Hi,
We are looking for an easy way for our security department to shut end user interfaces (mostly fa, some gi). previously we've done this with home-grown scripts and I've been asked if LMS could do this easily.
so ideally, the security department would have to select the "shut interface" job, select the device, and tell it what port to shut. I'd rather create a template that only works on end user switches (3750-g-e-x, 2950,3560 etc. NOT 6500, blade switches, routers, etc.)
From what I've tried, I could only hard set (int fa1/0/1 ->shut) the interface in the job. is there a way I could create a basic shut template that prompts the user what port to shut (or put on a black-hole vlan)?
Or, is there another way to do this aside from a netconfig job?
==requirements==
*various credentials (already created different credential sets so this is OK)
*security department should not have permission to shut trunks
*we would like to restrict access to the security team from the rest of LMS
==system/network configuration==
*lms 3.2 patched up to date
*switches running snmp2 RO only
*lms could telnet/ssh to devices
*dev stage of deploying snmpv3
*local authorization (non-ACS), TACACS authentication with local fallback
Thanks much in advance!
