cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
332
Views
0
Helpful
10
Replies
Beginner

Access List

 Dear,

I have ASR 90006, and I want to create an access-list base on time but the command "time-range" doesn't run in the router. what is solution can u give if there is any other command?

Everyone's tags (1)
10 REPLIES 10
VIP Mentor

Re: Access List

Hello,

 

an alternative would be an EEM script in conjunction with a CRON timer that adds and removes the access list at times specified.

 

Here is an example (the access list will be added each morning at 8AM, and removed at 9AM:

 

event manager applet ADD_ACL
event timer cron name JOB1 cron-entry "0 8 * * *″
action 1.0 cli command “enable”
action 2.0 cli command “conf t”
action 3.0 cli command "access-list 101 permit ip any any"
action 4.0 cli command "end"

 

event manager applet REMOVE_ACL
event timer cron name JOB1 cron-entry "0 9 * * *″
action 1.0 cli command “enable”
action 2.0 cli command “conf t”
action 3.0 cli command "no access-list 101 permit ip any any"
action 4.0 cli command "end"

Beginner

Re: Access List

I tried but i didnot find applet in EEM

 

(config)#event manager ?
directory                    Set Embedded Event Manager directory information
environment               Set an Embedded Event Manager global variable for policies
policy                        Register an Event Manager policy
refresh-time                  Set refresh time (in seconds) for policy username's AAA taskmap
scheduler S                   et Embedded Event Manager scheduler options
test-client                       Embedded Event Manager test-client(cisco-support)

 

what i have to do to enable applet ?

VIP Advocate

Re: Access List

what is the device, what is the version of code ?

post show version

BB
*** Rate All Helpful Responses ***
Beginner

Re: Access List

Dear it is ASK9k

System image file is "bootflash:disk0/asr9k-os-mbi-5.1.2/0x100000/mbiasr9k-rp.vm"

iosxr-security, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-security-5.1.2
Built on Wed Apr 30 18:55:22 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-k9sec-supp, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-k9sec-supp-5.1.2
Built on Wed Apr 30 18:55:22 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-k9sec-px, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-k9sec-px-5.1.2
Built on Wed Apr 30 18:55:30 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-mgbl, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-mgbl-5.1.2
Built on Wed Apr 30 17:39:56 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-mgbl-supp, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-mgbl-supp-5.1.2
Built on Wed Apr 30 17:39:56 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-mgbl-px, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-mgbl-px-5.1.2
Built on Wed Apr 30 17:40:08 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-mcast, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-mcast-5.1.2
Built on Wed Apr 30 17:39:39 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-mcast-supp, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-mcast-supp-5.1.2
Built on Wed Apr 30 17:39:39 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-mcast-px, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-mcast-px-5.1.2
Built on Wed Apr 30 17:39:54 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-infra, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-infra-5.1.2
Built on Wed Apr 30 17:34:27 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-fwding, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-fwding-5.1.2
Built on Wed Apr 30 17:34:27 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-routing, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-routing-5.1.2
Built on Wed Apr 30 17:34:29 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-diags, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-diags-5.1.2
Built on Wed Apr 30 17:34:30 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-ce, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-ce-5.1.2
Built on Wed Apr 30 17:34:30 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-cpp, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-cpp-5.1.2
Built on Wed Apr 30 17:34:30 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-os-mbi, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-os-mbi-5.1.2
Built on Wed Apr 30 17:36:22 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-base, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-base-5.1.2
Built on Wed Apr 30 17:34:33 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-fwding, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-fwding-5.1.2
Built on Wed Apr 30 17:34:46 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-ce, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-ce-5.1.2
Built on Wed Apr 30 17:34:46 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-diags-supp, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-diags-supp-5.1.2
Built on Wed Apr 30 17:34:48 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-scfclient, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-scfclient-5.1.2
Built on Wed Apr 30 17:34:50 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-mini-px, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-mini-px-5.1.2
Built on Wed Apr 30 17:37:33 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

Boot device on node 0/0/CPU0 is mem:
Package active on node 0/0/CPU0:
iosxr-mcast, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-mcast-5.1.2
Built on Wed Apr 30 17:39:39 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-mcast-supp, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-mcast-supp-5.1.2
Built on Wed Apr 30 17:39:39 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-mcast-px, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-mcast-px-5.1.2
Built on Wed Apr 30 17:39:54 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-infra, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-infra-5.1.2
Built on Wed Apr 30 17:34:27 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-fwding, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-fwding-5.1.2
Built on Wed Apr 30 17:34:27 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-routing, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-routing-5.1.2
Built on Wed Apr 30 17:34:29 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-diags, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-diags-5.1.2
Built on Wed Apr 30 17:34:30 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

iosxr-ce, V 5.1.2[Default], Cisco Systems, at disk0:iosxr-ce-5.1.2
Built on Wed Apr 30 17:34:30 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-cpp, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-cpp-5.1.2
Built on Wed Apr 30 17:34:30 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-os-mbi, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-os-mbi-5.1.2
Built on Wed Apr 30 17:36:22 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-base, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-base-5.1.2
Built on Wed Apr 30 17:34:33 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-fwding, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-fwding-5.1.2
Built on Wed Apr 30 17:34:46 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-ce, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-ce-5.1.2
Built on Wed Apr 30 17:34:46 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-diags-supp, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-diags-supp-5.1.2
Built on Wed Apr 30 17:34:48 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-scfclient, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-scfclient-5.1.2
Built on Wed Apr 30 17:34:50 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie

asr9k-mini-px, V 5.1.2[Default], Cisco Systems, at disk0:asr9k-mini-px-5.1.2
Built on Wed Apr 30 17:37:33 Iraq 2014
By iox-lnx-004 in /auto/srcarchive7/production/5.1.2/all/workspace for pie
ASR-9001 Chassis
Beginner

Re: Access List

(admin)#show platform

Node Type State Config State
-----------------------------------------------------------------------------
0/RSP0/CPU0 ASR9001-RP(Active) IOS XR RUN PWR,NSHUT,MON
0/FT0/SP ASR-9001-FAN READY
0/0/CPU0 ASR9001-LC IOS XR RUN PWR,NSHUT,MON
0/0/0 A9K-MPA-20X1GE OK PWR,NSHUT,MON
0/PM0/SP A9K-750W-DC READY PWR,NSHUT,MON
0/PM1/SP A9K-750W-DC READY PWR,NSHUT,MON

VIP Mentor

Re: Access List

Hello,

 

my bad, the ASR9K (running XR software) doesn't support applets. So the EEM applet would need to be converted into a TCL script. I'll see what I can come up with...

Beginner

Re: Access List

thanks, I'll for your script. because I really don't know  how write script in TCL 

Highlighted
VIP Mentor

Re: Access List

Hello,

 

bear with me, I need to test it first...will get back with you...

Beginner

Re: Access List

Sure. I'll wait for your script
Beginner

Re: Access List

Dear Update please for the script?

CreatePlease to create content
Content for Community-Ad