Appendix
Enterprise-Level Orchestrator Alerts and Events
Describes a summary of alerts and events generated within the Edge Cloud Orchestrator at the Enterprise level.
The document provides details about all Enterprise-level Orchestrator events. Although these events are stored within the Orchestrator and displayed on the Orchestrator UI, most of them are generated by either an Edge or a Gateway and/or one of its running components (MGD, EDGED, PROCMON, and so on) with the exception of a few which are generated by the Orchestrator itself. You can configure notifications/alerts for events in Orchestrator only.
The following table provides an explanation for each of the columns in the "Enterprise-level Orchestrator Events" table:
| Column name | Details |
|---|---|
| EVENT | Unique name of the event |
| DISPLAYED ON ORCHESTRATOR UI AS | Specifies how the event is displayed on the Orchestrator. |
| SEVERITY | The severity with which this event is usually generated. |
| GENERATED BY | The VeloCloud SD-WAN component generating the notification can be one of the following:
|
| GENERATED WHEN | Technical reason(s) and circumstances under which this event is generated. |
| RELEASE ADDED IN | The release this event was first added. If not specified, this event existed prior to release 2.5. |
| DEPRECATED | Specifies if the event is deprecated from a specific release. |
| EVENT | DISPLAYED ON ORCHESTRATOR UI AS | SEVERITY | GENERATED BY | GENERATED WHEN | RELEASE | DEPRE CATED |
|---|---|---|---|---|---|---|
| EDGE_UP | Edge Up | ALERT | Orchestrator | Edge comes back after losing connectivity with the Orchestrator through heartbeats. 2 consecutive heartbeats by an Edge causes the Orchestrator to change its status to EDGE_UP. The Orchestrator runs a monitor every 15 seconds that will update the status of all Edges. | ||
| EDGE_DOWN | Edge Down | ALERT | Orchestrator | Edge loses connectivity with the Orchestrator and fails performing 2 or more consecutive heartbeats. The Orchestrator runs a monitor every 15 seconds that will update the status of all Edges. | ||
| LINK_UP | Link Up | ALERT | Orchestrator | A WAN Link returns to a normal functioning state. | ||
| LINK_DOWN | Link Down | ALERT | Orchestrator | A WAN Link is disconnected from the Edge or when the Link cannot communicate with the Edge service. | ||
| VPN_TUNNEL_DOWN | VPN Tunnel Down | ALERT | Orchestrator | The IPSec tunnel configured from the Edge service to your VPN Gateway cannot be established or if the tunnel is dropped and cannot be re-established. | ||
| EDGE_HA_FAILOVER | Edge HA Failover | ALERT | Orchestrator | An HA Edge fails-over to its standby. | ||
| EDGE_SERVICE_DOWN | Edge Service Down | ALERT | Orchestrator | The Edge service running on the Edge may be down. This may indicate Edge device failure or failure of network connectivity. | ||
| EDGE_CSS_TUNNEL_UP | Edge CSS Tunnel Up | ALERT | Orchestrator | A Cloud Security Service tunnel from Edge is UP. | ||
| EDGE_CSS_TUNNEL _DOWN | Edge CSS Tunnel Down | ALERT | Orchestrator | A Cloud Security Service tunnel from Edge is DOWN. | ||
| NVS_FROM _EDGE_TUNNEL_DOWN | NVS From Edge Tunnel Down | ALERT | Orchestrator | A NSD via Edge tunnel is DOWN. | ||
| NVS_FROM _EDGE_TUNNEL_UP | NVS From Edge Tunnel Up | ALERT | Orchestrator | A NSD via Edge tunnel is UP. | ||
| VNF_VM_DEPLOYED | VNF VM Deployed | ALERT | Orchestrator | An Edge VNF virtual machine gets deployed on to the Edge. | ||
| VNF_VM_ POWERED_ON | VNF VM Powered ON | ALERT | Orchestrator | An Edge VNF virtual machine gets deployed on to the Edge and is powered on. | ||
| VNF_VM_ POWERED_OFF | VNF VM Powered OFF | ALERT | Orchestrator | An Edge VNF virtual machine is powered off. | ||
| VNF_VM_ DEPLOYED_AND _POWERED_OFF | VNF VM Deployed and Powered OFF | ALERT | Orchestrator | An Edge VNF virtual machine gets deployed on to the Edge and is immediately powered on. | ||
| VNF_VM _DELETED | VNF VM Deleted | ALERT | Orchestrator | An Edge VNF virtual machine is removed from the Edge. | ||
| VNF_VM _ERROR | VNF VM error | ALERT | Orchestrator | An error occurs during deployment of an Edge VNF virtual machine. | ||
| VNF_INSERTION _ENABLED | VNF insertion enabled | ALERT | Orchestrator | Insertion of an Edge VNF virtual machine is enabled on the Edge. | ||
| VNF_INSERTION _DISABLED | VNF insertion disabled | ALERT | Orchestrator | Insertion of an Edge VNF virtual machine is deactivated on the Edge. | ||
| VNF_IMAGE _DOWNLOAD_IN _PROGRESS | VNF Image Download In Progress | ALERT | Orchestrator | An Edge VNF virtual machine image download is in progress. | ||
| VNF_IMAGE _DOWNLOAD _COMPLETED | VNF Image Download Completed | ALERT | Orchestrator | An Edge VNF virtual machine image download is completed. | ||
| VNF_IMAGE _DOWNLOAD _FAILED | VNF Image Download Failed | ALERT | Orchestrator | An Edge VNF virtual machine image failed to be downloaded on the Edge. | ||
| EDGE_BFD _NEIGHBOR_UP | BFD session established to Edge neighbor | INFO | Orchestrator | A BFD session has been established to Edge neighbor. | ||
| EDGE_BFD _NEIGHBOR_DOWN | Edge BFD neighbor unavailable | INFO | Orchestrator | A BFD session to Edge neighbor is not established. | ||
| EDGE_BFDV6 _NEIGHBOR_UP | BFDv6 session established to Edge neighbor | INFO | Orchestrator | A BFDv6 session has been established to Edge neighbor. | 4.5 | |
| EDGE_BFDV6 _NEIGHBOR_DOWN | Edge BFDv6 neighbor unavailable | INFO | Orchestrator | A BFDv6 session to Edge neighbor is not established. | 4.5 | |
| EDGE_BGP _NEIGHBOR_UP | BGP session established to Edge neighbor | INFO | Edge | A BGP peer establishes tunnel with an Edge. | ||
| EDGE_BGP _NEIGHBOR_DOWN | Edge BGP neighbor unavailable | INFO | Edge | The Edge's BGP peer loses tunnel with the Edge. | ||
| EDGE_BGPV6 _NEIGHBOR_UP | BGPv6 session established to Edge neighbor | INFO | Orchestrator | A BGPv6 session has been established to Edge neighbor. | 4.5 | |
| EDGE_BGPV6 _NEIGHBOR_DOWN | BGPv6 session established to Edge neighbor | INFO | Orchestrator | A BGPv6 session to Edge neighbor is not established. | 4.5 | |
| GATEWAY _MIGRATION_CREATE | Gateway Migration Created | INFO | Orchestrator | The self-service migration is activated. | 4.5.0 | |
| GATEWAY _MIGRATION_REMOVE | Gateway Migration Removed | INFO | Orchestrator | The self-service migration is deactivated. | 4.5.0 | |
| GATEWAY _MIGRATION_STATE _CHANGE | Gateway Migration State Changed | INFO | Orchestrator | The Gateway migration state is changed from one state to another. | 4.5.0 | |
| PKI_PROMOTION | Endpoint PKI mode promoted | INFO | Orchestrator | An Edge's PKI mode has been changed from optional to required. | ||
| CERTIFICATE _REVOCATION | Certificate revoked | INFO | Orchestrator | Edge certificate revocation occurs intentionally or due to an expired certificate (The latter should rarely happen, given Edge certificates automatically renews after 30 days into the 90 day period). | ||
| CERTIFICATE _RENEWAL | Certificate renewal request | INFO | Orchestrator | Edge certificate automatically renews after 30 days into the 90 day period. | ||
| UPDATE_EDGE _IMAGE_MANAGEMENT | Update Edge image management | INFO | Orchestrator | Activates/deactivates management of Edge software images for a customer. | ||
| SET_EDGE _SOFTWARE | Updated Edge software image | INFO | Orchestrator | New software image is assigned to the Edge due to an Operator Profile reassignment or change in the software image within the operator profile. | ||
| UNSET_EDGE _SOFTWARE | Unset overridden Edge software image | INFO | Orchestrator | Unsetting software image overridden for the Edge and instead assign in the default software image associated with the Operator Profile. | ||
| ADD_OPERATOR _PROFILE | Added operator profile | INFO | Orchestrator | A new operator profile has been associated with this enterprise. | ||
| REMOVE_OPERATOR _PROFILE | Removed operator profile | INFO | Orchestrator | An existing operator profile has been removed from this enterprise. | ||
| ADD_SOFTWARE _IMAGE | Added software image | INFO | Orchestrator | When a new software image is associated to the operator profile for this enterprise. | ||
| MODIFY_ASSIGNED _OPERATOR _ PROFILE_LIST | Modified the assigned operator profile list | INFO | Orchestrator | List of operator profiles associated with the Enterprise has been modified. | ||
| MODIFY_ASSIGNED _SOFTWARE _ IMAGE_LIST | Modified the assigned software image list | INFO | Orchestrator | List of software images associated with the Enterprise has been modified. | ||
| CLOUD_SECURITY _ENABLE | Cloud Security enabled | INFO | Orchestrator | Cloud Security is activated in enterprise's profile or Edge-specific profile | ||
| CLOUD_SECURITY _DISABLE | Cloud Security disabled | INFO | Orchestrator | Cloud Security is deactivated in enterprise's profile | ||
| CLOUD_SECURITY _ PROVIDER _DELETED | Cloud security provider deleted | INFO | Orchestrator | Cloud Security provider associated with an enterprise's profile has been deleted. | ||
| CLOUD_SECURITY _TUNNELING _PROTOCOL_CHANGE | Cloud Security Tunneling Protocol Change | INFO | Orchestrator | Cloud Security tunneling protocol changes (from IPSEC to GRE or vice versa) in an enterprise's profile | ||
| CLOUD_SECURITY _PROVIDER_ADDED | CLOUD_SECURITY_ PROVIDER_ADDED | INFO | Orchestrator | Cloud Security provider associated with an Edge-specific profile has been added. | ||
| CLOUD_SECURITY _PROVIDER_REMOVED | CLOUD_SECURITY_ PROVIDER_REMOVED | INFO | Orchestrator | Cloud Security provider associated with an Edge-specific profile has been removed. | ||
| CLOUD_SECURITY _OVERRIDE_ENABLED | CLOUD_SECURITY_ OVERRIDE_ENABLED | INFO | Orchestrator | Cloud Security override has been activated in an Edge-specific profile. | ||
| CLOUD_SECURITY _OVERRIDE_DISABLED | CLOUD_SECURITY_ OVERRIDE_DISABLED | INFO | Orchestrator | Cloud Security override has been deactivated in an Edge-specific profile. | ||
| CREATE_CLOUD _SERVICE_SITE | Cloud Security Service site creation enqueued | INFO | Orchestrator | An API automation job to create a Cloud Security Service tunnel from Edge has been enqueued. | ||
| UPDATE_CLOUD _SERVICE_SITE | Cloud Security Service site update enqueued | INFO | Orchestrator | An API automation job to update a Cloud Security Service tunnel from Edge has been enqueued. | ||
| DELETE_CLOUD _SERVICE_SITE | Cloud Security Service site deletion enqueued | INFO | Orchestrator | An API automation job to delete a Cloud Security Service tunnel from Edge has been enqueued. | ||
| ZSCALER_SUBLOCATION _ ACTION_ENQUEUED | Zscaler Sub Location Edge action enqueued | INFO | Orchestrator | An API automation job for Cloud Security Service Zscaler Sub Location has been enqueued. | ||
| EDGE_NVS _TUNNEL_UP | Edge Direct IPsec tunnel up | INFO | Orchestrator | A Cloud Security Service tunnel or NSD via Edge tunnel is up. | ||
| EDGE_NVS _TUNNEL_DOWN | Edge Direct IPsec tunnel down | INFO | Orchestrator | A Cloud Security Service tunnel or NSD via Edge tunnel is down. | ||
| DIAGNOSTIC _REQUEST | New diagnostic bundle request | INFO | Orchestrator | A new Edge diagnostic bundle is requested by an enterprise or an operator user. | ||
| EDGE_DIRECT _SITE_DELETED | Edge direct site deleted | INFO | Orchestrator | A NSD via Edge tunnel has been deleted. | ||
| EDGE_DIRECT _TUNNELS_DISABLED | Edge direct tunnels disabled | INFO | Orchestrator | NSD via Edge deactivated in profile device settings. | ||
| EDGE_DIRECT _TUNNELS_ENABLED | Edge direct tunnels enabled | INFO | Orchestrator | NSD via Edge enabled in profile device settings. | ||
| EDGE_DIRECT _TUNNEL_ PROVIDER _DELETED | Edge direct tunnel provider deleted | INFO | Orchestrator | NSD via Edge provider associated with an enterprise's profile has been deleted. | ||
| CREATE_NVS _FROM_EDGE_SITE | NSD via Edge site creation enqueued | INFO | Orchestrator | An API automation job to create a NSD via Edge tunnel has been enqueued. | ||
| UPDATE_NVS _FROM_EDGE_SITE | NSD via Edge site update enqueued | INFO | Orchestrator | An API automation job to update a NSD via Edge tunnel has been enqueued. | ||
| DELETE_NVS _FROM_EDGE_SITE | NSD via Edge site deletion enqueued | INFO | Orchestrator | An API automation job to delete a NSD via Edge tunnel has been enqueued. | ||
| ENTERPRISE_ENABLE _VIEW_ SENSITIVE _DATA | View sensitive data privileges granted | INFO | Orchestrator | An enterprise grants privileges to its MSP or the operator to view data (keys) information. | ||
| ENTERPRISE_ENABLE _OPERATOR_ USER _MGMT | User management delegated to operator | INFO | Orchestrator | An enterprise has successfully delegated access to operator to manager its users. | ||
| ENTERPRISE_DISABLE _ OPERATOR_ACCESS | User management access revoked from operator | INFO | Orchestrator | An enterprise revokes access that was previously delegated to operator to manage its entities. | ||
| ENTERPRISE_ENABLE _ OPERATOR_ACCESS | Access delegated to operator | INFO | Orchestrator | An enterprise has successfully delegated access to operator to manager its entities. | ||
| ENTERPRISE_ENABLE _PROXY_ACCESS | Access revoked from operator | INFO | Orchestrator | An enterprise has successfully delegated access to partner to manager its entities. | ||
| ENTERPRISE_DISABLE _PROXY_ACCESS | Access delegated to partner | INFO | Orchestrator | An enterprise revokes access that was previously delegated to partner to manage its entities. | ||
| EDGE_TO_EDGE _VPN_DISABLE | Edge to Edge VPN Disabled | INFO | Orchestrator | Edge to Edge VPN associated with an Edge device or its corresponding profile has been deactivated. | ||
| EDGE_TO_EDGE _VPN_ENABLE | Edge to Edge VPN Enabled | INFO | Orchestrator | Edge to Edge VPN associated with an Edge device or its corresponding profile has been enabled. | ||
| VPN_DISABLE | Cloud VPN disabled | INFO | Orchestrator | Cloud VPN settings associated with an Edge device or its corresponding profile has been deactivated. | ||
| VPN_ENABLE | Cloud VPN enabled | INFO | Orchestrator | When cloud VPN settings associated with an Edge device or its corresponding profile has been enabled. | ||
| VPN_UPDATE | Cloud VPN updated | INFO | Orchestrator | When cloud VPN settings associated with an Edge device or its corresponding profile has been updated with new modified. | ||
| REMOTE_ACTION | Edge remote action | INFO | Orchestrator | A remote action is performed on an online Edge. | ||
| RECURRING _REPORT_ERROR | Recurring report error | ERROR | Orchestrator | When recurring report fails. | ||
| CREATE_COMPOSITE _ROLE | Composite Role Created | INFO | Orchestrator | When a composite role is created by an Enterprise, Partner, or Operator. | 4.5 | |
| UPDATE_COMPOSITE _ROLE | Composite Role Updated | INFO | Orchestrator | When a composite role is updated by an Enterprise, Partner, or Operator. | 4.5 | |
| DELETE_COMPOSITE _ROLE | Composite Role Deleted | INFO | Orchestrator | When a composite role is deleted by an Enterprise, Partner, or Operator. | 4.5 | |
| ENQUEUE_CREATE _ZSCALER _SUBLOCATION | Zscaler Sub Location creation enqueued | INFO | Orchestrator | When sublocation configuration of Edge device settings are modified. | 4.5 | |
| ENQUEUE_UPDATE _ ZSCALER _SUBLOCATION | Zscaler Sub Location update enqueued | INFO | Orchestrator | When sublocation configuration of Edge device settings are modified. | 4.5 | |
| ENQUEUE_DELETE _ ZSCALER _SUBLOCATION | Zscaler Sub Location deletion enqueued | INFO | Orchestrator | When sublocation configuration of Edge device settings are modified. | 4.5 | |
| CREATE_ZSCALER _SUBLOCATION | Zscaler Sub Location object created | INFO | Orchestrator | When sublocation configuration of Edge device settings are modified. | 4.5 | |
| UPDATE_ZSCALER _SUBLOCATION | Zscaler Sub Location object updated | INFO | Orchestrator | When sublocation configuration of Edge device settings are modified. | 4.5 | |
| DELETE_ZSCALER _SUBLOCATION | Zscaler Sub Location object deleted | INFO | Orchestrator | When sublocation configuration of Edge device settings are modified. | 4.5 | |
| ENQUEUE_UPDATE _ZSCALER_LOCATION | Zscaler Location update enqueued | INFO | Orchestrator | When location configuration of Edge device settings are modified. | 4.5 | |
| CREATE_ZSCALER _LOCATION | Zscaler Location object created | INFO | Orchestrator | When location configuration of Edge device settings are modified. | 4.5 | |
| UPDATE_ZSCALER _LOCATION | Zscaler Location object updated | INFO | Orchestrator | When location configuration of Edge device settings are modified. | 4.5 | |
| DELETE_ZSCALER _LOCATION | Zscaler Location Object deleted | INFO | Orchestrator | When location configuration of Edge device settings are modified. | 4.5 | |
| GATEWAY_BGP _NEIGHBOR_UP | BGP session established to Gateway neighbor | INFO | Gateway | When a BGP peer establishes tunnel with a Gateway. | ||
| GATEWAY_BGP _NEIGHBOR_DOWN | Gateway BGP neighbor unavailable | INFO | Gateway | When a Gateway's BGP peer loses tunnel with a Gateway. | ||
| VRF_MAX_LIMIT _EXCEEDED | VeloCloud SD-WAN Partner Gateway: Maximum rules in a route map limit hit for enterprise <enterprise-name> | WARN _ING | Gateway | Maximum inbound route map config limit reached. | ||
| VRF_ROUTEMAP _RULES_MAX _LIMIT_HIT | VeloCloud SD-WAN Partner Gateway: Maximum rules in a route map limit hit for enterprise <enterprise-name> | WARN _ING | Gateway | Maximum outbound route map config limit reached. | ||
| VRF_LIMIT _EXCEEDED | VeloCloud SD-WAN gateway: Maximum VRF limit(1000) reached | ALERT | Gateway | Maximum VRF limit reached for Partner Gateway. | ||
| GATEWAY_STARTUP | VeloCloud SD-WAN gateway service started | INFO | Gateway | Gateway daemon has started. | ||
| ZSCALER _MONITOR_DISABLED | Zscaler monitor disabled | CRITI _CAL | Edge/Gateway (PROCMON) | Unable to launch L7 health check daemon for CSS tunnels on Edge/Gateway. Or disabled due to too many failures. | 4.4 | |
| ZSCALER _MONITOR_FAILED | Zscaler monitor failed | ERROR | Edge/Gateway (PROCMON) | When L7 health check daemon fails with a return code. | 4.4 | |
| MGD_EMERG _REBOOT | Rebooting system to recover from stuck process(es): <process name> | CRITI _CAL | Edge/Gateway (PROCMON) | Edge/Gateway is rebooted to recover from stuck processes by vc_procmon. | 4.4 | |
| EDGE_SERVICES _STARTED/GATEWAY _SERVICES_STARTED | Edge/Gateway Services Started | INFO | Edge/Gateway (PROCMON) | Generated when procmon starts the services. | 4.5 | |
| EDGE_SERVICES _STOPPED/GATEWAY _SERVICES_STOPPED | Edge/Gateway Services Stopped | INFO | Edge/Gateway (PROCMON) | Generated when procmon stops all the services. | 4.5 | |
| EDGE_SERVICES _RESTARTED/GATEWAY _SERVICES_RESTARTED | Edge/Gateway Services Restarted | INFO | Edge/Gateway (PROCMON | Generated when procmon restarts all the services. | 4.5 | |
| EDGE_SERVICES_ TERMINATED/GATEWAY _SERVICES _TERMINATED | Edge/Gateway Services terminated | INFO | Edge/Gateway (PROCMON) | Generated when procmon terminates all the services. | 4.5 | |
| GATEWAY_SERVICE _DUMPED | Service gwd stopped for diagnostic memory dump | WARN _ING | Gateway (PROCMON) | Generated when gwd is stopped using SIGQUIT to generate core dump by user. | 4.4 | |
| GATEWAY_MGD _SERVICE_FAILED | service mgd failed with error...., restarting | ERROR | Gateway (PROCMON) | Generated by vc_procmon on Gateway when MGD gets stopped. | 4.4 | |
| GATEWAY_NAT _SERVICE_FAILED | Service natd failed with error..., restarting | ERROR | Gateway (PROCMON) | Generated by vc_procmon on Gateway when natd daemon gets stopped. | 4.4 | |
| EDGE_DNSMASQ _FAILED | dnsmasq FAILED to start up | ERROR | Edge (PROCMON) | Generated when dnsmasq daemon failed to start up. | 4.4 | |
| EDGE_SSH _LOGIN | sshd accepted connection | INFO | Edge (PROCMON) | Generated whenever ssh login is done for accessing the Edge. | 4.4 | |
| EDGE_SERVICE _DUMPED | Service edged stopped for diagnostic memory dump | WARN _ING | Edge (PROCMON) | Generated when Edge is stopped using SIGQUIT to generate core dump by user. | 4.4 | |
| EDGE_LED_SERVICE _DISABLED | Edge front-panel LED service disabled | WARN _ING, CRITI _CAL | Edge (PROCMON) | LED service deactivated. | ||
| EDGE_LED_SERVICE _FAILED | Edge front-panel LED service failed | ERROR | Edge (PROCMON) | LED service failed. | ||
| EDGE_MGD _SERVICE_DISABLED | Management service disabled | CRITI _CAL | Edge (PROCMON) | Management service is unable to activate for too many failures. | ||
| EDGE_MGD _SERVICE_FAILED | Management service failed | ERROR | Edge (PROCMON) | Management service failed. | ||
| EDGE_SERVICE _DISABLED | Edge data plane service disabled | WARN _ING/CRITI _CAL | Edge (PROCMON) | Edge Data plane service is deactivated. | ||
| EDGE_SERVICE _ENABLED | Edge data plane service enabled | WARN _ING | Edge (PROCMON) | Edge Data plane service is activated by user from local UI. | ||
| EDGE_SERVICE _FAILED | Edge data plane service failed | ERROR | Edge (PROCMON) | Edge Data plane service failed. | ||
| EDGE_VNFD _SERVICE_DISABLED | WARN _ING | Edge (PROCMON) | Edge VNFD service deactivated. | |||
| EDGE_VNFD _SERVICE_FAILED | ERROR | Edge (PROCMON) | Edge VNFD service failed. | |||
| EDGE_DOT1X _SERVICE_DISABLED | Edge 802.1x service disabled | WARN _ING, CRITI _CAL | Edge (PROCMON) | Edge 802.1x service is deactivated. | ||
| EDGE_DOT1X _SERVICE_FAILED | Edge 802.1x service failed | ERROR | Edge (PROCMON) | Edge 802.1x service failed. | ||
| EDGE_NYANSA _SYSLOG_ SERVICE _FAILED | ERROR | Edge (PROCMON) | Nyansa Syslog service failed. | |||
| EDGE_NYANSA _SYSLOG_ SERVICE _DISABLED | WARN _ING | Edge (PROCMON) | Nyansa Syslog service deactivated. | |||
| EDGE_NYANSA _AMOND_ SERVICE _FAILED | ERROR | Edge (PROC _MON) | Nyansa Amond service failed. | |||
| EDGE_NYANSA _AMOND_ SERVICE _DISABLED | WARN _ING | Edge (PROCMON) | Nyansa Amond service deactivated | |||
| EDGE_NYANSA _SNMP_ TRAPD _SERVICE_FAILED | ERROR | Edge (PROCMON) | Nyansa SNMP Trapd service failed. | |||
| EDGE_NYANSA _SNMP_ TRAPD _SERVICE_DISABLED | WARN _ING | Edge (PROCMON) | Nyansa SNMP Trapd service deactivated. | |||
| EDGE_NYANSA _SNMP_ READER _SERVICE_FAILED | ERROR | Edge (PROCMON) | Nyansa SNMP Reader service failed. | |||
| EDGE_NYANSA _SNMP_ READER _SERVICE_DISABLED | WARN _ING | Edge (PROCMON) | Nyansa SNMP Reader service deactivated. | |||
| EDGE_USB_PORTS _ENABLED/GATEWAY _USB_PORTS _ENABLED | Edge/Gateway USB ports Enabled | INFO | Edge/Gateway (MGD) | Generated when USB ports is activated. | 4.5 | |
| EDGE_USB_PORTS _DISABLED/GATEWAY _USB_PORTS _DISABLED | Edge/Gateway USB ports Disabled | INFO | Edge/Gateway (MGD) | Generated when USB ports is deactivated. | 4.5 | |
| EDGE_USB_PORTS _ENABLE_FAILURE/GATEWAY _USB_ PORTS _ENABLE_FAILURE | Edge/Gateway USB ports Enable Failure | CRITI _CAL | Edge/Gateway (MGD) | Generated when procmon activates USB ports failure. | 4.5 | |
| EDGE_USB_PORTS _DISABLE_FAILURE/GATEWAY _USB_ PORTS _DISABLE_FAILURE | Edge/Gateway USB ports Disable Failure | CRITI _CAL | Edge/Gateway (MGD) | Generated when procmon deactivates USB ports failure. | 4.5 | |
| VNF_VM_EVENT | VNF VM Event | INFO | Edge (MGD) | Generated when VNF is powered on, powered off, deleted or deployed. Event detail will help distinguish the type. | ||
| VNF_INSERTION _EVENT | VNF insertion event | ALERT | Edge (MGD) | VNF insertion is activated or deactivated. Event detail will help distinguish the type. | ||
| VNF_IMAGE _DOWNLOAD_EVENT | VNF image download event | INFO | Edge (MGD) | VNF download is in progress, completed, or failed. Event detail will help distinguish the type. | ||
| MGD_START | Online | INFO | Edge (MGD) | Management daemon on Edge has started. | ||
| MGD_EXITING | Shutting Down | INFO | Edge (MGD) | Management service on an Edge is shutting down for a restart. | ||
| MGD_SET _CERT_SUCCESS | Set Certificate Successful | INFO | Edge (MGD) | New PKI certificate for Orchestrator communication is installed successfully on an Edge. | ||
| MGD_SET _CERT_FAIL | Set Certificate Failed | ERROR | Edge (MGD) | Installation of a new PKI certificate for Orchestrator communication on an Edge has failed. | ||
| MGD_CONF _APPLIED | Configuration Applied | INFO | Edge (MGD) | Configuration change made on the Orchestrator has been pushed to Edge and is successfully applied. | ||
| MGD_CONF _PENDING | New configuration pending | INFO | Edge (MGD) | New configuration is pending application (This event is currently NOT generated anywhere) | ||
| MGD_CONF _ROLLBACK | Bad configuration rolled back | CRITI _CAL | Edge (MGD) | Configuration policy sent from the Orchestrator had to be rolled back because it destabilized the Edge. | ||
| MGD_CONF _FAILED | Failed to apply configuration | ERROR | Edge (MGD) | Edge failed to apply a configuration change made on the Orchestrator. | ||
| MGD_CONF _UPDATE_INVALID | Invalid software update configuration | WARN _ING | Edge (MGD) | Edge has been assigned an Operator Profile with an invalid software image that the Edge cannot use. | ||
| MGD_DEVICE _CONFIG_WARNING | WARN _ING | Edge (MGD) | Inconsistent device settings are detected. MGD continues with warnings. | |||
| MGD_DEVICE _CONFIG_ERROR | ERROR | Edge (MGD) | Invalid device settings are detected by MGD. | |||
| MGD_SWUP _IGNORED_UPDATE | Software update ignored | INFO | Edge (MGD) | Software update is ignored at the activation time, because Edge is already running that version. | ||
| MGD_SWUP _INVALID_SWUPDATE | Invalid software update | WARN _ING | Edge (MGD) | Software update package received from the Orchestrator is invalid. | ||
| MGD_SWUP _DOWNLOAD_FAILED | Software download failed | ERROR | Edge (MGD) | Download of an Edge software update image has failed. | ||
| MGD_SWUP _UNPACK_FAILED | Software update unpack failed | ERROR | Edge (MGD) | Edge has failed to unpack the downloaded software update package. | ||
| MGD_SWUP _INSTALL_FAILED | Software update install failed | ERROR | Edge (MGD) | Edge software update installation failed. | ||
| MGD_SWUP _INSTALLED | Software update | INFO | Edge (MGD) | Software update was successfully downloaded and installed. | ||
| MGD_SWUP _REBOOT | Restart after software update | INFO | Edge (MGD) | Edge is being rebooted after a software update. | ||
| MGD_SWUP _STANDBY _UPDATE_START | Standby device software update started | INFO | Edge (MGD) | Edge send upgrade message to standby when it detect peer software version is not same with Active Edge or Active Edge received upgrade command from Orchestrator. | ||
| MGD_SWUP _STANDBY _UPDATE_FAILED | Standby device software update failed | ERROR | Edge (MGD) | Active Edge report standby upgrade failed if it fail to send upgrade command to peer or standby fail to upgrade for more than 5 minutes | ||
| MGD_SWUP _STANDBY_UPDATED | Standby device software update completed | INFO | Edge (MGD) | When Active Edge detects standby comes up with expected image version | ||
| MGD_VCO _ADDR_RESOLV_FAILED | Cannot resolve Orchestrator address | WARN _ING | Edge (MGD) | DNS resolution of the Orchestrator address failed. | ||
| MGD_DIAG _REBOOT | User-initiated restart | INFO | Edge (MGD) | Edge is rebooted by a Remote Action from the Orchestrator. | ||
| MGD_DIAG _RESTART | Services restarted | INFO | Edge (MGD) | Data plane service on the SEdge is restarted by a Remote Action from the Orchestrator. | ||
| MGD_SHUTDOWN | Powered off | INFO | Edge (MGD) | Edge diagnostic shutdown based on user request. | ||
| MGD_HARD_RESET | Reset to factory defaults | INFO | Edge (MGD) | Edge is restored to its factory-default software and configuration. | ||
| MGD_DEACTIVATED | Deactivated | INFO | Edge (MGD) | Edge is deactivated based on user request by mgd. | ||
| MGD_NETWORK _SETTINGS_UPDATED | Network settings updated | INFO | Edge (MGD) | Network settings are applied to an Edge. | ||
| MGD_NETWORK _MGMT_IF_BROKEN | Management Network incorrectly set up | ALERT | Edge (MGD) | Management network is set up incorrectly. | ||
| MGD_NETWORK _MGMT_IF_FIXED | Network was restarted twice to fix Management Network inconsistency | WARN _ING | Edge (MGD) | Network is restarted twice to fix the Management Network inconsistency. | ||
| MGD_INVALID _VCO_ADDRESS | Unable to heartbeat to new VCO %(newprimary)s, keep talking to old VCO %(oldprimary)s | WARN _ING | Edge (MGD) | Invalid address for Orchestrator was sent in a management plane policy update and was ignored. | ||
| MGD_ACTIVATION _PARTIAL | Activation incomplete | INFO | Edge (MGD) | Edge is activated partially, but a software update failed. | ||
| MGD_REBOOT _DIAG_BUNDLE | Generating diagnostic bundle before reboot | INFO | Edge (MGD) | When the diagnostic bundle is generated before reboot. | 5.0 | |
| MGD_ACTIVATION _SUCCESS | Activated | INFO | Edge (MGD) | Edge has been activated successfully. | ||
| MGD_ACTIVATION _ERROR | Activation failed | ERROR | Edge (MGD) | Edge activation failed. Either the activation link was not correct, or the configuration was not successfully downloaded to the Edge. | ||
| MGD_HA_TERMINATED | HA disabled on Edge | INFO | Edge (MGD) | Standby Edge send this event when HA is deactivated. | ||
| EDGE_INTERFACE _DOWN | Edge Interface Down | INFO | Edge (MGD) | Generated by hotplug scripts when the interface is down. | ||
| EDGE_INTERFACE_UP | Edge Interface Up | INFO | Edge (MGD) | Generated by hotplug scripts when the interface is up. | ||
| EDGE_KERNEL _PANIC | ALERT | Edge (MGD) | Edge operating system has encountered a critical exception and must reboot the Edge to recover. An Edge reboot is disruptive to customer traffic for 2-3 minutes while the Edge completes the reboot. | |||
| MGD_MFRMUP _IGNORED_UPDATE | Modem Firmware update ignored: <error message> | ALERT | Edge (MGD) | Generated when modem firmware update is ignored. | 5.0 | |
| MGD_MFRMUP _INVALID _MFRMUPDATE | Invalid Modem Firmware update applied: <error message> | INFO | Edge (MGD) | Generated when invalid modem firmware update is applied. | 5.0 | |
| MGD_MFRMUP _INCOMPATIBLE _UPDATE | In compatible Device or Factory Image: <error message> | WARN _ING | Edge (MGD) | Generated when the device is incompatible for modem firmware update. | 5.0 | |
| MGD_MFRMUP _DOWNLOAD_FAILED | Error downloading MFW ver <version> <build> | WARN _ING | Edge (MGD) | Generated when error occurs downloading the modem firmware update version. | 5.0 | |
| MGD_MFRMUP _UNPACK_FAILED | Error unpacking MFW ver <version> bu <build> | ERROR | Edge (MGD) | Generated when the modem firmware update unpacking failed. | 5.0 | |
| MGD_MFRMUP _INSTALL_FAILED | Error installing MFW ver <version> bu <build> | ERROR | Edge (MGD) | Generated when the modem firmware update installation failed. | 5.0 | |
| MGD_MFRMUP _INSTALLED | Installed downloaded MFW ver <version> bu <build> | ERROR | Edge (MGD) | Generated when the modem firmware update version is installed. | 5.0 | |
| MGD_MFRMUP _UPGRADE_PROGRESS | MFW update in progress ver <version> bu <build> | INFO | Edge (MGD) | Generated when the modem firmware upgrade is in progress. | 5.0 | |
| MGD_MFRMUP _REBOOT | Edge is restarting into new MFW version <version> build <build> | INFO | Edge (MGD) | Generated when the Edge restarts with new modem firmware update version. | 5.0 | |
| MGD_MFRMUP _STANDBY_ UPDATE _START | Begin HA Standby update with new MFW | INFO | Edge (MGD) | Generated when the HA Standby update with new modem firmware version started. | 5.0 | |
| MGD_MFRMUP _STANDBY_ UPDATE _FAILED | Failed HA Standby update with new MFW | ERROR | Edge (MGD) | Generated when the HA Standby update with new modem firmware version failed. | 5.0 | |
| MGD_MFRMUP _STANDBY_UPDATED | Succeeded HA Standby update with new MFW | INFO | Edge (MGD) | Generated when the HA Standby update with new modem firmware version succeeded. | 5.0 | |
| EDGE_OSPF_NSM | Edge OSPF NSM Event | INFO | Edge (EDGED) | Edge send this event when OSPF neighbor state changes. | ||
| IP_SLA_PROBE | IP SLA Probe | INFO | Edge (EDGED) | Edge generates when IPSLA state changes. | ||
| IP_SLA_RESPONDER | IP SLA Responder | ALERT, INFO | Edge (EDGED) | When IPSLA responder state changes from up to down and vice versa. | ||
| ALL_CSS_DOWN | ALL_CSS_DOWN | ALERT | Edge (EDGED) | When all CSS paths go down. | ||
| CSS_UP | CSS_UP | ALERT | Edge (EDGED) | When at least one CSS path is up. | ||
| LINK_MTU | Link MTU detected | INFO | Edge (EDGED) | Link MTU detected. The Gateway has detected the MTU for this WAN link and all traffic sent on this link will account for that MTU reading. For Release 3.2.x and earlier, VeloCloud software uses RFC 1191 Path MTU Discovery, which relies on receiving an ICMP error (fragmentation needed) from an upstream device in order to discover the MTU. On Release 3.3.x and later, the Path MTU Discovery has been enhanced to use packet layer Path MTU Discovery (RFC 4821). | ||
| PORT_SCAN _DETECTED | Port scan detected | INFO | Edge (EDGED) | If Stateful firewall detects host scanning then this event would be logged along with the IP address and port number. | ||
| PEER_UNUSABLE | Peer unusable | ALERT | Edge (EDGED) | Peer is unusable. | Deprecated | |
| PEER_USABLE | Peer usable | INFO | Edge (EDGED) | Peer is usable. | Deprecated | |
| BW_UNMEASURABLE | Error measuring bandwidth | ALERT | Edge (EDGED) | Bandwidth measurement failed to the Primary Gateway. Reattempt at measurement in 30minutes. Reasons include a link suffering some quality issue like excessive loss or latency. This message should only be seen on Edge's using Release 3.1.x or lower as this was removed beginning with Edge Release 3.2.0. | ||
| SLOW_START_CAP_MET | Bandwidth measured exceeds the slow start cap. Moving to burst mode. | NOTICE | Edge (EDGED) | Bandwidth measurement Slow-start limit of 175 Mbps exceeded. Link will be remeasured in Burst mode to ensure the correct measurement of a 175+ Mbps WAN link. | ||
| EDGE_BFD_CONFIG | INFO | Edge (EDGED) | BFD configured with incorrect local address. | |||
| FLOOD_ATTACK _DETECTED | INFO | Edge (EDGED) | Generated when a malicious host floods the Edge with new connections. | |||
| LINK_ALIVE | Link alive | INFO | Edge (EDGED) | When link state (link_fsm) becomes alive. | ||
| LINK_DEAD | Link dead | ALERT | Edge (EDGED) | When link state (link_fsm) becomes dead. | ||
| LINK_USABLE | Link usable | INFO | Edge (EDGED) | When link state (link_fsm) becomes usable. | ||
| LINK_UNUSABLE | Link unusable | ALERT | Edge (EDGED) | When link state (link_fsm) becomes unusable. | ||
| VPN_DATACENTER _STATUS | VPN Tunnel state change | INFO, ERROR | Edge (EDGED) | VPN Tunnel state change. | ||
| INTERFACE_CONFIG _ERROR | Interface config error | ALERT | Edge (EDGED) | |||
| HA_STANDBY _ACTIVATED | HA Standby Activated | INFO | Edge (EDGED) | When active Edge detects standby peer send this event to Orchestrator to activate standby Edge. | ||
| HA_INTF_STATE _CHANGED | HA Interface State Changed | ALERT | Edge (EDGED) | HA interface went down/up. | ||
| HA_GOING_ACTIVE | High Availability Going Active | INFO | Edge (EDGED) | Standby Edge transition to Active Edge after detecting no heartbeat for more than 700ms. | ||
| HA_FAILED | High Availability Peer State Unknown | INFO | Edge (EDGED) | Active Edge detects no heartbeat or activity from standby Edge for more than 700 milliseconds. | ||
| HA_READY | High Availability Ready | INFO | Edge (EDGED) | Active Edge detects activated standby peer. | ||
| VCO_IDENTIFIED _HA_FAILOVER | Edge HA Failover Identified | ALERT | Orchestrator | Orchestrator has detected that a High Availability failover has occurred on the Edge. | 5.2 | |
| VCO_IDENTIFIED _HA_FAILURE | Edge HA Failure Identified | ALERT | Orchestrator | Orchestrator has detected that the Standby Edge has gone down. | 5.2 | |
| HA_UPDATE _FAILOVER_TIME | Updating HA Failover time from ####ms to ####ms | INFO | Orchestrator | User changed the failover time for when an HA Edge will failover due to a lack of heartbeat response. This time is measured in milliseconds (ms). | 5.2 | |
| HA_RESET _FAILOVER_TIME | Failover time reset from ####ms to ####ms. | INFO | Edge (EDGED) | When an HA Edge's system has been stable for 60 seconds, the process reduces the failover time by 50%. | 5.2 | |
| HA_WAN_LINK _ACTIVE | <Edge-Name> <Active Serial Number> configured with <Standard, Enhanced, or Mixed-Mode> HA, with WAN <Link ID> is <Down or Up> | ALERT | Edge (EDGED) | For all HA topologies (Standard, Enhanced, and Mixed-Mode) when the WAN interface goes Up or Down on the Active Edge. | 5.2 | |
| HA_WAN_LINK _STANDBY | <Edge-Name> <Standby Serial Number> configured with <Standard, Enhanced, or Mixed-Mode> HA, with WAN <Link ID> is <Down or Up> | ALERT | Edge (EDGED) | For all HA topologies (Standard, Enhanced, and Mixed-Mode) when the WAN interface goes Up or Down on the Standby Edge. | 5.2 | |
| HA_LAN_LINK _ACTIVE | <Edge-Name> <Active Serial Number> configured with <Standard, Enhanced, or Mixed-Mode> HA, with WAN <Link ID> is <Down or Up> | ALERT | Edge (EDGED) | For all HA topologies (Standard, Enhanced, and Mixed) when the LAN interface goes Up or Down on the Active Edge. | 5.2 | |
| HA_LAN_LINK _STANDBY | <Edge-Name> <Standby Serial Number> configured with <Standard, Enhanced, or Mixed-Mode> HA, with LAN <Link ID> is <Down or Up> | ALERT | Edge (EDGED) | For all HA topologies (Standard, Enhanced, and Mixed) when the LAN interface goes Up or Down on the Standby Edge. | 5.2 | |
| FW_UPGRADE _PENDING- CPLD | CPLD Firmware being updated during software upgrade- edge may be offline for 3- 5 minutes. | INFO | Orchestrator | A firmware upgrade action has been initiated and sent by the Orchestrator to the Edge. | 5.2 | |
| FW_UPGRADE _SUCCESS | Note- that an edge physical reboot was required due to the edge not responding once the PENDING message was received. | INFO | Edge (EDGED) | The Edge firmware upgrade was successful and required Edge reboots to complete. | 5.2 | |
| HA_SPLIT_BRAIN _DETECTED | HA split-brain detected, peer will restart | ALERT | Orchestrator | The Orchestrator has detected that both HA Edges are in an Active state. This is known as an Active-Active or Split Brain state. If other methods of preventing a Split-Brain state are not successful, the Orchestrator resolves this by triggering a restart of the Standby Edge (listed here as "peer") that is erroneously functioning as Active. | 5.2 | |
| HA_SPLITBRAIN _RESOLVED | HA split-brain resolved, peer will move to standby state | NOTICE | Orchestrator | The Standby Edge (listed here as "peer") in an Active state has completed its restart and is demoted back to its correct Standby state. As a result, the Active-Active or Split Brain state is resolved. | 5.2 | |
| MGD_UNREACHABLE | Management Proxy unreachable | EMER _GENCY | Edge (EDGED) | Data plane process could not communicate to the management plane proxy. | ||
| VRRP_INTO _MASTER_STATE | VRRP HA updated to Primary state | INFO | Edge (EDGED) | VRRP get into Primary state | ||
| VRRP_OUT_OF _MASTER_STATE | VRRP HA updated out of Primary state | INFO | Edge (EDGED) | VRRP get out of Primary state. | ||
| VRRP_FAIL_INFO | VRRP failed | INFO | Edge (EDGED) | VRRP failed. | ||
| EDGE_HEALTH _ALERT | Edge Health Alert | EMER _GENCY | Edge (EDGED) | Data plane is unable to allocate necessary resources for packet proces _sing. | ||
| EDGE_STARTUP | Edge service startup | INFO | Edge (EDGED) | Edge is running in mgmt-only mode. | ||
| EDGE_DHCP _BAD_OPTION | Invalid DHCP Option | WARN _ING | Edge (EDGED) | Edge is configured with an invalid DHCP option. | ||
| EDGE_NEW_USER | New client user seen | INFO | Edge (EDGED) | New or updated client user detected on a given MAC address. | ||
| EDGE_NEW_DEVICE | New client device seen | INFO | Edge (EDGED) | A new device is detected during DHCP. | ||
| INVALID_JSON | CRITI _CAL | Edge (EDGED) | The Edged received invalid JSON data from the mgd. | |||
| QOS_OVERRIDE | QoS override | INFO | Edge (EDGED) | Remote diagnostics is performed to flip cloud traffic to be routed according to business policy OR sent to the Gateway OR or bypass the Gateway. | ||
| EDGE_L2_LOOP _DETECTED | Edge L2 loop detected | ERROR | Edge (EDGED) | Edge L2 loop is detected. | ||
| EDGE_TUNNEL _CAP_WARNING | Edge Tunnel CAP warning | WARN _ING | Edge (EDGED) | Edge has reached its maximum tunnel capacity. | ||
| Interface LoS | LoS no longer seen on interface <iface-name>/LoS detected on interface <iface-name> | ALERT | Edge (EDGED) | Loss of Signal state changed on the interface in HA setup. | 4.4 | |
| EDGE_LOCALUI _LOGIN | Edge Local UI Login | INFO | Edge | LOCAL UI login is successful for a user. | ||
| EDGE_MEMORY _USAGE_ERROR | Memory Usage Critical | ERROR | Edge | Resource Monitor process detects Edge memory utilization has exceeded defined thresholds and reaches 70% threshold. The Resource Monitor waits for 90 seconds to allow the Edged process to recover from a possible temporary spike in memory usage. If memory usage persists at a 70% or higher level for more than 90 seconds, the Edge will generate this error message and send this event to the Orchestrator. | ||
| EDGE_MEMORY _USAGE_WARNING | Memory Usage Warning | WARN _ING | Edge | Resource Monitor process detects Edge memory utilization is 50% or more of the available memory. This event will be sent to the Orchestrator every 60 minutes until the memory usage drops under the 50% threshold. | ||
| EDGE_RESTARTING | User-initiated Edge service restart | WARN _ING | Edge | User initiates an Edge service restart. | ||
| EDGE_REBOOTING | User-initiated Edge reboot | WARN _ING | Edge | User initiates an Edge reboot. | ||
| EDGE_HARD_RESET | User-initiated Edge hard reset | WARN _ING | Edge | Edge hard reset | ||
| EDGE_DEACTIVATED | Edge deactivated | WARN _ING | Edge | Edge has all its configuration cleared and is not associated with a customer site. The software build remains unchanged. | ||
| EDGE_CONSOLE_LOGIN | Edge console login | INFO | Edge | Edge login via console port. | ||
| EDGE_COMMAND | Edge Command | INFO | Edge | Generated by an Edge during remote diagnostics when executing Edge commands. | ||
| EDGE_BIOS_UPDATED | Edge BIOS updated | INFO | Edge | Generated by 12-upgrade-bios.sh script when Edge BIOS is successfully updated. | ||
| EDGE_BIOS _UPDATE_FAILED | Edge BIOS update failed | ERROR | Edge | Generated by 12-upgrade-bios.sh script when Edge BIOS update failed. | ||
| IPV6_ADDR_DELETED | Deleted IPv6 address <v6addr> on interface/sub-interface <iface/subiface name> | INFO | Edge/Gateway | When IPv6 interface is deleted on interface or sub-interface. | 4.4 | |
| IPV6_NEW _ADDR_ADDED | Added new IPv6 address <v6-addr> on interface <ifacename> | INFO | Edge | When IPv6 address is added on interface. | 4.4 | |
| IPV6_ADDR _DEPRECATED | Deprecated IPv6 address <v6-addr> on interface <iface-name> | INFO | Edge | When IPv6 address gets deprecated on an interface. | 4.4 | |
| IPV6_ADDR _PREFERRED | Preferred IPv6 address <v6-addr> on interface <iface-name> | INFO | Edge | When IPv6 address moves from Deprecated state to Preferred state. | 4.4 | |
| NDP_MAC_ADDR _CHANGE | Neighbor MAC address change detected in interface <iface-name> | INFO | Edge | When IPv6 neighbor MAC address change is detected. | 4.4 | |
| EDGE_INTF_CONFIG | DAD Failed for IPv6 Address <v6-addr> in interface <iface-name> | INFO | Edge | When IPv6 NDP DAD is failed. | 4.4 | |
| EDGE_SHUTTING _DOWN | Edge is shutting down- must be restarted by power-cycling | WARN _ING | Edge (LUA Backend) | When Edge is shutting down. | 4.4 | |
| BIOS_PHY _RESET_CMOS_SET | BIOS- Phy reset CMOS bit is set/BIOS- Phy reset CMOS bit cannot be set | WARN _ING | Edge | When CMOS (BIOS) is reset to its factory default settings. | 4.4 | |
| FW_UPGRADE _PENDING | CPLD Firmware being updated during software upgrade- edge may go offline for 3-5 minutes | WARN _ING | Edge | When CPLD Firmware is being updated during software upgrade. | 4.4 | |
| EVDSL_IFACE _UP_EVENT | Contains JSON string with evdsl Modem name, status, serial number | INFO | Edge | Generated when EVDSL interface moves to Up state. | 4.5 | |
| EVDSL_IFACE _DOWN_EVENT | contains JSON string with evdsl Modem name, status, serial number | INFO | Edge | Generated when EVDSL interface moves to Down state. | 4.5 | |
| NAT_PORT _ASSIGN_FAIL | NAT Ports exhausted from <src_ip> to <dst_ip>:<dport> | WARN _ING | Edge/Gateway | Generated when NAT port allocation range is exhausted. | 4.5 | |
| IPV6_MAX _DAD_FAILED | IPv6 < link local / RA > stable secret address generation failed on interface <iface name> after multiple DAD failures | ALERT | Edge | Generated when we fail to generate stateless IPv6 address after multiple DAD failures. | 4.5 | |
| IPV6_ADDR _GEN_FAILED | IPv6 <link local / RA> stable secret address generation failed on interface <iface name> after generating multiple invalid addresses | ALERT | Edge | Generated when IPv6 stable secret address generation failed on interface after generating multiple invalid addresses. | 4.5 | |
| INVALID_STATIC _ROUTE | Rejected invalid routes <route-prefix>/0 flag <route flags in hex> | ALERT | Edge | Generated for invalid static route. | 4.5 | |
| INVALID_OSPF _ROUTE | Rejected invalid routes <route-prefix>/0 flag <route flags in hex> | ALERT | Edge | Generated for invalid OSPF routes. | 4.5 | |
| INVALID_BGP _ROUTE | Rejected invalid routes <route-prefix>/0 flag <route flags in hex> | ALERT | Edge | Generated for invalid BGP routes. | 4.5 | |
| INVALID_REMOTE _OSPF_ROUTE | Rejected invalid routes <route-prefix>/0 flag <route flags in hex> | ALERT | Edge | Generated for invalid remote OSPF route. | 4.5 | |
| INVALID_REMOTE _BGP_ROUTE | Rejected invalid routes <route-prefix>/0 flag <route flags in hex> | ALERT | Edge | Generated for invalid remote BGP route. | 4.5 | |
| INVALID_OVERLAY _ROUTE | Rejected invalid routes <route-prefix>/0 flag <route flags in hex> | ALERT | Edge | Generated for invalid Overlay route. | 4.5 | |
| INVALID_ROUTE | Rejected invalid routes <route-prefix>/0 flag <route flags in hex> | ALERT | Edge | Generated for invalid routes. | 4.5 | |
| EDGE_BFDv6_CONFIG | Incorrect local address <IP address>. IP Address not present | INFO | Edge | Generated when invalid IPv6 BFD configuration is received. | 4.5 | |
| EDGE_USB _DEVICE_INSERTED | Edge USB device inserted | ALERT | Edge | Generated when USB device is inserted. | 4.5 | |
| EDGE_USB _DEVICE_REMOVED | Edge USB device removed | ALERT | Edge | Generated when USB device is removed. | 4.5 | |
| WIFI_CARD_DEAD | Wificard <device name> at <port> is no longer usable, reboot required to recover | EMER _GENCY | Edge | Generated when WiFi card at a port is no longer usable. | 4.5 | |
| DNS_CACHE _LIMIT_REACHED | DNS Cache Max Limit (<cache limit of the edge>) Reached | ALERT | Edge | Generated when DNS cache limit is reached on the Edge. | 4.5.1, 5.0 | |
| PEER_MISMATCH | PEER_MISMATCH | ALERT | Edge (EDGED) | When there is a peer name mismatch between MP_INIT_REQ and MP_INIT_ACK during Edge and Gateway tunnel creation. | 5.1 | |
| EDGE_CONGESTED | Congestion alert due to either a high number of packet drops/scheduler drops | WARN _ING | Edge (EDGED) |
|
5.1 | |
| EDGE_STABLE | Congestion due to a high number of packet drops/scheduler drops subsided | NOTICE | Edge (EDGED) |
|
5.1 | |
| MGD_ATPUP _INVALID_ IDPS _SIGNATURE | MGD_ATPUP _INVALID_ IDPS _SIGNATURE | ERROR | Edge (MGD) | Generated when there is an invalid suricata package. | 5.2 | |
| MGD_ATPUP_DOWNLOAD _ IDPS_SIGNATURE _FAILED | MGD_ATPUP_DOWNLOAD _ IDPS_SIGNATURE _FAILED | ERROR | Edge (MGD) | Generated when downloading of suricata package fails. | 5.2 | |
| MGD_ATPUP_DECRYPT _ IDPS_SIGNATURE _FAILED | MGD_ATPUP_DECRYPT _ IDPS_SIGNATURE _FAILED | ERROR | Edge (MGD) | Generated when unpacking of suricata package fails. | 5.2 | |
| MGD_ATPUP_APPLY _ IDPS_SIGNATURE_FAILED | MGD_ATPUP_APPLY _IDPS_ SIGNATURE _FAILED | ERROR | Edge (MGD) | Generated due to error in applying Suricata files. | 5.2 | |
| MGD_ATPUP_APPLY _IDPS_ SIGNATURE _SUCCEEDED | MGD_ATPUP_APPLY_IDPS _ SIGNATURE _SUCCEEDED | INFO | Edge (MGD) | Generated when suricata files are successfully applied. | 5.2 | |
| MGD_ATPUP _STANDBY_ UPDATE _START | MGD_ATPUP _STANDBY_ UPDATE _START | INFO | Edge (MGD) | Generated when HA Standby update with new EFS IDPS Signature version is started. | 5.2 | |
| MGD_ATPUP _STANDBY_ UPDATE _FAILED | MGD_ATPUP _STANDBY_ UPDATE _FAILED | ERROR | Edge (MGD) | Generated when HA Standby update with new EFS IDP Signature version fails. | 5.2 | |
| MGD_ATPUP _STANDBY_UPDATED | MGD_ATPUP _STANDBY_UPDATED | INFO | Edge (MGD) | Generated when HA Standby update with new EFS IDPS Signature version is successfully applied. | 5.2 | |
| HA_SET_PEER _KEYS_SUCCESSFUL | HA_SET_PEER _KEYS_SUCCESSFUL | NOTICE | Edge (MGD) | Generated by an Edge deployed in a cluster which confirms that it has successfully saved the HA Peer keys for that cluster. | 5.4 | |
| EFS_IDPS_NOT _READY | EFS_IDPS_NOT _READY | ALERT | Edge (MGD) | Generated when packets are dropped while on-prem Orchestrator is not connected to GSM and so IDPS signatures are not ready. | 6.0 | |
| EFS_IP_DB _VERSION_UPDATE | EFS_IP_DB _VERSION_UPDATE | INFO | Edge (MGD) | Generated when loading of IP database succeeds or fails. | 6.0 | |
| EFS_IP_RTU _DB_VERSION_UPDATE | EFS_IP_RTU_DB _VERSION_UPDATE | INFO | Edge (MGD) | Generated when loading of IP RTU database succeeds or fails. | 6.0 | |
| EFS_URL_DB _VERSION_UPDATE | EFS_URL_DB_ VERSION_UPDATE | INFO | Edge (MGD) | Generated when loading of URL database succeeds or fails. | 6.0 | |
| EFS_URLF_MAL _IP_NOT_READY | EFS_URLF_MAL_ IP_NOT_READY | ALERT | Edge (MGD) | Generated when packets are dropped while EFS is activated but URLF/MAL-IP filtering is not ready. | 6.0 | |
| EFS_URL_RTU _DB_VERSION_UPDATE | EFS_URL_RTU_DB _VERSION_UPDATE | INFO | Edge (MGD) | Generated when loading of URL RTU database succeeds or fails. | 6.0 | |
| MGD_EFS_NTICS _ REGISTRATION _SUCCEEDED | MGD_EFS_NTICS _ REGISTRATION _SUCCEEDED | INFO | Edge (MGD) | Generated when Arista Threat Intelligent Cloud Service (NTICS) registration with Client ID succeeds. | 6.0 | |
| MGD_EFS_NTICS _ REGISTRATION _FAILED | MGD_EFS_NTICS _ REGISTRATION _FAILED | ERROR | Edge (MGD) | Generated when NTICs registration fails with retry count. | 6.0 | |
| MGD_EFS_NTICS _AUTHENTICATION _ SUCCEEDED | MGD_EFS_NTICS _AUTHENTICATION _ SUCCEEDED | INFO | Edge (MGD) | Generated when NTICS authentication succeeds. | 6.0 | |
| MGD_EFS_NTICS _AUTHENTICATION _ FAILED | MGD_EFS_NTICS _AUTHENTICATION _ FAILED | ERROR | Edge (MGD) | Generated when NTICS authentication fails. | 6.0 | |
| ACTOR_PORT_STATE_CHANGED | ACTOR_PORT_STATE_CHANGED | NOTICE | Orchestrator | Generated when the LACP state of a member port of the bond changes. Disconnecting the link between the member ports on both devices also triggers this event. | 6.4 | |
| PARTNER_PORT_STATE_CHANGED | PARTNER_PORT_STATE_CHANGED | NOTICE | Orchestrator | Generated when the LACP state of a member port of the bond changes. Disconnecting the link between the member ports on both devices also triggers this event. | 6.4 | |
| EDGE_PHYSICAL_LINK_DOWN | Edge Physical Link Down | INFO | Orchestrator | Removing the physical cable from the Edge triggers this event. The event EDGE_INTERFACE_DOWN follows the event EDGE_PHYSICAL_LINK_DOWN because there is a netifd change. | ||
| EDGE_PHYSICAL_LINK_UP | Edge Physical Link Up | INFO | Orchestrator | Attaching the physical cable to the Edge triggers this event. |
Supported Events for Syslogs
The following table describes all the possible VeloCloud Edge events that could be exported to Syslog collectors.
| Events | Severity | Description |
|---|---|---|
| BW_UNMEASURABLE | ALERT | Generated by an Edge when the path bandwidth is unmeasurable. |
| BGP_NEIGHBOUR_UP | INFO | Generated by an Edge when the BGP Neighbor is up. The following is the sample syslog message for this event:
|
| BGP_NEIGHBOUR_DOWN | ALERT | Generated by an Edge when the BGP Neighbor is down. The following is the sample syslog message for this event:
|
| EDGE_BIOS_UPDATE_FAILED | ERROR | |
| EDGE_BIOS_UPDATED | INFO | Generated by 12-upgrade-bios.sh script when Edge BIOS update failed. |
| EDGE_CONSOLE_LOGIN | INFO | Generated by an Edge during login via console port. |
| EDGE_DEACTIVATED | WARNING | Generated when an Edge has all its configuration cleared and is not associated with a customer site. The software build remains unchanged. |
| EDGE_DHCP_BAD_OPTION | WARNING | Generated when the Edge is configured with an invalid DHCP option. |
| EDGE_DISK_IO_ERROR | WARNING | Generated by an Edge when the Disk IO error has occurred during upgrade/downgrade. |
| EDGE_DISK_READONLY | CRITICAL | Generated by an Edge when a Disk turns to read-only mode. |
| EDGE_DNSMASQ_FAILED | ERROR | Generated when Dnsmasq service failed. |
| EDGE_DOT1X_SERVICE_DISABLED | WARNING, CRITICAL | Generated by vc_procmon when the Edge 802.1x service is deactivated. |
| EDGE_DOT1X_SERVICE_FAILED | ERROR | Generated by vc_procmon when the Edge 802.1x service failed. |
| EDGE_HARD_RESET | WARNING | Generated when user has initiated an Edge hard reset. |
| EDGE_HEALTH_ALERT | EMERGENCY | Generated by the Edge when the data plane is unable to allocate necessary resources for packet processing. |
| EDGE_INTERFACE_DOWN | INFO | Generated by hotplug scripts when the interface is down. |
| EDGE_INTERFACE_UP | INFO | Generated by hotplug scripts when the interface is up. |
| EDGE_KERNEL_PANIC | ALERT | Generated by an Edge when the Edge operating system has encountered a critical exception and must reboot the Edge to recover. An Edge reboot is disruptive to customer traffic for 2-3 minutes while the Edge completes the reboot. |
| EDGE_L2_LOOP_DETECTED | ERROR | Generated when Edge L2 loop is detected. |
| EDGE_LED_SERVICE_DISABLED | WARNING, CRITICAL | Generated by vc_procmon when the Edge LED service is deactivated. |
| EDGE_LED_SERVICE_FAILED | ERROR | Generated by vc_procmon when the Edge LED service failed. |
| EDGE_LOCALUI_LOGIN | INFO | Generated when LOCAL UI login is successful for a user. |
| EDGE_MEMORY_USAGE_ERROR | ERROR | Generated by an Edge when the Resource Monitor process detects Edge memory utilization has exceeded defined thresholds and reaches 70% threshold. The Resource Monitor waits for 90 seconds to allow the edged process to recover from a possible temporary spike in memory usage. If memory usage persists at a 70% or higher level for more than 90 seconds, the Edge will generate this error message and send this event to the Orchestrator. |
| EDGE_MEMORY_USAGE_WARNING | WARNING | Generated by an Edge when the Resource Monitor process detects Edge memory utilization is 50% or more of the available memory. This event will be sent to the Orchestrator every 60 minutes until the memory usage drops under the 50% threshold. |
| EDGE_MGD_SERVICE_DISABLED | CRITICAL, WARNING | Generated by vc_procmon when mgd is unable to start or deactivated for too many failures. |
| EDGE_MGD_SERVICE_FAILED | ERROR | Generated by vc_procmon when the mgd service failed. |
| EDGE_NEW_DEVICE | INFO | Generated when a new DHCP client is identified by processing the DHCP request. |
| EDGE_NEW_USER | INFO | Generated when a new client user is added. |
| EDGE_OSPF_NSM | INFO | Generated by the Edge when the OSPF Neighbor state Machine (NSM) state occurred. |
| EDGE_REBOOTING | WARNING | Generated when a user has initiated Edge reboot. |
| EDGE_RESTARTING | WARNING | Generated when a user has initiated Edge service restart. |
| EDGE_SERVICE_DISABLED | WARNING | Generated when the Edge data plane service is deactivated. |
| EDGE_SERVICE_ENABLED | WARNING | Generated when the Edge data plane service is enabled. |
| EDGE_SERVICE_FAILED | ERROR | Generated when the Edge data plane service failed. |
| EDGE_SHUTTING_DOWN | WARNING | Generated when an Edge is shutting down. |
| EDGE_STARTUP | INFO | Generated when an Edge is running in mgmt-only mode. |
| EDGE_SSH_LOGI | INFO | Generated by an Edge during login via SSH protocol. |
| EDGE_TUNNEL_CAP_WARNING | WARNING | Generated when an Edge has reached its maximum tunnel capacity. |
| EDGE_USB_PORTS_ENABLED | INFO | Generated when USB ports are enabled on an Edge. |
| EDGE_USB_PORTS_DISABLED | INFO | Generated when USB ports are deactivated on an Edge. |
| EDGE_USB_PORTS_ENABLE_FAILURE | CRITICAL | Generated by an Edge when the enable operation for its USB ports fails. |
| EDGE_USB_PORTS_DISABLE_FAILURE | CRITICAL | Generated by an Edge when the deactivate operation for its USB ports fails. |
| EDGE_USB_DEVICE_REMOVED | ALERT | Generated by an Edge when a device is removed from its USB port. |
| EDGE_USB_DEVICE_INSERTED | ALERT | Generated by an Edge when a device is inserted into its USB port. |
| EDGE_VNFD_SERVICE_DISABLED | WARNING, CRITICAL | Generated by vc_procmon when the Edge VNFD service is deactivated. |
| EDGE_VNFD_SERVICE_FAILED | ERROR | Generated by vc_procmon when the Edge VNFD service failed. |
| FLOOD_ATTACK_DETECTED | INFO | Generated when a malicious host floods the Edge with new connections. |
| GATEWAY_SERVICE_STATE_UPDATED | Generated when the Operator changes the Service State of a Gateway. | |
| HA_FAILED | INFO | HA Peer State Unknown -Generated when the Standby Edge has not sent a heartbeat response and only one of the two HA Edges is communicating with the Orchestrator and Gateways. |
| HA_GOING_ACTIVE | INFO | An HA failover. Generated when the Active High Availability (HA) Edge has been marked as down and the Standby is brought up to be the Active. |
| HA_INTF_STATE_CHANGED | ALERT | Generated when the HA Interface state is changed to Active. |
| HA_READY | INFO | Generated when both the Active and Standby Edges are up and synchronized. |
| HA_STANDBY_ACTIVATED | INFO | Generated when the HA Standby Edge has accepted the activation key, downloaded its configuration, and updated its software build. |
| HA_TERMINATED | INFO | Generated when HA has been deactivated on an Edge. |
| INVALID_JSON | CRITICAL | Generated when an Edge received an invalid response from MGD. |
| IP_SLA_PROBE | Up = INFO, Down = ALERT | Generated when an IP ICMP Probe state change. |
| IP_SLA_RESPONDER | Up = INFO, Down = ALERT | Generated when an IP ICMP Responder state change. |
| LINK_ALIVE | INFO | Generated when a WAN link is no longer DEAD. |
| LINK_DEAD | ALERT | Generated when all tunnels established on the WAN link have received no packets for at least seven seconds. |
| LINK_MTU | INFO | Generated when WAN link MTU is discovered. |
| LINK_UNUSABLE | ALERT | Generated when WAN link transitions to UNUSABLE state. |
| LINK_USABLE | INFO | Generated when WAN link transitions to USABLE state. |
| MGD_ACTIVATION_ERROR | ERROR | Generated when an Edge activation failed. Either the activation link was not correct, or the configuration was not successfully downloaded to the Edge. |
| MGD_ACTIVATION_PARTIAL | INFO | Generated when an Edge is activated partially, but a software update failed. |
| MGD_ACTIVATION_SUCCESS | INFO | Generated when an Edge has been activated successfully. |
| MGD_CONF_APPLIED | INFO | Generated when a configuration change made on the Orchestrator has been pushed to Edge and is successfully applied. |
| MGD_CONF_FAILED | INFO | Generated when the Edge failed to apply a configuration change made on the Orchestrator. |
| MGD_CONF_ROLLBACK | INFO | Generated when a configuration policy sent from the Orchestrator had to be rolled back because it destabilized the Edge. |
| MGD_CONF_UPDATE_INVALID | INFO | Generated when an Edge has been assigned an Operator Profile with an invalid software image that the Edge cannot use. |
| MGD_DEACTIVATED | INFO | Generated when an Edge is deactivated based on user request by mgd. |
| MGD_DEVICE_CONFIG_WARNING/ERROR | WARNING, INFO | Generated when an inconsistent/invalid device setting is detected. |
| MGD_DIAG_REBOOT | INFO | Generated when an Edge is rebooted by a Remote Action from the Orchestrator. |
| MGD_DIAG_RESTART | INFO | Generated when the data plane service on the Edge is restarted by a Remote Action from the Orchestrator. |
| MGD_EMERG_REBOOT | CRITICAL | Generated when an Edge is rebooted to recover from stuck processes by vc_procmon. |
| MGD_ENTER_LIVE_MODE | DEBUG | Generated when the management service on an Edge is entering the LIVE mode. |
| MGD_EXIT_LIVE_MODE | DEBUG | Generated when the management service on an Edge is exiting the LIVE mode. |
| MGD_EXITING | INFO | Generated when the management service on an Edge is shutting down for a restart. |
| MGD_EXTEND_LIVE_MODE | DEBUG | Generated by an Edge when Live mode is extended. |
| MGD_FLOW_STATS_PUSH_FAILED | DEBUG | Generated by an Edge when Flow stats pushed to Orchestrator failed. |
| MGD_FLOW_STATS_PUSH_SUCCEEDED | DEBUG | Generated by an Edge when Flow stats pushed to Orchestrator succeeded. |
| MGD_FLOW_STATS_QUEUED | INFO | Generated by an Edge when Flow stats pushed to Orchestrator is queued. |
| MGD_HARD_RESET | INFO | Generated when an Edge is restored to its factory-default software and configuration. |
| MGD_HEALTH_STATS_PUSH_FAILED | DEBUG | Generated by an Edge when Health stats pushed to Orchestrator failed. |
| MGD_HEALTH_STATS_PUSH_SUCCEEDED | DEBUG | Generated by an Edge when Health stats pushed to Orchestrator succeeded. |
| MGD_HEALTH_STATS_QUEUED | INFO | Generated by an Edge when Health stats pushed to Orchestrator is queued. |
| MGD_HEARTBEAT | INFO | Generated by an Edge when Heartbeat is generated to Orchestrator. |
| MGD_HEARTBEAT_FAILURE | INFO | Generated by an Edge when generated Heartbeat to Orchestrator failed. |
| MGD_HEARTBEAT_SUCCESS | INFO | Generated by an Edge when generated Heartbeat to Orchestrator succeeded. |
| MGD_INVALID_VCO_ADDRESS | WARNING | Generated when an invalid address for Orchestrator was sent in a management plane policy update and was ignored. |
| MGD_LINK_STATS_PUSH_FAILED | DEBUG | Generated by an Edge when Link stats pushed to Orchestrator failed. |
| MGD_LINK_STATS_PUSH_SUCCEEDED | DEBUG | Generated by an Edge when Link stats pushed to Orchestrator succeeded. |
| MGD_LINK_STATS_QUEUED | INFO | Generated by an Edge when Link stats pushed to Orchestrator is queued. |
| MGD_LIVE_ACTION_FAILED | DEBUG | Generated by an Edge when Live Action failed. |
| MGD_LIVE_ACTION_REQUEST | DEBUG | Generated by an Edge when Live Action is requested. |
| MGD_LIVE_ACTION_SUCCEEDED | DEBUG | Generated by an Edge when Live Action is succeeded. |
| MGD_NETWORK_MGMT_IF_BROKEN | ALERT | Generated when the Management network is set up incorrectly. |
| MGD_NETWORK_MGMT_IF_FIXED | WARNING | Generated when a Network is restarted twice to fix the Management Network inconsistency. |
| MGD_NETWORK_SETTINGS_UPDATED | INFO | Generated when new network settings are applied to an Edge. |
| MGD_SET_CERT_FAIL | ERROR | Generated when the installation of a new PKI certificate for Orchestrator communication on an Edge has failed. |
| MGD_SET_CERT_SUCCESS | INFO | Generated when a new PKI certificate for Orchestrator communication is installed successfully on an Edge. |
| MGD_SHUTDOWN | INFO | Generated when the Edge diagnostic shutdown based on user request. |
| MGD_START | INFO | Generated when the management daemon on the Edge has started. |
| MGD_SWUP_DOWNLOAD_FAILED | ERROR | Generated when the download of an Edge software update image has failed. |
| MGD_SWUP_DOWNLOAD_SUCCEEDED | DEBUG | Generated when the download of an Edge software update image has succeeded. |
| MGD_SWUP_IGNORED_UPDATE | INFO | Generated when a software update is ignored at the activation time, because Edge is already running that version. |
| MGD_SWUP_INSTALL_FAILED | ERROR | Generated when a software update installation failed. |
| MGD_SWUP_INSTALLED | INFO | Generated when a software update was successfully downloaded and installed. |
| MGD_SWUP_INVALID_SWUPDATE | WARNING | Generated when a software update package received from the Orchestrator is invalid. |
| MGD_SWUP_REBOOT | INFO | Generated when the Edge is being rebooted after a software update. |
| MGD_SWUP_STANDBY_UPDATE_FAILED | ERROR | Generated when a software update of the standby HA Edge failed. |
| MGD_SWUP_STANDBY_UPDATE_START | INFO | Generated when the HA standby software update has started. |
| MGD_SWUP_STANDBY_UPDATED | INFO | Generated when a software update of the standby HA Edge has started. |
| MGD_SWUP_UNPACK_FAILED | ERROR | Generated when an Edge has failed to unpack the downloaded software update package. |
| MGD_SWUP_UNPACK_SUCCEEDED | INFO | Generated when an Edge has succeeded to unpack the downloaded software update package. |
| MGD_UNREACHABLE | EMERGENCY | Generated when the data plane process could not communicate to the management plane proxy. |
| MGD_VCO_ADDR_RESOLV_FAILED | WARNING | Generated when the DNS resolution of the Orchestrator address failed. |
| MGD_WEBSOCKET_INIT | DEBUG | Generated when a WebSocket communication is initiated with the Orchestrator. |
| MGD_WEBSOCKET_CLOSE | DEBUG | Generated when a WebSocket communication with the Orchestrator is closed. |
| NSD_MIGRATION_TASKS_QUEUED | Generated when the Enterprise customers have pending migration tasks for the Gateways that are attached to Non SD-WAN Destinations. | |
| PEER_UNUSABLE | ALERT | Generated when overlay connectivity to a peer goes down while transmitting peer stats. |
| PEER_USABLE | INFO | Generated when overlay connectivity to a peer resumes after a period of unusability. |
| PORT_SCAN_DETECTED | INFO | Generated when port scan is detected. |
| QOS_OVERRIDE | INFO | Generated to flip traffic path (gateway or direct). |
| REBALANCE_EDGE_SUCCEEDED | Generated when the Enterprise customers have successfully rebalanced the required Edges from the quiesced Gateway to the new Gateway. | |
| SLOW_START_CAP_MET | NOTICE | Generated when the Bandwidth measurement slow-start cap limit is exceeded. It will be done in Burst mode |
| SWITCH_GATEWAY_COMPLETED | Generated when the Enterprise customers have successfully switched the traffic from the quiesced Gateways to new Gateways for Non SD-WAN Destinations. | |
| SWITCH_GATEWAY_FAILED | Generated when the Switch Gateway action for a Non SD-WAN Destination fails during the Gateway migration. | |
| VPN_DATACENTER_STATUS | INFO, ERROR | Generated when a VPN Tunnel state change. |
| VRRP_FAIL_INFO | INFO | Generated when VRRP failed. |
| VRRP_INTO_MASTER_STATE | INFO | Generated when VRRP get into Primary state. |
| VRRP_OUT_OF_MASTER_STATE | INFO | Generated when VRRP get out of Primary state. |
Arista VeloCloud SD-WAN Edge Configuration Changes that Trigger an Edge Service Restart
This topic covers the VeloCloud SD-WAN™ configuration changes which can cause an Edge dataplane service restart, also known as the Edged process. Edged is one of many services that run on an Edge and this service handles dataplane tasks, i.e. managing customer traffic. A restart of the Edged service is not the same as a full Edge hardware reboot. Restarting this software process does cause a brief interruption in service and customer traffic is disrupted until this dataplane service resumes. The configuration changes seen below are made using the Orchestrator UI.
Device Settings
This section covers changes made to the Device settings for either an Edge or a configuration Profile. These changes are made on the Orchestrator under:
- or ,using the Classic UI.
- or using the New UI (default for 5.2.0 and later Orchestrators).
For Edges in a High Availability topology, the Edge service restart triggers an HA failover.
Note: If a Profile configuration changes and an Edge using that Profile already has an Edge Override configured for that particular Device setting, the Edge is not affected by the Profile level configuration change.
| Edge Software Version | 4.2.x | 4.3.x | 4.5.x | 5.0.x | 5.1.x | 5.2.x | 5.4.x | 6.0.x |
|---|---|---|---|---|---|---|---|---|
| Configuration Change Type | Service
Restart? |
Service
Restart? |
Service
Restart? |
Service
Restart? |
Service
Restart? |
Service
Restart? |
Service
Restart? |
Service
Restart? |
| Any BGP Configuration Change IPv4 | No | No | No | No | No | No | No | No |
| Any OSPFv2 or OSPFv3 configuration Change | No | No | No | No | No | No | No | No |
| Any Static Route Configuration Change | No | No | No | No | No | No | No | No |
| Any Multicast Configuration Change | No | No | No | No | No | No | No | No |
| Authentication Settings in Global Segment | Yes | Yes | Yes | Yes | No | No | No | No |
| DNS Settings | No | No | No | No | No | No | No | No |
| NetFlow Enable/Disable/Port Change in Global Segment | No | No | No | No | No | No | No | No |
| NetFlow Collector IP Change | No | No | No | No | No | No | No | No |
| ICMP Probes/Responder | No | No | No | No | No | No | No | No |
| VRRP Settings | No | No | No | No | No | No | No | No |
| Cloud Security Service | No | No | No | No | No | No | No | No |
| Gateway Handoff Assignment | No | No | No | No | No | No | No | No |
| Configure VLAN | No | No | No | No | No | No | No | No |
| Interface Enable/Disable | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Change the High Availability Interface | N/A | N/A | N/A | N/A | N/A | Yes | Yes | Yes |
| Activate High Availability with a Non-GE1 Interface | N/A | N/A | N/A | N/A | N/A | Yes | Yes | Yes |
| Activate GRE/BGP Support on a LAN Interface | N/A | N/A | N/A | N/A | N/A | No | No | No |
| DHCPv6 Relay | N/A | N/A | N/A | N/A | N/A | No | No | No |
| Activate Loss of Signal (LoS) for an Interface | N/A | No | No | No | No | No | No | No |
| Route Summarization | N/A | N/A | N/A | N/A | N/A | No | No | No |
| Management IP ChangeMGT IP is deprecated from 4.3.x and later | Yes | N/A | N/A | N/A | N/A | N/A | N/A | N/A |
| Multi-Source QoS | No | No | No | No | No | No | No | No |
| SNMP Settings | No | No | No | No | No | No | No | No |
| NTP Servers | No | No | No | No | No | No | No | No |
| Visibility Mode | No | No | No | No | No | No | No | No |
| WAN Settings Changes | No | No | No | No | No | No | No | No |
| Enable/Disable WAN Overlay on an Enabled Interface | No | No | No | No | No | No | No | No |
| Renaming an Overlay for a GE Interface | No | No | No | No | No | No | No | No |
| Renaming an Overlay for a USB Interface | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Wi-Fi Radio Settings at the Profile Level | No | No | No | No | No | No | No | No |
| Wi-Fi Radio Settings at the Edge Level | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Advertise Enable/Disable on a GE Interface | No | No | No | No | No | No | No | No |
| High Availability Type Change | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Change the IP Address, Mask or Default Gateway on an Enabled Interface | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Add/Remove/Modify a Subinterface | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Add/Remove/Modify a Secondary IP Address | No | No | No | No | No | No | No | No |
| Add/Remove/Modify VLAN on a GE Interface | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Change the Interface Mode from ‘Access Port’ to ‘Trunk Mode’ or vice versa (Only with Corporate VLAN in the Trunk) | No | No | No | No | No | No | No | No |
| Add/Remove a VLAN on Switched Interface with ‘Trunk Mode’ | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Enable Cloud VPN for the first time | Yes | Yes | Yes | Yes | No | No | No | No |
| Disable/Enable Cloud VPN on a Profile | No | No | No | No | No | No | No | No |
| IPv6: Enable Support on the Routed Interface (Static) | N/A | N/A | Yes | Yes | Yes | Yes | Yes | Yes |
| IPv6: Enable Support on the Routed Interface (DHCPv6 Stateless) | N/A | N/A | Yes | Yes | Yes | Yes | Yes | Yes |
| IPv6: Enable Support on the Route Interface (DHCPv6 Stateful) | N/A | N/A | Yes | Yes | Yes | Yes | Yes | Yes |
| IPv6: Any BGP Configuration Change | N/A | N/A | No | No | No | No | No | No |
| IPv6: Any BFD Configuration Change | N/A | N/A | No | No | No | No | No | No |
| IPv6: Any Static Route Change Configuration Change | N/A | N/A | No | No | No | No | No | No |
| IPv6: Reverse Path Forwarding (Turn On: Strict) | N/A | N/A | No | No | No | No | No | No |
| IPv6: Reverse Path Forwarding (Turn On: Loose) | N/A | N/A | No | No | No | No | No | No |
| IPv6: Reverse Path Forwarding (Turn Off) | N/A | N/A | No | No | No | No | No | No |
| IPv6 Only: Change WAN Overlay Configuration | N/A | N/A | N/A | No | No | No | No | No |
| IPv6 Dual Stack: Change WAN Overlay Configuration | N/A | N/A | N/A | No | No | No | No | No |
| Enable/Disable Branch-to-Hub and Add/Remove a Hub Edge | No | No | No | No | No | No | No | No |
| Enable Branch-to-Hub, add a Hub Edge, and Enable Branch-to-Branch VPN with Cloud Gateway | No | No | No | No | No | No | No | No |
| Enable Branch-to-Hub, add a Hub Edge, and Enable/Disable Branch-to Branch Enable Cloud VPN with Dynamic Branch-to-Branch | No | No | No | No | No | No | No | No |
| Enable Branch-to-Hub, Enable/Disable Branch-to-Branch VPN with Dynamic Branch-to-Branch and Autoselect VPN Hub | No | No | No | No | No | No | No | No |
| Enable Branch-to-Hub, Enable/Disable Branch-to-Branch VPN with Dynamic Branch-to-Branch and Branch-to-Hub | No | No | No | No | No | No | No | No |
| Enable Branch-to-Hub, Enable/Disable Branch-to-Branch VPN with Dynamic Branch-to-Branch, Branch-to-Hub and Autoselect VPN Hub | No | No | No | No | No | No | No | No |
| Enable Branch-to-Hub, Enable/Disable Branch-to-Branch VPN with Dynamic Branch-to-Branch, Branch-to-Hub, and Enable/Disable Dynamic Branch-to-Branch | No | No | No | No | No | No | No | No |
| Enable Branch-to-Hub, Branch-to-Branch, execute a Hub Order change | No | No | No | No | No | No | No | No |
| Enable/Disable Branch-to-Hub, add/remove Hub-Cluster | No | No | No | No | No | No | No | No |
| Enable Branch-to-Hub with Hub-Cluster and Enable Branch-to-Branch VPN with Cloud Gateway | No | No | No | No | No | No | No | No |
| Enable Branch-to-Hub with Hub-Cluster and Enable/Disable Branch-to Branch VPN with Dynamic Branch-to-Branch | No | No | No | No | No | No | No | No |
| Enable Branch-to-Hub with Hub-Cluster, Enable/Disable Branch-to Branch VPN with Dynamic Branch-to-Branch, Autoselect VPN Hub | No | No | No | No | No | No | No | No |
| Enable Branch-to-Hub with Hub-Cluster, Enable/Disable Branch-to Branch VPN with Dynamic Branch-to-Branch and Branch-to-Hub | No | No | No | No | No | No | No | No |
| Enable Branch-to-Hub with Hub-Cluster, Enable/Disable Branch-to Branch VPN with Dynamic Branch-to-Branch, Branch-to-Hub and Autoselect VPN Hub | No | No | No | No | No | No | No | No |
| Enable Branch-to-Hub with Hub-Cluster, Enable/Disable Branch-to Branch VPN with Dynamic Branch-to-Branch, Branch-to-Hub, and Enable/Disable Dynamic Branch-to-Branch | No | No | No | No | No | No | No | No |
| Enable Branch-to-Hub, Branch-to-Branch with Hub-Cluster and execute a Hub order change | No | No | No | No | No | No | No | No |
| Enable Branch-to-Non SD-WAN Destination via Edge using Edge Override | No | No | No | No | No | No | No | No |
| Activate Intrusion Detection System/Intrusion Prevention System (IDS/IPS) as part of the Enhanced Firewall Service | N/A | N/A | N/A | N/A | N/A | Yes | Yes | Yes |
Business Policy
This applies for both Edge and Profile level changes to Business Policies on the page of the Orchestrator.
For Edges in a High Availability topology, the Edge service restart causes an HA failover.
Note: If a Profile business policy changes made and an Edge using that profile already has a matching, Edge-specific business policy configured, the Edge is not affected by the Profile level business policy change as the Edge business policy overrides a matching Policy business policy.
| Configuration Type | Profile Level Only / Edge Level Only / Both Profile & Edge Override | Global Segment / Non-Global Segment | Edge Service Restart? |
|---|---|---|---|
| New/Modify/Delete Rule with Source ‘Any’ | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Source None | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Source VLAN | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Source IP Address | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Source Ports & Operating System | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Destination ‘Any’ | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Destination Internet | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Destination SD-WAN Edge | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Destination Non SD-WAN Destination | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| Newly Created User-Defined Application Map and Respective Application used as Match Criteria | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| Add 1000 Rules and then Delete All Rules | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Application ‘Any’ | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Defined Application | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Priority High/Normal/Low | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Network Service Direct/Multi-Path/Internet Backhaul | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Link Steering Auto/Transport Group/Interface/WAN Link | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with NAT Enabled/Disabled | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Service Class Real Time/Transactional/Bulk | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| Enable/Disable SD-WAN Traffic Class and Weight Mapping | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| Enable/Disable SD-WAN Overlay Rate Limit | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| Configuration Type | Edge Service Restart? |
|---|---|
| Business Policy (IPv6 only) | No |
| New/Modify/Delete Rule with Source Any IPv6 | No |
| New/Modify/Delete Rule with Source None IPv6 | No |
| New/Modify/Delete Rule with Source VLAN IPv6 | No |
| New/Modify/Delete Rule with Source IP Address IPv6 | No |
| New/Modify/Delete Rule with Source Ports & Operating System IPv6 | No |
| New/Modify/Delete Rule with Destination Any IPv6 | No |
| New/Modify/Delete Rule with Destination Internet IPv6 | No |
| New/Modify/Delete Rule with Destination SD-WAN Edge IPv6 | No |
| New/Modify/Delete Rule with Destination Non SD-WAN Destination IPv6 | No |
| Newly created user defied app map and respective application used as match criteria IPv6 | No |
| Add 1000 Rules and then Delete All Rules IPv6 | No |
| New/Modify/Delete Rule with Application Any IPv6 | No |
| New/Modify/Delete Rule with Defined Application IPv6 | No |
| New/Modify/Delete Rule with Priority High/Normal/Low IPv6 | No |
| New/Modify/Delete Rule with Network Service Direct/Multi-Path/Internet Backhaul IPv6 | No |
| New/Modify/Delete Rule with Link Steering Auto/Transport Group/Interface/WAN Link IPv6 | No |
| New/Modify/Delete Rule with NAT Enabled/Disabled IPv6 | No |
| New/Modify/Delete Rule with Service Class Real Time/Transactional/Bulk IPv6 | No |
| Configuration Type | Edge Service Restart? |
|---|---|
| New/Modify/Delete Rule with Source Any ‘Mixed Mode’ | No |
| New/Modify/Delete Rule with Source None ‘Mixed Mode’ | No |
| New/Modify/Delete Rule with Source VLAN ‘Mixed Mode’ | No |
| New/Modify/Delete Rule with Source IP Address ‘Mixed Mode’ | No |
| New/Modify/Delete Rule with Source Ports & Operating System ‘Mixed Mode’ | No |
| New/Modify/Delete Rule with Destination Any ‘Mixed Mode’ | No |
| New/Modify/Delete Rule with Destination Internet ‘Mixed Mode’ | No |
| New/Modify/Delete Rule with Destination SD-WAN Edge ‘Mixed Mode’ | No |
| New/Modify/Delete Rule with Destination Non SD-WAN Destination ‘Mixed Mode’ | No |
| Newly Created User-Defined Application Map and Respective Application used as Match Criteria ‘Mixed Mode’ | No |
| Add 1000 Rules and then Delete All Rules ‘Mixed Mode’ | No |
| New/Modify/Delete Rule with Application Any ‘Mixed Mode’ | No |
| New/Modify/Delete Rule with Defined Application ‘Mixed Mode’ | No |
| New/Modify/Delete Rule with Priority High/Normal/Low ‘Mixed Mode’ | No |
| New/Modify/Delete Rule with Network Service Direct/Multi-Path/Internet Backhaul No ‘Mixed Mode’ | No |
| New/Modify/Delete Rule with Link Steering Auto/Transport Group/Interface/WAN Link ‘Mixed Mode’ | No |
| New/Modify/Delete Rule with NAT Enabled/Disabled ‘Mixed Mode’ | NAT is allowed when IP version is either IPv4 or IPv6 only. Mixed Mode is not supported. |
| New/Modify/Delete Rule with Service Class Real Time/Transactional/Bulk ‘Mixed Mode’ | No |
Firewall
This applies for both Edge and Profile level changes to setting found on the page. Changes include Firewall rules, 1:1 NAT rules, and Port-Forwarding rules.
For Edges in a High Availability topology, the Edge service restart will cause an HA failover.
Note: If a Profile rule change is made and an Edge using that profile already has a matching, Edge-specific rule configured, the Edge will not be affected by the Profile level rule change as the Edge rule overrides a matching Policy rule.
| Configuration Type | Profile Level Only / Edge Level Only / Both Profile & Edge Override | Global Segment / Non-Global Segment | Edge Service Restart? |
|---|---|---|---|
| Enable/Disable Firewall Status | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| Enable/Disable Firewall Logging | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Source ‘Any’ and an ‘Allow’ Action | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Source ‘None’ with ‘Allow’ Action | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Source IP Address with ‘Allow’ Action | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Source MAC Address with ‘Deny’ Action | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Ports with ‘Deny’ Action | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Destination Any with ‘Deny’ Action | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Destination None with ‘Allow’ and ‘Log’ Action | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Destination IP Address with ‘Allow’ and ‘Log’ Action | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Destination MAC Address with ‘Allow’ and ‘Log’ Action | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Destination Protocol with ‘Deny’ and ‘Log’ Action | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Destination Ports with ‘Deny’ and ‘Log’ Action | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| Newly Created User-Defined Application Map and a Respective Application Used as a Match Criteria | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| Add or Delete a Large Number of Rules (>1000) | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Application ‘Any’ with ‘Deny’ and ‘Log’ Action | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete Rule with Defined Application with DSCP tag with ‘Allow’ and ‘Log’ | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete a Port Forwarding Rule | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| New/Modify/Delete a 1:1 NAT Rule | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| Edge Access with Support Access set to ‘Deny All’ | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| Edge Access with Support Access with IP Addresses Configured | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| Edge Access with SNMP Access with Deny/Allow All LAN/IP Addresses | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| Edge Access with Local UI Web Access with Deny All/Allow All LAN/IP Address | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| Enable and Disable Firewall several times, having Firewall Logs Enabled in the Background and confirm that Edge Access is Still Working | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| Enable and Disable Firewall several times, having Firewall Logs Disabled in the Background and confirm that Edge Access is Still Working | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| Turn Firewall Logs ON and OFF several times, having ‘Action’ already set with the Firewall Logs | Both Profile & Edge Override | Global Segment & Non-Global Segment | No |
| Configuration Type | Edge Service Restart? |
|---|---|
| New/Modify/Delete Rule with Source ‘Any’ and ‘Allow’ Action | No |
| New/Modify/Delete Rule with Source ‘None’ and ‘Allow’ Action | No |
| New/Modify/Delete Rule with Source ‘IP Address’ and ‘Allow’ Action | No |
| New/Modify/Delete Rule with Source ‘MAC Address’ and ‘Deny’ Action | No |
| New/Modify/Delete Rule with Source ‘Ports’ and ‘Deny’ Action | No |
| New/Modify/Delete Rule with Destination ‘Any’ with ‘Deny’ Action | No |
| New/Modify/Delete Rule with Destination ‘None’ with ‘Allow’ and ‘Log’ Actions | No |
| New/Modify/Delete Rule with Destination ‘IP Address’ with ‘Allow’ and ‘Log’ Actions | No |
| New/Modify/Delete Rule with Destination ‘MAC Address’ with ‘Allow’ and ‘Log’ Actions | IPv6 does not support Destination MAC address |
| New/Modify/Delete Rule with Destination ‘Protocol’ with ‘Deny’ and ‘Log’ Actions | No |
| New/Modify/Delete Rule with Destination ‘Ports’ with ‘Deny’ and ‘Log’ Actions | No |
| Newly Created User-Defined Application Map and a Respective Application Used as a Match Criteria | No |
| Add or Delete a Large Number of Rules (>1000) | No |
| New/Modify/Delete Rule with Application ‘Any’ and ‘Deny’ and ‘Log’ Actions | No |
| New/Modify/Delete Rule with Defined Application with DSCP Tag and ‘Allow and ‘Log’ Actions | No |
| Stateful Firewall Rules Created for IPv6 | No |
| New/Modify/Delete a 1:1 NAT Rule | No |
| New/Modify/Delete a Port Forwarding Rule | No |
| Configuration Type | Edge Service Restart? |
|---|---|
| New/Modify/Delete Rule with Source ‘Any’ and ‘Allow’ Action | No |
| New/Modify/Delete Rule with Source ‘None’ and ‘Allow’ Action | No |
| New/Modify/Delete Rule with Source ‘IP Address’ and ‘Allow’ Action | No |
| New/Modify/Delete Rule with Source ‘MAC Address’ and ‘Deny’ Action | No |
| New/Modify/Delete Rule with Source ‘Ports’ and ‘Deny’ Action | No |
| New/Modify/Delete Rule with Destination ‘Any’ with ‘Deny’ Action | No |
| New/Modify/Delete Rule with Destination ‘None’ with ‘Allow’ and ‘Log’ Actions | No |
| New/Modify/Delete Rule with Destination ‘IP Address’ with ‘Allow’ and ‘Log’ Actions | Destination with IP Address Not Supported |
| New/Modify/Delete Rule with Destination ‘MAC Address’ with ‘Allow’ and ‘Log’ Actions | Destination with MAC Address Not Supported |
| New/Modify/Delete Rule with Destination ‘Ports’ with ‘Deny’ and ‘Log’ Actions | No |
| Newly Created User-Defined Application Map and a Respective Application Used as a Match Criteria | No |
| Add or Delete a Large Number of Rules (>1000) | No |
| New/Modify/Delete Rule with Application ‘Any’ and ‘Deny’ and ‘Log’ Actions | No |
| New/Modify/Delete Rule with Defined Application with DSCP Tag and ‘Allow and ‘Log’ Actions | No |
| Stateful Firewall Rules Created for IPv6 | No |
| New/Modify/Delete a 1:1 NAT Rule | No |
| New/Modify/Delete a Port Forwarding Rule | No |
Segments
This section covers changes made to the Segments page of the Orchestrator.
For Edges in a High Availability topology, the Edge service restart causes an HA failover.
| Configuration Type | Edge Service Restart? |
|---|---|
| New/Modify/Delete a New Segment | No |
| Per Customer, Per Segment Partner Gateway Handoff Change | No |
| Add a New Interface to a Segment | Yes |
| Modify Segment Detail Per Interface | No |
| Add/Remove Authentication Settings in a Non-Global Segment | No |
| Add/Remove NetFlow settings in a Non-Global Segment | No |
| Increase the Maximum Number of Segments through the Orchestrator System Settings | No |
Overlay Flow Control (OFC)
This section covers configuration changes made to the Overlay Flow Control (OFC) page of the Orchestrator.
For Edges in a High Availability topology, the Edge service restart causes an HA failover.
| Configuration Type | Edge Service Restart? |
|---|---|
| Change Route Order for specific route | No |
| Move Edge from a Preferred VPN Exit to an Eligible VPN Exit and vice-versa | No |
| Toggle Global Advertise option for Edge/Hub/Partner Gateway | No |
Network Services
This section covers changes made to the Network Services page of the Orchestrator.
For Edges in a High Availability topology, the Edge service restart causes an HA failover.
| Configuration Type | Edge Service Restart? |
|---|---|
| Create/Delete Edge Cluster | No |
| Non SD-WAN Destinations | No |
| IPv6 Non SD-WAN Destination via Edge | No |
| Cloud Security Service | No |
| Create/Delete DNS Services | No |
| Private Network Names | No |
| Create/Delete Authentication Services | No |