Sunday, September 26, 2021

dACLs and Config Management

Hi all.

We are currently looking at rolling out dACLs back by radius at work at the bequest of my director. First off, the documentation available for this is so minimal and has really sucked getting enough research done that I think I know how to implement.

The question, has anyone done downloadable ACLs with a config manager like rancid or oxidize? My understanding is that when a user traverses a switch it will swap in the required acl into the config. My concern is that this is just going to create a duck ton of revisions in our config management. Does anyone know a good work around for this?



No comments:

Post a Comment