CISCO ROUTER EEM CONFIGURATION TO SHUT WAN WHEN LAN DOWN

Sometimes the ISP Provider PE Routers only monitor the WAN Interface of the Customer CE Router and not the inside LAN subnet. In that case,if the LAN interface goes down , there is no way the ISP knows about the LAN link failure and keeps on sending the inbound traffic towards the same CE Router. This drops the traffic and hence loss of Business to customer.Cisco’s Embedded Event Manager (EEM) feature will help us to solve this condition by using event tracking and management functionality directly on the Cisco IOS device, rather than on an external device.

Below is one scenario where EEM (Embedded Event Manager) shuts the WAN Interface when the LAN interface goes down. HSRP is running on the LAN Interface of both R3 (Primary Internet CE) and R2 (Secondary Internet CE).

In 1^st Diagram, the LAN traffic sourced from LAN Network 1.1.1.1/24 takes the HSRP Master (Active -> 192.168.123.3) path from R3 (Primary CE Router) towards ISP. The ISP seeing that R3 WAN Interface (Fa0/1) is up, sends the return traffic via the same path.

Now , we will perform EEM configuration on R3 to shut the WAN Interface (Fa0/1) when the LAN Interface (Fa0/0) goes down . Below is the configuration –

Note – In the configuration ,  the EEM matches the syslog message pattern of “Interface FastEthernet0/0.* down” and then triggers the configuration to shut WAN Interface Fa0/1.
Lets see what happens when LAN interface (Fa0/0) of R3 (Primary CE) goes down –
In the 2^nd Diagram, we see that on shutting the Fa0/0 of R3, EEM automatically forces R3 WAN Interface (Fa0/1) to be shut.PE router seeing the R3 WAN Interface down redirects the traffic towards secondary link. Additionally LAN Interface of Secondary Router R2 becomes the HSRP master and starts forwarding the traffic via secondary Link.
The output is as below –
As we see above, EEM forces the WAN interface to be shut when LAN Interfaces goes down.
Now we need to configure EEM to unshut the WAN interface (Fa0/1) when LAN interface (Fa0/0) comes up.The configuration is below –
Note – In the configuration ,  the EEM matches the syslog message pattern of “Interface FastEthernet0/0.* up” and then triggers the configuration to “no shut” WAN Interface Fa0/1.
Lets see what happens when LAN interface (Fa0/0) of R3 (Primary CE) comes up again –

As the LAN Interface Fa0/0 of R3 comes up , EEM script unshuts the WAN Interface (fa0/1) of R3. Henceforth traffic to and fro takes the primary path for Internet as per above diagram.

Caveat – EEM configuration may result in loss of management access to Internet Router R3 since both the LAN and WAN interface go down with no 3^rd interface to access the device.