[j-nsp] configuration archival, commit comments

Mike Williams mike.williams at comodo.com
Tue Nov 25 10:13:02 EST 2014


I would not use that commit script if I were you, and I wrote it.
We don't anymore.

On single devices it might be OK but we use a lot of J/SRX clusters and all 
sort of nastiness occurs when they reboot.
JUNOS issues a commit during boot, it's easy to blindly accept it in the 
commit script but it leaves the configs visible identical by actually 
different between cluster members.

On Monday 10 November 2014 18:46:29 Stefan Cioata wrote:
> Hello everyone,
> 
> The only partial reference to my problem that I found on the net was posted
> by:
> 
> Author Message
> Mike Williams
> PostPosted: Thu Mar 20, 2014 1:50 pm    Post subject: configuration
> archival, commit comments
> 
> 
> 
> Here is my challenge:
> 
> a) I use  system archival
> 
> stefan at stefan_test_desktop> show configuration system archival
> configuration {
>     transfer-on-commit;
>     archive-sites {
>         "scp://backup@x.y.z.w:/data/backup/" password
> "$9$a9JjqTz6ApBGDi.f56/"; ## SECRET-DATA
>     }
> }
> 
> b) the file arrives at the destination with the user striped:
> 
> [root at anetlogger backup]# zcat
> stefan_test_desktop_juniper.conf.gz_20140217_221525 | more
> ## Last changed: 2014-02-17 22:15:20 PST<---------------- *by stefan is
> missing!!!*
> version 12.3R2.5;
> /*
>  * $Id$
>  *
>  * ex4200-defaults.conf  - Default configurations for EX4200
>  *
>  * Copyright (c) 2010, Juniper Networks, Inc.
>  * All rights reserved.
>  */
> groups {...
> 
> the backup file is different then:
> 
> stefan at stefan_test_desktop> show configuration
> ## Last commit: 2014-11-10 14:40:52 PST by stefan*<-----------The info is
> there!!!*
> 
> c) I would like  to implement git. That will require at minimum to have the
> user on the ".gz transferred file.
> 
> Any help would be more the apreciated.
> 
> Thank you,
> 
> Stefan
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp

-- 
Mike Williams


More information about the juniper-nsp mailing list