...
| Use case | Match mode | Rationale | |||
|---|---|---|---|---|---|
| Baseline configuration - NTP, DNS, syslog, ... Security hardening - telnet disabled, HTTP disabled, ... | Loose | These requirements The required lines are independent of each other and may appear in different parts of the configuration. Only their presence matters. | |||
| Security hardening - telnet disabled, no SNMPv2, management ACLs... | Loose | Independent requirements with no meaningful ordering relative to each other | |||
| Firewall and ACL rules | Sequential | Rule ordering matters, such as when specific rules must precede broader rules. | Route, route-maps | Sequential | Match and set clauses must appear in a required sequence. |
| Multiline MOTD banner, interface configuration | Strict | The complete banner block must be present and uninterrupted | Interface config blocks | Strict | Validate that a required set of interface configuration commands appears together as a consecutive blockrequired lines form a specific configuration block and must appear consecutively without any other lines between them. |