RE: Logging routing table changes

From: Joel Amao (femmy79@hotmail.com)
Date: Wed Oct 17 2007 - 19:27:52 ART


ipForward MIB will be useful for this purpose. Otherwise EEM is your
friend.It can do all sort of crazy things !

regards,

Joel Amao
CCIE#18128> Subject: RE: Logging routing table changes> Date: Wed, 17 Oct 2007
21:46:40 +0100> From: alex.steer@eison.co.uk> To: aminul.siddiqui@gmail.com;
ryan@egate.net> CC: ccielab@groupstudy.com> > I was looking at monitoring
route changes for a customer.> (Un)fortunately they have a very resilient
network and devices don't> become unreachable upon failure of pretty much
anything. Typically they> have 2 main MPLS circuits and a backup mesh VPN (not
adjacent to> customer equipment).> > I looked at using SNMP to report routing
table changes, its pretty> static unless we make changes. The best I could do
was monitor a mib> route change counter. This counter starts at 0 and just
keeps going up.> Never does it go back down to 0 after a certain period, so
pretty> useless. I'm sure there must be a way without doing something daft
like> rmon but I'm not a CCIE and don't know how.> > Used different loopback
interfaces in the end to determine when the> primary network was down. Still
can't tell if we loose one of the main> circuits though as they are connected
behind CPEs. I hope the SP can.> > Ooow look, the lights off> > Alex> >
-----Original Message-----> From: nobody@groupstudy.com
[mailto:nobody@groupstudy.com] On Behalf Of> Aminul Siddiqui> Sent: 17 October
2007 21:23> To: Ryan Morris> Cc: ccielab@groupstudy.com> Subject: Re: Logging
routing table changes> > Hi Ryan,> How about informational logging? If that
doesn't help, I can think of> 'sh ip> route summary' will give you a list of
your subnets. So, if you> maintain> that you can get the difference as a new
addition or deletion.> > Thanks.> Amin> > On 10/17/07, Ryan Morris
<ryan@egate.net> wrote:> >> > Hi group,> >> > I have a production network on
which I would like to log when changes> to> > the routing table occur (i.e.
NOT debug IP routing on my production> > network). Just a basic log message
that says "x.x.x.x route> > added/removed". I can't find any documentation for
a feature like> this in> > the Cisco documentation.> >> > Any thoughts?> >> >
Ryan Morris> > CCIE #18953> >> >>



This archive was generated by hypermail 2.1.4 : Fri Nov 16 2007 - 13:11:15 ART