API Changes for Network Secure Fabric Link Event Codes
Table of Contents
Expand all | Collapse all
-
-
- Add a Branch
- Add a Data Center
- Add a Branch Gateway
- Configure Circuits
- Configure Internet Circuit Underlay Link Aggregation
- Configure Private WAN Underlay Link Quality Aggregation
- Configure Circuit Categories
- Configure Device Initiated Connections for Circuits
- Add Public IP LAN Address to Enterprise Prefixes
- Manage Data Center Clusters
- Configure a Site Prefix
- Configure a DHCP Server
- Configure NTP for Prisma SD-WAN
- Enable IoT Device Visibility in Prisma SD-WAN
- Configure the ION Device at a Branch Site
- Configure the ION Device at a Data Center
- Switch a Site to Control Mode
- Allow IP Addresses in Firewall Configuration
-
- Configure a Controller Port
- Configure Internet Ports
- Configure WAN/LAN Ports
- Configure a Loopback Interface
- Configure a PoE Port
- Configure and Monitor LLDP Activity and Status
- Configure a PPPoE Interface
- Configure a Layer 3 LAN Interface
- Configure Application Reachability Probes
- Configure a Secondary IP Address
- Configure a Static ARP
- Configure a DHCP Relay
- Configure IP Directed Broadcast
- VPN Keep-Alives
-
- Configure Prisma SD-WAN IPFIX
- Configure IPFIX Profiles and Templates
- Configure and Attach a Collector Context to a Device Interface in IPFIX
- Configure and Attach a Filter Context to a Device Interface in IPFIX
- Configure Global and Local IPFIX Prefixes
- Flow Information Elements
- Options Information Elements
- Configure the DNS Service on the Prisma SD-WAN Interface
- Configure SNMP
-
-
- Prisma SD-WAN Branch Routing
- Prisma SD-WAN Data Center Routing
-
- Configure Multicast
- Create a WAN Multicast Configuration Profile
- Assign WAN Multicast Configuration Profiles to Branch Sites
- Configure a Multicast Source at a Branch Site
- Configure Global Multicast Parameters
- Configure a Multicast Static Rendezvous Point (RP)
- Learn Rendezvous Points (RPs) Dynamically
- View LAN Statistics for Multicast
- View WAN Statistics for Multicast
- View IGMP Membership
- View the Multicast Route Table
- View Multicast Flow Statistics
- View Routing Statistics
- Prisma SD-WAN Incident Policies
-
- Prisma SD-WAN Branch HA Key Concepts
- Configure Branch HA
- Configure HA Groups
- Add ION Devices to HA Groups
- View Device Configuration of HA Groups
- Edit HA Groups and Group Membership
-
- Configure Branch HA with Gen-1 Platforms (2000, 3000, 7000, and 9000)
- Configure Branch HA with Gen-2 Platforms (3200, 5200, and 9200)
- Configure Branch HA with Gen-2 Embedded Switch Platforms (1200-S or 3200-L2)
- Configure Branch HA for Devices with Software Cellular Bypass (1200-S-C-5G)
- Configure Branch HA for Platforms without Bypass Pairs
- Prisma SD-WAN Clarity Reports
- Prisma SD-WAN Incidents and Alerts
API Changes for Network Secure Fabric Link Event Codes
The new Secure Fabric Link alarm category
in 5.4.1 summarizes VPN alarms between a branch and a data center
or between two branches into two groups-NETWORK_SECUREFABRICLINK_DEGRADED
and NETWORK_SECUREFABRICLINK_DOWN.
With this change, the following VPN alarms that identify link
connectivity issues are now grouped into one of the two Secure Fabric Link
alarms:
- NETWORK_VPNLINK_DOWN
- NETWORK_VPNPEER_UNAVAILABLE
- NETWORK_VPNSS_UNAVAILABLE
- NETWORK_VPNPEER_UNREACHABLE
- NETWORK_VPNSS_MISMATCH
- NETWORK_VPNBFD_DOWN
And if the root cause for the links connectivity issues is one
of the following alarm codes, the Secure Fabric Link alarm is suppressed:
- DEVICEHW_INTERFACE_DOWN
- NETWORK_DIRECTINTERNET_DOWN
- NETWORK_DIRECTPRIVATE_DOWN
To view the suppressed alarms, you must use the two new filters
for Include Suppressed and Show Only Suppressed in the alarm management
window.
The following is a sample API response.
Before Version 5.4.1 | Starting Version 5.4.1 |
|---|---|
{"_created_on_utc": "2020-07-21T19:09:13.454000Z",
"_etag": 1, "_updated_on_utc": "2020-07-21T19:09:13.454000Z",
"acknowledged": False, "acknowledgement_info": None,
"cleared": False, "code": "NETWORK_VPNLINK_DOWN", "correlation_id": "NW6JYud4",
"element_id": "14999711939070152", "entity_ref": "tenants/1092/sites/14994575835930104",
"id": "5f173d59d7b0fa339626dc98", "info":{ "al_id": "15809335672920128", "vpn_link_id": "15953585219130188"
}, "severity": "major", "site_id": "14994575835930104",
"time": "2020-07-21T19:09:12.346000Z", "type": "alarm" | { "info": { "vpnlinks": [
"15821811883320202" ] }, "acknowledgement_info":
None, "type": "alarm", "severity": "major", "_updated_on_utc": "2020-06-02T20:27:16.855000Z",
"site_id": "14764819359580119", "notes": "Test Notes", "acknowledged":
False, "cleared": False, "id": "5ed593d2a09dee5049286694",
"entity_ref": "tenants/1092/anynetlinks/15507065212560023",
"correlation_id": "h76a6B6X", "code": "NETWORK_ANYNETLINK_DOWN",
"suppressed_info": { "event_ids": [ "5ed593d1a09dee5049286689",
"5ed593d2a09dee5049286692", "5ed6b624a09dee58c781256b"
], "other_reason": None, "suppressed_time": "2020-06-02T20:27:16.855000Z",
"rule_id": None }, "time": "2020-06-01T23:48:34.353000Z",
"element_id": None, "_created_on_utc": "2020-06-01T23:48:34.379000Z",
"suppressed": True, "_etag": 4} |
The API response highlights the new attributes in the 5.4.1
event structure:
- entity_ref for NETWORK_ANYNETLINK_DOWN alarms will now point to anynetlinks instead of pointing to the site.
- info attribute for NETWORK_ANYNETLINK_DOWN will contain a list of VPN IDs.
- suppressed_info includes event IDs only if suppressed is True. With the list of relevant event IDs that are suppressed, the suppressed_time timestamp is added. (Note: other_reason and rule_id are intended for future use).
- notes to add remarks/comments to events. You can edit notes for active alarms only.
When querying for events using the API, replace the code for:
- NETWORK_SECUREFABRICLINK_DOWN with NETWORK_ANYNETLINK_DOWN
- NETWORK_SECUREFABRICLINK_DEGRADED with NETWORK_ANYNETLINK_DEGRADED
For example: { "limit":{ "count":100,
"sort_on":"time", "sort_order":"descending" }, "severity":[],
"acknowledged":False, "start_time":None, "query":{
"site":[], "category":[], "code":["NETWORK_ANYNETLINK_DOWN"],
"correlation_id":[], "type":["alarm"] }}