IMPORT MAP ON CISCO ROUTER I am importing 3 RTs on PE router into a customer VRF. However, now customer has an extranet site from where I need to import few specific prefixes.   I am using the below configuration do let me know if that's fine.   ip vrf TEST rd 1:11 import map TEST22 route-target export 1:11 route-target export 1:12 route-target import 1:11 route-target import 1:12 route-target import 1:15   show route-map TEST22 route-map TEST22, permit, sequence 10   Match clauses:     ip address prefix-lists: TEST     extcommunity (extcommunity-list filter): TEST   Set clauses:   Policy routing matches: 0 packets, 0 bytes   show ip prefix-list TEST ip prefix-list TEST: 1 entries    seq 5 permit 10.94.22.154/32    show ip extcommunity-list TEST Standard extended community-list TEST      10 permit RT:1:20   My Question is do I need to add a Permit any any statement at the route-map TEST22 while calling this as an import map ? & What will happen if I don't ?   Regards ... View more

I have written a test EEM script zscaler2  which is supposed to create a EEM script zscaler3 when triggered.The trigger is a syslog message. I want to test my script before it becomes live. So I need to have a syslog message. I expect : %TRACK-6-STATE: 178 list boolean and Up -> Down So, I have created another EEM script test_zscaler2 to write a syslog message. event manager applet test_zscaler2 event none action 1 syslog msg "%TRACK-6-STATE: 178 list boolean and Up -> Down" ! end When I run the applet test_zscaler2, I can see in the cisco log : Apr 23 10:28:42.785: %HA_EM-4-LOG: test_zscaler2: %TRACK-6-STATE: 178 list boolean and Up -> Down but the script zscaler2 is not triggered. Here is my script zscaler2   : event manager environment q " event manager applet zscaler2 event tag down syslog pattern "%TRACK-6-STATE: 178 list boolean and Up -> Down" event tag un syslog pattern "list boolean and Up -> Down" event tag up syslog pattern "%TRACK-6-STATE: 178 list boolean and Down -> Up" trigger correlate event un or event up or event down action 100 regexp " Up -> Down" "$_syslog_msg" id action 100.1 syslog msg "$_syslog_msg" action 100.2 syslog msg "$id" action 100.3 if $id eq Up -> Down action 101 wait 5 action 102 cli command "enable" action 103 cli command "config t" action 104 cli command "event manager applet zscaler3" action 105 cli command "event timer countdown time 60" action 106 cli command "action 1.0 cli command enable" action 107 cli command "action 2.0 cli command $q config t$q" action 108 cli command "action 3.0 snmp-trap strdata $q ZScaler Trap : No internet connectivity $q" action 109 cli command "action 5.0 cli command $q no event manager applet zscaler3$q" action 110 cli command "action 6.0 cli command end" action 111 end Any idea how to add the needed syslog message to trigger my script ? Thanks Regards, Gilles    ... View more

I have to upgrade our 2 ACS V5R6(last patch level) servers to the version V5R8: - The primary is acting as the log collector - The secondary I have read the guide "Installation and Upgrade Guide for Cisco Secure Access Control System 5.8" and the order of the operations is not clear to me. It is said that the first thing to migrate is the log collector, but in my case, I would need first to promote the secondary server as a primary server, so the primary is no more "log collector".   Then, what to do? 1) upgrade the log collector?(the secondary server) or  2) upgrade the primary ?   I am lost. Knowing that all the actions are described in the guide, the list of the phases in the right order would help me a lot. Thanks Gilles ... View more