...
| Use case | Match mode | Rationale |
|---|---|---|
| Baseline configuration - NTP, AAA, logging... | Loose | Requirements are independent lines scattered across the config, only presence matters |
| Security hardening - telnet disabled, no SNMPv2, management ACLs... | Loose | Independent requirements with no meaningful ordering relative to each other |
| Firewall and ACL rules | Sequential | Rules are evaluated top-down, specific denies Rule ordering matters, such as when specific rules must precede broader permitsrules. |
| Route-maps | Sequential | Deny sequences must precede permit sequences |
| Multiline MOTD banner | Strict | The complete banner block must be present and uninterrupted |
| Interface config blocks | Strict | Interface definition, port-security, BPDU guard, and 802.1X settings must form a complete, consecutive block |