vmwNsxMFirewallConfigUpdateFailed
VMWARE-NSX-MANAGER-MIB ·
.1.3.6.1.4.1.6876.90.1.2.3.0.6
Object
notification
Firewall rule Configuration between the NSX Manager and the host is not in sync. Contextual data provided with this event may indicate the cause of this failure. Verify that the host in question was properly prepared by NSX Manager. Collect error logs (vsfwd.log) when the host received firewall config. Force sync firewall config using ForceSync API/UI. See kb.vmware.com/kb/2125437 .
If the issue persists, please collect ESX and NSX Manager tech support bundle and open a SR with Vmware techsupport. See http://kb.vmware.com/kb/2074678 and
http://kb.vmware.com/kb/1010705
Context
- MIB
- VMWARE-NSX-MANAGER-MIB
- OID
.1.3.6.1.4.1.6876.90.1.2.3.0.6- Type
- notification
- Status
- current
- Parent
- vmwNsxMFirewallPrefix
- Siblings
- 58
Syntax
No syntax metadata recorded.
Values & Constraints
No enumerated values or constraints recorded.
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| vmwNsxMFltrCnfgUpdateFailed NSX Manager failed to enforce DFW. VMs on this host may not be protected by the DFW. Contextual data provided with this event may indicate the cause of this failure.
This could h… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.1 |
| vmwNsxMFlowMissed Flow missed.
Contextual data provided with this event may indicate the cause of this failure.
Collect error logs (vmkernel.log) when firewall configuration was applied to the vnic… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.10 |
| vmwNsxMSpoofGuardCnfgUpdateFailed Failed to receive, parse or Update the spoofguard configuration.
Contextual data provided with this event may indicate the cause of this failure.
Verify that the host in question … | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.11 |
| vmwNsxMSpoofGuardFailed Failed to apply spoofguard to the vnic.
Contextual data provided with this event may indicate the cause of this failure.
Verify that vsip kernel heaps have enough free memory.
Ple… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.12 |
| vmwNsxMSpoofGuardApplied Enabled spoofguard for vnic.
Action required: None | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.13 |
| vmwNsxMSpoofGuardDisableFail Failed to disable spoofguard on the vnic.
Please collect ESX and NSX Manager tech support bundle and open a SR with Vmware techsupport. See http://kb.vmware.com/kb/2074678 and
htt… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.14 |
| vmwNsxMSpoofGuardDisabled Disabled spoofguard for vnic.
Action required: None | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.15 |
| vmwNsxMLegacyAppServiceDeletionFailed A notification generated when legacy application service VM
deletion failed. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.16 |
| vmwNsxMFirewallCpuThresholdCrossed vsfwd CPU usage threshold was exceeded.
Reduce the amount of traffic of VMs on the host in question. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.17 |
| vmwNsxMFirewallMemThresholdCrossed vsfwd heap memory threshold exceeded for the specified heap.
Reduce the number of of VMs on the host in question, reduce the number of rules or containers in firewall config. Use… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.18 |
| vmwNsxMConnPerSecThrshldCrossed vsfwd Connectons Per Second (CPS) threshold exceeded for the specified vnic.
Reduce the amount of new connections of VMs on the host in question. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.19 |
| vmwNsxMFltrCnfgNotAppliedToVnic NSX Manager failed to enforce DFW configuration on a vnic. This particular VM may not be protected by the DFW. Contextual data provided with this event may indicate the cause of t… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.2 |
| vmwNsxMFirewallCnfgUpdateTimedOut NSX Manager waits for 2 minutes after publishing the Firewall configuration to each host in the cluster. If a host takes more than 2 minutes to process the data, it times out.
Ple… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.20 |
| vmwNsxMSpoofGuardCnfgUpdateTmOut NSX Manager waits for 2 minutes after publishing the Spoofguard configuration to each host in the cluster. If a host takes more than 2 minutes to process the data, it times out.
P… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.21 |
| vmwNsxMFirewallPublishFailed Firewall Configuration Publishing has failed for a given cluster/host.
Please collect ESX and NSX Manager tech support bundle and open a SR with Vmware techsupport. See http://kb.… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.22 |
| vmwNsxMCntnrUpdatePublishFailed Publishing of container (IP/MAC/vNIC) update pdate failed for a given host/cluster object.
Please collect ESX and NSX Manager tech support bundle and open a SR with Vmware techsup… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.23 |
| vmwNsxMSpoofGuardUpdatePublishFailed The publishing of the spoofguard updates on this host has failed. Please collect ESX and NSX Manager tech support bundle and open a SR with Vmware techsupport. See http://kb.vmwar… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.24 |
| vmwNsxMExcludeListPublishFailed The publishing of the exclude list or updates to the exclude list on this host has failed. Please collect ESX and NSX Manager tech support bundle and open a SR with Vmware techsup… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.25 |
| vmwNsxMFirewallCnfgUpdateOnDltCntnr Deletion of the object referenced in firewall rules.
Action required: Go to the NSX manager DFW UI. All the invalid reference
are marked invalid on the UI as well. Please remove t… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.26 |
| vmwNsxMHostSyncFailed Host-level force synchronization has failed. Please collect ESX and NSX Manager tech support bundle and open a SR with Vmware techsupport. See http://kb.vmware.com/kb/2074678 and
… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.27 |
| vmwNsxMHostSynced Force Sync operation for host succeeded.
Action required: None | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.28 |
| vmwNsxMFirewallInstalled The Distributed Firewall was successfully Installed on the host. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.29 |
| vmwNsxMFltrCnfgAppliedToVnic Successfully updated filter config.
Action required: None | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.3 |
| vmwNsxMFirewallInstallFailed The Distributed Firewall Installation has failed. Please collect ESX and NSX Manager tech support bundle and open a SR with Vmware techsupport. See http://kb.vmware.com/kb/2074678… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.30 |
| vmwNsxMFirewallClusterInstalled The Distributed Firewall has been installed at the request of a user. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.31 |
| vmwNsxMFirewallClusterUninstalled The Distributed Firewall has been uninstalled at the request of a user. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.32 |
| vmwNsxMFirewallClusterDisabled The Distributed Firewall has been disabeld on the cluster at the request of a user. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.33 |
| vmwNsxMFirewallForceSyncClusterFailed Force Sync operation for the cluster has failed.
Use CLI commands to look at the logs and verify if any error messages appeared during the operation. See kb.vmware.com/kb/2125437.… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.34 |
| vmwNsxMFirewallForceSyncClusterSuccess Force Sync operation for cluster succeeded.
Action required: None | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.35 |
| vmwNsxMFirewallVsfwdProcessStarted vsfwd process started on host.
Action required: None | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.36 |
| vmwNsxMFirewallRulesetApplyAllFailed Failure to apply all the rule section configuration. Contextual data provided with this event may indicate the cause of this failure.
Collect error logs (vmkernel.log) when firewa… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.37 |
| vmwNsxMFirewallRulesetAppliedAll Successfully applied all rule section config.
Action required: None. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.38 |
| vmwNsxMCntnrCnfgApplyFailedToVnic Failure to apply the container configuration. Contextual data provided with this event may indicate the cause of this failure.
Collect error logs (vmkernel.log) when firewall conf… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.39 |
| vmwNsxMFltrCreatedForVnic Filter created. DFW is enforced in the datapath for the
vnic.
Action required: None | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.4 |
| vmwNsxMCntnrCnfgApplyAllFailedToVnic Failure to apply all container configuration. Contextual data provided with this event may indicate the cause of this failure.
Collect error logs (vmkernel.log) when firewall conf… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.40 |
| vmwNsxMCntnrCnfgAppliedAllToVnic Successfully applied all container config to all vnics.
Action required: None. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.41 |
| vmwNsxMSpoofGuardApplyAllFailed Failed to apply all spoofguard to the vnics.
Contextual data provided with this event may indicate the cause of this failure.
Verify that vsip kernel heaps have enough free memory… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.42 |
| vmwNsxMSpoofGuardAppliedAll Applied all spoofguard for vnics.
Action required: None. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.43 |
| vmwNsxMFirewallTimeoutUpdateFailed Firewall session timer timeout configuration parse/update failed. Timeout values are unchanged. Contextual data provided with this event may indicate the cause of this failure. Co… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.44 |
| vmwNsxMFirewallTimeoutApplyFailed Firewall session timer timeout configuration apply failed. Certain timeout values are unchanged. Contextual data provided with this event may indicate the cause of this failure. C… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.45 |
| vmwNsxMFirewallTimeoutApplied Applied session timeout values for a vnic.
Action required: None. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.46 |
| vmwNsxMFirewallTimeoutApplyAllFailed Failed to apply all firewall session timer timeout configuration. Some timeout values are unchanged. Contextual data provided with this event may indicate the cause of this failur… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.47 |
| vmwNsxMFirewallTimeoutAppliedAll Applied session timeout values for all vnics.
Action required: None. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.48 |
| vmwNsxMCntnrCnfgAppliedToVnic Successfully applied container config to all vnics.
Action required: None. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.49 |
| vmwNsxMFltrDeletedForVnic Filter deleted. DFW is removed from the vnic.
Action required: None | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.5 |
| vmwNsxMFirewallMaxConcurrentConnectionsThresholdCrossed vsfwd maximum concurrent connections threshold was exceeded for the specified vnic.
Reduce the amount of traffic on the vnic in question. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.50 |
| vmwNsxMFirewallProcessMemoryThresholdCrossed vsfwd memory utilization threshold was exceeded for the specified process.
Reduce the number of rules or containers in firewall config. If persists, there may be memory leaks in t… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.51 |
| vmwNsxMFirewallCpuThresholdCrossCleared vsfwd CPU usage is back to below threshold level.
Action required: None. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.52 |
| vmwNsxMFirewallMemThresholdCrossCleared vsfwd heap memory usage is back to below threshold level for the specified heap.
Action required: None. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.53 |
| vmwNsxMConnPerSecThrshldCrossCleared vsfwd Connectons Per Second (CPS) is back to below threshold level for the specified vnic.
Action required: None. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.54 |
| vmwNsxMFirewallMaxConcurrentConnectionsThresholdCrossCleared vsfwd maximum concurrent connections is back to below threshold level for the specified vnic.
Action required: None. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.55 |
| vmwNsxMFirewallProcessMemoryThresholdCrossCleared vsfwd memory utilization is back to below threshold level for the specified process.
Action required: None. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.56 |
| vmwNsxMFirewallThresholdConfigApplied Successfully applied all threshold config.
Action required: None. | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.57 |
| vmwNsxMFirewallThresholdConfigApplyFailed Firewall threshold configuration apply failed. Certain threshold values are unchanged. Contextual data provided with this event may indicate the cause of this failure. Collect err… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.58 |
| vmwNsxMUnsupportedIPsetConfigured Whenever an IP address 0.0.0.0 or 0.0.0.0/32 is configured as IPSet.
KB article: https://ikb.vmware.com/kb/53157
Action: Information-only event. No action required. Workaround to … | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.59 |
| vmwNsxMFirewallRuleFailedVnic Failed to apply Distributed Firewall configuration.
Contextual data provided with this event may indicate the cause of this failure.
Collect error logs (vmkernel.log) when the fir… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.7 |
| vmwNsxMFirewallRuleAppliedVnic Applied firewall config. Key value will have context info
like generation number and also other debugging info.
Action required: None | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.8 |
| vmwNsxMCntnrCnfgUpdateFailed Failed receive, parse or update the container configuration. Contextual data provided with this event may indicate the cause of this failure.
Collect error logs (vmkernel.log) whe… | notification | - | .1.3.6.1.4.1.6876.90.1.2.3.0.9 |
Notification Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| vmwNsxMEventCode The event code of the alert that was generated. To fetch a list of all the
events with their code, severity and description please invoke the
nsx-manager url https://<nsx-manager-… | scalar | Integer32 | .1.3.6.1.4.1.6876.90.1.1.1 |
| vmwNsxMEventTimestamp The timestamp when the event was raised in the NSX Manager. | scalar | SNMPv2-TCDateAndTime | .1.3.6.1.4.1.6876.90.1.1.2 |
| vmwNsxMEventMessage This object provides a human readable description of the event or group
of events | scalar | OctetString | .1.3.6.1.4.1.6876.90.1.1.3 |
| vmwNsxMEventSeverity The severity for the event that was generated. The severity is
pre-defined and can only be changed from the NSX Manager section
of vsphere web client if the administrator so wishe… | scalar | VmwNsxManagerTypeSeverity | .1.3.6.1.4.1.6876.90.1.1.4 |
| vmwNsxMEventComponent The NSX manager component where this event was generated. | scalar | OctetString | .1.3.6.1.4.1.6876.90.1.1.5 |
| vmwNsxMUuid The NSX manager UUID where this event was generated. | scalar | UUID-TC-MIBUUID | .1.3.6.1.4.1.6876.90.1.1.6 |
| vmwNsxMEventSourceID The object ID(s) of the source(s) of the event. | scalar | VmwNsxManagerSourceID | .1.3.6.1.4.1.6876.90.1.1.8 |
| vmwNsxMEventSourceType The object type(s) of the source(s) of the event. | scalar | VmwNsxManagerSourceType | .1.3.6.1.4.1.6876.90.1.1.9 |
| vmwNsxMEventSourceIP The IP address(es) of the source(s) of the event. | scalar | VmwNsxManagerSourceIPAddress | .1.3.6.1.4.1.6876.90.1.1.10 |