How to deploy a template to an interface with a specific network-policy configured?

[Juan Antonio Delgado Nieto]

We need to change the vlan assigned to a large amount of telephones and we are trying to design a template with that purpose. We are using Cisco Prime Infrastructure v3.3.

Our telephones get the vlan from a network-policy configured on the switchport using lldp-med:

                interface FastEthernet1/0/6

                 switchport mode access

                 network-policy 167

We have been looking for the table from "DB table list" where the network-policy of a switchport appears without success to include a new variable on CLITemplateDbVariablesQuery.properties.

Does anybody know where can we get that information?

Thank you in advance, J.A.

[iportuga]

Hi Juan,

If I understand correctly is your goal change only the network-policy profile number for a bunch of interfaces?

Could you give more details and an example?

Regards,

Igor

[Juan Antonio Delgado Nieto]

Yes, we need to modify the network-policy on some interfaces with telephones connected on them.

PCs use switchport access vlan and telephones network-policy. Our PC + telephone configuration is:

interface FastEthernet1/0/1
switchport access vlan 4
switchport mode access
network-policy 151
speed 100
duplex full
storm-control broadcast level 10.00
no cdp enable
spanning-tree portfast
spanning-tree bpduguard enable

And we want to modify the network-policy profile number from 151 to 150 in the interfaces where the profile number is different from 150.

We are able to identify the ports with a specific switchport access vlan but not to guess the network-policy configured on an interface. 

We can get the ports with a specific access vlan using next query on https://SERVER_PRIME/webacs/dbQueryAction.do:

select u.name from VLANSwitchportSettings u where u.accessVlan != '1' and u.owningEntityId = 'switch_id' and u.accessVlan = 151 order by u.name

Unfortunately, the ports with network-policy 151 configured on them don´t appear.

We have looked for that information on https://SERVER_PRIME/webacs/dbTableListAction.do without success.

Do you know any table with the information of the network-policy configured on an interface?

[iportuga · Accepted solution]

Hi,

Unfortunately this parameter is not saved into DB, you could use compliance audit policy rules to match the desired configuration and than take a config change action (fix job):

How To Perform a Compliance Audit