nanog mailing list archives
Re: Managing IOS Configuration Snippets
From: Ryan Shea <ryanshea () google com>
Date: Thu, 27 Feb 2014 07:45:47 -0500
To clarify a bit, systems to grab or store the running config or keep track of intent. Let's assume that comparing the deployed configuration of an individual device to intent derived from a bunch of configuration bits from an RCS system is *hard*. For example, let's say you have a vty configuration which has a couple sections, line vty 0 2 and line vty 3 5. Someone updates this configuration in your RCS which removes the access-class from line vty 0 2 and adds it to the access-class for line vty 3 5. Let's also assume that you have *lots* of devices and *lots* of configurations and you cannot reasonably egrep/regexp your way to success here. I thank you all for your responses. I was hoping that someone trick I was not seeing and would say "oh, you just need to do..." On Thu, Feb 27, 2014 at 6:52 AM, Andrew Latham <lathama () gmail com> wrote:
For a large install I set up a solution that might help. I utilized a Mediawiki install and its API to create, update and pull the configuration on many IOS devices. A wiki page for the host name was dynamically created and the configuration was placed there daily or hourly. This allowed support to review the configuration and advise customers quicker. Additional hacks for updating the devices via the wiki were used. The goal was transparency for the support team and the side effect was wiki page history showing what day and what lines changed. As mentioned the answer to your question would likely make a good article. On Wed, Feb 26, 2014 at 3:22 PM, Ryan Shea <ryanshea () google com> wrote:Howdy network operator cognoscenti, I'd love to hear your creative and workable solutions for a way to track in-line the configuration revisions you have on your cisco-like devices. Let me clearify/frame: You have a set of tested/approved configurations for your routers whichuseIOS style configuration. These configurations of course are alwaysrefinedand updated. You break these pieces of configuration into logicalsections,for example a configuration file for NTP configuration, a file forcontrolplane filter and store these in some revision control system. Put asideforthe moment whether this is a reasonable way to comprehend deployed configurations. What methods do some of you use to know which version ofaconfiguration you have deployed to a given router for auditing and update purposes? Remarks are a convenient way to do this for ACLs - but I don't have similar mechanics for top level configurations. About a decade ago I thought I'd be super clever and encode versioning information into thesnmplocation - but that is just awful and there is a much better way everyone is using, right? Flexible commenting on other vendors/platforms makethis abit easier. Assume that this version encoding perfectly captures what is on therouterand that no person is monkeying with the config... version 77 of the control plane filter is the same everywhere.-- ~ Andrew "lathama" Latham lathama () gmail com http://lathama.net ~
Current thread:
- Re: Managing IOS Configuration Snippets, (continued)
- Re: Managing IOS Configuration Snippets Christopher Morrow (Feb 26)
- Re: Managing IOS Configuration Snippets Mark Tinka (Feb 27)
- Re: Managing IOS Configuration Snippets Saku Ytti (Feb 27)
- Re: Managing IOS Configuration Snippets Tim Durack (Feb 27)
- Re: Managing IOS Configuration Snippets Ryan Shea (Feb 27)
- Re: Managing IOS Configuration Snippets Tim Durack (Feb 27)
- RE: Managing IOS Configuration Snippets Chuck Church (Feb 27)
- Re: Managing IOS Configuration Snippets Saku Ytti (Feb 27)
- Re: Managing IOS Configuration Snippets Ryan Shea (Feb 27)
- Re: Managing IOS Configuration Snippets Ryan Shea (Feb 27)
- Re: Managing IOS Configuration Snippets Suresh Ramasubramanian (Feb 27)
- Re: Managing IOS Configuration Snippets Erik Muller (Feb 27)
- Re: Managing IOS Configuration Snippets Simon Knight (Feb 27)
- Re: Managing IOS Configuration Snippets Joe Abley (Feb 27)
- Re: Managing IOS Configuration Snippets Erik Muller (Feb 27)
- Re: Managing IOS Configuration Snippets Simon Knight (Feb 27)
- Re: Managing IOS Configuration Snippets Simon Knight (Feb 27)