topic Cisco VMS exclusion in Network Security https://community.cisco.com/t5/network-security/cisco-vms-exclusion/m-p/577432#M1054883 <P>Hi</P><P></P><P>When I run the "Startup/Running Out of sync" report, all my device are out of sync. I went in my router in CLI and I found that some lines of my code are not written the same way in my running-config that in my startup-config. This is why VMS determine that all my router are out of sync.</P><P></P><P>Is it possible to exclude code of my router in the VMS configuration database ?</P><P></P><P>Thank you very much</P> Fri, 21 Feb 2020 09:06:11 GMT martindesrosiers 2020-02-21T09:06:11Z Cisco VMS exclusion https://community.cisco.com/t5/network-security/cisco-vms-exclusion/m-p/577432#M1054883 <P>Hi</P><P></P><P>When I run the "Startup/Running Out of sync" report, all my device are out of sync. I went in my router in CLI and I found that some lines of my code are not written the same way in my running-config that in my startup-config. This is why VMS determine that all my router are out of sync.</P><P></P><P>Is it possible to exclude code of my router in the VMS configuration database ?</P><P></P><P>Thank you very much</P> Fri, 21 Feb 2020 09:06:11 GMT https://community.cisco.com/t5/network-security/cisco-vms-exclusion/m-p/577432#M1054883 martindesrosiers 2020-02-21T09:06:11Z Re: Cisco VMS exclusion https://community.cisco.com/t5/network-security/cisco-vms-exclusion/m-p/577433#M1054884 <HTML><HEAD></HEAD><BODY><P>If you are talking about the RME portion of the app there are some commands that are excluded by default. Have a look at these files to see which commands may be excluded on your system:</P><P></P><P>/NMSROOT/CSCOpx/objects/cmf/data/</P><P>CommandExcludesCat.ini</P><P>CommandExcludesCe.ini</P><P>CommandExcludesCss.ini</P><P>CommandExcludesFs.ini</P><P>CommandExcludesIos.ini</P><P>CommandExcludesNam.ini</P><P>CommandExcludesPix.ini</P><P>CommandExcludesSs.ini</P><P></P><P>These files will show what commands are excluded for each device type. </P><P></P><P>Normally commands listed in 'CommandExcludesIos.ini' are not taken into account when generating the diff reports. This is to ensure that the </P><P>reports are valid. </P></BODY></HTML> Fri, 11 Aug 2006 16:25:59 GMT https://community.cisco.com/t5/network-security/cisco-vms-exclusion/m-p/577433#M1054884 David Stanford 2006-08-11T16:25:59Z Re: Cisco VMS exclusion https://community.cisco.com/t5/network-security/cisco-vms-exclusion/m-p/577434#M1054885 <HTML><HEAD></HEAD><BODY><P>Thank you very much, this is what I was looking for and it works properly.</P><P></P><P>But the problem is that my line code are related with crypto Global section.</P><P></P><P>Here's the lines that are not the same in my running that in my startup :</P><P></P><P>***Running***</P><P>crypto pki certificate chain [truspoint name]</P><P> certificate [certificate ID]</P><P> 3DAC8C03 F89B2EEB 35D622D0 1DCC8C53</P><P> F89F2ECB 35D797D0 1DC09C03 F89F2FFB </P><P> 35D197B0 ...</P><P></P><P>***Startup***</P><P>crypto pki certificate chain [truspoint name]</P><P> certificate [certificate ID] nvram:[truspoint name]#[ID].cer</P><P></P><P>Each of my spokes have a different certificate so if I want to exclude some line code, I must do it for each certificate :(.</P><P></P><P>Can I exclude a section of RME database</P><P></P><P>ex.: "Crypto-Crypto Global"</P><P></P><P>Thank you very much for your help</P></BODY></HTML> Mon, 14 Aug 2006 11:59:04 GMT https://community.cisco.com/t5/network-security/cisco-vms-exclusion/m-p/577434#M1054885 martindesrosiers 2006-08-14T11:59:04Z