Hello,
I recently tried adding my Cisco IPS to NCM and found there wasnt any template for it. Iv been buiding my own and have sucessfully downloaded the config but there are some issues with it due to how the IPS displays the config. Also there might be some problems with NCM correctly detecting the terminal.
Here is the template I have been working on.
File:"Cisco Intrusion Prevention System Version 6-1.3.6.1.4.1.9.1.662.ConfigMgmt-Commands"
<!--SolarWinds Network Management Tools--><!--Copyright 2007 SolarWinds.Net All rights reserved--><Configuration-Management Device="Cisco Intrusion Prevention System, Version 6" SystemOID="1.3.6.1.4.1.9.1.662"> <Commands> <Command Name="RESET" Value="terminal length 0"/> <Command Name="Reboot" Value="reset"/> <Command Name="EnterConfigMode" Value="config terminal"/> <Command Name="ExitConfigMode" Value="end"/> <Command Name="Startup" Value="backup-config"/> <Command Name="Running" Value="current-config"/> <Command Name="DownloadConfig" Value="more ${ConfigType}"/> <Command Name="UploadConfig" Value="${EnterConfigMode}${CRLF}${ConfigText}${CRLF}${ExitConfigMode}"/> <Command Name="DownloadConfigIndirect" Value="copy ${ConfigType} ${TransferProtocol}://${StorageAddress}/${StorageFilename}${CRLF}${CRLF}${CRLF}"/> <Command Name="UploadConfigIndirect" Value="copy ${TransferProtocol}://${StorageAddress}/${StorageFilename} ${ConfigType}${CRLF}${CRLF}"/> <Command Name="DownloadConfigIndirectSCP" Value="copy ${ConfigType} ${TransferProtocol}://${SCPServerUserName}@${SCPStorageAddress}/${StorageFilename}${CRLF}${SCPServerPassword}${CRLF}"/> <Command Name="UploadConfigIndirectSCP" Value="copy ${TransferProtocol}://${SCPServerUserName}@${SCPStorageAddress}/${StorageFilename} ${ConfigType}${CRLF}${SCPServerPassword}${CRLF}"/> <Command Name="EraseConfig" Value="erase ${Startup}${CRLF}Yes"/> <Command Name="SaveConfig" Value="copy ${Running} ${Startup}"/> <Command Name="Version" Value="show version"/> </Commands></Configuration-Management>Downloading configurations via SSH work but not without issues.
The session collects a bunch of additional "junk" before the config is displayed:
Generating current config: |Generating current config: /Generating current config: -Generating current config: \Generating current config: |Generating current config: /Generating current config: -Generating current config: |Generating current config: /Generating current config: -Generating current config: \Generating current config: |Generating current config: /Generating current config: -Generating current config: |Generating current config: /Generating current config: -Generating current config: \Generating current config: |Generating current config: /Generating current config: -Generating current config: |Generating current config: /Generating current config: -Generating current config: \Generating current config: |Generating current config: /Generating current config: -Generating current config: |Generating current config: /Generating current config: -Generating current config: \Generating current config: |Generating current config: /Generating current config: -Generating current config: |Generating current config: /Generating current config: -Generating current config: \Generating current config: |Generating current config: /Generating current config: -Generating current config: |Generating current config: /Generating current config: -Generating current config: \Generating current config: |Generating current config: /Generating current config: -Generating current config: .|Generating current config: ./Generating current config: .-Generating current config: .\Generating current config: .|Generating current config: ./Generating current config: .-Generating current config: .|Generating current config: ./Generating current config: .-Generating current config: .\Generating current config: .|Generating current config: ./Generating current config: .-Generating current config: .| ! ------------------------------! Current configuration last modified Mon Jun 11 17:50:47 2012! ------------------------------! Version 6.2(3)
Now when I try to download the config via SCP it tries to upload the file multiple times and finally fails but does sucessfully create the backup file. So there must be something in the session that makes NCM "think" the backup failed. It would be great to get this working and be able to manage my IPS sensors via NCM in addition to my other Cisco equipment.
Thanks.
