We're a 100% Cisco shop and recently placed port-security protocols/configs in place for all of our visitor phones and unsecured conference room phones. The ports are configured to shutdown should anyone try and plug the patch cord from the phone to their laptop, etc. Not a huge issue, unless of course an exec decides to do such a thing in one of these spaces. (Which according to Murphy, it will happen!) So, I want to alert on those specific ports either being down or err-disable status immediately and not waiting for a trouble ticket/call, etc.
So is this the correct way to set this up?
In NPM--> settings-->manage custom properties-->add custom property
Create a Custom Properties Group based on object type "interfaces" called "Conf_Visitor_Rm_Phones"
Selected interfaces and added them to the group
Then I went to Advanced Alert Manager-->config alerts-->new-->"Conf_Visitor_Rm_Phones"
Trigger Condition:
Property to monitor: interface
Trigger alert when any of the following apply:
Conf_Visitor_Rm_Phones is equal to err-disable
Conf_Visitor_Rm_Phones is equal to down
Reset Condition:
Ticked Reset when trigger conditions are no longer true.
Trigger Actions:
email me
Message is ${InterfaceAlias} is ${Status}
Thanks!