# $USERNAME assumes that you have preconfigured SSH key from this host to your ESA.įILENAME=`ssh "saveconfig yes" | grep xml | sed -e 's/\/Ĭonfiguration\///g' | sed 's/\.$//g' | tr -d "\""` # $HOSTNAME can be either FQDN or IP address. # Simple script to save the ESA config, then copy locally via SCP. Saving the Configuration to a Specified Host Using saveconfig #! /bin/bash Note: Similar logic can be applied in any OS scripting language such as VB or batch scripts for Windows. Create script to login to the appliance, save the config, and copy it (or mail it).Generate an SSH keypair to use, and verify that you can access your appliance via SSH without having to manually enter a password.To quickly and automatically backup configuration files with passwords unmasked: Once this is accomplished, we can then repeat or schedule this task to occur on a regular basis. This method allows us to first access the appliance, issue a command to dynamically build the current configuration, and either save or mail a copy of this file somewhere remotely, without any user intervention. For this reason, we can not simply copy a flat "running configuration" file from the device.
This allows the appliance to place a hashed form of the passwords for the local administrative accounts in the configuration file. To have an effective backup that is able to be loaded and applied to an ESA, it is best to "unmask" the passwords. The configuration file is dynamically generated when using the saveconfig or mailconfig from the CLI, or the associated backup options through the GUI ( System Administration > Configuration File). How Can I Automate or Script Configuration File Backups? SSH keypair configuration and procedures.Cisco Technical Assistance will not write, update, or troubleshoot custom external scripts at any time.Ĭisco recommends that you have knowledge of these topics: Custom scripts are outside of the scope and supportability of Cisco. While these steps have been successfully tested, this article is primarily for demonstration and illustration purposes. Note: This article is a proof-of-concept and provided as an example basis. This document describes basic concepts and understanding associated with creating scripts for an external host to perform and retreive updates against a Cisco Email Security Appliance (ESA).
0 kommentar(er)
