CiscoWorks LMS: How to check which devices are using a given configuration?

[Inspector7]

I was asked by my colleague to find out how many of our switchers and routers are having the "ip helper-address" command configured, as they are considering changing the enterprise DHCP server location. By counting the number of network devices currently having the "ip helper-address" command configured, we'll get an estimate of how many devices needs to be reconfigured. So, to my problem:

I figured I could solve this by creating a baseline template in CiscoWorks LMS 4 containing simply the "ip helper-address" interface sub-command, and then run a job to count the number of devices that "complies" to the template. Followed the guidance given in the LMS help section, but it didnt work out.

This is how I configured it:

1. Configuration -> Compliance -> Compliance Templates -> Create

2. Selected "Routers" and "Switches and Hubs"       -> Next

3. Unchecked the Conditional block

4. Under the Compliance block, chose "Submode" and the following (to indicate interface command mode): interface [#Ethernet.*#]

5. In the Cli commands textbox: + ip helper-address

6. Finish

Then I ran the job, selected all network devices, and the job completed successfully. However, the results were no good! The job report stated that approx half of the devices was compliant to the template (hence ip helper-address), while the other half werent. However, after manually double-checking the configuration on devices from both halves, none of them had the "ip helper-address" command configured. So obviously, the compliance job didnt run as expected.

Have I misconfigured anything? Isnt this the sort of jobs the compliance jobs are meant for?

Any help on this would be very much appreciated! Thanks

[Gaganjeet Chug]

Hi,

Kindly check if you have the latest configuration collected by the CiscoWorks server since It will do the check on the configuration that do exist in the database of the CiscoWorks server and not on the device.

If its, then kindly share the xml file to cross check it.

Many Thanks,

Gaganjeet

[Inspector7]

Thanks, I will get into that, but as it turned out we did bump into some credential problems today, so I will need to check it out as soon as the credential issue is solved.

Anyhow, which XML is it that you are asking for?

Thanks

[Inspector7]

After successfully syncing the configuration database I ran the configuration compliance job once more, however with the same (misleading) results. Cross-checking the configuration reveals that none of the devices marked as compliant are actually having the "ip helper-address" configured.

Maybe it is something wrong with the input data I specified for the compliance template (ref step 1-6 in my first post)?

Or maybe the Compliance Jobs arent the best ways to determine whether or not my devices are having the "ip helper-address" configuration defined?

[Gaganjeet Chug]

Hi,

There is a way you can also export the baseline template. Kindly export it and share the same with the actual device config that you need and want to check.

Exporting base line template :-

http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_resource_manager_essentials/4.3/user/guide/baseline.html#wp1938908

Many Thanks,

Gaganjeet