Problems getting config when not enable mode

Fred Jordan fjordan at hcs.net
Wed Jul 9 17:13:19 UTC 2003


John,
    Thanks for the reply. We do have creative AAA statements that
do allow us to type "show config" and we can see the
startup-config file. Really this is where I am headed. At the
privilege level we log in , which is less than 15; we can do almost
all of the show commands. With that, I was hoping we would be able to
either get the default clogin to work by creating the proper entry in the
.cloginrc file for these hosts; OR would I need to hack a xlogin
and/or xrancid to get this to work. From your email, sounds like
I will have to have a modified xlogin and/or xrancid and I don't know
if I need the first, the second or both.

Again, any help is greatly appreciated.

                                                                        
            Thanks Much,
                                                                        
                        Fred

john heasley wrote:

>Wed, Jul 09, 2003 at 10:36:42AM -0400, Fred Jordan:
>  
>
>>We are collecting cisco router config files from some of our customers.
>>Problems is we do not have enable mode access to the routers.
>>What we have is the ability to do "show config" at the default
>>privledge level that we log in with.
>>
>>I have tried multiple permutations of autoenable/noenable and still
>>cannot get clogin to run the commands to collect the configs.
>>
>>Here are examples of telneting into the router as well as running
>>clogin as user rancid with various .cloginrc permutations.
>>Any help is greatly appreciated.
>>    
>>
>
>w/o creative AAA, you have to have enable to get the config, so
>rancid expects that, ie: a prompt ending in #.  That will be one
>problem, that will need to be (for the moment) hacked in rancid.
>
>there may other cmds run by rancid that also require privs.
>
>  
>
>>==============================================================
>>= First try
>>= .cloginrc parameters
>>=add user     1.2.3.4  ranuser
>>=add password 1.2.3.4   {ranpass} {ranpass}
>>=add noenable 1.2.3.4
>>    
>>
>			 ^ you need a value here for the config parser, 1.
>			   sorry, the manpage is wrong and the code doesnt
>			   handle this well --- added to the todo list.
>  
>




More information about the Rancid-discuss mailing list