What would be the easiest was to accomplish this?
Find all ports that do not have 'switchport port-security'
show run | exclude ?
I don't have a swicth with me and packet tracer does not have the commands avaliable.
Network Engineering Stack Exchange is a question and answer site for network engineers. It only takes a minute to sign up.Sign up to join this community
Another option if you're willing to use a python script, use ciscoconfparse.find_parents_wo_child().
In your case, usage would be:
from ciscoconfparse import CiscoConfParse parse = CiscoConfParse('/path/to/configuration/file') missing = parse.find_parents_wo_child('^interface', 'switchport port-security$') for intf in missing: print(intf)
Save that script to a file and run it (after you install ciscoconfparse). That script will print interfaces without port-security.
This is the github link to the library: ciscoconfparse
Full disclosure: I am the author of the library
I can't see a way to make exclude work in this situation.
You could try something like the below which will show all the interfaces port-security lines (you would just need to find interfaces with none of those - i.e. where you have two interface lines in a row):
show run | include (^interface|port-security)
Or, if this is the specific case you are trying to achieve, a simple
show port-security will list all the ports that have port-security enabled.