<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 03/23/2015 01:35 PM, alligator94
wrote:<br>
</div>
<blockquote cite="mid:002601d0658f$bc21e110$3465a330$@laposte.net"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-US">We
use rancid to backup daily around 3700 cisco devices
(routers and switches + some WAP and FW) all around the
world and let’s say that 10 percent randomly may not be
reachable because they are switched off at night or due to
any other connectivity issue. As we have the standard rancid
configuration, I think that there are 3 retries, so it may
take time.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-US">I
have no access right now to the rancid config, but several
clogin run in //.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-US">We
have a lot of different models of cisco devices, connected
through a stable and not overloaded mpls network or using
ipsec tunnels. Some use satellite connectivity in the far
east countries.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-US">Rancid
runs on a separate linux system, so it is not disturbing
while rancid run is below 24hours . But I was wondering if,
as we don’t change the devices configuration very often,
once a week would be enough if we use the “archive “ cisco
command to store the updated config. Today we run rancid on
a daily basis not to miss any change in the devices
configurations.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-US">Regards<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-US">Gilles<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-US"><o:p> </o:p></span><br>
</p>
</div>
</blockquote>
You could do a few things. If you're running tacacs you could
kickoff an individual rancid-run on a single node after a login to
that node. Or if you're using a syslog server you can watch for
"Configured from " in the logs and kick it off from that.<br>
<br>
If you were to use the ftp config you would need to heavily modify
the rancid script. It would need to detect that the file was newer
than what was saved in CVS, then grab the comments out of the
existing CVS file, combine that with the "sh run" from the ftp.
This would fake things out and the comments would be wrong on some
devices and that would be .. not ideal.<br>
<br>
Either that, or you could strip all the comments from both files and
diff them then only run rancid on files that are different. That
lets you save lots of runtime and gives you the correct answers, so
it would be much better than the above, at the cost of a little more
network traffic.<br>
<br>
If you did these I would still advise you to do a full run once a
week.<br>
<br>
<br>
</body>
</html>