[c-nsp] Tracking config changes
Phou-Ngan Vannaxay
phou-ngan.vannaxay at aptiwan.com
Fri May 28 08:32:45 EDT 2010
Yes.
in your rancid.conf file, set FILTER_PWDS and NOCOMMSTR to YES or NO.
# FILTER_PWDS determines which passwords are filtered from configs by the
# value set (NO | YES | ALL). see rancid.conf(5).
#FILTER_PWDS=YES; export FILTER_PWDS
#
# if NOCOMMSTR is set, snmp community strings will be stripped from the configs
#NOCOMMSTR=YES; export NOCOMMSTR
Le 28 mai 2010 à 13:53, Lee a écrit :
> On 5/24/10, Clayton Zekelman <clayton at mnsi.net> wrote:
>>
>>
>> We use RANCID on our network. All changes are made through the CLI on the
>> routers/switches, and RANCID just tracks them.
>>
>> If we have an outage where we have to re-build the router's config, we have
>> the versions and changes all stored nicely in the CVS.
>>
>> All changes are e-mailed to our NOC list to make sure everyone knows what is
>> going on.
>
> Does RANCID blank out SNMP community strings & Cisco type 5|7
> passwords before mailing out the diffs?
>
> Work bought a product that grabs the configs after a change, does
> diffs, etc. but it apparently does NOT have the ability to blank out
> sensitive information before e-mailing the info so I'm looking for
> something else.
>
> Thanks,
> Lee
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
More information about the cisco-nsp
mailing list