2.3 Managing Devices

If the device type is expected to recognize a case sensitive username, the property must be set as true.

false

Telnet connections behave differently during the authentication process based on the device, such as only password or only username being asked for authentication. If only the password is required for authentication, set this parameter.

(?i).*password[:|>].*

Telnet connections behave differently during the authentication process based on the device, such as only password or only username being asked for authentication. If both the username and password are required for authentication, set this parameter.

(?i).*username.*password.*

Telnet connections behave differently during the authentication process based on the device, such as only the password or only the username being asked for authentication. If only the username is required for authentication, set this parameter.

(?i).*(username|user|login)[:|>].*

Command to get hostname during device discovery



Regex pattern to get hostname from output of the hostname command during device discovery



Command to get version during discovery



Match word or regex for output of version command during device discovery



This is for keeping the actual context in the device and the context in XML policies synchronized. ALCATEL and CISCO can locate deeper contexts when a user enters them sequentially in one command line whereas HUAWEI cannot. When a command does not exist in the current context, HUAWEI and ALCATEL looks for it in the root context whereas CISCO does not.

ALCATEL

This is for keeping actual context in the device and context in the XML policies synchronized. Devices have different behaviors when the user presses CTRL+C. DO_NOTHING: Does not change the context. ABORT: Ignores what the user wrote, does not change the context. ABORT_AND_GO_TO_ROOT: Changes the context as root. ABORT_AND_GO_TO_ROOT_WHEN_NO_COMMAND: Changes the context as root only when the user did not write anything.

ABORT

This is for keeping actual context in the device and context in the XML policies synchronized. Devices have different behaviors when the user press CTRL+Z. DO_NOTHING: Does not change the context. ABORT_AND_GO_TO_ROOT: Does not execute the command if the user wrote something, then changes the context as root. EXECUTE_AND_GO_TO_ROOT: Executes the command if the user wrote something, then changes the context as root.

ABORT_AND_GO_TO_ROOT

This property is used to understand whether the command has executed successfully or is not in the command log entries. The expected failure message returned by the command needs to be defined in this property.

(command not found)|(Error:)

Skips command detection, policy enforcement and command logging when the last line matches one of these patterns.

.*(?i)password[:|>].* ^\s*-+\s*(?i)more\s*-+.*

If the device type has no prompt like #,$, set the value as “false”.

true

When the user presses ENTER, the system tries to find this pattern in the last line. If found, the system considers rest of characters as a command.

.*?(>|#|\]|\$)

This is for the action for when the user presses ENTER but the command could not be detected because of no prompt being found in the last line. Sometimes while the user is typing a command, device may suddenly send some messages to user. In this case, characters of the command may be mixed with the characters of the message. So the actual command may not be detected when the user presses ENTER. DONT_TRY_AND_CLEAN_LINE: Sends specific byte series to the device in order to clean the line (guaranteed to cancel possible command). DONT_TRY_AND_SEND_ENTER: Sends ENTER to the device (may cause to execute a possible command without policy enforcement and logging). TRY_AND_CLEAN_LINE: Sends TAB to the device and waits for a short while. If still no prompt is found in the last line, sends specific byte series to the device in order to clean the line (guaranteed to cancel possible command). TRY_AND_SEND_ENTER: Sends TAB to the device and waits for a short while. If still no prompt is found in the last line, sends ENTER to the device (may cause to execute the possible command without policy enforcement and logging).

TRY_AND_CLEAN_LINE

For adjusting the delay time for the possibility of echo not coming from the device before the ENTER command.

100

Sometimes bulk commands which are copy/pasted aren't executed completely or some commands can be missed. The reason being that, some commands have a response time and the response time can be more than the expected time. Single Connect waits 500 milliseconds as default after each time the Enter command is echoed from the device. The value can change if it is not considered sufficient.

500

Some devices send ENTER bytes when the command being typed is longer than the window width. This causes problems with command detection. To avoid it, this property should be set as 0 (or -1, according to the device) in order to force the device to assume unlimited window width. Additionally, it can also be used for working with an always fixed window width like 80 columns, even if the user changes window width of the client application.

80

Forces the device to assume unlimited window height when this property is set as 0 (or -1, according to the device). Additionally, it can also be used for working with an always fixed height, like 24 lines, even if the user changes the window height of client application.

24

This parameter must be set as true if the device-side keys are not echoed.

false

When a performance raise is to be desired, the property value can be set as "with_queue"

WITHOUT_QUEUE

Some devices do not support up-to-date encryption techniques. For those devices, setting the value as "false" prevents performance loss.



When the defined values in this property are caught after entering username/password in Telnet connections, authentication is considered as unsuccessful.

(?i).*(error|username[:|>]|user[:|>]|login[:|>]|password[:|>]).*

In Telnet connections, some devices ask for the username and password at the same time when logging on. For devices with such behavior, this property must be defined.