DX NetOps

 View Only
  • 1.  Arista and PaloAlto configuration backup in NCM

    Posted 25 days ago
    Hi,

    I am looking for a solution to take daily configuration backup on Arista switches and Paloalto firewalls, I don't see any pre-defined scripts available in NCM can anyone did before?

    ------------------------------
    Ramesh Gurumoorthy
    ------------------------------


  • 2.  RE: Arista and PaloAlto configuration backup in NCM

    Posted 24 days ago
    Get the existing ones as templates and modify them to suite your needs. It will be a matter of changing 2-3 commands in the scripts, depending on the CLI of your device. It trivial. You can try out the provided Perl scripts and then load them into the system.


  • 3.  RE: Arista and PaloAlto configuration backup in NCM

    Broadcom Employee
    Posted 19 days ago
      |   view attached
    For Palo Alto, we only needed to capture the running configuration so I've attached that.  One thing to note, on line 148 I have the device login user "dxtooladmin" included in the regex there.  At a minimum, you'll want to replace that with your device login user instead.  Ideally, the script probably could be modified to not have that hard coded in there.  I built it a while ago pretty quickly and I never got back to optimizing it.


  • 4.  RE: Arista and PaloAlto configuration backup in NCM

    Posted 18 days ago
    Hi Robert,

    Thanks for your response.
    I could see the script is for Cisco ASA are you sure this will work for Palo as well? 
    # Cisco Firewall device through an SSH session and print it to STDOUT.



  • 5.  RE: Arista and PaloAlto configuration backup in NCM

    Broadcom Employee
    Posted 18 days ago
    Yes.  I just started with the Cisco ASA firewall script and modified.  I should have changed the comment but neglected to.  Was too focused on just getting it to work in short order.


  • 6.  RE: Arista and PaloAlto configuration backup in NCM

    Broadcom Employee
    Posted 19 days ago

    I forgot to add that for Arista devices, I just make use of the built in SSH capability so no Perl scripting.  After creating a device/script family, I put in the following for capturing running and start up configurations:


    It seems to work reasonably well but probably could use some work: