Looking for assistance running IP SLA on a switch with Embedded Event Manager.
Switch is a 3560 running IOS version 12.2(53)SE2 and has the below configuration applied , but I have also tried on a router running multiple IOS v12.4 versions.
--------------------------------------------------------------------------
ip sla 99
icmp-echo 10.128.248.42 source-ip 10.15.208.3
frequency 10
ip sla schedule 99 life 86399 start-time now recurring
ip sla enable reaction-alerts
event manager applet IP-SLA-99-TIMEOUT
event snmp oid 1.3.6.1.4.1.9.9.42.1.2.9.1.6.99 get-type exact entry-op eq entry-val "1" exit-op eq exit-val "2" poll-interval 20
action 1.0 syslog msg "10.128.248.42 not reachable primary line NOK"
action 1.1 cli command "enable"
action 1.2 cli command "configure terminal"
action 1.3 cli command "ip route 0.0.0.0 0.0.0.0 10.15.215.26"
event manager applet IP-SLA-99-OK
event snmp oid 1.3.6.1.4.1.9.9.42.1.2.9.1.6.99 get-type exact entry-op eq entry-val "2" exit-op eq exit-val "1" poll-interval 20
action 1.0 syslog msg "10.128.248.42 is reachable primary line OK"
action 1.1 cli command "enable"
action 1.2 cli command "configure terminal"
action 1.3 cli command "no ip route 0.0.0.0 0.0.0.0 10.15.215.26"
------------------------------------------------------------------------------
The IP address being polled by IP SLA 99 is the service provider known IP address. Whilst the link to the Service provider is up, I am able to ping the IP address. If I force the line protocol for the link DOWN, checking the IP SLA Stats, the IP SLA displays the failures :
Round Trip Time (RTT) for Index 99
Type of operation: icmp-echo
Latest RTT: NoConnection/Busy/Timeout
Latest operation start time: *11:07:47.366 BRIS Mon Mar 1 1993
Latest operation return code: No connection
Number of successes: 0
Number of failures: 31
Operation time to live: 82487 sec
The EEM scripts run and introduce the Static route as required, but on the Script Poll-interval the scripts run and remove the Static Route. The scripts seem to run in a loop, every 20 seconds adding the route and then every 20 seconds removing the route. Duration this time, the IP address is not pingable.
Via a backup path, the IP address being polled is blocked with an ACL implicitly denying the poll.
Am I missing something here ? Please, I've been troubleshooting this now for 3 days..
Thanks, David
