Re: Access List

ares · ‎02-07-2019

Dear,

I have ASR 90006, and I want to create an access-list base on time but the command "time-range" doesn't run in the router. what is solution can u give if there is any other command?

Georg Pauwen · ‎02-07-2019

Hello,

an alternative would be an EEM script in conjunction with a CRON timer that adds and removes the access list at times specified.

Here is an example (the access list will be added each morning at 8AM, and removed at 9AM:

event manager applet ADD_ACL
event timer cron name JOB1 cron-entry "0 8 * * *″
action 1.0 cli command “enable”
action 2.0 cli command “conf t”
action 3.0 cli command "access-list 101 permit ip any any"
action 4.0 cli command "end"

event manager applet REMOVE_ACL
event timer cron name JOB1 cron-entry "0 9 * * *″
action 1.0 cli command “enable”
action 2.0 cli command “conf t”
action 3.0 cli command "no access-list 101 permit ip any any"
action 4.0 cli command "end"

ares · ‎02-07-2019

I tried but i didnot find applet in EEM

(config)#event manager ?
directory Set Embedded Event Manager directory information
environment Set an Embedded Event Manager global variable for policies
policy Register an Event Manager policy
refresh-time Set refresh time (in seconds) for policy username's AAA taskmap
scheduler S et Embedded Event Manager scheduler options
test-client Embedded Event Manager test-client(cisco-support)

what i have to do to enable applet ?

balaji.bandi · ‎02-07-2019

what is the device, what is the version of code ?

post show version

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

ares · ‎02-09-2019

Dear it is ASK9k

System image file is "bootflash:disk0/asr9k-os-mbi-5.1.2/0x100000/mbiasr9k-rp.vm"

iosxr-security, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-security-5.1.2
Built on Wed Apr 30 18:55:22 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-k9sec-supp, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-k9sec-supp-5.1.2
Built on Wed Apr 30 18:55:22 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-k9sec-px, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-k9sec-px-5.1.2
Built on Wed Apr 30 18:55:30 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-mgbl, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-mgbl-5.1.2
Built on Wed Apr 30 17:39:56 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-mgbl-supp, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-mgbl-supp-5.1.2
Built on Wed Apr 30 17:39:56 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-mgbl-px, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-mgbl-px-5.1.2
Built on Wed Apr 30 17:40:08 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-mcast, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-mcast-5.1.2
Built on Wed Apr 30 17:39:39 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-mcast-supp, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-mcast-supp-5.1.2
Built on Wed Apr 30 17:39:39 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-mcast-px, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-mcast-px-5.1.2
Built on Wed Apr 30 17:39:54 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-infra, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-infra-5.1.2
Built on Wed Apr 30 17:34:27 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-fwding, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-fwding-5.1.2
Built on Wed Apr 30 17:34:27 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-routing, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-routing-5.1.2
Built on Wed Apr 30 17:34:29 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-diags, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-diags-5.1.2
Built on Wed Apr 30 17:34:30 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-ce, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-ce-5.1.2
Built on Wed Apr 30 17:34:30 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-cpp, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-cpp-5.1.2
Built on Wed Apr 30 17:34:30 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-os-mbi, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-os-mbi-5.1.2
Built on Wed Apr 30 17:36:22 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-base, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-base-5.1.2
Built on Wed Apr 30 17:34:33 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-fwding, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-fwding-5.1.2
Built on Wed Apr 30 17:34:46 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-ce, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-ce-5.1.2
Built on Wed Apr 30 17:34:46 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-diags-supp, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-diags-supp-5.1.2
Built on Wed Apr 30 17:34:48 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-scfclient, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-scfclient-5.1.2
Built on Wed Apr 30 17:34:50 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-mini-px, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-mini-px-5.1.2
Built on Wed Apr 30 17:37:33 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

Boot device on node 0/0/CPU0 is mem:
Package active on node 0/0/CPU0:
iosxr-mcast, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-mcast-5.1.2
Built on Wed Apr 30 17:39:39 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-mcast-supp, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-mcast-supp-5.1.2
Built on Wed Apr 30 17:39:39 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-mcast-px, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-mcast-px-5.1.2
Built on Wed Apr 30 17:39:54 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-infra, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-infra-5.1.2
Built on Wed Apr 30 17:34:27 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-fwding, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-fwding-5.1.2
Built on Wed Apr 30 17:34:27 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-routing, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-routing-5.1.2
Built on Wed Apr 30 17:34:29 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-diags, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-diags-5.1.2
Built on Wed Apr 30 17:34:30 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-ce, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-ce-5.1.2
Built on Wed Apr 30 17:34:30 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-cpp, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-cpp-5.1.2
Built on Wed Apr 30 17:34:30 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-os-mbi, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-os-mbi-5.1.2
Built on Wed Apr 30 17:36:22 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-base, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-base-5.1.2
Built on Wed Apr 30 17:34:33 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-fwding, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-fwding-5.1.2
Built on Wed Apr 30 17:34:46 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-ce, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-ce-5.1.2
Built on Wed Apr 30 17:34:46 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-diags-supp, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-diags-supp-5.1.2
Built on Wed Apr 30 17:34:48 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-scfclient, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-scfclient-5.1.2
Built on Wed Apr 30 17:34:50 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-mini-px, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-mini-px-5.1.2
Built on Wed Apr 30 17:37:33 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie
ASR-9001 Chassis

ares · ‎02-10-2019

(admin)#show platform

Node Type State Config State
-----------------------------------------------------------------------------
0/RSP0/CPU0 ASR9001-RP(Active) IOS XR RUN PWR,NSHUT,MON
0/FT0/SP ASR-9001-FAN READY
0/0/CPU0 ASR9001-LC IOS XR RUN PWR,NSHUT,MON
0/0/0 A9K-MPA-20X1GE OK PWR,NSHUT,MON
0/PM0/SP A9K-750W-DC READY PWR,NSHUT,MON
0/PM1/SP A9K-750W-DC READY PWR,NSHUT,MON

Georg Pauwen · ‎02-10-2019

Hello,

my bad, the ASR9K (running XR software) doesn't support applets. So the EEM applet would need to be converted into a TCL script. I'll see what I can come up with...

ares · ‎02-10-2019

thanks, I'll for your script. because I really don't know how write script in TCL

Georg Pauwen · ‎02-10-2019

Hello,

bear with me, I need to test it first...will get back with you...

ares · ‎02-10-2019

Sure. I'll wait for your script

ares · ‎02-20-2019

Dear Update please for the script?