We have just changed how we backup our firewall from telnet access to SSH access in Kiwi.
The resulting config is now showing passwords in clear text and a huge amount of asdm locations and groups have added to the config.
Connecting to the firewall via SSH still shows the password as "starred out".
Is this normal for Kiwi ?
Hi my friends,
I am running Cattools version 3.6.0, now I am trying to backup the running configuration a HP Procurve 2530 switch. I have tried to enter some combinations of values under the "Passwords" and "Prompts" tab, but always prompted error messages. Can someone show me what value should I set under "Passwords" and "Prompts" tabs? Below I will show you how I telnet to this switch via command prompt. Thanks in advance!
From command prompt, I key in telnet 10.x.x.x, then press enter, then I see below page
I key in manager, and press enter, then I am prompted to enter password.
I enter password, and then press enter, I successfully enter privilege mode
Dear Sir:
My customer has some issue about CatTools backup Cisco starting-configure issue.
1. Because security concern, the user has no enable password. But he can show start-up config at privilege mode. So you can telnet to all Cisco devices and show the start-up config to backup it
2.When I user CatTools and setup devices type "Cisco.Router.noenable" to backup configure. It will not work. And show me some error , just like below
show config
^
% Invalid Input detected at '^" marker.
So I think the srcipt type wrong command to cisco , Right ? Or Can you provide me other recommendation ?
Hello all,
I am in the process of migrating my CatTools instance from one server to another. Following the advice in a separate thread, I had Kiwi support re-issue a license key so I could do a full install of version 3.4.0 ( I know, old). The install and device migration went well. However, when attempting to backup configs I get an error that states my device limit has been exceed "20". I called phone support, who were supposed to generate a like for like license, but it seems this was done incorrectly, and I now have 1 half-working version of CatTools. Does anyone have experience with this error? What's the best process for resolving it?
To disable paging, you can use Variations, and the following command:
Terminal pager 0
This works on an ASA 5520
I am backing the Dell 6248 switch up through the default telnet. I am continuously receiving the error "Did not receive Username entry prompt from device"
My settings:
Device Type: Dell.Switch.CLI
Model: PowerConnect 6248
Connect Via: Direct Connect
Method: Telnet
Passwords:
AAA Username: ******
AAA Password: ******
Any thoughts on what I'm missing?
I can't figure out why this isn't working:
Scenario:SSH is configured on switch and works via SecureCRT
In Kiwi, SSH username and password is filled in.
Intital login requires username/password is selected.
For the purposes of troubleshooting, I cleared all the Prompts. I had tried various permutations.
Here is the debug file. Please help me understand what I am doing wrong....
<NEWSESSION CatTools 3.10.0 12/17/2014 9:17:56 AM>
<PROTOCOL=SSH2>
<DEVICE TYPE=Brocade.Switch>
<ACTIVITY TYPE=Device.Backup.Running Config>
<ACTIVITY SCRIPT=C:\Program Files (x86)\CatTools3\Scripts\Client.Device.Backup.Running Config.txt>
<USERS NAME FOR DEVICE=03-NO-TECH-6430-24-03-10.11.100.3>
<C OK 9:18:00 AM>
<R-9:18:00 AM>SSH@NO-TECH-6430-24-03#
================================================================================
WFMDRetVal=1 Waiting for: ">"
WFMDRetVal=3 Waiting for: "login:"
WFMDRetVal=4 Waiting for: "Password:"
WFMDBuffer="ssh@no-tech-6430-24-03#"
================================================================================
Hi there,
I'm using a fresh install of the free verson of Kiwi CatTools 3.6.0 on a Windows 2008 R2 64bit server.
I'm backing up running configs from several Netgear GSM 7352s v2 Managed Switches.
However, the default device description for Netgear does not ignore changes in date stamps. I'm specifically getting differences reported in the "System Up Time" and "Current SNTP Synchronized Time" values.
No problem, I can factor those out with custom BACKUP_IGNORETEXT flags in a variations text file for the switches I'm pulling from.
However, it does not seem as though Variations are enabled for this switch. Looking at the release notes for 3.6.0. I see a slew of enable changes for Cisco, Juniper and NEC, but it stops short of saying they've been enabled for the Netgear.Switch.General device.
Could I ask when Variations will be enabled for this device?
Thank you.
Hi
I am trying to create a script in order to backup a F5 BigIP.
The scripts runs without issues on the device when i run it on the console(ssh) , but when i use Kiwi Cattools, the script fails.
The reason i''m using variables, is to be able to backup multiple F5 devices into one dir, retaining the ID of the device.
I must be doing something dumb, or i don't get it.
#!/bin/bash
terminal width 120
FTPHOST=[IP]
HOST=$HOSTNAME
USER=F5
PASS=XXXXX
UPATH1=Config'/'Current'/'
UPATH=`date +%Y'/'%m'/'%d`
FPATH="$UPATH1$UPATH"
cd /config
tmsh -c "save sys config base"
cp bigip_base.conf $HOST.conf
ftp -inv << EOF
open $FTPHOST
user $USER $PASS
bin
mkdir $FPATH
put /config/$HOST.conf /$FPATH/$HOST.txt
close
bye
EOF
KiwiCattools fails on reading the variables, i get "waiting for respons to command", waiting for an echo.
I am using Device.CLI.Send Commands.
Question ofcourse is... :how to fix it, how to set specifics for each device using variables ? Am i missing the point completly? Is it even possible what i''d like to achieve.
What am i doing wrong?
If anybody can point me to some docs on how to use bash within scripts for KiwiCatTools, that would be great too.
Thank you in advance.
With kind regards, Thijn
i've been looking all morning for a good way to backup my two WLCs using cat tools. I've never dug into how to use cattools more than just basic devcie config backups on my switches, routers, etc. on the Cisco WLC5508 i have found a few scripts but have no idea how to access them. The script i found looks like this,
<!-- edited with Notepad by Jake and Greg for SSH commands and TFTP transfer -->
<!--SolarWinds Network Management Tools-->
<!--Copyright 2005 SolarWinds.Net All rights reserved-->
<Configuration-Management Device="Cisco 5508 WLC" SystemOID=" 1.3.6.1.4.1.9.1.1069">
<Commands>
<Command Name="RESET" Value=""/>
<Command Name="PreCommand" Value=""/>
<Command Name="Version" Value="config${CRLF}paging disable${CRLF}exit${CRLF}show sysinfo${CRLF}"/>
<Command Name="DownloadConfig" Value="show run-config commands"/>
<Command Name="DownloadConfigIndirect" Value="config${CRLF}paging disable${CRLF}exit${CRLF}transfer upload mode ${TransferProtocol}${CRLF}transfer upload serverip ${StorageAddress}${CRLF}transfer upload path /${CRLF}transfer upload filename ${StorageFilename}${CRLF}transfer upload datatype config${CRLF}transfer upload start${CRLF}y"/>
</Commands>
</Configuration-Management>
i've walked through the script in the ssh cli and verified it'll work, but i'm confused about how to run this script via cattools. or if theres a better way. i tried the device.backup.tftp using cisco.wireless.lan and that fails.
Thanks in advance.
We need to add and edit devices, but the buttons are greyed out. Why?
Hi,
We have active license to use KIWI CATTOOLS but it is for Version 3.4,
Is it possible to update KIWICATTOL to its latest version by carrying the same License that we are using for version 3.4.
Please reply
HI guys,
I have been trying to backup up my OmniSwitches (6850 p48 variants) with CatTools.
The built in device is for omnistacks which doesn't work (Omniswitches don't have an enable mode) so I started to write my own template.
I can get CatTools to log in and dump the config, however only half the config is dumped.
Initially it appeared it was because CatTools was seeing the session prompt command in the config and flushed everything after it because of bCleanBuffer option in the SendCommandSingle() function.
I changed the GetConfig() function so that it when it calls the SendCommandSingle() function it is passing false to the bCleanBuffer to try and stop the above, however this only gave me a few extra lines of the config and it is still missing most of the config.
Now I am pretty much stuck!
Any pointers as to why this might be happening?
Edit: Ok, setting the bCleanBuffer helps (stops it clearing everything after the session prompt) but another part of the function s seeing it and then runs the exit command which is why I get a few more lines. Investigation
Dear Sir
I am new to KIWIcat tool, first time I have installed this tool to integarate with cisco asa for backup purpose. We manage around 100 cisco asa firewall and used to take manual backup. So we want to convert this process automatically with the help of kiwicat tool. However I am getting error message while take backup through tool which is listed below.
Reason (30012) Protocol version mismatch error.. Giving up after 3 connection attempts"
Could you please let me know if I have wrongly configured this or having this error due to any other reason.
Version of tool is 3.6.0 which I believe is latest one.
Please let me know if you require any other information to dig out the problem.
Thanks in advance
Hi all,
I'm implementing Cattools for a client to show the value in it (so they'll buy it).
I can't get it to log into their Nexus 5010 switches (2).
No matter what i do, the authentication ALWAYS fails, however i can log into the switches using putty with the same cred's.
Any ideas? Here are some debug's:
Hi
I have managed to get a full back of a Fortigate firewall working using TFTP and I thought I would share how I did it with the community.
We have a pair of Fortigates 3600C and we run multiple VDOMs on these, this meant the default script withing Cattools didn't work for us. We also require a keystroke before logging in as well. All this meant I had to use a combination of variations and also the TFTP backup method.
Variations configuration
DEVICE_USERNAMEPROMPT = "login as:"
DEVICE_PASSWORDPROMPT = "password:"
DEVICE_STANDARDPROMPT = "#"
DEVICE_PRIVILEGEDPROMPT = "#"
DEVICE_CONFIGPROMPT = "(global) #"
COMMAND_ENTERCONFIG = "configure global"
COMMAND_EXITCONFIG = "end"
PRE_LOGIN_MESSAGE = "(Press 'a' to accept):"
PRE_LOGIN_KEYSTROKE = "a"
TFTP activity configuration
%ctUM: Timeout 100
%ctUM: EchoOff
config global
%ctUM: EchoOff
execute backup config tftp %ctDeviceName-Running-Config <input your IP Address>
%ctUM: EchoOff
F:\CatTools2\Configs\%GroupName%\Config.Current.Running.%BaseFile%.txt
F:\CatTools2\Configs\Archives\%GroupName%\Config.Dated.Running.%BaseFile%.%DateISO%-%TimeHHMM%.txt
Now run the activity to check it all works. What you will find is there is about a 5 minute delay where it shows as a busy task. Be patient as it will finish. I would recommend running this task outside of any other backups as it does take a bit longer than others.
Hope this helps others getting this working.
EDIT
I have updated this to change from using the command "execute backup full-config" to use "execute backup config". This is because we had an issue recently where we were unable to restore the backup taking using the "execute backup full-config" command.
Fortinet recommend using the "execute backup config" command as this just restores the configuration that has been changed.
I have now tested this on our lab device and I was able to restore the configuration successfully.
Cheers
Jay
Message was edited by: Jaybed --
Hi All,
I see that CatTools can backup Fortigate OS devices. I have 10 or so Fortigate Firewalls which I'd like to backup. But before I set this up I was trying to find out what commands CatTools issues to get the configuration just to check I'm not going to do any damage to my devices as they are hunreds of miles away from me. I'm running ver 3.2.19. Anyone have any idea or can point me in the right dorection to find out.
Thanks
Jimbo
Has anyone been able to get Cat Tools to backup a Cisco SG500 switch?
Hi all and thanks in advanced for the responses....
I use CatTools to backup the network devices and was asked to see if I can automatically back up the NetApp device as well. I would like to use the NetApp template already built in (using 3.9.1) but I'm not sure what commands to use. I searched and searched but have hit a wall in trying to determine the commands to run on the netapp device. I can get the credentials to log in if need be.
Thanks,
Gonzalo
I have downloaded CatTool trial and want to connect to a HP2920 using SSH. After adding the device, i added a simple Report.Port info table Activity.
Now when i execute the Activity with capture mode enabled, i get an error "Did not receive command prompt after connecting via SSH".
If i connect to the Switch using putty, i get a "Press any Key to continue" after the log-in. So i assume that CatTool gets stuck there.
How can i either tell CatTool to send a key at that stage or disable that on the switch ?