Baseline template and compliance check in LMS 2.6

Answered Question
Jun 19th, 2007
User Badges:

I have to change all the SNMP strings on a large (3000+ devices) network. I want to use a Baseline Template to first check that the new strings have been applied and then check that the old strings are removed. I also need to ensure that the correct ACL is applied to each string. Using RME 4.0.5 user guide I have tried a Basic Template of + snmp-server community {string1} rw {acl#) and many variations of this. When I run it against a router that I know has {string1} the job returns a non-compliant result. Am I using the correct syntax Or what an I missing. Any help will be greatly appreaciated.

Correct Answer by Joe Clarke about 10 years 1 month ago

Correct.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Joe Clarke Tue, 06/19/2007 - 10:44
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

Assuming your string is "notprivate" and your ACL is 3, the syntax will be:


+ snmp-server community notprivate RW 3


Since it looks like that's what you did, it would be helpful to see the exact config and the exact baseline template. It may be that RME does not have the latest configuration archived for this device.

rsiegrist Tue, 06/19/2007 - 12:08
User Badges:

I'm a bit red faced...Thank you for curing my tunnel vision. As soon as I read your response I knew my error - "ro" vs "RO" Just to make sure I understand what I'm looking for:


+ snmp-server community newstring RO 3

- snmp-server community oldstring RO 3


in compliance = newstring applied AND oldstring removed

Correct Answer
Joe Clarke Tue, 06/19/2007 - 12:23
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

Correct.

Actions

This Discussion