Last night durning a generator test power failed and the UPS was exhausted. When my core switch came back online I got several notifications that my running config was changed through an "InternalEvent" done from 0.0.0.0. Then several more log messages that my startup config was changed by SNMP. After comparing the config from yesterday to today there are not any changes to either config?
I am only worried because last year during a similar event all of my trunk groups were "erased". When I went back and looked at my config files stored in flash they both also changed (config1 and config2) However the latest config displayed in PCM+ was the "real, correct" config and I had to copy that to the switch and boot from that config.
Here are the log entries:
Event Details
Event type: Trap Received from: 172.16.1.2 Date received: Tue Feb 25 19:37:02 EST 2014 Date acknowledged: Event has not been acknowledged. Severity: Warning Event ID: .1.3.6.1.4.1.11.2.14.11.5.1.7.1.29.1.0.7 Event Description
Notification of a running configuration change on configuration ID 908.
Done through InternalEvent
changes done from 0.0.0.0
change Done by at Mar 25, 2014 7:37:02 PM
Event Details
Event type: Trap Received from: 172.16.1.2 Date received: Tue Feb 25 19:37:02 EST 2014 Date acknowledged: Event has not been acknowledged. Severity: Informational Event ID: .1.3.6.1.4.1.11.2.3.7.11.72.2 Event Description I 02/25/14 19:37:17 03125 mgr: AM2: Startup configuration changed by SNMP. New
seq. number 436
Event Details
Event type: Trap Received from: 172.16.1.2 Date received: Tue Feb 25 19:37:02 EST 2014 Date acknowledged: Event has not been acknowledged. Severity: Informational Event ID: .1.3.6.1.4.1.11.2.3.7.11.72.2 Event Description I 02/25/14 19:37:16 02612 mgr: AM2: chassis subsystem saved the whole running
config to startup config.