Tuesday, November 10, 2020

Configuration policing thoughts..

A little bit background.. I'm working on making the configuration (esp access lists in Cisco and firewall filters in Juniper) consistent across 1000s of devices. Along with other configurations to be desired.

Tools I came across but limited in one way or the other, either I'm doing it wrong or that I'm less skilled in making them work..

  1. Batfish: my thoughts are this looks like an overkill for the task that I'm doing.

  2. CiscoConfParse: it seems this needs alot of upfront effort, but seems the right one.. heading this way currently..

Am I heading the right direction? Or is there a simpler approach..

Did you already came across this problem? How did you solve it?



No comments:

Post a Comment