[smokeping-users] Securing telnetIOSPing

[Tony.Cetera at thomson.com]

Hopefully helpful to some...

I was having trouble with the reliability if the CiscoRTTMonEchoICMP so I switched all my probes to the telnetIOSPing probe.  However, it seems that IOS no longer supports extended pings in privilege level 5.  I had to configure a user with privilege level 15 to use telnetIOSPing.  In order to make this more secure I did the following:


access-list 2 permit x.x.x.x  <-- IP of smokeping host

line vty 5 15
access-class 2 in

username smokeping privilege 15 password somepassword
username smokeping autocommand ping

---------

To get telnetIOSPing to work with the "autocommand ping" option I needed to modify telnetIOSPing.pm with the following changes:

(diff script output below from: # diff -e telnetIOSPing.pm AutoTelnetIOSPing.pm)


238c
#     $telnet->print("quit");
.
234c
     $telnet->prompt('/Success/');
#     $telnet->prompt('/[\@\w\-\.]+[>#][ ]*$/');
.
202,205c
#     $telnet->waitfor('/[\@\w\-\.]+[>#][ ]*$/');
#     $telnet->print("terminal length 0");
#     $telnet->waitfor('/[\@\w\-\.]+[>#][ ]*$/');
#     $telnet->print("ping");
.
10c
 + AutoTelnetIOSPing
.
5c
probes::AutoTelnetIOSPing - Cisco IOS Probe for SmokePing
.
1c
package probes::AutoTelnetIOSPing;
.

--
Unsubscribe mailto:smokeping-users-request at list.ee.ethz.ch?subject=unsubscribe
Help        mailto:smokeping-users-request at list.ee.ethz.ch?subject=help
Archive     http://lists.ee.ethz.ch/smokeping-users
WebAdmin    http://lists.ee.ethz.ch/lsg2.cgi