You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/user/app_feature_remediation.md
+24-2Lines changed: 24 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
# Navigating Configuration Remediation
2
2
3
-
Automated network configuration remediation is a systematic approach that leverages technology and processes to address and rectify configuration issues in network devices.
3
+
Automated network configuration remediation is a systematic approach that leverages technology and processes to address and rectify configuration issues in network devices.
4
4
It involves the use of the Golden Configuration app to understand the current configuration state, compare it against the intended configuration state, and automatically generate remediation data.
5
5
Automated network configuration remediation improves efficiency by eliminating manual efforts and reducing the risk of human errors. It enables rapid response to security vulnerabilities, minimizes downtime, and enhances compliance with regulatory and industry standards.
6
6
@@ -48,6 +48,28 @@ Default Hier config options can be used or customized on a per platform basis, a
48
48
For additional information on how to customize Hier Config options, please refer to the Hierarchical Configuration development guide:
49
49
https://hier-config.readthedocs.io/en/latest/
50
50
51
+
### API Remediation Type
52
+
53
+
You can use the TYPE_API option to enable a device to use the API type of remediation. To use this, you would need to pass the settings
54
+
that the API request would use as config context. Here is an example using Cisco Meraki platform.
- The high level key should be '**feature-name**\_remediation', in this case the feature is **org**
68
+
- endpoint: This is the endpoint you should call. You could pass jinja to the endpoint to dynamically create the endpoint.
69
+
- method: This is the HTTP method to use for the call.
70
+
- query: You add strings here, used as a filter if the endpoint supports it, like for example '?user=NTC' if you would like to filter a response searching for the NTC user.
71
+
- fields: This is also a list of strings, and it should hold the key names of the response you got from the device, to include that in the payload you will send to the device when you execute the Config Plan. In this example, we only want the "name" field from the response.
72
+
51
73
### Custom Config Remediation Type
52
74
53
75
When a Network Operating System delivers configuration data in a format that is not CLI/Hierarchical, we can still perform remediation by using the Custom Remediation options. Custom Remediation is defined within a Python function that takes as input a Configuration Compliance object and returns a Remediation Field.
@@ -66,4 +88,4 @@ Once remediation settings are configured for a particular platform, remediation
66
88
67
89
Once remediation is configured for a particular Platform/Feature pair, it is possible to validate remediation operations by running a compliance job. Navigate to **Jobs -> Perform Configuration Compliance** and run a compliance job for a device that has remediation enabled. Verify that remediation data has been generated by navigating to **Golden Config -> Config Compliance**, select the device and check the compliance status for the feature with remediation enabled and the "Remediating Configuration" field, as shown below:
0 commit comments