Automatically Backup VPN 3005 config file

[rakesh503]

Is there a way to backup the config file automatically on VPN 3005 concentrators?

Thanks

Rakesh

[jsivulka]

I don't think such a procedure exists. I dont remember reading anything like that on Cisco.com. However, to backup manuallyyou need to do the following:

1) Go to Administration > File Management > and click "view" under the file named CONFIG

2) The running config will open in a new browser window. Once it has completed loading in the

browser window, copy the entire text (using cntrl+a followed by cntrl+c)

This configuration can then be pasted in any text editior and saved.

[rakesh503]

Thank you for your response. Currently it I am backing up the config to a TFTP server but I was hoping to backup the config on a regular basis automatically versus administrator intervention. I have searched the site but I am unsuccessful in finding such procedure. Until such capability exists on the VPN concentrator, I will have to manually back up the config.

[swiesman]

i found a script online that i use on a linux server leverageing the "expect" interpreter. I placed this script into a file and ran the file from crontab every night at 12:00 AM. I use this for all the devices i manage.

The script is as follows:

#call it with "" ""

#replace , and ip address to suit your local needs.

#!/usr/bin/expect -f

set timeout 60

set currentdate [exec date -I]

spawn telnet [lindex $argv 0]

set hostname [lindex $argv 0]

expect -re "(Login|Username):"

send "\r"

expect "Password:"

send "\r"

expect "concentrator: Main ->"

send "2\r"

expect "concentrator: Admin ->"

send "7\r"

expect "concentrator: File ->"

send "4\r"

expect "concentrator: File ->"

send "CONFIG\r"

expect "concentrator: File ->"

send "$hostname-$currentdate\r"

expect "concentrator: File ->"

send "172.31.33.15\r"

expect "concentrator: File ->"

send "9\r"

expect "concentrator: Admin ->"

send "9\r"

expect "concentrator: Main ->"

send "6\r"

expect eof

exec mv /tftproot/$hostname-$currentdate /home/admin/routers/$hostname/$hostname-$currentdate

[dmitry]

There is also a way to do it using VPn3000's XML, you access the VPN3005 via an SSH v1 client (can be done via a perl script under control of CiscoWorks: syslog message from a VPN3005 about the config change), the first command in the SSH shell should be "" and VPN3005 will list its entire configuration, so you can store it in a file. It actually outputs the group and user passwords in clear (may be it is not such a good thing but certainly useful if a password is forgotten). I think that is the way Cisco's VMS manages VPN3000 series.