sshy

Script use

Telnet into Cisco IOS devices and configure SSH.
- Supports both IPv4 and IPv6 addresses and FQDNs
- Both Py2 and Py3 compatible
The script needs 2 arguments to work:
- 1st argument: sshy.py
- 2nd argument: /x.json
- Valid command looks like: ./sshy.py telnet/router/7200.json

Script input

Username/Password
Specify devices as a .json file
- See telnet/router/7200.json as an example
Prompt: "Enter domain name (example.com):"
Prompt: "Enter SSH key size (1024, 2048, 4096):"
Prompt: "Disable telnet (yes/no)?"

Script output

Cisco IOS command output
Errors in screen
Progress bar
Statistics
Log erros in sshy.log
Travis CI build notification to Slack private channel

Prerequisites

Telnet (TCP/23) reachability to devices.
Local username with privilege 15 (example: user a.lambreca priv 15 secret cisco).
Alias command to save configuration: alias exec wr copy run start

Installation

mkdir /FromZeroToHero/ && cd /FromZeroToHero/
sudo apt-get install -y python-pip
sudo apt-get install -y git
git clone -b https://github.com/pynetscript/FromZeroToHero.git . 
pip install -r requirements.txt   # if it fails try: sudo python -m pip install -r requirements.txt

tools.py

tools.py is going to be imported on our main script (sshy.py).
This way we have a cleaner main script.
Function (get_input)
- Get input that is both Py2 and Py3 compatible
Function (get_credentials)
- Prompts for username
- Prompts for password twice but doesn't show it on screen (getpass)
  - If passwords match each other the script will continue to run
  - If password don't match each other we will get an error message >> Passwords do not match. Please try again. and the script will prompt us again until passwords match each other.

2nd argument (.json)

Create an csv file like this example:

device_type,ip
cisco_ios_telnet,r1.a-corp.com
cisco_ios_telnet,192.168.1.160
cisco_ios_telnet,2001:db8:acab:a001::170

Go to Mr. Data Converter.
Copy/paste the CSV input into the Input CSV or tab-delimited data.
On the bottom, in the Output as choose JSON - Properties.
On the left, in the Delimiter and in the Decimal Sign choose Comma.
This is what you should get from the example above.

[{"device_type":"cisco_ios_telnet","ip":"r1.a-corp.com"},
{"device_type":"cisco_ios_telnet","ip":"192.168.1.160"},
{"device_type":"cisco_ios_telnet","ip":"2001:db8:acab:a001::170"}]

Finally i copy/pasted the output into telnet/router/7200.json which is going to be used by sshy.py as the <2nd_argument>.

1st argument (sshy.py)

This is the main script that we will run.
Legal examples:

python2 <1st_argument> <2nd_argument>
python3 <1st_argument> <2nd_argument>

Let's use the following example to explain the script:

python3 sshy.py telnet/router/7200.json

First the script will:

Create a log file named "sshy.log".
Prompt us for a username and a password (password required twice).
Prompt us for the domain name.
Prompt us for the SSH key size.
Prompt us to disable telnet or not.
Show progress bar

===============================================================================
Username: a.lambreca
Password: 
Retype password: 
===============================================================================
===============================================================================
Enter domain name (example.com): a-corp.com
Enter SSH key size (1024, 2048, 4096): 2048
Disable telnet (yes/no)? yes
                                                                               
N/A% [                                            ] [0 of 3] [ETA:  --:--:--]
===============================================================================

Then the script will:

Timestamp the date & time the script started in D/M/Y H:M:S format.
Telnet to the first device in the <2nd_argument> (.json).
Get device's "hostname" from netmiko.
Get device's "ip" from .json
Run the domain name command that it prompted us earlier.
Generate SSH keys
- I added a delay factor on this command because it takes a while to generate the SSH keys.
Run the commands to disable telnet.
Disconnect the SSH session.
Show progress bar

Errors:

If the is an authentication error we will get an error message 15/04/2018 15:28:09 - Authentication error - r5.a-corp.com
If the is an connectivity (TCP/23) error we will get an error message 15/04/2018 15:28:27 - TCP/23 connectivity error - 192.168.1.160
Errors are logged in sshy.log

Finally the script will:

Repeat the process for all devices in <2nd_argument> (.json)
Timestamp the date & time the script ended in D/M/Y H:M:S format.
Subtract start timestamp and end timstamp to get the time (in H:M:S format) of how long the script took to run.
Print SCRIPT STATISTICS

Note

The script doesn't save the running-config to the startup-config.
To save it, run saver.py.

+-----------------------------------------------------------------------------+
|                              SCRIPT STATISTICS                              |
|-----------------------------------------------------------------------------|
| Script started:           15/04/2018 15:19:20                               |
| Script ended:             15/04/2018 15:23:57                               |
| Script duration (h:m:s):  0:04:36                                           |
+-----------------------------------------------------------------------------+

1st argument (saver.py)

This is the script that we will run to save the configuration.

Legal examples:

python2 <1st_argument> <2nd_argument>
python3 <1st_argument> <2nd_argument>