topic Remote Event via EEM ! in Network Security

Remote Event via EEM !

Jonn cos — Fri, 21 Feb 2020 11:54:47 GMT

Hi all.

Can someone provide me a simple example of triggering predefined eem applets remotely ?

Suppose i have 2 routers, R1 and R2. I made an applet on R2 which will be triggered remotely by R1 when some event on R1 occurs. Can someone provide me a simple example pls ?

Re: Remote Event via EEM !

Joe Clarke — Fri, 26 Mar 2010 07:35:26 GMT

FYI, in the future, post under Network Infrastructure > Network Management. I read that forum regularly, and I can more quickly respond to EEM questions.

What version of IOS are you using?

Please support CSC Helps Haiti

https://supportforums.cisco.com/docs/DOC-8895

https://supportforums.cisco.com

Re: Remote Event via EEM !

Jonn cos — Sat, 27 Mar 2010 11:58:29 GMT

Dear Joe, surely i will post there from now.

I am using 12.4T(22) advance security.

Re: Remote Event via EEM !

Joe Clarke — Sat, 27 Mar 2010 17:44:50 GMT

On router R1, you would have an EEM policy which reacts to whatever event in which you are interested. This policy would then send a trap to router R2. R2 would intercept the trap, and perform the required actions. For example:

Router R1 (10.1.1.1):

--------------------

event manager applet watch-syslog
 event syslog pattern "OSPF-5-ADJCHG"
 action 1.0 snmp-trap intdata1 424242
!
snmp-server enable traps event-manager
snmp-server host 20.1.1.1 traps public event-manager

Router R2 (20.1.1.1):

--------------------

event manager applet trap-from-r1

event snmp-notification oid 1.3.6.1.4.1.9.10.91.1.2.3.1.9. oid-val 424242 op eq src-ip-address 10.1.1.1

action 1.0 syslog msg "Received event from R1"

snmp-server manager

Please support CSC Helps Haiti

https://supportforums.cisco.com/docs/DOC-8895

https://supportforums.cisco.com