Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

Cisco IOS

 

JSA Risk Manager supports the Cisco Internet Operating System (IOS) adapter.

The Cisco IOS adapter collects device configurations by backing up IOS-based network switches and routers.

The following features are available with the Cisco IOS adapter:

  • Neighbor data support

  • Dynamic NAT

  • Static NAT

  • SNMP discovery

  • Static routing

  • EIGRP and OSPF dynamic routing

  • P2P Tunneling/VPN

  • Telnet and SSH connection protocols

The following table describes the integration requirements for Cisco IOS.

Table 1: Integration Requirements for Cisco IOS

Integration requirement

Description

Versions

IOS 12.0 to 15.1 for routers and switches

Cisco Catalyst 6500 switches with MSFC.

Use the Cisco IOS adapter to back up the configuration and state of the MSFC card services.

If a Cisco IOS 7600 series router has an FWSM, use the Cisco ASA adapter to back up the FWSM.

User Access Level

A user with command exec privilege level for each command that the adapter requires to log in and collect data. For example, you can configure a custom privilege level 10 user that uses local database authentication.

The following example sets all show ip commands, to privilege level 10.

privilege exec level 10 show ip

SNMP discovery

Matches ISO or Cisco Internet Operation System in SNMP sysDescr.

Required credential parameters

To add credentials in JSA log in as an administrator and use Configuration Source Management on the Admin tab.

Username

Password

Enable Username (Optional)

Use this field, if the user needs to enter a specific privilege level when logging in to the device. Use the format level-<n> where n is a privilege level [0-15]. For example, to enter privilege level 10, enter the following command:

level-10

This results in sending the enable 10 command to the Cisco device.

Enable Password (Optional)

Supported connection protocols

To add protocols in JSA, log in as an administrator and use Configuration Source Management on the Admin tab.

Use any one of the following supported connection protocols:

Telnet

SSH

Commands that the adapter requires to log in and collect data

show access-lists

show cdp neighbors detail

show diag

show diagbus

show file systems

show glbp

show install running

show interfaces

show inventory

show ip route ospf

show mac address-table dynamic

show module

show mod version

show object-group

show power

show snmp

show spanning-tree

show standby

show startup-config

show version

show vlan

show vrrp

show vtp status

show ip commands that the adapter requires to log in and collect data

show ip arp

show ip bgp neighbors

show ip eigrp interface

show ip eigrp neighbors

show ip eigrp topology

show ip ospf

show ip ospf interface

show ip ospf neighbor

show ip protocols

show ip route eigrp

terminal length 0