"DEVICE PORT COUNT EXCEEDED THRESHOLD" alarm event id 0x100c3 for most of their Palo Alto models in Spectrum
search cancel

"DEVICE PORT COUNT EXCEEDED THRESHOLD" alarm event id 0x100c3 for most of their Palo Alto models in Spectrum

book

Article ID: 130963

calendar_today

Updated On:

Products

CA Spectrum

Issue/Introduction

"DEVICE PORT COUNT EXCEEDED THRESHOLD" alarm event id 0x100c3 for most of their Palo Alto models in Spectrum

Environment

Any version of Spectrum running on any supported operating system

Cause

A check of the device in MIB Tools shows a high value for ifNumber. However, the ifTable only has a few interfaces. The interfaces tab reflects the number of interfaces in the ifTable correctly. Further checking shows the ifNumber increasing causing Spectrum to assert reconfiguration events if automatic reconfiguration enabled.

Resolution

This is an issue with the ifNumber on the device not reflecting the correct value and needs to be addressed by the vendor.

In the mean time, recommended to do the following:

1. Set the "Automatically Reconfigure Interfaces" value in the Reconfiguration subview of the models to No so they do not get these invalid reconfiguration events. This can be done in bulk using the Attribute Editor.

2. Set the 0x100c3 event to not generate an alarm.