I am trying to write a compliance check for switches. The issue I am getting now is that when the template runs I am getting notices stating that non the of switches are compliant, when they are. In the output after it runs I am seeing items in red with - and items in green with +. I thought the items in green with the + and items that are needed in the switches. Am I correct in assuming this? What are the items in red with the -?
The problem seems to be with ACLs they first show up in red (-) and then again in green (+) even though they are correct in the switch. Any ideas?
If you selected that the template is ordered, and the ACEs show up out of template order, then you could see what you describe. You may also see problems if you have IP SLA configured on your device due to bug CSCtf82992. In order to confirm, you will need to post the device's running config and an export of the template you are using.