password changes

[glen.grant]

We have a new version of ciscoworks . In this new version when trying to change passwords using the templates it will only let you change either the telnet or enable in a single job , not both . This was never an issue with our previous version as you could change both at the same time . I do not want to run separate jobs to change each password , that is ridiculous . Is there some setting that has to be changed with this new version ?

Also 2nd question , is there any set number of devices that you should use as a maximum for each job 20,50 etc... . Originally someone told me you shouldn't put more than 20 devices in each job , is this true ????

[Jason Davis]

Regarding your first question you could try this:

1) Add another template instance - first one changing telnet, second one changing enable

2) Run an adhoc job and put the relevant commands in one job...

Regarding your second issue - if you're talking LMS 2.5 and RME 4.0 (or the most updated LMS 2.5.1/RME 4.0.3) NetConfig does not have a pre-set limit. If you want to NetConfig all 5,000 devices in inventory - have at it.

As a High Availability Network specialist, I wouldn't recommend you change 15-20% of your network in one job, even if you've done lab testing. I'd rather see you do manageable chunks of the network to view the effect of the change before you impact the whole network.

Even in RME 3.5 (LMS 2.2) you could do a hundred devices easily in NetConfig. I believe 3.5 was tested to 1000 devices in a NetConfig job.

Before you start BIG jobs like this, I like to make sure I'm 100% OK on all the device credentials - run a device credential report or export the device list from the server and review. No use doing large changes just to find out you have incorrect SNMP strings or telnet/enable passwords. A little upfront prep work will save you possible frustration later.

[glen.grant]

I just find it weird that they restricted the catos boxes from changeing both passwords at once but not the IOS . I can change the ios all at once . You could probably setup a adhoc job but then that doesn't update the password database and that creates a lot of extra work also . Wish I knew why they changed it . Thanks for your input on the device limits , i may start running larger chunks , had been limiting then to 20-25 devices at a time .