From heas at shrubbery.net Tue Feb 3 06:41:06 2004 From: heas at shrubbery.net (john heasley) Date: Mon, 2 Feb 2004 22:41:06 -0800 Subject: rancid 2.3 rc1 Message-ID: <20040203064106.GK10813@shrubbery.net> A number of folks have downloaded ranicd 2.3.rc1 since it was made available. We'd appreciate any feedback folks have to offer - most intested any negative comments. :) We have about 4 to-do items left before the final cut. Thanks! From wkwan at grow.net Wed Feb 11 05:14:53 2004 From: wkwan at grow.net (Kwan, William) Date: Wed, 11 Feb 2004 00:14:53 -0500 Subject: Ssh, Aironet Message-ID: <417F5E81F35DDB4CA208F5B00AFA8FE6CB142D@spruce.grow.net> Hi all, I am testing Rancid. It works fine with testing switches with telnet. I have a couple Aironet Access points that are set to use ssh only. The user account is also customized. I have this in .cloginrc add autoenable 10.0.0.222 add user 10.0.0.222 {fakeuser} add userpassword 10.0.0.222 {fakepass} add method 10.0.0.222 {ssh} add password 10.0.0.222 {} {fakepass} This looks wrong, but it works. I issued: /usr/local/rancid/bin/clogin -c 'show ver' 10.0.0.222 Rancid was able to login with the username and password. But it just stopped at the prompt after login. Any suggestion? William From heas at shrubbery.net Wed Feb 11 16:03:56 2004 From: heas at shrubbery.net (john heasley) Date: Wed, 11 Feb 2004 08:03:56 -0800 Subject: Ssh, Aironet In-Reply-To: <417F5E81F35DDB4CA208F5B00AFA8FE6CB142D@spruce.grow.net> References: <417F5E81F35DDB4CA208F5B00AFA8FE6CB142D@spruce.grow.net> Message-ID: <20040211160356.GC2264@shrubbery.net> Wed, Feb 11, 2004 at 12:14:53AM -0500, Kwan, William: > > Hi all, > > I am testing Rancid. It works fine with testing switches with > telnet. I have a couple Aironet Access points that are set to use ssh > only. The user account is also customized. > > I have this in .cloginrc > > add autoenable 10.0.0.222 autoenable, and all other .cloginrc directives, require a value. add autoenable 10.0.0.222 {1} > add user 10.0.0.222 {fakeuser} > add userpassword 10.0.0.222 {fakepass} > add method 10.0.0.222 {ssh} > add password 10.0.0.222 {} {fakepass} > > This looks wrong, but it works. I issued: > /usr/local/rancid/bin/clogin -c 'show ver' 10.0.0.222 > > Rancid was able to login with the username and password. But it just > stopped at the prompt after login. > > Any suggestion? > > William From heas at shrubbery.net Tue Feb 17 04:10:06 2004 From: heas at shrubbery.net (john heasley) Date: Mon, 16 Feb 2004 20:10:06 -0800 Subject: Problems running do-diffs on Foundry In-Reply-To: <4CBD2D346320D541AB8BF4C0140EF7CD40DA4A@staq7.hq.atlantech.net> References: <4CBD2D346320D541AB8BF4C0140EF7CD40DA4A@staq7.hq.atlantech.net> Message-ID: <20040217041006.GG27966@shrubbery.net> Mon, Feb 16, 2004 at 08:23:38PM -0500, Eric Van Tol: > Hi all, > We currently have Rancid set up to backup three Foundry ServerIron > switches and do-diffs cannot seem to log into one of them. When I run > flogin, everything works just fine, but when it's run using 'do-diffs', > the session times out. Here is a logfile snippet from the do-diffs: > > Trying to get all of the configs. > ! > slb02: flogin error: Error: TIMEOUT reached > slb02: missed cmd(s): write term,show flash,show module,show > chassis,show version > slb02: End of run not found > ===================================== > Getting missed routers: round 1. > > Why would flogin be able to log in when run independently of do-diffs? > The two Foundry switches that are working are running 07.3.06T12 and the > one that is not working is running 07.1.21T12. I've tried using both > SSH and telnet as the method on this particular switch. > > Any ideas? Does the following run successfully? flogin -c 'show version;show chassis' host From JRizzo at ea.com Tue Feb 17 14:47:00 2004 From: JRizzo at ea.com (Rizzo, Joe) Date: Tue, 17 Feb 2004 06:47:00 -0800 Subject: Problems running do-diffs on Foundry Message-ID: <194487E5B6AC1E4E82FCBD56E57997910556C9F7@eahq-mb3.rws.ad.ea.com> It has been my experience that some Foundry code has a bug where enabling skip-page-display causes the output to hang. Try using flogin to login to the device, and then enter "skip" then "wri t". If the output hangs then it is a Foundry CLI bug. Joe From jason.ornstein at sybase.com Thu Feb 19 01:10:21 2004 From: jason.ornstein at sybase.com (Jason Ornstein) Date: Wed, 18 Feb 2004 18:10:21 -0700 Subject: catos on cat5500 issues Message-ID: <20040219011021.GA11917@clue.sybase.com> I've just started to play with Rancid and am still learning on how to do the tuning part of it. The issue that I'm currently having appears to have been around for awhile based on past email on this list, but I didn't see a solution posted, so I thought I'd bring it up again. This is using the rancid 2.2.2 against a Cisco Catalyst 5500 running CatOS 6.3.5. The first issue is that it appears that some of the commands from clogin aren't being sent when cat5rancid is being run. Part of the diff that is sent to me is: + 2004 Feb 18 16:06:58 MST -07:00 %PAGP-5-PORTFROMSTP:Port 11/15 left bridge port 11/15 So, while rancid was grabbing the config, someone disconnected their machine and it got logged to the telnet session. From clogin, around line 751 there is this section of code: # If the prompt is (enable), then we are on a switch and the # command is "set length 0"; otherwise its "term length # 0". if [ regexp -- ".*> .*enable" "$prompt" ] { send "set length 0\r" send "set logging session disable\r" And when I run 'cat5rancid -d boulder-cat3' and look at the raw file, I never see the second line above being output. It could be that this section of code is never being hit as I'm not sure if the $do_script is valid coming right above this section of code. It could be taht the second logging line needs to be inserted in the run_commands code at line 487. Has anyone done this or does it break other platforms? And the second, and maybe easier issue, is that after people disconnect from the switch other lines in the config change which cause email to be sent. Some of those lines would look like this in the diff output: - set spantree portcost 2/1,2/3,2/5,2/11,2/14,2/16-19,2/21,2/26-27,2/34,2/38,2/40-42,2/46-48 200000 mst + set spantree portcost 2/1-2,2/4,2/6-10,2/12-13,2/15,2/20,2/22-25,2/28-33,2/35-37,2/39,2/43-45 2000000 mst This is on the same Catalyst above. Is there a way to filter this not being sent and/or being collected as a diff? Thanks. -jason ornstein From jason.ornstein at sybase.com Thu Feb 19 01:18:36 2004 From: jason.ornstein at sybase.com (Jason Ornstein) Date: Wed, 18 Feb 2004 18:18:36 -0700 Subject: catos issues Message-ID: <20040219011836.GB11917@clue.sybase.com> I mistakenly said I was running 2.2.2 in my previous email, I am really running 2.3.rc1. Sorry for any confusion that might have caused. -jason From jaitken at aitken.com Thu Feb 19 14:43:36 2004 From: jaitken at aitken.com (Jeff Aitken) Date: Thu, 19 Feb 2004 09:43:36 -0500 Subject: Very strange problem with 2.2.2 (and 2.3-rc1) on FreeBSD-5.x Message-ID: <20040219144336.GA43301@eagle.aitken.com> Hello all, I'm seeing a very strange problem with rancid-2.2.2 (and 2.3-rc1). I've been talking privately with some of the developers but this has all of us stumped. Part of the problem is that no one has managed to duplicate the symptoms I'm seeing, so I'm I'm sending this to the -discuss list in the hopes that someone out there has seen something similar. I recently installed rancid-2.2.2 on a freshly-installed FreeBSD-5.1 system after installing tcl83 and expect (5.38.0) from /usr/ports. After setting up a small group of (mostly) Cisco 26xx and 72xx routers to be polled, on subsequent runs of rancid I saw oscillating sets of diffs like these: RUN1: [ on router1 ] - snmp-server contact + snmp-server contaact [on router2] - tacacs-server host 644.124.X.Y + tacacs-server host 64.124.X.Y [on router3] - taacacs-server host + tacacs-server host RUN2: [on router1] - snmp-server contaact + snmp-server contact [on router2] - tacacs-server host 64.124.X.Y + tacacs-server host 644.124.X.Y [on router3] - tacacs-server host + taacacs-server host Again, this is a stock FreeBSD-5.1-RELEASE system with a GENERIC kernel and very little in the way of additional software added... a couple things like apache and MRTG are about it. I was unable to duplicate this behavior by running: % clogin -c 'wr term' $router no matter how many times I tried. I also tried running 'rancid -d' in case it had something to do with the sequence of commands run by rancid and not just the 'wr term' itself, but did not see the same problem. I tried setting NOPIPE in rancid.conf but still saw the duplicate characters. I played with PAR_COUNT, to no avail. Thinking that it was something particular to the version of tcl and/or expect we're using, I tried several different combinations of those (including the latest, tcl8.4.5 and expect 5.40.0) but got the same results. I then loaded 2.2.2 on a freshly-installed FreeBSD-5.2-RELEASE system and got the same sort of behavior. Again, I tried different versions of everything (2.3-rc1, newer and older tcl, newer and older expect) but none of those made a difference. I also changed the set of routers I was polling to one that includes Cisco GSRs and Juniper M160s and saw the same sort of thing on both types of router, ruling out anything vendor-specific. After all of this, I loaded 2.3-rc1 on the system we currently use to poll the routers (an ancient FreeBSD-3.4 system) and it works as expected, with no duplicate characters. At this point I don't know what to think... it could be a 5.x issue, or a problem with newer tcl+expect, or even rancid itself, althouth that seems unlikely. Thanks for any suggestions, --Jeff From heas at shrubbery.net Fri Feb 20 05:47:32 2004 From: heas at shrubbery.net (john heasley) Date: Thu, 19 Feb 2004 21:47:32 -0800 Subject: catos on cat5500 issues In-Reply-To: <20040219011021.GA11917@clue.sybase.com> References: <20040219011021.GA11917@clue.sybase.com> Message-ID: <20040220054732.GL8031@shrubbery.net> Wed, Feb 18, 2004 at 06:10:21PM -0700, Jason Ornstein: > I've just started to play with Rancid and am still learning on how > to do the tuning part of it. The issue that I'm currently having > appears to have been around for awhile based on past email on this > list, but I didn't see a solution posted, so I thought I'd bring it > up again. > > This is using the rancid 2.2.2 against a Cisco Catalyst 5500 running > CatOS 6.3.5. > > The first issue is that it appears that some of the commands from > clogin aren't being sent when cat5rancid is being run. Part of > the diff that is sent to me is: > > + 2004 Feb 18 16:06:58 MST -07:00 %PAGP-5-PORTFROMSTP:Port 11/15 left > bridge port 11/15 the "set logging session disable" from below would get rid of messages like this one. > So, while rancid was grabbing the config, someone disconnected their > machine and it got logged to the telnet session. From clogin, around > line 751 there is this section of code: > > # If the prompt is (enable), then we are on a switch and the > # command is "set length 0"; otherwise its "term length > # 0". > if [ regexp -- ".*> .*enable" "$prompt" ] { > send "set length 0\r" > send "set logging session disable\r" > > And when I run 'cat5rancid -d boulder-cat3' and look at the raw file, > I never see the second line above being output. what follows that is an expect clause. expect will buffer the output (input) trying to match the prompt, so you may not see them if it is never getting a prompt back and times-out. > It could be that this section of code is never being hit as I'm not > sure if the $do_script is valid coming right above this section of > code. Correct, that would be the path for -s > It could be taht the second logging line needs to be inserted in the > run_commands code at line 487. Has anyone done this or does it break > other platforms? That is a bug; it should appear there. thanks. do those commands work on whatever catos flavour of the month you are running? does your prompt look something like "switch> (enable)"? do you get a usable login with 'clogin swtich'? my WAG would be that the prompt just isnt being matched properly. > And the second, and maybe easier issue, is that after people disconnect > from the switch other lines in the config change which cause email to be > sent. Some of those lines would look like this in the diff output: > > - set spantree portcost > 2/1,2/3,2/5,2/11,2/14,2/16-19,2/21,2/26-27,2/34,2/38,2/40-42,2/46-48 > 200000 mst > + set spantree portcost > 2/1-2,2/4,2/6-10,2/12-13,2/15,2/20,2/22-25,2/28-33,2/35-37,2/39,2/43-45 > 2000000 mst > > This is on the same Catalyst above. Is there a way to filter this not > being sent and/or being collected as a diff? it would have to be filtered in cat5rancid, though it is not clear to me that it should be. why would spanning tree be enabled on a user interface? From jason.ornstein at sybase.com Fri Feb 20 17:02:09 2004 From: jason.ornstein at sybase.com (Jason Ornstein) Date: Fri, 20 Feb 2004 10:02:09 -0700 Subject: catos on cat5500 issues In-Reply-To: <20040220054732.GL8031@shrubbery.net> References: <20040219011021.GA11917@clue.sybase.com> <20040220054732.GL8031@shrubbery.net> Message-ID: <20040220170209.GA30853@clue.sybase.com> * john heasley [2004-02-19 21:47:32 -0800]: > the "set logging session disable" from below would get rid of messages > like this one. Right. This line works for the 3 Catalysts that I tested: 4506 CatOS 7.6(3) 4006 CatOS 6.3(7) 5500 CatOS 6.3(5) > That is a bug; it should appear there. thanks. I'll add it locally as well, thanks. > do those commands work on whatever catos flavour of the month you are > running? does your prompt look something like "switch> (enable)"? do > you get a usable login with 'clogin swtich'? my WAG would be that the > prompt just isnt being matched properly. Yes, those commands to work on my three Catalysts. And the prompt looks like this boulder-cat1> (enable) boulder-cat2> (enable) boulder-cat3> (enable) And 'clogin switchname' works for all three hosts w/o a problem. I think it is matching the prompts okay. Here is part of the raw file: boulder-cat1> (enable) boulder-cat1> (enable) set length 0 Screen length for this session set to 0. boulder-cat1> (enable) show version WS-C4506 Software, Version NmpSW: 7.6(3) Copyright (c) 1995-2003 by Cisco Systems, Inc. NMP S/W compiled on Aug 22 2003, 03:17:00 GSP S/W compiled on Aug 22 2003, 00:32:33 > > This is on the same Catalyst above. Is there a way to filter this not > > being sent and/or being collected as a diff? > it would have to be filtered in cat5rancid, though it is not clear to me > that it should be. why would spanning tree be enabled on a user interface? Well, the switch is running spanning tree as it has dual uplinks, but you're right there is no reason that the fast ethernet ports need to be running spanning tree. I'm unaware of a way to disable spanning tree on a port level though. I do have portfast enabled, but that is not the same. Are you thinking of something else? -jason From heas at shrubbery.net Fri Feb 20 17:33:23 2004 From: heas at shrubbery.net (john heasley) Date: Fri, 20 Feb 2004 09:33:23 -0800 Subject: catos on cat5500 issues In-Reply-To: <20040220170209.GA30853@clue.sybase.com> References: <20040219011021.GA11917@clue.sybase.com> <20040220054732.GL8031@shrubbery.net> <20040220170209.GA30853@clue.sybase.com> Message-ID: <20040220173323.GJ8031@shrubbery.net> Fri, Feb 20, 2004 at 10:02:09AM -0700, Jason Ornstein: > And 'clogin switchname' works for all three hosts w/o a problem. I > think it is matching the prompts okay. Here is part of the raw file: > > boulder-cat1> (enable) > boulder-cat1> (enable) set length 0 > Screen length for this session set to 0. > boulder-cat1> (enable) show version > WS-C4506 Software, Version NmpSW: 7.6(3) > Copyright (c) 1995-2003 by Cisco Systems, Inc. > NMP S/W compiled on Aug 22 2003, 03:17:00 > GSP S/W compiled on Aug 22 2003, 00:32:33 ah, so it getting some portion of the output. can you give me the entire raw file (privately)? > > > This is on the same Catalyst above. Is there a way to filter this not > > > being sent and/or being collected as a diff? > > > it would have to be filtered in cat5rancid, though it is not clear to me > > that it should be. why would spanning tree be enabled on a user interface? > > Well, the switch is running spanning tree as it has dual uplinks, but > you're right there is no reason that the fast ethernet ports need to > be running spanning tree. I'm unaware of a way to disable spanning > tree on a port level though. I do have portfast enabled, but that is > not the same. Are you thinking of something else? hmm, looks like you're right. seems dangerous to me; it is a wonder no one has complained to cisco. Does that config command not get set for backbone links? ie: if it is just filtered by cat5rancid, actual useful configuration information would be lost. From yuvalba at netvision.net.il Fri Feb 20 20:42:36 2004 From: yuvalba at netvision.net.il (Yuval Ben-Ari) Date: Fri, 20 Feb 2004 22:42:36 +0200 Subject: catos on cat5500 issues Message-ID: a late reply to this discussion. I already reported the missing "set logging session disable\r" while clogin is in 'run_commands' mode (-c) but could not find where it was missing. Just now added it to run_commands as well, I do see one minor things now if I run clogin -c to cat5500 switch it will send the command twice, this is output from clogin -c 'sh alias' cat55: cat55-u-a> (enable) cat55-u-a> (enable) set length 0 Screen length for this session set to 0. cat55-u-a> (enable) set logging session disable System logging messages will not be sent to the current login session. cat55-u-a> (enable) set logging session disable System logging messages will not be sent to the current login session. cat55-u-a> (enable)sh alias No command aliases configured. cat55-u-a> (enable) exit Connection closed by foreign host. Any idea why it is being sent twice ? (before I added it to run_commands it would not be sent at all) Regarding the spanning tree changes. I was having similar problem with constant "set spantree portvlancost" config changes. I had to filter on cat5rancind by adding following line inside sub WriteTerm: /^set spantree portvlancost/ && next; In any case I don't think you want to disable spanning tree anywhere. It is there to protect the network from loops. What if someone in your network will manage to loop 2 ports ? if stp will be off it could melt down the network. The real problem is why port cost config keeps changing when ports go down and up which should probably be a question to Cisco. Yuval > -----Original Message----- > From: owner-rancid-discuss at shrubbery.net > [mailto:owner-rancid-discuss at shrubbery.net] On Behalf Of > Jason Ornstein > Sent: Thursday, February 19, 2004 03:10 > To: rancid-discuss at shrubbery.net > Subject: catos on cat5500 issues > > > I've just started to play with Rancid and am still learning on how > to do the tuning part of it. The issue that I'm currently having > appears to have been around for awhile based on past email on this > list, but I didn't see a solution posted, so I thought I'd bring it > up again. > > This is using the rancid 2.2.2 against a Cisco Catalyst 5500 running > CatOS 6.3.5. > > The first issue is that it appears that some of the commands from > clogin aren't being sent when cat5rancid is being run. Part of > the diff that is sent to me is: > > + 2004 Feb 18 16:06:58 MST -07:00 %PAGP-5-PORTFROMSTP:Port 11/15 left > bridge port 11/15 > > So, while rancid was grabbing the config, someone disconnected their > machine and it got logged to the telnet session. From clogin, around > line 751 there is this section of code: > > # If the prompt is (enable), then we are on a switch and the > # command is "set length 0"; otherwise its "term length > # 0". > if [ regexp -- ".*> .*enable" "$prompt" ] { > send "set length 0\r" > send "set logging session disable\r" > > And when I run 'cat5rancid -d boulder-cat3' and look at the raw file, > I never see the second line above being output. > > It could be that this section of code is never being hit as I'm not > sure if the $do_script is valid coming right above this section of > code. > > It could be taht the second logging line needs to be inserted in the > run_commands code at line 487. Has anyone done this or does it break > other platforms? > > > And the second, and maybe easier issue, is that after people > disconnect > from the switch other lines in the config change which cause > email to be > sent. Some of those lines would look like this in the diff output: > > - set spantree portcost > 2/1,2/3,2/5,2/11,2/14,2/16-19,2/21,2/26-27,2/34,2/38,2/40-42,2/46-48 > 200000 mst > + set spantree portcost > > 2/1-2,2/4,2/6-10,2/12-13,2/15,2/20,2/22-25,2/28-33,2/35-37,2/3 9,2/43-45 > 2000000 mst > > This is on the same Catalyst above. Is there a way to filter > this not > being sent and/or being collected as a diff? > > Thanks. > > -jason ornstein > > > From bostjan.fele at guest.arnes.si Sat Feb 21 07:48:05 2004 From: bostjan.fele at guest.arnes.si (Bostjan Fele) Date: Sat, 21 Feb 2004 08:48:05 +0100 Subject: timeout on extreme switches Message-ID: Hi, Have a running FreeBSD 4.9 with rancid 2.3r1_1 and am trying to collect configs from Extreme Switches. When I use clogin to test I get through login procedure but cannot issue any command - don't get responses back. It does not matter if logged in through telnet or SSH. If I run xrancid it complains about expired timeout. Any idea what is going wrong? # xrancid bd bd clogin error: Error: TIMEOUT reached bd: missed cmd(s): show configuration,show diagnostics,show memory,show slot,show switch,show configuration detail,show version bd: End of run not found # From heas at shrubbery.net Sat Feb 21 08:19:31 2004 From: heas at shrubbery.net (john heasley) Date: Sat, 21 Feb 2004 00:19:31 -0800 Subject: timeout on extreme switches In-Reply-To: References: Message-ID: <20040221081931.GW8031@shrubbery.net> Sat, Feb 21, 2004 at 08:48:05AM +0100, Bostjan Fele: > > Hi, > > Have a running FreeBSD 4.9 with rancid 2.3r1_1 and am trying to collect > configs from Extreme Switches. When I use clogin to test I get through login > procedure but cannot issue any command - don't get responses back. It does > not matter if logged in through telnet or SSH. > > If I run xrancid it complains about expired timeout. Any idea what is going > wrong? > > # xrancid bd > bd clogin error: Error: TIMEOUT reached > bd: missed cmd(s): show configuration,show diagnostics,show memory,show > slot,show switch,show configuration detail,show version > bd: End of run not found > # most often this is a problem with matching of the prompt. either the device "auto enables" or aaa has been used to alter the prompt. when you login manually, what does the prompt look like? From bostjan.fele at guest.arnes.si Sat Feb 21 09:35:08 2004 From: bostjan.fele at guest.arnes.si (Bostjan Fele) Date: Sat, 21 Feb 2004 10:35:08 +0100 Subject: timeout on extreme switches In-Reply-To: <20040221081931.GW8031@shrubbery.net> Message-ID: Hi, Tried to go deeper with clogin. Machine prompts back with "TESTIRNICA-BD:1 #". $ clogin bd -c "show version" bd spawn telnet bd Trying 10.10.103.150... Connected to bd. Escape character is '^]'. login: nmis password: ExtremeWare Copyright (C) 1996-2003 Extreme Networks. All rights reserved. =============================================================== Press the key at any time for completions. Remember to save your configuration changes. TESTIRNICA-BD:1 # TESTIRNICA-BD:1 # Error: TIMEOUT reached That is already "enabled" prompt in Cisco terms. Here my .cloginrc config for this device: # BlackDiamond add user bd nmis add password bd nmis add noenable bd 1 Regards, Bostjan -----Original Message----- From: john heasley [mailto:heas at shrubbery.net] Sent: Saturday, February 21, 2004 9:20 AM To: Bostjan Fele Cc: Rancid-Discuss at Shrubbery. Net Subject: Re: timeout on extreme switches Sat, Feb 21, 2004 at 08:48:05AM +0100, Bostjan Fele: > > Hi, > > Have a running FreeBSD 4.9 with rancid 2.3r1_1 and am trying to collect > configs from Extreme Switches. When I use clogin to test I get through login > procedure but cannot issue any command - don't get responses back. It does > not matter if logged in through telnet or SSH. > > If I run xrancid it complains about expired timeout. Any idea what is going > wrong? > > # xrancid bd > bd clogin error: Error: TIMEOUT reached > bd: missed cmd(s): show configuration,show diagnostics,show memory,show > slot,show switch,show configuration detail,show version > bd: End of run not found > # most often this is a problem with matching of the prompt. either the device "auto enables" or aaa has been used to alter the prompt. when you login manually, what does the prompt look like? From asp at partan.com Sat Feb 21 15:04:00 2004 From: asp at partan.com (Andrew Partan) Date: Sat, 21 Feb 2004 10:04:00 -0500 Subject: timeout on extreme switches In-Reply-To: References: <20040221081931.GW8031@shrubbery.net> Message-ID: <20040221150400.GA2745@partan.com> On Sat, Feb 21, 2004 at 10:35:08AM +0100, Bostjan Fele wrote: > That is already "enabled" prompt in Cisco terms. Here my .cloginrc config > for this device: > > # BlackDiamond > add user bd nmis > add password bd nmis > add noenable bd 1 You need this: add autoenable bd 1 I don't think you need the noenable. --asp From bostjan.fele at guest.arnes.si Mon Feb 23 13:14:22 2004 From: bostjan.fele at guest.arnes.si (Bostjan Fele) Date: Mon, 23 Feb 2004 14:14:22 +0100 Subject: timeout on extreme switches In-Reply-To: <20040221150400.GA2745@partan.com> Message-ID: Hi, It worked. Thanks. Regards, Bostjan -------------------------------------------------------- Bostjan FELE E-mail: bostjan.fele at smart-com.si Smart Com, d.o.o. Brnciceva 45, 1001 Ljubljana, Slovenia URL: http://www.smart-com.si Tel.: +386-1-5308-312 Fax.: +386-1-5611-571 Mob.: +386-41-399-363 --------------------------------------------------------- -----Original Message----- From: Andrew Partan [mailto:asp at partan.com] Sent: Saturday, February 21, 2004 4:04 PM To: Bostjan Fele Cc: john heasley; Rancid-Discuss at Shrubbery. Net Subject: Re: timeout on extreme switches On Sat, Feb 21, 2004 at 10:35:08AM +0100, Bostjan Fele wrote: > That is already "enabled" prompt in Cisco terms. Here my .cloginrc config > for this device: > > # BlackDiamond > add user bd nmis > add password bd nmis > add noenable bd 1 You need this: add autoenable bd 1 I don't think you need the noenable. --asp From heas at shrubbery.net Thu Feb 26 22:51:43 2004 From: heas at shrubbery.net (john heasley) Date: Thu, 26 Feb 2004 14:51:43 -0800 Subject: adapting a 2.3 module to 2.2? In-Reply-To: <897CB9DD-6895-11D8-BB26-000393C94C78@juniper.net> References: <897CB9DD-6895-11D8-BB26-000393C94C78@juniper.net> Message-ID: <20040226225143.GW20180@shrubbery.net> Thu, Feb 26, 2004 at 02:54:07PM -0500, Avram Dorfman: > Hello, > > I have a heavily hacked 2.2 rancid installation that I'd like to get > erx support into. Can anyone give me an idea of how hard & what will be > necessary for me to uber-hack it to support the erx module from 2.3? probably easy. adjust rancid-fe and install the erx script. From jason.ornstein at sybase.com Thu Feb 26 23:34:16 2004 From: jason.ornstein at sybase.com (Jason Ornstein) Date: Thu, 26 Feb 2004 16:34:16 -0700 Subject: catos on cat5500 issues In-Reply-To: References: Message-ID: <20040226233415.GA12128@clue.sybase.com> * Yuval Ben-Ari [2004-02-20 22:42:36 +0200]: > a late reply to this discussion. > > I already reported the missing "set logging session disable\r" while > clogin is in 'run_commands' mode (-c) but could not find where it was > missing. Just now added it to run_commands as well, I do see one minor > things now if I run clogin -c to cat5500 switch it will send the command > twice, this is output from clogin -c 'sh alias' cat55: > > cat55-u-a> (enable) > cat55-u-a> (enable) set length 0 > Screen length for this session set to 0. > cat55-u-a> (enable) set logging session disable > System logging messages will not be sent to the current login session. > cat55-u-a> (enable) set logging session disable > System logging messages will not be sent to the current login session. > cat55-u-a> (enable)sh alias > No command aliases configured. > cat55-u-a> (enable) exit > Connection closed by foreign host. > > Any idea why it is being sent twice ? (before I added it to run_commands > it would not be sent at all) I don't know why it is doing this either, but I see the exact same thing and it causes the collection of the config files to fail. I don't see how a second 'send' command in an if statement would cause the commands to be sent twice. I don't know very much expect, so I haven't tried to debug this in depth. > Regarding the spanning tree changes. > I was having similar problem with constant "set spantree portvlancost" > config changes. > I had to filter on cat5rancind by adding following line inside sub > WriteTerm: > /^set spantree portvlancost/ && next; I think that I'll give this a try. > In any case I don't think you want to disable spanning tree anywhere. > It is there to protect the network from loops. > What if someone in your network will manage to loop 2 ports ? if stp > will be off it could melt down the network. > The real problem is why port cost config keeps changing when ports go > down and up which should probably be a question to Cisco. Agreed. It might be version of code or platform. I'll investigate this. -jason