05-25-2011 03:03 PM
Is there a way to hide an EEM applet from being viewed when an administrator runs "show run or write terminal?"
A sample configuration would be appreciated. Thanks.
event manager applet sa27_fix1
event track 1 state down
action 1.0 cli command "enable"
action 1.5 syslog msg "sa27-r1 t3 locked up again"
action 2.0 cli command "conf t"
action 3.0 cli command "interface s6/1/0"
action 4.0 cli command "shutdown"
action 5.0 syslog msg "shutdown sa27-r1 t3 interface"
action 5.1 cli command "end"
!
event manager applet sa27_fix2
event syslog pattern "Interface Serial6/1/0, changed state to administratively down"
action 1.0 cli command "enable"
action 1.5 cli command "config t"
action 2.0 cli command "interface s6/1/0"
action 2.5 cli command "no shutdown"
action 3.0 syslog msg "no shutdown sa27-r1 t3 interface"
action 3.5 cli command "end"
!
end
Solved! Go to Solution.
05-26-2011 01:26 AM
No, not directly. You could write another EEM Tcl policy that intercepts write mem or show run and filters out the commands you don't want to see. This could be messy, though, as no one would be able to see those policies. EEM 4.0 will extend the CLI ED so you would be able to filter the output for specific users.
05-26-2011 01:26 AM
No, not directly. You could write another EEM Tcl policy that intercepts write mem or show run and filters out the commands you don't want to see. This could be messy, though, as no one would be able to see those policies. EEM 4.0 will extend the CLI ED so you would be able to filter the output for specific users.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide