thanks for scrip

[mjardeli]

Hi mikepitagno,

Thanks for your script very useful!

Is it possible to add the "object-group service" to the checking?
Is it possible to the output be the "clean config"?

thanks,

[mikepitagno]

I'll look into adding the object-group service. I'm not sure what you mean by "clean config".

[mjardeli]

Hi Mike,

Thanks for your reply. Your script output are few commands to apply on the command line. Instead of those commands, output would be new configuration file without the unused references.

Do you check for objects in use in the following access list ( vpn related ones)?

access-list WEB-LAB_access_in extended permit ip any4 any4
access-list WEB-LAB_cryptomap extended permit ip 192.168.1.16 255.255.255.240 192.168.1.0 255.255.255.240

crypto map WEB-LAB_map1 1 match address WEB-LAB_cryptomap
crypto map WEB-LAB_map1 1 set peer 192.168.99.53
crypto map WEB-LAB_map1 1 set ikev1 transform-set Linux

kind regards,