Mailing List Archive

Couple of very general questions.
We are looking at jumping off our current switch platform for a number of annoying reasons and are considering a couple of options for replacement. I use Rancid pretty heavily and I wondered if I could get some feedback on how Rancid works with those vendors (it seems there's support, but the devil is in the details) from people using the equipment.

We're looking at Fortinet switches, as we use their firewalls. I have Rancid well integrated with the firewalls and as I understand it, the switches are downloaded from the firewalls when in linked mode. Do the switch configs get uploaded to rancid as part of the firewall's configuration backup? Or do you have to somehow interrogate each switch separately like we do for our current switches?

The other option we're looking at is Extreme. I see that it is managed by the standard clogin (according to the Rancid docs) and just wondered if there was anything to be aware of with interfacing to their gear.

Thanks. Just wanted to get a more accurate understanding of the level of support for these two device families. Detailed responses are welcome to use email.
Chris
Re: Couple of very general questions. [ In reply to ]
Thu, May 17, 2018 at 07:28:28PM +0000, Chris Davis:
> We are looking at jumping off our current switch platform for a number of annoying reasons and are considering a couple of options for replacement. I use Rancid pretty heavily and I wondered if I could get some feedback on how Rancid works with those vendors (it seems there's support, but the devil is in the details) from people using the equipment.
>
> We're looking at Fortinet switches, as we use their firewalls. I have Rancid well integrated with the firewalls and as I understand it, the switches are downloaded from the firewalls when in linked mode. Do the switch configs get uploaded to rancid as part of the firewall's configuration backup? Or do you have to somehow interrogate each switch separately like we do for our current switches?
>
> The other option we're looking at is Extreme. I see that it is managed by the standard clogin (according to the Rancid docs) and just wondered if there was anything to be aware of with interfacing to their gear.

I can't comment on fortinet, but the extreme ought to work. however, it has
been at least a year since I've had feed back about one.

Also, recommend considering juniper and arista.

_______________________________________________
Rancid-discuss mailing list
Rancid-discuss@shrubbery.net
http://www.shrubbery.net/mailman/listinfo/rancid-discuss
Re: Couple of very general questions. [ In reply to ]
If you have a cli access to the switches and can dump the config, then
it should be very possible to do with the switches. I've done that with
PaloAlto, the Fortinet Routers, and Ubiquiti stuff. It's not so hard.

Summary: If it doesn't work in Rancid, it's usually not hard to make it
work (again).

> Thu, May 17, 2018 at 07:28:28PM +0000, Chris Davis:
>> We are looking at jumping off our current switch platform for a number of annoying reasons and are considering a couple of options for replacement. I use Rancid pretty heavily and I wondered if I could get some feedback on how Rancid works with those vendors (it seems there's support, but the devil is in the details) from people using the equipment.
>>
>> We're looking at Fortinet switches, as we use their firewalls. I have Rancid well integrated with the firewalls and as I understand it, the switches are downloaded from the firewalls when in linked mode. Do the switch configs get uploaded to rancid as part of the firewall's configuration backup? Or do you have to somehow interrogate each switch separately like we do for our current switches?
>>
>> The other option we're looking at is Extreme. I see that it is managed by the standard clogin (according to the Rancid docs) and just wondered if there was anything to be aware of with interfacing to their gear.
>>
>>
>> Also, recommend considering juniper and arista.
>>
>> _______________________________________________
>> Rancid-discuss mailing list
>> Rancid-discuss@shrubbery.net
>> http://www.shrubbery.net/mailman/listinfo/rancid-discuss

--
Doug Hughes
Keystone NAP
Fairless Hills, PA
1.844.KEYBLOCK (539.2562)
Re: Couple of very general questions. [ In reply to ]
On 18/05/18 05:53, heasley wrote:
>> The other option we're looking at is Extreme. I see that it is managed by the standard clogin (according to the Rancid docs) and just wondered if there was anything to be aware of with interfacing to their gear.
>
> I can't comment on fortinet, but the extreme ought to work. however, it has
> been at least a year since I've had feed back about one.

I have newish Extreme switches (X440-G2 running XOS 22.4) and they work
fine with rancid. The only problem I have is sometimes the commands show
up in the output, eg:

#Slot 1: state
#
+ show configuration
+ #
# Module devmgr configuration.

I am using rancid 2.3.8 (yes, I know, I'm still running Debian jessie)
but I grabbed the most recent xrancid that wasn't modularised ($Id:
xrancid.in 3018 2015-01-11 05:51:49Z heas $) and it didn't fix the
problem. I didn't think about upgrading clogin though. Is that likely to
help or should I just look at upgrading rancid entirely to get the
modular xrancid with xlogin?

Thanks,

--
James Andrewartha
Network & Projects Engineer
Christ Church Grammar School
Claremont, Western Australia
Ph. (08) 9442 1757
Mob. 0424 160 877

_______________________________________________
Rancid-discuss mailing list
Rancid-discuss@shrubbery.net
http://www.shrubbery.net/mailman/listinfo/rancid-discuss
Re: Couple of very general questions. [ In reply to ]
Fri, May 18, 2018 at 09:31:21AM +0800, James Andrewartha:
> On 18/05/18 05:53, heasley wrote:
> >> The other option we're looking at is Extreme. I see that it is managed by the standard clogin (according to the Rancid docs) and just wondered if there was anything to be aware of with interfacing to their gear.
> >
> > I can't comment on fortinet, but the extreme ought to work. however, it has
> > been at least a year since I've had feed back about one.
>
> I have newish Extreme switches (X440-G2 running XOS 22.4) and they work
> fine with rancid. The only problem I have is sometimes the commands show
> up in the output, eg:
>
> #Slot 1: state
> #
> + show configuration
> + #

that implies to me that clogin is out of sync with cli. Its likely
that you need the xlogin; I can give you a complete one, and you just
have to update paths and such.

> # Module devmgr configuration.
>
> I am using rancid 2.3.8 (yes, I know, I'm still running Debian jessie)
> but I grabbed the most recent xrancid that wasn't modularised ($Id:
> xrancid.in 3018 2015-01-11 05:51:49Z heas $) and it didn't fix the
> problem. I didn't think about upgrading clogin though. Is that likely to
> help or should I just look at upgrading rancid entirely to get the
> modular xrancid with xlogin?
>
> Thanks,
>
> --
> James Andrewartha
> Network & Projects Engineer
> Christ Church Grammar School
> Claremont, Western Australia
> Ph. (08) 9442 1757
> Mob. 0424 160 877
>
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss@shrubbery.net
> http://www.shrubbery.net/mailman/listinfo/rancid-discuss

_______________________________________________
Rancid-discuss mailing list
Rancid-discuss@shrubbery.net
http://www.shrubbery.net/mailman/listinfo/rancid-discuss
Re: Couple of very general questions. [ In reply to ]
On 18/05/18 09:35, heasley wrote:
> Fri, May 18, 2018 at 09:31:21AM +0800, James Andrewartha:
>> I have newish Extreme switches (X440-G2 running XOS 22.4) and they work
>> fine with rancid. The only problem I have is sometimes the commands show
>> up in the output, eg:
>>
>> #Slot 1: state
>> #
>> + show configuration
>> + #
>
> that implies to me that clogin is out of sync with cli. Its likely
> that you need the xlogin; I can give you a complete one, and you just
> have to update paths and such.
That would be fantastic, thanks.

--
James Andrewartha
Network & Projects Engineer
Christ Church Grammar School
Claremont, Western Australia
Ph. (08) 9442 1757
Mob. 0424 160 877

_______________________________________________
Rancid-discuss mailing list
Rancid-discuss@shrubbery.net
http://www.shrubbery.net/mailman/listinfo/rancid-discuss