Discussion:
[rancid] Changed IP Addresses
Kerry Cox
2013-06-25 20:07:42 UTC
Permalink
I recently reconfigured my internal network and gave my C3750G core switch an IP address of 10.10.0.1. This was formerly used by the inside port of my firewall.
However, whenever I now attempt to have rancid connect to this new IP address, if pukes when changing to enable mode.

$ clogin 10.10.0.1
10.10.0.1
spawn ssh -c 3des -x -l rancid 10.10.0.1
Password:
C3750G-CORE>enable
Password:
% Access denied
C3750G-CORE>
Error: Check your Enable passwd
C3750G-CORE>exit

However, when I do a simple login from my Linux server, it connects with no problem. The enable password works just fine.

$ ssh ***@10.10.0.1
Password:
C3750G-CORE>en
Password:
C3750G-CORE#

And when I manually enter the enable password it also works from the rancid CLI.
I have already confirmed my .cloginrc settings are correct.

$ clogin 10.10.0.1
10.10.0.1
spawn ssh -c 3des -x -l rancid 10.10.0.1
Password:
C3750G-CORE>enable # run by rancid
Password:
% Access denied
C3750G-CORE>
Error: Check your Enable passwd
C3750G-CORE>en # run manually by myself
Password:
C3750G-CORE#

Does rancid cache settings some place? I have reset the enable password on the switch and have confirmed all the settings are good.
Ideas? Suggestions?
Thanks in advance.
Kerry

**Electronic Privacy Notice** This e-mail and any attachments contain
information that is or may be covered by electronic communication
privacy laws, and is also confidential and proprietary in nature.
If you are not the intended recipient, please be advised that you are
legally prohibited from retaining, using, copying, distributing or otherwise
disclosing this information in any manner. Instead, please reply to the
sender that you have received this communication in error and then
immediately delete it. Thank you for your cooperation.
Kerry Cox
2013-06-25 20:58:47 UTC
Permalink
Heh, found the issue. I still had the older entry in my .cloginrc file way far at the top of the file (managing a ton of network devices).
As I pointed out in my 1st post, I changed the IP address of the inside port of my firewall to now be the switch IP address. I forgot to remove the original inside IP address for my firewall, so it was reading this first before getting to the section on switches.
My bad. Should have gone through the entire file. :-( That'll teach me.
Thanks much for the help.
Kerry

-----Original Message-----
From: heasley [mailto:***@shrubbery.net]
Sent: Tuesday, June 25, 2013 2:42 PM
To: Kerry Cox
Subject: Re: [rancid] Changed IP Addresses
Understood. I was already aware of that and I have been using braces { } around my enable password and well as my regular login. I only have a $ symbol in the password.
But, this same password works just fine elsewhere on other Cisco 3750G devices. I have even changed the password and tested manually. The updated .cloginrc file still complains.
Caching the older data somplace, perhaps?
Kerry
that should be {blah\$}
-----Original Message-----
Sent: Tuesday, June 25, 2013 2:30 PM
To: Kerry Cox
Subject: Re: [rancid] Changed IP Addresses
Post by Kerry Cox
I recently reconfigured my internal network and gave my C3750G core switch an IP address of 10.10.0.1. This was formerly used by the inside port of my firewall.
However, whenever I now attempt to have rancid connect to this new IP address, if pukes when changing to enable mode.
$ clogin 10.10.0.1
10.10.0.1
spawn ssh -c 3des -x -l rancid 10.10.0.1
C3750G-CORE>enable
% Access denied
C3750G-CORE>
Error: Check your Enable passwd
C3750G-CORE>exit
However, when I do a simple login from my Linux server, it connects with no problem. The enable password works just fine.
see cloginrc(5) wrt meta characters in your password.
**Electronic Privacy Notice** This e-mail and any attachments contain
information that is or may be covered by electronic communication
privacy laws, and is also confidential and proprietary in nature.
If you are not the intended recipient, please be advised that you are
legally prohibited from retaining, using, copying, distributing or
otherwise disclosing this information in any manner. Instead, please
reply to the sender that you have received this communication in error
and then immediately delete it. Thank you for your cooperation.
Loading...