[rancid] rancid -d -t fxos seems to choke on "connect fxos" on Multi-Instance FTD Application.

[Zhang, Anchi]

> -----Original Message-----
> From: heasley <heas at shrubbery.net>
> Sent: Thursday, January 16, 2025 12:12 PM
> To: Zhang, Anchi <Anchi.Zhang at nrg.com>
> Cc: heasley <heas at shrubbery.net>; rancid-discuss at www.shrubbery.net
> Subject: Re: [rancid] rancid -d -t fxos seems to choke on "connect fxos" on
> Multi-Instance FTD Application.
> 
> CAUTION: This email originated from outside of the organization. Do not click
> links or open attachments unless you recognize the sender and know the
> content is safe.
> 
> Wed, Jan 15, 2025 at 09:10:52PM +0000, Zhang, Anchi:
> > Thank you for your reply. I modified rancid.types.base as below then all was
> good. We do not need the fxos info archived anyway.
> >
> > sky-log1% grep "fxos;command" rancid.types.base
> > fxos;command;fxos::ShowModel;show model
> > fxos;command;fxos::ShowInventory;show inventory
> > fxos;command;fxos::DirSlotN;dir /all fxos;command;fxos::ShowMode;show
> > mode fxos;command;fxos::ShowManagers;show managers
> > fxos;command;fxos::ShowNetwork;show network
> > fxos;command;fxos::ShowNetwork;show network-static-routes
> > fxos;command;fxos::ShowNetwork;show network-dhcp-server
> > #fxos;command;fxos::WriteTermFTD;show running-config
> > #fxos;command;fxos::RunCommand;connect fxos; prompt changes
> > #fxos;command;fxos::RunCommand;term len 0
> > #fxos;command;fxos::ShowFirmware;show system firmware detail
> > #fxos;command;fxos::ShowChassis;show chassis detail
> > #fxos;command;fxos::ShowChassis;show chassis inventory detail
> > #fxos;command;fxos::ShowChassis;show chassis environment expand detail
> > #fxos;command;fxos::WriteTerm;show configuration
> > fxos;command;fxos::WriteTerm;show running-config
> 
> Great, but that does not help me fix the problem for others.  Could someone
> address my questions that are below?
> 
> > From: heasley <heas at shrubbery.net>
> > Sent: Wednesday, January 15, 2025 2:35 PM
> > To: Zhang, Anchi <Anchi.Zhang at nrg.com>
> >
> > > > connect fxos
> > > Cannot connect to FXOS from Multi-Instance FTD Application.
> > > >
> >
> > What do you mean by choke?  It appears from the logs that you included
> that it did not hang.  But, it did not find the subsequent commands and/or
> 'connect fxos' output that it expected and therefore failed.
> >
> > Is this new behavior, such as following an o/s upgrade?

No. All Multi-Instance FTD deployments of ours experience the same.

> > I do not have any fx-os boxes myself, so you need to help me understand the
> environment.  From the docs, multi-instance is a container-like mechanism
> and 'connect fxos' connects to the parent o/s.  Is that correct? 

Yes. connect fxos would work on single instance FTD.

> Is there
> another way to connect to the parent in the multi-instance environment?

Yes. by direct ssh to the chassis fxos IP.

sky-log1% grep sky-www-ftd-m /etc/hosts
10.141.3.48     sky-www-ftd-m                   # FJC274814ET
sky-log1% fxlogin sky-www-ftd-m
sky-www-ftd-m
spawn ssh -c aes256-ctr -x -l admin sky-www-ftd-m
admin at sky-www-ftd-m's password:
Last login: Thu Jan 16 22:01:35 UTC 2025 from 10.141.3.229 on pts/0
Successful login attempts for user 'admin' : 4
Last login: Thu Jan 16 22:02:08 2025 from 10.141.3.229
Cisco Firepower Extensible Operating System (FX-OS) Software
TAC support: http://www.cisco.com/tac
Copyright (c) 2009-2019, Cisco Systems, Inc. All rights reserved.

The copyrights to certain works contained in this software are
owned by other third parties and used and distributed under
license.

Certain components of this software are licensed under the "GNU General Public
License, version 3" provided with ABSOLUTELY NO WARRANTY under the terms of
"GNU General Public License, Version 3", available here:
http://www.gnu.org/licenses/gpl.html. See User Manual (''Licensing'') for
details.

Certain components of this software are licensed under the "GNU General Public
License, version 2" provided with ABSOLUTELY NO WARRANTY under the terms of
"GNU General Public License, version 2", available here:
http://www.gnu.org/licenses/old-licenses/gpl-2.0.html. See User Manual
(''Licensing'') for details.

Certain components of this software are licensed under the "GNU LESSER GENERAL
PUBLIC LICENSE, version 3" provided with ABSOLUTELY NO WARRANTY under the terms
of "GNU LESSER GENERAL PUBLIC LICENSE" Version 3", available here:
http://www.gnu.org/licenses/lgpl.html. See User Manual (''Licensing'') for
details.

Certain components of this software are licensed under the "GNU Lesser General
Public License, version 2.1" provided with ABSOLUTELY NO WARRANTY under the
terms of "GNU Lesser General Public License, version 2", available here:
http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html. See User Manual
(''Licensing'') for details.

Certain components of this software are licensed under the "GNU Library General
Public License, version 2" provided with ABSOLUTELY NO WARRANTY under the terms
of "GNU Library General Public License, version 2", available here:
http://www.gnu.org/licenses/old-licenses/lgpl-2.0.html. See User Manual
(''Licensing'') for details.

firepower-3110# sho configuration | in 10.141.3.48
     set virtual-ip 10.141.3.48
     set out-of-band static ip 10.141.3.48 netmask 255.255.255.0 gw 10.141.3.1