Hi all,

We just purchased new Kiwicat 3.10 and install on new server 2008 R2. Then imported devices/activities/db from old Kiwicat - from decommission server

When i run "Report.Version Table" or "Device.backup.Running config", it failed with infor log message below

1. Mail Error: I can get message from Kiwicat sends to my mailbox, but i would expect where correct 127.0.0.1 ? and what address should i enter ?

2. Something must be related to permission, i tried to adjust ACL  of "Cattool3" folder , full control for current users, trustedInstaller...but still get the same message .

any idea to fix it ?

Thanks very much

!Kiwicat BryanBeckertcount

Hi ,

I am new to Kiwi tools . I am not able to take  the backup of  my cisco router using Kiwi .  I am getting the error message like "enable mode failed" . I have tried to capture the error but when I checkd the Debug folder it was empty  .

I am using a TACACS Login .  and seprate password for enable prompt

Login look like as follows

Username: test.1985
Password:******

TEST-Cisco-7206>enable
Password:*******
TEST-Cisco-7206#

your help for solve this issue will be highly appreciate

Regards

Vineeth

Hi All,

Has anyone got KiwiCatTools backing up config's with the above switches that are running AW+ OS?

I've tried device of ATI.Router.general and get "Failed to receive '# SYSTEM configuration' line in device config file" and if I try Cisco.router.general (apparently the new AlliedWare + is Cisco like...) I get "Login failed"

Cheers

Steve

PS Can telnet to device using confgured username / password

Hi chaps,

I'm struggling a little to get the Generic.Device with Variations to work correctly when trying to back up my PFSense Firewall.

Here is the contents of my variations file:

DEVICE_PRIVILEGEDPROMPT = "):"

DEVICE_INVALIDCOMMAND = "% Command not found."

COMMAND_DISABLEPAGING = ""

COMMAND_ENABLEPAGING = ""

COMMAND_RUNNINGCONFIG = "cat /conf/config.xml"

COMMAND_STARTUPCONFIG = "cat /conf/config.xml"

COMMAND_DISCONNECT = "exit"

RESPONSE_STRIP_VT100ESC = "1"

RESPONSE_STRIP_ANSICHARS = "1"

RESPONSE_STRIP_NULLS = "1"

Sanitised Info Log:

2015-01-06 10:58:54    3-Info    0    CatTools Service    Performing activity - Run Now

2015-01-06 10:58:54    3-Info    0    CatTools Service    Loading activity: Device.Backup.Running Config - MT PFSense. Schd: 4

2015-01-06 10:58:54    4-Debug    0    CatTools Service    Marshaller - Running script. Device: Firewall

2015-01-06 10:58:54    3-Info    1    Firewall    Loading variations for  C:\Program Files (x86)\CatTools3\Variations\C4L_Management_FW.txt

2015-01-06 10:58:54    3-Info    1    Firewall    Variations function found

2015-01-06 10:58:54    4-Debug    1    Firewall    SSH Fingerprint: ################################

2015-01-06 10:58:55    4-Debug    1    Firewall    Connected to 192.168.1.254

2015-01-06 10:58:55    4-Debug    1    Firewall    Login Generic Device: Firewall

2015-01-06 10:58:55    4-Debug    1    Firewall    Waiting for command prompt

2015-01-06 10:58:55    4-Debug    1    Firewall    DeviceHostnameID: [2.1.5-RELEASE][cattools@firewall.local]/home/cattools(1

2015-01-06 10:58:55    4-Debug    1    Firewall    Login to Firewall was successful

2015-01-06 10:58:55    4-Debug    1    Firewall    Skipping enter enable mode as we are already in enable mode

2015-01-06 10:58:55    4-Debug    1    Firewall    Waiting for an echo of cat /conf/config.xml command

2015-01-06 10:59:25    1-Error    1    Firewall    Did not receive echo of cat /conf/config.xml command

2015-01-06 10:59:25    4-Debug    1    Firewall    Did not receive echo of cat /conf/config.xml

2015-01-06 10:59:25    3-Info    1    Firewall    Backup Running Config results: Failed

2015-01-06 11:00:26    4-Debug    1    Firewall    Disconnecting from Firewall

2015-01-06 11:00:26    4-Debug    1    Firewall    Disconnected from 192.168.1.254

2015-01-06 11:00:26    3-Info    0    CatTools Service    Stopping Activity.

2015-01-06 11:00:26    3-Info    0    CatTools Service    All threads have finished. Now processing results...

2015-01-06 11:00:26    3-Info    0    CatTools Service    Run Now activity has completed

Debug:

I've snipped the output of the config on line 21 to remove anything sensitive but you get the idea.

<NEWSESSION CatTools 3.10.0 06/01/2015 10:58:54>

<PROTOCOL=SSH2>

<DEVICE TYPE=Generic.Device>

<ACTIVITY TYPE=Device.Backup.Running Config>

<ACTIVITY SCRIPT=C:\Program Files (x86)\CatTools3\Scripts\Client.Device.Backup.Running Config.txt>

<USERS NAME FOR DEVICE=C4L Management FW>

<C OK 10:58:55>

<R-10:58:55>Last login: Tue Jan  6 10:51:12 2015 from 192.168.10.35[13][13][10]Copyright (c) 1980, 1983, 1986, 1988, 1990, 1991, 1993, 1994[13][10][09]The Regents of the University of California.  All rights reserved.[13][10][13][10][2.1.5-RELEASE][cattools@bgmcfw2.bchosting.co.uk]/home/cattools(1):

<W-10:58:55>[13]

<R-10:58:55>[13][13][10][2.1.5-RELEASE][cattools@firewall.local]/home/cattools(1):

<W-10:58:55>[13]

<R-10:58:55>[13][13][10][2.1.5-RELEASE][cattools@firewall.local]/home/cattools(1):

<W-10:58:55>cat /conf/config.xml

<R-10:58:55>cat /conf/co [08]nfig.xml

================================================================================

WFDRetVal=0. Waiting for: "cat /conf/config.xml"

WFDBuffer="cat /conf/co [08]nfig.xml"

================================================================================

<W-10:59:25>[13]

<R-10:59:25>[13][13][10]<?xml version="1.0"?>[13][10]<pfsense>[13][10][09]<version>10.1</version>[13][10][09]<lastchange/>[13][10][09]<theme>pfsense_ng</theme>[13][10][09]<sysctl>[13][10][09][09]<item>[13][10][09][09][09]<descr><![CDATA[Enable mounting the FS read only with more checks.]]></descr>[13][10][09][09][09]<tunable>vfs.forcesync</tunable>[13][10][09][09][09]<value>default</value>[13][10][09][09]</item>[13][10][09][09]<item>[13][10][09][09][09]<descr><![CDATA[Disable the pf ftp proxy handler.]]></descr>[13][10][09][09][09]<tunable>debug.pfftpproxy</tunable>[13][10][09][09][09]<value>default</value>[13][10][09][09]</item>[13][10][09][09]<item>[13][10][09][09][09]<descr><![CDATA[Increase UFS read-ahead speeds to match current state of hard drives and NCQ. More information here: http://ivoras.sharanet.org/blog/tree/2010-11-19.ufs-read-ahead.html]]></descr>[13][10][09][09][09]<tunable>vfs.read_max</tunable>[13][10][09][09][09]<value>default</value>[13][10][09][09]</item>[13][10][09][09]<item>[13][10][09][09][09]<descr><![CDATA[Set the ephemeral port range to be lower.]]></descr>[13][10][09][09][09]<tunable>net.inet.ip.portrange.first</tunable>[13][10][09][09][09]<value>default</value>[13][10][09][09]</item>[13][10][09][09]<item>[13][10][09][09][09]<descr><![CDATA[Drop packets to closed TCP ports without returning a RST]]></descr>[13][10][09][09][09]<tunable>net.inet.tcp.blackhole</tunable>[13][10][09][09][09]<value>default</value>[13][10][09][09]</item>[13][10][09][09]<item>[13][10][09][09][09]<descr><![CDATA[Do not send ICMP port unreachable messages for closed UDP ports]]></descr>[13][10][09][09][09]<tunable>net.inet.udp.blackhole</tunable>[13][10][09][09][09]<value>default</value>[13][10][09][09]</item>[13][10][09][09]<item>[13][10][09][09][09]<descr><![CDATA[Randomize the ID field in IP packets (default is 0: sequential IP IDs)]]></descr>[13][10][09][09][09]<tunable>net.inet.ip.random_id</tunable>[13][10][09][09][09]<value>default</value>[13][10][09][09]</item>[13][10][09][09]<item>[13][10][09][09][09]<descr><![CDATA[Drop SYN-FIN packets (breaks RFC1379, but nobody uses it anyway)]]></descr>[13][10][09][09][09]<tunable>net.inet.tcp.drop_synfin</tunable>[13][10][09][09][09]<value>default</value>[13][10][09][09]</item>[13][10][09][09]<item>[13][10][09][09][09]<descr><![CDATA[Enable sending IPv4 redirects]]></descr>[13][10][09][09][09]<tunable>net.inet.ip.redirect</tunable>[13][10][09][09][09]<value>default</value>[13][10][09][09]</item>[13][10][09][09]<item>[13][10][09][09][09]<descr><![CDATA[Enable sending IPv6 redirects]]></descr>[13][10][09][09][09]<tunable>net.inet6.ip6.redirect</tunable>[13][10][09][09][09]<value>default</value>[13][10][09][09]</item>[13][10][09][09]<item>[13][10][09][09][09]<descr><![CDATA[Enable privacy settings for IPv6 (RFC 4941)]]></descr>[13][10][09][09][09]

<snip>
</pfsense>[13][10][2.1.5-release][cattools@firewall.local]/home/cattools(2): "

================================================================================

WFMDRetVal=1 Waiting for: "[2.1.5-RELEASE][cattools@firewall.local]/home/cattools(1>"

WFMDRetVal=2 Waiting for: "[2.1.5-RELEASE][cattools@firewall.local]/home/cattools(1):"

WFMDRetVal=3 Waiting for: "[2.1.5-RELEASE][cattools@firewall.local]/home/cattools(1("

WFMDRetVal=4 Waiting for: "(config)"

WFMDBuffer="[13][13][10][2.1.5-release][cattools@firewall.local]/home/cattools(2): "

================================================================================

<W-11:00:26>exit[13]

<D 11:00:26>

<SCRIPT VALUES>

<HOSTNAME="[2.1.5-RELEASE][cattools@firewall.local]/home/cattools(1">

<PROMPT VTY="[2.1.5-RELEASE][cattools@firewall.local]/home/cattools(1>">

<PROMPT ENABLE="[2.1.5-RELEASE][cattools@firewall.local]/home/cattools(1):">

<PROMPT CONFIG="[2.1.5-RELEASE][cattools@firewall.local]/home/cattools(1(">

Any thoughts how I can clean up the output so the output/config is retrieved correctly?

Thanks,

Martyn

Try to backup an F5 using SSH cli.  The backups are failing with the error "Did not receive echo of modify modify cli preference page enabled display-threshold 0 command"

This is the variations file:

COMMAND_DISABLEPAGING = "modify cli preference pager disabled display-threshold 0"

COMMAND_RUNNINGCONFIG = "list"

I've tried disabling echo but get the same result.  The output of the config capture is below.  Almost like a carriage return is not being sent after the disable paging command.  Any help getting this working would be appreciated.

Syntax Error: invalid property value "display-threshold":"0list"

I have a question, I have 2 Cisco WiSM  (Cisco 6500 blade) that I am trying to use Cat tools to backup the config files on a regular schedule. I have run into the following error when trying to run the activity:  "Did not receive expected response to command: configshow" and then Cat tools disconnects from the switch. I used telnet to issue the show running-config command and what I noticed is right after the show running-config command is issued the switch prompts with: "Press Enter to continue or <CTRL-Z> to abort"  or "--More-- or (q)uit " and sits there until there is user intervension. How can I automate the CR to continue command so I can use Cattools to pull the configuration of these switches? Any help would be greatly appreciated.

Thanks

Hi!

Is there a chance that CatTools could retrieve the config.ini of a APC SmartUPS AP9617/AP9630 Network Management Card using FTP? It would be great if someone of the development team could have a look at it.

Here's a "capture" of a FTP session:

ftp> open 10.0.0.1
Connected to 10.0.0.1.
220 AP9617 Network Management Card AOS v3.7.3 FTP server ready.
User (10.0.0.1:(none)): admin
331 User name okay, need password.
Password:
230 User logged in, proceed.
ftp> bin
200 TYPE Command okay.
ftp> hash
Hash mark printing On  ftp: (2048 bytes/hash mark) .
ftp> get config.ini
200 PORT Command okay.
150 File status okay; about to open data connection.
#######################226 Closing data connection.
ftp: 47311 bytes received in 15,25Seconds 3,10Kbytes/sec.
ftp> close
221 Thank you for using APC products!
ftp> quit

Regards, Leonardo

Running daily backups with Kiwi Cattools and I have found that the program and timer do not automatically restart after a reboot having received windows updates.  Is there any way to ensure that the tool starts and starts the timer after a reboot?

Hi All

I'm trying to have CatTools to backup my HPE StoreFabric SN2010M storage switches.

These switches are rebranded Mellanox switches

So far my first issue was that the enable mode on the CLI was with a space after the "#" mark

I've managed to get this resolved using:

Private Const DEVICE_PRIVILEGEDPROMPT = "# "

in the created script for this device type.

I have successfully managed to have CatTools save a copy of the running config, BUT, and this is the tricky part for me:

After each 24 lines, the switch sends:

"lines 1-23"

which in my stored config file looks like:

" [7mlines 1-23  [m [K

[K   "

This reoccurs after each normal CLI screen throughout the entire config file.

I'm not at all a script guy - so can somebody give me a clue on how to ignore each 24th line or something similiar, so the running config is cleaned for these annoying lines?

Hi All,

I see that CatTools can backup Fortigate OS devices.  I have 10 or so Fortigate Firewalls which I'd like to backup.  But before I set this up I was trying to find out what commands CatTools issues to get the configuration just to check I'm not going to do any damage to my devices as they are hunreds of miles away from me.  I'm running ver 3.2.19.  Anyone have any idea or can point me in the right dorection to find out.

Thanks

Jimbo

Hi ,

I am new to Kiwi tools . I am not able to take  the backup of  my cisco router using Kiwi .  I am getting the error message like "enable mode failed" . I have tried to capture the error but when I checkd the Debug folder it was empty  .

I am using a TACACS Login .  and seprate password for enable prompt

Login look like as follows

Username: test.1985
Password:******

TEST-Cisco-7206>enable
Password:*******
TEST-Cisco-7206#

your help for solve this issue will be highly appreciate

Regards

Vineeth

The command to backup up these devices is pretty simple, system backup save

and then tftp server, filename, notes.

I've been trying to edit a custom device script, but it is a little tough to debug.

Is there a way to find out what Device.Backup.Running Config does step-by-step so I can fix the correct functions from the template?

Can CatTools be used to provide a daily email of multiple switches only if they either have ports without port-security or don't have the proper number of MAC's assigned?  For example, on a Cisco switch we use port security however some ports may have had it turned off for some reason.

Another possibility is a computer/user is moved from one office to another. If port security is on then the MAC will be recognized as being on another port so will err-disable the new location.  A tech either uses the third party switch management program or even logs into the switch and does a "no" on the line for the old port resulting in leaving that port open to a rouge device.

I have been asked by our examiner/audit to get a email report that we can use to correct this on a daily basis.  I have CatTools doing a backup of all configurations nightly so I do have text files however I can't find a program/script that can look and alert on lines that should be there but are not. 

Please feel free to ask questions if this isn't clear or more information is needed.

Thank you

I have been running CatTools 3.4 Free on an XP machine for some time and found it brilliant.

I've recently replaced this machine with a Win 7 x64 machine and installed CatTools 3.6 Free.  Everything is working correctly except for the compare running configs which tells me that there is no change even when there is.  This is occurring for several Cisco and Juniper models and they worked fine under 3.4 (which unfortunately I don't have anymore).

I dont' know if it's a cause or a result but the Dated Configs folder remains empty and does not have any history of the changed configs either.  The version of the running config in the Config directory is always correct (ie it updates correctly when the activity runs) it's just the comparison and Dated Config that fails (or never occurs).

Please help, this is exactly what I used CatTools for.  I've tried a fresh install and created new activities to no avail.

Thanks,
J

I have handful of SonicWALLs in field I need to do scheduled backup. However from what I can tell, the Cattools 3.11 still can not backup SonicWALL properly. Versions of the running SonicOS are 5.9 and newer.

Maybe it was my configuration issue...Here below are some screenshots.

Other tabs are defaults and I did not use Variants if that matters.

Thanks,

/S

Running ERS 4900 swtich stacks with CatTools. Everything was working great for awhile until we needed to upgrade one of our stacks from version 7.2.0.009 to 7.6.0.007 due to an unrelated issue. Now when the backup is being performed in CatTools I get this error: Failed to connect. Reason: (30044) No Available encryption algorithms match with the sever..

Here is the full error log:

<NEWSESSION CatTools 3.6.0 10/22/2018 12:35:51 PM>

<PROTOCOL=SSH2>

<DEVICE TYPE=Cisco.Router.General>

<ACTIVITY TYPE=Device.CLI.Send commands>

<ACTIVITY SCRIPT=C:\Program Files (x86)\CatTools3\Scripts\Client.Device.CLI.Send commands.txt>

<USERS NAME FOR DEVICE=m4900sc129>

<C Err=No available encryption algorithms match with the server. 12:35:51 PM><D 12:35:51 PM>

<SCRIPT VALUES>

<HOSTNAME="m4900dc2">

<PROMPT VTY="m4900dc2>">

<PROMPT ENABLE="m4900dc2#">

<PROMPT CONFIG="m4900dc2(">

The switch is definitely running SSH. I did notice that connecting directly with the 'Telnet/SSH' button from the devices menu did not work and had a similar error. To resolve this, I had to update PuTTY to the newest version. Now that PuTTY is updated, this option now works however, i am still getting the same error with CatTools.

Any help is appreciated! Thanks!

Running daily backups with Kiwi Cattools and I have found that the program and timer do not automatically restart after a reboot having received windows updates.  Is there any way to ensure that the tool starts and starts the timer after a reboot?

Hi all,

We have installed new Cisco 2960 switch in our building to replace the old faulty one.

When trying to backup the config using CatTools, I am getting the error "Connect failed:(30044) No available encryption algorithms match with the server."

The config is identical to the old switch. Is there something else that I need to configure on the switch for the CatTools to backup the config?

Any help would be greatly appreciated. Please let me know if you require more info.

Cheers,

Vig.

Hi All,

I see that CatTools can backup Fortigate OS devices.  I have 10 or so Fortigate Firewalls which I'd like to backup.  But before I set this up I was trying to find out what commands CatTools issues to get the configuration just to check I'm not going to do any damage to my devices as they are hunreds of miles away from me.  I'm running ver 3.2.19.  Anyone have any idea or can point me in the right dorection to find out.

Thanks

Jimbo

Hi

We would like to backup vyatta routers using cat tools. Looks like the same question was asked a few years ago, but there is no answer if it could be done?

Backup Device Config for Vyatta

Thanks