I have about a dozen networks and multiple contractors that have access to my organization. I would like to implement a change management system to keep tabs on approved baseline configurations, and to roll those configurations back in case someone breaks something. With my old on-prem network, I could easily accomplish this by using an NCM tool that monitored changes to config files compared to a downloaded known good config, but I can't seem to find anything that monitors more than uptime for Meraki.
Currently, I'm accomplishing this by using manually using Postman to make API calls and comparing the outputs using diff, but this is not sustainable in the long term as we'll be doubling the amount of networks we have deployed in the coming years. Revoking/reapproving MSP/Contractor admin access as needed is also not a viable option in our current model.
Is this a wheel that's already been invented for Meraki, or am I going to have to get down and dirty and build something bespoke to meet these needs?
Solved! Go to Solution.
If you look for Meraki config and restore in GitHub, there are a bunch of scripts available there covering this area. If you're after something slicker, less DIY and more structured (but chargeable), there are a number of Meraki Ecosystem partners who cover this kind of API-based automation. These are two I've seen 'in passing', but they're not alone in the Network Automation area of the Ecosystem website:
https://apps.meraki.io/en-US/apps/380757/boundless-%7C-automation
https://apps.meraki.io/en-US/apps/394857/dna-assure
If you look for Meraki config and restore in GitHub, there are a bunch of scripts available there covering this area. If you're after something slicker, less DIY and more structured (but chargeable), there are a number of Meraki Ecosystem partners who cover this kind of API-based automation. These are two I've seen 'in passing', but they're not alone in the Network Automation area of the Ecosystem website:
https://apps.meraki.io/en-US/apps/380757/boundless-%7C-automation
https://apps.meraki.io/en-US/apps/394857/dna-assure
This was just the push I needed in the right direction, thanks!
Do you know about the change log?