Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Policy Reporter, ignore string.

I am trying to run a report on my cisco routing switches to report back any layer 3 vlan interfaces that have a "permit ip any any" statement in there ACL, but there are certain ACLs that might require a "permit ip any any" statement. How can I set the rule so that it ignores certain acl statements that do contain a "permit ip any any" statement?

Right now i am just using find string.

Thanks for the Help

Find more posts tagged with

Accepted answers

one of my programmers was able to figure this out for me. Here is the RegEx string that we are using to ignore certain ACL statements.

access-list (?!*|*)\d+ permit ip any any

the * is the ACL number we are omitting, if you want to omit multiple ACLs seperate them with the | command.

So for instance if i have the following ACL statements in a configuration file:

access-list 123 permit ip any any

access-list 124 permit ip any any

access-list 125 permit ip any any

access-list (?!123|125)\d+ permit ip any any

this reg ex string will only report access-list 124 permit ip any any as a violation.

All comments

Can you post a sample ACL config line?

Sure its just a simple ACL statement

access-list xxxx permit ip any any

or

access-list xxxx permit ip any any log

XXXX would be the access-list number

Thanks.
I'd simply try using a Regex instead of the Find String.

access.*permit ip any any.*

Let me know if it works for you

I dont understand how this is going to exclude access-list?

Quick Links