I am unable to log into mine via SSH2 (so far) and I have not seen any device command templates available for it.
No but I loaded IIS FTP on my NCM box. Cisco ACS 4.2 and later appliances can back up itself via FTP. ( this is not an option on the software based ACS installs).
Ahhh...FTP...good idea. ACS is a hardened version of Windows under the hood, so getting a usable backup via NCM is probably not a viable solution.
Are you able to import that into NCM?
Can you provide example as to how to make this work?
Thanks,
In ACS 5.1, you have to setup a software repository pointing to the FTP server and folder you want to use for your backups. You then schedule a backup to send to that repository.
You would find both of those under Sytems Administration/Operations.
I don't know about ACS 4.2.
I do not know of a way to bring them into NCM. Since they are not just text files, I am not sure there would be a benefit to doing so.
Which version of ACS are you using? I'm currently toiling with some ACS 5.1 appliances (CSACS-1121-K9) which are hardened Linux appliances running ADE-OS. I've had *some* success:
The devices support SNMP and SSH login and have a similar command-line to IOS. This means you can add it to NCM fairly trivially (it'll use the Cisco IOS device template if you don't have a better one: I've fudged the basic Cisco IOS device template a bit but the only meaningful difference was to remove the references to reload etc. Paranoid much?)
However, the ACS config is separate from the IOS-like configuration you can access via SSH. The only way I've found (as others have mentioned) to get the config off is to set up a 'repository' on the ACS appliance through the CLI (a configured FTP/SFTP etc. location that can be used to transfer patches, configs etc onto and off of the device) and then set up a scheduled job in NCM to execute a command-script which backs the config up to the NCM server. Given that the config is TAR'd and GPG'd (at least on ACS v5.1 it is...) there doesn't seem to be much point in trying to get NCM to track changes in it, best you can hope for is to have a copy of it somewhere other than the ACS appliance.
To configure a repository, as is required for upgrades/patches etc: https://supportforums.cisco.com/message/3039743
Command script text to upload the config: 'acs backup ACS repository <repository_name>'
I'm running 4.2 and mine is a hardened version of Windows. I gave up on using NCM to backup my config and settled on using the built-in FTP backup method.
It would actually be useful for NCM to back up ACS 5.2. There are a number of configurations that would be useful to grab. I tried connecting with NCM and I get connection refused even though I can interactively log in with PuTTY on the NCM machine. I don't quite get it. ACS 5.2 uses the same command set as IOS.
I found it best to use SFTP and use the SolarWinds SFTP/SCP service. Works perfectly!
