Hey all, I need some help with the TCL scripting. I've deploying the TCL scripts to be triggered by an SNMP notification but they are not working; on the routers I have it installed on the TCL script doesn't kick off when it receives the trap.
::cisco::eem::event_register_snmp_notification oid 1.3.6.1.4.1.33333.2.0 oid_val "New NHC" op eq
namespace import ::cisco::eem::*
namespace import ::cisco::lib::*
array set arr_einfo [event_reqinfo]
set acl_ip {}
if [catch {cli_open} result] {
error $result $errorInfo
} else {
array set cli1 $result
}
if [catch {cli_exec $cli1(fd) "enable"} _cli_result] {
error $_cli_result $errorInfo
}
if {$_cerrno !=0} {
set result [format "component=%s; subsys err=%s; posix err=%s;\n%s" $_cerr_sub_num $_cerr_sub_err $_cerr_posix_err $_cerr_str]
error $result
}
foreach snmp_item [array names arr_einfo 1_3_6_1_4_1_33333_3_0 ] {
if [catch {cli_exec $cli1(fd) "show access-list INBOUND | i $arr_einfo($snmp_item) "} _cli_result] {
error $_cli_result $errorInfo
}
set acl_data $_cli_result
foreach acl_line [split $acl_data "\n"] {
if [regexp {[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+} $acl_line acl_ip] {
lappend acl_ip $acl_ip }
}
if { $acl_ip == {}} {
if [catch {cli_exec $cli1(fd) "configure terminal"} _cli_result] {
error $_cli_result $errorInfo
}
if [catch {cli_exec $cli1(fd) "ip access-list extended INBOUND"} _cli_result] {
error $_cli_result $errorInfo
}
if [catch {cli_exec $cli1(fd) "no deny ip any any log"} _cli_result] {
error $_cli_result $errorInfo
}
if [catch {cli_exec $cli1(fd) "permit ip host $arr_einfo($snmp_item) any"} _cli_result] {
error $_cli_result $errorInfo
}
if [catch {cli_exec $cli1(fd) "deny ip any any log"} _cli_result] {
error $_cli_result $errorInfo
}
if [catch {cli_exec $cli1(fd) "end"} _cli_result] {
error $_cli_result $errorInfo
}
if [catch {cli_exec $cli1(fd) "write memory"} _cli_result] {
error $_cli_result $errorInfo
}
action_syslog priority warning msg "Host $arr_einfo($snmp_item) added to the INBOUND access-list"
}
}
and the config on that router for SNMP:
snmp-server community ****** RO 23
snmp-server trap-source GigabitEthernet2
snmp-server manager
and the debug of it receiving the trap:
*Mar 3 12:33:33.736: SNMP: Packet received via UDP from 10.20.249.253 on Tunnel1
*Mar 3 12:33:33.736: SNMP: V2 Trap, reqid 3353, errstat 0, erridx 0
sysUpTime.0 = 287828652
snmpTrapOID.0 = enterprises.33333.1.0.1
enterprises.33333.2.0 = New NHC
enterprises.33333.3.0 = 60.199.50.34
