Net::Telnet::Netscreen - interact with a Netscreen firewall
use Net::Telnet::Netscreen;
my $fw = new Net::Telnet::Netscreen(host=>'192.168.1.1'); $fw->login('admin','password') or die $fw->error; $fw->enter_vsys('wineasy.no'); print "We are now in: ".$fw->current_vsys."\n"; my %vsys=$fw->get_vsys; foreach $key (sort (keys %vsys)) { print $key,'=', $vsys{$key},"\n"; } print @results;
Net::Telnet::Netscreen is mostly a pure rippoff of Net::Telnet::Cisco, with adaptations to make it work on the Netscreen firewalls. It also has some additional commands, but for basic functionality, see Net::Telnet and Net::Telnet::Cisco documentation.
Before you use Net::Telnet::Netscreen, you should probably have a good understanding of Net::Telnet, so perldoc Net::Telnet first, and then come back to Net::Telnet::Netscreen to see where the improvements are.
Some things are easier to accomplish with Net::SNMP. SNMP has three advantages: it's faster, handles errors better, and doesn't use any vtys on the router. SNMP does have some limitations, so for anything you can't accomplish with SNMP, there's Net::Telnet::Netscreen.
New methods not found in Net::Telnet follow:
Enter a virtual system in the firewall. parameter is system you want to enter . You may enter another vsys even if you are in a vsys. Note that we will save your changes for you if you do. (only works for ns-500+)
exit from the vsys you are in, or from the system if you are on the top. takes one parameter. if you should save any changes or not. (only works for ns-500+)
return the vsys you currently are in. returns blank if you're not in a vsys. (only works for ns-500+)
returns a hash of all the virtual systems on your system, with system id's for values (only works for ns-500+)
return the HA mode, if your system is in a HA cluster, or false if it isn't.
Returns percentage of success (0-100).
$sucess=$fw->ping('192.168.1.1');
use this command to exit system, or exit current vsys
Will return a value from the firewall, or from the vsys you are in, if you aren't in root.
Set a value in the box, returns true if set successfully. (guess what it returns if you fuck up? ;)
Shows the last prompt returned by your netscreen device.
Shows the last command executed on your netscreen device.
See Net::Telnet for documentation on these methods.
The basic functionality was ripped from Joshua_Keroes@eli.net $Date: 2002/07/18 10:45:12 $ Modifications and additions to suit Netscreen was done by m.ramberg@wineasy.no $Date: 2002/07/18 10:45:12 $
Net::Telnet, Net::SNMP
Copyright (c) 2001 Marcus Ramberg, Song Networks Norway. All rights reserved. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself.
This library is free software, you can redistribute it and/or modify it under the same terms as Perl itself.
To install Net::Telnet::Netscreen, copy and paste the appropriate command in to your terminal.
cpanm
cpanm Net::Telnet::Netscreen
CPAN shell
perl -MCPAN -e shell install Net::Telnet::Netscreen
For more information on module installation, please visit the detailed CPAN module installation guide.