Change ACL

Question

Hello,

I would like to know how I can update the ACL on multiple in the network.

I want to introduce an ACL block in a specific position but in some devices the ACL

is a bit different. Is there a config change template that allows you to insert a block

of code in all of the network's nodes using NCM.

cahunt · Answer

Here are a couple of links to help you out with getting it right for your needs.

Example variable script

More Automation in NCM: Usage of Variables and Custom Properties in Command Scripts and Config Change Templates

If you are able please share a generic version of what you do come up with, and reach out if you have any other issues.

wilson_seven · Answer

Hi,
I'm new to NCM and I want to write an ACL script using config change template

but I'm having problems because I do not know what function / command I can

write something like:

if (condition) {

CLI {

conf t
                          ip access-list extended 100
                          number_of_line rule 1
                          number_of_line rule 2
                          number_of_line rule 3
                          exit
                           wr
               }
}

, where number_of_line is variable from node to node.

I have to put the block ACL before blocking the private IP's of class A, B, and C.

cahunt · Answer

This is very easy to do with NCM. If you are cleaning up, consider the different setups/amount of mess that you have. You can build in all the NO's you need to, to dump the bad or non conforming ACL's and then setup your baseline. Separate a second script for additions to specific area's like data centers or some special/remote sites where you might need a few additions beyond your base ACL. You should have no issue selecting 500+ nodes to perform the script on if you have a large network - just note what m_roberts​ said above so you do not have to click so many check boxes.

-CharlesH

Loop1 Systems: SolarWinds Training and Professional Services

* * * LinkedIN: Loop1 Systems
* Facebook: Loop1 Systems

* * * Twitter: @Loop1Systems