How do you document your firewall config?

[scottyd]

Hi Everyone,

We are looking for ideas on how best to document a firewall solution; NAT'ing, rules, interfaces etc. We have spreadsheets, but they don't really cut it.

Regards,

Scott

[Bastien Migette]

Hi scott,

A lot of commands have a description keyword that you can use, otherwise, I'm used to add comments in my config templates using '!' or '#' as it is not parsed:

ciscoasa(config)# #fdfdsfds
ciscoasa(config)# !sfqfdfs

ciscoasa(config)#

Hope this help.

[scottyd]

Thanks for the feedback.

Our configs are pretty big, hundreds of lines, and I want to document them to the state that non network engineers can understand them and see if their servers have access etc.

Scott

[Collin Clark]

I document in the downloaded config file. Not the most elegant or efficient way, but that's how I do it. Sounds like an opportunity for someone that can write an application.