Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fixes #751 - IPv6 support for Cisco ASA 'show vpn-sessiondb anyconnect' #752

Merged
merged 1 commit into from
Jun 8, 2020
Merged

Fixes #751 - IPv6 support for Cisco ASA 'show vpn-sessiondb anyconnect' #752

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion templates/cisco_asa_show_vpn-sessiondb_anyconnect.textfsm
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,8 @@ Value Filldown,Required SESSION_TYPE (\S+)
Value USERNAME (\S+)
Value Required INDEX (\d+)
Value ASSIGNED_IP (\d+\.\d+\.\d+\.\d+)
Value PUBLIC_IP (\d+\.\d+\.\d+\.\d+)
Value PUBLIC_IP (\S+)
Value ASSIGNED_IPV6 (\S+)
Value PROTOCOL (.+?)
Value LICENSE (.+?)
Value ENCRYPTION (.+?)
Expand Down Expand Up @@ -33,6 +34,7 @@ Connection
^\s*Index\s*:\s+${INDEX}$$
^\s*Assigned\s+IP\s*:\s+${ASSIGNED_IP}\s+Public\s*IP\s*:\s*${PUBLIC_IP}$$
^\s*Assigned\s+IP\s*:\s+${ASSIGNED_IP}$$
^\s*Assigned\s+IPv6\s*:\s+${ASSIGNED_IPV6}$$
^\s*Public\s+IP\s*:\s+${PUBLIC_IP}$$
^\s*Protocol\s+:\s+${PROTOCOL}$$
^\s*License\s+:\s*${LICENSE}$$
Expand Down
4 changes: 3 additions & 1 deletion tests/cisco_asa/show_vpn-sessiondb_anyconnect/cisco_asa_show_vpn-sessiondb_anyconnect.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,9 +5,11 @@ parsed_sample:
index: "1018"
assigned_ip: "10.254.254.22"
public_ip: "1.2.3.4"
assigned_ipv6: ""
protocol: "AnyConnect-Parent SSL-Tunnel DTLS-Tunnel"
license: "AnyConnect Premium"
encryption: "AnyConnect-Parent: (1)none SSL-Tunnel: (1)AES-GCM-256 DTLS-Tunnel: (1)AES128"
encryption: "AnyConnect-Parent: (1)none SSL-Tunnel: (1)AES-GCM-256 DTLS-Tunnel:\
\ (1)AES128"
hashing: "AnyConnect-Parent: (1)none SSL-Tunnel: (1)SHA384 DTLS-Tunnel: (1)SHA1"
bytes_tx: "17186425"
bytes_rx: "7094561"
Expand Down
5 changes: 4 additions & 1 deletion tests/cisco_asa/show_vpn-sessiondb_anyconnect/cisco_asa_show_vpn-sessiondb_anyconnect1.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,9 +5,11 @@ parsed_sample:
index: "1018"
assigned_ip: "10.254.254.22"
public_ip: "1.2.3.4"
assigned_ipv6: ""
protocol: "AnyConnect-Parent SSL-Tunnel DTLS-Tunnel"
license: "AnyConnect Premium"
encryption: "AnyConnect-Parent: (1)none SSL-Tunnel: (1)AES-GCM-256 DTLS-Tunnel: (1)AES128"
encryption: "AnyConnect-Parent: (1)none SSL-Tunnel: (1)AES-GCM-256 DTLS-Tunnel:\
\ (1)AES128"
hashing: "AnyConnect-Parent: (1)none SSL-Tunnel: (1)SHA384 DTLS-Tunnel: (1)SHA1"
bytes_tx: "17186425"
bytes_rx: "7094561"
Expand All @@ -30,6 +32,7 @@ parsed_sample:
index: "1"
assigned_ip: "192.168.246.1"
public_ip: "10.139.1.2"
assigned_ipv6: ""
protocol: "AnyConnect-Parent SSL-Tunnel DTLS-Tunnel"
license: "AnyConnect Premium"
encryption: "RC4 AES128"
Expand Down
9 changes: 7 additions & 2 deletions tests/cisco_asa/show_vpn-sessiondb_anyconnect/cisco_asa_show_vpn-sessiondb_anyconnect2.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,9 +5,11 @@ parsed_sample:
index: "55620"
assigned_ip: "10.15.113.59"
public_ip: "8.8.8.8"
assigned_ipv6: ""
protocol: "AnyConnect-Parent SSL-Tunnel DTLS-Tunnel"
license: "AnyConnect Premium"
encryption: "AnyConnect-Parent: (1)none SSL-Tunnel: (1)AES-GCM-256 DTLS-Tunnel: (1)AES256"
encryption: "AnyConnect-Parent: (1)none SSL-Tunnel: (1)AES-GCM-256 DTLS-Tunnel:\
\ (1)AES256"
hashing: "AnyConnect-Parent: (1)none SSL-Tunnel: (1)SHA384 DTLS-Tunnel: (1)SHA1"
bytes_tx: "2310124124"
bytes_rx: "241259137"
Expand All @@ -30,9 +32,11 @@ parsed_sample:
index: "55861"
assigned_ip: "10.15.112.51"
public_ip: "15.25.192.144"
assigned_ipv6: ""
protocol: "AnyConnect-Parent SSL-Tunnel DTLS-Tunnel"
license: "AnyConnect Premium"
encryption: "AnyConnect-Parent: (1)none SSL-Tunnel: (1)AES-GCM-256 DTLS-Tunnel: (1)AES256"
encryption: "AnyConnect-Parent: (1)none SSL-Tunnel: (1)AES-GCM-256 DTLS-Tunnel:\
\ (1)AES256"
hashing: "AnyConnect-Parent: (1)none SSL-Tunnel: (1)SHA384 DTLS-Tunnel: (1)SHA1"
bytes_tx: "12215025"
bytes_rx: "1718697"
Expand All @@ -55,6 +59,7 @@ parsed_sample:
index: "56876"
assigned_ip: "10.15.112.173"
public_ip: "123.15.26.19"
assigned_ipv6: ""
protocol: "AnyConnect-Parent"
license: "AnyConnect Premium"
encryption: "AnyConnect-Parent: (1)none"
Expand Down
2 changes: 2 additions & 0 deletions tests/cisco_asa/show_vpn-sessiondb_anyconnect/cisco_asa_show_vpn-sessiondb_anyconnect3.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,7 @@ parsed_sample:
index: "57045"
assigned_ip: "10.1.2.3"
public_ip: "1.2.3.4"
assigned_ipv6: ""
protocol: "AnyConnect-Parent SSL-Tunnel DTLS-Tunnel"
license: "AnyConnect Premium"
encryption: "AnyConnect-Parent: (1)none SSL-Tunnel: (1)AES256 DTLS-Tunnel: (1)AES256"
Expand All @@ -30,6 +31,7 @@ parsed_sample:
index: "47520"
assigned_ip: ""
public_ip: "1.2.3.4"
assigned_ipv6: ""
protocol: "AnyConnect-Parent"
license: "AnyConnect Premium"
encryption: "AnyConnect-Parent: (1)none"
Expand Down
16 changes: 16 additions & 0 deletions .../cisco_asa/show_vpn-sessiondb_anyconnect/cisco_asa_show_vpn-sessiondb_anyconnect_ipv6.raw
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
Session Type: AnyConnect
Username : johndoe12 Index : 38847
Assigned IP : 10.10.123.123 Public IP : 2001:db8:91::7
Assigned IPv6: 2001:DB8:1234:1::5678
Protocol : AnyConnect-Parent SSL-Tunnel DTLS-Tunnel
License : AnyConnect Premium
Encryption : AnyConnect-Parent: (1)none SSL-Tunnel: (1)AES-GCM-256 DTLS-Tunnel: (1)AES-GCM-256
Hashing : AnyConnect-Parent: (1)none SSL-Tunnel: (1)SHA384 DTLS-Tunnel: (1)SHA384
Bytes Tx : 3145031268 Bytes Rx : 58022385
Group Policy : RAVPN Tunnel Group : RAVPN
Login Time : 01:13:32 UTC Fri Jun 5 2020
Duration : 4h:55m:35s
Inactivity : 0h:00m:00s
VLAN Mapping : N/A VLAN : none
Audt Sess ID : 0a0edc05097bf0005ed99c3c
Security Grp : none
29 changes: 29 additions & 0 deletions .../cisco_asa/show_vpn-sessiondb_anyconnect/cisco_asa_show_vpn-sessiondb_anyconnect_ipv6.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
---
parsed_sample:
- session_type: "AnyConnect"
username: "johndoe12"
index: "38847"
assigned_ip: "10.10.123.123"
public_ip: "2001:db8:91::7"
assigned_ipv6: "2001:DB8:1234:1::5678"
protocol: "AnyConnect-Parent SSL-Tunnel DTLS-Tunnel"
license: "AnyConnect Premium"
encryption: "AnyConnect-Parent: (1)none SSL-Tunnel: (1)AES-GCM-256 DTLS-Tunnel:\
\ (1)AES-GCM-256"
hashing: "AnyConnect-Parent: (1)none SSL-Tunnel: (1)SHA384 DTLS-Tunnel: (1)SHA384"
bytes_tx: "3145031268"
bytes_rx: "58022385"
group_policy: "RAVPN"
tunnel_group: "RAVPN"
login_time: "01:13:32"
login_time_zone: "UTC"
login_weekday: "Fri"
login_month: "Jun"
login_day: "5"
login_year: "2020"
duration: "4h:55m:35s"
inactivity: "0h:00m:00s"
vlan_mapping: "N/A"
vlan: "none"
audt_sess_id: "0a0edc05097bf0005ed99c3c"
security_grp: "none"
4 changes: 3 additions & 1 deletion .../show_vpn-sessiondb_anyconnect/cisco_asa_show_vpn-sessiondb_anyconnect_long_usernames.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,9 +5,11 @@ parsed_sample:
index: "1018"
assigned_ip: "10.254.254.22"
public_ip: "1.2.3.4"
assigned_ipv6: ""
protocol: "AnyConnect-Parent SSL-Tunnel DTLS-Tunnel"
license: "AnyConnect Premium"
encryption: "AnyConnect-Parent: (1)none SSL-Tunnel: (1)AES-GCM-256 DTLS-Tunnel: (1)AES128"
encryption: "AnyConnect-Parent: (1)none SSL-Tunnel: (1)AES-GCM-256 DTLS-Tunnel:\
\ (1)AES128"
hashing: "AnyConnect-Parent: (1)none SSL-Tunnel: (1)SHA384 DTLS-Tunnel: (1)SHA1"
bytes_tx: "17186425"
bytes_rx: "7094561"
Expand Down