Hello, Really stuck on this one. The above script will not leave the tclshell which makes using it with Solarwinds a deal breaker because it just times out. Like I said before it is like the switch doesnt even see the tclquit command Any help on this is much appreciated. ... View more

Daniel, Here is the output: CPAV-GRZ.83#tclsh              CPAV-GRZ.83(tcl)#set ports [exec sh int status | ex ( notconnect +1 )|trunk ] Port      Name               Status       Vlan       Duplex  Speed Type Gi0/1     Gartner            notconnect   3            auto   auto 10/100/1000BaseTX Gi0/2     Gartner            notconnect   3            auto   auto 10/100/1000BaseTX Gi0/3     Gartner            notconnect   3            auto   auto 10/100/1000BaseTX Gi0/4     Gartner            notconnect   3            auto   auto 10/100/1000BaseTX Gi0/5     Gartner            notconnect   3            auto   auto 10/100/1000BaseTX Gi0/6     Gartner            notconnect   3            auto   auto 10/100/1000BaseTX Gi0/7     Gartner            notconnect   3            auto   auto 10/100/1000BaseTX Gi0/8     AP                 notconnect   50           auto   auto 10/100/1000BaseTX CPAV-GRZ.83(tcl)#foreach line [split $ports "\n"] { +>  if [regexp {^([A-Za-z0-9]+\/[0-9\/]+)\s+.*( 3 | 4 | 5 | 6 | 7 | 11 | 50 )} $line match port vlan] {        +>  puts "$port in vlan $vlan added to port security" +>$g "interface $port" "Switchport port-security maximum 15" "Switchport port-security aging type inactivity" "Switchport port-security aging time 5" "interface $port" "Switch port-security"    +> +>} +> +>} Gi0/1 in vlan  3  added to port security Gi0/2 in vlan  3  added to port security Gi0/3 in vlan  3  added to port security Gi0/4 in vlan  3  added to port security Gi0/5 in vlan  3  added to port security Gi0/6 in vlan  3  added to port security Gi0/7 in vlan  3  added to port security Gi0/8 in vlan  50  added to port security CPAV-GRZ.83(tcl)# That is a copy/paste from the same version of the script above. Thanks! ... View more

We aint out of the woods yet. When I dump the above script on a switch it does not come out of the tcl shell: It just stays like so: switch01(tcl)# It's as though it does not see the tclquit command. I have tried exit and still cant get it back to this: switch01# This has to be something simple. ... View more

We tweaked it a little more  because ports with no config at all were getting port security added to them: tclsh set ports [exec sh int status | ex ( notconnect +1 )|trunk ] foreach line [split $ports "\n"] {   if [regexp {^([A-Za-z0-9]+\/[0-9\/]+)\s+.*( 3 | 4 | 5 | 6 | 7 | 11 | 50 )} $line match port vlan] {          puts "$port in vlan $vlan added to port security"   ios_config "interface $port" "Switchport port-security maximum 15" "Switchport port-security aging type inactivity" "Switchport port-security aging time 5" "interface $port" "Switch port-security" } } tclquit Daniel, thanks so much. You got us on the right track. THANK YOU !! ... View more

Here you go: Gi0/2     THIS WORKED        notconnect   3            auto   auto 10/100/1000BaseTX Gi0/3     THIS WORKED        notconnect   3            auto   auto 10/100/1000BaseTX Gi0/4     THIS WORKED        notconnect   3            auto   auto 10/100/1000BaseTX Gi0/5     THIS WORKED        notconnect   50           auto   auto 10/100/1000BaseTX Gi0/6     THIS WORKED        notconnect   50           auto   auto 10/100/1000BaseTX Gi0/7     THIS WORKED        notconnect   50           auto   auto 10/100/1000BaseTX Gi0/8     THIS WORKED        notconnect   50           auto   auto 10/100/1000BaseTX Gi0/10    TRUNK              notconnect   1            auto   auto Not Present ... View more

Wow! This is almost working the way we want it. The only problem is when the trunk interface is not up but configured, security gets added. We are close! ... View more