Seeking method for NCM to import large numbers of addresses, FQDN's, or networks into ASA's.

rschroeder

I was given a spreadsheet with several thousand IP addresses (hosts), networks (/23, /24, /25, /26, /29, etc.), ranges (x.x.x.x - x.x.y.y) and FQDN's that need to be built as Network Objects in a Cisco ASA.

Ugh.

What method would you use to automate this process so NCM can be used to push it into the ASA?

• Don't automate, just start copying & pasting from the GUI
• Build one of each with the GUI and then see their syntax.  Then create the portions of the syntax in new columns before and after the actual spreadsheet's information, save the spreadsheet as text, and let NCM run it at the CLI
• Automate using this really cool scripting tool you discovered, that works well with ASA's and Excel
• Something else--please be as specific as you can

This is exactly the kind of job computers are built for, but for the life of me, I can't find a great way to do it.  I'm looking to Thwack for ideas.

jkrenzien

I would personally use your second method and let NCM do it after you have done the groundwork.

Now for my reasoning.

• Changes to this list in the future will likely be much easier once you have it setup the first time.
• It should allow you to ensure that this new section of config is always to standard and allow you to fix it easily if someone changes it when they shouldn't.

Now you may considering building it the first time with the really cool tool you found. that may speed up doing the ground work, but I still believe that having something like this as an NCM compliance policy would be helpful.