cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
237
Views
5
Helpful
1
Replies

backup procedure

p.sorin
Level 1
Level 1

Hello,

How can I do a backup for signatures settings on network sensor 4210 ? So, if my sensor lost the settings ( which is enable, which is on block…) , how can I put back in minimum time ?

Best regards,

Sorin PARLOG

1 Accepted Solution

Accepted Solutions

marcabal
Cisco Employee
Cisco Employee

If you are using an enterprise management tool like CSPM, Unix Director, or the new IDS Management Center (in VMS 2.1), then the configurations are stored in the tool's database.

You simply re-intialize (or even re-image the sensor) with sysconfig-sensor.

Then push back the last good configuration from the management station to the sensor.

If you are using IDM, and IEV in a small deployment (less than 3 sensors) then you can simply copy the different configuration files located in the /usr/nr/etc/ directory onto another box when ever you want to make a backup.

Then if your sensor gets corrupted you simply re-image, and run sysconfig-sensor to reset all of the network parameters.

Once your sensor network is re-initialized then simply ftp to the machine containing the old configuration files and pull them back to the sensor.

Then run nrstop and nrstart to start using the old configuration files.

NOTE: If you re-image the sensor, be sure to run the different sysconfig-sensor options before pulling down the old config files. Not all of the information in sysconfig-sensor is dircectly pulled from the config files.

For a list of the configuration files that you would want to backup refer to:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/0866_02.htm#xtocid21

View solution in original post

1 Reply 1

marcabal
Cisco Employee
Cisco Employee

If you are using an enterprise management tool like CSPM, Unix Director, or the new IDS Management Center (in VMS 2.1), then the configurations are stored in the tool's database.

You simply re-intialize (or even re-image the sensor) with sysconfig-sensor.

Then push back the last good configuration from the management station to the sensor.

If you are using IDM, and IEV in a small deployment (less than 3 sensors) then you can simply copy the different configuration files located in the /usr/nr/etc/ directory onto another box when ever you want to make a backup.

Then if your sensor gets corrupted you simply re-image, and run sysconfig-sensor to reset all of the network parameters.

Once your sensor network is re-initialized then simply ftp to the machine containing the old configuration files and pull them back to the sensor.

Then run nrstop and nrstart to start using the old configuration files.

NOTE: If you re-image the sensor, be sure to run the different sysconfig-sensor options before pulling down the old config files. Not all of the information in sysconfig-sensor is dircectly pulled from the config files.

For a list of the configuration files that you would want to backup refer to:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/0866_02.htm#xtocid21

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: