Network Management

Apply a compliance rule with config block using RegEx to selected interface types

There are times when a Compliance rule needs to be confined to a subset of interfaces already in group and needs to be dealt with differently than a standard Config Block

First published date

10/12/2018 7:48 PM

Last published date

1/3/2025 10:30 PM

Overview

There are times when a compliance rule needs to be confined to a subset of interfaces already in group and needs to be dealt with differently than a standard Config Block.

Product section

Network Configuration Manager

Cause

N/A

Resolution

Create the policy rule in the web

  1. In the advanced section, set the criteria you are searching for.
  2. in the search Config File/Block, select the Config Block.
  3. Lay out the criteria of the section(s) of the config where NCM needs to look at.

For this example, I want to search several different interfaces, but not all

I want to look at any block that starts with interface serial, interface test1, interface test2 or interface multilink

  1. The RegEx for the config block start would be: 
    interface serial*.*|interface test1*.*|interface test2*.*|interface multilink*.*
  2. The RegEx for the config block end would be: 
    !

Note: Prior To NCM 7.7, RegEx patterns used in the Config block is a single line expression.  Multi-line expressions used will not be fully recognized.  

Example of a Non-supported Regex:

In this case I would like to check all Gigabit ethernet ports on VLAN 104 that have flowcontrol receive on.

 

^interface GigabitEthernet.*\n(.*\n)*.*switchport access vlan 104.*\n(.*\n)*.*flowcontrol receive on