Monitor and troubleshoot
Documents under this category provide information about monitoring, diagnosing, and troubleshooting router issues.
- 7450 ESS and 7750 SR Troubleshooting Guide
- 7750 SR-s Troubleshooting Guide
- 7950 XRS Troubleshooting Guide
- Log Events Guide
  This guide provides information about log events.
- Log Events Search Tool
  A searchable HTML list of the SR OS events.
- OAM and Diagnostics Guide
  This guide describes how to configure features such as service mirroring and Lawful Intercept (LI), and how to use the Operations, Administration, and Maintenance (OAM) and diagnostics tools.

MACSEC

tmnxMacsecCaCreate

Table 1. tmnxMacsecCaCreate properties
Property name	Value
Application name	MACSEC
Event ID	2011
Event name	tmnxMacsecCaCreate
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.11
Default severity	minor
Source stream	main
Message format string	MACsec CA $tmnxMacsecConnAssocName$ psk-index $tmnxMacsecPreSharedKeyIndex$ CKN $tmnxMacsecPreSharedKeyCakName$ created
Cause	A tmnxMacsecCaCreate notification is generated when a connectivity association is created.
Effect	N/A
Recovery	N/A

tmnxMacsecConfiguredPortCA

Table 2. tmnxMacsecConfiguredPortCA properties
Property name	Value
Application name	MACSEC
Event ID	2001
Event name	tmnxMacsecConfiguredPortCA
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.1
Default severity	minor
Source stream	main
Message format string	MACsec CA $tmnxMacsecConnAssocName$ CKN $tmnxMacsecPreSharedKeyCakName$ configured on port $tmnxMacsecNotifyPortId$ sub-port $tmnxMacsecNotifyVlanId$
Cause	A tmnxMacsecConfiguredPortCA notification is generated when a CA is associated with a port.
Effect	N/A
Recovery	N/A

tmnxMacsecDisabledPort

Table 3. tmnxMacsecDisabledPort properties
Property name	Value
Application name	MACSEC
Event ID	2004
Event name	tmnxMacsecDisabledPort
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.4
Default severity	minor
Source stream	main
Message format string	MACsec admin disabled on port $tmnxMacsecPortId$ sub-port $tmnxMacsecNotifyVlanId$ CA $tmnxMacsecPortCaName$
Cause	A tmnxMacsecDisabledPort notification is generated when a port is admin disabled or the associated CA is disabled.
Effect	N/A
Recovery	N/A

tmnxMacsecDpReplayAttempt

Table 4. tmnxMacsecDpReplayAttempt properties
Property name	Value
Application name	MACSEC
Event ID	2016
Event name	tmnxMacsecDpReplayAttempt
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.16
Default severity	minor
Source stream	main
Message format string	MACsec port $tmnxMacsecPortId$ sub-port $tmnxMacsecVlanId$ RxSCI $tmnxMacsecRxSci$ data packets replay count $tmnxMacsecRxSCStatsLatePkts$
Cause	A tmnxMacsecDpReplayAttempt notification is generated every 10 seconds if the counter for detected replay attempts is different from the last time this notification was raised. If the counter has not changed, it will be checked again in 10 seconds.
Effect	N/A
Recovery	N/A

tmnxMacsecEnabledPort

Table 5. tmnxMacsecEnabledPort properties
Property name	Value
Application name	MACSEC
Event ID	2003
Event name	tmnxMacsecEnabledPort
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.3
Default severity	minor
Source stream	main
Message format string	MACsec admin enabled on port $tmnxMacsecPortId$ sub-port $tmnxMacsecNotifyVlanId$ CA $tmnxMacsecPortCaName$
Cause	A tmnxMacsecEnabledPort notification is generated when a port is admin enabled and the associated CA is enabled.
Effect	N/A
Recovery	N/A

tmnxMacsecMaxPeerLimitCleared

Table 6. tmnxMacsecMaxPeerLimitCleared properties
Property name	Value
Application name	MACSEC
Event ID	2010
Event name	tmnxMacsecMaxPeerLimitCleared
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.10
Default severity	minor
Source stream	main
Message format string	MACsec peer limit cleared on security-zone $tmnxMacsecNotifySecurityZone$ for peer mi:mac $tmnxMacsecNotifyPeerMi$:$tmnxMacsecMkaPeerListSci$ on port $tmnxMacsecPortId$ sub-port $tmnxMacsecVlanId$
Cause	A tmnxMacsecMaxPeerLimitCleared notification is generated when an MKA session no longer exceeds the maximum number of allowable peers.
Effect	N/A
Recovery	N/A

tmnxMacsecMaxPeerLimitExceeded

Table 7. tmnxMacsecMaxPeerLimitExceeded properties
Property name	Value
Application name	MACSEC
Event ID	2005
Event name	tmnxMacsecMaxPeerLimitExceeded
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.5
Default severity	minor
Source stream	main
Message format string	MACsec peer limit exceeded on security-zone $tmnxMacsecNotifySecurityZone$ for peer mi:mac $tmnxMacsecNotifyPeerMi$:$tmnxMacsecMkaPeerListSci$ on port $tmnxMacsecPortId$ sub-port $tmnxMacsecVlanId$
Cause	A tmnxMacsecMaxPeerLimitExceeded notification is generated when an MKA session exceeds the maximum number of allowable peers.
Effect	N/A
Recovery	N/A

tmnxMacsecMkaReplayAttemptDisc

Table 8. tmnxMacsecMkaReplayAttemptDisc properties
Property name	Value
Application name	MACSEC
Event ID	2015
Event name	tmnxMacsecMkaReplayAttemptDisc
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.15
Default severity	minor
Source stream	main
Message format string	MACsec CA $tmnxMacsecPortCaName$ port $tmnxMacsecPortId$ sub-port $tmnxMacsecVlanId$ MACsec MKA packets replay count $tmnxMacsecMkaStatsPduInvalidNum$
Cause	A tmnxMacsecMkaReplayAttemptDisc notification is generated when the replay packet counter increments
Effect	N/A
Recovery	N/A

tmnxMacsecPrimKeychainHasActKey

Table 9. tmnxMacsecPrimKeychainHasActKey properties
Property name	Value
Application name	MACSEC
Event ID	2019
Event name	tmnxMacsecPrimKeychainHasActKey
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.19
Default severity	minor
Source stream	main
Message format string	tmnxMacsecPrimKeychainNoActKey notification for primary keychain $tmnxMacsecStaticCakPrimKeychain$ for MACsec CA $tmnxMacsecConnAssocName$ is cleared - A key entry became active
Cause	This notification may be triggered when all conditions below are met: 1. The system time reaches the time specified by tmnxKeyChainKeyBeginTime for at least one key entry in the primary keychain tmnxMacsecStaticCakPrimKeychain. 2. A valid key entry in the primary keychain is administratively enabled, i.e. tmnxKeyChainKeyAdminState is 'inService(2)'. 3. The primary keychain is administratively enabled, i.e. tmnxKeyChainAdminState is 'inService(2)'. 4. The CA configured with the tmnxMacsecStaticCakPrimKeychain must be assigned to tmnxMacsecPortCaName of at least one MACsec subport with tmnxMacsecPortAdminState set to 'inService (2)'.
Effect	The associated MACsec CA and MKA instances are created for the active key entries.
Recovery	None.

tmnxMacsecPrimKeychainNoActKey

Table 10. tmnxMacsecPrimKeychainNoActKey properties
Property name	Value
Application name	MACSEC
Event ID	2018
Event name	tmnxMacsecPrimKeychainNoActKey
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.18
Default severity	minor
Source stream	main
Message format string	Primary keychain $tmnxMacsecStaticCakPrimKeychain$ for MACsec CA $tmnxMacsecConnAssocName$ does not have any active key entry
Cause	This notification may be triggered for a variety of reasons including (but not limited to): 1. Key entries in the primary keychain have tmnxKeyChainKeyBeginTime set to a time in the future. 2. Key entries in the primary keychain are administratively disabled, i.e. tmnxKeyChainKeyAdminState is 'outOfService(3)'. 3. The primary keychain is administratively disabled, i.e. tmnxKeyChainAdminState is 'outOfService(3)'.
Effect	No CA and MKA instances can be created for the associated MACsec subports.
Recovery	The recovery measure depends on the cause. 1. Ensure the system time is correct and tmnxKeyChainKeyBeginTime is set to the current or earlier system time for valid key entries in the primary keychain. 2. Ensure valid key entries in the primary keychain have tmnxKeyChainKeyAdminState set to 'inService(2)'. 3. Ensure the primary keychain has tmnxKeyChainAdminState set to 'inService(2)'.

tmnxMacsecSakCreate

Table 11. tmnxMacsecSakCreate properties
Property name	Value
Application name	MACSEC
Event ID	2012
Event name	tmnxMacsecSakCreate
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.12
Default severity	minor
Source stream	main
Message format string	MACsec CA $tmnxMacsecConnAssocName$ CKN $tmnxMacsecPreSharedKeyCakName$ port $tmnxMacsecNotifyPortId$ sub-port $tmnxMacsecNotifyVlanId$ new SAK created as key server AN $tmnxMacsecNotifyAssociationNum$
Cause	A tmnxMacsecSakCreate notification is generated when a SAK has been created as a key server.
Effect	N/A
Recovery	N/A

tmnxMacsecSakDelete

Table 12. tmnxMacsecSakDelete properties
Property name	Value
Application name	MACSEC
Event ID	2017
Event name	tmnxMacsecSakDelete
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.17
Default severity	minor
Source stream	main
Message format string	MACsec CA $tmnxMacsecConnAssocName$ CKN $tmnxMacsecPreSharedKeyCakName$ port $tmnxMacsecNotifyPortId$ sub-port $tmnxMacsecNotifyVlanId$ SAK deleted AN $tmnxMacsecNotifyAssociationNum$
Cause	A tmnxMacsecSakDelete notification is generated when a SAK has been deleted.
Effect	N/A
Recovery	N/A

tmnxMacsecSakInstalledRx

Table 13. tmnxMacsecSakInstalledRx properties
Property name	Value
Application name	MACSEC
Event ID	2013
Event name	tmnxMacsecSakInstalledRx
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.13
Default severity	minor
Source stream	main
Message format string	MACsec CA $tmnxMacsecConnAssocName$ CKN $tmnxMacsecPreSharedKeyCakName$ port $tmnxMacsecNotifyPortId$ sub-port $tmnxMacsecNotifyVlanId$ new SAK installed AN $tmnxMacsecNotifyAssociationNum$
Cause	A tmnxMacsecSakInstalledRx notification is generated when a new SAK is installed for receiving
Effect	N/A
Recovery	N/A

tmnxMacsecSakInstalledTx

Table 14. tmnxMacsecSakInstalledTx properties
Property name	Value
Application name	MACSEC
Event ID	2014
Event name	tmnxMacsecSakInstalledTx
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.14
Default severity	minor
Source stream	main
Message format string	MACsec CA $tmnxMacsecConnAssocName$ CKN $tmnxMacsecPreSharedKeyCakName$ port $tmnxMacsecNotifyPortId$ sub-port $tmnxMacsecNotifyVlanId$ new SAK activated AN $tmnxMacsecNotifyAssociationNum$
Cause	A tmnxMacsecSakInstalledTx notification is generated when a new SAK is installed for transmitting
Effect	N/A
Recovery	N/A

tmnxMacsecUnconfiguredPortCA

Table 15. tmnxMacsecUnconfiguredPortCA properties
Property name	Value
Application name	MACSEC
Event ID	2002
Event name	tmnxMacsecUnconfiguredPortCA
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.2
Default severity	minor
Source stream	main
Message format string	MACsec CA $tmnxMacsecConnAssocName$ CKN $tmnxMacsecPreSharedKeyCakName$ unconfigured on port $tmnxMacsecNotifyPortId$ sub-port $tmnxMacsecNotifyVlanId$
Cause	A tmnxMacsecUnconfiguredPortCA notification is generated when a CA is unassociated from a port.
Effect	N/A
Recovery	N/A

tmnxMkaOperStateChanged

Table 16. tmnxMkaOperStateChanged properties
Property name	Value
Application name	MACSEC
Event ID	2009
Event name	tmnxMkaOperStateChanged
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.9
Default severity	minor
Source stream	main
Message format string	MACsec MKA Operational State changed to: $tmnxMacsecMkaStatsOperState$ on port $tmnxMacsecPortId$ sub-port $tmnxMacsecVlanId$ CA $tmnxMacsecPortCaName$
Cause	A tmnxMkaOperStateChanged notification is generated when an MKA changes operational state.
Effect	N/A
Recovery	N/A

tmnxMkaPskRollover

Table 17. tmnxMkaPskRollover properties
Property name	Value
Application name	MACSEC
Event ID	2007
Event name	tmnxMkaPskRollover
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.7
Default severity	minor
Source stream	main
Message format string	MACsec port $tmnxMacsecNotifyPortId$ sub-port $tmnxMacsecNotifyVlanId$ CA $tmnxMacsecConnAssocName$ PSK active index $tmnxMacsecStaticCakActivePsk$
Cause	A tmnxMkaPskRollover notification is generated when a PSK rollover occurs.
Effect	N/A
Recovery	N/A

tmnxMkaSessionEnded

Table 18. tmnxMkaSessionEnded properties
Property name	Value
Application name	MACSEC
Event ID	2008
Event name	tmnxMkaSessionEnded
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.8
Default severity	minor
Source stream	main
Message format string	MACsec MKA session ended with MI:SCI $tmnxMacsecMkaPeerListMi$: $tmnxMacsecMkaPeerListSci$ on port $tmnxMacsecPortId$ sub-port $tmnxMacsecVlanId$ CA $tmnxMacsecPortCaName$ local MI $tmnxMacsecMkaStatsMemberId$
Cause	A tmnxMkaSessionEnded notification is generated when an MKA session is ended.
Effect	N/A
Recovery	N/A

tmnxMkaSessionEstablished

Table 19. tmnxMkaSessionEstablished properties
Property name	Value
Application name	MACSEC
Event ID	2006
Event name	tmnxMkaSessionEstablished
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.6
Default severity	minor
Source stream	main
Message format string	MACsec MKA session established with MI:SCI $tmnxMacsecMkaPeerListMi$: $tmnxMacsecMkaPeerListSci$ on port $tmnxMacsecPortId$ sub-port $tmnxMacsecVlanId$ CA $tmnxMacsecPortCaName$ EAPOL-destination $tmnxMacsecPortEapolDestAddress$ local key-server priority $tmnxMacsecMkaStatsKeyServerPrio$ peer key-server priority $tmnxMacsecStaticCakKeyServerPrio$ cipher-suite $tmnxMacsecConnAssocCipherSuite$ encryption offset $tmnxMacsecConnAssocEncrptnOffset$ localMI $tmnxMacsecMkaStatsMemberId$
Cause	A tmnxMkaSessionEstablished notification is generated when an MKA session is established.
Effect	N/A
Recovery	N/A

October 30, 2025