Standby ip and Template

rmishra22 · ‎02-03-2010

Hello All,

Thanks in advance to those who even read this topic and Many thanks to those who will reply. Here is my problem:-

I have to search for devices which do not have standby ip authentication setup. I have tried multiple permutation and combinations to setup a template both basic and advanced to match the standby <group number> ip authentication command in device config. But sadly all devices show as compliant.

Can someone help me with making a template to achieve this?

Many thanks

Joe Clarke · ‎02-04-2010

Do you mean the "standby authentication " command? It would be helpful to see a current running config to know exactly what you want to match on. I'd also like to see one of your existing templates to get a better idea what you're trying to do. In my head, I'm picturing something like:

Submode : interface [#GigabitEthernet.*#]

Body:

+ [#standby 1 authentication (md5|text) .*#]

rmishra22 · ‎02-04-2010

Pretty close, you almost read my mind except that i would like

a) to check all physical and virtual lan interfaces.

b) to check all vlans/inetrfaces in each switch

my template is pretty much as you thought except that i am using

interface [#*#]

+ standby [#*#] authentication [#*#]

Thanks

Joe Clarke · ‎02-05-2010

Well, that will not work as you are not using proper regular expressions. Try:

Submode : interface [#(Vlan|.*Ethernet).*#]

Body:

+ [#standby \d+ authentication .*#]