router configuratuion using ssh

[sama82]

hi all
I want to know how to configure routers using ssh ( the configuration process should be done remotely so I should use ssh). this should be done within php script. I already enabled ssh in php and learn about some functions like ssh2_connect() and so on.
please I need help...
sama from Baghdad- Iraq..
thanks for everyone how may try to help & answer me... Bye

[Irithori]

Your questions are too generic for specific answers.

1) You want to configure routerS. So, lots of them?
If so, are they all using the same hardware and operating system?

2) "to configure a router" can mean almost anything.
From adding a simple host route to a complex, multihomed, (S|D)NAT, firewalling and trafficshaping monstrosity
What do you want to do?

3) What is the point of using php anyway?
The task is to
- automate some simple re-occuring router configurations for always the same hardware/OS? ok
- automate some simple re-occuring router configurations for different hardware/OS? This is already harder to accomplish.
- build a generic application for arbitrary router configuration for different hardware/OS? That would be a quite big project.

4) It should be noted, that working with the network configuration has the possibilty that the network connect is lost. So any script/application would need some errorchecking.


btw: This post should be in networking or scripting.
The RedHat/fedora forums seems not appropiate.

[sama82]

Dear Irithori
thanks for helping me.. I can explain my problem more clearly...
I should design a web site, this site should offer the capability that you can do network experiments remotely ( using real devices in a remote place ), the site give the user the ability to practice & do a lot of network experiments like RIP, OSPF protocols.. etc..the topologies is done in advance..
so how can we connect to the remote sever ( the console server ), which provide the connection to all the devices ( routers, switches, etc..which are located in the remote lab.)? we should use ssh (secure shell protocol) to connect to the console server...
so I want to configure routers using ssh.. all this should be done in the web site.. which I want to use PHP to enable the ssh protocol so I can connect to the devices in the remote lab. via the console server..
my question is, after connecting to the console server ( which is located in the remote lab.) how to configure the devices ( like routers ) using ssh capability (executing commands remotely)..
thanks in advance for helping me, I really need help..
I know that this forum is not the right place. but I see a thread that is similar to my problem. I should put the problem in another forum. can you help me about good forums about network & scripting?
thank you so much.
sama
Baghdad-Iraq

[Irithori]

So,
clienthost -> webapplication -> router?
It shall basically be a proxy, people enter commands in a browser terminal and
the webapp repeats them over a ssh connection?
There are already solutions for that.
Here is a java applet:
MindTerm download - AppGate Network Security AB

If you intend commercial use, a license must be purchased.
Personal use is free

Another thought:
Why would you need a php webapplication just to connect to routers.
It will just make executing commands on the routers slow.

Also, I would expect that people learning routing protocols OSPF, etc
will also be able to handle an ssh client.
So why not cut out that webapp.

- connect routers, hosts, switches as you see fit for your training purposes
- install a unix of your choice on a server at that remote lab.
- that server will be the gateway to the training network
- set up user accounts with shells on the gateway server
- set up sshd (most likely already running)
- voila.

People connect to the gateway server and can then connect to the training hardware via ssh/telnet


Yet another thought:
In order to be able to easily reset all devices after training sessions,
virtualization could be used.

VMware, for example, has the snapshot feature.
That could be used for PC based routers.
Also, the vmnet2-7 devices can be used to setup virtual networks.
vmnet0, vmnet1, vmnet8 are "hardwired"
to Bridged (vmnet0), HostOnly (vmnet1) and NAT (vmnet.
But vmnet2-7 can be used in any of these modes and of course with any IP network.

cisco switches can be very closely simulated with dynamips.
Even using genuine IOS files.
You must at least own the switch and have a cisco account to do that.
And I am not sure, if it is legally save to use that simulator in a training environment.
In doubt, contact cisco.

Here is an article about dynamips:
Practice Cisco router configuration using a free emulator | Network Administrator | TechRepublic.com