The most recent content from our members.
Hello everyone, wondering if someone's been able to trigger when looking for empty extended ACL's. I've tried doing using a config block start/stop of "ip access-list extended" but not sure what to use for the string match that would look for empty space. I would like to find ACL-1, empty ACL's that can be deleted from…
I have a rule to implement DOT1X on all ports configured for a specific VLAN; it was a week long odyssey through multiple forums just to figure out how to do that correctly. Now, for my next challenge, my network has different models of switches and I don't want to maintain two sets of rules and policies for each type. For…
I have a config change template to generate MAC and ARP xml files on Juniper EX switches. Here's the pertinent snippet: script GetARPandMACJuniper( NCM.Nodes @ContextNode, string @ARPfile, string @MACfile ) { CLI { show arp | display xml | tee @ARPfile show ethernet-switching table | match ge- | display xml | tee @MACfile…
I’m trying to create a compliance report rule that would look for “switchport port-security”, at the same time, I do not want it to flag “switchport mode tunnel” and other interfaces with certain descriptions. For a start, I started with the “switchport mode tunnel” filter. This is what I have: I can’t figure out what I’m…
It looks like you're new here. Sign in or register to get started.