Re: [rancid] Fortigate VDOMs
Linux Threads <[email protected]> Sat, 9 Mar 2019 08:25:57 +0200
| Newsgroups | gmane.network.rancid |
|---|---|
| Message-ID | <CAPDmRNd+gFOoWRkMte19h-A1kvtx4aDSL_3coPBjA5Zkigy0hg@mail.gmail.com> |
HI, Thank you for all your inputs seems like permissions on the FGT was the problem I am able to pull full-config now, Kind Regards Juan On Fri, 8 Mar 2019 at 18:17, Ni Ne <[email protected]> wrote: > Check that the user account rancid is logging in as in .cloginrc has > permissions to all VDOMs. You can test it yourself by logging to the > firewall as that user and seeing what it sees. > > Using the "show full" mode should not be necessary to see all VDOMs. It > just shows the default settings, still at their default values, that would > normally be hidden. > > ------------------------------ > *From:* Rancid-discuss <[email protected]> on behalf > of Linux Threads <[email protected]> > *Sent:* Friday, March 8, 2019 5:43 AM > *To:* [email protected] > *Subject:* [rancid] Fortigate VDOMs > > Hi Rancid Community, > > I am backing up Fortigate devices with the new Debian Rancid ver. 3.9.1, > however 1 FGT Device has no VDOMs and 2 more does not have VDOMs > > router.db one has to specify fortigate or fortigate-full depending on your > needs thus when configuring fortigate-full no VDOM config is pulled, > however when running show full-configuration is run on the affected units > running VDOMs one can see the VDOM config with IPSECs and all, > > help would be apprenticed greatly > > extract /etc/rancid/rancid.types.base > # Fortinet Fortigate firewall > # Normal or FULL configuration > fortigate;script;rancid -t fortigate > fortigate;login;fnlogin > fortigate;timeout;90 > fortigate;module;fortigate > fortigate;inloop;fortigate::inloop > fortigate;command;fortigate::GetSystem;get system status > fortigate;command;fortigate::GetConf;show > # > fortigate-full;script;rancid -t fortigate > fortigate-full;login;fnlogin > fortigate-full;timeout;90 > fortigate-full;module;fortigate > fortigate-full;inloop;fortigate::inloop > fortigate-full;command;fortigate::GetSystem;get system status > fortigate-full;command;fortigate::GetConf;show full-configuration > > Regards > > Juan > > > _______________________________________________ > Rancid-discuss mailing list > [email protected] > http://www.shrubbery.net/mailman/listinfo/rancid-discuss > _______________________________________________ Rancid-discuss mailing list [email protected] http://www.shrubbery.net/mailman/listinfo/rancid-discuss