EEM script to shut the incoming interface when "ROUTING-RSVP-5-BAD_RSVP_MSG_RCVD_AUTH_KEY" Pattern appears in the syslog.
Problem:
An RSVP control packet with invalid AUTH Key bring down the RSVP session. This brings down the primary tunnel interface. If the IGP neighborship between the devices doesn't goes down the tunnel will not be broughtup via the backup path.
This leads to traffic drop as the tunnel interface is not available to carry the traffic.
Solution:
A workaround to this problem is the shut down the incoming interface (from which we are receiving invalid RSVP auth key). This brings down the interface and triggers FRR.
Router's config:
event manager directory user policy harddisk:/scripts/
event manager policy syslog_bad_auth_rsvp.tcl username event_manager_user
persist-time 3600
username event_manager_user
group root-system
group cisco-support
!
aaa authorization commands eem-method none
aaa authorization eventmanager default local
vty-pool eem 100 105 line-template eem-template
line template eem-template
authorization commands eem-method
More Scripts: EEM Script Repository
