[rancid] Re: rancid and Alcatel-Lucent OmniSwitch 6850

Discussion:

Kevin Turner

2009-01-05 15:24:31 UTC

David,

I have attached the two scripts that I use to backup our 6850's.

Also, add the line below to rancid-fe

elsif ($vendor =~ /^alcatel$/i) { exec('orancid', $router); }

The attached scripts are slight settings modifications of scripts published
by Alexander Bochmann (who deserves all the credit).

I have also CC'd the discussion board since I have had other requests for
this information.

Let me know whether they work for you.

Kevin

-----Original Message-----
From: David Newman [mailto:***@networktest.com]
Sent: Sunday, January 04, 2009 2:55 PM
To: Kevin Turner
Subject: Re: rancid and Alcatel-Lucent OmniSwitch 6850

Hello David,
I found scripts in the message archives that I had to modify slightly to
work with the 6850. I'll be glad to send these to you tomorrow morning
(Eastern time) when I am in the office again.

Thanks very much! I appreciate it.

dn

Kevin Turner
-----Original Message-----
Sent: Friday, January 02, 2009 4:32 PM
Subject: rancid and Alcatel-Lucent OmniSwitch 6850
Hi Kevin,
Where did you find the rancid patches for Alcatel-Lucent OmniSwitch
6850? Did these work for you?
I've got a couple of these to look after as well.
Many thanks, and happy 2009.
dn

David Newman

2009-01-06 22:49:14 UTC

Permalink

Post by Kevin Turner
David,
I have attached the two scripts that I use to backup our 6850's.

Thanks, Kevin!

Post by Kevin Turner
Also, add the line below to rancid-fe
elsif ($vendor =~ /^alcatel$/i) { exec('orancid', $router); }

OK, I've added that.

Would adding this to the vendortable section do the same thing?:

'alcatel' => 'orancid',

Post by Kevin Turner
The attached scripts are slight settings modifications of scripts published
by Alexander Bochmann (who deserves all the credit).
I have also CC'd the discussion board since I have had other requests for
this information.
Let me know whether they work for you.

orancid runs, but I think it executes "show configuration status"
instead of "show configuration snapshot all".

All I get for a device config is the following:

!RANCID-CONTENT-TYPE: alcatel
!
!Cfg: Running configuration and saved configuration are identical
!
!
!
!
!
!
!
!
!! Stack Manager :

That's it, all 137 bytes of it. That looks like the output from "show
configuration status" rather than the device config.

How to tweak orancid so that it uses "show configuration snapshot all"?

thanks again

dn

Post by Kevin Turner
Kevin
-----Original Message-----
Sent: Sunday, January 04, 2009 2:55 PM
To: Kevin Turner
Subject: Re: rancid and Alcatel-Lucent OmniSwitch 6850

Thanks very much! I appreciate it.
dn

Kevin Turner

2009-01-06 23:37:35 UTC

Permalink

David,

Apparently, you are using one of the alpha versions of RANCID. Rancid-fe has
changed in the alpha versions. So, yes add "'alcatel' =>
'orancid'," instead of the line I gave you to rancid-fe.

Also, indeed you are seeing the output for "show configuration status";
however, you should also see the output of more commands including "show
configuration snapshot all". The script seems to be stopping for some
reason. It may may due to a change in the alpha version of RANCID. I am
using the current version 2.3.1

Try running the following debug command from the directory 'orancid' is
located.

env NOPIPE=y orancid -d <device name or IP address>

This will produce devicename.raw and and devicename.new files in the
current directory. The .raw file will have more output to examine for
errors.

Kevin

-----Original Message-----
From: David Newman [mailto:***@networktest.com]
Sent: Tuesday, January 06, 2009 5:49 PM
To: Kevin Turner
Cc: rancid-***@shrubbery.net
Subject: Re: rancid and Alcatel-Lucent OmniSwitch 6850

Post by Kevin Turner
David,
I have attached the two scripts that I use to backup our 6850's.

Thanks, Kevin!

Post by Kevin Turner
Also, add the line below to rancid-fe
elsif ($vendor =~ /^alcatel$/i) { exec('orancid', $router); }

OK, I've added that.

Would adding this to the vendortable section do the same thing?:

'alcatel' => 'orancid',

Post by Kevin Turner
Kevin
-----Original Message-----
Sent: Sunday, January 04, 2009 2:55 PM
To: Kevin Turner
Subject: Re: rancid and Alcatel-Lucent OmniSwitch 6850

Thanks very much! I appreciate it.
dn

David Newman

2009-01-07 00:29:50 UTC

Permalink

Post by Kevin Turner
David,
Apparently, you are using one of the alpha versions of RANCID.

Yes. This is on 2.3.2a7, which is from the rancid-devel port on FreeBSD.

Post by Kevin Turner
Rancid-fe has
changed in the alpha versions. So, yes add "'alcatel' =>
'orancid'," instead of the line I gave you to rancid-fe.

ok, done

Post by Kevin Turner
Also, indeed you are seeing the output for "show configuration status";
however, you should also see the output of more commands including "show
configuration snapshot all". The script seems to be stopping for some
reason. It may may due to a change in the alpha version of RANCID. I am
using the current version 2.3.1
Try running the following debug command from the directory 'orancid' is
located.
env NOPIPE=y orancid -d <device name or IP address>
This will produce devicename.raw and and devicename.new files in the
current directory. The .raw file will have more output to examine for
errors.

orancid and ologin are in /usr/local/libexec/rancid, which the rancid
user does not have write access to.

Instead I ran this from the rancid user's home directory (on this box
it's /usr/local/etc/rancid). (Also, I needed to add
/usr/local/libexec/rancid to the rancid user's path, which I've done
permanently.)

The output of the .new file looks like the "show configuration status,"
as before. The output of the .raw file has all the output from all
commands, including the switch config.

So, unclear why rancid-run isn't picking up the config when manually
running orancid does.

I have not posted any log output because everything looks "normal" but
if there's any other info I can provide for debugging please let me know.

thanks again

dn

Post by Kevin Turner
Kevin
-----Original Message-----
Sent: Tuesday, January 06, 2009 5:49 PM
To: Kevin Turner
Subject: Re: rancid and Alcatel-Lucent OmniSwitch 6850

Post by Kevin Turner
David,
I have attached the two scripts that I use to backup our 6850's.

Thanks, Kevin!

Post by Kevin Turner
Also, add the line below to rancid-fe
elsif ($vendor =~ /^alcatel$/i) { exec('orancid', $router); }

OK, I've added that.
'alcatel' => 'orancid',

Post by Kevin Turner
The attached scripts are slight settings modifications of scripts

published

Post by Kevin Turner
by Alexander Bochmann (who deserves all the credit).
I have also CC'd the discussion board since I have had other requests for
this information.
Let me know whether they work for you.

orancid runs, but I think it executes "show configuration status"
instead of "show configuration snapshot all".
!RANCID-CONTENT-TYPE: alcatel
!
!Cfg: Running configuration and saved configuration are identical
!
!
!
!
!
!
!
!
That's it, all 137 bytes of it. That looks like the output from "show
configuration status" rather than the device config.
How to tweak orancid so that it uses "show configuration snapshot all"?
thanks again
dn

Post by Kevin Turner
Kevin
-----Original Message-----
Sent: Sunday, January 04, 2009 2:55 PM
To: Kevin Turner
Subject: Re: rancid and Alcatel-Lucent OmniSwitch 6850

Thanks very much! I appreciate it.
dn

Kevin Turner

2009-01-07 19:09:26 UTC

Permalink

David,

If the .raw file is complete, but the .new file is not; apparently part of
the needed output is getting erased when the .new file is created. It may be
due to a difference in the alpha version of RANCID.

You can try using the attached version of orancid that will only execute '
show configuration snapshot all' to see if it works. It won't give you the
extra convenient information, but it will eliminate some commands to see if
it makes a difference.

Hopefully, someone more knowledgeable on the .new file creation vs .raw file
process will add some input.

Kevin

-----Original Message-----
From: David Newman [mailto:***@networktest.com]
Sent: Tuesday, January 06, 2009 7:30 PM
To: Kevin Turner
Cc: rancid-***@shrubbery.net
Subject: Re: rancid and Alcatel-Lucent OmniSwitch 6850

Post by Kevin Turner
David,
Apparently, you are using one of the alpha versions of RANCID.

Yes. This is on 2.3.2a7, which is from the rancid-devel port on FreeBSD.

Post by Kevin Turner
Rancid-fe has
changed in the alpha versions. So, yes add "'alcatel' =>
'orancid'," instead of the line I gave you to rancid-fe.

ok, done

Post by Kevin Turner
Kevin
-----Original Message-----
Sent: Tuesday, January 06, 2009 5:49 PM
To: Kevin Turner
Subject: Re: rancid and Alcatel-Lucent OmniSwitch 6850

Post by Kevin Turner
David,
I have attached the two scripts that I use to backup our 6850's.

Thanks, Kevin!

Post by Kevin Turner
Also, add the line below to rancid-fe
elsif ($vendor =~ /^alcatel$/i) { exec('orancid', $router); }

OK, I've added that.
'alcatel' => 'orancid',

Post by Kevin Turner
The attached scripts are slight settings modifications of scripts

published

Post by Kevin Turner
Kevin
-----Original Message-----
Sent: Sunday, January 04, 2009 2:55 PM
To: Kevin Turner
Subject: Re: rancid and Alcatel-Lucent OmniSwitch 6850

Thanks very much! I appreciate it.
dn

David Newman

2009-01-07 19:36:25 UTC

Permalink

Post by Kevin Turner
David,
If the .raw file is complete, but the .new file is not; apparently part of
the needed output is getting erased when the .new file is created. It may be
due to a difference in the alpha version of RANCID.
You can try using the attached version of orancid that will only execute '
show configuration snapshot all' to see if it works. It won't give you the
extra convenient information, but it will eliminate some commands to see if
it makes a difference.
Hopefully, someone more knowledgeable on the .new file creation vs .raw file
process will add some input.

Thanks, Kevin. "rancid-run" produced an even more truncated version of
the config file (pasted below).

Running "env NOPIPE=y orancid -d 1.2.3.4" again produced a complete
config file in the .raw file, and truncated output in the .new file
(similar to that from rancid-run).

Moving from 2.3.2a7 (from FreeBSD ports) to 2.3.2a9 might be worth
trying but I have two concerns about that:

1. I don't know which version of 2.3.2 Alexander used to produce his
scripts, so it might not make a difference; and

2. I also don't know whether installing from source would use the same
file locations as the FreeBSD port. Presumably there are compile-time
options to set this, but I haven't looked yet.

Thanks in advance for any suggested next steps.

dn

from rancid-run:

Index: configs/1.2.3.4
===================================================================
retrieving revision 1.2
diff -u -4 -r1.2 1.2.3.4
@@ -1,12 +1,7 @@
!RANCID-CONTENT-TYPE: alcatel
!
- !Cfg: Running configuration and saved configuration are identical
- !
!
!
!
- !
- !
- !
!

Post by Kevin Turner
Kevin
-----Original Message-----
Sent: Tuesday, January 06, 2009 7:30 PM
To: Kevin Turner
Subject: Re: rancid and Alcatel-Lucent OmniSwitch 6850

Post by Kevin Turner
David,
Apparently, you are using one of the alpha versions of RANCID.

Yes. This is on 2.3.2a7, which is from the rancid-devel port on FreeBSD.

Post by Kevin Turner
Rancid-fe has
changed in the alpha versions. So, yes add "'alcatel' =>
'orancid'," instead of the line I gave you to rancid-fe.

ok, done

orancid and ologin are in /usr/local/libexec/rancid, which the rancid
user does not have write access to.
Instead I ran this from the rancid user's home directory (on this box
it's /usr/local/etc/rancid). (Also, I needed to add
/usr/local/libexec/rancid to the rancid user's path, which I've done
permanently.)
The output of the .new file looks like the "show configuration status,"
as before. The output of the .raw file has all the output from all
commands, including the switch config.
So, unclear why rancid-run isn't picking up the config when manually
running orancid does.
I have not posted any log output because everything looks "normal" but
if there's any other info I can provide for debugging please let me know.
thanks again
dn

Post by Kevin Turner
Kevin
-----Original Message-----
Sent: Tuesday, January 06, 2009 5:49 PM
To: Kevin Turner
Subject: Re: rancid and Alcatel-Lucent OmniSwitch 6850

Post by Kevin Turner
David,
I have attached the two scripts that I use to backup our 6850's.

Thanks, Kevin!

Post by Kevin Turner
Also, add the line below to rancid-fe
elsif ($vendor =~ /^alcatel$/i) { exec('orancid', $router); }

OK, I've added that.
'alcatel' => 'orancid',

Post by Kevin Turner
The attached scripts are slight settings modifications of scripts

published

Post by Kevin Turner
Kevin
-----Original Message-----
Sent: Sunday, January 04, 2009 2:55 PM
To: Kevin Turner
Subject: Re: rancid and Alcatel-Lucent OmniSwitch 6850

Thanks very much! I appreciate it.
dn

Alexander Bochmann

2009-01-12 22:53:56 UTC

Permalink

Hi,

Post by David Newman
orancid runs, but I think it executes "show configuration status"
instead of "show configuration snapshot all".

Sorry, I've not been monitoring the list recently.

orancid runs several commands to collect some more
information than just the config.

David Newman

2009-01-12 23:03:23 UTC

Permalink

Post by Alexander Bochmann
Hi,

Post by David Newman
orancid runs, but I think it executes "show configuration status"
instead of "show configuration snapshot all".

Sorry, I've not been monitoring the list recently.
orancid runs several commands to collect some more
information than just the config.

Alexander Bochmann

2009-01-12 23:20:51 UTC

Permalink

Hi,

Could you try running
ologin -c"show configuration snapshot" <switch address>
to see if that part works at all?

Yes, that logs in via ssh, sets "no more" and then returns the entire
config.

Hmmm... Perhaps one of the other commands that are run is
the problem then.

Maybe try to edit orancid and comment out everything besides
the {'show configuration snapshot all' => 'ShowConfig'},
line in @commandtable.

If that works, you could single out the command that breaks
on your switch by commenting the other commands back in one
by one (warning: all the cisco stuff is still in there too,
so don't get that mixed up).

I cleaned up the orancid code somewhat a couple of weeks ago,
should probably repost that version.

Alex.

David Newman

2009-01-12 23:40:29 UTC

Permalink

Post by Alexander Bochmann
Hi,

Could you try running
ologin -c"show configuration snapshot" <switch address>
to see if that part works at all?

Yes, that logs in via ssh, sets "no more" and then returns the entire
config.

Hmmm... Perhaps one of the other commands that are run is
the problem then.
Maybe try to edit orancid and comment out everything besides
the {'show configuration snapshot all' => 'ShowConfig'},

Kevin Turner also suggested that, and that's actually what my orancid
looks like at the moment: The only line in commandtable *not* commented
out is the one with 'show configuration snapshot all'.

Post by Alexander Bochmann
If that works, you could single out the command that breaks
on your switch by commenting the other commands back in one
by one (warning: all the cisco stuff is still in there too,
so don't get that mixed up).
I cleaned up the orancid code somewhat a couple of weeks ago,
should probably repost that version.

Sure, I'd be glad to try the latest version.

Also, I'm on 2.3.2a7 from FreeBSD-ports. Any chance the OmniSwitch stuff
requires 2.3.2a8 or a9? I tend to think not, since Kevin Turner is using
2.3.1, but just asking.

Thanks again.

dn

Post by Alexander Bochmann
Alex.

A***@HydroOne.com

2009-01-16 13:34:37 UTC

Permalink

Hi,

RANCID is unable to retrieve serial number for SSG-140's; while it can
do for SSg520. anyone can help

RANCID output:

#RANCID-CONTENT-TYPE: netscreen

#

#Product: SSG-140

#HW: 1010(0)-(00)

#Netscreen Type: Firewall+VPN

#Software Version: 5.4.0r5.0

#Feature: AV-K

#File Name: screenos/ssg140.5.4.0r5.0, Checksum: 638d67af

#

Product: SSG-520

#SN: 0156082007000054

#HW: 0000(0)-(00)

#Netscreen Type: Firewall+VPN

#Software Version: 5.4.0r5.0

#Feature: AV-K

#File Name screenos_image, Checksum: daef22a5

NS output (get system):

01W-> get system

Product Name: SSG-140

Serial Number: 0185072007000775, Control Number: ffffffff

Hardware Version: 1010(0)-(00), FPGA checksum: 00000000, VLAN1 IP
(0.0.0.0)

Software Version: 5.4.0r5.0, Type: Firewall+VPN

Feature: AV-K

03W-> get system

Product Name: SSG-520

Serial Number: 0156082007000054, Control Number: 00000000

Hardware Version: 0000(0)-(00), FPGA checksum: 00000000, VLAN1 IP
(0.0.0.0)

Software Version: 5.4.0r5.0, Type: Firewall+VPN

Feature: AV-K