Using A Script To Back Up And Restore Files; Prerequisites - Cisco PIX 500 Series Configuration Manual

Security appliance command line

Hide thumbs Also See for PIX 500 Series:

Table of Contents

Backing Up Configuration Files

The CLI lets you back up and restore individual elements of your configuration using the export and

import commands. To back up these files, for example, those imported via the import webvpn

command or certificates, follow these steps:

Issue the appropriate show command(s). For example.

hostname # show import webvpn plug-in

Issue the export command for the file you want to back up, in this example the rdp file.

hostname # export webvpn plug-in protocol rdp tftp://tftpserver/backupfilename

Using a Script to Back Up and Restore Files

You can use a script to back up and restore the configuration files on your security appliance, including

all of the extensions you import via the import webvpn CLI, the CSD configuration XML files, and the

DAP configuration XML file. For security reasons, we do not recommend that you perform automated

backups of digital keys and certificates or the Local CA key.

This section provides instructions for doing so, and includes a sample script that you can use as is or

modify as your environment requires. The sample script is specific to a Linux system. To use it for a

Microsoft Windows system, you need to modify it using the logic of the sample.

The existing CLI lets you back up and restore individual files using the copy, export, and import

commands. It does not, however, have a facility that lets you back up all ASA configuration files in one

operation. Running the script facilitates the use of multiple CLIs.

To use a script to back up and restore an ASA configuration, first perform the following tasks:

Another option is to use a commercially available tool. You can put the logic of this script into such a

Cisco Security Appliance Command Line Configuration Guide

Install Perl with an Expect module.

Install an SSH client that can reach the ASA.

Install a TFTP server to send files from the ASA to the backup site.

Managing Software, Licenses, and Configurations

Asa 5500 series