cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

5873
Views
10
Helpful
6
Replies
Leo.Juszk
Beginner

ASA - Backup config on change

Hi. Is there any equivalent to the CISCO IOS archive?

Something like:

archive
log config
logging enable
logging size 200
hidekeys
notify syslog contenttype plaintext
path scp://user:pass@1.1.1.1/$h-$t
write-memory

6 REPLIES 6
Marvin Rhoads
VIP Community Legend

Since ASA 9.2, we have had Embedded Event Manager (EEM). You can create an EEM configuration to watch for the syslog id of the configuration being changed and trigger a backup.

Here are some examples:

http://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/117883-config-eem-00.html#anc10

https://www.youtube.com/watch?v=zIqyMefEzk8

More a most thorough backup, you can use the backup command (available since ASA 9.3(2)).

http://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/A-H/cmdref1/b.html

Thanks Marvin. Instead of scheduling could do it on demand? 

Say, everytime you type the write command, instead at a specific hour/time.

I haven't tried it, but you should be able to:

Create an EEM applet to have two actions - write mem and backup

Create a command-alias to replace "write" with the event manager applet ("event manager run <applet name>")

Marvin,

 

Just thought I would write a comment to thank you for your help not only on this one but several others.

 

It seems almost everytime I have a question and do a google search (which is quite a bit) you have the answer, nice work and thanks for the Help.

 

I can see how you are a Hall of Fame Master - is that the Highest Level ? Whatever the highest is Yoda, Sensei, Master of all things Security Related - you should be it :) 

 

Thanks again,

Mark

here's an actual verified/working config to auto backup the asa on a daily basis:

 

ASA5515X(config)# event manager applet backup-config
ASA5515X(config-applet)# event timer absolute time 11:45:00
ASA5515X(config-applet)# action 0 cli command "copy /noconfirm running-config tftp://172.27.0.1/asa-cfg.txt"
ASA5515X(config-applet)# output none

 

ASA5515X# sh event manager
event manager applet backup-config, hits 1, last 2018/04/25 11:45:00 last file none
event absolute 11:45:00, left 83816 secs, hits 1, last 2018/04/25 11:45:00
action 0 cli command "copy /noconfirm running-config tftp://172.27.0.1/asa-cfg.txt", hits 1, last 2018/04/25 11:45:00

 

hope that helps.

Azam

Here's an example using the "backup" command:

event manager applet backup-asa
 description Backup ASA upon saving config
 event syslog id 111004
 action 0 cli command "backup /noconfirm location tftp://192.168.1.20/configs/"
 output none

 

Content for Community-Ad