Implementing Changes Once you have your network policies defined, see the prior posts Part 1 and Part 2 , then implemented in a configuration policy check, you need a way to correct any non-compliant configurations. An obvious choice for remediation is to simply login to the offending device and type...

In the prior post, I explained why configuration policies are needed. Now it is time to discuss how to build policies. I like to start with the written policies, because that tells me what was intended. An example is: "All network devices will be configured to send syslog messages to the syslog...

I'm building configuration policy checks for a customer and realized that it would be beneficial to share the design choices and implementation details that I encountered. The tool that I used is NetMRI's Configuration Policy, but the same thing would work for other tools that have similar configuration...

I did a Packet Pushers Podcast recently with Greg Ferro and Josh O'Brien , talking about the common network problems that we see in operational networks. The list of topics comes from a poster, The Top 25 Network Problems and Their Business Impact that I developed while at Netcordia (now Infoblox...

Have you ever accidentally left debug enabled on a Cisco network device? I have, many years ago. I had been doing some troubleshooting and was interrupted by someone with a question. Auto-logout closed my session and by the time I returned to what I was doing, I'd forgotten where I was. An hour or...