Storing for in case of future need. This runs to pull configs from network Cisco ASA and compares and saves config file to a local network file share location using CIFS and a network file server to store the confgs. It work for the situation it is in, they may not work for every situation, I do not take liability for anything that might go wron…

cisco_asa_backup.sh

#!/bin/bash

# written for Cisco ASA 5500
# example usage ./asa_ssh.sh "DEVICE_NAME" DEVICE_IP TFTPD_SERVER_IP "COLO_FACILITY_SHORTNAME" "ASA_OUTBOUND_INTERFACE"
# Storing for in case of future need.  This runs to pull configs from network Cisco ASA and compares and saves config file 
# to a local network file share location using CIFS and a network file server to store the confgs.  It work for the situation 
# it is in, they may not work for every situation, I do not take liability for anything that might go wrong, nor do I support
# these scripts outside of my own usage.

host=$1
ip=$2
myip=$3
colo=$4
interface=$5

now=`date +"%Y_%m_%d"`
tftp=/tftpboot
compare_dir=$tftp/$host
backup_path=/network_device_backups/networking_devices/$colo/firewalls/$host


(expect -c "
  set timeout 5
  spawn ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no root@$ip
  expect \"*rd: \"
  send \"REDACTED-FOR-SECURITY\r\"
  expect \"*> \"
  send \"enable\r\"
  expect \"Password: \"
  send \"REDACTED-FOR-SECURITY\r\"
  expect \"*\# \"
  send \"copy /noconfirm startup-config tftp://$myip/$host.cfg;int=$interface\r\"
  expect \"*\# \"
  send \"exit\r\"
  exit
")

mkdir -p $compare_dir
mkdir -p $backup_path
touch $compare_dir/$host.cfg
md5=`md5sum $compare_dir/$host.cfg | awk '{ print $1 }'`
echo 
echo 
echo "current md5: $md5"
newmd5=`md5sum $tftp/$host.cfg | awk '{ print $1 }'`
echo 
echo "new md5: $newmd5"
echo
if [ $md5 != $newmd5 ]
then
  cp $tftp/$host.cfg $compare_dir/$host.cfg
  cp $tftp/$host.cfg $backup_path/$host_$now.cfg
  echo "copied files"
fi
rm $tftp/$host.cfg

exit 0