Is there any way to configure Cisco IOS devices to communicate by SSH / SCP in NCM?

[Carlos Andres Herrera]

Hi,

 

Network Configuration Manager (NCM) according to families brings certain methods of communication by default. All the devices that we need to do this monitoring come in the Cisco IOS family but it only allows two methods of communication as seen in the image. Our client only authorized the communication through SSH / SCP due to security issues and this means is not available in that family. How can I configure this family to allow the type of SSH / SCP communication? Other families like Cisco IOS SSH-Captable if allowed.

We have spectrum V 10.2.

 

 

 

#spectrumversion10.2 #ssh #scp #ncmsshscript #ncm

[Phani Devulapalli]

You can create a custom device family and use the configuration scripts to capture from these devices using SSH. You can add the devices which fall under the default family to a custom device family which uses SSH

 

Network Configuration Manager Extension Utility - CA Spectrum - 10.2 to 10.2.2 - CA Technologies Documentation 

[Carlos Andres Herrera]

Mmm ok, I understand, thanks for your response. And do you know if there would be any way to do it by modifying something on the devices?

[Phani Devulapalli]

Not sure it works that way , devices are automatically added to out of the box device families based on specific criteria. If you want to capture the configuration in a different way than the default out of the box configuration, you need to create a custom device family and add the devices to it 

 

The below article might give you some clarity

 

How Network Configuration Manager Determines Device Families 

 

Also refer to the  below for further details 

 

Devices Supported by Network Configuration Manager - CA Spectrum - 10.2 to 10.2.2 - CA Technologies Documentation 

[Carlos Andres Herrera]

I have tried to create a new family but this does not show me the type of communication.

I can not find a way to enable it in the guide text: Network Configuration Manager Extension Utility - CA Spectrum - 10.2 to 10.2.2 - CA Technologies Documentation 

 

 

 

 

Example:

 

[Phani Devulapalli]

In a custom device family, the config is captured using SSH based Perl Scripts, so the communication mode is defined in the script .

 

You should find the option to set the scripts below the Device Config Transfer Settings

 

 

For SSH you use one of the Perl Modules like " Net::SSH::Expect"

 

use strict;
use warnings;
use Net::SSH::Expect;
$ENV{'PATH'} = "/usr/bin:" . $ENV{'PATH'};

Take a look at the Perl Modules section in the below doc 

 

Network Configuration Manager Extension Utility - CA Spectrum - 10.2 to 10.2.2 - CA Technologies Documentation 

 

Below are some of the sample scripts which are already posted in communities, take a look at them and you will get some idea

 

Cisco IOS - SSH Capable Reload_Script (not Telnet!) 

 

hp_procurve_capture_config.txt 

 

Cisco WLC NCM Capture Script 

 

NCM perl ssh des script for get Cisco ASA configuration 

[Robert Kettles]

Do you have SSH enabled on your devices?  If not, you might want to look here:  Configuring Secure Shell on Routers and Switches Running Cisco IOS - Cisco 

[Carlos Andres Herrera]

Hi, yes, it is guaranteed that all devices have SSH communication enabled.