Welcome to Infoblox NetMRI Community Sign in | Join | Help
in Search

Applied Infrastructure

Subsystem Configuration Policy Check

 I'm working on a network that requires configuration checks be performed.  For some of the subsystems, that's pretty easy because the configuration is done per device and there are no external dependencies.  For example, the desired SNMP, logging, VTY, or NTP configurations are well known and only vary when the configuration syntax is varies across device types or OS release. However, other parts of the configuration are highy dependent on data regarding how the device is installed and connected.  How would you handle identifying the differences in the capabilities of the various flavors of the WS-X6148 (48 port) switch blade in a 6500/7600 platform and apply the correct configuration to those ports?

My prime example for configuration dependency is the set of configurations that may be applied to switch ports.  If a port is used as an access port, it would have one configuration.  If it is a switch-to-switch link, it will have a different configuration.  And if it is a routed interface, it will have yet another configuration.  I'm not aware of tools that can take into account how a port is used and then use that to determine which of several configuration segments to use.

The same mechanism is needed for performing configuration updates.  When you're trying to install a set of configuration updates to thousands of switch ports on hundreds or thousands of devices, doing manual updates is out of the question (unless you enjoy tracking down a lot of human error induced problems).  In this case, I may be modifying a QoS command across all my access ports.  I don't want to rely on ports being reserved for specific roles because some switches will have a different number of ports than others.  Aggregation switches may have more down-stream switches than others, potentially altering which ports need to have QoS parameters changed or perhaps changing what commands would be used.

If you're aware of any tools that can handle configuration checking and updates like those that I describe above, please let me know.

  -Terry

Comments

 

sbusby said:

Hey Terry, great question!  IIRC several of us discussed this back in Oct '07, during the Netcordia CAB.  Finding an application or configuration management system that can perform this function would be terrific.  

We have been looking at using NetMRI for this function. Using a standard naming convention ("Dist" or "Core") in our Distribution or Core layer switches helps to isolate all other switches as Access layer.  But with a myriad of switch platforms and modules just in the access layer, the decision tree has become way too complicated.  

Definitely a blog I'll be watching to see if somebody comes up with something, anything.

December 12, 2008 10:46 PM
 

Terry's Blog said:

I've written before in Subsystem Configuration Policy Check about incorporating operational data

May 12, 2009 9:46 AM

About tslattery

Terry Slattery, CCIE #1026, is a senior network engineer with decades of experience in the internetworking industry. Prior to joining Chesapeake NetCraftsmen as a full time consultant, Terry was the founder and CTO of Netcordia, and inventor of NetMRI, a suite of network management products. Terry started Netcordia as a consulting company in 2000 and transitioned to a network management product company in 2003. During the consulting days, he used his network design and implementation skills to lead a team in the design and implementation of a high availability network at a brokerage clearing house. Terry is the former President and founder of Chesapeake Computer Consultants, Inc., a networking and computer systems training and consulting company. He co-invented and patented the vLab(tm) internet-based remote lab system. He is co-author of the McGraw Hill text Advanced IP Routing in Cisco Networks. Terry led the team that developed the current Cisco IOS user interface under contract to Cisco Systems. Terry is experienced in the design and installation of large TCP/IP based networks and is a successful network protocol instructor. He is the second Cisco Certified Internetworking Expert (CCIE) #1026 and the first outside of Cisco. He enjoys membership on the Vanderbilt University Engineering School’s Industrial Advisory Board and the IEEE.

This Blog

Syndication