Strona 1 z 1

IBNS, eventid

: 09 cze 2017, 11:08
autor: pogrom
Cześć. Czy wie ktoś jak ustalić jakie event id mają poszczególne eventy?

Kod: Zaznacz cały

SW(config)#policy-map type control subscriber POLICY_DEFAULT_ACCESS_INTERFACE
SW(config-event-control-policymap)#  event ?
  aaa-available                  aaa-available event
  absolute-timeout               absolute timeout event
  agent-found                    agent found event
  authentication-failure         authentication failure event
  authentication-success         authentication success event
  authorization-failure          authorization failure event
  authorization-success          authorization success event
  identity-update                identity update event
  inactivity-timeout             inactivity timeout event
  remote-authentication-failure  authentication failure event
  remote-authentication-success  authentication remote success event
  session-disconnected           session disconnected event
  session-started                session started event
  tag-added                      tag to apply event
  tag-removed                    tag to remove event
  template-activated             template activated event
  template-activation-failed     template activation failed event
  template-deactivated           template deactivated event
  template-deactivation-failed   template deactivation failed event
  timer-expiry                   timer-expiry event
  violation                      session violation event
W jeśli w policy-map event nie jest obsłużony, to w debugu pojawia się tylko jego ID. Utrudnia to mocno debugowanie.

Re: IBNS, eventid

: 12 cze 2017, 06:48
autor: Seba
A jaki debug robisz?

Re: IBNS, eventid

: 12 cze 2017, 09:40
autor: pogrom
Seba pisze:A jaki debug robisz?

Kod: Zaznacz cały

#debug pre all
Jun 9 06:35:50.081: [PRE:RULE:EVENT:B4000084] Executing policy-map type control subscriber POLICY_DEFAULT_ACCESS_INTERFACE
Jun 9 06:35:50.081: [PRE:RULE:EVENT] eval_default_action: No Default action for this clid[2] and eventid[21]
Jun 9 06:35:50.081: [PRE:RULE:EVENT:B4000084] no event-id match found. nothing to run against in policy.
Jun 9 06:35:50.085: [PRE:RULE:EVENT:B4000084] Executing policy-map type control subscriber POLICY_DEFAULT_ACCESS_INTERFACE
Jun 9 06:35:50.085: [PRE:RULE:EVENT:B4000084] event (id:19 name:agent-found) match-all
Jun 9 06:35:50.085: [PRE:RULE:EVENT:B4000084] class always do-until-failure policy instance 0x9200004C
Jun 9 06:35:50.085: [PRE:RULE:EVENT:B4000084] Evaluate: class-map type control match-all subscriber always
Jun 9 06:35:50.085: [PRE:RULE:EVENT:B4000084] evaluated class map: success
Event agent-found jest obsłużony w policy-mapie i w debugu jest w postaci "czytelnej", ale nie mam pojęcia czym jest eventid[21]