Chinaunix首页 | 论坛 | 博客

watch_cu的ChinaUnix博客watch.blog.chinaunix.net

首页　| 　博文目录　| 　关于我

watch_cu

  • 博客访问： 43920
  • 博文数量： 9
  • 博客积分： 237
  • 博客等级： 二等列兵
  • 技术积分： 90
  • 用 户 组： 普通用户
  • 注册时间： 2010-03-07 17:49
文章分类

全部博文（9）

文章存档

2015年（1）

2014年（1）

2012年（2）

2011年（5）

我的朋友
最近访客
推荐博文
相关博文
rancid的h3c脚本

分类： 网络与安全

2015-01-08 16:32:54

rancid暂时用北电的刀片交换机用alteon的alogin脚本测试，登录不了。
h3c的脚本从google group上下载一份下来先。
出处:https://sites.google.com/site/jrbinks/code/rancid/h3c
h3crancid

点击(此处)折叠或打开

  1. #! /usr/bin/perl5
  2. ##
  3. ## $Id: $
  4. ##
  5. ## @PACKAGE@ @VERSION@
  6. ## Copyright (c) 1997-2009 by Terrapin Communications, Inc.
  7. ## All rights reserved.
  8. ##
  9. ## This code is derived from software contributed to and maintained by
  10. ## Terrapin Communications, Inc. by Henry Kilmer, John Heasley, Andrew Partan,
  11. ## Pete Whiting, Austin Schutz, and Andrew Fort.
  12. ##
  13. ## Redistribution and use in source and binary forms, with or without
  14. ## modification, are permitted provided that the following conditions
  15. ## are met:
  16. ## 1. Redistributions of source code must retain the above copyright
  17. ## notice, this list of conditions and the following disclaimer.
  18. ## 2. Redistributions in binary form must reproduce the above copyright
  19. ## notice, this list of conditions and the following disclaimer in the
  20. ## documentation and/or other materials provided with the distribution.
  21. ## 3. All advertising materials mentioning features or use of this software
  22. ## must display the following acknowledgement:
  23. ## This product includes software developed by Terrapin Communications,
  24. ## Inc. and its contributors for RANCID.
  25. ## 4. Neither the name of Terrapin Communications, Inc. nor the names of its
  26. ## contributors may be used to endorse or promote products derived from
  27. ## this software without specific prior written permission.
  28. ## 5. It is requested that non-binding fixes and modifications be contributed
  29. ## back to Terrapin Communications, Inc.
  30. ##
  31. ## THIS SOFTWARE IS PROVIDED BY Terrapin Communications, INC. AND CONTRIBUTORS
  32. ## ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
  33. ## TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  34. ## PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COMPANY OR CONTRIBUTORS
  35. ## BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  36. ## CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  37. ## SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
  38. ## INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
  39. ## CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  40. ## ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
  41. ## POSSIBILITY OF SUCH DAMAGE.
  42. #
  43. # RANCID - Really Awesome New Cisco confIg Differ
  44. #

  46. #
  47. # h3crancid
  48. #
  49. # h3clogin/h3crancid covers the following product ranges:
  50. #
  51. # * 3Com SuperStack 4 (post-joint venture with Huawei)
  52. # * H3C
  53. # * HP Networking ('A' & some 'E' portfolio, post 2010 3Com acquitision)
  54. #
  55. # They may also work with some Huawei equipment.
  56. #
  57. # https://sites.google.com/site/jrbinks/code/rancid/h3c
  58. #

  60. #
  61. # Usage: h3crancid [-dV] [-l] [-f filename | hostname]
  62. #

  64. # Notable changes from standard *rancid programs:
  65. #
  66. # * abstracted to path to the 'tail' utility
  67. # * altered "cisco_cmds" to be "device_cmds"
  68. # * define and use $logincmd
  69. #

  71. # TODO:
  72. #
  73. # It may be useful to pull common subroutines like the sorting ones into
  74. # a library for use by all the *rancid programs.
  75. #

  77. ############################################################################
  78. # END-USER TWEAKS

  80. # The login program to use. If no path is given, $PATH is searched:
  81. #my $logincmd = "h3clogin99";
  82. my $logincmd = "h3clogin";
  83. #my $logincmd = "/usr/local/libexec/h3clogin";
  84. #
  85. # Enable display of the FIB:
  86. my $display_fib = 1;
  87. #
  88. # Enable display of the routing table:
  89. # (no-op)
  90. #my $display_iproutes = 1;

  92. # END OF END-USER TWEAKS
  93. #############################################################################

  95. use Getopt::Std;
  96. getopts('dflV');
  97. if ($opt_V) {
  98.     print "@PACKAGE@ @VERSION@\n";
  99.     exit(0);
  100. }
  101. $log = $opt_l;
  102. $debug = $opt_d;
  103. $file = $opt_f;
  104. $host = $ARGV[0];
  105. $clean_run = 0;
  106. $found_end = 0;
  107. #$timeo = 90;            # login command timeout in seconds
  108. $timeo = 20;            # login command timeout in seconds

  110. my $TAIL = "/usr/bin/tail";

  112. my(@commandtable, %commands, @commands);# command lists
  113. my($aclsort) = ("ipsort");        # ACL sorting mode
  114. my($filter_commstr);            # SNMP community string filtering
  115. my($filter_pwds);            # password filtering mode

  117. # This routine is used to print out the router configuration
  118. sub ProcessHistory {
  119.     my($new_hist_tag,$new_command,$command_string,@string)=(@_);
  120.     if((($new_hist_tag ne $hist_tag) || ($new_command ne $command))
  121.        && defined %history) {
  122.     print eval "$command \%history";
  123.     undef %history;
  124.     }
  125.     if (($new_hist_tag) && ($new_command) && ($command_string)) {
  126.     if ($history{$command_string}) {
  127.         $history{$command_string} = "$history{$command_string}@string";
  128.     } else {
  129.         $history{$command_string} = "@string";
  130.     }
  131.     } elsif (($new_hist_tag) && ($new_command)) {
  132.     $history{++$#history} = "@string";
  133.     } else {
  134.     print "@string";
  135.     }
  136.     $hist_tag = $new_hist_tag;
  137.     $command = $new_command;
  138.     1;
  139. }

  141. sub numerically { $a <=> $b; }

  143. # This is a sort routine that will sort numerically on the
  144. # keys of a hash as if it were a normal array.
  145. sub keynsort {
  146.     local(%lines)=@_;
  147.     local($i) = 0;
  148.     local(@sorted_lines);
  149.     foreach $key (sort numerically keys(%lines)) {
  150.     $sorted_lines[$i] = $lines{$key};
  151.     $i++;
  152.     }
  153.     @sorted_lines;
  154. }

  156. # This is a sort routine that will sort on the
  157. # keys of a hash as if it were a normal array.
  158. sub keysort {
  159.     local(%lines)=@_;
  160.     local($i) = 0;
  161.     local(@sorted_lines);
  162.     foreach $key (sort keys(%lines)) {
  163.     $sorted_lines[$i] = $lines{$key};
  164.     $i++;
  165.     }
  166.     @sorted_lines;
  167. }

  169. # This is a sort routine that will sort on the
  170. # values of a hash as if it were a normal array.
  171. sub valsort{
  172.     local(%lines)=@_;
  173.     local($i) = 0;
  174.     local(@sorted_lines);
  175.     foreach $key (sort values %lines) {
  176.         $sorted_lines[$i] = $key;
  177.         $i++;
  178.     }
  179.     @sorted_lines;
  180. }

  182. # This is a numerical sort routine (ascending).
  183. sub numsort {
  184.     local(%lines)=@_;
  185.     local($i) = 0;
  186.     local(@sorted_lines);
  187.     foreach $num (sort {$a <=> $b} keys %lines) {
  188.     $sorted_lines[$i] = $lines{$num};
  189.     $i++;
  190.     }
  191.     @sorted_lines;
  192. }

  194. # This is a sort routine that will sort on the
  195. # ip address when the ip address is anywhere in
  196. # the strings.
  197. sub ipsort {
  198.     local(%lines)=@_;
  199.     local($i) = 0;
  200.     local(@sorted_lines);
  201.     foreach $addr (sort sortbyipaddr keys %lines) {
  202.     $sorted_lines[$i] = $lines{$addr};
  203.     $i++;
  204.     }
  205.     @sorted_lines;
  206. }

  208. # These two routines will sort based upon IP addresses
  209. sub ipaddrval {
  210.     my(@a) = ($_[0] =~ m#^(\d+)\.(\d+)\.(\d+)\.(\d+)$#);
  211.     $a[3]+256*($a[2]+256*($a[1]+256*$a[0]));
  212. }
  213. sub sortbyipaddr {
  214.     &ipaddrval($a) <=> &ipaddrval($b);
  215. }

  217. sub filter_lines {
  218.     my ($l) = (@_);
  219. # print STDERR " In filterlines: $l\n" if ($debug);

  221.     # Filter out some ANSI crud as a result of us not being able to turn
  222.     # off per-session terminal paging:
  223.     # h3c:
  224.     #s/^\033\[42D +\033\[42D(.+)$/$1/;
  225.     # hwlogin+mods:
  226.     #s/\033\133\064\062\104\s*\033\133\064\062\104//g;
  227.     $l =~ s/\033\133\064\062\104\s+\033\133\064\062\104//g;
  228.     $l =~ s/\033\133\061\066\104\s+\033\133\061\066\104//g;
  229.     $l =~ s/\033\133\064\062\104//g;
  230.     $l =~ s/\033\133\061\062\104//g;
  231.     # Probably not needed:
  232.     $l =~ s/\s*---- More ----\s*//;
  233. # print STDERR "out: $l\n" if ($debug);
  234.     return $l;
  235. }

  237. sub DisplayFib {
  238.     ## We should probably guarantee that the FIB is sorted properly
  239.     print STDERR " In DisplayFib: $_" if ($debug);

  241.     return(1) if $display_fib == 0;
  242.     chomp;

  244.     # Display the command we're processing in the output:
  245.     s/^[\[<].*?[\]>]\a?\s?(.*)/\'$1\':/g;
  246.     ProcessHistory("COMMENTS","keysort","A0","! $_\n!\n");

  248.     while () {
  249.         tr/\015//d;
  250.         last if(/^$prompt/);
  251.         chomp;
  252.         # skip blank lines
  253.         return(1) if /^\s+\^$/;
  254.         $_ = filter_lines($_);

  256.         # make this a subroutine:
  257.         return(1) if /% Too many parameters found at '\^' position/;
  258.         return(1) if /% Unrecognized command found at '\^' position/;
  259.         return(1) if /% Wrong parameter found at '\^' position/;
  260.         return(1) if /% Wrong device .+/;

  262.         # Chop out some detail that changes over time:
  263.         s/(\s+)TimeStamp\s+/$1/;
  264.         s/(\s+)t\[\d+\]\s+/$1/;

  266.         ProcessHistory("COMMENTS","ipsort","A0","! $_\n");
  267.         #ProcessHistory("COMMENTS","keysort","A0","! $_\n");
  268.     }
  269.     ProcessHistory("COMMENTS","keysort","A0","! \n");
  270.     return(0);
  271. }


  274. # This routine processes general output of "display" commands
  275. sub CommentOutput {
  276.     print STDERR " In CommentOutput: $_" if ($debug);

  278.     chomp;

  280.     # Display the command we're processing in the output:
  281.     s/^[\[<].*?[\]>]\a?\s?(.*)/\'$1\':/g;
  282.     ProcessHistory("","","","! $_\n!\n");

  284.     # eat the header line
  285. # $junk = ;
  286.     # now just copy it mostly verbatim to the history file
  287.     while () {
  288.         tr/\015//d;

  290.         # If we find the prompt, we're done
  291.         #last if(/^<.*>/);
  292.         last if(/^$prompt/);
  293.         chomp;

  295.         # skip blank lines
  296.         return(1) if /^\s+\^$/;

  298.         $_ = filter_lines($_);

  300.     # Filter out some ANSI crud as a result of us not being able to turn
  301.     # off per-session terminal paging:
  302.     # h3c:
  303.     #s/^\033\[42D +\033\[42D(.+)$/$1/;
  304.     # hwlogin+mods:
  305.         #s/\033\133\064\062\104\s*\033\133\064\062\104//g;
  306. # s/\033\133\064\062\104\s+\033\133\064\062\104//g;
  307. # s/\033\133\061\066\104\s+\033\133\061\066\104//g;
  308.     #s/\033\133\064\062\104//g;
  309.     # Probably not needed:
  310. # s/\s*---- More ----\s*//;

  312.         # make this a subroutine:
  313.         # Some commands are not supported on some models or versions
  314.         # of code. These lines simply remove the associated error
  315.         # messages:
  316.         return(1) if /% Too many parameters found at '\^' position/;
  317.         return(1) if /% Unrecognized command found at '\^' position/;
  318.         return(1) if /% Wrong parameter found at '\^' position/;
  319.         return(1) if /% Wrong device .+/;

  321.         # Parts of the output of some commands changes over time, but we don't
  322.         # want these changes to trigger a rancid notification, so we
  323.         # filter them out:

  325.         # This is part of one line, just cut it out:
  326.         s/\s+Current AccessNum:.+$//;

  328.         if (/^(PSE Total Power Consumption|PSE Available Power|PSE Peak Value|PSE Average Value).+$/) {
  329.             next;
  330.         }

  332.         s/(.*)uptime.*days*.*hours*.*minutes*(.*)/$1 $2/;

  334.         ProcessHistory("","","","! $_\n");
  335.     }

  337.     ProcessHistory("","","","! \n");
  338.     return(0);
  339. }

  341. ## This routine processes a "display current"
  342. sub DisplayCurrent {
  343.     print STDERR " In DisplayCurrent: $_" if ($debug);

  345.     while () {
  346.     tr/\015//d;
  347.     last if(/^$prompt/);

  349.         $_ = filter_lines($_);

  351.     # Filter out some ANSI crud as a result of us not being able to turn
  352.     # off per-session terminal paging:
  353.     # h3c:
  354.     #s/^\033\[42D +\033\[42D(.+)$/$1/;
  355.     # hwlogin+mods:
  356.     #s/\033\133\064\062\104\s*\033\133\064\062\104//g;
  357. # s/\033\133\064\062\104\s+\033\133\064\062\104//g;
  358. # s/\033\133\061\066\104\s+\033\133\061\066\104//g;
  359. # s/\033\133\064\062\104//g;
  360.     # Probably not needed:
  361. # s/\s*---- More ----\s*//;

  363.     # Filter out some sensitive data:
  364.     if (/^( ?snmp-agent community (read|write) )(\S+)/ &&
  365.         $filter_commstr == 0) {
  366.         ProcessHistory("","","","!$1$'");
  367.         next;
  368.     }

  370.     ProcessHistory("","","","$_");

  372.     # end of config
  373.     
  374.     if (/^return/) {
  375.         $found_end = 1;
  376.         return(0);
  377.     }
  378.     }
  379.     return(0);
  380. }

  382. # dummy function
  383. sub DoNothing {print STDOUT;}

  385. # Main
  386. ## Not all commands are supported on all models and code versions
  387. ## Not all of these should necessarily be included
  388. @commandtable = (
  389.     {'display version'            => 'CommentOutput'},
  390.     {'display boot-loader'        => 'CommentOutput'},
  391.     {'dir /all unit1>flash:/'        => 'CommentOutput'},
  392.     {'dir /all unit2>flash:/'        => 'CommentOutput'},
  393.     {'dir /all unit3>flash:/'        => 'CommentOutput'},
  394.     {'dir /all unit4>flash:/'        => 'CommentOutput'},
  395.     {'dir /all unit5>flash:/'        => 'CommentOutput'},
  396.     {'dir /all unit6>flash:/'        => 'CommentOutput'},
  397.     {'dir /all unit7>flash:/'        => 'CommentOutput'},
  398.     {'dir /all unit8>flash:/'        => 'CommentOutput'},
  399.     {'display device'            => 'CommentOutput'},
  400.     {'display device manuinfo'        => 'CommentOutput'},
  401.     {'display irf'            => 'CommentOutput'},
  402.     {'display xrn-fabric'        => 'CommentOutput'},
  403.     {'display ftm topology-database'    => 'CommentOutput'},
  404.     {'display fan'            => 'CommentOutput'},
  405.     {'display power'            => 'CommentOutput'},
  406.     {'display poe powersupply'        => 'CommentOutput'},
  407.     {'display poe temperature-protection'    => 'CommentOutput'},
  408.     {'display cluster'            => 'CommentOutput'},
  409.     {'display domain'            => 'CommentOutput'},
  410.     {'display local-user'        => 'CommentOutput'},
  411.     {'display password-control'        => 'CommentOutput'},
  412.     {'display password-control super'    => 'CommentOutput'},
  413.     {'display ssh server status'    => 'CommentOutput'},
  414.     {'display fib'            => 'DisplayFib'},
  415.     {'display vlan all'            => 'CommentOutput'},
  416.     {'display ip routing-table'        => 'CommentOutput'},
  417.     {'display lacp sys'            => 'CommentOutput'},
  418.     {'display link-aggregation summary'    => 'CommentOutput'},
  419.     {'display link-aggregation verbose'    => 'CommentOutput'},
  420.     {'display mirror all'        => 'CommentOutput'},
  421.     {'display current-configuration'    => 'DisplayCurrent'},
  422. );

  424. # Use an array to preserve the order of the commands and a hash for mapping
  425. # commands to the subroutine and track commands that have been completed.
  426. @commands = map(keys(%$_), @commandtable);
  427. %commands = map(%$_, @commandtable);

  429. $device_cmds=join(";",@commands);
  430. $cmds_regexp=join("|",@commands);

  432. if (length($host) == 0) {
  433.     if ($file) {
  434.         print(STDERR "Too few arguments: file name required\n");
  435.         exit(1);
  436.     } else {
  437.         print(STDERR "Too few arguments: host name required\n");
  438.         exit(1);
  439.     }
  440. }
  441. open(OUTPUT,">$host.new") || die "Can't open $host.new for writing: $!\n";
  442. select(OUTPUT);
  443. # make OUTPUT unbuffered if debugging
  444. if ($debug) { $| = 1; }

  446. if ($file) {
  447.     print STDERR "opening file $host\n" if ($debug);
  448.     print STDOUT "opening file $host\n" if ($log);
  449.     open(INPUT,"<$host") || die "open failed for $host: $!\n";
  450. } else {
  451.     print STDERR "executing $logincmd -t $timeo -c\"$device_cmds\" $host\n" if ($debug);
  452.     print STDOUT "executing $logincmd -t $timeo -c\"$device_cmds\" $host\n" if ($log);
  453.     if (defined($ENV{NOPIPE}) && $ENV{NOPIPE} =~ /^YES/i) {
  454. #    system "$logincmd -noenable -t $timeo -c \"$device_cmds\" $host $host.raw 2>&1" || die "$logincmd failed for $host: $!\n";
  455. # system "$logincmd -t $timeo -c \"$device_cmds\" $host $host.raw 2>&1" || die "$logincmd failed for $host: $!\n";
  456.     system "$logincmd -t $timeo -c \"$device_cmds\" $host $host.raw 2>&1" || die "$logincmd failed for $host: $!\n";
  457.     open(INPUT, "< $host.raw") || die "$logincmd failed for $host: $!\n";
  458.     } else {
  459. #    open(INPUT,"$logincmd -noenable -t $timeo -c \"$device_cmds\" $host
  460.     open(INPUT,"$logincmd -t $timeo -c \"$device_cmds\" $host
  461.     }
  462. }

  464. # determine ACL sorting mode
  465. if ($ENV{"ACLSORT"} =~ /no/i) {
  466.     $aclsort = "";
  467. }
  468. # determine community string filtering mode
  469. if (defined($ENV{"NOCOMMSTR"}) &&
  470.     ($ENV{"NOCOMMSTR"} =~ /yes/i || $ENV{"NOCOMMSTR"} =~ /^$/)) {
  471.     $filter_commstr = 1;
  472. } else {
  473.     $filter_commstr = 0;
  474. }
  475. # determine password filtering mode
  476. if ($ENV{"FILTER_PWDS"} =~ /no/i) {
  477.     $filter_pwds = 0;
  478. } elsif ($ENV{"FILTER_PWDS"} =~ /all/i) {
  479.     $filter_pwds = 2;
  480. } else {
  481.     $filter_pwds = 1;
  482. }

  484. ProcessHistory("","","","!RANCID-CONTENT-TYPE: h3c\n!\n");
  485. #ProcessHistory("COMMENTS","keysort","B0","!\n");
  486. #ProcessHistory("COMMENTS","keysort","D0","!\n");
  487. #ProcessHistory("COMMENTS","keysort","F0","!\n");
  488. #ProcessHistory("COMMENTS","keysort","G0","!\n");
  489. TOP: while() {
  490.     tr/\015//d;
  491. # h3c:
  492. # Look for the command at the end of the output
  493. # if (/\#exit$/) {
  494. # if (/\#quit$/) {
  495. # h3c:
  496.      if (/[\]>]\a?\s*quit/) {
  497. # if (/^[\[<].*[\]>]\a?\s?quit/) {
  498.       $clean_run=1;
  499.       last;
  500.     }
  501.     if (/^Error:/) {
  502.     print STDOUT ("$host $logincmd error: $_");
  503.     print STDERR ("$host $logincmd error: $_") if ($debug);
  504.     $clean_run=0;
  505.     last;
  506.     }
  507. # while (/#\s*($cmds_regexp)\s*$/) {
  508. # h3c:
  509.     while (/[\]>]\a?\s*($cmds_regexp)\s*$/) {
  510. # while (/^[\[<].*[\]>]\a?\s*($cmds_regexp)\s*$/) {
  511.     $cmd = $1;
  512.     if (!defined($prompt)) {
  513.     # h3c:
  514.     # Extract the prompt: look for something not [ or < at the start
  515.     # of the line, until either ] or > is reached:
  516.         #$prompt = ($_ =~ /^([^#]+#)/)[0];
  517.         #$prompt =~ s/([][}{)(\\])/\\$1/g;
  518.         #$prompt = ($_ =~ /^([^\]>]+[\]>]\007?)/)[0];
  519.         $prompt = ($_ =~ /^([^\]>]+[\]>]\a?)/)[0];
  520.         $prompt =~ s/([][}{)(\\])/\\$1/g;
  521.     print STDERR ("PROMPT MATCH: $prompt\n") if ($debug);
  522.     }
  523.     print STDERR ("HIT COMMAND:$_") if ($debug);
  524.     if (! defined($commands{$cmd})) {
  525.         print STDERR "$host: found unexpected command - \"$cmd\"\n";
  526.         $clean_run = 0;
  527.         last TOP;
  528.     }
  529.     $rval = &{$commands{$cmd}};
  530.     delete($commands{$cmd});
  531.     if ($rval == -1) {
  532.         $clean_run = 0;
  533.         last TOP;
  534.     }
  535.     }
  536. }
  537. print STDOUT "Done $logincmd: $_\n" if ($log);
  538. # Flush History
  539. ProcessHistory("","","","");
  540. # Cleanup
  541. close(INPUT);
  542. close(OUTPUT);

  544. if (defined($ENV{NOPIPE}) && $ENV{NOPIPE} =~ /^YES/i) {
  545.     unlink("$host.raw") if (! $debug);
  546. }

  548. printf(STDOUT "$host: clean_run=$clean_run found_end=$found_end\n") if ($debug);

  550. # check for completeness
  551. if (scalar(%commands) || !$clean_run || !$found_end) {
  552.     if (scalar(%commands)) {
  553.     printf(STDOUT "$host: missed cmd(s): %s\n", join(',', keys(%commands)));
  554.     printf(STDERR "$host: missed cmd(s): %s\n", join(',

h3clogin

点击(此处)折叠或打开

  1. #! /usr/local/bin/expect --
  2. ##
  3. ## $Id: $
  4. ##
  5. ## @PACKAGE@ @VERSION@
  6. ## Copyright (c) 1997-2009 by Terrapin Communications, Inc.
  7. ## All rights reserved.
  8. ##
  9. ## This code is derived from software contributed to and maintained by
  10. ## Terrapin Communications, Inc. by Henry Kilmer, John Heasley, Andrew Partan,
  11. ## Pete Whiting, Austin Schutz, and Andrew Fort.
  12. ##
  13. ## Redistribution and use in source and binary forms, with or without
  14. ## modification, are permitted provided that the following conditions
  15. ## are met:
  16. ## 1. Redistributions of source code must retain the above copyright
  17. ## notice, this list of conditions and the following disclaimer.
  18. ## 2. Redistributions in binary form must reproduce the above copyright
  19. ## notice, this list of conditions and the following disclaimer in the
  20. ## documentation and/or other materials provided with the distribution.
  21. ## 3. All advertising materials mentioning features or use of this software
  22. ## must display the following acknowledgement:
  23. ## This product includes software developed by Terrapin Communications,
  24. ## Inc. and its contributors for RANCID.
  25. ## 4. Neither the name of Terrapin Communications, Inc. nor the names of its
  26. ## contributors may be used to endorse or promote products derived from
  27. ## this software without specific prior written permission.
  28. ## 5. It is requested that non-binding fixes and modifications be contributed
  29. ## back to Terrapin Communications, Inc.
  30. ##
  31. ## THIS SOFTWARE IS PROVIDED BY Terrapin Communications, INC. AND CONTRIBUTORS
  32. ## ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
  33. ## TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  34. ## PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COMPANY OR CONTRIBUTORS
  35. ## BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  36. ## CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  37. ## SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
  38. ## INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
  39. ## CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  40. ## ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
  41. ## POSSIBILITY OF SUCH DAMAGE.
  42. #
  43. # The expect login scripts were based on Erik Sherk's gwtn, by permission.

  45. #
  46. # h3clogin - H3C login
  47. #
  48. # h3clogin covers the following product ranges:
  49. #
  50. # * 3Com SuperStack 4 (post-joint venture with Huawei)
  51. # * H3C
  52. # * HP Networking ('A' & some 'E' portfolio, post 2010 3Com acquitision)
  53. #
  54. # It may also work with some Huawei equipment.
  55. #

  57. # Set to 1 to enable some debugging, or pass "-d" on command line
  58. exp_internal 0

  60. # Usage line
  61. set usage "Usage: $argv0 \[-dSV\] \[-autoenable\] \[-noenable\] \[-c command\] \
  62. \[-Evar=x\] \[-e enable-password\] \[-f cloginrc-file\] \[-p user-password\] \
  63. \[-r passphrase\] \[-s script-file\] \[-t timeout\] \[-u username\] \
  64. \[-v vty-password\] \[-w enable-username\] \[-x command-file\] \
  65. \[-y ssh_cypher_type\] router \[router...\]\n"

  67. # env(CLOGIN) may contain:
  68. #    x == do not set xterm banner or name

  70. # Password file
  71. set password_file $env(HOME)/.cloginrc
  72. # Default is to login to the router
  73. set do_command 0
  74. set do_script 0
  75. # The default is to automatically enable
  76. set avenable 1
  77. # The default is that you login non-enabled (tacacs can have you login already
  78. # enabled)
  79. set avautoenable 0
  80. # The default is to look in the password file to find the passwords. This
  81. # tracks if we receive them on the command line.
  82. set do_passwd 1
  83. set do_enapasswd 1
  84. set do_saveconfig 0
  85. # Sometimes routers take awhile to answer (the default is 10 sec)
  86. set timeoutdflt 45
  87. #
  88. set send_human {.1 .3 .7 .05 2}

  90. # H3C: some models don't like "3des"; specify "aes128-cbc" in .cloginrc
  91. set default_cyphertype "3des"

  93. # H3C: command to elevate priviges (aka "enable") is different
  94. set enacmd "super"

  96. # H3C: command to exit from device
  97. set exitcmd "quit"

  99. # Find the user in the ENV, or use the unix userid.
  100. if {[ info exists env(CISCO_USER) ] } {
  101.     set default_user $env(CISCO_USER)
  102. } elseif {[ info exists env(USER) ]} {
  103.     set default_user $env(USER)
  104. } elseif {[ info exists env(LOGNAME) ]} {
  105.     set default_user $env(LOGNAME)
  106. } else {
  107.     # This uses "id" which I think is portable. At least it has existed
  108.     # (without options) on all machines/OSes I've been on recently -
  109.     # unlike whoami or id -nu.
  110.     if [ catch {exec id} reason ] {
  111.     send_error "\nError: could not exec id: $reason\n"
  112.     exit 1
  113.     }
  114.     regexp {\(([^)]*)} "$reason" junk default_user
  115. }

  117. # Process the command line
  118. for {set i 0} {$i < $argc} {incr i} {
  119.     set arg [lindex $argv $i]

  121.     switch -glob -- $arg {
  122.     # Expect debug mode
  123.     -d* {
  124.      exp_internal 1
  125.     # Username
  126.     } -u* {
  127.      if {! [ regexp .\[uU\](.+) $arg ignore user]} {
  128.         incr i
  129.         set username [ lindex $argv $i ]
  130.      }
  131.     # VTY Password
  132.     } -p* {
  133.      if {! [ regexp .\[pP\](.+) $arg ignore userpasswd]} {
  134.         incr i
  135.         set userpasswd [ lindex $argv $i ]
  136.      }
  137.      set do_passwd 0
  138.     # ssh passphrase
  139.     } -r* {
  140.      if {! [ regexp .\[rR\](.+) $arg ignore passphrase]} {
  141.      incr i
  142.      set vapassphrase [ lindex $argv $i ]
  143.      }
  144.     # VTY Password
  145.     } -v* {
  146.      if {! [ regexp .\[vV\](.+) $arg ignore passwd]} {
  147.         incr i
  148.         set passwd [ lindex $argv $i ]
  149.      }
  150.      set do_passwd 0
  151.     # Version string
  152.     } -V* {
  153.      send_user "@PACKAGE@ @VERSION@\n"
  154.      exit 0
  155.     # Enable Username
  156.     } -w* {
  157.      if {! [ regexp .\[wW\](.+) $arg ignore enauser]} {
  158.         incr i
  159.         set enausername [ lindex $argv $i ]
  160.      }
  161.     # Environment variable to pass to -s scripts
  162.     } -E* {
  163.      if {[ regexp .\[E\](.+)=(.+) $arg ignore varname varvalue]} {
  164.         set E$varname $varvalue
  165.      } else {
  166.         send_user "\nError: invalid format for -E in $arg\n"
  167.         exit 1
  168.      }
  169.     # Enable Password
  170.     } -e* {
  171.      if {! [ regexp .\[e\](.+) $arg ignore enapasswd]} {
  172.         incr i
  173.         set enapasswd [ lindex $argv $i ]
  174.      }
  175.      set do_enapasswd 0
  176.     # Command to run.
  177.     } -c* {
  178.      if {! [ regexp .\[cC\](.+) $arg ignore command]} {
  179.         incr i
  180.         set command [ lindex $argv $i ]
  181.      }
  182.      set do_command 1
  183.     # Expect script to run.
  184.     } -s* {
  185.      if {! [ regexp .\[sS\](.+) $arg ignore sfile]} {
  186.         incr i
  187.         set sfile [ lindex $argv $i ]
  188.      }
  189.      if { ! [ file readable $sfile ] } {
  190.         send_user "\nError: Can't read $sfile\n"
  191.         exit 1
  192.      }
  193.      set do_script 1
  194.     # save config on exit
  195.     } -S* {
  196.      set do_saveconfig 1
  197.     # 'ssh -c' cypher type
  198.     } -y* {
  199.      if {! [ regexp .\[eE\](.+) $arg ignore cypher]} {
  200.         incr i
  201.         set cypher [ lindex $argv $i ]
  202.      }
  203.     # alternate cloginrc file
  204.     } -f* {
  205.      if {! [ regexp .\[fF\](.+) $arg ignore password_file]} {
  206.         incr i
  207.         set password_file [ lindex $argv $i ]
  208.      }
  209.     # Timeout
  210.     } -t* {
  211.      if {! [ regexp .\[tT\](.+) $arg ignore timeout]} {
  212.         incr i
  213.      set timeoutdflt [ lindex $argv $i ]
  214.      }
  215.     # Command file
  216.     } -x* {
  217.      if {! [ regexp .\[xX\](.+) $arg ignore cmd_file]} {
  218.         incr i
  219.         set cmd_file [ lindex $argv $i ]
  220.      }
  221.      if [ catch {set cmd_fd [open $cmd_file r]} reason ] {
  222.         send_user "\nError: $reason\n"
  223.         exit 1
  224.      }
  225.      set cmd_text [read $cmd_fd]
  226.      close $cmd_fd
  227.      set command [join [split $cmd_text \n] \;]
  228.      set do_command 1
  229.     # Do we enable?
  230.     } -noenable {
  231.      set avenable 0
  232.     # Does tacacs automatically enable us?
  233.     } -autoenable {
  234.      set avautoenable 1
  235.      set avenable 0
  236.     } -* {
  237.      send_user "\nError: Unknown $arg\n"
  238.      send_user $usage
  239.      exit 1
  240.     } default {
  241.      break
  242.     }
  243.     }
  244. }
  245. # Process routers...no routers listed is an error.
  246. if { $i == $argc } {
  247.     send_user "\nError: $usage"
  248. }

  250. # Only be quiet if we are running a script (it can log its output
  251. # on its own)
  252. if { $do_script } {
  253.     log_user 0
  254. } else {
  255.     log_user 1
  256. }

  258. #
  259. # Done configuration/variable setting. Now run with it...
  260. #

  262. # Sets Xterm title if interactive...if its an xterm and the user cares
  263. proc label { host } {
  264.     global env
  265.     # if CLOGIN has an 'x' in it, don't set the xterm name/banner
  266.     if [info exists env(CLOGIN)] {
  267.     if {[string first "x" $env(CLOGIN)] != -1} { return }
  268.     }
  269.     # take host from ENV(TERM)
  270.     if [info exists env(TERM)] {
  271.     if [regexp \^(xterm|vs) $env(TERM) ignore ] {
  272.      send_user "\033]1;[lindex [split $host "."] 0]\a"
  273.      send_user "\033]2;$host\a"
  274.     }
  275.     }
  276. }

  278. # This is a helper function to make the password file easier to
  279. # maintain. Using this the password file has the form:
  280. # add password sl*    pete cow
  281. # add password at*    steve
  282. # add password *    hanky-pie
  283. proc add {var args} { global int_$var ; lappend int_$var $args}
  284. proc include {args} {
  285.     global env
  286.     regsub -all "(^{|}$)" $args {} args
  287.     if { [ regexp "^/" $args ignore ] == 0 } {
  288.     set args $env(HOME)/$args
  289.     }
  290.     source_password_file $args
  291. }

  293. proc find {var router} {
  294.     upvar int_$var list
  295.     if { [info exists list] } {
  296.     foreach line $list {
  297.      if { [string match [lindex $line 0] $router ] } {
  298.         return [lrange $line 1 end]
  299.      }
  300.     }
  301.     }
  302.     return {}
  303. }

  305. # Loads the password file. Note that as this file is tcl, and that
  306. # it is sourced, the user better know what to put in there, as it
  307. # could install more than just password info... I will assume however,
  308. # that a "bad guy" could just as easy put such code in the clogin
  309. # script, so I will leave .cloginrc as just an extention of that script
  310. proc source_password_file { password_file } {
  311.     global env
  312.     if { ! [file exists $password_file] } {
  313.     send_user "\nError: password file ($password_file) does not exist\n"
  314.     exit 1
  315.     }
  316.     file stat $password_file fileinfo
  317.     if { [expr ($fileinfo(mode) & 007)] != 0000 } {
  318.     send_user "\nError: $password_file must not be world readable/writable\n"
  319.     exit 1
  320.     }
  321.     if [ catch {source $password_file} reason ] {
  322.     send_user "\nError: $reason\n"
  323.     exit 1
  324.     }
  325. }

  327. # Log into the router.
  328. # returns: 0 on success, 1 on failure, -1 if rsh was used successfully
  329. proc login { router user userpswd passwd enapasswd cmethod cyphertype identfile } {
  330.     global spawn_id in_proc do_command do_script platform passphrase
  331.     global prompt prompt_match u_prompt p_prompt e_prompt sshcmd
  332.     set in_proc 1
  333.     set uprompt_seen 0

  335.     # try each of the connection methods in $cmethod until one is successful
  336.     set progs [llength $cmethod]
  337.     foreach prog [lrange $cmethod 0 end] {
  338.     incr progs -1
  339.     if [string match "telnet*" $prog] {
  340.      regexp {telnet(:([^[:space:]]+))*} $prog command suffix port
  341.      if {"$port" == ""} {
  342.         set retval [ catch {spawn telnet $router} reason ]
  343.      } else {
  344.         set retval [ catch {spawn telnet $router $port} reason ]
  345.      }
  346.      if { $retval } {
  347.         send_user "\nError: telnet failed: $reason\n"
  348.         return 1
  349.      }
  350.     } elseif [string match "ssh*" $prog] {
  351.      # ssh to the router & try to login with or without an identfile.
  352.      regexp {ssh(:([^[:space:]]+))*} $prog command suffix port
  353.      set cmd [join [lindex $sshcmd 0] " "]
  354.      if {"$port" != ""} {
  355.         set cmd "$cmd -p $port"
  356.      }
  357.      if {"$identfile" != ""} {
  358.         set cmd "$cmd -i $identfile"
  359.      }
  360.      set retval [ catch {eval spawn [split "$cmd -c $cyphertype -x -l $user $router" { }]} reason ]
  361.      if { $retval } {
  362.         send_user "\nError: $sshcmd failed: $reason\n"
  363.         return 1
  364.      }
  365.     } elseif ![string compare $prog "rsh"] {
  366.      if { ! $do_command } {
  367.         if { [llength $cmethod] == 1 } {
  368.          send_user "\nError: rsh is an invalid method for -x and "
  369.          send_user "interactive logins\n"
  370.         }
  371.         if { $progs == 0 } {
  372.          return 1
  373.         }
  374.         continue;
  375.      }

  377.      set commands [split $command \;]
  378.      set num_commands [llength $commands]
  379.      set rshfail 0
  380.      for {set i 0} {$i < $num_commands && !$rshfail} { incr i} {
  381.         log_user 0
  382.         set retval [ catch {spawn rsh $user@$router [lindex $commands $i] } reason ]
  383.         if { $retval } {
  384.          send_user "\nError: rsh failed: $reason\n"
  385.          log_user 1; return 1
  386.         }
  387.         send_user "$router# [lindex $commands $i]\n"

  389.         # rcmd does not get a pager and no prompts, so we just have to
  390.         # look for failures & lines.
  391.         expect {
  392.          "Connection refused" { catch {close}; catch {wait};
  393.                      send_user "\nError: Connection\
  394.                          Refused ($prog): $router\n"
  395.                      set rshfail 1
  396.                     }
  397.          -re "(Connection closed by|Connection to \[^\n\r]+ closed)" {
  398.                      catch {close}; catch {wait};
  399.                      send_user "\nError: Connection\
  400.                          closed ($prog): $router\n"
  401.                      set rshfail 1
  402.                     }
  403.          "Host is unreachable" { catch {close}; catch {wait};
  404.                      send_user "\nError: Host Unreachable:\
  405.                          $router\n"
  406.                      set rshfail 1
  407.                     }
  408.          "No address associated with" {
  409.                      catch {close}; catch {wait};
  410.                      send_user "\nError: Unknown host\
  411.                          $router\n"
  412.                      set rshfail 1
  413.                     }
  414.          -re "\b+"     { exp_continue }
  415.          -re "\[\n\r]+"    { send_user -- "$expect_out(buffer)"
  416.                      exp_continue
  417.                     }
  418.          timeout     { catch {close}; catch {wait};
  419.                      send_user "\nError: TIMEOUT reached\n"
  420.                      set rshfail 1
  421.                     }
  422.          eof         { catch {close}; catch {wait}; }
  423.         }
  424.         log_user 1
  425.      }
  426.      if { $rshfail } {
  427.         if { !$progs } {
  428.          return 1
  429.         } else {
  430.          continue
  431.         }
  432.      }
  433.      # fake the end of the session for rancid.
  434.      send_user "$router# exit\n"
  435.      # return rsh "success"
  436.      return -1
  437.     } else {
  438.      puts "\nError: unknown connection method: $prog"
  439.      return 1
  440.     }
  441.     sleep 0.3

  443.     # This helps cleanup each expect clause.
  444.     expect_after {
  445.      timeout {
  446.         send_user "\nError: TIMEOUT reached\n"
  447.         catch {close}; catch {wait};
  448.         if { $in_proc} {
  449.          return 1
  450.         } else {
  451.          continue
  452.         }
  453.      } eof {
  454.         send_user "\nError: EOF received\n"
  455.         catch {close}; catch {wait};
  456.         if { $in_proc} {
  457.          return 1
  458.         } else {
  459.          continue
  460.         }
  461.      }
  462.     }

  464.     # Here we get a little tricky. There are several possibilities:
  465.     # the router can ask for a username and passwd and then
  466.     # talk to the TACACS server to authenticate you, or if the
  467.     # TACACS server is not working, then it will use the enable
  468.     # passwd. Or, the router might not have TACACS turned on,
  469.     # then it will just send the passwd.
  470.     # if telnet fails with connection refused, try ssh
  471.     expect {
  472.     -re "(Connection refused|Secure connection \[^\n\r]+ refused)" {
  473.      catch {close}; catch {wait};
  474.      if !$progs {
  475.         send_user "\nError: Connection Refused ($prog): $router\n"
  476.         return 1
  477.      }
  478.     }
  479.     -re "(Connection closed by|Connection to \[^\n\r]+ closed)" {
  480.      catch {close}; catch {wait};
  481.      if !$progs {
  482.         send_user "\nError: Connection closed ($prog): $router\n"
  483.         return 1
  484.      }
  485.     }
  486.     eof { send_user "\nError: Couldn't login: $router\n"; wait; return 1 }
  487.     -nocase "unknown host\r" {
  488.      send_user "\nError: Unknown host $router\n"; wait; return 1
  489.      catch {close}; catch {wait};
  490.      return 1
  491.     }
  492.     "Host is unreachable" {
  493.      send_user "\nError: Host Unreachable: $router\n";
  494.      catch {close}; catch {wait};
  495.      return 1
  496.     }
  497.     "No address associated with name" {
  498.      send_user "\nError: Unknown host $router\n";
  499.      catch {close}; catch {wait};
  500.      return 1
  501.     }
  502.     -re "(Host key not found |The authenticity of host .* be established).*\(yes\/no\)\?" {
  503.      send "yes\r"
  504.      send_user "\nHost $router added to the list of known hosts.\n"
  505.      exp_continue
  506.     }
  507.     -re "HOST IDENTIFICATION HAS CHANGED.* \(yes\/no\)\?" {
  508.      send "no\r"
  509.      send_user "\nError: The host key for $router has changed. Update the SSH known_hosts file accordingly.\n"
  510.      catch {close}; catch {wait};
  511.      return 1
  512.     }
  513.     -re "Offending key for .* \(yes\/no\)\?" {
  514.      send "no\r"
  515.      send_user "\nError: host key mismatch for $router. Update the SSH known_hosts file accordingly.\n"
  516.      catch {close}; catch {wait};
  517.      return 1
  518.     }
  519.     -re "(denied|Sorry)"    {
  520.                  send_user "\nError: Check your passwd for $router\n"
  521.                  catch {close}; catch {wait}; return 1
  522.                 }
  523.     "Login failed"        {
  524.                  send_user "\nError: Check your passwd for $router\n"
  525.                  catch {close}; catch {wait}; return 1
  526.                 }
  527.     -re "% (Bad passwords|Authentication failed)"    {
  528.                  send_user "\nError: Check your passwd for $router\n"
  529.                  catch {close}; catch {wait}; return 1
  530.                 }
  531.     "Press any key to continue." {
  532.                  # send_user "Pressing the ANY key\n"
  533.                  send "\r"
  534.                  exp_continue
  535.                 }
  536.     -re "Enter Selection: " {
  537.                  # Catalyst 1900s have some lame menu. Enter
  538.                  # K to reach a command-line.
  539.                  send "K\r"
  540.                  exp_continue;
  541.                 }
  542.     -re "Last login:"    {
  543.                  exp_continue;
  544.                 }
  545.     -re "@\[^\r\n]+ $p_prompt"    {
  546.                      # ssh pwd prompt
  547.                      sleep 1
  548.                      send "$userpswd\r"
  549.                      exp_continue
  550.                     }
  551.     -re "Enter passphrase.*: " {
  552.                  # sleep briefly to allow time for stty -echo
  553.                  sleep .3
  554.                  send -- "$passphrase\r"
  555.                  exp_continue
  556.                 }
  557.     -re "$u_prompt"        {
  558.                  send -- "$user\r"
  559.                  set uprompt_seen 1
  560.                  exp_continue
  561.                 }
  562.     -re "$p_prompt"        {
  563.                  sleep 1
  564.                  if {$uprompt_seen == 1} {
  565.                     send -- "$userpswd\r"
  566.                  } else {
  567.                     send -- "$passwd\r"
  568.                  }
  569.                  exp_continue
  570.                 }
  571.     -re "$prompt"        {
  572.                  set prompt_match $expect_out(0,string);
  573.                  break;
  574.                 }
  575.     "Login invalid"        {
  576.                  send_user "\nError: Invalid login: $router\n";
  577.                  catch {close}; catch {wait}; return 1
  578.                 }
  579.      }
  580.     }

  582.     set in_proc 0
  583.     return 0
  584. }

  586. # Enable
  587. proc do_enable { enauser enapasswd } {
  588.     global prompt in_proc
  589.     global prompt u_prompt e_prompt
  590.     global enacmd
  591.     set in_proc 1

  593.     send -h "$enacmd\r"
  594.     expect {
  595.     -re "$u_prompt"    { send -h -- "$enauser\r"; exp_continue}
  596.     -re "$e_prompt"    { send -h -- "$enapasswd\r"; exp_continue}
  597.     -re ">"        { set prompt ">" }
  598.     "% Password is not set." {
  599.              send_user "\nError: No 'super' password set for device\n"
  600.              return 1
  601.             }
  602.     "% Authenticate failed." {
  603.              send_user "\nError: Check your enable password for 'super'\n"
  604.              return 1
  605.             }
  606. #    "#"        { set prompt "#" }
  607. #    "(enable)"    { set prompt "> \\(enable\\) " }
  608.     #-re "(denied|Sorry|Incorrect)"    {
  609.     #         # % Access denied - from local auth and poss. others
  610.     #         send_user "\nError: Check your Enable passwd\n";
  611.     #         return 1
  612.     #        }
  613.     #"% Error in authentication" {
  614.     #         send_user "\nError: Check your Enable passwd\n"
  615.     #         return 1
  616.     #        }
  617.     #"% Bad passwords" {
  618.     #         send_user "\nError: Check your Enable passwd\n"
  619.     #         return 1
  620.     #        }
  621.     }
  622.     # We set the prompt variable (above) so script files don't need
  623.     # to know what it is.
  624.     set in_proc 0
  625.     return 0
  626. }

  628. # Run commands given on the command line.
  629. proc run_commands { prompt command } {
  630.     global do_saveconfig in_proc platform
  631.     global exitcmd
  632.     set in_proc 1

  634.     # clogin has this beast:
  635.     #regsub -all {^(.{1,11}).*([#>])$} $prompt {\1([^#>\r\n]+)?[#>](\\([^)\\r\\n]+\\))?} reprompt
  636.     # escape any parens in the prompt, such as "(enable)"
  637.     regsub -all {[][)(]} $prompt {\\&} reprompt

  639.     expect {
  640.      -re $reprompt    {}
  641.      -re "\[\n\r]+"    { exp_continue }
  642.     }

  644.     # this is the only way i see to get rid of more prompts in o/p..grrrrr
  645.     log_user 0

  647.     set commands [split $command \;]
  648.     set num_commands [llength $commands]
  649.     # The pager can not be turned off on some 3Com/H3C, so we have to look
  650.     # for the "More" prompt.
  651.     for {set i 0} {$i < $num_commands} { incr i} {
  652.     send -- "[subst -nocommands [lindex $commands $i]]\r"
  653.     expect {
  654.         -re "\b+"            { exp_continue }
  655.         -re "^\[^\n\r *]*$reprompt"    { send_user -- "$expect_out(buffer)"
  656.                         }
  657.         -re "^\[^\n\r]*$reprompt."    { send_user -- "$expect_out(buffer)"
  658.                          exp_continue }
  659.         -re "\[\n\r]+"            { send_user -- "$expect_out(buffer)"
  660.                          exp_continue }
  661.         -re "^ ---- More ----.*\[^\n\r]*"    {
  662.                          # H3C pager prompt
  663.                          sleep 0.1
  664.                          send " "
  665.                          exp_continue }
  666.      }

  668.     }

  670.     log_user 1

  672.     send -h "$exitcmd\r"

  674.     # H3C: the exit command leaves the switch completely; it does not
  675.     # prompt to save if the config has been modified
  676.     expect {
  677. #    -re "^\[^\n\r *]*$reprompt"        {
  678. #                         # H3C products
  679. #                         # return to non-enabled mode
  680. #                         # on exit in enabled mode.
  681. #                         send -h "$exitcmd\r"
  682. #                         exp_continue;
  683. #                        }
  684. # TODO: we will need to do this too:
  685. #    "Do you wish to save your configuration changes" {
  686. #                         send -h "n\r"
  687. #                         exp_continue
  688. #                        }
  689.     -re "\[\n\r]+"                { exp_continue }
  690. # hwlogin+mod:
  691.     -re "\[^\n\r *]Note:"            { return 0 }
  692.     timeout                    { catch {close}; catch {wait};
  693.                          return 0
  694.                         }
  695.     eof                    { return 0 }
  696.     }
  697.     set in_proc 0
  698. }

  700. #
  701. # For each router... (this is main loop)
  702. #
  703. source_password_file $password_file
  704. set in_proc 0
  705. set exitval 0
  706. set prompt_match ""
  707. set enable 0
  708. foreach router [lrange $argv $i end] {
  709.     set router [string tolower $router]
  710.     # attempt at platform switching.
  711.     set platform ""
  712.     send_user -- "$router\n"

  714.     # device timeout
  715.     set timeout [find timeout $router]
  716.     if { [llength $timeout] == 0 } {
  717.         set timeout $timeoutdflt
  718.     }

  720.     # Default prompt.
  721.     #set prompt "(>|#| \\(enable\\))"
  722.     set prompt ">\a?"

  724.     # look for noenable option in .cloginrc
  725.     if { [find noenable $router] == "1" } {
  726.     set enable 0
  727.     }

  729.     # Figure out passwords
  730.     if { $do_passwd || $do_enapasswd } {
  731.       set pswd [find password $router]
  732.       if { [llength $pswd] == 0 } {
  733.     send_user "\nError: no password for $router in $password_file.\n"
  734.     continue
  735.       }
  736.       if { $enable && $do_enapasswd && $autoenable == 0 && [llength $pswd] < 2 } {
  737.     send_user "\nError: no enable password for $router in $password_file.\n"
  738.     continue
  739.       }
  740.       set passwd [join [lindex $pswd 0] ""]
  741.       set enapasswd [join [lindex $pswd 1] ""]
  742.     } else {
  743.     set passwd $userpasswd
  744.     set enapasswd $enapasswd
  745.     }

  747.     # Figure out username
  748.     if {[info exists username]} {
  749.       # command line username
  750.       set ruser $username
  751.     } else {
  752.       set ruser [join [find user $router] ""]
  753.       if { "$ruser" == "" } { set ruser $default_user }
  754.     }

  756.     # Figure out username's password (if different from the vty password)
  757.     if {[info exists userpasswd]} {
  758.       # command line username
  759.       set userpswd $userpasswd
  760.     } else {
  761.       set userpswd [join [find userpassword $router] ""]
  762.       if { "$userpswd" == "" } { set userpswd $passwd }
  763.     }

  765.     # Figure out enable username
  766.     if {[info exists enausername]} {
  767.       # command line enausername
  768.       set enauser $enausername
  769.     } else {
  770.       set enauser [join [find enauser $router] ""]
  771.       if { "$enauser" == "" } { set enauser $ruser }
  772.     }

  774.     # Figure out prompts
  775.     set u_prompt [find userprompt $router]
  776.     if { "$u_prompt" == "" } {
  777.     set u_prompt "(Username|Login|login|user name|User):"
  778.     } else {
  779.     set u_prompt [join [lindex $u_prompt 0] ""]
  780.     }
  781.     set p_prompt [find passprompt $router]
  782.     if { "$p_prompt" == "" } {
  783.     set p_prompt "(\[Pp]assword|passwd|Enter password for \[^ :]+):"
  784.     } else {
  785.     set p_prompt [join [lindex $p_prompt 0] ""]
  786.     }
  787.     set e_prompt [find enableprompt $router]
  788.     if { "$e_prompt" == "" } {
  789.     set e_prompt "\[Pp]assword:"
  790.     } else {
  791.     set e_prompt [join [lindex $e_prompt 0] ""]
  792.     }

  794.     # Figure out identity file to use
  795.     set identfile [join [lindex [find identity $router] 0] ""]

  797.     # Figure out passphrase to use
  798.     if {[info exists avpassphrase]} {
  799.     set passphrase $avpassphrase
  800.     } else {
  801.     set passphrase [join [lindex [find passphrase $router] 0] ""]
  802.     }
  803.     if { ! [string length "$passphrase"]} {
  804.     set passphrase $passwd
  805.     }

  807.     # Figure out cypher type
  808.     if {[info exists cypher]} {
  809.     # command line cypher type
  810.     set cyphertype $cypher
  811.     } else {
  812.     set cyphertype [find cyphertype $router]
  813.     if { "$cyphertype" == "" } { set cyphertype "$default_cyphertype" }
  814.     }

  816.     # Figure out connection method
  817.     set cmethod [find method $router]
  818.     if { "$cmethod" == "" } { set cmethod {{telnet} {ssh}} }

  820.     # Figure out the SSH executable name
  821.     set sshcmd [find sshcmd $router]
  822.     if { "$sshcmd" == "" } { set sshcmd {ssh} }

  824.     # Login to the router
  825.     if {[login $router $ruser $userpswd $passwd $enapasswd $cmethod $cyphertype $identfile]} {
  826.     incr exitval
  827.     # if login failed or rsh was unsuccessful, move on to the next device
  828.     continue
  829.     }

  831.     # Figure out the prompt.

  833. # H3C: this is what we used to have, now should be obsolete:
  834. # # Since autoenable is off by default, if we have it defined, it
  835. # # was done on the command line. If it is not specifically set on the
  836. # # command line, check the password file.
  837. # if $avautoenable {
  838. #    set autoenable 1
  839. #    set enable 0
  840. ## hwlogin:
  841. #    #set prompt "(#| \\(enable\\))"
  842. #    set prompt ">\a?"
  843. # } else {
  844. #    set ae [find autoenable $router]
  845. #    if { "$ae" == "1" } {
  846. #     set autoenable 1
  847. #     set enable 0
  848. ## hwlogin:
  849. #     set prompt ">\a?"
  850. #    } else {
  851. #     set autoenable 0
  852. #     set enable $avenable
  853. #     set prompt ">\a?"
  854. #    }
  855. # }
  856. #
  857. # # look for noenable option in .cloginrc
  858. # if { [find noenable $router] == "1" } {
  859. #    set enable 0
  860. # }
  861. ## clogin has:
  862. ## # look for noenable option in .cloginrc
  863. ## if | [find noenable $router] != "" | {
  864. ##    set enable 0
  865. ## }

  867.     # !! H3C does not appear to have a different prompt between lower
  868.     # privilege and higher privilege users, so the following test is
  869.     # not applicable
  870. # if { [regexp -- "(#| \\(enable\\))" $prompt_match junk] == 1 } {
  871. #    set enable 0
  872. # } else {
  873.     if { $avenable == 0 } {
  874.      set enable 0
  875.     } else {
  876.      set ne [find noenable $router]
  877.      set ae [find autoenable $router]
  878.      if { "$ne" == "1" || "$ae" == "1" || $avautoenable } {
  879.         set enable 0
  880.      } else {
  881.         set enable 1
  882.      }
  883.     }
  884. # }
  885.     if { $enable } {
  886.     if {[do_enable $enauser $enapasswd]} {
  887.      if { $do_command || $do_script } {
  888.         incr exitval
  889.         catch {close}; catch {wait};
  890.         continue
  891.      }
  892.     }
  893.     }
  894.     # we are logged in, now figure out the full prompt
  895.     send "\r"
  896.     expect {
  897.     -re "\[\r\n]+"        { exp_continue; }
  898. #    -re "^(.+\[:.])1 ($prompt)" { # stoopid extreme cmd-line numbers and
  899. #                 # prompt based on state of config changes,
  900. #                 # which may have an * at the beginning.
  901. #                 set junk $expect_out(1,string)
  902. #                 regsub -all "^\\\* " $expect_out(1,string) {} junk
  903. #                 regsub -all "\[\]\[\(\)]" $junk {\\&} junk;
  904. #                 set prompt ".? ?$junk\[0-9]+ $expect_out(2,string)";
  905. #                 set platform "extreme"
  906. #                }
  907.     -re "^.+$prompt"    { set junk $expect_out(0,string);
  908.                  regsub -all "\[\]\[\(\)]" $junk {\\&} prompt;
  909.                 }
  910.     }

  912.     # H3C: Disable log junk being sent to terminal: must be done before
  913.     # $enacmd is run. It would be nice for this to be setable in .cloginrc
  914.     send -h "undo terminal monitor\r"
  915.     expect -re $prompt {}

  917.     # Turn session paging off
  918.     # Comware 5 only.
  919.     # Comware 3 models have a screen-length command that only works on
  920.     # a vty basis
  921.     # clogin does this only within the do_script clause below, but I can't
  922.     # see why you wouldn



阅读(4632) | 评论(0) | 转发(0) |
0

上一篇：windows 8.1 dism 启用netfx3.5功能

下一篇：没有了

给主人留下些什么吧！~~
关于我们 | 关于IT168 | 联系方式 | 广告合作 | 法律声明 | 免费注册

Copyright 2001-2010 ChinaUnix.net All Rights Reserved 北京皓辰网域网络信息技术有限公司. 版权所有

感谢所有关心和支持过ChinaUnix的朋友们

16024965号-6