<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
p.balloontext, li.balloontext, div.balloontext
{mso-style-name:balloontext;
mso-style-priority:99;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.balloontextchar0
{mso-style-name:balloontextchar;
mso-style-priority:99;
font-family:"Tahoma","sans-serif";}
span.EmailStyle22
{mso-style-type:personal;
font-family:"Arial","sans-serif";
color:windowtext;}
span.EmailStyle23
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle24
{mso-style-type:personal;
font-family:"Arial","sans-serif";
color:navy;}
span.EmailStyle25
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle26
{mso-style-type:personal;
font-family:"Arial","sans-serif";
color:navy;}
span.EmailStyle27
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle28
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:595.3pt 841.9pt;
margin:70.85pt 85.05pt 70.85pt 85.05pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Yes. I use it for a switch cluster where I only have access to the commander:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">add method cust-sw2 {usercmd}<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">add usercmd cust-sw2 {clogin} {cust-sw1}<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">add usercmd_chat cust-sw2 {cust-sw1#} {rco 1\r} {cust-sw2#} {\r}<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">All of your normal cloginrc rules applies to cust-sw1. Once clogin sees the cust-sw2# prompt, data collection begins for that device. Router.db contains the
entry for both cust-sw1:cisco:up and cust-sw2:cisco:up.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">-ryan<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Jiménez Fernández, Mikel [mailto:m.jimenez@ibermatica.com]
<br>
<b>Sent:</b> Tuesday, March 08, 2011 6:47 AM<br>
<b>To:</b> Jiménez Fernández, Mikel; Ryan West; rancid-discuss@shrubbery.net<br>
<b>Subject:</b> RE: FWSM compatibility<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue">It works!!</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue">add method fwbt {usercmd}<br>
add usercmd fwbt {clogin} {-u} {mike} {-p} {pas} {-e} {pass} {172.24.133.40}<br>
add usercmd_chat fwbt {fwcat1/admin#} {changeto context fwBT\r} {fwcat1/fwBT#} {sh run\r}</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue">:)</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue">And now, this is possible to integrate with Rancid for making backups ?</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div class="MsoNormal" align="center" style="text-align:center"><span lang="ES">
<hr size="2" width="100%" align="center">
</span></div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span lang="ES" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">De:</span></b><span lang="ES" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Jiménez Fernández, Mikel
<br>
<b>Enviado el:</b> martes, 08 de marzo de 2011 12:21<br>
<b>Para:</b> 'Ryan West'; rancid-discuss@shrubbery.net<br>
<b>Asunto:</b> RE: FWSM compatibility</span><span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue">Hello,</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue">I have succesfully patched but I have some questions...</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue">My intention is to login like a typical Cisco device and inside it, run commands (usercmd_chat may be...) but the login mode, what should be ?</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue">I have to do "enable" and type the password... I can not use the "ssh" method ?</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue">Can I use SSH method and then call usercmd-chat or what is the recomendation ?
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue">In the patch example I can see "add usercmd host {ssh} {-t} {-p 1234} {command ?¿?}" but what happen with password and "enable ?</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue">Thanks and I hope I will solve it with your help guys!!</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue">Thanks in advance.</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div class="MsoNormal" align="center" style="text-align:center"><span lang="ES">
<hr size="2" width="100%" align="center">
</span></div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span lang="ES" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">De:</span></b><span lang="ES" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Ryan West [mailto:rwest@zyedge.com]
<br>
<b>Enviado el:</b> miércoles, 02 de marzo de 2011 18:03<br>
<b>Para:</b> Jiménez Fernández, Mikel; rancid-discuss@shrubbery.net<br>
<b>Asunto:</b> RE: FWSM compatibility</span><span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Just edit clogin in the bin directory to add the patch.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">-ryan</span><o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Jiménez Fernández, Mikel [mailto:m.jimenez@ibermatica.com]
<br>
<b>Sent:</b> Wednesday, March 02, 2011 11:57 AM<br>
<b>To:</b> Ryan West; rancid-discuss@shrubbery.net<br>
<b>Subject:</b> RE: FWSM compatibility</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:navy">So I have to download the source code, patch, compile and it should work ?</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:navy">Thanks!</span><o:p></o:p></p>
<div>
<div class="MsoNormal" align="center" style="text-align:center"><span lang="ES">
<hr size="2" width="100%" align="center">
</span></div>
<p class="MsoNormal"><b><span lang="ES" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">De:</span></b><span lang="ES" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Ryan West [mailto:rwest@zyedge.com]
<br>
<b>Enviado el:</b> miércoles, 02 de marzo de 2011 17:43<br>
<b>Para:</b> Jiménez Fernández, Mikel; rancid-discuss@shrubbery.net<br>
<b>Asunto:</b> RE: FWSM compatibility</span><o:p></o:p></p>
</div>
<p class="MsoNormal"><a href="http://www.shrubbery.net/pipermail/rancid-discuss/2006-May/001490.html">http://www.shrubbery.net/pipermail/rancid-discuss/2006-May/001490.html</a><o:p></o:p></p>
<p class="MsoNormal">It’s a small patch to clogin, but still works in 2.3.6.<o:p></o:p></p>
<p class="MsoNormal">-ryan<o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Jiménez Fernández, Mikel [mailto:m.jimenez@ibermatica.com]
<br>
<b>Sent:</b> Wednesday, March 02, 2011 11:28 AM<br>
<b>To:</b> Ryan West; rancid-discuss@shrubbery.net<br>
<b>Subject:</b> RE: FWSM compatibility</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:navy">What do you want to say with “</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">command / chat” ?
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">I have to use admin context and “jump” from it…</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Thanks!!</span><o:p></o:p></p>
<div>
<div class="MsoNormal" align="center" style="text-align:center"><span lang="ES">
<hr size="2" width="100%" align="center">
</span></div>
<p class="MsoNormal"><b><span lang="ES" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">De:</span></b><span lang="ES" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Ryan West [mailto:rwest@zyedge.com]
<br>
<b>Enviado el:</b> miércoles, 02 de marzo de 2011 17:26<br>
<b>Para:</b> Jiménez Fernández, Mikel; rancid-discuss@shrubbery.net<br>
<b>Asunto:</b> RE: FWSM compatibility</span><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">User command / chat might do the trick for you, or create a management interface for the contexts and back them as normal firewalls.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">-ryan</span><o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> rancid-discuss-bounces@shrubbery.net [mailto:rancid-discuss-bounces@shrubbery.net]
<b>On Behalf Of </b>Jiménez Fernández, Mikel<br>
<b>Sent:</b> Wednesday, March 02, 2011 11:06 AM<br>
<b>To:</b> rancid-discuss@shrubbery.net<br>
<b>Subject:</b> [rancid] FWSM compatibility</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><span lang="ES-TRAD" style="font-size:10.0pt;font-family:"Arial","sans-serif"">Hi!</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">First of all, I have to say that I have read numerous of forums before asking here anything.</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">I want to backup Cisco FWSM 3.x and 4.x contexts configurations. Is possible with actual Rancid/Clogin ?</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">Actually I define a file with the commands, but when I change from admin context to fwlearning2 context, the session get “stalled”, here the output.</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">[rancid@jazznetmon rancid]$ clogin -x file -u mike -p "kikoko" -e kikoko 172.24.133.40</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">172.24.133.40</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">spawn ssh -c 3des -x -l mike 172.24.133.40</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif""><a href="mailto:mike@172.24.133.40's">mike@172.24.133.40's</a> password:
</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">*********************************************</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif""> FWSM - FIREWALL SERVICES MODULE</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif""> Dtpo. COMUNICACIONES IBERMATICA 913849100</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">*********************************************</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">Type help or '?' for a list of available commands.</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">fwcat1/admin> enable</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">Password: ******</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">fwcat1/admin#
</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">fwcat1/admin# terminal length 0</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif""> ^</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">ERROR: % Invalid input detected at '^' marker.</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">fwcat1/admin# changeto context fwelearning2 -- “(stalled….)</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">And here the file with the commands:</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">[rancid@jazznetmon ~]$ cat file
</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">changeto context fwelearning2</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">config t</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">sh run</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">I doesn´t work to run commands inside another context…</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">Any ideas ?</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">Thanks!!</span><o:p></o:p></p>
<p><span lang="ES" style="font-size:10.0pt;font-family:"Arial","sans-serif"">Mikel Jimenez Fernandez</span><o:p></o:p></p>
<p><span lang="ES" style="font-size:10.0pt;font-family:"Arial","sans-serif"">Departamento de Comunicaciones</span><o:p></o:p></p>
<p><span lang="ES" style="font-size:10.0pt;font-family:"Arial","sans-serif"">Ibermatica</span><o:p></o:p></p>
<p><span lang="ES" style="font-size:10.0pt;font-family:"Arial","sans-serif"">Tlf: 91 384 9100 ext 7561</span><o:p></o:p></p>
<p><span lang="ES" style="font-size:10.0pt;font-family:"Arial","sans-serif"">Camino de Hormigueras, 172</span><o:p></o:p></p>
<p><span lang="ES" style="font-size:10.0pt;font-family:"Arial","sans-serif"">28031 MADRID</span><o:p></o:p></p>
</div>
</body>
</html>