Anyone using RANCID successfully with PANOS 6.x?

bobbarke — Wed, 03 Sep 2014 22:58:39 GMT

We have been using RANCID (panrancid) to conduct nightly off box backups of Panorama and PA5020s in versions prior to 6.x. After a successful deployment of PANOS 6.x RANCID backups fail consistently. Is anyone using RANCID successfully in PANOS 6?

How did you get it to work?

Debugging output fails with: End of run not found

panrancid -d Alpha-5020

executing panlogin -t 90 -c"set cli scripting-mode on;show system info;show config running" Alpha-5020

line: Alpha-5020

line: spawn ssh -c 3des -x -l panbackup Alpha-5020

{{Truncated for Brevity }}

line: Welcome panbackup.

line:

line: panbackup@Alpha-5020>

line: panbackup@Alpha-5020> set panbackup@Alpha-5020> set cli panbackup@Alpha-5020> set cli pager panbackup@Alpha-5020> set cli pager off

line: panbackup@Alpha-5020> set panbackup@Alpha-5020> set cli panbackup@Alpha-5020> set cli scripting-mode panbackup@Alpha-5020> set cli scripting-mode on

PROMPT MATCH: panbackup@Alpha-5020[#>]

HIT COMMAND:panbackup@Alpha-5020> set panbackup@Alpha-5020> set cli panbackup@Alpha-5020> set cli scripting-mode panbackup@Alpha-5020> set cli scripting-mode on

COMMAND is: set cli scripting-mode on|EatCommand

HIT COMMAND:panbackup@Alpha-5020> show panbackup@Alpha-5020> show system panbackup@Alpha-5020> show system info

COMMAND is: show system info|ShowInfo

In ShowInfo:: panbackup@Alpha-5020> show panbackup@Alpha-5020> show system panbackup@Alpha-5020> show system info

ShowInfo: hostname: Alpha-5020

ShowInfo: ip-address: 10.12.78.26

ShowInfo: netmask: 255.255.255.0

ShowInfo: default-gateway: 10.12.78.1

ShowInfo: ipv6-address: unknown

ShowInfo: ipv6-link-local-address: fe80::290:bff:fe2b:cd08/64

ShowInfo: ipv6-default-gateway:

ShowInfo: mac-address: 00:90:0b:2b:cd:08

ShowInfo: time: Wed Sep 3 22:52:09 2014

ShowInfo: uptime: 48 days, 19:35:34

ShowInfo: family: 5000

ShowInfo: model: PA-5020

{{ Truncated for Brevity }}

ShowInfo:

lines 1-34

ShowInfo: Error: TIMEOUT reached

Alpha-5020: missed cmd(s): show config running

Alpha-5020: End of run not found

Re: Anyone using RANCID successfully with PANOS 6.x?

breakaway — Tue, 25 Nov 2014 13:53:10 GMT

Yes, we are running RANCID 3.1 with our PAs on PAN-OS from 6.0.4 through 6.0.6 without issue.

Doug Hughes made some changes to panlogin and panrancid and it looks like you have the old versions.

The new versions are here (about 1/2-way down the page): Palo Alto | RANCID | Users

topic Anyone using RANCID successfully with PANOS 6.x? in General Topics

Anyone using RANCID successfully with PANOS 6.x?

Re: Anyone using RANCID successfully with PANOS 6.x?