Yes, line 015 is to identify what license is currently installed.   I got that output from a CSR1kv that was already registered to a smart license server.    I see when the device is not smart licensed the output of that command does not have "License level" as you stated below.   " License level". should be present after the device is registered with smart license server.    To address this update these two lines:   action 040 string equal $LICENSE security action 050 if $_string_result eq 0   The first time EEM runs the security license should not be present so lines 040 to 170 will run.   After security license is installed via smart license server  lines 200 - 300 will be executed.     ... View more

I think something like this may work.  Device initially boots up into IPBASE license and line actions 040 to 170 are executed and device reboots.   When device comes back it has security license installed now HSEC license will be installed with line action 200 - 300;  EEM policy deregisters its self, config is saved and device reboots.     event manager applet licenseManager event timer countdown time 90 maxrun 60 action 010 cli command "enable" action 015 cli command "show ver | inc License Level:" action 030 regexp "License Level: ([a-zA-Z]+)" $_cli_result match LICENSE action 040 string equal $LICENSE ipbase action 050 if $_string_result eq 1 action 060 cli command "conf t" action 080 cli command "license smart enable" action 090 cli command "do license smart register idtoken TOKEN" action 100 wait 30 action 110 cli command "license boot level secuirtyk9" action 130 cli command "end" action 140 syslog msg "Security license will be installed after reboot" action 150 cli command "wr" action 160 reload action 170 end action 200 string equal $LICENSE security action 210 if $_string_result eq 1 action 220 cli command "conf t" action 230 cli command "license feature hseck9" action 240 cli command "platfor hardware crypto througput un-unthrottled" action 250 cli command "no event manager applet licenseManager" action 260 syslog msg "HSEC license will be installed after reboot" action 270 cli command "end" action 280 cli command "wr" action 290 reload action 300 end ... View more

What is the purpose of doing this work?   If you have a whitelist of IP addresses then add them to the ACL, and there is a "deny any" at the end of the ACL.   Why do you need to specifically add deny entries if there is an implicit "deny any"at the end of the ACL? ... View more

Can you provide some details of what is not working, log messages, ect....    I just loaded 15.9.3M and its working for me. C819-Tmobile# *Dec   9 18:19:17.523: Cellular0: New SMS received on index 1 . Please issue a view command to see it *Dec   9 18:19:17.523: %CELLWAN-2-SMS_ARCH_PATH_UNCONFIGURED: Cellular0 failed to archive SMS because 'gsm|cdma|lte sms archive path' under cellular controller is not configured. *Dec   9 18:19:18.623: %HA_EM-6-LOG: commandoversms3-1.tcl: received SMS from XXXXXXXXX : Show clock *Dec   9 18:19:18.639: %HA_EM-6-LOG: commandoversms3-1.tcl: denysms variable exists *Dec   9 18:19:18.655: %HA_EM-6-LOG: commandoversms3-1.tcl: sms-cmd: Show clock *Dec   9 18:19:18.899: %HA_EM-6-LOG: commandoversms3-1.tcl: SMS sent = C819-XXXXXX# C819-Tmobile# *14:19:18.663 EDT Mon Dec 9 2019 *Dec   9 18:19:18.899: %HA_EM-6-LOG: commandoversms3-1.tcl: --------------------------------------------------------------------------------------- *Dec   9 18:19:19.135: sms_delete_by_id, msg_id = 0 message_index = 1 *Dec   9 18:19:19.203: %CELLWAN-2-SMS_ARCH_PATH_UNCONFIGURED: Cellular0 failed to archive SMS because 'gsm|cdma|lte sms archive path' under cellular controller is not configured. *Dec   9 18:19:19.203: %CELLWAN-5-OUTGOING_SMS_SENT: Cellular0 has just sent an outgoing SMS successfully. *Dec   9 18:19:19.243: %HA_EM-6-LOG: commandoversms3-1.tcl: Successfully deleted SMS message 1 from SIM C819-Tmobile# C819-Tmobile# C819-Tmobile#show ver Cisco IOS Software, C800 Software (C800-UNIVERSALK9-M), Version 15.9(3)M, RELEASE SOFTWARE (fc5) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2019 by Cisco Systems, Inc. Compiled Tue 13-Aug-19 17:42 by prod_rel_team   ... View more

Change the argument index to a variable in the tcl file. tclsh flash:stream.tcl 192.168.1.1 12345 # Add these two lines in the tcl file. set server [lindex $argv 0] set udp_port [lindex $argv 1]     ... View more

EEM has a default time maxrun time of 20 seconds.    Increase max time to something more than all the wait timers in the script.   Try changing this line to include maxrun parameter.  event none sync yes maxrun 360 ... View more

I believe this is because the command sent did not match the regular expression.  You sent "Wr erase" and your regexp is "wr[a-z]+ er[a-z]+ .   Regexp [a-z]+ means one or more in the range of a-z.   It will match on "Wr" but nothing is matching on [a-z]+ so regexp did not match.   Two ways to address this condition.   1.   Change regexp to "w[a-z]+ er[a-z]+" and send same SMS syntax.    2.  Keep regexp the same but send "Wri erase".    The "i" will meet the requirement of one or more for [a-z]+.       ... View more

Hi @Andreas Foerby  Thank you for the feedback.   I can see where this feature would be useful.   I have added version 3.1 of this script to deny user configurable CLI commands over SMS.   Users can make a list of CLI commands in the router CLI by executing this command:  "event manager environment denysms "list of deny commands, separated by comma"     example "event manager environment denysms "write erase, configure"   This takes regular expression pattern as well so same line could be written as "event manager environment denysms "wr[a-z]+ er[a-z]+, conf[a-z]+" ... View more