Netcool Configuration Manager - Compliance Definition Using Golden Configuration

Body

To create an compliance definition using golden configuration, you would need to have a file-based access device.

NOTE:

(i) Instead of using the "show running-config" (or "show configuration") of a real device, you should point the "config.running.05.readReturnFromFile" command to a golden configuration file.

(ii) I found that it is better to use "config.running.02.getSCP=$ftp_username$:$ftp_password$@$ftp_hostname$:$ftpPath$/$ftp_filename$" instead of "config.running.05.readReturnFromFile=<filepath>" because there are times when the '@' symbol could not be read by NCM properly.

Eg.

"config.running.02.getSCP=icosftp:icosftp@localhost:/home/icosftp/golden/cisco.txt&#34; 

 

 

Once you were able to create a file-based access device and import the golden configuration (as its imported configuration), you need to declare the imported configuration as Golden Configuration.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

NOTE: Choose "Configuration is available to other devices if you are unsure. For more information, please refer to the documentation.

 

 

With the Golden Configuration created, you can proceed to create the compliance definition.

 

(1) Launch the Compliance GUI.

 

(2) After that, select DEFINITION tab on the left and right-click to select "New Definition".

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

(3) From there, enter the "Name" and "Description" of the compliance definition. After that, choose "Create Compliance Definition using a Golden Configuration".

 

 

 

(4) Once you click "Next", you will need to locate the file-based device you created for its Golden Configuration.

 

 

 

(5) NCM will load the model for the device and then you will be presented with the following.

NOTE:

(i) All valid and supported configuration will be read from the Golden Configuration and appear under the "Evaluation..." table (in BLUE box).

(ii) You can add more from the RED box if you like to.

 

 

 

(6) Once completed, you can proceed to save the compliance definition in an existing or new realm.

 

 

 

So, that's it!

You can now proceed to use the newly created compliance definition in your rule, etc.