Anyone using RANCID successfully with PANOS 6.x?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Anyone using RANCID successfully with PANOS 6.x?

L0 Member

We have been using RANCID (panrancid) to conduct nightly off box backups of Panorama and PA5020s in versions prior to 6.x.  After a successful deployment of PANOS 6.x RANCID backups fail consistently.  Is anyone using RANCID successfully in PANOS 6?

How did you get it to work?

Debugging output fails with: End of run not found

panrancid -d Alpha-5020

executing panlogin -t 90 -c"set cli scripting-mode on;show system info;show config running" Alpha-5020

line: Alpha-5020

line: spawn ssh -c 3des -x -l panbackup Alpha-5020

{{Truncated for Brevity }}

line: Welcome panbackup.

line:

line: panbackup@Alpha-5020>

line: panbackup@Alpha-5020> set panbackup@Alpha-5020> set cli panbackup@Alpha-5020> set cli pager panbackup@Alpha-5020> set cli pager off

line: panbackup@Alpha-5020> set panbackup@Alpha-5020> set cli panbackup@Alpha-5020> set cli scripting-mode panbackup@Alpha-5020> set cli scripting-mode on

PROMPT MATCH: panbackup@Alpha-5020[#>]

HIT COMMAND:panbackup@Alpha-5020> set panbackup@Alpha-5020> set cli panbackup@Alpha-5020> set cli scripting-mode panbackup@Alpha-5020> set cli scripting-mode on

COMMAND is: set cli scripting-mode on|EatCommand

HIT COMMAND:panbackup@Alpha-5020> show panbackup@Alpha-5020> show system panbackup@Alpha-5020> show system info

COMMAND is: show system info|ShowInfo

    In ShowInfo:: panbackup@Alpha-5020> show panbackup@Alpha-5020> show system panbackup@Alpha-5020> show system info

ShowInfo: hostname: Alpha-5020

ShowInfo: ip-address: 10.12.78.26

ShowInfo: netmask: 255.255.255.0

ShowInfo: default-gateway: 10.12.78.1

ShowInfo: ipv6-address: unknown

ShowInfo: ipv6-link-local-address: fe80::290:bff:fe2b:cd08/64

ShowInfo: ipv6-default-gateway:

ShowInfo: mac-address: 00:90:0b:2b:cd:08

ShowInfo: time: Wed Sep  3 22:52:09 2014

ShowInfo: uptime: 48 days, 19:35:34

ShowInfo: family: 5000

ShowInfo: model: PA-5020

{{ Truncated for Brevity }}

ShowInfo:

lines 1-34

ShowInfo: Error: TIMEOUT reached

Alpha-5020: missed cmd(s): show config running

Alpha-5020: missed cmd(s): show config running

Alpha-5020: End of run not found

Alpha-5020: End of run not found

1 REPLY 1

L0 Member

Yes, we are running RANCID 3.1 with our PAs on PAN-OS from 6.0.4 through 6.0.6 without issue.

Doug Hughes made some changes to panlogin and panrancid and it looks like you have the old versions.

The new versions are here (about 1/2-way down the page):  Palo Alto | RANCID | Users

  • 3348 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!