nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Policy Reporter Rules - RegEx Expression Help

srlegge24

I am trying to write a rule that will check all of the interfaces of a cisco device to see if the line "no ip proxy-arp" is applied. The devices aren't all the same and the number/type of interfaces is different depending on the device.

I would like the rule to alert me if it finds that the line isn't applied to all of the interfaces. For example:

interface FastEthernet0/1
description ******
ip address x.x.x.x x.x.x.x
no ip proxy-arp

interface GigabitEthernet0/1
description ******
ip address x.x.x.x x.x.x.x

interface GigabitEthernet0/2
description ******
ip address x.x.x.x x.x.x.x
no ip proxy-arp

Currently I am using this expression:

interface.*\n(.*\n)*.*no ip proxy-arp

The only problem is that if "no ip proxy-arp" is applied to a single interface it will not notify me that the other interfaces do not have this configuration.

Please help.

Find more posts tagged with

Accepted answers

The_Cisco_Kid

Okay for someone like myself who is not great with regular expressions this proved to be a bit painful but i managed to get a per interface template to work to validate as indicated above and not to continue on to the next interface. All my preliminary tests have validated the viability of this script. So now I will have to make a rule for every interface and make a policy for each switch type and add the appropriate interface rules to the policy and have that policy audit based on the relevant switch criteria. Not sure if I will be able to figure out criteria for multiple 3750's in a single stack, we shall see. Here is what I came up with for the regex;

interface FastEthernet0/1.*\n(.*\n)*.*(shutdown.*\n(.*\n)(^.*?))|interface FastEthernet0/1.*\n(.*\n)*.*(switchport mode access.*\n(.*\n)*.*dot1x pae authenticator.*\n(.*\n)*.*dot1x port-control auto.*\n(.*\n)*.*dot1x violation-mode protect.*\n(.*\n)*.*dot1x timeout quiet-period 30.*\n(.*\n)*.*dot1x reauthentication.*\n(.*\n)(^.*?))|interface FastEthernet0/1.*\n(.*\n)*.*(switchport mode access.*\n(.*\n)*.*switchport port-security.*\n(.*\n)*.*switchport port-security mac-address sticky ....\.....\.......*\n(.*\n)(^.*?))|interface FastEthernet0/1.*\n(.*\n)*.*(switchport mode trunk.*\n(.*\n)(^.*?))|interface FastEthernet0/1.*\n(.*\n)*.*(ip address.*\n(.*\n)(^.*?))

Hopefully this helps some people out there....

-s

All comments

reheindel

This functionality is not currently available in the product. They have it on the roadmap for a future release.

Here is a link with the request #:

srlegge24

Thanks for the information. That functionality is crucial to make sure all of my network devices are configured correctly.

reheindel

I hear you, this is the final piece that is needed for me to be able to remove/stop supporting a second NMS product.

chris.lapoint

The issue is that the policy rules will only alert on the first violation. To workaround around this, you'll need to use the exact interface name in your RegEx (e.g. interface FastEthernet0/1) and have a rule per interface. I know this is less than ideal, but I thought it might be helpful in the interim.