topic Backup COMPLETE ASA Configuration in Network Security

Backup COMPLETE ASA Configuration

stephan.ochs — Fri, 21 Feb 2020 11:41:00 GMT

Via ASDM I can backup the complete configuration of my ASAs.

Complete means, not only running-/startup-configuration, but certificates, customization, DAP, plug-in, translation-tables and so on.

Two questions to you:

1) Why can't I do that on ASAs with multiple contexts?

2) How can I do that on CLI, which commands do I use to get xmls, certs...

We don't want to do the backup via ASDM, but automate it via CLI.

Thanks for any advice

Stephan

kailey_gauthier — Fri, 30 Oct 2009 17:23:14 GMT

I don't believe this is a full answer but I hope I can help you somewhat.

you'll need a tftp server that can communicate with the ASA.

use the copy command on the CLI to backup files to the tftp server

example: copy disk0:folder/file.xml tftp://nameorip/optionalfilename.xml

two files that are important (beyond the cli's configuration) are dap.xml and data.xml

you can see their locations (and all other files) by typing "show disk0:" (or whatever your storage is named)