try: if not downloader.connect(): sys.exit(1) # Execute requested actions if args.backup_all: backup_dir = downloader.backup_asa(args.output) print(f"\n✓ Backup completed successfully!") print(f" Location: {backup_dir}") elif args.running_config: filepath = downloader.download_running_config(args.output) if filepath: print(f"✓ Running config downloaded: {filepath}") elif args.startup_config: filepath = downloader.download_startup_config(args.output) if filepath: print(f"✓ Startup config downloaded: {filepath}") elif args.list_flash: downloader.list_flash_files() elif args.download_asdm: success = downloader.download_asdm_image(args.output) if success: print("✓ ASDM image downloaded successfully") else: print("✗ Failed to download ASDM image") elif args.download_file: local_filename = os.path.basename(args.download_file) local_path = os.path.join(args.output, local_filename) success = downloader.download_file_via_scp(args.download_file, local_path) if success: print(f"✓ File downloaded: {local_path}") else: print("✗ File download failed") else: # Default: download running config if no action specified downloader.download_running_config(args.output)
This feature provides secure, automated backup capabilities for your Cisco ASA 5506-X with comprehensive logging and error handling.
def download_running_config(self, destination_path): """Download running configuration""" self.logger.info("Downloading running configuration...") config = self.execute_command("show running-config") if config: filename = os.path.join(destination_path, f"running_config_{self.hostname}.cfg") with open(filename, 'w') as f: f.write(config) self.logger.info(f"Running config saved to: {filename}") return filename return None cisco asa 5506-x download
def download_asdm_image(self, destination_path): """Download ASDM image from flash""" # First, find ASDM file in flash flash_contents = self.execute_command("show flash:") if flash_contents: # Parse for .bin files containing 'asdm' for line in flash_contents.split('\n'): if 'asdm' in line.lower() and '.bin' in line: filename = line.split()[-1] if line.split() else None if filename: remote_path = f"/{filename}" local_path = os.path.join(destination_path, filename) return self.download_file_via_scp(remote_path, local_path) self.logger.warning("ASDM image not found in flash") return False
def execute_command(self, command): """Execute command on ASA and return output""" try: stdin, stdout, stderr = self.ssh_client.exec_command(command) output = stdout.read().decode('utf-8') error = stderr.read().decode('utf-8') if error: self.logger.warning(f"Command error: {error}") return output except Exception as e: self.logger.error(f"Command execution failed: {str(e)}") return None try: if not downloader
def download_startup_config(self, destination_path): """Download startup configuration""" self.logger.info("Downloading startup configuration...") config = self.execute_command("show startup-config") if config: filename = os.path.join(destination_path, f"startup_config_{self.hostname}.cfg") with open(filename, 'w') as f: f.write(config) self.logger.info(f"Startup config saved to: {filename}") return filename return None
def backup_asa(self, destination_path): """Complete backup of ASA configuration and important files""" self.logger.info("Starting complete ASA backup...") # Create timestamped backup directory timestamp = datetime.now().strftime("%Y%m%d_%H%M%S") backup_dir = os.path.join(destination_path, f"asa_backup_{self.hostname}_{timestamp}") os.makedirs(backup_dir, exist_ok=True) backups = [] # Download configurations running_config = self.download_running_config(backup_dir) if running_config: backups.append(running_config) startup_config = self.download_startup_config(backup_dir) if startup_config: backups.append(startup_config) # Download crypto info crypto = self.download_crypto_keys(backup_dir) if crypto: backups.append(crypto) # List flash files for reference flash_list = self.list_flash_files() if flash_list: flash_file = os.path.join(backup_dir, "flash_listing.txt") with open(flash_file, 'w') as f: f.write(flash_list) backups.append(flash_file) # Create manifest file manifest = os.path.join(backup_dir, "BACKUP_MANIFEST.txt") with open(manifest, 'w') as f: f.write(f"ASA Backup created on: {datetime.now()}\n") f.write(f"Hostname: {self.hostname}\n") f.write(f"Backup files:\n") for file in backups: f.write(f" - {os.path.basename(file)}\n") self.logger.info(f"Complete backup saved to: {backup_dir}") return backup_dir f"running_config_{self.hostname}.cfg") with open(filename
def list_flash_files(self): """List files in flash memory""" self.logger.info("Listing flash files...") output = self.execute_command("show flash:") if output: print("\nFlash Files:") print("=" * 60) print(output) return output return None
finally: downloader.disconnect() if == " main ": main() Installation Requirements # Install required Python packages pip install paramiko scp Or create requirements.txt cat > requirements.txt << EOF paramiko>=2.8.0 scp>=0.13.3 EOF
class CiscoASADownloader: def (self, hostname, username, password, port=22): self.hostname = hostname self.username = username self.password = password self.port = port self.ssh_client = None self.setup_logging()
def connect(self): """Establish SSH connection to ASA""" try: self.ssh_client = paramiko.SSHClient() self.ssh_client.set_missing_host_key_policy(paramiko.AutoAddPolicy()) self.logger.info(f"Connecting to {self.hostname}...") self.ssh_client.connect( hostname=self.hostname, port=self.port, username=self.username, password=self.password, timeout=30, allow_agent=False, look_for_keys=False ) self.logger.info("SSH connection established") return True except Exception as e: self.logger.error(f"Connection failed: {str(e)}") return False