Implementing Changes Once you have your network policies defined, see the prior posts Part 1 and Part 2 , then implemented in a configuration policy check, you need a way to correct any non-compliant configurations. An obvious choice for remediation is to simply login to the offending device and type...

In the prior post, I explained why configuration policies are needed. Now it is time to discuss how to build policies. I like to start with the written policies, because that tells me what was intended. An example is: "All network devices will be configured to send syslog messages to the syslog...

I'm building configuration policy checks for a customer and realized that it would be beneficial to share the design choices and implementation details that I encountered. The tool that I used is NetMRI's Configuration Policy, but the same thing would work for other tools that have similar configuration...

Welcome to the New Year - 2011! At the start of a new year, there is always talk of new year resolutions. You've seen them in magazines and newspapers: eat healthier food, loose weight, begin an exercise program, tackle the CCIE test, learn a new technology, clean up the network. I can't say...

I did a Packet Pushers Podcast recently with Greg Ferro and Josh O'Brien , talking about the common network problems that we see in operational networks. The list of topics comes from a poster, The Top 25 Network Problems and Their Business Impact that I developed while at Netcordia (now Infoblox...

I've been doing a configuration change on over 500 devices of a customer's network, and using NetMRI to install the change was extremely easy. Below is the script that I used, and I thought it would be useful to describe how it works. The overview of the process is that the script connects to...