Robert Borowicz wrote: > I have been asked by the network guys to configure several of their > devices for capture via Spectrum's NCM. Currently they use Solarwinds > which uses a screenscrape of the "show run" command. I suggested > SSH/SCP but am unfamiliar with the account capabilities and requirements > for TACACS.
Rob, NCM does not use "show run" per default, NCM uses the copy command for IOS an CatOS devices. In case of lets say ftp the commands that NCM uses are: copy running-config ftp://<username>:<password>@<dest-IP> copy startup-config ftp://<username>:<password>@<dest-IP> > Could anyone using NCM and TACACS pass on what type of account type and > privs I'll need to suggest to my guy to enable my testing? That depends on your Security Policy and your TACACS+ configuration! In our Network we had a user who has Privilege 15 and a restricted command set. For testing purposes just use a priv 15 user without any restrictions and your a fine. > Any gotchas to using NCM with TACACS? Devices are 99% Cisco ranging > from 6509's to ASA5550s. Fine, same here ;) All devices with IOS and CatOS shouldn't be a real Problem, but probably the ASAs(and NXOS) are a little bit trickier. For the ASAs and NXOS devices NCM uses some perl scripts which works similar to the Solarwinds Software. If you need more information how it works in our environment just leave me a message. HTH Danny Buthge -- BCC Business Communication Company GmbH Heinrich-Nordhoff-Straße 69, 38440 Wolfsburg Tel. +49 5361 2777-361, Fax -398 Service-Nummer: 01801 222678* mailto:[email protected] http://www.bcc.de Registergericht: Braunschweig HRB 4460 Geschäftsführung: Dipl.-Ing. (FH) Josef Glöckl-Frohnholzer *Festnetzpreis 3,9 ct/min, Mobilfunkpreise maximal 42 ct/min --- To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected]
