P
P
pred8or2020-09-10 13:41:58
Mikrotik
pred8or, 2020-09-10 13:41:58

Zabbix 5 and Mikrotik switches: what can be done with a trigger?

There are Mikrotik switches, for example, CRS328. The standard template is used, it contains the no less standard Template Module Interfaces SNMP template. In general, everything is fine, but ...

On an inactive interface, the SNMP switch reports a speed of as much as 10 bps (see, for example, Management), although this is not accurate, I did not try to look at anything other than MIB Browser:

5f5a004974862443559634.png
5f5a005326d10665351552.png
5f5a005b5447e184417018.png

Zabbix is for some reason, it interprets it as a whole petabit:

5f5a00c17abc4510734628.png

As a result, when the interface goes up, its speed inevitably drops to gigabit, and a notification arrives that Problem: Interface Management(): Ethernet has changed to lower speed than it was before

Standard trigger from the template:

{Template Module Interfaces SNMP:net.if.speed[ifHighSpeed.{#SNMPINDEX}].change()}<0 and {Template Module Interfaces SNMP:net.if.speed[ifHighSpeed.{#SNMPINDEX}].last()}>0 and
({Template Module Interfaces SNMP:net.if.type[ifType.{#SNMPINDEX}].last()}=6 or
{Template Module Interfaces SNMP:net.if.type[ifType.{#SNMPINDEX}].last()}=7 or
{Template Module Interfaces SNMP:net.if.type[ifType.{#SNMPINDEX}].last()}=11 or
{Template Module Interfaces SNMP:net.if.type[ifType.{#SNMPINDEX}].last()}=62 or
{Template Module Interfaces SNMP:net.if.type[ifType.{#SNMPINDEX}].last()}=69 or
{Template Module Interfaces SNMP:net.if.type[ifType.{#SNMPINDEX}].last()}=117) and
({Template Module Interfaces SNMP:net.if.status[ifOperStatus.{#SNMPINDEX}].last()}<>2)


Recovery rule:

({Template Module Interfaces SNMP:net.if.speed[ifHighSpeed.{#SNMPINDEX}].change()}>0 and {Template Module Interfaces SNMP:net.if.speed[ifHighSpeed.{#SNMPINDEX}].prev()}>0) or
({Template Module Interfaces SNMP:net.if.status[ifOperStatus.{#SNMPINDEX}].last()}=2)


This creates too much noise. Of course, the trigger could be disabled, but then there is a risk of losing a really important event, which actually changes the speed on the port

Answer the question

In order to leave comments, you need to log in

1 answer(s)
K
kisaa, 2020-09-11
@kisaa

You have different oids in MIBBrowser and in Zabbix - on the screen of the first ifSpeed ​​(32-bit, with the wrong value on the 10-gigabit interface), and on the screen of the second - if High Speed. Look at these codes with MIB, maybe Mikrotik writes something wrong there.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question