Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

Backup of Firewall configuration

Hi, I have PIX 515e that i'd like to copy the stratup-config of to another server on our network. Can i use the tftp server to do this? I've tried the COPY startup-config TFTP: etc command but i get an error that says the stratup-config is not found.?

What is the best way to copy the config to another server as a backup?

1 ACCEPTED SOLUTION

Accepted Solutions
Community Member

Re: Backup of Firewall configuration

the command is

write net TFTP_IP_address:filename

Make sure your TFTP server is setup properly to allow or prompt before writing and that you know the folder where the files are being kept.

Good luck.

6 REPLIES
Bronze

Re: Backup of Firewall configuration

hi

in the old version of finesse the operating system of the pix :

first you have to tell the pix where the tftp-server is located weither inside or outside , and the name of the file-config to save here the command :

pix(config)#tftp-server (inside/or outside) ip-address-of-tftp /config/file-config

specify the complete path of the file or the config yoiu wanna save.

after that tell the pix to start saving the config

pix(config)#write NET:

in the new version 7 and above you can use copy.. and you have to specify the complete path of the configuration file to save .

HTH

DO rate if it does help

Community Member

Re: Backup of Firewall configuration

Ok.. Thanks for the quick reply.

I've set up the tftp-server

tftp-server inside xxxx.xxxx.xxxx.xxxx pixconfg

and have done the

write NET tftp-server:startup-config

But i get the following error?

fw001(config)# write NET xxxx.xxxx.xxxx.xxxx:startup-config

Building configuration...

TFTP write 'pixconfg/startup-config' at xxxx.xxxx.xxxx.xxxx on interface 1

Undefined error

[FAILED]

What is the correct syntax for the write command?

Another question, can you recommend a good book for someone starting out with firewalls something like a "beginners guide to firewall configuration"?

Bronze

Re: Backup of Firewall configuration

hi

check if the fileconfig name is correct!!

check if the path of the fileconfig is complete!!

check reachability of your TFTP server!!!

here is a url that could confirm the command i ve provided

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008072142a.shtml

for books check ciscopress web site:

http://www.ciscopress.com/articles/article.asp?p=31464&seqNum=1&rl=1

HTH

Do rate if it does help

Re: Backup of Firewall configuration

Hi Alan,

Try this.

Reconfigure your tftp-server command as follows( include the / the pathname of the file)

tftp-server inside xxxx.xxxx.xxxx.xxxx /pixconfg

then just issue the command "write net :" to save the pix configuration to the tftp server as the file naned pixconfig.

Here is the explanation from cisco doc.

"The path name you specify in the tftp-server is appended to the end of the IP address you specify in the configure net and write net commands. The more you specify of a file and path name with the tftp-server command, the less you need to specify with the configure net and write net commands. If you specify the full path and filename in the tftp-server command, the IP address in the configure net and write net commands can be represented with a colon ( : ). "

This is the URL for that document.

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a00801727ae.html#wp1026054

Let us know the result.

Hope this helps.

-VJ

Community Member

Re: Backup of Firewall configuration

the command is

write net TFTP_IP_address:filename

Make sure your TFTP server is setup properly to allow or prompt before writing and that you know the folder where the files are being kept.

Good luck.

Community Member

Re: Backup of Firewall configuration

Thanks. I've finally got it to work.

I had to set up the tftp server and also add a access-list entry for the server i was sending the config to.

But at least now i can get a config listing that i can study.

thanks again

306
Views
0
Helpful
6
Replies
CreatePlease to create content