RANCID

Revision as of 15:46, 24 November 2007

RANCID is a tool that can monitor configuration changes on network devices, and mail the diffs periodically. It's installed on will from the (rather alpha-quality) Debian/Ubuntu packages.

Equipment notes

Foundry

For security reasons, rancid is given a specific user account rancid with read-only privileges, but (most) EXEC level commands work:

username rancid privilege 5 password .....

However, RANCID disables output paging before executing commands, with skip-page-display. However this command is not available in privilege level 5 by default. Fix that:

privilege exec level 5 skip-page-display

Also not available is the command write terminal. Unfortunately it's not possible to allow this command without also allowing "write memory". Therefore francid can be altered to use show run instead.