Скрипт проверки конфигураций Cisco на соответствие требованиям

$workdir = "C:\scripts\Cisco"
# $today = "$((get-date).Year)-$((get-date).month)-$((get-date).day)"
$today = Get-Date -Format 'yyyy-MM-dd'

# LOG function
$dt=Get-Date -Format "dd-MM-yyyy"
New-Item -ItemType directory $workdir\log\ -Force | out-null #Создаю директорию для логов
$global:logfilename="$workdir\log\"+$dt+"_LOG.log"
[int]$global:errorcount=0 #Ведем подсчет ошибок
[int]$global:warningcount=0 #Ведем подсчет предупреждений
function global:Write-log	# Функция пишет сообщения в лог-файл и выводит на экран.
{param($message,[string]$type="info",[string]$logfile=$global:logfilename,[switch]$silent)	
	$dt=Get-Date -Format "dd.MM.yyyy HH:mm:ss"	
	$msg=$dt + "`t" + $type + "`t" + $message #формат: 01.01.2001 01:01:01 [tab] error [tab] Сообщение
	Out-File -FilePath $logfile -InputObject $msg -Append -encoding unicode
	if (-not $silent.IsPresent) 
	{
		switch ( $type.toLower() )
		{
			"error"
			{			
				$global:errorcount++
				write-host $msg -ForegroundColor red			
			}
			"warning"
			{			
				$global:warningcount++
				write-host $msg -ForegroundColor yellow
			}
			"completed"
			{			
				write-host $msg -ForegroundColor green
			}
			"info"
			{			
				write-host $msg
			}			
			default 
			{ 
				write-host $msg
			}
		}
	}
}
Clear-Host

$CheckList = Get-Content $workdir\CheckList.txt
$LastDir = (Get-ChildItem -LiteralPath "$workdir\result" -Directory -Filter *-*-* | Sort-Object -Property LastWriteTime -Descending | Select-Object -First 1).BaseName
$devicelist = Get-ChildItem -LiteralPath "$workdir\result\$LastDir" -Directory


if(Test-Path "$workdir\result\Compliance\$today.csv")
{
    rm $workdir\result\Compliance\$today.csv
}

foreach($dir in $devicelist)
{
    $IP = $dir.BaseName
    $config = Get-Content $workdir\result\$LastDir\$IP\config.txt
    $hostname = (($config | select-string -pattern "hostname" -casesensitive) -replace  'hostname','').Trim()
    Write-output ""
    Write-log "Check $hostname ($IP)" -type info
    
    $CheckPart = $null
    foreach($check in $CheckList)
    {

        if(!$check) {continue}
        if($check[0] -eq "#") 
        {
            $CheckPart = $check
            continue
        }

        if($check.Contains('|'))
        {
            Write-log "Multi string: $Check" -type warning
            $status = $false
            $result = $null
            foreach($SubCheck in $Check.Split("|"))
            {
                
                $SubResult = $config | select-string -Pattern $SubCheck
                if($SubResult)
                {
                    Write-log $SubCheck -type completed
                    $status = $true
                    $result = $SubResult
                } 
                else
                {
                    Write-log $SubCheck -type error
                }

            }

        } 
        else
        {
            $result = $config | select-string -Pattern $Check
            if($result)
            {
                Write-log $Check -type completed
                $status = $true
            } 
            else
            {
                Write-log $Check -type error
                $status = $false
            }
        }

        
        "$IP;$hostname;$CheckPart;$check;$status" | Out-File -FilePath "$workdir\result\Compliance\$today.csv" -Append

    }
    
}

#Настройка пароля к режиму enable
enable secret 5

#Настройка доступа по SSH
login block-for 60 attempts 3 within 60
ip ssh version 2
exec-timeout 20 0
transport input ssh

#Установка баннера
You have connected to the network equipment of MyCorp

#Настройка парольного доступа к консольному и AUX портам
aaa authentication login AAA_CONSOLE line
login authentication AAA_CONSOLE

#Установка хэшированных алгоритмом SCRYPT паролей
username admin privilege 15 secret 9

#Отключение неиспользуемых сервисов
no ip http server
no ip http secure-server
no service pad
no vstack
no ip domain-lookup|no ip domain lookup

#Отключение протокола cdp
no cdp enable

#Настройка портов доступа
switchport port-security maximum
switchport port-security mac-address sticky
switchport port-security violation restrict