Cisco Cisco ASA for Nexus 1000V Series Switch Manual Técnica
Guidelines and Limitations
This section includes the guidelines and limitations for this feature.
Context Mode Guidelines
EEM is currently only supported on ASA firewalls that run in single context mode. Firewalls configured in
multiple context mode are not currently supported.
multiple context mode are not currently supported.
Firewall Mode Guidelines
EEM is currently supported in both routed and transparent firewall modes.
Additional Guidelines
While the unit crashes, the state of the ASA is generally unknown. Some commands might not be safe
to run while the ASA is in this condition.
to run while the ASA is in this condition.
•
The name of an event manager applet cannot contain spaces.
•
You cannot modify the None event and Crashinfo event parameters.
•
Performance might be affected because syslog messages are sent to the EEM to be processed.
•
The default output is output none for each event manager applet. In order to change the default
output, you must enter a different output value.
output, you must enter a different output value.
•
You might have only one output option defined for each event manager applet.
•
Configure
The event manager applet command creates/edits an event manager applet, a process that links events with
actions and output. The <name> is limited to 32 characters and cannot have spaces. This enters an event
manager applet submode.
actions and output. The <name> is limited to 32 characters and cannot have spaces. This enters an event
manager applet submode.
ASA(config)# [no] event manager applet <name>
A description can be added to an applet. This is for informational purposes only. The <text> is limited to 256
characters.
characters.
ASA(config−applet)# [no] description <text>
Event Configuration
Various events might be added to an applet that trigger the applet to invoke the actions that are configured on
it. They are defined with the event keyword. Multiple events might be configured for each applet.
it. They are defined with the event keyword. Multiple events might be configured for each applet.
Syslog Events
The first event type that is supported is syslog. The ASA uses syslog IDs in order to identify syslogs that
trigger an applet. This is completed through the id keyword, which might be a single syslog or a range. The
optional occurs keyword indicates the number of times that the syslog must occur for the applet to be invoked
(default is 1). The optional period keyword indicates the amount of time, in seconds, that the event must occur
in. It limits the frequency of the applet invocation to at most once the configured period. An occurs of 5 with
a period of 30, means the syslog must occur 5 times within 30 seconds before the event is triggered. If the
syslog occurs 11 times in 30 seconds, the applet is only triggered once. A value of 0 for period means that no
period is defined.
trigger an applet. This is completed through the id keyword, which might be a single syslog or a range. The
optional occurs keyword indicates the number of times that the syslog must occur for the applet to be invoked
(default is 1). The optional period keyword indicates the amount of time, in seconds, that the event must occur
in. It limits the frequency of the applet invocation to at most once the configured period. An occurs of 5 with
a period of 30, means the syslog must occur 5 times within 30 seconds before the event is triggered. If the
syslog occurs 11 times in 30 seconds, the applet is only triggered once. A value of 0 for period means that no
period is defined.