Does RANCID handle Cisco PIX devices?

Hopper, Faron W. faron.hopper at capgemini.com
Tue Dec 28 17:19:19 UTC 2004


Hello all,  I am still exploring RANCID's capabilities.  Does it have
the ablility
to back up Cisco PIX configs?  I have added the one of our PIX's names
to
the router.db file and set the type to

    pixhq:cat5:up
    pixhq2:cat5:up

thinking that it would be closer to
the catOS command line.  This is not successful.  I am using TACACS+ on
the PIX, and here is an example of what I get if I manually ssh into it.

    $ ssh -l net\-cfg\-bak 10.1.1.1
    net-cfg-bak at 10.1.1.1's password:
    Type help or '?' for a list of available commands.
    PIXHQ>
    PIXHQ> en
    Password: ********
    PIXHQ#

in my dead.letter file this is the message I get for the 2 PIXes
configured

    From: Network Config Backup <net-cfg-bak>
    Message-Id: <200412282250.iBSMoOnX027862 at netdisco.capgemini.com>
    To: rancid-fi
    Subject: config fetcher problems - fi
    Precedence: bulk

    The following routers have not been successfully contacted for
    more than 4 hours.
    -rw-r-----  1 net-cfg-bak  wheel  0 Dec 13 16:23 pixhq
    -rw-r-----  1 net-cfg-bak  wheel  0 Dec 13 16:23 pixhq2

If I use the clogin program, I can get the level 1 login prompt, but it
is not executing my show version.
This makes me think that it is waiting on some type of prompt character
that is not defined (just guessing).

    $ /usr/local/libexec/rancid/clogin -c "show version" -f
/home/net-cfg-bak/.cloginrc 10.1.1.1
    10.1.1.1
    spawn telnet 10.1.1.1
    Trying 10.1.1.1...
    telnet: connect to address 10.1.1.1: Connection refused
    telnet: Unable to connect to remote host
    spawn ssh -c 3des -x -l net-cfg-bak 10.1.1.1
    net-cfg-bak at 10.1.1.1's password:
    Type help or '?' for a list of available commands.
    PIXHQ>
    PIXHQ>
    Error: TIMEOUT reached

my .cloginrc file is as follows

    add method              *
{telnet} {ssh}
    add autoenable          *                                       {1}
    add enauser             *
{net\-cfg\-bak}
    add user                *
{net-cfg-bak}
    add password            *
{pass}

    # set ssh encryption type, dflt: 3des
    add cyphertype *                {3des}



My goal is to back up my PIX configs, does anyone have any ideas?  Can
RANCID do it?

Thanks,
Faron Hopper
Capgemini
Network Engineering
3315 North Oak Trafficway
Kansas City, MO 64116
816.459.5139
 Capgemini
Logo<outbind://13-00000000212980A687AEC2418AC5574910D993F107000D9EF3454D
8EFC4B8BFFD2B86294168100000028BA9200000D9EF3454D8EFC4B8BFFD2B86294168100
00005BA5D30000/cid:image002.jpg at 01C4D90E.F40D7A30>





More information about the Rancid-discuss mailing list