[rancid] Rancid via proxy host

[heasley]

Wed, Oct 12, 2016 at 01:43:31PM +0000, Adrian A. Dimitrov:
> Hello Alan ,
> 
> Thanks for the fast reply! Usually to connect to the devices via ssh we are using VPN (connecting via cisco anyconnect client).
> 
> To clear my thoughts out.
> We are using monitoring system netxms. The server is in our network (linux debian) and for each client we have linux machines (netxms agents) installed (in the clients environment). So the server is communicating with the agents on a specific port to collect the data.  My idea is somehow to use these machines and make the backups through them.

If by "agent" you mean that there is a host at the customer sites, they
could run rancid with a SCM that uses a remote repo that is located at
your NOC.  So, it collects locally and pushes the changes back to your
central server.

> Is this possible somehow. We found this article http://ingenious-excerpts.blogspot.bg/2013/07/rancid-and-relays-using-usercmd-patch.html , and I tried to configure this, but with no success. 

Sorry, it is on my list to incorporate a version of this ... but I haven't had
the time.

> Best Regards,
> Adrian Dimitrov
> 
> 
> -----Original Message-----
> From: Rancid-discuss [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Alan McKinnon
> Sent: Wednesday, October 12, 2016 3:12 PM
> To: rancid-discuss at shrubbery.net
> Subject: Re: [rancid] Rancid via proxy host
> 
> Assuming that you have no direct ssh path from your environment to the
> customer's:
> 
> First idea that comes to mind is to use ssh for connecting to all devices, then leverage the ssh proxy/forwarding features configurable in ~/.ssh/config
> 
> Telnet can be more tricky, you might end up having to use a range or ports forwarded to <customer_env>:23 or similar.
> 
> This one statement of yours is nonsensical:
> "For this purpose I will use our monitoring system which has it’s own agents in each customer environment."
> That makes no sense wrt rancid, please elaborate on your thoughts how you reckon this could work? Such as, what connectivity exists between you and the customers?
> 
> 
> 
> 
> On 12/10/2016 13:51, Adrian A. Dimitrov wrote:
> > Hello All ,
> > 
> >  
> > 
> > I am new to rancid. I am still testing it, but so far is working 
> > perfectly fine for me.
> > 
> >  
> > 
> > Now what I need is to back up the configuration of devices that are 
> > beyond my network. My idea is to install only one rancid server in our 
> > network and to make and collect the back ups from remote hosts In the 
> > customers environment. For this purpose I will use our monitoring 
> > system which has it’s own agents in each customer environment. How can 
> > I do this? I am using the latest version downloaded from the official site.
> > 
> >  
> > 
> > Thanks.
> > 
> >  
> > 
> > Best Regards,
> > 
> > Adrian Dimitrov
> > 
> > eFellows-Mark-RGB_Sign
> > 
> >  
> > 
> > 
> > 
> > _______________________________________________
> > Rancid-discuss mailing list
> > Rancid-discuss at shrubbery.net
> > http://www.shrubbery.net/mailman/listinfo/rancid-discuss
> > 
> 
> 
> --
> Alan McKinnon
> alan.mckinnon at gmail.com
> 
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo/rancid-discuss
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo/rancid-discuss