finally: downloader.disconnect() if == " main ": main() Installation Requirements # Install required Python packages pip install paramiko scp Or create requirements.txt cat > requirements.txt << EOF paramiko>=2.8.0 scp>=0.13.3 EOF
args = parser.parse_args()
class CiscoASADownloader: def (self, hostname, username, password, port=22): self.hostname = hostname self.username = username self.password = password self.port = port self.ssh_client = None self.setup_logging() cisco asa 5506-x download
#!/usr/bin/env python3 """ Cisco ASA 5506-X File Download Utility Supports: Running config, Startup config, ASDM image, AnyConnect packages """ import paramiko import os import sys import logging from scp import SCPClient import argparse from datetime import datetime
def list_flash_files(self): """List files in flash memory""" self.logger.info("Listing flash files...") output = self.execute_command("show flash:") if output: print("\nFlash Files:") print("=" * 60) print(output) return output return None finally: downloader
def download_asdm_image(self, destination_path): """Download ASDM image from flash""" # First, find ASDM file in flash flash_contents = self.execute_command("show flash:") if flash_contents: # Parse for .bin files containing 'asdm' for line in flash_contents.split('\n'): if 'asdm' in line.lower() and '.bin' in line: filename = line.split()[-1] if line.split() else None if filename: remote_path = f"/{filename}" local_path = os.path.join(destination_path, filename) return self.download_file_via_scp(remote_path, local_path) self.logger.warning("ASDM image not found in flash") return False
def download_startup_config(self, destination_path): """Download startup configuration""" self.logger.info("Downloading startup configuration...") config = self.execute_command("show startup-config") if config: filename = os.path.join(destination_path, f"startup_config_{self.hostname}.cfg") with open(filename, 'w') as f: f.write(config) self.logger.info(f"Startup config saved to: {filename}") return filename return None filename) return self.download_file_via_scp(remote_path
def backup_asa(self, destination_path): """Complete backup of ASA configuration and important files""" self.logger.info("Starting complete ASA backup...") # Create timestamped backup directory timestamp = datetime.now().strftime("%Y%m%d_%H%M%S") backup_dir = os.path.join(destination_path, f"asa_backup_{self.hostname}_{timestamp}") os.makedirs(backup_dir, exist_ok=True) backups = [] # Download configurations running_config = self.download_running_config(backup_dir) if running_config: backups.append(running_config) startup_config = self.download_startup_config(backup_dir) if startup_config: backups.append(startup_config) # Download crypto info crypto = self.download_crypto_keys(backup_dir) if crypto: backups.append(crypto) # List flash files for reference flash_list = self.list_flash_files() if flash_list: flash_file = os.path.join(backup_dir, "flash_listing.txt") with open(flash_file, 'w') as f: f.write(flash_list) backups.append(flash_file) # Create manifest file manifest = os.path.join(backup_dir, "BACKUP_MANIFEST.txt") with open(manifest, 'w') as f: f.write(f"ASA Backup created on: {datetime.now()}\n") f.write(f"Hostname: {self.hostname}\n") f.write(f"Backup files:\n") for file in backups: f.write(f" - {os.path.basename(file)}\n") self.logger.info(f"Complete backup saved to: {backup_dir}") return backup_dir
def download_file_via_scp(self, remote_path, local_path): """Download file using SCP""" try: with SCPClient(self.ssh_client.get_transport()) as scp: self.logger.info(f"Downloading {remote_path} via SCP...") scp.get(remote_path, local_path) self.logger.info(f"File saved to: {local_path}") return True except Exception as e: self.logger.error(f"SCP download failed: {str(e)}") return False
pip install -r requirements.txt # Complete backup (configurations + crypto + file listing) python asa_downloader.py --host 192.168.1.1 --username admin --password secret --backup-all Download only running configuration python asa_downloader.py --host 192.168.1.1 --username admin --password secret --running-config Download specific file from flash python asa_downloader.py --host 192.168.1.1 --username admin --password secret --download-file /asdm-771.bin List files in flash memory python asa_downloader.py --host 192.168.1.1 --username admin --password secret --list-flash Download ASDM image python asa_downloader.py --host 192.168.1.1 --username admin --password secret --download-asdm Alternative: Using SCP Directly (No Python) # Enable SCP on ASA first: # ssh scopy enable # username admin password secret # aaa authentication ssh console LOCAL Download running config via SCP scp admin@192.168.1.1:running-config ./running-config-backup.cfg Download ASDM image scp admin@192.168.1.1:/asdm-771.bin ./ Download startup config scp admin@192.168.1.1:startup-config ./startup-config-backup.cfg ASA Pre-Configuration Required ! Enable SSH and SCP on ASA crypto key generate rsa modulus 2048 ssh 0.0.0.0 0.0.0.0 outside ssh scopy enable username admin password YourPassword aaa authentication ssh console LOCAL username admin attributes privilege-level 15 ! Enable HTTP/HTTPS for ASDM (if needed) http server enable http 192.168.0.0 255.255.255.0 inside