×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Synchronize configurations

Unanswered Question
Aug 28th, 2009
User Badges:

We have 4 ironports, two S650 (one production, one testing / failover), two S160 (both production for remote sites).

What is the best way for me to export the configuration from our prod 650 to the rest of them?

Export the xml config file and diff it? Other solutions?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
daveofferman Wed, 10/21/2009 - 19:41
User Badges:

I have an environment with 7 S-660s in production and 7 in dev. There is a M-1060 for each cluster of 7 so that is how we're synching configurations. The active configuration on the Prod cluster is pushed to the dev cluster via a manual process. Even though my environment is using the 1060's for Managing the WSAs, the process is the same for WSA config to WSA config.

Download the configuration, don't forget to uncheck the 'Mask Passwords'.
Upload the configuration to the other WSA and BEFORE committing, you'll have to change the IP address, hostname and a few other configurations. This will get all your Access Policies, custom categories synched between your WSAs.

This only works between WSAs of similiar AsynchOS versions. I have not tried it or can confirm going from S-650 to S-160 or from, say, 5.7 Asynch to 6.0.

Good Luck.

Actions

This Discussion