Discussion:
[rancid] rancid 3.1 and Aironet 1130
Wayne Eisenberg
2015-10-30 13:14:49 UTC
Permalink
Hi,

I am trying to get rancid 3.1 to talk to some Cisco Aironet 1130AG access points, but am not successful so far. I think the problem is in wlogin, since when I run "wlogin -d -t 40 -c"show sysinfo" ap1.local", it never finishes, just hangs waiting for input that isn't coming (successful login, gets to the # prompt, and then looks for more input). I've tried to use autoenable on and off, no success.

The product hardware is AIR-AP1131G-A-K9 and the software is 12.4(21a)JA1 (c1130-k9w7-tar.124-21a.JA1). Any ideas? Is this combination supported, or is there a config change to make on the AP to make it compatible?

(this is the add-in from before the inclusion in 3.2):
wlogin produces:


[***@host rancid3]$ bin/wlogin -d -t 40 -c"show sysinfo" ap1.local
ap1.local
spawn ssh -p 1002 -c 3des -x -l user ap1.local
parent: waiting for sync byte
parent: telling child to go ahead
parent: now unsynchronized from child
spawn: returns {20858}

expect: does "" (spawn_id exp6) match regular expression "(Connection refused|Secure connection [^\n\r]+ refused)"? no
"(Connection closed by|Connection to [^\n\r]+ closed)"? no

expect: does "" (spawn_id exp6) match glob pattern "unknown host\r"? no

expect: does "" (spawn_id exp6) match glob pattern "Host is unreachable"? no
"No address associated with name"? no
"(Host key not found |The authenticity of host .* be established).*(yes/no)?"? no
"HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no
"Offending key for .* (yes/no)?"? no
"(denied|Sorry)"? no
"Login failed"? no
"% (Bad passwords|Authentication failed)"? no
"Press any key to continue"? no
"Enter Selection: "? no
"Last login:"? no
"@[^\r\n]+ ([Pp]assword|passwd):"? no
"(Username|Login|login|user name|User):"? no
"([Pp]assword|passwd):"? no
">"? no
"Login invalid"? no
Password:
expect: does "Password: " (spawn_id exp6) match regular expression "(Connection refused|Secure connection [^\n\r]+ refused)"? no
"(Connection closed by|Connection to [^\n\r]+ closed)"? no

expect: does "Password: " (spawn_id exp6) match glob pattern "unknown host\r"? no

expect: does "Password: " (spawn_id exp6) match glob pattern "Host is unreachable"? no
"No address associated with name"? no
"(Host key not found |The authenticity of host .* be established).*(yes/no)?"? no
"HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no
"Offending key for .* (yes/no)?"? no
"(denied|Sorry)"? no
"Login failed"? no
"% (Bad passwords|Authentication failed)"? no
"Press any key to continue"? no
"Enter Selection: "? no
"Last login:"? no
"@[^\r\n]+ ([Pp]assword|passwd):"? no
"(Username|Login|login|user name|User):"? no
"([Pp]assword|passwd):"? yes
expect: set expect_out(0,string) "Password:"
expect: set expect_out(1,string) "Password"
expect: set expect_out(spawn_id) "exp6"
expect: set expect_out(buffer) "Password:"
send: sending "-------\r" to { exp6 }
expect: continuing expect

expect: does " " (spawn_id exp6) match regular expression "(Connection refused|Secure connection [^\n\r]+ refused)"? no
"(Connection closed by|Connection to [^\n\r]+ closed)"? no

expect: does " " (spawn_id exp6) match glob pattern "unknown host\r"? no

expect: does " " (spawn_id exp6) match glob pattern "Host is unreachable"? no
"No address associated with name"? no
"(Host key not found |The authenticity of host .* be established).*(yes/no)?"? no
"HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no
"Offending key for .* (yes/no)?"? no
"(denied|Sorry)"? no
"Login failed"? no
"% (Bad passwords|Authentication failed)"? no
"Press any key to continue"? no
"Enter Selection: "? no
"Last login:"? no
"@[^\r\n]+ ([Pp]assword|passwd):"? no
"(Username|Login|login|user name|User):"? no
"([Pp]assword|passwd):"? no
">"? no
"Login invalid"? no


expect: does " \r\n" (spawn_id exp6) match regular expression "(Connection refused|Secure connection [^\n\r]+ refused)"? no
"(Connection closed by|Connection to [^\n\r]+ closed)"? no

expect: does " \r\n" (spawn_id exp6) match glob pattern "unknown host\r"? no

expect: does " \r\n" (spawn_id exp6) match glob pattern "Host is unreachable"? no
"No address associated with name"? no
"(Host key not found |The authenticity of host .* be established).*(yes/no)?"? no
"HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no
"Offending key for .* (yes/no)?"? no
"(denied|Sorry)"? no
"Login failed"? no
"% (Bad passwords|Authentication failed)"? no
"Press any key to continue"? no
"Enter Selection: "? no
"Last login:"? no
"@[^\r\n]+ ([Pp]assword|passwd):"? no
"(Username|Login|login|user name|User):"? no
"([Pp]assword|passwd):"? no
">"? no
"Login invalid"? no

AP1#
expect: does " \r\n\r\nAP1#" (spawn_id exp6) match regular expression "(Connection refused|Secure connection [^\n\r]+ refused)"? no
"(Connection closed by|Connection to [^\n\r]+ closed)"? no

expect: does " \r\n\r\nAP1#" (spawn_id exp6) match glob pattern "unknown host\r"? no

expect: does " \r\n\r\nAP1#" (spawn_id exp6) match glob pattern "Host is unreachable"? no
"No address associated with name"? no
"(Host key not found |The authenticity of host .* be established).*(yes/no)?"? no
"HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no
"Offending key for .* (yes/no)?"? no
"(denied|Sorry)"? no
"Login failed"? no
"% (Bad passwords|Authentication failed)"? no
"Press any key to continue"? no
"Enter Selection: "? no
"Last login:"? no
"@[^\r\n]+ ([Pp]assword|passwd):"? no
"(Username|Login|login|user name|User):"? no
"([Pp]assword|passwd):"? no
">"? no
"Login invalid"? no


<and it times out there>


Any ideas? Is rancid v3.2 the answer? If so, how difficult is the upgrade and does it require reinstalling svn?

Thanks,
Wayne


________________________________

The information in this Internet e-mail (and any attachments) is confidential, may be legally privileged and is intended solely for the Addressee(s) named above. If you are not the intended recipient, or the employee or agent responsible for delivering it to the intended recipient, then any dissemination or copying of this e-mail (and any attachments) is prohibited and may be unlawful. If you received this e-mail in error, please immediately notify us by e-mail or telephone, then delete the message. Thank you.
heasley
2015-10-30 15:59:36 UTC
Permalink
Post by Wayne Eisenberg
Any ideas? Is rancid v3.2 the answer?
i do not know, but i do not know what you have now, nor can I look at the
wlogin you have. so, at a minimum, take wlogin from rancid 3.2.

it does appear to be match for > rather than #; autoenable?
Post by Wayne Eisenberg
If so, how difficult is the upgrade
depends upon what version you are running; only significant change for
installation is the format of router.db
Post by Wayne Eisenberg
and does it require reinstalling svn?
no
Dan Anderson
2015-10-30 14:25:32 UTC
Permalink
Try using type cisco. wlogin was meant for the controller-based solution.




If you're looking for more info than just the configs, you'd need to create a custom command set for the APs. 



—
Dan

On Fri, Oct 30, 2015 at 10:00 AM, Wayne Eisenberg
Post by Wayne Eisenberg
Hi,
I am trying to get rancid 3.1 to talk to some Cisco Aironet 1130AG access points, but am not successful so far. I think the problem is in wlogin, since when I run "wlogin -d -t 40 -c"show sysinfo" ap1.local", it never finishes, just hangs waiting for input that isn't coming (successful login, gets to the # prompt, and then looks for more input). I've tried to use autoenable on and off, no success.
The product hardware is AIR-AP1131G-A-K9 and the software is 12.4(21a)JA1 (c1130-k9w7-tar.124-21a.JA1). Any ideas? Is this combination supported, or is there a config change to make on the AP to make it compatible?
ap1.local
spawn ssh -p 1002 -c 3des -x -l user ap1.local
parent: waiting for sync byte
parent: telling child to go ahead
parent: now unsynchronized from child
spawn: returns {20858}
expect: does "" (spawn_id exp6) match regular expression "(Connection refused|Secure connection [^\n\r]+ refused)"? no
"(Connection closed by|Connection to [^\n\r]+ closed)"? no
expect: does "" (spawn_id exp6) match glob pattern "unknown host\r"? no
expect: does "" (spawn_id exp6) match glob pattern "Host is unreachable"? no
"No address associated with name"? no
"(Host key not found |The authenticity of host .* be established).*(yes/no)?"? no
"HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no
"Offending key for .* (yes/no)?"? no
"(denied|Sorry)"? no
"Login failed"? no
"% (Bad passwords|Authentication failed)"? no
"Press any key to continue"? no
"Enter Selection: "? no
"Last login:"? no
"(Username|Login|login|user name|User):"? no
"([Pp]assword|passwd):"? no
">"? no
"Login invalid"? no
expect: does "Password: " (spawn_id exp6) match regular expression "(Connection refused|Secure connection [^\n\r]+ refused)"? no
"(Connection closed by|Connection to [^\n\r]+ closed)"? no
expect: does "Password: " (spawn_id exp6) match glob pattern "unknown host\r"? no
expect: does "Password: " (spawn_id exp6) match glob pattern "Host is unreachable"? no
"No address associated with name"? no
"(Host key not found |The authenticity of host .* be established).*(yes/no)?"? no
"HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no
"Offending key for .* (yes/no)?"? no
"(denied|Sorry)"? no
"Login failed"? no
"% (Bad passwords|Authentication failed)"? no
"Press any key to continue"? no
"Enter Selection: "? no
"Last login:"? no
"(Username|Login|login|user name|User):"? no
"([Pp]assword|passwd):"? yes
expect: set expect_out(0,string) "Password:"
expect: set expect_out(1,string) "Password"
expect: set expect_out(spawn_id) "exp6"
expect: set expect_out(buffer) "Password:"
send: sending "-------\r" to { exp6 }
expect: continuing expect
expect: does " " (spawn_id exp6) match regular expression "(Connection refused|Secure connection [^\n\r]+ refused)"? no
"(Connection closed by|Connection to [^\n\r]+ closed)"? no
expect: does " " (spawn_id exp6) match glob pattern "unknown host\r"? no
expect: does " " (spawn_id exp6) match glob pattern "Host is unreachable"? no
"No address associated with name"? no
"(Host key not found |The authenticity of host .* be established).*(yes/no)?"? no
"HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no
"Offending key for .* (yes/no)?"? no
"(denied|Sorry)"? no
"Login failed"? no
"% (Bad passwords|Authentication failed)"? no
"Press any key to continue"? no
"Enter Selection: "? no
"Last login:"? no
"(Username|Login|login|user name|User):"? no
"([Pp]assword|passwd):"? no
">"? no
"Login invalid"? no
expect: does " \r\n" (spawn_id exp6) match regular expression "(Connection refused|Secure connection [^\n\r]+ refused)"? no
"(Connection closed by|Connection to [^\n\r]+ closed)"? no
expect: does " \r\n" (spawn_id exp6) match glob pattern "unknown host\r"? no
expect: does " \r\n" (spawn_id exp6) match glob pattern "Host is unreachable"? no
"No address associated with name"? no
"(Host key not found |The authenticity of host .* be established).*(yes/no)?"? no
"HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no
"Offending key for .* (yes/no)?"? no
"(denied|Sorry)"? no
"Login failed"? no
"% (Bad passwords|Authentication failed)"? no
"Press any key to continue"? no
"Enter Selection: "? no
"Last login:"? no
"(Username|Login|login|user name|User):"? no
"([Pp]assword|passwd):"? no
">"? no
"Login invalid"? no
AP1#
expect: does " \r\n\r\nAP1#" (spawn_id exp6) match regular expression "(Connection refused|Secure connection [^\n\r]+ refused)"? no
"(Connection closed by|Connection to [^\n\r]+ closed)"? no
expect: does " \r\n\r\nAP1#" (spawn_id exp6) match glob pattern "unknown host\r"? no
expect: does " \r\n\r\nAP1#" (spawn_id exp6) match glob pattern "Host is unreachable"? no
"No address associated with name"? no
"(Host key not found |The authenticity of host .* be established).*(yes/no)?"? no
"HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no
"Offending key for .* (yes/no)?"? no
"(denied|Sorry)"? no
"Login failed"? no
"% (Bad passwords|Authentication failed)"? no
"Press any key to continue"? no
"Enter Selection: "? no
"Last login:"? no
"(Username|Login|login|user name|User):"? no
"([Pp]assword|passwd):"? no
">"? no
"Login invalid"? no
<and it times out there>
Any ideas? Is rancid v3.2 the answer? If so, how difficult is the upgrade and does it require reinstalling svn?
Thanks,
Wayne
________________________________
The information in this Internet e-mail (and any attachments) is confidential, may be legally privileged and is intended solely for the Addressee(s) named above. If you are not the intended recipient, or the employee or agent responsible for delivering it to the intended recipient, then any dissemination or copying of this e-mail (and any attachments) is prohibited and may be unlawful. If you received this e-mail in error, please immediately notify us by e-mail or telephone, then delete the message. Thank you.
Loading...