Selecting non-crypto IOS devices

Unanswered Question
Oct 30th, 2008

Hi,

Our more than 1500 devices are managed by LMS. Most of them use crypto IOS but some of them don't. How can i select from inventory ( report or group selection ) the devices which do not use crypto IOS.

We have to upgrade them and introduce the SSH to its.

Thanks in advance!

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Joe Clarke Thu, 10/30/2008 - 07:07

You can build a user-defined group in RME for this. For example, to match IOS devices which are running non-crypto images, this ruleset should work:

Device.Image.Sys_Description contains "IOS" EXCLUDE

Device.Image.Sys_Description contains "k9"

KAROLY KOHEGYI Thu, 10/30/2008 - 07:32

Hi,

Thanks. It is usable mainly for routers.

The following IOS description of 2950 switch is the following.

c2950-i6k2l2q4-mz.121-22.EA9.bin

it's crypto IOS. May be does "k" mean the crypto??

Regards,

Joe Clarke Thu, 10/30/2008 - 07:34

Yes, images with a 'k' (usually "k9") indicates crypto.

The problem is, the description can contain another 'k', and the image may not be a crypto image. You can try just matching on 'k', but you may have to tweak things if you get a false-positive.

KAROLY KOHEGYI Thu, 10/30/2008 - 07:40

Hi,

Yes,yes it is my problem.

If it is possible please develop this filter possibilty in the RME or LMS in the following patch. :-)

Thanks!

Joe Clarke Thu, 10/30/2008 - 07:50

You can make this request through your account team. They can open a PERS (Product Enhancement) request on your behalf.

Joe Clarke Thu, 10/30/2008 - 07:58

You can also try this pattern which should properly match more non-crypto IOS devices:

Device.Image.Sys_Description contains "IOS" EXCLUDE

Device.Image.Sys_Description contains "k9" EXCLUDE

Device.Image.Sys_Description contains "k2" EXCLUDE

Device.Image.Sys_Description contains "k8"

Actions

This Discussion