19
You have several options to get this type of functionality on a Cisco device. (Which one you use depends on your needs and sometimes on the device and IOS load. Some older devices/IOS loads will have different capabilities.)
EDIT: You are asking about doing this every one minute, which as you found out in our chat about this question, will bog down your ...
12
There is actually another way.
You can trigger a TFTP copy using SNMP. It's not terribly straight forward, but is incredibly useful.
Firstly, you'll need a TFTP server (unsurprisingly). You'll also need something that can send snmp requests. I've done it effectively with Linux's snmp tools.
You'll want to set up a new community for SNMP that has ...
4
This (autonegotiation) is explained in various sections of the IEEE 802.3 specifications.
Auto-MDIX is mostly a function of gigabit interfaces being able to TX and RX on all four pairs. I don't recall this being part of 802.3, but the logic for it (looking for carrier signal, and/or link pulses) is simple enough that anything capable of gig will support it.
4
Is there a universal solution for this or do i have to modify the
source code every time i integrate a new device? Basically what i am
trying to achieve is changing some basic device and switch interface
level configurations through use of a single format(template) for any
vendor.
No, there is no such thing. Network device management solutions, such as HPNA,...
3
Lineinfile is a weird choice here. It’s a module used to add lines to a configuration file (for example) and make sure a line is there, it’s not meant for things like logging, which you seem to be doing. Since there’s a large overlap in the IP address, fair chance it matches and the line is not added since the module assumes it’s already there. I’d look for ...
3
From ASA 8.x Dynamic Access Policies (DAP) Deployment Guide :
Note: The dap.xml file, which contains the DAP policies selection attributes, is stored in the ASA's flash. Although you can export the dap.xml file off-box, edit it (if you know about xml syntax), and re-import it back, be very careful, because you can cause ASDM to stop processing DAP records ...
3
I don't know if it's really what you're looking for, but for science you can export APIC configuration in JSON or XML format via REST.
First of all you need to obtain authentication token by running POST request to https://{{APIC}}/api/aaaLogin.json with JSON body:
{
"aaaUser" : {
"attributes" : {
"name" : "{{username}}",
...
3
Does anybody know if there is anyway to get a switch (cisco) to maybe
pull its config from a attached laptop(acting as a server) is there any
initial communication from the switch on boot ?
Use a DHCP server on your laptop and Cisco's Autoinstall feature or Smart install. Both methods use DHCP options to tell the switch where to tftp its config from ...
3
Not via ZTP, but I've just put together a couple of Ansible modules for you to handle both of these tasks here: https://github.com/dfex/dfex-ansible-modules
They're pretty self-explanatory - junos_save_rescue for saving the rescue configuration, and junos_op_cli for executing arbitrary Operational mode commands in Junos.
There is a junos-op-cli example ...
2
You could use RANCID to do this.
You get a few other nice things such as version control of the configs, email diffs and other nice things (by default it takes a hardware inventory so if the hardware changes you get an alert with that).
It works with every switch and router I have thrown at it so far (Cisco/Juniper/Dell) which is another plus.
2
You can use EEM
Example:
event manager applet dumpconfig
event timer {absolute time time-value | countdown time time-value | cron cron-entry cron-entry | watchdog time time-value} [name timer-name]
action 1.0 cli command "enable"
action 2.0 cli show running-config | redirect tftp://10.10.10.10/configs/testswitch.txt
action 998.0 cli command "end"
...
2
It depends on what layer you want to/can discover devices. At the link layer, LLDP comes to mind but it requires you to directly interface with the device and only gives just a few items.
In a layer 2 network, you can scan for MAC/IP addresses by ARP. The vendor specific part (OUI) of the MAC tells you the vendor. Reverse DNS possibly tells you the device ...
2
Welcome to SE!
As a network engineer I too have recently started programming in Python to better support my own internal automation efforts. In the interest of avoiding a lot of manual work handling the low-level ssh processing that comes with working with CLI, I have focused exclusively on the scripting interface that comes with the SecureCRT application. ...
2
I'm not sure what i can do. If there are any other ways i can run that script
and receive the I/O without manually typing in the command, with or without
using ssh or rsa key pairs, im all ears.
Do not attempt to drive interactive pty sessions with bash shell... it's like trying to turn a screw with the pointy-end of a hammer claw.... no worky. Use ...
2
Sonicwall export files are compiled , thus is not possible to edit them offline and reupload to a different appliace.
There is a way to fetch config files , I never tried, but on stackoverflow there was a discussion on it, with an example script.
https://stackoverflow.com/questions/14147473/shell-script-to-automate-sonicwall-firewall-ssh-session-not-...
2
If that's the case then since Ubiquiti has Unifi Controller is that
already a network automation?
Essentially, yes. You could also consider it a form of Software Defined Networking (SDN).
If yes then why do we have to know programming if we can just use a GUI?
For one product from a single manufacturer, you probably don't. But large networks can have ...
1
Network automation is word we are frequently hearing nowadays, and companies are even looking forward to automating their network infrastructure operation.
For example, big organizations like banks will have their own data centers and end to end infrastructure that is maintained by the bank only. Every day lots of changes will happen in they network ...
1
One way to find that (when you can't find documentation to point you in the right direction) is to add one via ASDM, and then go to the CLI so you can issue a show run to find where your changes show up. If they aren't visible in the output, it may be one of the few things you have to do via ASDM (unfortunately, there are a few of those) because there is no ...
1
Due to the current network layout and the state of the other communication partners, both systems must have the same IP address.
You cannot use the same IP address twice in a given network at the same time.
Would it be possible to configure a switch in such a way that it would divide packets to this automation-IP and send to both (legacy and new) but ...
1
Look at zero-touch provisioning on Cisco Catalyst 9300 running IOS-XE.
1
If you are unable to use NAT Gateway because it isn't supported by Cloud Formation yet, try a combination of custom Cloud Formation resource types and AWS lambda functions--which then use the JavaScript AWS API to create, read, update and delete NAT Gateway settings.
Create Custom Resource Types in your Cloud Formation templates
Your Custom Resource Types ...
1
Chapter: Using AutoInstall and Setup <-- click me
1
Catalyst SmartInstall for Zero Touch Switch Deployment
SmartInstall can enable plug-and-play configuration and image
management for zero-touch deployment on new and existing Cisco
Catalyst LAN switches and zero-touch replacement of existing switches
that need to be replaced in a return materials authorization (RMA)
scenario.
Nexus 5000 PowerOn ...
1
You have an ISR and a DHCP server, but you need a TFTP server, then you can just use SmartInstall for Zero Touch Switch Deployment:
Abstract
SmartInstall provides a suite of capabilities that help deploy new Cisco® Catalyst® switches and manage them effectively at
very low operating costs. SmartInstall has true zero-touch switch
installation to lower ...
1
As far a i know your not able to do that with ztp.
But why not let Ansible login and use raw commands ? or create a bash script with the expect command and let Ansible run that ?
i know both solutions are not ideal but they can get the job done.
Good luck! hope my 2 cents helps.
1
You can use a perl script, such as this one. Usage: perl cisco_backup.pl "my-enable-password"
Only top voted, non community-wiki answers of a minimum length are eligible