[rancid] Palo Alto Networks

Fri Sep 27 17:30:17 UTC 2013

Yes, what I have for the HP devices, is IPAddress:hp:up
The problem is that even though I have it like that, I keep getting a "clogin error: Error: Couldn't login"

When I test with the script (below) it works:

rancid at ObserviumNYC:~$ /usr/lib/rancid/bin/hlogin -f /var/lib/rancid/.cloginrc hpswitch5

spawn hpuifilter -- ssh -c 3des -x -l rancid 94.229.14.250

*** truncated***

rancid at 94.229.14.250's password:

Press any key to continuesw-1.ams5#
sw-1.ams5# show conf

Startup configuration:

; J9088A Configuration Edi***trunc***

Regards,
Ryan Milton
MVS Network Manager
o: 201-447-1505 x124
c: 862-249-5230
www.mvsusa.com

> -----Original Message-----
> From: Jethro R Binks [mailto:jethro.binks at strath.ac.uk]
> Sent: Friday, September 27, 2013 12:19 PM
> To: Ryan Milton
> Cc: rancid-discuss at shrubbery.net
> Subject: Re: [rancid] Palo Alto Networks
> 
> And for the HP models you sent me privately, you would need to set the
> type to "hp" in the same file, so it would have:
> 
> devicename:hp:up
> 
> or similar.
> 
> Jethro.
> 
> 
> 
> On Wed, 25 Sep 2013, Tom Simpson wrote:
> 
> > After the switch name or IP you should have a :paloalto:up in the
> > config file as well.
> >
> > Just like all of your CatOS devices would have a :cisco:up  after all
> > of them….
> >
> >
> >
> > --
> > Thanks,
> >
> > Tom Simpson
> > LAN/WAN Engineer
> > Forcht Group of Kentucky
> > 859.259.9700 x538
> >
> > "We all knew there was just one way to improve our odds for survival:
> > train, train, train. Sometimes, if your training is properly intense
> > it will kill you. More often -- much, much more often -- it will save
> > your life."  - Richard Marcinko, former US Navy SEAL Team Commander
> >
> > From: Ryan Milton <rmilton at mvsusa.com>
> > Date: Wednesday, September 25, 2013 8:52 AM
> > To: "Hughes, Doug" <Douglas.Hughes at DEShawResearch.com>, Kishore
> Rajani
> > <kams19 at gmail.com>, "rancid-discuss at googlegroups.com"
> > <rancid-discuss at googlegroups.com>
> > Cc: "guillaume.dupuis at novidys.com" <guillaume.dupuis at novidys.com>,
> > "rancid-discuss at shrubbery.net" <rancid-discuss at shrubbery.net>
> > Subject: Re: [rancid] Palo Alto Networks
> >
> > Wow! This is great. I am still quite a noob at Rancid. When you say
> > “switch type,” what do you mean by that? That is not in these files, is it?
> >
> >
> >
> > Regards,
> >
> > Ryan Milton
> >
> > MVS Network Manager
> >
> > o: 201-447-1505 x124
> >
> > c: 862-249-5230
> >
> > www.mvsusa.com
> >
> > MVS final logo GOOD very small
> >
> >
> >
> > From: Hughes, Doug [mailto:Douglas.Hughes at DEShawResearch.com]
> > Sent: Tuesday, September 24, 2013 5:02 PM
> > To: Ryan Milton; Kishore Rajani; rancid-discuss at googlegroups.com
> > Cc: guillaume.dupuis at novidys.com; rancid-discuss at shrubbery.net
> > Subject: RE: [rancid] Palo Alto Networks
> >
> >
> >
> > Sure they can. I do it for 3 of them right now.
> >
> >
> >
> > Attached. Set your ‘switch type’ to paloalto. Works with names or IP
> > addresses.
> >
> >
> >
> > From: Ryan Milton [mailto:rmilton at mvsusa.com]
> > Sent: Tuesday, September 24, 2013 4:58 PM
> > To: Hughes, Doug; Kishore Rajani; rancid-discuss at googlegroups.com
> > Cc: guillaume.dupuis at novidys.com; rancid-discuss at shrubbery.net
> > Subject: RE: [rancid] Palo Alto Networks
> >
> >
> >
> > I would certainly be interested in adding PAN devices to Rancid. I
> > thought that they couldn’t be read. That is what I’ve found with my HP
> > switches—but that is another matter. Any ideas on getting PAN devices
> > read by Rancid would be useful.
> >
> >
> >
> > Regards,
> >
> > Ryan Milton
> >
> >
> >
> > From:rancid-discuss-bounces at shrubbery.net
> > [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Hughes,
> > Doug
> > Sent: Tuesday, September 24, 2013 12:26 PM
> > To: Kishore Rajani; rancid-discuss at googlegroups.com
> > Cc: guillaume.dupuis at novidys.com; rancid-discuss at shrubbery.net
> > Subject: Re: [rancid] Palo Alto Networks
> >
> >
> >
> > Yes, I have working panlogin and panrancid and have contributed them
> > upstream. Have you not been able to get them to work?
> >
> >
> >
> >
> >
> > From:rancid-discuss-bounces at shrubbery.net
> > [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Kishore
> > Rajani
> > Sent: Monday, September 23, 2013 9:52 AM
> > To: rancid-discuss at googlegroups.com
> > Cc: guillaume.dupuis at novidys.com; rancid-discuss at shrubbery.net
> > Subject: Re: [rancid] Palo Alto Networks
> >
> >
> >
> > HI,
> >
> > did you manage to get the RANCID running with PAN?
> >
> > Regards,
> > Kishore
> >
> > On Thursday, 29 March 2012 13:53:33 UTC+1, Guillaume Dupuis wrote:
> >
> > Nate Beck <Nate.Beck <at> jivesoftware.com> writes:
> >
> > >
> > >
> > > Has anyone on the list worked with Palo Alto Network firewalls and
> Rancid?
> >  I
> > was wondering if anyone has created a *login for them.
> > > Thanks-------------------
> > > Nathan BeckSr. IT Engineer
> > > Jive Software
> > > 503.972.9024
> >
> > Hi Nate,
> >
> > Did you find a *login script for PAN?
> >
> > Thanks,
> >
> > Guillaume Dupuis
> >
> > _______________________________________________
> > Rancid-discuss mailing list
> > Rancid-... at shrubbery.net
> > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
> >
> >
> >
> __________________________________________________________
> ____________
> > ______
> >
> > CONFIDENTIALITY NOTICE:
> > This message contains confidential information and is intended only
> > for the individual named. If you are not the named addressee you
> > should not disseminate, distribute or copy this e-mail. Please notify
> > the sender immediately by e-mail if you have received this e-mail by
> > mistake and delete this e-mail from your system. E-mail transmission
> > cannot be guaranteed to be secure or error-free as information could
> > be intercepted, corrupted, lost, destroyed, arrive late or incomplete,
> > or contain viruses. The sender therefore does not accept liability for
> > any errors or omissions in the contents of this message, which arise
> > as a result of e-mail transmission. If verification is required please request a
> hard-copy version.
> >
> > Forcht Group IT, 2400 South Main Street, Corbin, Ky.
> >
> >
> 
> .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .
> Jethro R Binks, Network Manager,
> Information Services Directorate, University Of Strathclyde, Glasgow, UK
> 
> The University of Strathclyde is a charitable body, registered in Scotland,
> number SC015263.