catos on cat5500 issues

Yuval Ben-Ari yuvalba at netvision.net.il
Fri Feb 20 20:42:36 UTC 2004


a late reply to this discussion.

I already reported the missing "set logging session disable\r" while
clogin is in 'run_commands' mode (-c) but could not find where it was
missing. Just now added it to run_commands as well, I do see one minor
things now if I run clogin -c to cat5500 switch it will send the command
twice, this is output from clogin -c 'sh alias' cat55:

cat55-u-a> (enable)
cat55-u-a> (enable) set length 0
Screen length for this session set to 0.
cat55-u-a> (enable) set logging session disable
System logging messages will not be sent to the current login session.
cat55-u-a> (enable)  set logging session disable
System logging messages will not be sent to the current login session.
cat55-u-a> (enable)sh alias
No command aliases configured.
cat55-u-a> (enable) exit
Connection closed by foreign host.

Any idea why it is being sent twice ? (before I added it to run_commands
it would not be sent at all)

Regarding the spanning tree changes.
I was having similar problem with constant "set spantree portvlancost"
config changes.
I had to filter on cat5rancind by adding following line inside sub
WriteTerm:
        /^set spantree portvlancost/ && next;


In any case I don't think you want to disable spanning tree anywhere.
It is there to protect the network from loops.
What if someone in your network will manage to loop 2 ports ?  if stp
will be off it could melt down the network.
The real problem is why port cost config keeps changing when ports go
down and up which should probably be a question to Cisco.

Yuval

> -----Original Message-----
> From: owner-rancid-discuss at shrubbery.net 
> [mailto:owner-rancid-discuss at shrubbery.net] On Behalf Of 
> Jason Ornstein
> Sent: Thursday, February 19, 2004 03:10
> To: rancid-discuss at shrubbery.net
> Subject: catos on cat5500 issues
> 
> 
> I've just started to play with Rancid and am still learning on how
> to do the tuning part of it.  The issue that I'm currently having
> appears to have been around for awhile based on past email on this
> list, but I didn't see a solution posted, so I thought I'd bring it
> up again.
> 
> This is using the rancid 2.2.2 against a Cisco Catalyst 5500 running
> CatOS 6.3.5.
> 
> The first issue is that it appears that some of the commands from 
> clogin aren't being sent when cat5rancid is being run.  Part of 
> the diff that is sent to me is:
> 
> + 2004 Feb 18 16:06:58 MST -07:00 %PAGP-5-PORTFROMSTP:Port 11/15 left
> bridge port 11/15
> 
> So, while rancid was grabbing the config, someone disconnected their
> machine and it got logged to the telnet session.  From clogin, around
> line 751 there is this section of code:
> 
>         # If the prompt is (enable), then we are on a switch and the
>         # command is "set length 0"; otherwise its "term length
>         # 0".
>         if [ regexp -- ".*> .*enable" "$prompt" ] {
>             send "set length 0\r"
>             send "set logging session disable\r"
> 
> And when I run 'cat5rancid -d boulder-cat3' and look at the raw file, 
> I never see the second line above being output.  
> 
> It could be that this section of code is never being hit as I'm not
> sure if the $do_script is valid coming right above this section of
> code.  
> 
> It could be taht the second logging line needs to be inserted in the
> run_commands code at line 487.  Has anyone done this or does it break
> other platforms?
> 
> 
> And the second, and maybe easier issue, is that after people 
> disconnect
> from the switch other lines in the config change which cause 
> email to be
> sent.  Some of those lines would look like this in the diff output:
> 
> - set spantree portcost
>   2/1,2/3,2/5,2/11,2/14,2/16-19,2/21,2/26-27,2/34,2/38,2/40-42,2/46-48
>   200000 mst
> + set spantree portcost
>   
> 2/1-2,2/4,2/6-10,2/12-13,2/15,2/20,2/22-25,2/28-33,2/35-37,2/3
9,2/43-45
>   2000000 mst
> 
> This is on the same Catalyst above.  Is there a way to filter 
> this not 
> being sent and/or being collected as a diff?
> 
> Thanks.
> 
> -jason ornstein
> 
> 
> 



More information about the Rancid-discuss mailing list