Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) v1.2Network AssuranceEasy
A network engineer wants to automatically execute a series of commands on a router whenever a specific syslog message indicating an interface flapping event is detected. The commands should disable the interface, wait 10 seconds, and then re-enable it. Which feature allows for this automated, event-driven response?
- AEmbedded Event Manager (EEM)
- BNetFlow
- CIP SLA
- DSNMP Trap
Show answer & explanationAnswer & explanation
Correct answer: A. Embedded Event Manager (EEM)
Embedded Event Manager (EEM) is designed to provide event detection and on-device automation. It can be configured to trigger a script (containing a series of CLI commands) in response to specific syslog messages, perfectly matching the requirement for automated interface management based on a flapping event.
Why the other options are wrong
- B. NetFlow collects traffic flow statistics and is not used for event-driven command execution.
- C. IP SLA measures network performance and reliability, but it does not directly listen for syslog messages to trigger command execution.
- D. SNMP traps send notifications to a manager but do not automatically execute commands on the device itself.
Embedded Event Manager (EEM)
Cisco Embedded Event Manager (EEM) is a powerful and flexible feature that allows network administrators to automate tasks and customize event-driven actions on Cisco devices.
- Detects events from various sources (syslog, SNMP, interface status).
- Executes predefined actions (CLI commands, scripts, SNMP traps).
- Enhances network resilience and reduces manual intervention.
Memory trick: EEM: Events Execute Mechanisms, Effortlessly.