Does RANCID handle Cisco PIX devices?

Hopper, Faron W. faron.hopper at
Tue Dec 28 20:13:30 UTC 2004

I have tried setting these devices to cisco from cat5.  There is no
Rancid is not able to log into my PIXes.  The PIX's don't have telnet
but this shouldn't be a big deal for RANCID.  Could the problem be in
I have setup the .cloginrc file?

my .cloginrc file is as follows

    add method              *     {telnet} {ssh}
    add autoenable          *     {1}
    add enauser             *     {net\-cfg\-bak}
    add user                *     {net-cfg-bak}
    add password            *     {pass}

    # set ssh encryption type, dflt: 3des
    add cyphertype *                {3des}

The other thought that I had is that something might be configured
differently (misconfigured?) on TACACAS. 

My TACACS+ username is net-cfg-bak

	aaa-server TACACS+ protocol tacacs+
	aaa-server TACACS+ (outside) host key timeout 15
	aaa-server TACACS+ (outside) host key timeout 15
	aaa-server RADIUS protocol radius
	aaa-server LOCAL protocol tacacs+
	aaa-server local protocol tacacs+
	aaa authentication ssh console TACACS+
	aaa authentication telnet console TACACS+
	aaa authentication enable console TACACS+

Any thoughts?

-----Original Message-----
From: joshua sahala [mailto:jejs+rancid at]
Sent: Tuesday, December 28, 2004 11:35 AM
To: Hopper, Faron W.
Cc: rancid-discuss at
Subject: Re: Does RANCID handle Cisco PIX devices?

On (28/12/04 12:19), Hopper, Faron  W. wrote:
> Hello all,  I am still exploring RANCID's capabilities.  Does it have
> the ablility to back up Cisco PIX configs?  I have added the one of
> our PIX's names to the router.db file and set the type to
>     pixhq:cat5:up
>     pixhq2:cat5:up

use cisco...pix runs ios not catos

i've used rancid with varios models of pix and they all work fine, with
or without tac+ for aaa.

What difference does it make to the dead, the orphans, and the homeless,
whether the mad destruction is wrought under the name of totalitarianism
or the holy name of liberty and democracy?
	- Mohandas Karamchand (Mahatma) Gandhi -

More information about the Rancid-discuss mailing list