As above, is it possible to back up three contexts in a multi context firewall whilst also including unobfuscated pre shared keys for VPN termination? Heres the template I'm using...
<!--SolarWinds Network Management Tools-->
<!--Copyright 2007 SolarWinds.Net All rights reserved-->
<!--Modified 12/02/2011-->
<Configuration-Management Device="Cisco FWSM Context 10.xxx.xxx.xxx" SystemOID=" 1.3.6.1.4.1.9.1.674">
<Commands>
<Command Name="RESET" Value="terminal width 0${CRLF}terminal length 0${CRLF}changeto context ${ConfigType}" RegEx="#" />
<Command Name="Context_System" Value="system"/>
<Command Name="Context_Admin" Value="admin"/>
<Command Name="Context_TEST" Value="Test"/>
<Command Name="DownloadConfig" Value="more system:running"/>
<Command Name="Reboot" Value="reload noconfirm"/>
<Command Name="EnterConfigMode" Value="config terminal"/>
<Command Name="ExitConfigMode" Value="quit"/>
<Command Name="Startup" Value="show startup"/>
<Command Name="Running" Value="running"/>
<Command Name="UploadConfig" Value="${EnterConfigMode}${CRLF}${ConfigText}${CRLF}${ExitConfigMode}"/>
<Command Name="DownloadConfigIndirect" Value="write net ${StorageAddress}:/${StorageFilename}"/>
<Command Name="UploadConfigIndirect"/>
<Command Name="EraseConfig" Value="write erase${CRLF}Yes"/>
<Command Name="SaveConfig" Value="write memory"/>
<Command Name="Version" Value="show version"/>
</Commands>
</Configuration-Management>
So on this firewall I'd like to back up System, Admin, and another context called Test
The problem seems to lie within this line of config which only runs in system context...
<Command Name="DownloadConfig" Value="more system:running"/>
the same command is unrecognised in both admin and Test contexts. I've tried adding two DownloadConfig command lines to the template but I got errors. It would be great if you could do that and Solarwinds would cycle through the available DownloadConfig commands until it gets a hit.
So if I want to run one job that'll download each context and also give me unobfuscated preshared keys this is impossible?
I was thinking to run seperate jobs, but I can only point a device at one device template?
Any one any ideas of how I could get around this?