OS and Software > No, I Will Not Fix Your #@$!! Computer > router & switch management

router & switch management

In our shop..

CiscoWorks does full config backups nightly. We have some home brewed scripts that do differential backups of those configs, and CiscoSecure ACS tracks individual changes.

reply to Modus
We are currently using CAT tools for router & switch backups: »www.kiwisyslog.com/products/kiwi···iew.aspx

I am pushing to have them use it for change management and config change alerting. We are primarily a Cisco shop.
--
"All that is necessary for the triumph of evil is that good men do nothing.” - Edmund Burke

i'm converting us over to hp procurve's that kiwi tools looks good but it doesnt look like it will support what i have
--
Think Ahead. Learn More. Solve Now!

reply to Modus
I typically use RANCID ( »www.shrubbery.net/rancid/ ) at a number of customers, and it works pretty well once you get it all fine tuned. Adding support for a new kind of device is pretty rough, though it's common to find that somebody else has already done the heavy lifting.

Steve
--
Stephen J. Friedl | Unix Wizard | Security Consultant | Orange County, California USA | my web site

reply to djtim21

reply to Modus
We also use rancid. Have it running every 30 minutes fetching configs from about 20 devices. We use ciscos asa's/routers/switches, and some procurve switches. Pretty much set & forget, but also easy to tweak if you want. I use viewvc (»www.viewvc.org/) for the frontend for easier viewing. Free software at its best.

reply to Modus
We actually use Subversion to keep track of all the configs and changes. It works pretty good for what we need.

reply to Modus
If you only need to make sure you're configs are backed up, and you're running Cisco gear, take a look at the archive commands and subcommands... it will back up the config at a time interval, and at every time a configuration change is made. It's really really basic but sometimes I like basic.

reply to Modus
depends what you're asking.
rancid is kind of the de-facto standard for large shops -- there are other tools that will work in smaller instances -- but most every large enterprise/sp will use rancid for backup.

additionally -- if you're talking about something like a provisioning system -- there are tools (like cisco works) where you can input scripts to run at given times. the same can be done using a homebrew system of perl and expect -- slapped with a php front end for web access. this would give you the two-fold value of script generation to standard, then a tie-in to expect for deployment on device.

q.
--
"...if I in my north room dance naked, grotesquely before my mirror waving my shirt round my head and singing softly to myself..."