Cisco IOS-XE policy examples

Rules for Cisco IOS-XE running configs, one page per topic. Every rule has a passing and a failing config, and an automated test in the rConfig Pro suite asserts both results. Run them against the output of show running-config.

Note

Policy compliance is a Pro feature, available in the Pro, Vector and Enterprise editions. Each rule states its minimum rConfig version.

Topic	Rules	Status
Baseline hardening	No lab or test interfaces	Lab tested
Management access and AAA	Only approved local accounts	Lab tested

For ready-made definitions covering management access, AAA, SNMP, logging, interface security, routing authentication and services, see the Cisco IOS stock definitions, which you can import into rConfig.

The IOS-XE configs used on the pattern pages show more method behaviour, including SNMP trap hosts and access-port sections. Those examples demonstrate a technique rather than a complete rule, so they live there rather than here.

If you are new to policy definitions, start with your first policy, which walks through the baseline hardening rule end to end.