Gateway Alerts
Aruba Central allows network administrators and users with admin permissions to configure alerts.
To enable or disable all the gateway alerts on a single click, you can use the Enable All or Disable All button respectively.
Following are the SD-WAN Wide Area Network. WAN is a telecommunications network or computer network that extends over a large geographical distance. and Gateway appliance-related alerts that you can configure:
- —Generates an alert when the WAN policy does not meet the compliance criteria.
- —Generates an alert when a new Branch Gateway is connected.
- —Generates an alert when a Branch Gateway is disconnected. When a gateway disconnects because of license expiry, the alert description displays 'Reason: Device unlicensed'.
- —Generates an alert when a blocked session is detected.
- —Generates an alert when the Branch Gateway CPU Central Processing Unit. A CPU is an electronic circuitry in a computer for processing instructions. utilization exceeds the threshold value. You can add additional rule(s) for this alert.
- —Generates an alert when the Branch Gateway memory utilization exceeds the threshold value. You can add additional rule(s) for this alert.
- —Generates an alert when an OSPF Open Shortest Path First. OSPF is a link-state routing protocol for IP networks. It uses a link-state routing algorithm and falls into the group of interior routing protocols that operates within a single Autonomous System (AS). session fails.
- —Generates an alert when a BGP Border Gateway Protocol. BGP is a routing protocol for exchanging data and information between different host gateways or autonomous systems on the Internet. session fails.
- —Generates an alert when a Gateway with Foundation-Base Capacity subscription exceeds the client capacity threshold.
- —Generates an alert when the routing table size exceeds the 90% of the capacity. This alert is auto-acknowledged when the Routing table size goes below 85% of the capacity.
- —Generates an alert when the number of routes received from a BGP neighbor exceeds the configured limit. This alert is auto-acknowledged when the number of routes from the BGP neighbor goes below the configured limit.
- —Generates an alert when the control connection between the Branch Gateway and the Overlay Route Orchestration (ORO) is down. This alert is auto-acknowledged when the control connection is re-established.
- —Generates an alert when the cellular data usage exceeds the threshold value. You must set the and in the configuration page for this alert to generate.
Note: This alert configuration is only applicable for 9004-LTE Long Term Evolution. LTE is a 4G wireless communication standard that provides high-speed wireless communication for mobile phones and data terminals. See 4G. gateways that have an integrated LTE modem.
- —Generates an alert when WAN health check fails.
- —Generates an alert when the WAN VPN Virtual Private Network. VPN enables secure access to a corporate network when located remotely. It enables a computer to send and receive data across shared or public networks as if it were directly connected to the private network, while benefiting from the functionality, security, and management policies of the private network. This is done by establishing a virtual point-to-point connection through the use of dedicated connections, encryption, or a combination of the two. peer is unreachable. This alert will not be raised for down tunnels associated with a disconnected or standby uplink.
- —Generates an alert when the WAN uplink status changes.
- —Generates an alert when the WAN uplink automatic negotiation status changes.
- —Generates an alert when the percentage of WAN uplink input errors exceed the threshold value. In the field, enter the interface name. You can add additional rule(s) for this alert.
- —Generates an alert when the percentage WAN uplink output errors exceed the threshold value. In the field, enter the interface name. You can add additional rule(s) for this alert.
- —Generates an alert when the percentage WAN uplink PHY errors exceed the threshold value. In the field, enter the interface name. You can add additional rule(s) for this alert.
- —Generates an alert when the percentage DHCP Dynamic Host Configuration Protocol. A network protocol that enables a server to automatically assign an IP address to an IP-enabled device from a defined range of numbers configured for a given network. pool consumption exceeds the threshold value. In the field, enter the subnet Subnet is the logical division of an IP network. address to filter the alert based on subnet.
- —Generates an alert when the IPsec Internet Protocol security. IPsec is a protocol suite for secure IP communications that authenticates and encrypts each IP packet in a communication session. tunnel fails to establish.
- —Generates an alert when the IPsec SA Security Association. SA is the establishment of shared security attributes between two network entities to support secure communication. is down.
- —Generates an alert when all the IPsec SAs are down.
- —Generates an alert when the CFG-SET advertisement fails.
- —Generates an alert when the uplink state changes frequently. In the field, enter the interface name. You can add additional rule(s) for this alert.
- —Generates an alert when the tunnel state changes frequently. In the field, enter the interface name. You can add additional rule(s) for this alert.
- —Generates an alert when the uplink speed changes. In the field, enter the interface name. You can add additional rule(s) for this alert.
- —Generates an alert when gateways fail to enroll or re-enroll with the EST server. To view the gateway EST alert, you must enable EST Enrolment Failure alerts in gateway alert configuration page. EST enrollment and re-enrollment failure alerts automatically closes after a success event is received.
- —Generates an alert when an Aruba Virtual Gateway deployed as a Virtual Machine is down.
- —Generates an alert when one or more gateway(s) in a cluster have a mismatch in the VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN..
- —Generates an alert when a gateway joins the cluster.
- —Generates an alert when a gateway leaves the cluster.
- —Generates an alert when there is cluster leader change.
- —Generates an alert when the cluster client capacity exceeds the configured threshold.
- —Generates an alert when there is a firmware upgrade failure.
- —Generates an alert when the Gateway’s IDS Intrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network./IPS Intrusion Prevention System. The IPS monitors a network for malicious activities such as security threats or policy violations. The main function of an IPS is to identify suspicious activity, log the information, attempt to block the activity, and report it. Engine state is either crashed or stopped. A severity of indicates that the engine has crashed and indicates that the engine has stopped.
- —Generates an alert when the CPU utilization by IDS/IPS engine exceeds the threshold value and duration. You can add additional rule(s) for this alert.
- —Generates an alert when the memory utilization exceeds the threshold value and duration. You can add additional rule(s) for this alert.
- —Generates an alert every time when the number of packets dropped exceeds the configured threshold value.
-
Gateway Threat Count— Generates an alert when the number of threats exceeds the configured limit (Range - 50 to 500 threats) in the given duration. The gateway threat counts are aggregated at the device level.
-
Gateway Threat Count per Signature— Generates an alert when the number of threats associated with a specific signature exceeds the configured limit in the given duration. These alerts are aggregated for all the gateways at the customer level.
Currently, Aruba IDPS is supported only on 9004, 9012, and 9004-LTE Branch Gateways that have Security license entitled to them.
- Gateway Threat Count per User— Generates an alert when the number of threats associated with a specific user exceeds the configured limit in the given duration. These alerts are aggregated for all the gateways at the customer level.
You can configure the following alerts for gateways running ArubaOS 8.0.x:
- —Generates an alert when a gateway enters the emergency mode, where all the uplinks are down and the backup uplink is activated.
- —Generates an alert when all the tunnels from the gateway to the primary VPN controller go down including via backup uplink and establishes a tunnel with the secondary VPN controller.
You can configure and enable these alerts for gateways running other ArubaOS versions also. However, these alerts will not be generated for gateways on versions other than ArubaOS 8.0.x.
