Cisco 路由器設定自動化備份與 IOS 檔案上傳實戰

import time
from netmiko import ConnectHandler

# 裝置資訊
devices = [
    {'device_type': 'cisco_xe', 'host': '192.168.1.1', 'username': 'user', 'password': 'password', 'secret': 'password'},
    {'device_type': 'cisco_xe', 'host': '192.168.1.2', 'username': 'user', 'password': 'password', 'secret': 'password'}
]

# 備份指令列表
show_commands = [
    "show running-config",
    "show ip route",
    "show ip interface brief",
    "show clock",
    "show version",
    "show cdp neighbors",
    "show interfaces",
    "show logging"
]

for device in devices:
    try:
        print(f"正在備份裝置：{device['host']}")
        with ConnectHandler(**device) as conn:
            conn.enable()
            conn.send_config_set("terminal length 0")
            for command in show_commands:
                filename = f"{device['host']}_{command.replace(' ', '_')}.txt"
                output = conn.send_command(command)
                with open(filename, 'w') as f:
                    f.write(output)
                print(f"已儲存 {command} 指令輸出至 {filename}")
                time.sleep(1)  # 適度延遲，避免裝置負載過高
    except Exception as e:
        print(f"備份裝置 {device['host']} 發生錯誤: {e}")

print("所有備份任務已完成")

from netmiko import ConnectHandler
import getpass

# ... (其他程式碼，例如裝置資訊) ...

def upload_ios(device, ios_file_path):
    try:
        with ConnectHandler(**device) as conn:
            if not conn.check_enable_mode():
                conn.enable()  # 確保進入特權模式
            conn.scp_transfer_file(ios_file_path, "/flash:")
            print(f"IOS 檔案已成功上傳至 {device['host']}")
    except Exception as e:
        print(f"上傳 IOS 檔案至 {device['host']} 失敗: {e}")


# ... (呼叫 upload_ios 函式的程式碼) ...

在現代網路管理中，自動化 IOS 升級是提升效率的關鍵。本文將探討如何使用 Python 和 Netmiko 構建一個強大的 IOS 升級工具，著重於平行檔案傳輸的實踐，並結合 AAA 設定來提升安全性。

### 平行檔案傳輸的優勢

相較於依序上傳，平行檔案傳輸能顯著縮短升級時間，尤其在需要同時升級多台裝置時，效果更加明顯。Python 的 `threading` 模組提供了一個簡潔有效的方式來實作平行處理。

### AAA 認證與授權的重要性

在開始任何自動化操作之前，穩固的 AAA 基礎至關重要。正確設定 AAA 認證和授權，能有效防止未經授權的存取和操作，確保網路安全。

以下是在 Cisco 路由器上設定 AAA 的典型組態：

這些指令啟用 AAA，並設定使用本地帳號進行認證和授權，提供第一層安全防護。

### Python 平行檔案上傳程式碼範例

```python
import threading
import time
from netmiko import ConnectHandler, SCPConn

# 裝置連線資訊
devices = [
    {'device_type': 'cisco_ios', 'host': '192.168.1.1', 'username': 'admin', 'password': 'password123', 'secret': 'password123'},
    {'device_type': 'cisco_ios', 'host': '192.168.1.2', 'username': 'admin', 'password': 'password123', 'secret': 'password123'},
    # ...更多裝置
]

# IOS 檔案資訊
source_file = "/path/to/your/ios_image.bin"
destination_file = "ios_image.bin"

# 檔案傳輸函式
def upload_ios(device):
    try:
        with ConnectHandler(**device) as ssh_conn:
            ssh_conn.enable()
            with SCPConn(ssh_conn) as scp_conn:
                scp_conn.scp_transfer_file(source_file, destination_file)
        print(f"已成功上傳 IOS 至 {device['host']}")
    except Exception as e:
        print(f"上傳至 {device['host']} 失敗: {e}")

# 建立並啟動執行緒
threads = []
for device in devices:
    thread = threading.Thread(target=upload_ios, args=(device,))
    threads.append(thread)
    thread.start()

# 等待所有執行緒完成
for thread in threads:
    thread.join()

print("所有 IOS 檔案上傳完成")

debug ip scp

import time
from netmiko import ConnectHandler, SCPConn
import threading

source_newios = "/home/jdoe/ch10_tools_dev2/new_ios/c8000v-Dev-File-Only.bin"
destination_newios = "c8000v-Dev-File-Only.bin"

device1 = {
    'device_type': 'cisco_xe',
    'host': '192.168.127.111',
    'username': 'jdoe',
    'password': 'cisco123',
    'secret': 'cisco123'
}

device2 = {
    'device_type': 'cisco_xe',
    'host': '192.168.127.222',
    'username': 'jdoe',
    'password': 'cisco123',
    'secret': 'cisco123'
}

devices_list = [device1, device2]

def upload_file(device):
    ip = str(device['host'])
    username = str(device['username'])
    try:
        net_connect = ConnectHandler(**device)
        print(f"已成功連線至 {ip}！")
        net_connect.enable()
        print(f"已進入啟用模式，準備上傳 IOS 至 {ip}...")
        scp_conn = SCPConn(net_connect)
        scp_conn.scp_transfer_file(source_newios, destination_newios)
        print(f"新 IOS 檔案已成功上傳至 {ip}！")
        net_connect.disconnect()
    except Exception as e:
        print(f"在 {ip} 上發生錯誤：{e}")


# 建立執行緒並開始平行上傳
threads = []
for device in devices_list:
    thread = threading.Thread(target=upload_file, args=(device,))
    thread.start()
    threads.append(thread)

# 等待所有執行緒完成
for thread in threads:
    thread.join()

print("所有檔案上傳已完成。")

jdoe@u22s1:~/ch10_tools_dev2/tool7_upload_ios$ python upload_ios2_parallel.py