Re: [rancid] Palo Alto (Panorama) configuration

2019-07-11 Thread Anderson, Charles R
You can use "show config merged" to see the local device's config merged with the templates from Panorama. On Thu, Jul 11, 2019 at 02:19:00PM +, Gauthier, Chris wrote: > I have run into the issues seen below, as we migrated to a fully-managed > Panorama ecosystem in recent months. The outpu

Re: [rancid] Rancid running numerous times for each group? Getting ~40 config fetcher email alerts for same group in a night

2019-05-24 Thread Anderson, Charles R
On Fri, May 24, 2019 at 04:44:23PM +, Ni Ne wrote: > >> Running ranicd 3.8 on CentOS 6.10, using git as the repo type. > >> > >> It appears rancid is running numerous times against the same group in a > >> given night - at least if config fetches fail. > >> > >> For instance, I have one group

Re: [rancid] issues with mail and aliases

2019-03-20 Thread Anderson, Charles R
After editing /etc/aliases, you must run "newaliases". I maintain the Centos 7 EPEL package for rancid. It is updated to 3.9--you should get the update in the next update batch (whenever that happens I'm not sure), or you can get it now from epel-testing. On Wed, Mar 20, 2019 at 08:37:16AM -05

[rancid] [PATCH] Nortel/Avaya BayStack/ERS support

2019-02-21 Thread Anderson, Charles R
The attached files add support for Bay Networks/Nortel/Avaya BayStack/BPS/ERS switches. I based these changes on ones we've been running in production for over a decade and I've tested this extensively on models BPS 2000, 470, and ERS 25xx/45xx/55xx/56xx. Initially I copied clogin to bslogin,

[rancid] [PATCH] Ciena Waveserver wavesvros.pm: fix filtering user passwords

2019-02-20 Thread Anderson, Charles R
The attached patch for Ciena Waveserver devices fixes the filter for user passwords to also filter the "user set" command not just "user create" and also fixes the spacing before the secret. Result: - !user create user rancid access-level limited secret - user set user su access-level super se

[rancid] [PATCH] panos.pm: filter secrets

2019-02-20 Thread Anderson, Charles R
The attached patch filters out snmp-community-string and all "key " values (encryption/authentication keys for OSPF and other protocols, IPsec pre-shared-keys, etc.) in PanOS/Panorama configs and fixes the initial comment line to begin with # like all the other comments. Result: - !RANCID-CONT

Re: [rancid] [PATCH] junos.pm: filter negative temperatures in ShowChassisEnvironment

2019-02-20 Thread Anderson, Charles R
gt; - # FPC 0 GEPHY2 OK N/A > + # FPC 0 GEPHY2 OK > # FPC 0 GEPHY3 OK > # FPC 0 GEPHY4 OK > # > > -Original Message- > From: Rancid-discuss [

[rancid] [PATCH] junos.pm: filter negative temperatures in ShowChassisEnvironment

2019-02-19 Thread Anderson, Charles R
One of our switches is in an outdoor cabinet. It gets below 0 sometimes so we see output like this: # Temp FPC 0 GEPHY1 OK # FPC 0 GEPHY2 OK # FPC 0 GEPHY3 OK - # FPC 0 GEPHY4 OK -5 degrees C

[rancid] [PATCH] escape double quotes in command string

2019-02-18 Thread Anderson, Charles R
I'd like to add some custom Junos commands in rancid.types.conf such as: wpi-juniper;command;junos::ShowChassisHardware;show lldp neighbors | match "^Local | ae[0-9]+ " wpi-juniper;command;junos::ShowChassisHardware;show system commit | except ^rescue | trim 4 | except "by apipush via" These ar

Re: [rancid] Device PacketShaper

2019-02-18 Thread Anderson, Charles R
-discuss/2004-May/000783.html - Forwarded message from Umar Farooq - Date: Mon, 18 Feb 2019 09:25:23 -0500 From: Umar Farooq To: "Anderson, Charles R" Subject: Re: [rancid] Device PacketShaper Return-Path: ufaro186...@gmail.com Hello Charles R, Blue Coat On Sun, Feb 17, 201

Re: [rancid] Device PacketShaper

2019-02-17 Thread Anderson, Charles R
Who manufactured your packetshaper? On Fri, Feb 15, 2019 at 10:14:39AM -0500, Umar Farooq wrote: > Hello, > > I am trying to add my device packetshaper in rancid router.db. I am not > sure which device name should I use for it. > > For example if it is a cisco device then > Router01.example.com;

Re: [rancid] Juniper SRX cluster {primary:nodeX}, {secondary:nodeX} filtering

2019-02-12 Thread Anderson, Charles R
The ShowSystemCoreDumps function was missing this filter. I updated the patch to add this. On Tue, Feb 12, 2019 at 11:56:31PM +, Anderson, Charles R wrote: > I'm using the "juniper" type on RANCID 3.9 collecting from Juniper EX/QFX/MX > devices and SRX clusters. On

[rancid] Juniper SRX cluster {primary:nodeX}, {secondary:nodeX} filtering

2019-02-12 Thread Anderson, Charles R
I'm using the "juniper" type on RANCID 3.9 collecting from Juniper EX/QFX/MX devices and SRX clusters. On the EX/QFX/MX devices the {master:N} and {backup:N} first line of the prompt (related to RE redundancy) is filtered out. But on the SRX clusters, they use a different type of clustering co