Using "IF" staement in TCL script to modify a switchport config

[Network @RKI]

Hi all,

this ist a part of our switch port config on a C9300 with an IOSXE 17.9.X:

+++
interface GigabitEthernet1/0/7
description RADIUS Port
switchport access vlan XY
switchport mode access
authentication priority dot1x mab
+++

now due to some internal issues we have to modify all of the switchports and turn the authentication priority to "mab dot1x".

It's not possible to use the interface-range command because of some ports in between that do not use RADIUS.

So i'm thinking about a TCL script with an IF statement, maybe something like:

if {description equals RADIUS Port or authenticatio priority equals dot1x mab}
set authentication priority mab dot1x

can anyone help with the hole syntax please.

Thanks in advance
Saif

[Dan Frey · Accepted solution]

Give this a try in tclsh mode.

set lines [exec show ip int brief]
set intflist ""
foreach line [split $lines "\n"] {
    if [regexp {^(GigabitEthernet[0-9\/]+)\s+} $line match intf] {
        lappend intflist $intf
    }
}

set command "set authentication priority mab dot1x"
foreach intf $intflist {
    set desc [exec show interface $intf | inc Description]
    if [regexp {(Description: Radius Port|Description: authentication priority equals dot1x mab)} $desc match description] {
       puts "executing $intf $command"
       ios_config "interface $intf" "$command"              
    }
}

[Network @RKI]

Hi Dan,

thanks a lot for the script. It worked

Just one note: the second "set" in the line:

set command "set authentication priority mab dot1x"

is unnecessary. So it has to be:

 set command "authentication priority mab dot1x"

Best regards
Saif