My open-source tools:

• CCSAT: Cisco Configuration Security Auditing Tool (v2.2: 2010/01/10)

  - Published on sourceforge, freshmeat, securityfocus, and Cisco-centric Open Source Initiative (COSI)
  - Tested and used on FreeBSD, Solaris8 and Linux, and should work on all major UNIX platforms (POSIX.2).
  - Running it without any argument or option (./ccsat) will display its usage.
  - "file-rename" is an example script if you need to rename and/or add .ext extension to the config files

  CCSAT (Cisco Configuration Security Auditing Tool) is a UNIX shell script for automated audit of configuration security of large numbers of Cisco routers and switches. The tool is based upon industry best practices, including Cisco, NSA, and SANS security guides and recommendations. It is flexible and can report details down to individual device interfaces, lines, ACLs, and ASs, etc. CCSAT has been tested, and used for real audits, on FreeBSD, Solaris 8 and Linux. It should also work on all other major UNIX platforms (POSIX.2).