cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
891
Views
0
Helpful
4
Replies

New to Prime, wrote a compliance policy and not sure what I'm missing

ab23
Level 1
Level 1

I'm trying to write a policy that checks the interfaces and if an ACL is applied to that interface, return the interface name, the ACL that is applied, and show ip access-list. I thought I had it setup correctly, but my job is just showing "success." So I'm not sure where I'm going wrong. I'm new to prime so I'm learning as I go. 


So say config looks like this:

 

interface GigabitEthernet1/1

    ip access-group 75 in

 

It would return saying int Gi1/1 has access-group 75 in

Here is show ip access-lists 75

 

Conditions.png

 

 

This is condition 2:

 

condition2.png

 

 

This is condition 3:

 

 

 

condition3.png

 

4 Replies 4

balaji.bandi
Hall of Fame
Hall of Fame

Fix cli should fix the issue right ? if the ACL not exits ? why we configuring this as show commands ?

Click on the success it show you what action it took  against device :

 

check this video step by step :

https://www.youtube.com/watch?v=ZyzaajSGtV4

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

This video demonstrates the process to audit device configurations by configuring a policy, configuring polices in a profile, running an audit by using a profile, evaluating audit results, and correcting configuration issues.

because I'm trying to see what interfaces have an acl applied to them and then list the interface and the acl. 

 

So say config looks like this:

 

interface GigabitEthernet1/1

    ip access-group 75 in

 

The policy would return saying int Gi1/1 has access-group 75 in

Here is show ip access-lists 75

as i understand your requirement to check the interface do have ACL ignore it, if not add ACL is this correct.

 

as i understand fix were you looking to change the config. or am i misunderstanding your requirement?

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

No sir. I want to check the interface to see if it has an ACL. If the interface does have an ACL, I want to list what ACL it has. 

Review Cisco Networking for a $25 gift card