Sam and netconf

[Paula J Frazer-Campbell]

Hi

I am looking at setting up restricted sam for my network guys to add routes -

Can it be done and will the netconf file get updated.

Paula

[Patrick Wallek]

OK, maybe I'm just being dense today, but I looked in SAM in the Networking and Communications area and I didn't anyplace that allowed you to do anything with routing.

Would sudo be an option for you? You could set up sudo so that they just have access to the route command. The only problem is that that wouldn't update your netconf file.

[Charles McCary]

Paula,

Hi - I've used restricted SAM some, and I believe that there would be no problems with what you want to do. I'd set up a test user and try it first though.

tx,
c

[Paula J Frazer-Campbell]

Hi
Patrick

I though I was going mad as I sure that SAM had the ability to add routes!!!!


Lots of searching in SAM but nothing - is it just me or does it not exist.


Paula

[Paula J Frazer-Campbell]

Charles

My problem is where is the option??


Paula

[Jeff Schussele]

Hi Paula/Patrick,

If it's there it's extremely buried - I've never found it.
I've always used the route command.

I think sudo is your best bet & you could sudo the vi /etc/rc.config.d/netconf command as well.

Rgds,
Jeff

[Charles McCary]

Paula,

Hmmm - ok see your point, what about adding a custom application under SAM that would in fact be a script that you create to take the information, check it, then run the commands neccessary to add the route?

tx,

c

[Helen French · Accepted solution]

Hi Paula:

Yes ! You can do it through SAM.

For 10.20: SAM-> Network and Communications->Select Internet Address ->Select Actions->Select Add ->Read the confirmation menu about adding address and static routes-> Add the address->Now you will see an option to add gateways and static routes.

For 11.0: SAM->Network and Communications->Hosts->Loacl hosts file->Actions-> Add ....etc

Check the SAM help anytime. It will add the route entries to netconf file too.

HTH,
Shiju

[Jeff Schussele]

Hi Paula,

In sudo you can specify a directory that contains the ONLY commands that a sudo user can run.
You could place scripts in there that will only call the route & vi /etc/rc.config.d/netconf
commands & of course these could be interactive, doing data validity checks & such to keep "garbage" out.

Rgds,
Jeff

[Sridhar Bhaskarla]

Paula,

I never got to use SAM to configure static routes and looks like it is missing in 11.0.
How about writing a small script that prompts
the user to input different parameters, try adding the route and upon success, add it to the netconf file. Failure to add route means either the entry is already present or it's a bad static route. I promise that you would have to do a lot of work if you intend to write a script. Ofcourse, you know that you can add it to SAM as a custom application once it is written.

Even with sudo, you will need to write this script and installing sudo is an additional step.

-Sri

[Paula J Frazer-Campbell]

Hi Guys

Shiju was right - that's where it is.

When you get there it looks like it is only dealing with the hosts file, but as you go into the add part it makes sense.

route add xxx.xxx.xxx.xxx is far easier and then vi the netconf and manually add it.

But I find network guys/gals and VI are an unsafe mix hence me looking for a safer option.

I already allow the use of restricted SAM so keeping it simple and using SAM for this was best option.

Thanks to all