cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2853
Views
0
Helpful
2
Replies

Upload a config in asa or execute config script

jmolina0111
Level 1
Level 1

First of all, thanks for the help.
I do not have much experience with Cisco ASA, sorry if the question is not good.

I have a list of ip addresses that I want to add as objects, and these within a group.

I've seen this script from a user who does exactly what I need: https://supportforums.cisco.com/sites/default/files/attachments/discussion/tor.txt

The issue is that I see the output is a TXT file.

The question is: How do I load that file using BASH / SSH? This process should be done automatically every night, I do not use copy / paste or GUI or any of that.

Thank you !!!

In case I have not explained very well, I put the question in another way:

How can I maintain an external blacklist for an ASA firewall?

Thank you !!!

2 Replies 2

Farhan Mohamed
Cisco Employee
Cisco Employee

Collin Clark
VIP Alumni
VIP Alumni

First you need to setup a job to grab that file and parse the IP's. Next you have a couple of options to get it into the running config;

1. copy the file to flash via ftp/scp and then copy the file from flash and into the running config

2. create a script on a machine and have it ssh into the ASA for you and merge the config

3. use the REST API for the ASA and have a script upload the IP's to the ASA

IMO #3 would be the easiest

HTH

Review Cisco Networking for a $25 gift card