<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Title" content="">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Arial;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body bgcolor="white" lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">I just read the info page and am actually not impressed. It’s not upgradable. It does not run a “standard” installation of RANCiD—it compiles its own binaries and installs itself customized for Zenoss. It only works with SVN, so no CVS
or GitHub support. Since the version is from 2015, I expect it’s probably on RANCiD 2.3.2 or some old version like that.<o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-family:"Arial",sans-serif"><o:p> </o:p></span></b></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif">--Chris<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="mso-line-height-rule:exactly;-webkit-text-size-adjust:100%;white-space:nowrap;"><br /><table cellpadding="0" cellspacing="0" border="0" style="background-color:#FFFFFF;border-collapse:collapse;font-size:0;line-height:16.66px;"><tr><td align="left" style="vertical-align:top;"><table cellpadding="0" cellspacing="0" border="0" style="border-collapse:collapse;font-size:13.33px;color:#26446E;font-style:normal;font-weight:normal;text-decoration:none;"><tr><td align="left" style="vertical-align:top;text-align:left;font-family:Arial,Helvetica Neue,Helvetica,sans-serif;font-weight:bold;">Chris Gauthier</td><td align="left" style="vertical-align:top;text-align:left;font-family:Arial,Helvetica Neue,Helvetica,sans-serif;white-space:normal;"> </td><td align="left" style="vertical-align:top;text-align:left;font-family:Arial,Helvetica Neue,Helvetica,sans-serif;">Senior Network Engineer</td><td align="left" style="vertical-align:top;text-align:left;font-family:Arial,Helvetica Neue,Helvetica,sans-serif;white-space:normal;"> | </td><td align="left" style="vertical-align:top;text-align:left;font-family:Arial,Helvetica Neue,Helvetica,sans-serif;">comScore, Inc.</td></tr></table></td></tr><tr><td align="left" style="vertical-align:top;"><table cellpadding="0" cellspacing="0" border="0" style="border-collapse:collapse;font-size:13.33px;color:#26446E;font-style:normal;font-weight:normal;text-decoration:none;"><tr style="font-size:0;"><td align="left" style="vertical-align:top;"><table cellpadding="0" cellspacing="0" border="0" style="border-collapse:collapse;font-size:13.33px;color:#26446E;font-style:normal;font-weight:normal;text-decoration:none;"><tr><td align="left" style="vertical-align:top;text-align:left;font-family:Arial,Helvetica Neue,Helvetica,sans-serif;">o +1 </td><td align="left" style="vertical-align:top;text-align:left;font-family:Arial,Helvetica Neue,Helvetica,sans-serif;"><a href="tel:503-331-2704" target="_blank" id="LPlnk689713" style="color:#26446E;text-decoration:none;"><strong style="font-weight:normal;">503-331-2704</strong></a></td><td align="left" style="vertical-align:top;text-align:left;font-family:Arial,Helvetica Neue,Helvetica,sans-serif;white-space:normal;"> </td><td align="left" style="vertical-align:top;text-align:left;font-family:Arial,Helvetica Neue,Helvetica,sans-serif;"><a href="mailto:cgauthier@comscore.com" target="_blank" id="LPlnk689713" style="color:#26446E;text-decoration:none;"><strong style="font-weight:normal;">cgauthier@comscore.com</strong></a></td></tr></table></td></tr><tr><td align="left" style="vertical-align:top;text-align:left;font-family:Arial,Helvetica Neue,Helvetica,sans-serif;">317 SW Alder St, Suite 500 | Portland | OR 97204</td></tr></table></td></tr><tr style="white-space:normal;"><td align="left" style="vertical-align:top;"><table cellpadding="0" cellspacing="0" border="0" style="width:100%;border-collapse:collapse;font-size:13.33px;color:#000001;font-style:normal;font-weight:normal;text-decoration:none;"><tr><td align="left" style="vertical-align:top;text-align:left;font-family:Arial,Helvetica Neue,Helvetica,sans-serif;">............................................................................................................................................................................................................................</td></tr></table></td></tr><tr style="white-space:normal;"><td align="left" style="padding:10px 0 0;vertical-align:top;"><table cellpadding="0" cellspacing="0" border="0" style="border-collapse:collapse;font-size:13.33px;color:#F7A000;font-style:normal;font-weight:normal;text-decoration:none;"><tr><td align="left" style="vertical-align:top;text-align:left;font-family:Arial,Helvetica Neue,Helvetica,sans-serif;"></td></tr></table></td></tr></table><br /></div><div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-left:.5in"><b><span style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">"Piegorsch, Weylin William" <weylin@bu.edu><br>
<b>Date: </b>Thursday, September 14, 2017 at 4:53 AM<br>
<b>To: </b>"Gauthier, Chris" <cgauthier@comscore.com>, Ryan West <rwest@zyedge.com>, Dan Anderson <dan.w.anderson@gmail.com>, "rancid-discuss@shrubbery.net" <rancid-discuss@shrubbery.net><br>
<b>Subject: </b>Re: [rancid] ASA Config for Rancid<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><o:p> </o:p></p>
</div>
<p class="MsoNormal" style="margin-left:.5in">Hmm...<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in"><a href="https://www.zenoss.com/product/zenpacks/rancid-integration-community">https://www.zenoss.com/product/zenpacks/rancid-integration-community</a><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in"> <o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">We are in fact using ZenOSS for monitoring/alerting (free version, we can’t afford the licensed version). Now THAT is something interesting to evaluate. I’ll ask someone on my team to evaluate that. Allowing
telnet <shudder> is another possibility. We had also considered shifting everything into PRIME Insfrastructure (which we will anyway for other reasons than config backups - we did get enough licensing for that at least), but RANCiD has some capabilities that
I like that PRIME doesn’t do so well - consider all the hijinks you can do in Linux, like aggregating certain parameters occurs across a subset of devices by doing something like... I don’t know if I have the syntax right, this is just quickly off the top
of my head “echo $[`for $(find –name <pattern> –exec egrep –L <chassis_model> \{} \; ) do grep <another_regex> | awk ‘{print $3}’ ; done | tr ‘\n’ ‘+’ | sed ‘s/+$//’`]” . We haven’t yet found a good way to do that in PRIME.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in"> <o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Thanks everyone for the help!<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in"> <o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">weylin<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in"> <o:p></o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-left:1.0in"><b><span style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">"Gauthier, Chris" <cgauthier@comscore.com><br>
<b>Date: </b>Tuesday, September 12, 2017 at 17:23<br>
<b>To: </b>Ryan West <rwest@zyedge.com>, Weylin Piegorsch <weylin@bu.edu>, Dan Anderson <dan.w.anderson@gmail.com>, "rancid-discuss@shrubbery.net" <rancid-discuss@shrubbery.net><br>
<b>Subject: </b>Re: [rancid] ASA Config for Rancid</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:1.0in"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:12.0pt;margin-left:1.0in">
Zenoss is a tool that has RANCiD integration/pluin connectivity.<br>
<br>
<br>
<o:p></o:p></p>
<div>
<p class="MsoNormal" style="margin-left:1.0in"> <o:p></o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="margin-left:1.0in;background:white;border-collapse:collapse">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#26446E">Chris Gauthier</span></b><o:p></o:p></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#26446E"> </span><o:p></o:p></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#26446E">Senior Network Engineer</span><o:p></o:p></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#26446E"> | </span><o:p></o:p></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#26446E">comScore, Inc.</span><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#26446E">o +1 </span><o:p></o:p></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#26446E"><a href="tel:503-331-2704" target="_blank"><strong><span style="font-family:"Arial",sans-serif;color:#26446E;font-weight:normal;text-decoration:none">503-331-2704</span></strong></a></span><o:p></o:p></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#26446E"> </span><o:p></o:p></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#26446E"><a href="mailto:cgauthier@comscore.com" target="_blank"><strong><span style="font-family:"Arial",sans-serif;color:#26446E;font-weight:normal;text-decoration:none">cgauthier@comscore.com</span></strong></a></span><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#26446E">317 SW Alder St, Suite 500 | Portland | OR 97204</span><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#000001">............................................................................................................................................................................................................................</span><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td valign="top" style="padding:7.5pt 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in"></td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal" style="margin-left:1.0in"> <o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:12.0pt;margin-left:1.0in">
On 9/12/17, 1:42 PM, "Rancid-discuss on behalf of Ryan West" <rancid-discuss-bounces@shrubbery.net on behalf of rwest@zyedge.com> wrote:<br>
<br>
On Tue, Sep 12, 2017 at 15:40:52, Piegorsch, Weylin William wrote:<br>
> <br>
> Thanks Ryan. We used to do exactly that, but it got to the point that ASAs<br>
> were doing far more than merely firewall – to name a few:<br>
> <br>
> VPN<br>
> ... well ok these are just ASAs<br>
> <br>
> Firewall<br>
> PIX, ASA, PaloAlto 3k, PaloAlto 7k, PaloAlto 500, and I think there’s a<br>
> CheckPoint somewhere we haven’t yet replaced<br>
> <br>
> NAT<br>
> ASA, ASR1k, Catalyst6k, 7301, 3825<br>
> <br>
> Routing<br>
> Oh let me count the ways....<br>
> <br>
> BGP Service Advertisement<br>
> Nexus7k, ASR9k, ASR1k, 7301, ASA<br>
> <br>
> Since the devices performing a function are so varied, the naming standard<br>
> cannot take model into account, merely function. It got to the point where I<br>
> was essentially starting to list every ASA by specific name; after a few of<br>
> these it became clear this approach wouldn’t scale.<br>
> <br>
> And to answer the other question – somewhere around 20,000 devices;<br>
> 11,000+ VoIP handsets, 6,000–7,000 access points, and 3,000+ of everything<br>
> else (though largely only that last are needed in rancid).<br>
> <br>
<br>
Sounds like a fun problem to have. There are some open source NMS products out there that integrate with RANCID and can probably write out the file for you, otherwise you would need to modify how RANCID works and have it switch to the type of device after login
with a show ver command or something similar. Let us know if you come up with anything though, I like the idea of having the device login decide the type, or at least a discovery mechanism for RANCID that would write out the proper lines to .cloginrc.<br>
<br>
-ryan<br>
<br>
_______________________________________________<br>
Rancid-discuss mailing list<br>
Rancid-discuss@shrubbery.net<br>
http://www.shrubbery.net/mailman/listinfo/rancid-discuss<o:p></o:p></p>
</div>
</div>
</body>
</html>