ASA 5520 config backup

Hi!

We just deployed Solarwinds and added our ASA 5520 to it and it is reporting just fine. This device is managed by a third party company. I have been working with them to retrieve the running configuration from the device in order for us to keep a local backup but so far all the attempts have been unsuccessful. Any ideas?

Thanks, RG

Find more posts tagged with

network_configuration_monitor

ncm

Accepted answers

All comments

Goliath

RG,

It should just be a case of setting a valid username and password in the properties of the device in NCM (and choosing the relevant connection protocol, SSH in this case). One other thing to check is that the ASA is configured to allow your NCM server to SSH to it for configs (check for something like ssh A.B.C.D 255.255.255.255 inside where A.B.C.D is your server IP address) - by default they won't permit it.

Regards,

John

rgarcia1801

Goliath...Thanks for your reply.

I have all that in place and it doesn't work. As I mentioned before, I don't have full access to the device. In fact, my access is privilege mode 5 but I can retrieve the config just fine by using the log option. I wonder how Solarwinds does it. Does use copy and sent to TFTP or something? It probably needs to be allowed.

Thanks, RG

Goliath

RG -

How NCM gets the config depends on how the device is configured in NCM: there are a multitude of options:

ASA NCM Config.jpg

By default NCM will use whatever is configured as the $GlobalConfigRequestProtocol to get the configs, so if your ASA is using SSH (as it should be!!) and your global value is set to Telnet then it will fail etc. First off, I'd try to use a basic SSH client (Putty etc) from the NCM server to connect to the ASA and get the config manually, if that works then it points to the way NCM is configured for that device. If it doesn't then you've probably got a firewall rule in place that's blocking the communication.

Regards,

John