ciscoconfaudit 0.1.0

A Cisco IOS & IOS-XE configuration audit tool

Cisco Config Auditor

Based on Use Cisco IOS XE Hardening Guide and some opinionated best practices.

This script gives an overview of the hardening techniques that can be used to secure a Cisco network device. Security is not a one-layer thing, yet, it depends on multiple factors. If you harden your devices, then it is a good starting point that increases the overall security of the environment you manage.

Installation

Install from PyPi

$ pip install ciscoconfaudit

Clone repo, create a virtual environment, and install requirements.

macOS or Linux

$ git clone https://github.com/Tes3awy/cisco-config-auditor.git
$ cd auditor
$ python3 -m venv .venv --upgrade-deps
$ source .venv/bin/activate .
(.venv) $ python3 -m pip install -r requirements.txt

Windows

Note On Microsoft Windows, it may be required to enable the Activate.ps1 script by setting the execution policy for the user.
You can do this by issuing the following PowerShell command:
PS C:> Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope CurrentUser
See About Execution Policies for more information.

In PowerShell

> git clone https://github.com/Tes3awy/cisco-config-auditor.git
> cd auditor
> python -m venv .venv --upgrade-deps
> .venv\Scripts\Activate.ps1  # Check
(.venv) > pip install -r requirements.txt

Usage

You can try out two examples in the repo.

(.venv) $ python3 online.py   # parses config from a device (Uses netmiko)
(.venv) $ python3 offline.py  # parses config from text file

Credits

This package was inspired by jonarm from cisco-ios-audit.

Author

Osama Abbas

Contibutions

You are welcome to contribute to this Cisco swiss-army knife.