From: Daniel_Steyn@Dell.com
Date: Mon Dec 11 2006 - 05:28:59 ART
Have you looked into Opsware or Alterpoint? Both are mass-deployment
tools and are very cool for router standardization, change management
and revision control/backup.
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Darby Weaver
Sent: Sunday, December 10, 2006 11:35 PM
To: Darby Weaver; Brad Ellis; Cisco certification
Subject: Re: Rancid anyone?
If you are located in the US, regardless of your feelings, chances are
that you need rancid or something like it for legal compliance --
between SOX, FISMA, and HIPAA, most commercial and government entities
need lots of monitoring. If you don't think you need it now, but you
are subject to any kind of auditing and haven't been audited yet, do
yourself a favor and implement it now.
Quite aside from legal issues, tools like rancid are great for lots of
real-life reasons. They are good
for:
* detecting surprise changes ("when did that change occur? Sure would
be nice to have an automated tool to tell us when someone makes a change
in the middle of the night and forgets to send email");
* security monitoring of routers ("where did that permissive ACL come
from? Sure would be nice if a tool could tell us what changes occurred
on routers, so if anything suspicious happens, we can know immediately
instead of when it ends up in the media");
* exercising router flashes ("Whoops, the flash went bad but the device
continued to function in-memory, so nobody noticed until a power outage.
Sure would be nice if we had a tool that periodically logged in to
devices and ran a bunch of commands that demonstrate that it is working
well");
* backing up configs ("Our last manual backup of the router config was
5 years ago; we've upgraded it twice, and added lots of ACLs since then.
Wouldn't an automated way to get config backups make sense?")
--- Darby Weaver <darbyweaver@yahoo.com> wrote:
> Actually,
>
> I was thinking more of SolarWind's Cirrus product.
>
> And I was talking about Rancid and its usage of CVS (Common Versioning
> System) to email configs of one's network's devices to report change.
>
> I was thinking in terms of using these tools in conjuntion with Cisco
> ACS for instance in the sense of Change Management and accountability.
>
>
>
> --- Brad Ellis <brad@ccbootcamp.com> wrote:
>
> > I fly a Cirrus SR-22...does that count???
> >
> > (actually, the darn thing almost ran me over
> > yesterday...was pulling it out
> > of the hanger down a steep downslope and the
> > co-pilot side brakes
> > failed...not a fun day)
> >
> > -b
> > ----- Original Message -----
> > From: "Darby Weaver" <darbyweaver@yahoo.com>
> > To: "Cisco certification" <ccielab@groupstudy.com>
> > Sent: Sunday, December 10, 2006 9:19 PM
> > Subject: Rancid anyone?
> >
> >
> > > Anyone using Rancid?
> > >
> > > Or are most using CatTools? CiscoWorks? or
> Cirrus?
> > >
> > >
> >
>
This archive was generated by hypermail 2.1.4 : Tue Jan 02 2007 - 07:50:37 ART