Check specific command on each interface by Cisco PI Compliance Policy

[Villa Fung]

Can the Cisco PI Compliance Policy feature check if "spanning-tree portfast" is configured on each interface currently configured?

Some information is found in the official documentation, but only some examples are described, such as SNMP/NTP/IOS versions.

[ammahend]

I haven't done this specific task, but don't see a reason why you can not, you can try out a policy something like

Rule 1

scope=configuration

Parse as block = ^interface .*

condition match criteria = interface (.*)

selected match action = continue

Rule 2

scope=previously matched block

condition match criteria = spanning-tree portfast edge

selected match action = do not raise violation

selected does not match action = raise violation

let me know if it works for you