I have a Cirrus server in my network. I want cirrus to do a scheduled task, every night at 2am.
I want cirrus to log into a router, do a "show running", and then logout. The session should be written to a logfile, and this way i can do a simple backup of a device. This works without a problem. I can save the logfiles with timestamps and all.
Then i started thinking... If my cirrus server gets "hacked", then the "hacker" would have access to my attached devices enable password and so on.
To get around this problem, i created a user on my cisco device with an autocommand that does a "show running" as soon as the user logs in. And when the configuration has been shown, it logs the user out.
This way, a "hacker" would only be able to see a configuration on my attached devices, and not have enable access.
The problem is, when i try to add a task in cirrus, it just gives me a "bad password" when it tries to log onto the router.
I've tried multiple things in cirrus, but nothing seems to work.
Any ideas?
