We're checking compliance on all FA ports for switches using standard config settings:
+switchport mode access
+switchport access vlan xxx
However, sometimes an AP hangs off a FA port or even a switch and want to build some logic in to handle those interfaces. Doing [#(access|trunk)#] handles the trunk issue, but it seems like it should be if trunk then a different set of checks should be in place.
Can that be done in the templates?