Network configuration management backs up the configuration for the network resources. This makes it easier to recover from any device failures in the organization or to identify any configuration change that happens on the device.

You can also get alerts when the resource configuration changes.

Configuration files are categorized as one of the following types:

  • startup configuration
  • running configuration

Startup configuration

Startup configuration files are used during system startup to configure the software.

Running configuration

Running configuration files contain the current configuration of the software. The running configuration file and startup configuration may not always be the same. This may be the case when you want to change the configuration for a short period of time, you update the running configuration but you do not save the changes to the startup configuration file.

Prerequisites

Before setting up the network configuration backup:

  1. Verify that your resource is supported for network configuration backup.
  2. Verify that supported protocols are used.
  3. Create credentials and assign resource to the backup.
    • When the job is created, ensure that the job type is Network Configuration Backup.

Supported resources

Verify that your resource is supported for network configuration backup.

Supported protocols

The gateway uses the following protocols to connect to end devices.

  • SSH 2.x and higher
  • Telnet

Creating credentials

To create credentials and assign resources:

  1. Select a client from the All Clients list.

  2. Go to Setup > Accounts > Clients.

  3. Click the client name in which the credentials should be stored.

  4. From CLIENT DETAILS, select the Credentials tab.

  5. From CREDENTIALS, click the Add icon to create a credential for network configuration backup.

  6. From NEW CREDENTIAL, enter the name and description for credential.

  7. Select credential type as Network Configuration Backup.

  8. Enter username and configure the credential details:

    • Use Policy Mapping: Enables user to integrate a Password Manager application with the credential to control the access to a device.
    • Port: Provide Port number for HTTPS connection.
    • Transport Type: Enables the user to determine the data transmission type: SSH or Telnet.
    • Enable Password: Enter the password required to run the Enable Command after logging in to the device.
  9. Enter connection time-out and click Save. Default connection time-out is 1000 milliseconds.

    Create Credential for Network Configuration
    Network Backup Configuration

Comparing configuration types

You can compare the changes or differences between two versions of a configuration.

  1. Select a client from the All Clients list.
  2. Go to Infrastructure > Network Device, select the resource for which a network configuration backup job is configured.
  3. Click Configuration Backup tab.
  4. Select the type of configuration Startup Config or Running Config.
  5. Select any two dates to compare the configuration between the dates and click Compare. You can view the difference between the two configurations between the selected dates.

Scenarios

A user wants to save every snapshot of configurations

Every snapshot of configuration can be saved by selecting the option All Versions for the job type Network Backup Configuration while creating a job.

A user wants to save snapshot only when configurations change

Snapshot of configuration change can be saved by selecting the option Save Versions with changes only for the job type Network Backup Configuration while creating a job.

A user wants to get alerts on configuration changes

User gets alerts when there is a change in configuration. Select Generate Alerts while creating a job to get the alerts on changes to the Startup configuration or on changes to the Running configuration.

A user wants to take a backup of a device

In this case, there is a configuration change trap (SNMP) generated on the device

A resource backup is done when you create the job. During job creation:

  1. Select the Network Backup Configuration job type.
  2. Select the Backup Trigger option.

Supporting OS and Model Devices

OSModelEnable CommandTerminal CommandStartup Config CommandRunning Config Command
WL-IOSconfig paging disableshow run-config commands
FORTIOSenableconfig system console >> set output standard >> endshow full-configuration (or) show
SB-IOS (or)SBIOSenableterminal datadumpshow startup-configshow running-config
XR-IOSenableterminal length 0show startup-configshow running-config
IOSCSS11503enableterminal length 0show startup-configshow running-config
IOSSG500enableterminal datadumpshow startup-configshow running-config
IOSenableterminal length 0show startup-configshow running-config
ASAASAVenableshow startup-configshow running-config
ASAIPSterminal length 0show configuration
ASAASA (or) Adaptive Security Applianceenable (or) loginterminal pager 0show startup-configmore system:run (or) show running-config
MLNX-OSenableterminal length 999show startup-configshow running-config
NXOS (or) NX-OSUCSenableterminal length 0show configuration
NXOS (or) NX-OSenableterminal length 0show startup-configshow running-config
CISCO UCS FIRMWARE (or) CISCO UCSUCSenableterminal length 0show configuration all
connect nxos a
show running-config
connect nxos b
show running-config
NOSenableterminal length 0show startup-configshow running-config
FOSSILKWORM SERIES OF FC SWITCHconfigshow
FOSACCESS GATEWAY (or) CONVERGE SWITCHconfigshow -all cmsh show running-config show startup-config
FOSconfigshow -all (or) configshow
MSSenableset length 0show configuration
JUNOS (or) JUNIPER OSset cli screen-length 0show configuration
CATOSenableset length 0show config all (or) show config
PIXOSenablepager lines 0show startup-configshow running-config
PROCURVEGBE2Ccfg >> lines 0cur
PROCURVEOFFICECONNECT SWITCH 1920S 24G 2SFP PPOE+ (185W) JL384Aenableterminal length 0show startup-configshow running-config
PROCURVEenableno pageshow configshow running-config
SCREENOSset console page 0get config all
EOS (or) ADEOS (or) ADE-OSenableterminal length 0show running-config
FORCE10 (or) FORCE 10enableterminal length 0show startup-configshow running-config
VYATTAshow configuration commands | no-more sudo su - >> cat /opt/vyatta/etc/config/config.boot
NETSCALERshow run
IRONWAREICX7150-24-POE (or) ICX7150-C12-POE (or) ICX7150-48-POEFenableskip-page-displayshow configurationshow running-config
IRONWAREenable\rskip-page-display\rshow configuration\rshow running-config\r
PAN-OS (or) PANOSset cli config-output-format set set cli pager off set cli terminal width 500configure
show
VXWORKS10/100/1000 GIGABIT SWITCHshow tech-support config
VXWORKSenableterminal datadumpshow startup-configshow running-config
VXWORKSenableterminal length 0show startup-configshow running-config
WAASenableno pageshow startup-configshow running-config
ARUBAOSR0X25A 6410enableno pageshow startup-configshow running-config
ARUBAOSIAP-VCshow configurationshow running-config
ARUBAOSJL076A (or) JL322A (or) JL320A (or) JL357A (or) JL558Aenableno pageshow configshow running-config
ARUBAOSenableno pagingshow startup-configshow running-config
ACOSenableterminal length 0show startup-configshow running-config
AEROZOSenableterminal length 0show startup-configshow running-config
EXTREMEXOSB5 (or) BONDED SSA-T1068-0652A/td>set length 0<show config all
EXTREMEXOS1440 (or) 1480enableshow running-config verbose
EXTREMEXOSdisable clipagingshow configuration detail
SONICOSshow all
COSenableshow all config
CISCOACSWenableterminal length 0show startup-configshow running-config
DELLPCshow running-config
F5TMOStmsh
modify cli preference
pager disabled
Collecting below files data as startup configuration through scp /defaults/config_base.conf /config/bigip_base.conf /config/bigip_sys.conf /config/bigip_local.conf /config/bigip_user.conf /config/bigip.license /config/bigip.conf /config/daemon.conf /config/profile_base.conf /usr/share/monitors/base_monitors.conf.tmsh show running-config
MERUOSenableterminal length 0show startup-configshow running-config
ADTRANOSenableterminal length 0show startup-configshow running-config
COMWARE1910_cmdline-mode on Y

512900

screen-length disable
display current-configurationdisplay saved-configuration
COMWARE1920_cmdline-mode on

Y

Jinhua1920unauthorized

screen-length disable
display current-configurationdisplay saved-configuration
COMWARE1950xtd-cli-mode

Y

foes-bent-pile-atom-ship

screen-length disable
display current-configurationdisplay saved-configuration
COMWAREJG937A (or) FLEXNETWORK 5130-48G-POE+-4SFP+ (370W) EIscreen-length disabledisplay current-configurationdisplay saved-configuration
COMWAREscreen-length disabledisplay current-configurationdisplay saved-configuration
VIPTELAOSCollecting below command data through scp and showing as DataBase backup

request nms configuration-db backup path /home/admin/db_backup_vistara
BCF CONTROLLER OSenableterminal length 0show running-configFXOS
FXOSFPR-2110 (or) FIRE POWER 1140TD (or) FIREPOWER 2130 SECURITY APPLIANCE (or)FIREPOWER 4110 SECURITY MODULE 12 (or) FIREPOWER 2120 (or) FIRE POWER 1120TD (or) FPR4K-SM-36 (or) FIREPOWER 9000 SECURITY MODULE 44 (or) FIREPOWER 4120 SECURITY MODULE 24enableshow startup-configshow running-config
FXOSenableterminal pager 0show startup-configshow running-config
NGOSenableterminal length 0show startup-configshow running-config
LINUXCBS350-48FP-4Gterminal datadumpshow startup-configshow running-config
LINUXMEDIANT 2600 E-SBCenableshow running-config
FIREWARE (or) FIREWARE XTMexport config to console
MRV-ODenableterminal length 0show startup-configshow running-config
LINUXIM7200 and make = OpenGearenableconfig -g config
OS10enableterminal length 0show startup-configurationshow running-configuration
YAMAHA OSconsole lines infinityshow config
AUDIOCODES(LINUX)M800Benableshow running-config