Backup All configurations on FirePower 1120 via CLI

[juandcc2014]

Hello, everyone.

I am currently trying to backup and restore configurations to and from a USB. I am currently working with a Cisco FirePower 1120 straight out of the box. Most of the tutorials I have seen on the internet use the GUI or use local-mgmt, which I don't know how access. My questions are as follows:

• How can I backup all configurations(running and not) into the USB connected to the firewall connected to its USB using the command line?
• How can I restore all configurations from a USB connected to its USB port using the command line?

An extra note: I am using a USB3.0 with 64GB of space

[Jonatan Jonasson]

You have a firepower 1120 appliance... and are you running it in ASA or Firepower Threat Defense (FTD) mode?

If it's a new box "straight out of the box" as you say, I would guess FTD mode... ?
But I don't understand what you're trying to take a backup of if you haven't even setup the appliance?

For ASA, you could have a config file to copy between appliances.
For Firepower, whether it's locally managed (FDM) or via a management Center (on-prem FMC or cloud cdFMC), your options there are to use the GUI backup & restore procedures.

I think it would be valuable if you could provide additional context of what you currently have and what you're trying to accomplish.

ie
#1 do you have a running Cisco Firepower 1120 that's functional and you want to take a backup of it?
if yes: use either the FDM or FMC user-interfaces and documented procedures

if no:
#2 Is this just a new setup and you want to learn how to take a backup of the firewall before you put it into production?
if yes: use either the FDM or FMC user-interfaces and documented procedures

if no:
what then?

[juandcc2014]

Hello! I will provide some more information:

• My Firepower 1120 is running ASA. 
• Yes, I have a running Cisco Firepower 1120 that's functional and I want to take a backup of it. The goal is to give it all the proper configurations(NAT, routes, ssh, etc.), then back all the settings on the Firewall into a USB stick so that then I can connect that USB into another firewall, and somehow apply those settings stored in the USB into that new firewall.

[balaji.bandi]

My Firepower 1120 is running ASA. 

If you running ASA you have different methods to backup.

i use python script t0 backup :

ASA config backup from Linux | Balaji Bandi

you can use EEM script to backup :

https://community.cisco.com/t5/network-security/asa-5545x-backup-using-eem/td-p/3929718

[juandcc2014]

But is there a way to back up everything to the USB connected to the Firewall's USB port via the CLI? The first solution uses a separate machine and an external python script, and the other uses an SCP server.

[balaji.bandi]

yes you can use EEM script to copy to USB (instead of send to remote ?)

If you looking manually copy you can do the same, but prefer to automatic copy depends on time.