Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We are using BGP on the WAN interfaces of R1 and R2.I would like to create an EEM that executes commands on R2 in the event of a WAN failure or a hardware failure on R1.I believe the best approach is to use IP-SLA on R1 to monitor ICMP traffic to the...
Is it possible to configure EEM to execute an action whenever any one of multiple syslog messages matches a pattern? I would like to know if it is possible to write syslog patterns using an "OR" condition.
When I ran a ping from the WAN segment of R1 to the LAN IP address of R2 (10.1.1.100), I received no response. When I captured the traffic on the firewall, I saw that ping request packets were being sent to R2, but there were no response packets comi...
R3 and R4 are advertising the default route via eBGP.We understand that in the event of a link failure between R3 and R1, traffic must be rerouted via iBGP between R1 and R2.In this case, does R2 require the following configuration in order to advert...
Traffic from Server-1 to Server-3 is encrypted using a policy-based IPsec tunnel between Router-1 and Router-3.Router-1 and Router-2 are configured in a redundant setup and share the same VPN endpoint address.The system is configured so that when Rou...
@pman Sorry. It is correct that you can still ping a BGP peer even if a BGP neighbor goes down. I would like to configure R1 to trigger EEM in response to a BGP neighbor down message.
@pman We are using a site-to-site VPN with routers. If a WAN failure or hardware failure occurs on R1, the VPN is reestablished on R2; however,to prevent a prolonged communication outage caused by an SA mismatch with the remote VPN device, you must e...
@pman Thank you.I thought that if R1 and R2 were configured, a notification would be sent to R3 to force the deletion of the old SA upon reconnection, and that R3 would immediately delete the old IKE SA / IPsec SA. The assumption is that if one side ...
@pman After testing on the actual device, I confirmed that the initial-contact force is supported on the R1 and R2 sides.It is unclear whether it is supported on the R3 side.If I configure it on the R1 and R2 sides, will it have no effect?Also, if I ...
@Harold Ritter At first, I understood that this was how Cisco routers operated, but I observed that routers from other manufacturers did not advertise the default route via IBGP.Upon checking the manual, I found a setting that determines whether or n...
