Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

backup procedure

Hello,

How can I do a backup for signatures settings on network sensor 4210 ? So, if my sensor lost the settings ( which is enable, which is on block…) , how can I put back in minimum time ?

Best regards,

Sorin PARLOG

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: backup procedure

If you are using an enterprise management tool like CSPM, Unix Director, or the new IDS Management Center (in VMS 2.1), then the configurations are stored in the tool's database.

You simply re-intialize (or even re-image the sensor) with sysconfig-sensor.

Then push back the last good configuration from the management station to the sensor.

If you are using IDM, and IEV in a small deployment (less than 3 sensors) then you can simply copy the different configuration files located in the /usr/nr/etc/ directory onto another box when ever you want to make a backup.

Then if your sensor gets corrupted you simply re-image, and run sysconfig-sensor to reset all of the network parameters.

Once your sensor network is re-initialized then simply ftp to the machine containing the old configuration files and pull them back to the sensor.

Then run nrstop and nrstart to start using the old configuration files.

NOTE: If you re-image the sensor, be sure to run the different sysconfig-sensor options before pulling down the old config files. Not all of the information in sysconfig-sensor is dircectly pulled from the config files.

For a list of the configuration files that you would want to backup refer to:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/0866_02.htm#xtocid21

1 REPLY
Cisco Employee

Re: backup procedure

If you are using an enterprise management tool like CSPM, Unix Director, or the new IDS Management Center (in VMS 2.1), then the configurations are stored in the tool's database.

You simply re-intialize (or even re-image the sensor) with sysconfig-sensor.

Then push back the last good configuration from the management station to the sensor.

If you are using IDM, and IEV in a small deployment (less than 3 sensors) then you can simply copy the different configuration files located in the /usr/nr/etc/ directory onto another box when ever you want to make a backup.

Then if your sensor gets corrupted you simply re-image, and run sysconfig-sensor to reset all of the network parameters.

Once your sensor network is re-initialized then simply ftp to the machine containing the old configuration files and pull them back to the sensor.

Then run nrstop and nrstart to start using the old configuration files.

NOTE: If you re-image the sensor, be sure to run the different sysconfig-sensor options before pulling down the old config files. Not all of the information in sysconfig-sensor is dircectly pulled from the config files.

For a list of the configuration files that you would want to backup refer to:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/0866_02.htm#xtocid21

99
Views
5
Helpful
1
Replies
CreatePlease to create content