Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Webcast-Catalyst9k
New Member

RME Baseline Question

I would like to create a baseline template that checks for the presence of tacacs-server 10.1.82.24 and tacacs-server 10.2.82.25 and removes any other tacacs-server ip address that might be configured. Can someone help me create a template that would do this?

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: RME Baseline Question

The following advanced rules evaluated in global mode should do it for you. This assumes you're using LMS 2.6 or higher.

+ tacacs-server 10.1.82.24

+ tacacs-server 10.2.82.25

- tacacs-server [#!(10\.1\.82\.24|10\.2\.82\.25)#]

6 REPLIES
Cisco Employee

Re: RME Baseline Question

The following advanced rules evaluated in global mode should do it for you. This assumes you're using LMS 2.6 or higher.

+ tacacs-server 10.1.82.24

+ tacacs-server 10.2.82.25

- tacacs-server [#!(10\.1\.82\.24|10\.2\.82\.25)#]

New Member

Re: RME Baseline Question

Thanks Joe, worked perfectly.

New Member

Re: RME Baseline Question

How would you write the rule for:

tacacs-server host 10.24.195.204 key 7 *****

would it be:

"+tacacs-server host 10.24.195.204 *" ?

thanks joe.

Cisco Employee

Re: RME Baseline Question

I would include one crypto pattern, and make it a literal search:

+ tacacs-server host 10.24.195.205 key 7 abcdef

But you could do:

+ [#tacacs-server host 10.24.195.205 .*#]

New Member

Re: RME Baseline Question

would:

+ tacacs-server host 10.24.195.204 key 7 [#.*#]

+ tacacs-server host 10.25.144.46 key 7 [#.*#]

- tacacs-server host [#!(10\.24\.195\.204|10\.25\.144\.46)#] key 7 [#.*#]

work?

Cisco Employee

Re: RME Baseline Question

Yes.

144
Views
5
Helpful
6
Replies
CreatePlease to create content