Arista and PaloAlto configuration backup in NCM

[Ramesh Gurumoorthy]

Hi,

I am looking for a solution to take daily configuration backup on Arista switches and Paloalto firewalls, I don't see any pre-defined scripts available in NCM can anyone did before?

------------------------------
Ramesh Gurumoorthy
------------------------------

[Catalin Farcasanu]

Get the existing ones as templates and modify them to suite your needs. It will be a matter of changing 2-3 commands in the scripts, depending on the CLI of your device. It trivial. You can try out the provided Perl scripts and then load them into the system.

[Robert Kettles]

For Palo Alto, we only needed to capture the running configuration so I've attached that.  One thing to note, on line 148 I have the device login user "dxtooladmin" included in the regex there.  At a minimum, you'll want to replace that with your device login user instead.  Ideally, the script probably could be modified to not have that hard coded in there.  I built it a while ago pretty quickly and I never got back to optimizing it.

Attachment(s)

PaloAltoCaptureRunningConfigScriptExport.pl.txt   4 KB 1 version

[Ramesh Gurumoorthy]

Hi Robert,

Thanks for your response.
I could see the script is for Cisco ASA are you sure this will work for Palo as well? 

# Cisco Firewall device through an SSH session and print it to STDOUT.

[Robert Kettles]

Yes.  I just started with the Cisco ASA firewall script and modified.  I should have changed the comment but neglected to.  Was too focused on just getting it to work in short order.

[Robert Kettles]

I forgot to add that for Arista devices, I just make use of the built in SSH capability so no Perl scripting.  After creating a device/script family, I put in the following for capturing running and start up configurations:

It seems to work reasonably well but probably could use some work: