Cisco IOS-XE policy examples
Rules for Cisco IOS-XE running configs, one page per topic. Every rule has a passing and a failing config, and an automated test in the rConfig Pro suite asserts both results. The baseline standard is the exception: it documents the stock ios-baseline definition, and its results are recorded with rConfig Pro’s evaluator against the stock sample configs. Run them against the output of show running-config.
| Topic | Rules | Status |
|---|---|---|
| Baseline standard | Services, DNS, NTP, AAA and IPv6 routing, local admin user, no plaintext passwords, HTTP, default route, SSH, SNMPv3, VTY lines | Synthetic tested |
| Management access and AAA | Only approved local accounts | Lab tested |
For ready-made definitions covering management access, AAA, SNMP, logging, interface security, routing authentication and services, see the Cisco IOS stock definitions, which you can import into rConfig.
The IOS-XE configs used on the pattern pages show more method behaviour, including SNMP trap hosts and access-port sections. Those examples demonstrate a technique rather than a complete rule, so they live there rather than here.
If you are new to policy definitions, start with your first policy, which walks through a rule that fails on lab or test interfaces, end to end.