2-131
Cisco ONS 15454 Troubleshooting Guide, R8.5
November 2009
Chapter 2 Alarm Troubleshooting
2.7.174 INTRUSION-PSWD
Step 2 If it is raised against a 1:1 card, complete the “Initiate a 1:1 Card Switch Command” procedure on
page 2-265 to switch traffic back.
Step 3 If the condition does not clear, log into the Technical Support Website at
http://www.cisco.com/techsupport for more information or call Cisco TAC 1 800 553-2447.
2.7.174 INTRUSION-PSWD
Default Severity: Not Alarmed (NA), Non-Service-Affecting (NSA)
SONET Logical Object: NE
The Security Intrusion Incorrect Password condition occurs after a user attempts a provisionable (by
Superuser) number of unsuccessful logins, a login with an expired password, or an invalid password. The
alarmed user is locked out of the system, and INTRUSION-PSWD condition is raised. This condition is
only shown in Superuser login sessions, not in login sessions for lower-level users. The
INTRUSION-PSWD condition is automatically cleared when a provisionable lockout timeout expires,
or it can be manually cleared in CTC by the Superuser if the lockout is permanent.
Clear the INTRUSION-PSWD Condition
Step 1 Click the Provisioning > Security > Users tabs.
Step 2 Click Clear Security Intrusion Alarm.
Step 3 If the condition does not clear, log into the Technical Support Website at
http://www.cisco.com/techsupport for more information or call Cisco TAC 1 800 553-2447.
2.7.175 INVMACADR
Default Severity: Major (MJ), Non-Service Affecting (NSA)
SONET Logical Object: AIP
The Equipment Failure Invalid MAC Address alarm occurs when the ONS 15454 MAC address is
invalid. Each ONS 15454 has a unique, permanently assigned MAC address. The address resides on an
AIP EEPROM. The TCC2/TCC2P reads the address value from the AIP chip during boot-up and keeps
this value in its synchronous dynamic RAM (SDRAM).
Under normal circumstances, the read-only MAC address can be viewed in the Provisioning/Network
tab in CTC.
The ONS 15454 uses both IP and MAC addresses for circuit routing. When an INVMACADR alarm
exists on a node, you see a PARTIAL circuit in the CTC circuit status column. The circuit works and is
able to carry traffic, but CTC cannot logically display the circuit end-to-end information.
An invalid MAC address can be caused when:
• There is a read error from the AIP during bootup; in this case, the reading TCC2/TCC2P uses the
default MAC address (00-10-cf-ff-ff-ff).