Cisco NX-OS - How can I ensure disabled ports are placed in a specified, unused, vlan?

[dakotaglory]

Start block: ^interface Eth.*

End block: interface mgmt0

Not sure how I can go about these types of queries. 

[JFerong]

Hi;

Thank you for using the Forums!

If I understand your question correctly, what you want to do is to create a configuration policy with a rule that includes the start and stop block characters you indicated below.

You can then create an event that is activated on a Policy non-compliance "when the following events occur".   You would select the policy (for selected policies:) which should show up in the window. 

This event should  run a task (to take this action:) that would run a command script to ensure that the ports were set how you want them.

I hope that this helps..   Please feel free to re-post if you need more information.

[dakotaglory]

Joe,

Thank  you for your reply. 

We do not want to remidiate a finding at this time.  We want to verify that all ports which are administratively shutdown are configured for a predetermined vlan. Ports that are up can be configured to other vlans. NX-OS doesn't have a shutdown command in the config.

[JFerong]

HI;

I did some testing and still am unsure of what your expectation is.

In your first post, you defined a start block of ^interface Eth.* and a end block of interface mgmt0.   In my device, that's a pretty big block.  You talks about vlans..  so you're looking for downed interfaces that are assigned to a specific switchport? 

If that is the case, then we're still talking about a configuration policy.  You'll have to set up the condition in the policy rule and use the configuration block feature to define your limits, then identify the condition that you are looking for. 

You can then do the check configuration policy against that group or specific devices.  This will provide a list of devices that meet your criteria.  Then you can convert that to a report or excel report.

I hope that helps.