rConfig - CIC Definitions
CIC (Config Integrity Check) Definitions ensure that the downloaded configuration meets your expectations and standards. You can create a definition for a device type or category and specify a list of commands that should be present in the configuration. If any commands are missing, the configuration will be marked as invalid or failed.
CIC Definitions use the same engine as policy definitions and are created in a similar manner. However, CIC Definitions are assigned to a device or category at the time of creation. These definitions are checked against the configuration when it is downloaded, and the results are stored in the configuration history. You can view the results in the configuration history view, with each configuration having one of three statuses: Valid, Invalid, or Failed.
Valid - The configuration is complete and contains all the commands/ output specified in the definition. Invalid - The configuration is unknown or incomplete. This status indicates that a CIC definition was not found for the device, or the configuration is missing one or more commands in the definition. Failed - The configuration does not contain one or more commands specified in the definition.
Adding/ Editing CIC Definitions
Adding a CIC Definition is similar to adding a Policy Definition. You can create a CIC Definition, assign it to a device or category, and then specify the commands expected for that device or category.
Go to Configurations > CIC Definitions menu, and click ‘New CIC Definition’ to create a new definition. You can also edit an existing definition by clicking the three dots on the right side of the definition and selecting ‘Edit’.
CIC Definition Add Form
When creating a CIC Definition, you must complete the Definition Name. The description is optional. You must specify the Command Group and Command that the policy definition will be evaluated against during downloads for that group.
Next, update the POLICY file contents with your specific evaluation method and command. All methods and policy condition types are documented in the hyperlink under the file name “CIC Definition Help”.
We have specific tutorial videos for CIC definitions on youtube. You can find them here: rConfig Tutorials
Finally, CIC definitions are applied to configurations after they are downloaded. To re-check all existing downloaded configurations against the CIC definitions, click the “Re-Check All Configs” button on the devices page. This action will re-evaluate all configurations against the CIC definitions and update the configuration history with the new results. You may need to refresh the page to see the updated Config Status results.
Disabling CIC Checks
Sometimes, you may want to disable CIC checks for certain commands. This can be done by adding the command to the “Disabled CIC Checks” list on the commands settings page. Doing so will disable the CIC check for that command across all devices. Examples of commands you might want to disable CIC checks for include “show arp”, “show inventory”, “show cdp neighbors”, etc.
