cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
432
Views
0
Helpful
2
Replies
Highlighted
Beginner

Using RME baseline templates to find non-compliant SNMP strings

Running LMS3.2.1

A. Can I run a compliance check using RME baseline template to find devices which have non standard SNMP strings IN ADDITION to the correct one?

How will the regular expression look like if we want to say

+ snmp-server community cisco123 ro

+ snmp-server community cisco456 rw 1

- snmp-server community [anything else] ro

- snmp-server community [anything else] rw [#.*#]

B. Is it possible to run a clean up job on the violating devices by using DEPLOY (or NetConfig, etc.)?

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

- [#snmp-server community (?!cisco123|cisco456).*#]
+ snmp-server community cisco123 RO
+ snmp-server community cisco456 RW

  From the compliance job result GUI, you can deploy the job directly after verifying the results.  When you deploy this template, it will remove any community that does not match "cisco123" or "cisco456", and then add them if the device does not already have them.

View solution in original post

2 REPLIES 2
Highlighted
Cisco Employee

- [#snmp-server community (?!cisco123|cisco456).*#]
+ snmp-server community cisco123 RO
+ snmp-server community cisco456 RW

  From the compliance job result GUI, you can deploy the job directly after verifying the results.  When you deploy this template, it will remove any community that does not match "cisco123" or "cisco456", and then add them if the device does not already have them.

View solution in original post

Highlighted

Thanks for the reply. It is working except for some old switches where the RO and RW are in lower case. It is marking those devices as non-compliant.

Content for Community-Ad