Hi again.<br><br>Sorry I sent the last email to Jethro directly, not to the list... :P<br><br>Anyway, it works perfect!!! I have created rancid7, clogin7 and modified rancid-fe script ,and now I can get the configs.<br><br>
<i>rancid@nagios3:~/bin$ clogin7 -t 90 172.16.20.1<br>172.16.20.1<br>spawn telnet 172.16.20.1<br>Trying 172.16.20.1...<br>Connected to 172.16.20.1.<br>Escape character is '^]'.<br>.<br>.<br>.<br>User Access Verification<br>
<br>Username: rancid<br>Password: <br><br>gw1>enable 7<br>Password: <br>gw1#<br></i><br><br>Thanks a lot for your help, is nice to see a gurus like you.<br><br>Regards,<br>Julian<br><br><div class="gmail_quote">2010/6/10 Julian Salmeron <span dir="ltr"><<a href="mailto:jsalmeron@gmail.com">jsalmeron@gmail.com</a>></span><br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">Hi John/Jethro.<br><br>Thanks for the quick reply.<br><br>I'll try to create the separate scripts and let you know.<br>
<br>Regards,<br>Julian<br><br><div class="gmail_quote">2010/6/9 Jethro R Binks <span dir="ltr"><<a href="mailto:jethro.binks@strath.ac.uk" target="_blank">jethro.binks@strath.ac.uk</a>></span><div><div></div><div class="h5">
<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div>On Wed, 9 Jun 2010, john heasley wrote:<br>
<br>
</div><div>> > If the facility to change it ever gets added in via .cloginrc, I at least<br>
> > had part of the framework there, and in the meantime it reminds me to<br>
> > think about it again every so often.<br>
><br>
> i'd have created a separate script for that one, especially because its a<br>
> 3com. yes, i won't hide my disdain for 3com.<br>
<br>
</div>:) But I did: h3clogin. That's where I put the simple framework, Just In<br>
Case.<br>
<div><br>
> but, 'enablecmd' is what i was thinking about. however, because folks<br>
> would be inclined to do things like julian is, it affects authorization<br>
> for other commands and quickly becomes far more complicated.<br>
<br>
</div>I was just thinking about the general case of "a device where the enable<br>
command isn't literally 'enable'", rather than Julian's more specialised<br>
case where he is specifying a particular priv level, but you are correct<br>
that in that case it can get complicated.<br>
<br>
As it happens, my rancid logs into a ASA/PIX with a user of lower priv<br>
level; I did have to make some of the commands available to the lower priv<br>
level.<br>
<br>
My 'framework', such as it was, was really an example of my continuing<br>
view (mentioned before) that the more system-specific detail can be<br>
abstracted out from the scripts themselves, then the less different the<br>
scripts become. It then becomes much easier to:<br>
<br>
1. abstract common functions out from the scripts;<br>
<br>
2. make updates to general functionality across all the scripts;<br>
<br>
3. write a script for a new device, concentrating on just the stuff that<br>
really is different rather than trying to cobble something together<br>
comparing different scripts for other different devices<br>
<br>
Obviously some devices really are quite different, or pernikity, but if<br>
you can abstract even the simple things like "what's the command to run to<br>
get to privileged mode", and "how do i turn off paging" to the clogin<br>
level, or a simple config file listing the vendors and the equivalent<br>
commands, then you might get some way down that road.<br>
Net::Appliance::Session attempts to do something like this, by the use of<br>
vendor-specific 'phrasebooks', e.g.:<br>
<br>
<a href="http://cpansearch.perl.org/src/OLIVER/Net-Appliance-Phrasebook-1.8/lib/Net/Appliance/Phrasebook/nas-pb.yml" target="_blank">http://cpansearch.perl.org/src/OLIVER/Net-Appliance-Phrasebook-1.8/lib/Net/Appliance/Phrasebook/nas-pb.yml</a><br>
<div><br>
Jethro.<br>
<br>
. . . . . . . . . . . . . . . . . . . . . . . . .<br>
Jethro R Binks<br>
Computing Officer, IT Services, University Of Strathclyde, Glasgow, UK<br>
_______________________________________________<br>
</div><div><div></div><div>Rancid-discuss mailing list<br>
<a href="mailto:Rancid-discuss@shrubbery.net" target="_blank">Rancid-discuss@shrubbery.net</a><br>
<a href="http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss" target="_blank">http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss</a><br>
</div></div></blockquote></div></div></div><br>
</blockquote></div><br>