python读取交换机配置做配置备份

╰+哭是因爲堅強的太久メ 2024-04-17 21:23 115阅读 0赞

通常情况交换机一般会开启telnet或ssh，单独到每个交换机上不一定开启了ftp，所以还是拿常用的来做备份比较方便

python版本要求2.7

要求安装 paramiko包

主函数mainRun.py

#!/usr/bin/python
    # -*- coding: UTF-8 -*-
    
    import paramiko
    import os, sys
    import json
    import time
    import telnetlib
    
    
    def sshconfig(ip, port, username, password, cmd, PS1, isNeedEnableMode, enablePassword):
        # 实例化SSHClient
        client = paramiko.SSHClient()
        # 自动添加策略，保存服务器的主机名和密钥信息
        client.set_missing_host_key_policy(paramiko.AutoAddPolicy())
        # 连接SSH服务端，以用户名和密码进行认证
        client.connect(hostname=ip, username=username, password=password, look_for_keys=False)
        chan = client.invoke_shell()
        chan.settimeout(9000)
    
        # 获取登陆后的消息
        welcomeinfo = ''
        while True:
            line = chan.recv(4096)
            welcomeinfo += line
            if (PS1 is not None) & (len(PS1) > 0):
                isFindPS1 = False;
                for i in range(len(PS1)):
                    if PS1[i] in line:
                        isFindPS1 = True
                if isFindPS1 == True:
                    break;
        print welcomeinfo
    
        if isNeedEnableMode == "1":
            chan.send('enable' + '\n')
            chan.send(enablePassword + '\n')
            # 获取特权后的消息
            enableInfo = ''
            while True:
                line = chan.recv(4096)
                enableInfo += line
                if (PS1 is not None) & (len(PS1) > 0):
                    isFindPS1 = False;
                    for i in range(len(PS1)):
                        if PS1[i] in line:
                            isFindPS1 = True
                    if isFindPS1 == True:
                        break;
            print enableInfo
    
        chan.send(cmd + '\n')
        result = ''
        # more交互处理
        more = '-- More --'
        more2 = '--More--'
        more3 = '<--- More --->'
        more4 = '-- More --'
        #  循环获取数据
        while True:
            line = chan.recv(4096)
            result += line
            if (more in line) | (more2 in line) | (more3 in line) | (more4 in line):
                chan.send(" ")
                continue;
            if (PS1 is not None) & (len(PS1) > 0):
                isFindPS1 = False;
                for i in range(len(PS1)):
                    if PS1[i] in line:
                        isFindPS1 = True
                if isFindPS1 == True:
                    break;
    
        print result
        return result
    
    def telnetconfig(ip, port, username, password, cmd, PS1, isNeedEnableMode, enablePassword):
        # 连接Telnet服务器
        tn = telnetlib.Telnet(ip, port=23, timeout=10)
        tn.set_debuglevel(2)
        # 处理登录
        # 输入登录用户名
        tn.read_until('Username:')
        tn.write(username.encode('ascii') + '\n')
    
        # 输入登录密码
        tn.read_until('Password:')
        tn.write(password.encode('ascii') + '\n')
    
        time.sleep(2)
    
        # 获取登陆后的消息
        welcomeinfo = ""
        while True:
            line = tn.read_very_eager().encode("ascii")
            welcomeinfo += line
            if (PS1 is not None) & (len(PS1) > 0):
                isFindPS1 = False;
                for i in range(len(PS1)):
                    if PS1[i] in line:
                        isFindPS1 = True
                if isFindPS1 == True:
                    break;
        print welcomeinfo
    
        #处理特权密码
        if isNeedEnableMode == "1":
            tn.write('enable'.encode('ascii') + '\n')
            tn.write(enablePassword.encode('ascii') + '\n')
            time.sleep(2)
            # 获取特权后的消息
            enableInfo = ''
            while True:
                line = tn.read_very_eager().encode("ascii")
                enableInfo += line
                if (PS1 is not None) & (len(PS1) > 0):
                    isFindPS1 = False;
                    for i in range(len(PS1)):
                        if PS1[i] in line:
                            isFindPS1 = True
                    if isFindPS1 == True:
                        break;
            print enableInfo
    
        tn.write(cmd.encode('ascii') + '\n')
        time.sleep(2)
        result = ''
        # more交互处理
        more = '-- More --'
        more2 = '--More--'
        more3 = '<--- More --->'
        more4 = '-- More --'
        #  循环获取数据
        while True:
            line = tn.read_very_eager().encode("ascii")
            result += line
            if (more in line) | (more2 in line) | (more3 in line) | (more4 in line):
                tn.write(" ".encode('ascii') )
                time.sleep(2)
                continue;
            if (PS1 is not None) & (len(PS1) > 0):
                isFindPS1 = False;
                for i in range(len(PS1)):
                    if PS1[i] in line:
                        isFindPS1 = True
                if isFindPS1 == True:
                    break;
    
        print result
        return result
    
        tn.close()  # tn.write('exit\n')
        return "aaa"
    
    def main():
        file = open("SwitchConfig.json", "rb")
        fileJson = json.load(file)
        switch = fileJson["switch"]
        # print switch
        for i in range(len(switch)):
            print switch[i]
            if switch[i]["protocol"] == "ssh":
                result = sshconfig(switch[i]["ip"], switch[i]["port"], switch[i]["username"], switch[i]["password"],
                                   switch[i]["cmd"], switch[i]["PS1"], switch[i]["isNeedEnableMode"],
                                   switch[i]["enablePassword"])
                fileName = switch[i]["fileName"]
                fileObject = open(fileName, 'w')
                fileObject.write(result)
                fileObject.close()
            if switch[i]["protocol"] == "telnet":
                result = telnetconfig(switch[i]["ip"], switch[i]["port"], switch[i]["username"], switch[i]["password"],
                                   switch[i]["cmd"], switch[i]["PS1"], switch[i]["isNeedEnableMode"],
                                   switch[i]["enablePassword"])
                fileName = switch[i]["fileName"]
                fileObject = open(fileName, 'w')
                fileObject.write(result)
    
        sys.exit(0)
    
    
    if __name__ == '__main__':
        main()

交换机连接配置文件SwitchConfig.json

{
    	"switch": [{
    		"ip": "192.168.5.1",
    		"port": "22",
    		"username": "cisco",
    		"password": "cisco123",
    		"protocol": "ssh",
    		"cmd": "show run",
    		"PS1": ["ASA5506X>","ASA5506X#"],
    		"desc": "ASA5506防火墙",
    		"isNeedEnableMode": "1",
    		"enablePassword": "cisco456",
    		"fileName": "asa5506X_192.168.5.1.txt"
    	},{
    		"ip": "192.168.5.254",
    		"port": "22",
    		"username": "huawei",
    		"password": "huawei123",
    		"protocol": "ssh",
    		"cmd": "display current-configuration",
    		"PS1": ["<Core-S5700>"],
    		"desc": "S5700核心交换机",
    		"isNeedEnableMode": "0",
    		"enablePassword": "",
    		"fileName": "core_s5700_192.168.5.254.txt"
    	},{
    		"ip": "192.168.10.1",
    		"port": "22",
    		"username": "cisco",
    		"password": "cisco123",
    		"protocol": "ssh",
    		"cmd": "show run",
    		"PS1": ["CME-2901>","CME-2901#"],
    		"desc": "CME-2901思科VOIP交换机",
    		"isNeedEnableMode": "1",
    		"enablePassword": "cisco456",
    		"fileName": "2901_CME_192.168.10.1.txt"
    	},{
    		"ip": "192.168.200.3",
    		"port": "22",
    		"username": "huawei",
    		"password": "huawei123",,
    		"protocol": "ssh",
    		"cmd": "display current-configuration",
    		"PS1": ["<POE-S5700>"],
    		"desc": "S5700POE交换机",
    		"isNeedEnableMode": "0",
    		"enablePassword": "",
    		"fileName": "poe_s5700_192.168.200.3.txt"
    	},{
    		"ip": "192.168.200.5",
    		"port": "22",
    		"username": "cisco",
    		"password": "cisco123",
    		"protocol": "ssh",
    		"cmd": "show run",
    		"PS1": ["POE-2960#"],
    		"desc": "2960交换机",
    		"isNeedEnableMode": "0",
    		"enablePassword": "",
    		"fileName": "2960_24poe_192.168.200.5.txt"
    
    	},{
    		"ip": "192.168.200.6",
    		"port": "23",
    		"username": "huawei",
    		"password": "huawei123",
    		"protocol": "telnet",
    		"cmd": "display current-configuration",
    		"PS1": ["<5600_6>"],
    		"desc": "5700交换机",
    		"isNeedEnableMode": "0",
    		"enablePassword": "",
    		"fileName": "5700_192.168.200.6.txt"
    	},{
    		"ip": "192.168.200.7",
    		"port": "22",
    		"username": "huawei",
    		"password": "huawei123",
    		"protocol": "ssh",
    		"cmd": "display current-configuration",
    		"PS1": ["<5700_7>"],
    		"desc": "5700交换机",
    		"isNeedEnableMode": "0",
    		"enablePassword": "",
    		"fileName": "5700_192.168.200.7.txt"
    	},{
    		"ip": "192.168.200.8",
    		"port": "23",
    		"username": "huawei",
    		"password": "huawei123",
    		"protocol": "telnet",
    		"cmd": "display current-configuration",
    		"PS1": ["<5700_8>"],
    		"desc": "5700交换机",
    		"isNeedEnableMode": "0",
    		"enablePassword": "",
    		"fileName": "5700_192.168.200.8.txt"
    	}]
    }

目前这个程序保证用户名和密码对的情况下，还是可用的，没做多少容错处理，后续再进行优化

等这个优化完，后续考虑加上配置变更检测，邮件通知，oss文件上传同步功能。

update20190905：完成差不多了,码云gitee地址：[https://gitee.com/gsls200808/Switch-Configuration-Backup-and-Change-Detection][https_gitee.com_gsls200808_Switch-Configuration-Backup-and-Change-Detection]

[https_gitee.com_gsls200808_Switch-Configuration-Backup-and-Change-Detection]: https://gitee.com/gsls200808/Switch-Configuration-Backup-and-Change-Detection