BFD + EEM issue

[mabdelazim]

Problem description:
We have point to point link running BGP , we implemented BFD for fast convergence
and EEM to shutdown the BGP neighbor-ship once the BFD is triggered.
The issue is with the EEM script we can see only the action number 5 after the BFD is triggered and actions from 1 to 4 is not implemented

(syslog priority critical msg "Primary WAN issue BGP is shutdwon by EEM – Do Not Correlate" facility "EEM" )

Router Name : riGBWOKINTRA

The Platform :
Cisco ASR1002 Chassis
IOS version

asr1000rp1-advipservicesk9.03.05.02.S.152-1.S2.bin

The configuration:
conf t
!
! 1) implementing the BFD
!
bfd slow-timers 3000
!
interface GigabitEthernet0/0/3
no ip redirects
bfd interval 600 min_rx 600 multiplier 3
!
router bgp 65252
neighbor 172.27.248.74 fall-over bfd
!
! 2) implenting EEN script to shut down BGP
!
event manager applet test
event syslog pattern "%BGP-5-ADJCHANGE: neighbor 172.27.248.74 Down BFD adjacency down"
action 1 cli command "enable"
action 2 cli command "conf t"
action 3 cli command "router bgp 65252"
action 4 cli command "neighbor 172.27.248.74 shut"
action 5 syslog priority critical msg "Primary WAN issue BGP is shutdwon by EEM – Do Not Correlate" facility "EEM"
action 6 cli command "end"
!
!

 

[Vinit Jain]

Hello,

Does the user have sufficient configuration privileges. Are you running tacacs?

You might want to use "event manager session cli username username privilege 15" configuration for the user which has configuration privileges

Or if you want to bypass authorization, "event manager applet test authorization bypass" config can be used.

Please let me know if any of the above fixes the problem.

Regards

Vinit

[Vinit Jain]

I just checked the config without BFD and it seems to work. So, there are two things that needs to be confirmed:

1. the event that you are matching, ensure the exact log is getting generated.

2. Authorization part as i mentioned in my previous reply.

[mabdelazim]

Hi Vinit , 

Many thanks for you advise 

now its working fine :) 

[Vinit Jain]

Thanks for the confirmation. Would request you to please mark the question as answered if your issue has been resolved.

Regards

Vinit

[mabdelazim]

Hello Vinit ,

i think its related to the tacacs .

i will implement it and i will let you know .

[Vinit Jain]

Hello,

Did you get a chance to check on the above recommendations. Did it fix your problem.

Thanks

Vinit

[paul driver]

Hello

Have you tried using ip sla instead?

ip sla 10
 icmp-echo 172.27.248.74 source-IP 172.27.248.xx
ip sla schedule 10 life forever start-time now

track 1 ip sla 10 reachability

event manager applet test
event track 1 state down
action 1 cli command "enable"
action 2 cli command "conf t"
action 3 cli command "router bgp 65252"
action 4 cli command "neighbor 172.27.248.74 shut"
action 5 syslog priority critical msg "Primary WAN issue BGP is shutdwon by EEM – Do Not Correlate" facility "EEM"
action 6 cli command "end"
 

event manager applet test2
 event track 1 state up
 action 5.5 cli command "enable"
 action 5.6 cli command "conf t"
 action 5.7 cli command "router bgp 65252"
 action 5.8 cli command "no neighbor 172.27.248.74 shut"
 action 5.9 cli command "end"

res

Paul

[mabdelazim]

Hello Paul ,

Many thanks .

but i need it with BFD

[paul driver]

Hello

This will work with BFD

res

Paul