CISCO-IF-MONITOR-NOTIF-MIB

All MIBs › CISCO-IF-MONITOR-NOTIF-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2002-10-11

Category: Alarm and Event Management, Cisco Devices, Network Interfaces, Network Monitoring (RMON)

Description: Monitors network interface state changes and generates notifications for link up/down events.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-IF-MONITOR-NOTIF-MIB?

CISCO-IF-MONITOR-NOTIF-MIB is a Cisco proprietary MIB that generates notifications when interface-level error counters exceed a configured threshold within an observation interval, signaling a "severe condition" on the interface. It belongs to Cisco's interface/network-health monitoring technology area, exposing data about per-interface error counts, thresholds, and monitoring intervals rather than static hardware inventory. It is used to monitor the operational and fault status of network interfaces, flagging conditions such as excessive errors or drops once cIfMonNotifValue crosses cIfMonNotifThreshold over cIfMonNotifInterval, and recording the time of the last change via cIfMonNotifLastChange. It builds on the standard IF-MIB ifIndex convention to identify the interface associated with each monitored condition. It is typically deployed on Cisco routers and switches where administrators want proactive alerting on degrading link quality rather than relying solely on manual polling. Engineers can download the CISCO-IF-MONITOR-NOTIF-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-IF-MONITOR-NOTIF-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco routers and switches

Monitoring Examples

An admin polling cIfMonNotifTable/cIfMonNotifEntry would check cIfMonNotifValue against cIfMonNotifThreshold and review cIfMonNotifSeverity/cIfMonNotifCause to determine which interface triggered a severe-condition alert and why. cIfMonNotifCount gives the total number of currently active notifications, while cIfMonNotifLastChange timestamps the most recent transition. A repeatedly incrementing cIfMonNotifCount alongside a high cIfMonNotifSeverity would indicate a chronically degrading interface needing physical inspection.

What Can Be Monitored

interface error threshold breaches
notification severity
notification cause
monitored value vs threshold
monitoring interval
active notification count

Imported Objects

From CISCO-SMI

ciscoExperiment

OBJECT-IDENTITY

From IF-MIB

ifIndex

OBJECT-TYPE

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

TimeStamp

OIDs

OID symbolic	OID numeric	Type	Access	Description
ciscoIfMonitorNotifMIB	1.3.6.1.4.1.9.10.999			Interface Monitor Notification MIB This MIB module defines the objects for sending notifications when certain errors over an interval have reached/exceeded a threshold, causing a severe condition.
cIfMonNotifMIBNotifications	1.3.6.1.4.1.9.10.999.0
NTF cIfMonNotifEvent	1.3.6.1.4.1.9.10.999.0.1			The agent generates this notification when certain errors over an interval have reached/exceeded a threshold, causing a severe condition. The SNMP Notifications can be logged using the NOTIFICATION-LOG-MIB.
cIfMonNotifMIBObjects	1.3.6.1.4.1.9.10.999.1
U32 cIfMonNotifCount	1.3.6.1.4.1.9.10.999.1.1	Unsigned32	read-only	This object will be incremented and included in the varbind list of the cIfMonNotifEvent notification. This object is guaranteed to increase once per notification originated from the MIB. NMSes should track the value of this object received in each notification. If the difference in the value of this object across two consecutive notifications is more than one, a notification has been delayed, dropped, lost or routed out of sequence. The only reliable way to recover such notifications is via the NOTIFICATION-LOG-MIB. The NMS should preferably configure/create a log in the NOTIFICATION-LOG-MIB to capture cIfMonNotifEvent notifications. If possible, a named log should be created. When a notification loss is detected, the NMS can then poll the log to determine which notification was lost. The reader can look up RFC 3014 for more information on the NOTIFICATION-LOG-MIB. In addition to tracking the value of this object in each notification, the NMS should periodically poll this object. If the polled value of this object is two or more counts greater than the value from the last received notification, a notification has likely been dropped, and the NMS must use the NOTIFICATION-LOG-MIB to poll for the dropped notification.
cIfMonNotifTable	1.3.6.1.4.1.9.10.999.1.2		not-accessible	This table contains information about the last notification that was sent for a particular interface.
cIfMonNotifEntry	1.3.6.1.4.1.9.10.999.1.2.1		not-accessible	Each entry contains information about the last notification sent for this interface.
TIM cIfMonNotifLastChange	1.3.6.1.4.1.9.10.999.1.2.1.1	TimeStamp	read-only	This object specifies the value of sysUpTime at the last time a notification was sent for this interface.
INT cIfMonNotifSeverity	1.3.6.1.4.1.9.10.999.1.2.1.2	INTEGER	read-only	The severity of the condition on the link when the notification is sent. A smaller enumerated integer value indicates that the exceeded condition is more severe. When a red severity notification is sent, it signifies that a severe event has occured, in which certain errors over an interval have reached/exceeded a high threshold . When a yellow severity notification is sent it signifies that an event has occured, in which certain errors over an interval have reached/exceeded a low threshold.
INT cIfMonNotifCause	1.3.6.1.4.1.9.10.999.1.2.1.3	INTEGER	read-only	The link errors over an interval which caused the severe condition on the link. aborts number of packet aborted crc number of crc errors in packets received drops number of input packet dropped flaps number of link flaps frame-reject number of HDLC frames rejected runts number of frame runts dropped (X.25 Parameters) sabm number of SABMS commands received frmr number of Frame Rejects disc number of disconnect command received.
U32 cIfMonNotifValue	1.3.6.1.4.1.9.10.999.1.2.1.4	Unsigned32	read-only	The value of the link errors over an interval that reached/exceeded the threshold, causing a severe condition.
U32 cIfMonNotifThreshold	1.3.6.1.4.1.9.10.999.1.2.1.5	Unsigned32	read-only	The threshold which was reached/exceeded by the link errors over an interval, causing a severe condition.
U32 cIfMonNotifInterval	1.3.6.1.4.1.9.10.999.1.2.1.6	Unsigned32	read-only	The interval over which the link errors reached/exceeded the threshold, causing a severe condition.
cIfMonNotifMIBConformance	1.3.6.1.4.1.9.10.999.2
cIfMonNotifMIBCompliances	1.3.6.1.4.1.9.10.999.2.1
cIfMonNotifMIBCompliance	1.3.6.1.4.1.9.10.999.2.1.1			The compliance statement for entities which implement the Cisco Interface Monitor Notification MIB
cIfMonNotifMIBGroups	1.3.6.1.4.1.9.10.999.2.2
cIfMonNotifObjectGroup	1.3.6.1.4.1.9.10.999.2.2.1			A collection of mandatory managed objects for sending notifications when certain errors over an interval have reached/exceeded a threshold, causing a severe condition.
cIfMonNotifEventGroup	1.3.6.1.4.1.9.10.999.2.2.2			A collection of notifications generated on an interface when certain errors over an interval have reached/exceeded a threshold, causing a severe condition.

RFC description

Interface error monitoring and threshold-based notifications for Cisco network interfaces.

Start monitoring Cisco routers and switches (interface error thresholds) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-IF-MONITOR-NOTIF-MIB

What Is CISCO-IF-MONITOR-NOTIF-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description