[c-nsp] Weird config changes on C2621XM with AIM-VPN/BPII

[James Bensley]

On 17 September 2015 at 10:52, Patrick M. Hausen <hausen at punkt.de> wrote:
> Hi, all
>
> we monitor all our Cisco gear with Rancid and archive configs in CVS.
> (http://www.shrubbery.net/rancid/)
>
> One chassis shows a change of config once a day, every day. Five
> minutes later at the next rancid run the change is reverted.
>
> 1st rancid message:
> -----------
>  !Interface: FastEthernet0/0, AMD Am79c977
>  !Interface: FastEthernet0/1, AMD Am79c977
>  !
>  !Slot 0: fru
> - !Slot 0: fru AIM-VPN/BPII
> - !Slot 0: type C2621XM 2FE Mainboard, 2 ports
> + !Slot 0: type C2621XM 2FE Mainboard, 3 ports
>  !Slot 0: hvers 4.1 rev B0
> - !Slot 0: hvers 1.0 rev B0
>  !Slot 0: part 73-7754-06, serial FOC09301B14
> - !Slot 0: part 800-18029-01, serial FOC08260A1H
> + !
> + !Slot 0/1: fru AIM-VPN/BPII
> + !Slot 0/1: type Unknown WAN
> + !Slot 0/1: hvers 1.0 rev B0
> + !Slot 0/1: part 800-18029-01, serial FOC08260A1H
>  !
>  !NAME: "2621XM chassis",        DESCR: "2621XM chassis"
>  !PID:
>  !VID: 4.1
> -----------
>
> 2nd rancid message:
> -----------
>  !Interface: FastEthernet0/0, AMD Am79c977
>  !Interface: FastEthernet0/1, AMD Am79c977
>  !
>  !Slot 0: fru
> - !Slot 0: type C2621XM 2FE Mainboard, 3 ports
> + !Slot 0: fru AIM-VPN/BPII
> + !Slot 0: type C2621XM 2FE Mainboard, 2 ports
>  !Slot 0: hvers 4.1 rev B0
> + !Slot 0: hvers 1.0 rev B0
>  !Slot 0: part 73-7754-06, serial FOC09301B14
> - !
> - !Slot 0/1: fru AIM-VPN/BPII
> - !Slot 0/1: type Unknown WAN
> - !Slot 0/1: hvers 1.0 rev B0
> - !Slot 0/1: part 800-18029-01, serial FOC08260A1H
> + !Slot 0: part 800-18029-01, serial FOC08260A1H
>  !
>  !NAME: "2621XM chassis",        DESCR: "2621XM chassis"
>  !PID:
>  !VID: 4.1
> -----------
>
> Any idea why the VPN AIS seems to go out have a beer precisely
> once a day? It's not in use, currently. But this is annoying to say the
> least and litters our CVS repository.
>
> Thanks
> Patrick
> --
> punkt.de GmbH * Kaiserallee 13a * 76133 Karlsruhe
> Tel. 0721 9109 0 * Fax 0721 9109 100
> info at punkt.de       http://www.punkt.de
> Gf: Jürgen Egeling      AG Mannheim 108285
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/


Hi Patrick,

Others have described on the list some technical reasons the routers
give this output, also RANCID polling frequency can cause some
unwatned noise. I wrote a small patch you can apply here, it filters
out sections from RANCID emails that don't containt what I could call
an update (something is essentially added and removed as per your
example).

It's a bit ugly but it works and it's here,
http://null.53bits.co.uk/index.php?page=rancid-filter

In the example I made, the startup config has been altered on a rouer
so RANCID reports a diff with:

- !Flash: nvram:   178  -rw-       10463                    <no date>
startup-config
+ !Flash: nvram:   178  -rw-       10431                    <no date>
startup-config

Which I don't really need to know about.


Cheers,
James.