EEM Scripts for ISE Low Impact Mode
In this video, we take a look at how EEM scripts can be utilized alongside Low Impact mode to enable ports to fail open. Below are EEM Scripts that can be reused and modified for your environment. Note: For single RADIUS Servers use the “%RADIUS-4-RADIUS_DEAD” syslog pattern and for a group of RADIUS servers use the “%RADIUS-3- ALLDEADSERVER” syslog pattern. If your devices utilize command authorization then you need to ensure that the script can still run in the event of a failure. Enter the following command at the end of each applet to ensure command authorization is bypassed. authorization bypass Example: event manager applet pre-auth-acl-fallback authorization bypass event manager applet pre-auth-acl-recovery authorization bypass event manager applet pre-auth-acl-fallback event syslog pattern "%RADIUS-4-RADIUS_DEAD" maxrun 5 action 1.0 cli command "enable" action 1.1 cli command "conf t" pattern "CNTL/Z." action 2.0 cli command