Hi,
I would like to remove certificates on a couple of IOS routers and thought I can quicklie automate this using tcl.
The interactive sequence at the CLI would be
conf t
no crypto pki trustpoint TRUSTPOINTNAME
which leads to the message:
% Removing an enrolled trustpoint will destroy all certificates
received from the related Certificate Authority.
Are you sure you want to do this? [yes/no]:
... which needs to be "auto-answered" with "yes" inside the tcl script.
I tried to do it with "typeahead", but it seems to be not working for ios_config commands.
The tiny script looks like this:
tclsh
set rmcert {
typeahead "y\n"
ios_config " no crypto pki trustpoint TRUSTPOINTNAME"
}
eval $rmcert
and the outcome is:
router(tcl)#set rmcert {
+>typeahead "y\n"
+>ios_config " no crypto pki trustpoint TRUSTPOINTNAME"
+>}
typeahead "y\n"
ios_config " no crypto pki trustpoint TRUSTPOINTNAME"
router(tcl)#eval $anycon
Are you sure you want to do this? [yes/no]:
% Please answer 'yes' or 'no'.
Are you sure you want to do this? [yes/no]:
% Please answer 'yes' or 'no'.
Are you sure you want to do this? [yes/no]:
router(tcl)#y
invalid command name "y" ^
% Invalid input detected at '^' marker.
Does anyone know how to send answers to ios_config commands inside a tcl script?
Many thanks!
BR
