Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Config Backup using "write net"?

Hi there,

We're using NCM mainly to perform daily config backups of about 50-60 Cisco PIX and ASA firewalls of our customers. I've seen that NCM creates a config backup using a form of the "show running" or "show config" commands, and not a form of "write net".

Problem with using "show run" or "show config", is that passwords, pre-shared keys etc. in the configuration file are mentioned as "*". When using "write net", the passwords are shown in clear text. If you really want to have a backup of the config file, with the passwords in readable form, I think the config backup should be done with "write net" instead of "show run" or "show config".

Anyone any ideas on this? Am I missing something here? Or is it possible to use "write net" for the config backup?

Regards,

Rene

Find more posts tagged with

write_net

show_running

show_config

Accepted answers

JesperVestergaard

Hi Rene

I had the same problem, and found that the passwords etc is shown if you enter the command "more system:running-config"

So, i chose to solve my problem by creating a new device template by copying the old, and adjusting the parameter for downloading config´s.

All comments

pserwe

You would have to craft a custom job that uses the run command feature of NCM.

While I'm not sure this is possible, I'm guessing that it is, and that you should be able to with Cisco devices, craft a run command that looks something like:

wr net tip.ad.dr.ess/$(NodeName).

Most tftp servers don't allow random write, so if it's a unix based tftp server, you're going to have to make sure the files all exist before the job starts, but that's pretty easy to shell script along with making them writable by the user that runs your tftp daemon.

Peter

ShamChauthani

NCM supports uploading/downloading configs using the TFTP. The wr command should work for the scenario you described above. To get more information about this look at the Admin guide in the Device Template section for IndirectDownload and IndirectUpload functionality.

JesperVestergaard

Hi Rene

I had the same problem, and found that the passwords etc is shown if you enter the command "more system:running-config"

So, i chose to solve my problem by creating a new device template by copying the old, and adjusting the parameter for downloading config´s.

rene.verhagen

Brilliant, Jesper! I'll try that one for sure!

Thnx, Rene