Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

NCM 802.1x rule

FormerMember

New to NCM

Trying to craft a rule to help identify switch ports that do not have 802.1x configured.

I can't seem to get the logic right.

I am doing a 'String does not exist' and block mode

regex - interface (.*)

string - switchport mode access

string -dot1e pae authenticator

The logic should be for each interface that if the interface is an access port does it contain the dot1e pae authenticator string

It seems to be including trunk ports

Kind of need an if statement

Find more posts tagged with

Accepted answers

All comments

alexpf

You can add a string that says does not contain switchport mode trunk.

FormerMember

Thanks alexpf but added and still not provided expected results. Desired out come is for ALL access ports that do NOT have pae authenticator be flagged. This script right now is showing ports, including trunk ports, in the results.

This last run, with your suggestion, shows

Pattern ‘Interface (*.) was found

Pattern ‘switchport mode access’ was found

Pattern ‘ dot1x pae authenticator’ was not found

Pattern ‘switcport mode trunk’ was not found

alexpf

Make sure you have your rule parsed correctly. I do not think you need pattern interface. You just need to search config blocks.

Example config block start - ^interface GigabitEthernet.*

Example config block end - !

So it starts with the carat, and the end is just an exclamation point.