topic Re: ASAs and backing up config on an ftp server in Network Security

ASAs and backing up config on an ftp server

spfister336 — Thu, 27 Jan 2022 22:02:12 GMT

We are switching to an ftp server to replace an ancient tftp server to backup our configs to. Most of our switches are set up to write to this new ftp server, but I'm having some trouble with our ASAs.

I can't seem to figure a way to write the config to the ftp server using ASDM. Is there a way to do that?

I can see how to do it from the CLI, but I seem to be having some trouble with an @ sign in the password. Is there any way to make that work, or will we need to change the ftp password?

Re: ASAs and backing up config on an ftp server

balaji.bandi — Fri, 28 Jan 2022 05:49:25 GMT

I can't seem to figure a way to write the config to the ftp server using ASDM. Is there a way to do that?

You can only do it locally, if the FTP drive is mapped on your PC you can do that save to FTP directory, if not i will suggest another method to back from cli automatically.

If you looking Auto backup -use EEM Script Does easy :

Example :

event manager applet ASA_Backup
event timer absolute time 00:10:00
action 1.0 cli command "copy /noconfirm running-config ftp://[user[:password]@]server[/path]/dst_filename.cfg;int=inside"
output none

if you like syslog message :

syslog msg "ASA config success "

ASA syntax from command level :

Copy to an FTP server:

copy [/noconfirm] [interface_name] {startup-config | running-config} ftp://[user[:password]@]server[/path]/dst_filename

Example:


ciscoasa# copy startup-config ftp://jcrichton:aeryn@10.1.1.67/files/new-startup.cfg

Re: ASAs and backing up config on an ftp server

spfister336 — Fri, 28 Jan 2022 13:45:24 GMT

Thank you for your reply, but I'm still a little confused.

1. ASDM has a menu option "Save Running Configuration to TFTP server....". ASDM has no equivalent for FTP, correct?

2. I know the syntax for copying to ftp on the command line, but the ftp password has an '@' sign in the middle of it. This seems to cause issues with that syntax. Is there a workaround, or do we need a different password?

Re: ASAs and backing up config on an ftp server

balaji.bandi — Fri, 28 Jan 2022 14:09:41 GMT

1- not that i am aware FTP available.

2. if the password has @ (or any special character, then that is bug (dont have in hand) change the password and test.

Re: ASAs and backing up config on an ftp server

Aref Alsouqi — Sat, 29 Jan 2022 15:46:33 GMT

I don't think ASDM provides copying the running configs to an FTP server. The reason why the @ character is giving issue in this case is because the copy command relies on the @ to divide the creds from the IP address, so if you want to use the whole copy command you might need to change the password or create a new account with a password that doesn't include the @. You would run into the same issue even if you try with scp I think.

Maybe you can try to use the command "copy run ftp:" and then you hit enter, and you fill in the details of the remote FTP server line by line?

Re: ASAs and backing up config on an ftp server

chadanglin — Thu, 08 Sep 2022 14:37:21 GMT

are you aware of a way to hash the password when using the action command? we do want our configs saved somewhere with plain text passwords