42.Fun with config compliance and remediation pt.1
Nikos Kallergis
44 steps
3 minutes
1
Navigate to [http://localhost:8080/](http://localhost:8080/)
2
Click "Extensibility"
3
Click "Git Repositories"
4
Click here to sync the repo
5
Click "Jobs"
6
Click "Jobs"
7
Click here.
8
Click "Run Job Now"
9
Click "Jobs"
10
Click "Golden Config"
11
Click "Config Compliance"
12
As you can see, the running configuration on the devices is not the same as the intended one after our changes
13
Click "wsd2-rtr1" to see what's exactly going on
14
Click "Arista EOS - Interfaces"
15
Under "Missing Configuration", you can see the diff between running and intended configurations
16
To fix this, click "Config Plans"
17
Click "Generate Config Plans" to enable the relevant Job
18
Click the "Enabled" field.
19
Click "Update"
20
Click "Config Plans"
21
Click "Add Config Plan"
22
Select the "Missing" option.
23
Click on the "Feature" dropdown
24
Select "Interfaces" as this was the non-compliant feature we saw previously
25
Click "Generate"
26
Click "Close"
27
Click "Config Plans"
28
Click the "Config Set" icon to check what exact config line will be pushed to the device
29
Click "Close"
30
Click this checkbox to select all plans that we want to approve
31
Click "Edit Selected"
32
Click on the "Status" dropdown
33
Select "Approved"
34
Click "Apply"
35
Back at the "Config Plans" view, select all plans
36
Click "Deploy Selected" to push changes to the nodes
37
Click "Close"
38
Click "Jobs"
39
Click "Jobs"
40
Click here.
41
Click "Run Job Now"
42
Click "Golden Config"
43
Click "Config Compliance"
44
As you may see, the changes have been applied and the running configuration now matches the intended one
42.Fun with config compliance and remediation pt.1
Nikos Kallergis
44 steps
3 minutes
1
Navigate to [http://localhost:8080/](http://localhost:8080/)
2
Click "Extensibility"
3
Click "Git Repositories"
4
Click here to sync the repo
5
Click "Jobs"
6
Click "Jobs"
7
Click here.
8
Click "Run Job Now"
9
Click "Jobs"
10
Click "Golden Config"
11
Click "Config Compliance"
12
As you can see, the running configuration on the devices is not the same as the intended one after our changes
13
Click "wsd2-rtr1" to see what's exactly going on
14
Click "Arista EOS - Interfaces"
15
Under "Missing Configuration", you can see the diff between running and intended configurations
16
To fix this, click "Config Plans"
17
Click "Generate Config Plans" to enable the relevant Job
18
Click the "Enabled" field.
19
Click "Update"
20
Click "Config Plans"
21
Click "Add Config Plan"
22
Select the "Missing" option.
23
Click on the "Feature" dropdown
24
Select "Interfaces" as this was the non-compliant feature we saw previously
25
Click "Generate"
26
Click "Close"
27
Click "Config Plans"
28
Click the "Config Set" icon to check what exact config line will be pushed to the device
29
Click "Close"
30
Click this checkbox to select all plans that we want to approve
31
Click "Edit Selected"
32
Click on the "Status" dropdown
33
Select "Approved"
34
Click "Apply"
35
Back at the "Config Plans" view, select all plans
36
Click "Deploy Selected" to push changes to the nodes
37
Click "Close"
38
Click "Jobs"
39
Click "Jobs"
40
Click here.
41
Click "Run Job Now"
42
Click "Golden Config"
43
Click "Config Compliance"
44
As you may see, the changes have been applied and the running configuration now matches the intended one