topic Re: Python script - unable to set encrypted preshared key in DevNet General Discussions

Python script - unable to set encrypted preshared key

MrNox — Thu, 18 Jan 2024 06:51:54 GMT

Hi there,

I'm trying to set an encrypted preshared key on a C9200 (ver 17.06.05) with a python script.

When executing the following script

import cli cli.configurep([ "password encryption aes", "key config-key password-encrypt MYKEY" ])

I get the following output :

Line 1 SUCCESS: password encryption aes
Line 2 SUCCESS: key config-key password-encrypt MYKEY

However the second line is not configured.

Did I miss something ?

Regards

Re: Python script - unable to set encrypted preshared key

bigevilbeard — Wed, 17 Jan 2024 15:27:41 GMT

Try

import cli cli.enable() cli.configure(["crypto key generate rsa general-keys modulus 1024"]) config = [ "password encryption aes", "key config-key password-encrypt MYKEY" ] cli.configure(config)

The cli.configure() method takes a list of configuration commands and executes them in config mode.

Re: Python script - unable to set encrypted preshared key

MrNox — Wed, 17 Jan 2024 18:02:18 GMT

First try, I had to remove ,cli.enable() because of this : "AttributeError: module 'cli' has no attribute 'enable''"

After a second try, the rsa key pairs were generated successfully. The "password encryption aes" command was executed successfully but the "key config-key password-encrypt MYKEY" command still fails to work. When trying to set an encrypted key for radius or tacacs+ servers, I receive invalid key error messages. This suggests that encrypted preshared key is not set properly.

Re: Python script - unable to set encrypted preshared key

Ruben Cocheno — Fri, 02 Feb 2024 09:54:51 GMT

@MrNox

Has this been resolved?