cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5496
Views
0
Helpful
7
Replies

How to Monitor Routing Table Change

kevin.hu
Level 3
Level 3

Hi,

Is there a mechanism built-in to IOS (syslog, SNMP, etc) that allows us to monitor any route addition or deletion in the routing table?

Thanks.

7 Replies 7

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello Kevin,

you need to enable

conf t

ip route profile

see

http://www.cisco.com/en/US/docs/ios/iproute/command/reference/irp_pi1.html#wp1012879

later you can check with

sh ip route profile

Hope to help

Giuseppe

Thanks Guiseppe.

However, this feature does not notify me what's or when route is added or deleted. This command does not count deletion, only counts addition.

Anyone else knows a way to monitor routing table changes? What's added and what's deleted and notify the NOSC via SNMP or syslog?

Thanks.

If your IOS supports it, you may look into EEM

http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6555/ps6815/config_guide_eem_configuration_for_cisco_integrated_services_router_platforms.html

You may need some customization and maybe rely on the MIB for that kind of tracking.

HTH,

__

Edison.

This can be done with Perl/Expect scripting in less ten minutes.

Unfortunately I don't know how to do Perl/Expect scripting.

Now I am looking at RANCID to perform "show ip route" and email me the difference. That could be another way to do it.

I just can't believe there are no easy way to monitor routing table. Don't people monitor their routing table changes?

RANCID is good too. I used it. RANCID also uses Perl language as well.

The reason you want to use Perl customization is that even if routing does not change but you have routing flap, the perl script can detect the differences in the timestamp. You can write a script so it can send you email even when routing table does not change but flapping as well.

Thanks Cisco24x7. I will give RANCID a try.

Review Cisco Networking for a $25 gift card