Doug, I have setup your panrancid and panlogin and they are working fine.<br><br>However, I just found that you can show the PA config in 'set' format (set cli config-output-format set) and I like that better than the defaul xml format. I would like to back up the configs this way but you have to go into configure mode in order to show the config in set format.<br>
<br>I have tried to modify panlogin but I don't know expect well enough. I was actually trying to borrow the enable section from clogin because panlogin doesn't have a provision for enable mode and while it's not really enable mode that we're getting into, the prompts are the same, > and #.<br>
<br>Any ideas?<br><br><br><div class="gmail_quote">On Wed, Sep 12, 2012 at 11:53 AM, Hughes, Doug <span dir="ltr"><<a href="mailto:Douglas.Hughes@deshawresearch.com" target="_blank">Douglas.Hughes@deshawresearch.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div link="blue" vlink="purple" lang="EN-US">
<div>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Yes, it’s for the anti-virus and botnet stuff. If you don’t want those diffs, you can comment that part out in
the palorancid file.<u></u><u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">I thought it might be useful. I might disable it myself.<u></u><u></u></span></font></p>
<p class="MsoNormal"><a name="139bb2f838a63dd3__MailEndCompose"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></font></a></p>
<p class="MsoNormal" style="margin-left:.5in"><b><font face="Tahoma"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";font-weight:bold">From:</span></font></b><font face="Tahoma"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
Peter Jackson [mailto:<a href="mailto:peterjackson1610@gmail.com" target="_blank">peterjackson1610@gmail.com</a>] <br>
<b><span style="font-weight:bold">Sent:</span></b> Wednesday, September 12, 2012 6:02 AM<br>
<b><span style="font-weight:bold">To:</span></b> Hughes, Doug<br>
<b><span style="font-weight:bold">Cc:</span></b> <a href="mailto:rancid-discuss@shrubbery.net" target="_blank">rancid-discuss@shrubbery.net</a><br>
<b><span style="font-weight:bold">Subject:</span></b> Re: [rancid] rancid login etc. for palo alto and silver peak<u></u><u></u></span></font></p><div><div class="h5">
<p class="MsoNormal" style="margin-left:.5in"><font face="Times New Roman" size="3"><span style="font-size:12.0pt"><u></u> <u></u></span></font></p>
<p class="MsoNormal" style="margin-right:0in;margin-bottom:12.0pt;margin-left:.5in">
<font face="Times New Roman" size="3"><span style="font-size:12.0pt">Doug, thanks for posting this. I have set this up for one of our PAs but we get the following diffs every so often - not every other RANCID run, but at least a few times a week.<br>
<br>
Have you seen anything like this?<br>
<br>
#RANCID-CONTENT-TYPE: paloalto<br>
#<br>
+ exit<br>
+ admin@pa101> show <br>
+ admin@pa101> show config <br>
+ admin@pa101> show config running<br>
<br>
config { <br>
shared { <br>
ssl-decrypt { <br>
<br>
<br>
#RANCID-CONTENT-TYPE: paloalto<br>
#<br>
- exit<br>
- admin@pa101> show <br>
- admin@pa101> show config <br>
- admin@pa101> show config running<br>
<br>
config { <br>
shared { <br>
ssl-decrypt { <br>
<br>
<u></u><u></u></span></font></p>
<div>
<p class="MsoNormal" style="margin-left:.5in"><font face="Times New Roman" size="3"><span style="font-size:12.0pt">On Tue, Aug 14, 2012 at 10:23 AM, Hughes, Doug <<a href="mailto:Douglas.Hughes@deshawresearch.com" target="_blank">Douglas.Hughes@deshawresearch.com</a>>
wrote:<u></u><u></u></span></font></p>
<div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">A few people have requested this, so I’m attaching the few hours of work I put into making the rancid login/auth/archive
for SilverPeak and for PaloAlto devices. Both of these use ssh for authentication, but I didn’t setup or test RSA key auth in either case. The SilverPeak has been tested with ‘enable’ mode. By default they ship with no enable password. (Apologies for the Windows
style attachments.) Both have been copied from another script and modified, so there’s probably quite a bit of cruft in there that doesn’t need to be, but I cleaned up the worst of it. I’m sure there are a lot of gratuitous regular expressions that could
still be eliminated.<u></u><u></u></span></font></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> <u></u><u></u></span></font></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> <u></u><u></u></span></font></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">Here’s what you need in rancid-fe:<u></u><u></u></span></font></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> <u></u><u></u></span></font></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">%vendortable = (<u></u><u></u></span></font></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">…<u></u><u></u></span></font></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> 'silverpeak' => 'silverrancid',<u></u><u></u></span></font></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> 'paloalto' => 'panrancid',<u></u><u></u></span></font></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">…<u></u><u></u></span></font></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> <u></u><u></u></span></font></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">You can figure our .cloginrc yourself, just don’t forget the enable password for the silverpeak, if you have any. ;)<u></u><u></u></span></font></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> <u></u><u></u></span></font></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> <u></u><u></u></span></font></p>
</div>
</div>
<p class="MsoNormal" style="margin-left:.5in"><font face="Times New Roman" size="3"><span style="font-size:12.0pt"><br>
_______________________________________________<br>
Rancid-discuss mailing list<br>
<a href="mailto:Rancid-discuss@shrubbery.net" target="_blank">Rancid-discuss@shrubbery.net</a><br>
<a href="http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss" target="_blank">http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss</a><u></u><u></u></span></font></p>
</div>
<p class="MsoNormal" style="margin-left:.5in"><font face="Times New Roman" size="3"><span style="font-size:12.0pt"><u></u> <u></u></span></font></p>
</div></div></div>
</div>
</blockquote></div><br>