Automate Interface Config with NCM?

chayden18

So I have searched most of the day with no luck. Posting to THWACK community asking for help.

Objective, change a line that has been added to most of our interfaces using NCM. I have found info for changing vlans and other info based on names, but nothing based on the config lines.

Line that I want to change:

authentication host-mode multi-auth

To :

authentication host-mode multi-domain

But this config is not on every interface as some interfaces are trunks, and guest ports.

How can I automate this using NCM? 

Best I can tell currently is that I will need to name every interface, and then use that to allow for dynamic configurations going forward.

cnorborg

The easiest way I know of doing this is via the "Comliance" portion of NCM.  

Compliance can be a little intimidating to set up, but the basic rules are actually pretty easy.   There are Reports, Policies and Rules.   Reports contain one or more policies.  Policies contain one or more rules, and policies is also where you limit what nodes it runs on, quite often by something like the Model # of the device.  Rules are the basic building block of everything.

You'll want to create a rule that uses "config blocks".  The config block start would be a pattern that matches your interface config and I would think ends on a line that starts with a "!".   So the start of the block would be something like "interface *" and the end would be "^!".

Then you would want to match on any interfaces that have your target, "authentication host-mode multi-auth".

Then you would want a remediation rule that runs on the config block, it should automatically populate it with the variable ${ConfigBlockStartLine}, leave that there.   you will add after that the "authentication host-mode multi-domain", which I believe will replace the old command.  If you need to do a "no auth host-mode multi-auth" first, go for it.

Add the rule to your policy, add the policy to a report, then tell it to refresh the report and you're all set.   It will produce a report of everywhere it thinks it needs to change this, you can then choose how you want it remediated.  Test on a single device at first, if it works, run it on everything...

This article, and the one it links to should help out.   https://thwack.solarwinds.com/t5/NCM-Discussions/NCM-Compliance-Remediation/td-p/187399