How to back up an ASA without the VPN pre-shared keys obscured?

Question

Hello,

Is there any way to have an ASA back up without having the pre-shared keys obscured?

instead of:

pre-shared-key ubersecretkey

I'm getting:

pre-shared-key **********

Is there a way to not have it do that? I'd like to be able to feed the backed up config to a new device and have it work without having to enter these separately.

I do know that using:

more system:running-config

instead of:

show running-config

will do the trick, but I don't know how to change the command CatTools uses to grab the config.

Thanks in advance for any help you can provide with this.

James

Spartacus · Answer

You are welcome James.

Thanks for posting back with the clarification too.

Steve

jlinscheid · Answer

Steve,

That worked great. Thanks!

James

Spartacus · Answer

Hi James,

Do you have your ASA configured in CatTools to use the 'Telnet' method, or one of the SSH methods?

When the Device.Backup.Running Config activity is run using the Cisco.Firewall.ASA script, the backup will issue different commands to generate the config depending on which connection 'method' you have specified in the device set-up.

SSH:
If the connection method is SSH then this is deemed to be secure and so the 'more system:running-config' command will be issued which will generate the backup with pre-shared key information included.   However, if this command fails, CatTools will then revert to sending the 'show running-config' command instead.

Telnet:
If the connection method is telnet then this is deemed not to be secure and so the 'show running-config' command will be issued which will generate the backup without pre-shared key information included.

If you have set-up your device in CatTools to use an SSH method, then it may suggest that the 'more system:running-config'  command is failing to execute.

Hope this helps,

Steve