SCP the ASA running-config to remote server

khinze · ‎06-09-2008

I would like to replace tftp with scp. Since you cannot do a "copy run scp" on the ASA, I'd like to scp the ASA's system:running-config to my server I store backups on. The ASA also does not recognize the (/) character so I cannot "scp user@asa:system/running-config" and "scp user@asa:system:running-config" causes problems for scp.

How are others securely (i.e. not TFTP) backing up their configurations?

Can use expect, but rather keep it simple as possible.

Thanks,

cisco24x7 · ‎06-09-2008

Use RANCID for backing your configuration.

RANCID can use ssh so it is very secure.

khinze · ‎06-09-2008

Thank you for your reply.

I have looked at RANCID but haven't gotten buy off yet to install/use it.

I was hoping to find an easy solution in the interim.

Farrukh Haroon · ‎06-09-2008

The ASA has built-in commands to do this, but still uses TFTP. Maybe you can encrypt the TFTP traffic generated on the box (Just an idea, never tried it).

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/mswlicfg.html#wp1063700

Also there is a better formatted script here:

http://6200networks.com/2008/02/06/using-a-script-to-back-up-asa-configuration/

Regards

Farrukh