DEFEND_1.3.6.1.4.1.2011.5.25.165.1.11.9 hwBaseSecurityStormControlInterface

Trap Buffer Description

L2 loop detect alarmed, a loop occurs on an interface. (ChassisID=[ChassisID], SlotID=[SlotID], Interface Name=[IfName], VlanID=[VlanID], Loop Level=[LoopLevel].)

The number of bytes discarded on an interface exceeded the preset alarm threshold.

In VS mode, this trap is supported only by the admin VS.

Trap Attributes

Trap Attribute	Description
Alarm or Event	Alarm
Trap Severity	Warning
Mnemonic Code	hwBaseSecApplicationL2LoopOcurred
Trap OID	1.3.6.1.4.1.2011.5.25.165.1.11.9
MIB	HUAWEI-SECURITY-MIB
Alarm ID	0x09e02022
Alarm Name	hwBaseSecApplicationL2LoopOcurred
Alarm Type	equipmentAlarm
Raise or Clear	Raise
Match trap	DEFEND_1.3.6.1.4.1.2011.5.25.165.1.11.14 hwBaseSecurityStormControlInterfaceResume

Trap Buffer Parameters

Parameter	Description
ChassisID	Chassis ID of the interface where a loop occurs.
SlotID	Slot ID of the interface where a loop occurs. When a device works in 1:1 backup mode, the slot ID is displayed as 0.
IfName	Name of the interface where a loop occurs.
VlanID	ID of the VLAN that the interface joins. If the interface is a member of a VLANIF interface, the VLANID value ranges from 1 to 4094. If the interface is not a member of a VLANIF interface, the VLANID value is 0.
LoopLevel	Loop level. The value can be as follows: Determined: A loop has occurred. Suspect: It is suspected that a loop has occurred. Notification: A loop may occur.

VB Parameters

VB OID	VB Name	VB Index
1.3.6.1.4.1.2011.5.25.165.1.13.1.1.1	hwBaseSecurityStormControlInterfaceChassisId	hwBaseSecurityStormControlInterfaceChassisId hwBaseSecurityStormControlInterfaceSlotId
1.3.6.1.4.1.2011.5.25.165.1.13.1.1.2	hwBaseSecurityStormControlInterfaceSlotId	hwBaseSecurityStormControlInterfaceChassisId hwBaseSecurityStormControlInterfaceSlotId
1.3.6.1.4.1.2011.5.25.165.1.13.1.1.3	hwBaseSecurityStormControlInterfaceName	hwBaseSecurityStormControlInterfaceChassisId hwBaseSecurityStormControlInterfaceSlotId
1.3.6.1.4.1.2011.5.25.165.1.13.1.1.4	hwBaseSecurityStormControlInterfaceVlanID	hwBaseSecurityStormControlInterfaceChassisId hwBaseSecurityStormControlInterfaceSlotId

Impact on the System

This alarm indicates that loops occurred on an interface or an interface received attack packets. If the alarm persists for a long period, protocol packets will be discarded, normal services will be compromised, and the CPU will be overloaded.

Possible Causes

Cause 1: Loops occurred on an interface and a large number of broadcast and multicast packets were generated, causing the number of bytes discarded on the interface to exceed the preset alarm threshold.
Cause 2: The device was attacked, causing the number of bytes discarded on an interface to exceed the preset alarm threshold.

Procedure

Collect the alarm information, log information, and configuration information, and then contact technical support personnel.