Create a looping compliance audit for multiple begin/end with sections of a configuration?

Products

• VMware Smart Assurance

Issue/Introduction

This article explains about looping compliance audit for multiple begin/end with sections of a configuration?

Environment

NCM - 10.1.x

Resolution

You can create a looping compliance test in VoyenceControl to check for the existence of something in an interface and correct each interface in one batch.

The looping compliance test will loop for all content between each instance of interface <name> and the ! at the end of that interface in the configuraiton. For example, to check for interfaces set to auto duplex and change them to full-duplex, you could do the following:

1. Create a new test and name it with the following preconditions:
    
2. • Begin with 'interface (\S+)
   • End with '!'
     
      
3. Create a check pattern and name it with the following settings:
    
4. • Select 'Not Contain' and 'Backtracking' (see Note statement)
   • Enter the text that should not be contained in each interface.  Example: 'duplex auto'
   • Enter the change you want to apply at the bottom as follows:
     
     interface $1
     full-duplex
     
     Note: $1 is the interface name captured in the precondition.
     
      
5. Create a standard, name it, and link the standard to the test created above. 
6. Set the types of devices to which this standard applies by selecting all of the Cisco IOS devices and adding them.
7. Right-click on a device, select compliance audit, and select the standard you created in the preceding steps.

Additional Information

Backtracking is used to carry forward variables in the precondition. In this case, it is used for the interface name and set to run the check pattern for each occurrence in the configuration, where it began with an interface and stopped at the ! mark.