Mailing List Archive

manage auto-enabled/radius devices and not-auto-enabled devices at once
Hi,

We have about 100+ routers which is authenticated via Radius, auto-enabled.

in clogin, this is what modified:

# The default is to automatically enable
set enable 1
# The default is that you login non-enabled (tacacs can have you login
already e
nabled)

# MCOE set auto-enable 1 for routers
set autoenable 1


so in the .cloginrc:

add user routerIP myuser
add password routerIP myRadiusPasswd

works great for router!



However, we have a bunch of switches not going through radius at all for
verification (passwd stored locally), in .cloginrc

add user switchip myuser
add passwd switchip vtypass enablepass

This won't work with clogin I modified.


Any suggestions?

Thanks.

Alex
manage auto-enabled/radius devices and not-auto-enabled devices at once [ In reply to ]
Mon, Sep 22, 2003 at 05:21:10PM -0700, Alex Zheng:
>
> Hi,
>
> We have about 100+ routers which is authenticated via Radius, auto-enabled.
>
> in clogin, this is what modified:
>
> # The default is to automatically enable
> set enable 1
> # The default is that you login non-enabled (tacacs can have you login
> already e
> nabled)
>
> # MCOE set auto-enable 1 for routers
> set autoenable 1
>
>
> so in the .cloginrc:
>
> add user routerIP myuser
> add password routerIP myRadiusPasswd
>
> works great for router!
>
>
>
> However, we have a bunch of switches not going through radius at all for
> verification (passwd stored locally), in .cloginrc
>
> add user switchip myuser
> add passwd switchip vtypass enablepass
>
> This won't work with clogin I modified.

if you have hostnames that identify device types, eg all switch begin
with "s", then you can wildcard them in .cloginrc. eg:

set autoenable s* 0
....
set autoenable * 1
# %EOF