Once you make the script exexcutable, you should see similar to the following. # $USERNAME assumes that you have preconfigured SSH key from this host to your ESA.įILENAME=`ssh "saveconfig yes" | grep xml | sed -e 's/\/Ĭonfiguration\///g' | sed 's/\.$//g' | tr -d "\""` # $HOSTNAME can be either FQDN or IP address.
# Simple script to save the ESA config, then copy locally via SCP. Saving the Configuration to a Specified Host Using saveconfig #! /bin/bash Note: Similar logic can be applied in any OS scripting language such as VB or batch scripts for Windows. Create script to login to the appliance, save the config, and copy it (or mail it).Generate an SSH keypair to use, and verify that you can access your appliance via SSH without having to manually enter a password.To quickly and automatically backup configuration files with passwords unmasked: Once this is accomplished, we can then repeat or schedule this task to occur on a regular basis. This method allows us to first access the appliance, issue a command to dynamically build the current configuration, and either save or mail a copy of this file somewhere remotely, without any user intervention. For this reason, we can not simply copy a flat "running configuration" file from the device. This allows the appliance to place a hashed form of the passwords for the local administrative accounts in the configuration file. To have an effective backup that is able to be loaded and applied to an ESA, it is best to "unmask" the passwords.
The configuration file is dynamically generated when using the saveconfig or mailconfig from the CLI, or the associated backup options through the GUI ( System Administration > Configuration File). How Can I Automate or Script Configuration File Backups?
While these steps have been successfully tested, this article is primarily for demonstration and illustration purposes. Note: This article is a proof-of-concept and provided as an example basis. “Shutdown” shuts down the interface, while “no shutdown” brings up the interface.This document describes basic concepts and understanding associated with creating scripts for an external host to perform and retreive updates against a Cisco Email Security Appliance (ESA). Sets a host name to the current Cisco network deviceĪn enable mode command that copies files from one file location to anotherĪn enable mode command that saves the active config, replacing the startup config when a Cisco network device initializesĪn enable mode command that merges the startup config with the currently active config in RAMĪn enable mode command that deletes the startup config Logs you into enable mode, which is also known as user exec mode or privileged modeĮnters interface configuration mode for the specified fast ethernet interfaceĪn exec mode command that reboots a Cisco switch or router Here is a Cisco commands cheat sheet that describes the basic commands for configuring, securing and troubleshooting Cisco network devices. The basic CLI commands for all of them are the same, which simplifies Cisco device management. Almost all Cisco devices use Cisco IOS to operate and Cisco CLI to be managed.
0 kommentar(er)
