Interface Security - NCM Compliance Reports

tigerr

I’m trying to create a compliance report rule that would look for “switchport port-security”, at the same time, I do not want it to flag “switchport mode tunnel” and other interfaces with certain descriptions. For a start, I started with the “switchport mode tunnel” filter. This is what I have:

I can’t figure out what I’m doing wrong with the regular expressions or my selections due to my lack of knowledge in Regex, it keeps flagging all interfaces with no port security, including the ones where the “switchport mode tunnel” configuration is found on the interface. I want to exclude tunnel ports.

mesverrum

I don't have a test environment handy to figure out the regex for you, but I will say that any time I am struggling with these I typically just take snippets of my config from ncm and paste it into http://regexr.com to write my logic against.

At a glance it seems like your config block start and stops wouldn't be correct, at least not the stop because the stop should be at the line with just ! on it right?