Archivist is a network device configuration archiving and versioning program. It uses Subversion as its revision control system. Its multithreaded design makes it quite fast and thus suitable for operation on large networks with thousands of network devices. It supports Cisco IOS, Cisco CatOS, Juniper JUNOS, and Brocade/Foundry MLX series, but it can be easily extended to support any SSH or telnet-based network device by creating your own config download and post-processing scripts.
rConfig is a network device configuration management utility for network engineers to take frequent configuration snapshots of their network devices. It lets you choose which commands you want to run against your devices. Simply configure rConfig with the list of commands you wish to apply to a category of devices, and add devices to the category. Create a scheduled task, and rConfig will do the rest.
The klish is a framework for implementing Cisco-like command-line interfaces on Unix systems. It is configurable through XML files. "Klish" stands for "Kommand Line Interface SHell". The klish is a fork of clish-0.7.3. The original clish was developed by Graeme McKerrell. The klish adds some new features, but is compatible (as much as possible) with clish's XML configuration files.
360-FAAR (Firewall Analysis Audit and Repair) is an offline, command line, Perl firewall policy manipulation tool to filter, compare to logs, merge, translate, and output firewall commands for new policies, in Checkpoint dbedit, Cisco ASA, or ScreenOS commands. It is all contained in one file. It can read policy and logs for: Checkpoint FW1 (in odumper.csv / logexport format), Netscreen ScreenOS (in get config / syslog format), and Cisco ASA (show run / syslog format). It uses both inclusive and exclusive CIDR and text filters, permitting you to split large policies into smaller ones for virutalization at the same time as removing unused connectivity. It supports policy to log association, object translation, rulebase reordering and simplification, rule moves, and duplicate matching automatically. It allows you to seamlessly move rules to where you need them. 'print' mode creates a spreadsheet for your audit needs with one command.
chan-sccp-b is an extension of the original chan-sccp implementation for the Asterisk soft-PBX. It lets you hook up a Cisco/SCCP Phone to your Asterisk server using the SCCP protocol, which works a lot better than the SIP firmware on the same phone. It provides full phone functionality instead of just a simple SIP channel provider. It offers functionality like shared lines, hotline functionality, guest login, dynamic speeddials, private line automatic ring-down (PLAR), personal softkey configurations, Dundi support, SCCP extended dialplan functions, manager support, and custom device state buttons.
KVpnc is a KDE frontend for various VPN clients. It supports Cisco VPN (vpnc, vpnclient (a proprietary client from Cisco)), IPSec (FreeS/WAN, Openswan, strongSwan, racoon), PPTP (pptpclient), OpenVPN, L2TP over IPSec (l2tpd, xl2ltpd, openl2tp) (usable with FreeS/WAN, Openswan, strongSwan, and racoon), Vtun, and OpenSSH. Smartcards will be supported within OpenVPN and strongSwan. vpnc is a replacement for the Cisco VPN client, and is used as a client for the Cisco3000 VPN Concentrator. FreeS/WAN, Openswan, and strongSwan are IPSec clients for Linux 2.4.x/2.6.x, and racoon is an IPSec client for Linux 2.6.x and *BSD. l2tpd, xl2tpd, and openl2tp are Linux L2TP VPN clients/servers.
Cisco Template Manager (CTM) is a set of tools that make it easy to manage Cisco configurations over a whole network based on your self-defined templates. With CTM you will have a unified configuration in your entire network, which is the basic building block of operational stability and security. The pre-defined templates support regular expressions. It supports the C760x, C730x, C37xx, C35xx, C29xx, C28xx, C18xx, and C17xx family series.
check_nwc_health is a plugin for the Shinken (or Nagios/Icinga) monitoring system. It is used to check hardware health, environment, interfaces, pools, uptime, etc. of a great range of the most popular network components like switches, routers, firewalls, proxies, load balancers, etc. Currently it can monitor: Cisco IOS, Cisco Nexus, F5 BIG-IP, CheckPoint Firewall1, Juniper NetScreen, HP Procurve, Nortel, Brocade 4100/4900, EMC DS 4700, EMC DS 24, Allied Telesyn, and Blue Coat SG600.
Andrisoft WANSIGHT is a fully featured network traffic analyzer and collector. It provides in-depth traffic analysis, traffic accounting, and bandwidth monitoring, and enables you to generate complex traffic reports, graphs, and tops, instantly pin down the cause of network incidents, understand patterns in application performance, and make the right capacity planning decisions. It supports 10GbE packet sniffing and NetFlow, sFlow, and IPFIX.