RME Baseline Question

[jpazahanick]

I would like to create a baseline template that checks for the presence of tacacs-server 10.1.82.24 and tacacs-server 10.2.82.25 and removes any other tacacs-server ip address that might be configured. Can someone help me create a template that would do this?

[Joe Clarke · Accepted solution]

The following advanced rules evaluated in global mode should do it for you. This assumes you're using LMS 2.6 or higher.

+ tacacs-server 10.1.82.24

+ tacacs-server 10.2.82.25

- tacacs-server [#!(10\.1\.82\.24|10\.2\.82\.25)#]

[jpazahanick]

Thanks Joe, worked perfectly.

[simon.bell]

How would you write the rule for:

tacacs-server host 10.24.195.204 key 7 *****

would it be:

"+tacacs-server host 10.24.195.204 *" ?

thanks joe.

[Joe Clarke]

I would include one crypto pattern, and make it a literal search:

+ tacacs-server host 10.24.195.205 key 7 abcdef

But you could do:

+ [#tacacs-server host 10.24.195.205 .*#]

[simon.bell]

would:

+ tacacs-server host 10.24.195.204 key 7 [#.*#]

+ tacacs-server host 10.25.144.46 key 7 [#.*#]

- tacacs-server host [#!(10\.24\.195\.204|10\.25\.144\.46)#] key 7 [#.*#]

work?

[Joe Clarke]

Yes.