cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
288
Views
5
Helpful
1
Replies

Using DNA to scan configs for particular line items.

TeddyBoggs4138
Level 1
Level 1

Have been looking for a way to use DNA to scan the configuration of managed devices to check for ISE level port commands. Is this possible?

1 Reply 1

Preston Chilcote
Cisco Employee
Cisco Employee

As a one time scan or continuously?

 

Cisco DNA could help with a one time scan by providing you the configs for each device in inventory by API call (/network-device/${networkDeviceId}/config)

 

I think the approach I would use is to create a Day-N template with the necessary configs and then use it to provision all relevant devices.  That way you ensure consistency.  If the config drifts later on (startup vs running config), it will be flagged as "out of compliance" in Inventory.  In a future release, it will specifically check config drift between the running config and the template used to configure the device.