topic Re: SSH queries during discovery (/other operations) in Controllers

SSH queries during discovery (/other operations)

ymeloch — Fri, 01 Mar 2019 12:40:01 GMT

Hi Experts,

I have two quick questions regarding APIC-EM discovery.

Do we have the list of SSH queries which are being polled during discovery or when running a Path Trace? I’m asking as I snooped the traffic during discovery (file attached) and did find the SNMP and SSH packets yet we cannot decrypt the SSH packets.
Is there a way to modify the SNMP/SSH queries? (E.g. based on customer request)

Thanks,

Yossi

Re: SSH queries during discovery (/other operations)

aradford — Wed, 02 Aug 2017 22:16:02 GMT

There is no way to modify the queries. Is there a reason you want to modify them?

If you want to find out the commands being executed, you could discover the device via telnet and snoop that. You need to specifically allow telnet discovery.

Adam

Re: SSH queries during discovery (/other operations)

ymeloch — Wed, 02 Aug 2017 23:14:16 GMT

Thanks for the prompt reply, Adam.

I'd like to first understand what apic samples and if there is any room for tweaking it in the case of a customer request (w/o impacting apic functionality).

Telnet modeling should like a good idea (i should have thought about it...)

Thanks much!

Re: SSH queries during discovery (/other operations)

ymeloch — Thu, 03 Aug 2017 20:56:05 GMT

Thanks to Adam's good advice, I've found the queries:

show interface

show cef interface brief

show ip route

show cdp neighbors detail

show lldp neighbors

show ip device tracking all

show arp

show mac address-tables

show interfaces switchport

show lldp neighbor detail

show cef state

show flow monitor

show standby

show vrf detail

show ip vrf brief

show running-config | sec bgp

show running-config

show ospf

show ospf interface

show isis

show parameter-map type subscriber attribute-to-service name BUILTIN_DEVICE_TO_TEMPLATE

show fex

From your experience -

• Are customers ok for running these queries (every 25 min – default configuration) on their production network? (e.g. “show ip route” on a largely populated device…)

• No one ever questions Cisco what queries apic is running? Or expressed any concern?

Re: SSH queries during discovery (/other operations)

aradford — Thu, 03 Aug 2017 21:07:03 GMT

you can change the timing of the polling if you like.

generally customers do not really care. They are interested in the outcome vs how it gets done.

They might be interested at the POC stage, out of curiosity.

Adam

Re: SSH queries during discovery (/other operations)

ymeloch — Fri, 04 Aug 2017 01:33:31 GMT

Thank you Adam.