Implemented
over 3 years ago

Compare config against master template

I work for a company that has many remote sites that are all nearly identical in their network configuration. Basically the IP addresses in use at each site are different but the rest of the configurations should be identical across sites. I'd like to be able to create a "master config template" and schedule a nightly report that compares each site configuration to that single "master config template" to look for variations.

Parents
  • I would also like to bump this thread.  Here are the key issues..

    If the If-Then-Else statements don't get implemented, a "master template" with escaped fields would be ideal for large scale configs.  The RegEx are good, but the need to check multiple fields that may be different due to geographically separated locations is real.

    This boils down to verifying things like QoS, line console/vty configurations, and aaa configurations.  Those should not change 90% of the time, so having a larger scale "check text" block that allows for escaped fields with variable rather than regex would be great.  An example could be tacacs-server host $IP or $x.x.x.x, something that auto-fills that RegEx information or flags that the next expected "word" will be an IP address.

    Here's to hoping 2018 is the year for Configuration Template checking!

Comment
  • I would also like to bump this thread.  Here are the key issues..

    If the If-Then-Else statements don't get implemented, a "master template" with escaped fields would be ideal for large scale configs.  The RegEx are good, but the need to check multiple fields that may be different due to geographically separated locations is real.

    This boils down to verifying things like QoS, line console/vty configurations, and aaa configurations.  Those should not change 90% of the time, so having a larger scale "check text" block that allows for escaped fields with variable rather than regex would be great.  An example could be tacacs-server host $IP or $x.x.x.x, something that auto-fills that RegEx information or flags that the next expected "word" will be an IP address.

    Here's to hoping 2018 is the year for Configuration Template checking!

Children
No Data