topic full ASA backup compressed file via CLI in Network Security

full ASA backup compressed file via CLI

fang-man — Wed, 14 Jun 2023 18:47:21 GMT

Hello,

I'm trying to find out if there is any way to get a backup of an ASA via CLI similar to the ASDM methods, The backup from ASDM includes everything from the PSKs to the anyconnect session, etc.

regards,

Re: full ASA backup compressed file via CLI

Rob Ingram — Wed, 14 Jun 2023 18:54:27 GMT

@fang-man yes you can

backup [/noconfirm] [context ctx-name] [interface name] [passphrase value] [location path]

Example:


ciscoasa# backup location disk0:/sample-backup]
Backup location [disk0:/sample-backup]?

https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/general/asa-96-general-config/admin-swconfig.html#ID-2152-000009af

Each backup file includes the following content:
- Running-configuration
- Startup-configuration
- All security images
  
  Cisco Secure Desktop and Host Scan images
  
  Cisco Secure Desktop and Host Scan settings
  
  AnyConnect (SVC) client images and profiles
  
  AnyConnect (SVC) customizations and transforms
- Identity certificates (includes RSA key pairs tied to identity certificates; excludes standalone keys)
- VPN pre-shared keys
- SSL VPN configurations
- Application Profile Custom Framework (APCF)
- Bookmarks
- Customizations
- Dynamic Access Policy (DAP)
- Plug-ins
- Pre-fill scripts for connection profiles
- Proxy Auto-config
- Translation table
- Web content
- Version information

Re: full ASA backup compressed file via CLI

MHM Cisco World — Wed, 14 Jun 2023 19:06:42 GMT

@Rob Ingram suggestion is better than my.

His command can you backup password and start and running config.

Thanks

MHM

Re: full ASA backup compressed file via CLI

fang-man — Wed, 14 Jun 2023 22:15:40 GMT

Thank you @Rob Ingram & @MHM Cisco World for your feedback.

Re: full ASA backup compressed file via CLI

fang-man — Sun, 25 Jun 2023 18:44:21 GMT

I just had the opportunity to build a lab and test the given command (I'm building a script to automate our internal backup job).

When using backup location tftp://ip.ip.ip.ip/backup I get a blank file in my tftp server path. no luck with renaming it to backup.zip (this is the format generated by asdm). I also tried to save it as backup.zip and backup.tar.gz (this format is mentioned in the whitepaper), but none of them seems to work. Do you guys have any idea about the output file format?

Thanks in advance.

Re: full ASA backup compressed file via CLI

MHM Cisco World — Sun, 25 Jun 2023 18:51:34 GMT

Can you share exactly the command you use

Re: full ASA backup compressed file via CLI

fang-man — Sun, 25 Jun 2023 19:10:58 GMT

the above was the exact command I used: backup location tftp://ip.ip.ip.ip/backup

After more tries and using the file name with no extension (backup), I see that with 7zip I decompress the first file (backup) which gives another file named backup, and after decompressing this second one I can see my data. Such a weird behavior compared to the asdm backup.

Re: full ASA backup compressed file via CLI

MHM Cisco World — Sun, 25 Jun 2023 19:13:37 GMT

So you sucess' this issue is solved and close?

MHM

Re: full ASA backup compressed file via CLI

fang-man — Sun, 25 Jun 2023 19:19:36 GMT

I think so. thanks for your assistance.

Re: full ASA backup compressed file via CLI

MHM Cisco World — Sun, 25 Jun 2023 19:20:47 GMT

You are so welcome