hello I'm new to EEM scripting and I'm looking for a way to possibly change a ports VLAN if inactive for 6 weeks instead of shutting it down. I want to basically move it to a VLAN that has no L3 or no access to anything so our support guys don't waste time toning cables since all our path panels are plug in to the network. We do this now quarterly by clearing counters on all the switches and basically com back after 6 weeks and change all the unused ports to that VLAN. Clearing the counters are easy since I can do it on Cisco Prime but to changer the VLAN to each switches are time consuming.
consider using DOT1x authentication on the connected ports. (Cisco ISE, ACS. Radius etc) ports are unauthorized and have limited network access until a user/device authenticates and is (by ISE policies) assigned to the desired VLAN.
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
