Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'd like to perform audit and maintenance of the existing cisco router and switch configuration before changing to the new ISP and implementing new VLAN features,

how do you manage and audit your existing cisco firewall access control and routing rules ?

is there any special tools or anyone can just use microsoft excel to sort it out and make comparison one with another.

Thanks.

share|improve this question

1 Answer 1

up vote 2 down vote accepted

Personally I use TFTP, RCS and diff but there are plenty of tools out there. For example WinAgents IOS Config Editor

I'm not sure what you mean by auditing. I use a visual inspection and lots of comments in the config file to make sure I understand what every IOS command is doing there. The comments are lost when loaded into the router but I always make changes on the TFTP server, not on the router. That way I can upload a revised config, load, test and backout to prior config if needed. I do this out of hours as I only have one router - so a test-rig would be overkill for me (but perhaps not in your case).

Before I make non-routine changes, I download the running config, I fire up SDM, make changes using it, download the new running config, revert to the standard config, use diff on the running configs to see what SDM changed, apply diffs to my commented master config and add comments to the changed parts.

After making any change I check in the change to a revision control system with appropriate log entry. In my case RCS because it's there, has zero setup, I know RCS and nothing more complex is needed.

Here's an interesting article on a related topic.

Here's Cisco's take.

share|improve this answer
    
ah.. that' sounds great man, I'll check that out. –  Server System Specialist Nov 3 '10 at 0:54

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.