topic Re: superreader Cannot Set CLI Parameters in Panorama in General Topics

superreader Cannot Set CLI Parameters in Panorama

cosx — Tue, 20 Jan 2015 21:27:56 GMT

I recently upgraded Panorama to 6.1.1 from 5.0.11. When I did so, RANCID was no longer able to log into Panorama and do its configuration tracking.

I tracked down the problem to a superreader not being able to issue the "set cli pager off" command. This worked in 5.0.11. It still works on a firewall running 6.1.1, just not on Panorama. In 6.1.1 on Panorama, the "set" command is totally restricted. On a PA-4060, I get what I expect, only the "set cli" and "set password" commands are available.

I can temporarily give the account RANCID uses superuser permissions, but there isn't a reason this account needs write permissions.

Am I the only one having this problem? Something about my Panorama setup? Or can other reproduce this? Any idea at which version this was broken?

Re: superreader Cannot Set CLI Parameters in Panorama

ukhapre — Sat, 24 Jan 2015 01:10:37 GMT

This looks like function is broken in 6.1.1. Please open a case with support to file a bug if you like.

I ran across some commands not working in 6.1.1 panorama.

Re: superreader Cannot Set CLI Parameters in Panorama

cosx — Thu, 26 Mar 2015 21:10:21 GMT

For the record, I did go to PAN support with this. They provided a patched version of Panorama, 6.1.2-h1, with the fix. I assume that the fix will be present in future releases.