My organization is deploying some new 9407 switches for campus access, and one feature I've been looking at is using auto smart ports to set the ports for different settings, depending on what gets plugged in.
One of my challenges is that we are using a non-Cisco vendor for desktop switches that a user may have at their desk. While I can do detection based upon the MAC address, I'd much rather take advantage of LLDP as a more reliable means of detection, especially if the use of these small switches extends beyond the pilot.
I came across a document, "Auto Smartport with Custom Trigger", which led me to find the dc_default_profiles.txt. This looks like the file I would need to either modify or augment in order to use this kind of detection. Unfortunately, there is no clear documentation on how the file is structured, or how it can be updated / replaced.
Of course, the header contains this:
# ------------------------------------------------------------------
# Profile, Rules and check definition for the IOS rule engine
# Copyright (c) 2010-2013, 2017 by Cisco Systems, Inc.
# All rights reserved.
# **** THIS FILE IS AUTO-GENERATED FROM XML FILE - DO NOT EDIT *****
# ------------------------------------------------------------------
It appears there are a few sections:
- Count of OUI vendor strings
- Lines of OUI vendors, 1 per line.
- Count of OUI hash entries
- Lines of OUI hashes. 2 lines. hash, then vendor in list above.
- Count of Checks
- Lines of checks, which have this format: attr_type,id,attr_tag,operation,val_type,val
- Then Rules
- And a list of rules: # rule_term format: term_type, {attr_type, id}, op ...
Now here's my problem. There is no documentation to either add to, augment, or whatnot. Since authentication is not required on a per-port basis, it doesn't seem sensible to deploy something like ISE.
Does anyone have suggestions?
++I;
