When making changes to large access lists - is there an easy way for RTN to report which specific access-list got modified?
example results from RTN:
BEFORE AFTER
deny ip host 10.10.10.10 any deny tcp host 10.10.10.10 eq www any
permit tcp host 10.10.10.11 eq www any
permit tcp host 10.10.10.12 eq www any
from above - the acl name is not referenced so without manually checking - there's no easy way to tell which acl changed in the config.
We have ACL's that may be varied line lengths - some have 5 entries, others may have 50.
If we make a change to a line in an ACL or add an entry - RTN detects it and sends a "difference detected" email - but only shows the lines that changed, which, if it's far down the list then it doesnt give you any context as to WHICH access-list had the change made to it without manually going in and comparing configs and looking yourself.
Is there some way to have RTN reference the ACL name or number that the changes applied to when it sends the email?
I think there is a way to include so many lines before and after the difference lines, but we dont want that for every change and it would not be practical in a case such as this to apply that to any change that happens in a config.
Has anyone found a solution or workaround? Our senior engineer said sed and awk can do this nearly automatically but I'm looking for something similar in RTN.