On Jun 6, 2009, at 1:27 PM, Scott Granados wrote:
Something that could optimize the ACL in automated fashion?
None of the commercial tools I've seen do this in a platform-aware way - they're oriented towards software routers running T-train, and don't take into account hardware platform caveats.
You can start by organizing your ACLs into named and commented text files, and using something as simple as RCS to implement version control and to check out/check in ACL files for editing. Lots of folks end up using tools like RANCID, RAT, Pancho, et. al. to help with auditing, and then custom Perl scripts or somesuch for editing/ updating.
----------------------------------------------------------------------- Roland Dobbins <[email protected]> // <http://www.arbornetworks.com> Unfortunately, inefficiency scales really well. -- Kevin Lawton _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
