This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Cisco FTD - Simple script to download configuration

Just trying to write a simple automated script that will download the running-config from a Cisco FTD Firewall. 

The process is :

ssh to device

login with username/password

type command : system support diagnostic

type command : show run

Parents Reply Children
  • Of course, if I import that, and assign that template to our FTD and do a connection test it succeeds, however, downloading the configuration just spins on "downloading" in the transfer status.  We need FTD polling and NCM support ASAP!

    Anyone able to get Solarwinds to be able to download configuration and monitor interfaces?

  • I downloaded and imported the device template that you posted. I was successful in connecting for NCM management and was able to then download the FTD configuration without a problem. I am also able to monitor the interfaces too through SNMP.

  • that's good news --- i'm still unable to do either so I'm wondering what I'm doing wrong.

  • I have same issue and what I observed that this script is working for FTD version 6.2.3.X. This version I can backup with it. But for example version 6.4.X and 6.5.X its as you saying - stuck at Downloading and nothing happening.

    I confimed that I can login to SSH from NPM machine and even when I do test on FTD properties at NPM - its working. So there must be something that is preventing NCM to download running config.

  • Have updated the device template as suggested in the thread, experiencing the constant spinning wheel and "Downloading...".  FTD v 6.5.0

    Has anybody worked out a fix for this yet?

  • I worked with support and was able to resolve the issue.  The problem is in the device template script, for the "show" command show is spelled with a capital S.  FTD firewalls dont like capitalized letters in commands and it fails because of that.  As soon as we fixed the capital S, i was able to download the configs again. 

    <Configuration-Management Device="Cisco Firepower Threat Defense FTD" SystemOID="1.3.6.1.4.1.9.1.2320" AutoDetectType="BySystemOid" SystemDescriptionRegex="">
    <Commands>
    <Command Name="RESET" Value="" />
    <Command Name="Reboot" Value="reload noconfirm" />
    <Command Name="EnterConfigMode" Value="config terminal" />
    <Command Name="ExitConfigMode" Value="quit" />
    <Command Name="Startup" Value="startup-config" />
    <Command Name="Running" Value="running-config" />
    <Command Name="DownloadConfig" Value="Show ${ConfigType}" />
    <Command Name="UploadConfig" Value="${EnterConfigMode}${CRLF}${ConfigText}${CRLF}${ExitConfigMode}" />
    <Command Name="DownloadConfigIndirect" Value="write net ${StorageAddress}:/${StorageFilename}" />
    <Command Name="UploadConfigIndirect" Value="" />
    <Command Name="EraseConfig" Value="write erase${CRLF}Yes" />
    <Command Name="SaveConfig" Value="write memory" />
    <Command Name="Version" Value="show version" />
    <Command Name="Disconnect" Value="exit"/>
    </Commands>
    </Configuration-Management>