topic Backup of Firewall configuration in Network Security

Backup of Firewall configuration

alangley2 — Mon, 11 Mar 2019 09:15:10 GMT

Hi, I have PIX 515e that i'd like to copy the stratup-config of to another server on our network. Can i use the tftp server to do this? I've tried the COPY startup-config TFTP: etc command but i get an error that says the stratup-config is not found.?

What is the best way to copy the config to another server as a backup?

Re: Backup of Firewall configuration

kamal-learn — Thu, 04 Jan 2007 06:05:35 GMT

in the old version of finesse the operating system of the pix :

first you have to tell the pix where the tftp-server is located weither inside or outside , and the name of the file-config to save here the command :

pix(config)#tftp-server (inside/or outside) ip-address-of-tftp /config/file-config

specify the complete path of the file or the config yoiu wanna save.

after that tell the pix to start saving the config

pix(config)#write NET:

in the new version 7 and above you can use copy.. and you have to specify the complete path of the configuration file to save .

HTH

DO rate if it does help

Re: Backup of Firewall configuration

alangley2 — Fri, 05 Jan 2007 01:10:11 GMT

Ok.. Thanks for the quick reply.

I've set up the tftp-server

tftp-server inside xxxx.xxxx.xxxx.xxxx pixconfg

and have done the

write NET tftp-server:startup-config

But i get the following error?

fw001(config)# write NET xxxx.xxxx.xxxx.xxxx:startup-config

Building configuration...

TFTP write 'pixconfg/startup-config' at xxxx.xxxx.xxxx.xxxx on interface 1

Undefined error

[FAILED]

What is the correct syntax for the write command?

Another question, can you recommend a good book for someone starting out with firewalls something like a "beginners guide to firewall configuration"?

Re: Backup of Firewall configuration

kamal-learn — Fri, 05 Jan 2007 02:22:02 GMT

check if the fileconfig name is correct!!

check if the path of the fileconfig is complete!!

check reachability of your TFTP server!!!

here is a url that could confirm the command i ve provided

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008072142a.shtml

for books check ciscopress web site:

http://www.ciscopress.com/articles/article.asp?p=31464&seqNum=1&rl=1

HTH

Do rate if it does help

Re: Backup of Firewall configuration

vijayasankar — Fri, 05 Jan 2007 05:50:09 GMT

Hi Alan,

Try this.

Reconfigure your tftp-server command as follows( include the / the pathname of the file)

tftp-server inside xxxx.xxxx.xxxx.xxxx /pixconfg

then just issue the command "write net :" to save the pix configuration to the tftp server as the file naned pixconfig.

Here is the explanation from cisco doc.

"The path name you specify in the tftp-server is appended to the end of the IP address you specify in the configure net and write net commands. The more you specify of a file and path name with the tftp-server command, the less you need to specify with the configure net and write net commands. If you specify the full path and filename in the tftp-server command, the IP address in the configure net and write net commands can be represented with a colon ( : ). "

This is the URL for that document.

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a00801727ae.html#wp1026054

Let us know the result.

Hope this helps.

-VJ

Re: Backup of Firewall configuration

flopez — Wed, 10 Jan 2007 21:36:47 GMT

the command is

write net TFTP_IP_address:filename

Make sure your TFTP server is setup properly to allow or prompt before writing and that you know the folder where the files are being kept.

Good luck.

Re: Backup of Firewall configuration

alangley2 — Thu, 11 Jan 2007 01:24:24 GMT

Thanks. I've finally got it to work.

I had to set up the tftp server and also add a access-list entry for the server i was sending the config to.

But at least now i can get a config listing that i can study.

thanks again