manage auto-enabled/radius devices and not-auto-enabled devices at once

john heasley heas at shrubbery.net
Tue Sep 23 19:29:44 UTC 2003


Mon, Sep 22, 2003 at 05:21:10PM -0700, Alex Zheng:
> 
> Hi,
> 
> We have about 100+ routers which is authenticated via Radius, auto-enabled.
> 
> in clogin, this is what modified:
> 
> # The default is to automatically enable
> set enable 1
> # The default is that you login non-enabled (tacacs can have you login 
> already e
> nabled)
> 
> # MCOE set auto-enable 1 for routers
> set autoenable 1
> 
> 
> so in the .cloginrc:
> 
> add user routerIP  myuser
> add password routerIP myRadiusPasswd
> 
> works great for router!
> 
> 
> 
> However, we have a bunch of switches not going through radius at all for 
> verification (passwd stored locally),  in .cloginrc
> 
> add user switchip  myuser
> add passwd switchip vtypass enablepass
> 
> This won't work with clogin I modified.

if you have hostnames that identify device types, eg all switch begin
with "s", then you can wildcard them in .cloginrc.  eg:

set autoenable  s*	0
	....
set autoenable	*	1
# %EOF



More information about the Rancid-discuss mailing list