Net::Telnet::Netscreen - interact with a Netscreen firewall
use Net::Telnet::Netscreen;
my $fw = new
Net::Telnet::Netscreen(host=>'192.168.1.1');
$fw->login('admin','password') or die
$fw->error;
$fw->enter_vsys('wineasy.no'); print "We are
now in: ".$fw->current_vsys."\n"; my
%vsys=$fw->get_vsys;
foreach $key (sort (keys
%vsys)) {
print $key,'=',
$vsys{$key},"\n";
} print @results;
Net::Telnet::Netscreen is mostly a pure rippoff of Net::Telnet::Cisco, with
adaptations to make it work on the Netscreen firewalls. It also has some
additional commands, but for basic functionality, see Net::Telnet and
Net::Telnet::Cisco documentation.
Before you use Net::Telnet::Netscreen, you should probably have a good
understanding of Net::Telnet, so perldoc Net::Telnet first, and then come back
to Net::Telnet::Netscreen to see where the improvements are.
Some things are easier to accomplish with Net::SNMP. SNMP has
three advantages: it's faster, handles errors better, and doesn't use any
vtys on the router. SNMP does have some limitations, so for anything you
can't accomplish with SNMP, there's Net::Telnet::Netscreen.
New methods not found in Net::Telnet follow:
Enter a virtual system in the firewall. parameter is system you want to enter .
You may enter another vsys even if you are in a vsys. Note that we will save
your changes for you if you do. (only works for ns-500+)
exit from the vsys you are in, or from the system if you are on the top. takes
one parameter. if you should save any changes or not. (only works for ns-500+)
return the vsys you currently are in. returns blank if you're not in a vsys.
(only works for ns-500+)
returns a hash of all the virtual systems on your system, with system id's for
values (only works for ns-500+)
return the HA mode, if your system is in a HA cluster, or false if it isn't.
Returns percentage of success (0-100).
$sucess=$fw->ping('192.168.1.1');
use this command to exit system, or exit current vsys
Will return a value from the firewall, or from the vsys you are in, if you
aren't in root.
Set a value in the box, returns true if set successfully. (guess what it returns
if you fuck up? ;)
Shows the last prompt returned by your netscreen device.
Shows the last command executed on your netscreen device.
See Net::Telnet for documentation on these methods.
The basic functionality was ripped from Joshua_Keroes@eli.net
$Date: 2002/07/18 10:45:12 $ Modifications and
additions to suit Netscreen was done by m.ramberg@wineasy.no
$Date: 2002/07/18 10:45:12 $
Copyright (c) 2001 Marcus Ramberg, Song Networks Norway. All rights reserved.
This program is free software; you can redistribute it and/or modify it under
the same terms as Perl itself.
This library is free software, you can redistribute it and/or modify it under
the same terms as Perl itself.