Hi Joseph,
Thank you for your quick reply. Yes, you may have been asked the same question via some internal sources. The issue with clear ip nat is that we are running VRF so each clear ip nat needs to be dynamically generated for the VRF. I tried the generic clear ip NAT forced via EEM but that did not seem to help.
What I have pasted about is my first TCL script so I am not too comfortable with the the launguage yet. Below is what I tested but it seems to error out. Any help is appreciated.
::cisco::eem::event_register_none
namespace import ::cisco::eem::*
namespace import ::cisco::lib::*
array set arr_einfo [event_reqinfo]
if [catch {cli_open} result] {
error $result $errorInfo
} else {
array set cli1 $result
}
if [catch {cli_write $cli1(fd) "copy http://IP ADD/nat/http.cfg running-config"} _cli_result] {
error $_cli_result $errorInfo
}
if [catch {cli_read_pattern $cli1(fd) "running-config"} _cli_result] {
error $_cli_result $errorInfo
}
if [catch {cli_exec $cli1(fd) ""} _cli_result] {
error $_cli_result $errorInfo
}
if [catch {cli_read_pattern $cli1(fd) "no|#"} _cli_result] {
error $_cli_result $errorInfo
}
if { [regexp {no} $_cli_result] } {
if [catch {cli_write $cli1(fd) "yes"} _cli_result]
{
error $_cli_result $errorInfo
}
}
# Close open cli before exit.
catch {cli_close $cli1(fd) $cli1(tty_id)} result
Debugging INFO
May 9 02:52:55.026: %HA_EM-6-LOG: test.tcl : DEBUG(cli_lib) : CTL : cli_open called.
May 9 02:52:55.152: %HA_EM-6-LOG: test.tcl : DEBUG(cli_lib) : OUT : ###
May 9 02:52:55.152: %HA_EM-6-LOG: test.tcl : DEBUG(cli_lib) : OUT : ###########################################################################
May 9 02:52:55.152: %HA_EM-6-LOG: test.tcl : DEBUG(cli_lib) : OUT : ##########################################################################
May 9 02:52:55.152: %HA_EM-6-LOG: test.tcl : DEBUG(cli_lib) : OUT :
May 9 02:52:55.152: %HA_EM-6-LOG: test.tcl : DEBUG(cli_lib) : OUT : VASR#
May 9 02:52:55.153: %HA_EM-6-LOG: test.tcl : DEBUG(cli_lib) : IN : ASR#copy http://IP OF SERVER/nat/http.cfg running-config
May 9 02:52:55.453: %HA_EM-6-LOG: test.tcl : DEBUG(cli_lib) : OUT : Destination filename [running-config]?
May 9 02:52:55.453: %HA_EM-6-LOG: test.tcl : DEBUG(cli_lib) : IN :
May 9 02:52:55.460: %PARSER-4-BADCFG: Unexpected end of configuration file.
May 9 02:52:55.563: %HA_EM-6-LOG: test.tcl : DEBUG(cli_lib) : OUT : Accessing http://IP OF SERVER/nat/http.cfg...
May 9 02:52:55.563: %HA_EM-6-LOG: test.tcl : DEBUG(cli_lib) : OUT : Loading http://IP OF SERVER/nat/http.cfg
May 9 02:52:55.563: %HA_EM-6-LOG: test.tcl : DEBUG(cli_lib) : OUT : 66 bytes copied in 0.005 secs (13200 bytes/sec)
May 9 02:52:55.563: %HA_EM-6-LOG: test.tcl : DEBUG(cli_lib) : OUT : R-ASR#
while executing
"after 100"
(procedure "cli_read_pattern" line 11)
invoked from within
"cli_read_pattern $cli1(fd) "yes|#""
invoked from within
"$slave eval $Contents"
(procedure "eval_script" line 7)
invoked from within
"eval_script slave $scriptname"
invoked from within
"if {$security_level == 1} { #untrusted script
interp create -safe slave
interp share {} stdin slave
interp share {} stdout slave
..."
(file "tmpsys:/lib/tcl/base.tcl" line 50)
Tcl policy execute failed: Process Forced Exit- MAXRUN timer expired.
____
What is the best way to run this script? Everytime I update the script I have to do the following:
copy http://SERVER WITH TCL SCRIPT/nat/test.tcl bootflash:
conf t
event man dir user policy bootflash:
no event man policy test.tcl
event man policy test.tcl
end
event manager run test.tcl
