Hiding EEM from Being Viewed

[davidhuynh5]

Is there a way to hide an EEM applet from being viewed when an administrator runs "show run or write terminal?"

A sample configuration would be appreciated. Thanks.

event manager applet sa27_fix1

event track 1 state down

action 1.0 cli command "enable"

action 1.5 syslog msg "sa27-r1 t3 locked up again"

action 2.0 cli command "conf t"

action 3.0 cli command "interface s6/1/0"

action 4.0 cli command "shutdown"

action 5.0 syslog msg "shutdown sa27-r1 t3 interface"

action 5.1 cli command "end"

!

event manager applet sa27_fix2

event syslog pattern "Interface Serial6/1/0, changed state to administratively down"

action 1.0 cli command "enable"

action 1.5 cli command "config t"

action 2.0 cli command "interface s6/1/0"

action 2.5 cli command "no shutdown"

action 3.0 syslog msg "no shutdown sa27-r1 t3 interface"

action 3.5 cli command "end"

!

end

[Joe Clarke · Accepted solution]

No, not directly.  You could write another EEM Tcl policy that intercepts write mem or show run and filters out the commands you don't want to see.  This could be messy, though, as no one would be able to see those policies.  EEM 4.0 will extend the CLI ED so you would be able to filter the output for specific users.