Netscreen Firewall Expect ile Config Yedekleme

ScreenOS çalışan bir Netscreen Güvenlik Duvarı(Firewall) backup’larını manuel almak yerine, aşağıdaki script’ti kullanarak yedek alma işlemini otomatize etmiş olursunuz.

Bu script ile güvenlik duvarı(Firewall) config’lerini belirtilen ftp sunucusuna yedekleniyor.

###########################
#   Copyright (c) 2014  omer oner
#   Firewall config backup script
###########################

# ./ceknsconfig.ex `date +%y%m%d-%N`
# Cront tab entry :
# 30 03 * * * root /data/scripts/fw.ex `date +\%y\%m\%d`

#########  FW  Backup ##########
# set Variables
set user "user"
set password "password"
set ipaddr "192.168.128.101"
set ftpip "212.156.51.102"
set ftpuser "ftpuser"
set ftppass "ftppass"
set hostname "fwhostname"

set time [lrange $argv 0 0]
set timeout -1
spawn ssh $user@$ipaddr
match_max 100000
expect "*?assword:*"
send -- "$password\r"
expect "mnofwb(M)->"
send -- "get config > tftp 192.168.132.132 $hostname.$time.txt\r"
send -- "exit\r"
expect eof

###########################

# Firewall config backup script

###########################

# ./ceknsconfig.ex `date +%y%m%d-%N`

# Cront tab entry :

# 30 03 * * * root /data/scripts/fw.ex `date +\%y\%m\%d`

######### FW Backup ##########

# set Variables

set user "user"

set password "password"

set ipaddr "192.168.128.101"

set ftpip "212.156.51.102"

set ftpuser "ftpuser"

set ftppass "ftppass"

set hostname "fwhostname"

set time [lrange $argv 0 0]

set timeout -1

spawn ssh $user@$ipaddr

match_max 100000

expect "*?assword:*"

send -- "$password\r"

expect "mnofwb(M)->"

send -- "get config > tftp 192.168.132.132 $hostname.$time.txt\r"

send -- "exit\r"

expect eof

Ömer Öner Hayata Karşı Serin Duruş...

Netscreen Firewall Expect ile Config Yedekleme

Bu script ile güvenlik duvarı(Firewall) config’lerini belirtilen ftp sunucusuna yedekleniyor.

So, what do you think ?