Monitor and troubleshoot
Documents under this category provide information about monitoring, diagnosing, and troubleshooting router issues.
- 7450 ESS and 7750 SR Troubleshooting Guide
- 7750 SR-s Troubleshooting Guide
- 7950 XRS Troubleshooting Guide
- Log Events Guide
  This guide provides information about log events.
- Log Events Search Tool
  A searchable HTML list of the SR OS events.
- OAM and Diagnostics Guide
  This guide describes how to configure features such as service mirroring and Lawful Intercept (LI), and how to use the Operations, Administration, and Maintenance (OAM) and diagnostics tools.

MACSEC

tmnxMacsecCaCreate

Table 1. tmnxMacsecCaCreate properties
Property name	Value
Application name	MACSEC
Event ID	2011
Event name	tmnxMacsecCaCreate
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.11
Default severity	minor
Source stream	main
Message format string	MACsec CA $tmnxMacsecConnAssocName$ psk-index $tmnxMacsecPreSharedKeyIndex$ CKN $tmnxMacsecPreSharedKeyCakName$ created
Cause	A tmnxMacsecCaCreate notification is generated when a connectivity association is created.
Effect	N/A
Recovery	N/A

tmnxMacsecConfiguredPortCA

Table 2. tmnxMacsecConfiguredPortCA properties
Property name	Value
Application name	MACSEC
Event ID	2001
Event name	tmnxMacsecConfiguredPortCA
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.1
Default severity	minor
Source stream	main
Message format string	MACsec CA $tmnxMacsecConnAssocName$ CKN $tmnxMacsecPreSharedKeyCakName$ configured on port $tmnxMacsecNotifyPortId$ sub-port $tmnxMacsecNotifyVlanId$
Cause	A tmnxMacsecConfiguredPortCA notification is generated when a CA is associated with a port.
Effect	N/A
Recovery	N/A

tmnxMacsecConnAssocCreated

Table 3. tmnxMacsecConnAssocCreated properties
Property name	Value
Application name	MACSEC
Event ID	2022
Event name	tmnxMacsecConnAssocCreated
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.22
Default severity	minor
Source stream	main
Message format string	MACsec CA $tmnxMacsecNotifyConnAssocName$ with CKN $tmnxMacsecNotifyCkn$ from source $tmnxMacsecNotifyPskSource$ has been created
Cause	The tmnxMacsecConnAssocCreated notification is generated when a connectivity association is created. Common triggers for this notification include but not limited to the following: - The begin-time of the next key entry in the configured keychain is reached. - A new PSK is generated and distributed after the configured auto-gen-psk generate-interval has elapsed. - A distributed CAK parameter set is received and accepted. - The active-psk configuration is changed to the corresponding pre-shared-key entry.
Effect	The connectivity association is available for MKA participants to join.
Recovery	N/A.

tmnxMacsecConnAssocDeleted

Table 4. tmnxMacsecConnAssocDeleted properties
Property name	Value
Application name	MACSEC
Event ID	2023
Event name	tmnxMacsecConnAssocDeleted
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.23
Default severity	minor
Source stream	main
Message format string	MACsec CA $tmnxMacsecNotifyConnAssocName$ with CKN $tmnxMacsecNotifyCkn$ from source $tmnxMacsecNotifyPskSource$ has been deleted
Cause	A tmnxMacsecConnAssocDeleted notification is generated when a connectivity association is deleted. Common triggers for this notification include but not limited to the following: - The end-time plus the tolerance limit of the corresponding key entry in the configured keychain is reached. - The Secure Association Key (SAK) of the connectivity association is retired after the SAK for an auto-generated or distributed connectivity association is activated successfully. - The active-psk configuration is changed from the corresponding pre-shared-key entry.
Effect	The connectivity association is no longer available to MKA participants and all associated MKA instances are terminated.
Recovery	N/A.

tmnxMacsecDisabledPort

Table 5. tmnxMacsecDisabledPort properties
Property name	Value
Application name	MACSEC
Event ID	2004
Event name	tmnxMacsecDisabledPort
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.4
Default severity	minor
Source stream	main
Message format string	MACsec admin disabled on port $tmnxMacsecPortId$ sub-port $tmnxMacsecNotifyVlanId$ CA $tmnxMacsecPortCaName$
Cause	A tmnxMacsecDisabledPort notification is generated when a port is admin disabled or the associated CA is disabled.
Effect	N/A
Recovery	N/A

tmnxMacsecDpReplayAttempt

Table 6. tmnxMacsecDpReplayAttempt properties
Property name	Value
Application name	MACSEC
Event ID	2016
Event name	tmnxMacsecDpReplayAttempt
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.16
Default severity	minor
Source stream	main
Message format string	MACsec port $tmnxMacsecPortId$ sub-port $tmnxMacsecVlanId$ RxSCI $tmnxMacsecRxSci$ data packets replay count $tmnxMacsecRxSCStatsLatePkts$
Cause	A tmnxMacsecDpReplayAttempt notification is generated every 10 seconds if the counter for detected replay attempts is different from the last time this notification was raised. If the counter has not changed, it will be checked again in 10 seconds.
Effect	N/A
Recovery	N/A

tmnxMacsecEnabledPort

Table 7. tmnxMacsecEnabledPort properties
Property name	Value
Application name	MACSEC
Event ID	2003
Event name	tmnxMacsecEnabledPort
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.3
Default severity	minor
Source stream	main
Message format string	MACsec admin enabled on port $tmnxMacsecPortId$ sub-port $tmnxMacsecNotifyVlanId$ CA $tmnxMacsecPortCaName$
Cause	A tmnxMacsecEnabledPort notification is generated when a port is admin enabled and the associated CA is enabled.
Effect	N/A
Recovery	N/A

tmnxMacsecMaxPeerLimitCleared

Table 8. tmnxMacsecMaxPeerLimitCleared properties
Property name	Value
Application name	MACSEC
Event ID	2010
Event name	tmnxMacsecMaxPeerLimitCleared
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.10
Default severity	minor
Source stream	main
Message format string	MACsec peer limit cleared on security-zone $tmnxMacsecNotifySecurityZone$ for peer mi:mac $tmnxMacsecNotifyPeerMi$:$tmnxMacsecMkaPeerListSci$ on port $tmnxMacsecPortId$ sub-port $tmnxMacsecVlanId$
Cause	A tmnxMacsecMaxPeerLimitCleared notification is generated when an MKA session no longer exceeds the maximum number of allowable peers.
Effect	N/A
Recovery	N/A

tmnxMacsecMaxPeerLimitExceeded

Table 9. tmnxMacsecMaxPeerLimitExceeded properties
Property name	Value
Application name	MACSEC
Event ID	2005
Event name	tmnxMacsecMaxPeerLimitExceeded
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.5
Default severity	minor
Source stream	main
Message format string	MACsec peer limit exceeded on security-zone $tmnxMacsecNotifySecurityZone$ for peer mi:mac $tmnxMacsecNotifyPeerMi$:$tmnxMacsecMkaPeerListSci$ on port $tmnxMacsecPortId$ sub-port $tmnxMacsecVlanId$
Cause	A tmnxMacsecMaxPeerLimitExceeded notification is generated when an MKA session exceeds the maximum number of allowable peers.
Effect	N/A
Recovery	N/A

tmnxMacsecMkaReplayAttemptDisc

Table 10. tmnxMacsecMkaReplayAttemptDisc properties
Property name	Value
Application name	MACSEC
Event ID	2015
Event name	tmnxMacsecMkaReplayAttemptDisc
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.15
Default severity	minor
Source stream	main
Message format string	MACsec CA $tmnxMacsecPortCaName$ port $tmnxMacsecPortId$ sub-port $tmnxMacsecVlanId$ MACsec MKA packets replay count $tmnxMacsecMkaStatsPduInvalidNum$
Cause	A tmnxMacsecMkaReplayAttemptDisc notification is generated when the replay packet counter increments
Effect	N/A
Recovery	N/A

tmnxMacsecPrimKeychainHasActKey

Table 11. tmnxMacsecPrimKeychainHasActKey properties
Property name	Value
Application name	MACSEC
Event ID	2019
Event name	tmnxMacsecPrimKeychainHasActKey
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.19
Default severity	minor
Source stream	main
Message format string	tmnxMacsecPrimKeychainNoActKey notification for primary keychain $tmnxMacsecStaticCakPrimKeychain$ for MACsec CA $tmnxMacsecConnAssocName$ is cleared - A key entry became active
Cause	This notification may be triggered when all conditions below are met: 1. The system time reaches the time specified by tmnxKeyChainKeyBeginTime for at least one key entry in the primary keychain tmnxMacsecStaticCakPrimKeychain. 2. A valid key entry in the primary keychain is administratively enabled, i.e. tmnxKeyChainKeyAdminState is 'inService(2)'. 3. The primary keychain is administratively enabled, i.e. tmnxKeyChainAdminState is 'inService(2)'.
Effect	The connectivity associations for the active key entries are created.
Recovery	None.

tmnxMacsecPrimKeychainNoActKey

Table 12. tmnxMacsecPrimKeychainNoActKey properties
Property name	Value
Application name	MACSEC
Event ID	2018
Event name	tmnxMacsecPrimKeychainNoActKey
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.18
Default severity	minor
Source stream	main
Message format string	Primary keychain $tmnxMacsecStaticCakPrimKeychain$ for MACsec CA $tmnxMacsecConnAssocName$ does not have any active key entry
Cause	This notification may be triggered for a variety of reasons including (but not limited to): 1. Key entries in the primary keychain have tmnxKeyChainKeyBeginTime set to a time in the future. 2. Key entries in the primary keychain are administratively disabled, i.e. tmnxKeyChainKeyAdminState is 'outOfService(3)'. 3. The primary keychain is administratively disabled, i.e. tmnxKeyChainAdminState is 'outOfService(3)'.
Effect	No connectivity associations can be created.
Recovery	The recovery measure depends on the cause. 1. Ensure the system time is correct and tmnxKeyChainKeyBeginTime is set to the current or earlier system time for valid key entries in the primary keychain. 2. Ensure valid key entries in the primary keychain have tmnxKeyChainKeyAdminState set to 'inService(2)'. 3. Ensure the primary keychain has tmnxKeyChainAdminState set to 'inService(2)'.

tmnxMacsecRecovKeychainHasActKey

Table 13. tmnxMacsecRecovKeychainHasActKey properties
Property name	Value
Application name	MACSEC
Event ID	2021
Event name	tmnxMacsecRecovKeychainHasActKey
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.21
Default severity	minor
Source stream	main
Message format string	tmnxMacsecRecovKeychainNoActKey notification for recovery keychain $tmnxMacsecAutoGenPskRecovKeyCh$ for MACsec CA $tmnxMacsecConnAssocName$ is cleared - A key entry became active
Cause	This notification may be triggered when all conditions below are met: 1. The system time reaches the time specified by tmnxKeyChainKeyBeginTime for at least one key entry in the recovery keychain tmnxMacsecAutoGenPskRecovKeyCh. 2. A valid key entry in the recovery keychain is administratively enabled, i.e. tmnxKeyChainKeyAdminState is 'inService(2)'. 3. The recovery keychain is administratively enabled, i.e. tmnxKeyChainAdminState is 'inService(2)'.
Effect	The connectivity associations for the active key entries are created.
Recovery	None.

tmnxMacsecRecovKeychainNoActKey

Table 14. tmnxMacsecRecovKeychainNoActKey properties
Property name	Value
Application name	MACSEC
Event ID	2020
Event name	tmnxMacsecRecovKeychainNoActKey
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.20
Default severity	minor
Source stream	main
Message format string	Recovery keychain $tmnxMacsecAutoGenPskRecovKeyCh$ for MACsec CA $tmnxMacsecConnAssocName$ does not have any active key entry
Cause	This notification may be triggered for a variety of reasons including (but not limited to): 1. Key entries in the recovery keychain have tmnxKeyChainKeyBeginTime set to a time in the future. 2. Key entries in the recovery keychain are administratively disabled, i.e. tmnxKeyChainKeyAdminState is 'outOfService(3)'. 3. The recovery keychain is administratively disabled, i.e. tmnxKeyChainAdminState is 'outOfService(3)'.
Effect	No connectivity associations can be created.
Recovery	The recovery measure depends on the cause. 1. Ensure the system time is correct and tmnxKeyChainKeyBeginTime is set to the current or earlier system time for valid key entries in the recovery keychain. 2. Ensure valid key entries in the recovery keychain have tmnxKeyChainKeyAdminState set to 'inService(2)'. 3. Ensure the recovery keychain has tmnxKeyChainAdminState set to 'inService(2)'.

tmnxMacsecSakCreate

Table 15. tmnxMacsecSakCreate properties
Property name	Value
Application name	MACSEC
Event ID	2012
Event name	tmnxMacsecSakCreate
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.12
Default severity	minor
Source stream	main
Message format string	MACsec CA $tmnxMacsecConnAssocName$ CKN $tmnxMacsecPreSharedKeyCakName$ port $tmnxMacsecNotifyPortId$ sub-port $tmnxMacsecNotifyVlanId$ new SAK created as key server AN $tmnxMacsecNotifyAssociationNum$
Cause	A tmnxMacsecSakCreate notification is generated when a SAK has been created as a key server.
Effect	N/A
Recovery	N/A

tmnxMacsecSakDelete

Table 16. tmnxMacsecSakDelete properties
Property name	Value
Application name	MACSEC
Event ID	2017
Event name	tmnxMacsecSakDelete
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.17
Default severity	minor
Source stream	main
Message format string	MACsec CA $tmnxMacsecConnAssocName$ CKN $tmnxMacsecPreSharedKeyCakName$ port $tmnxMacsecNotifyPortId$ sub-port $tmnxMacsecNotifyVlanId$ SAK deleted AN $tmnxMacsecNotifyAssociationNum$
Cause	A tmnxMacsecSakDelete notification is generated when a SAK has been deleted.
Effect	N/A
Recovery	N/A

tmnxMacsecSakInstalledRx

Table 17. tmnxMacsecSakInstalledRx properties
Property name	Value
Application name	MACSEC
Event ID	2013
Event name	tmnxMacsecSakInstalledRx
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.13
Default severity	minor
Source stream	main
Message format string	MACsec CA $tmnxMacsecConnAssocName$ CKN $tmnxMacsecPreSharedKeyCakName$ port $tmnxMacsecNotifyPortId$ sub-port $tmnxMacsecNotifyVlanId$ new SAK installed AN $tmnxMacsecNotifyAssociationNum$
Cause	A tmnxMacsecSakInstalledRx notification is generated when a new SAK is installed for receiving
Effect	N/A
Recovery	N/A

tmnxMacsecSakInstalledTx

Table 18. tmnxMacsecSakInstalledTx properties
Property name	Value
Application name	MACSEC
Event ID	2014
Event name	tmnxMacsecSakInstalledTx
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.14
Default severity	minor
Source stream	main
Message format string	MACsec CA $tmnxMacsecConnAssocName$ CKN $tmnxMacsecPreSharedKeyCakName$ port $tmnxMacsecNotifyPortId$ sub-port $tmnxMacsecNotifyVlanId$ new SAK activated AN $tmnxMacsecNotifyAssociationNum$
Cause	A tmnxMacsecSakInstalledTx notification is generated when a new SAK is installed for transmitting
Effect	N/A
Recovery	N/A

tmnxMacsecUnconfiguredPortCA

Table 19. tmnxMacsecUnconfiguredPortCA properties
Property name	Value
Application name	MACSEC
Event ID	2002
Event name	tmnxMacsecUnconfiguredPortCA
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.2
Default severity	minor
Source stream	main
Message format string	MACsec CA $tmnxMacsecConnAssocName$ CKN $tmnxMacsecPreSharedKeyCakName$ unconfigured on port $tmnxMacsecNotifyPortId$ sub-port $tmnxMacsecNotifyVlanId$
Cause	A tmnxMacsecUnconfiguredPortCA notification is generated when a CA is unassociated from a port.
Effect	N/A
Recovery	N/A

tmnxMkaOperStateChanged

Table 20. tmnxMkaOperStateChanged properties
Property name	Value
Application name	MACSEC
Event ID	2009
Event name	tmnxMkaOperStateChanged
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.9
Default severity	minor
Source stream	main
Message format string	MACsec MKA Operational State changed to: $tmnxMacsecMkaStatsOperState$ on port $tmnxMacsecPortId$ sub-port $tmnxMacsecVlanId$ CA $tmnxMacsecPortCaName$
Cause	A tmnxMkaOperStateChanged notification is generated when an MKA changes operational state.
Effect	N/A
Recovery	N/A

tmnxMkaPskRollover

Table 21. tmnxMkaPskRollover properties
Property name	Value
Application name	MACSEC
Event ID	2007
Event name	tmnxMkaPskRollover
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.7
Default severity	minor
Source stream	main
Message format string	MACsec port $tmnxMacsecNotifyPortId$ sub-port $tmnxMacsecNotifyVlanId$ CA $tmnxMacsecConnAssocName$ PSK active index $tmnxMacsecStaticCakActivePsk$
Cause	A tmnxMkaPskRollover notification is generated when a PSK rollover occurs.
Effect	N/A
Recovery	N/A

tmnxMkaSessionEnded

Table 22. tmnxMkaSessionEnded properties
Property name	Value
Application name	MACSEC
Event ID	2008
Event name	tmnxMkaSessionEnded
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.8
Default severity	minor
Source stream	main
Message format string	MACsec MKA session ended with MI:SCI $tmnxMacsecMkaPeerListMi$: $tmnxMacsecMkaPeerListSci$ on port $tmnxMacsecPortId$ sub-port $tmnxMacsecVlanId$ CA $tmnxMacsecPortCaName$ local MI $tmnxMacsecMkaStatsMemberId$
Cause	A tmnxMkaSessionEnded notification is generated when an MKA session is ended.
Effect	N/A
Recovery	N/A

tmnxMkaSessionEstablished

Table 23. tmnxMkaSessionEstablished properties
Property name	Value
Application name	MACSEC
Event ID	2006
Event name	tmnxMkaSessionEstablished
SNMP notification prefix and OID	TIMETRA-MACSEC-MIB.tmnxMacsecNofitications.6
Default severity	minor
Source stream	main
Message format string	MACsec MKA session established with MI:SCI $tmnxMacsecMkaPeerListMi$: $tmnxMacsecMkaPeerListSci$ on port $tmnxMacsecPortId$ sub-port $tmnxMacsecVlanId$ CA $tmnxMacsecPortCaName$ EAPOL-destination $tmnxMacsecPortEapolDestAddress$ local key-server priority $tmnxMacsecMkaStatsKeyServerPrio$ peer key-server priority $tmnxMacsecConnAssocKeyServPrio$ cipher-suite $tmnxMacsecConnAssocCipherSuite$ encryption offset $tmnxMacsecConnAssocEncrptnOffset$ localMI $tmnxMacsecMkaStatsMemberId$
Cause	A tmnxMkaSessionEstablished notification is generated when an MKA session is established.
Effect	N/A
Recovery	N/A

July 9, 2026