activity, and report it. Engine state is either crashed or stopped. A severity of indicates that the engine has crashed and indicates that the engine has stopped.
- —Generates an alert when the CPU utilization by IDS/IPS engine exceeds the threshold value and duration. You can add additional rule(s) for this alert.
- —Generates an alert when the memory utilization exceeds the threshold value and duration. You can add additional rule(s) for this alert.
- —Generates an alert every time when the number of packets dropped exceeds the configured threshold value.
-
Gateway Threat Count— Generates an alert when the number of threats exceeds the configured limit (Range - 50 to 500 threats) in the given duration. The gateway threat counts are aggregated at the device level.
-
Gateway Threat Count per Signature— Generates an alert when the number of threats associated with a specific signature exceeds the configured limit in the given duration. These alerts are aggregated for all the gateways at the customer level.
Gateway IDS/IPS is supported only on gateways that have Security license entitled to them. For the list of IDPS Intrusion Detection and Prevention System (IDPS) monitors, detects, and prevents threats in the inbound and outbound traffic. Aruba IDPS provides an extra layer of protection that actively analyzes the network and takes actions on the traffic flows based on the defined rules. It inspects data packets, and if any threat is identified, acts real-time to prevent it.-supported gateways, see Preparing to add IDPS-Supported Gateways.
- Gateway Threat Count per User— Generates an alert when the number of threats associated with a specific user exceeds the configured limit in the given duration. These alerts are aggregated for all the gateways at the customer level.
You can configure the following alerts for gateways running AOS 8.0.x:
- —Generates an alert when a gateway enters the emergency mode, where all the uplinks are down and the backup uplink is activated.
- Gateway Device Flash Memory Usage Alert—Generates an alert when a gateway flash memory usage has exceeded 80% threshold.
- —Generates an alert when all the tunnels from the gateway to the primary VPN controller go down including via backup uplink and establishes a tunnel with the secondary VPN controller.
You can configure and enable these alerts for gateways running other AOS versions also. However, these alerts will not be generated for gateways on versions other than AOS 8.0.x.
