Network configuration backup

By nabz0r
in Smart Home, Network & Security

 Share

Recommended Posts

Veteran

nabz0r Veteran

Posted
  • Veteran
Posted

Hi guys,

 

I was wondering and curious, how you guys do when you take backups of your devices? Automated or manually?

 

I am tasked to find a solution to take automated backups of our network devices and I can't decided what to do as there are some ways to do this. Rancid which I have heard ALOT of and I think it is one of the best ways to take backups as it send mails as soon as you change configuration it will notify you with the change. BUT since I have no Linux experience and the guides I have seen is difficult to follow, so I somehow have to look for another solution.

 

Cisco switches and routers have something called "archive" which sends the configuraion to a tftp, scp, ftp, etc and this is good as well, but it doesn't work with ASA. :/ ... I have tried this and it works perfect with Windows (tftp64 server) but again since we have an ssh server and want to store these there, I faced some problems, don't really know why.

 

I have done the following but none of them works when I try to send it to a tftp server in Linux. If you have done it or can assists I'd be thankful and your help will be very appreciated.

xxx-r1(config)#archive
xxx-r1(config-archive)#path tftp://10.1.1.1/$h
xxx-r1(config-archive)#exit
xxx-r1(config)#exit


xxx-r1(config)#archive
xxx-r1(config-archive)#path tftp://10.1.1.1/backup/$h
xxx-r1(config-archive)#exit
xxx-r1(config)#exit

Note: /backup/ = is the folder I have created in the tftpboot directory.

touch /tftpboot/backup

chmod 777 /tftpboot/backup AND chmod 666 /tftpboot/backup didn't really work for me. :(
 

Link to comment
https://www.neowin.net/forum/topic/1219515-network-configuration-backup/
Share on other sites
Grand Master

+BudMan MVC

Posted
  • MVC
Posted

rancid is better choice, then doing it on each device.

Here is a really easy to follow guide

https://www.edge-cloud.net/2013/05/rancidtrac-on-ubuntu-12-04-lts/

I could prob setup a vm for you.. Where you would just have to edit a couple of things like your email server and addresses and your login creds and devices.

Not FREE - but pretty reasonable pricing starting at $750

http://www.solarwinds.com/kiwi-cattools.aspx

Any monkey could set it up ;)

BTW: "BUT since I have no Linux experience"

But you list Ubuntu, Debian and Backtrack right under your avatar -- btw backtrack is depreciated.. kali is the new version http://www.kali.org/

Veteran

nabz0r Veteran

Posted
  • Author
  • Veteran
Posted
  On 26/06/2014 at 18:49, BudMan said:

rancid is better choice, then doing it on each device.

Here is a really easy to follow guide

https://www.edge-cloud.net/2013/05/rancidtrac-on-ubuntu-12-04-lts/

I could prob setup a vm for you.. Where you would just have to edit a couple of things like your email server and addresses and your login creds and devices.

Not FREE - but pretty reasonable pricing starting at $750

http://www.solarwinds.com/kiwi-cattools.aspx

Any monkey could set it up ;)

BTW: "BUT since I have no Linux experience"

But you list Ubuntu, Debian and Backtrack right under your avatar -- btw backtrack is depreciated.. kali is the new version http://www.kali.org/

LOL! This monkey couldn't do it. Yes, I do have worked with them and I find it VERY hard to understand and work with. Debian, Ubuntu and BT has a GUI and can't be used not a text based like Rancid. I used BT almost daily at my previous job, but not here. Here we use Nesus instead. :p .. I use both Debian and Ubuntu at home and never had problem with since I don't do advanced stuff, only nomal user stuff.

 

That would  be great if you could assist me with Rancid.

 

CatTools is not an option as it is expensive and since there are free options, I don't think my boss would like to pay for it. The other day I made him buy PRTG. lol

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

So I was walking through the guide - and looks good, but something must of changed between the 12 and version of trac he was using when the guide was written for

The rancid part is working great. even got it working with my home sg300, which not really supported out the box because its not a true cisco ios.. quick google found this https://github.com/chrpinedo/rancid-cisco-sb

But I had to add

[components]

tracopt.versioncontrol.svn.* = enabled

to the trac ini.

So looking good - had to deploy my clean linux vm, and doing this while real work keeps bugging me ;) and remotely to my home network - and still under couple hours from nothing to running system. Would of been real quick if didn't have to look up how to add my sg300 line - spent time troubleshooting why I was getting timeouts in the rancid logs when I know for a fact the login was working. Once I started manually running through the commands rancid does did I figure out why the problem and had to google for how to add the sg line to rancid.

You should really take a shot at the guide I linked too - just walked through it and other than the [components] part I posted above its still right on for a ubuntu 14.04 install.

But sure if you want I could create a working vm for you with info of what to edit to have it talk to your boxes.

post-14624-0-36382000-1403817596.png

Again - walk through that guide its really spot on, you really don't have to understand anything about linux to copy and paste, etc.

Veteran

nabz0r Veteran

Posted
  • Author
  • Veteran
Posted

Thanks BudMan. I just finished with a new VM and now I am going to walk through the guide you linked and if I have some question, believe me I am going to bug you. lol

 

Edit: Already stuck at "Device login credentials via cloginrc"

That file doesn't exists and they didn't mention how to create it.

Grand Master

Haggis Veteran

Posted
  • Veteran
Posted

yeah dude just do

 

vi .cloginrc

 

I use vim i just prefer it but nano is also good :)

 

this might help with commands :) takes a bit of getting used to

 

http://www.tldp.org/LDP/intro-linux/html/sect_06_02.html

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

Just noticed you even list the touch command in your OP, and chmod.. And you don't know how to create a file? Well now that I reread that - touch backup would create a file called backup, not a dir. But you use /backup/$h which would say backup is a dir to me and would need to be created with mkdir not touch.

If you want I can clean up my VM I created yesterday and get it to you. It vanilla, bare min install of ubuntu server 14.04 - rancid and trac running on it. I didn't bother to setup email - but could do that before I make it a rancid appliance.. Wonder if others would have use of that - never really figured as much since there are so many guides on setup of rancid and it really only takes a couple of seconds to get it going. And you don't really need a web interface to look at the configs if your just wanting to have backups. You can view them right in the rancid dir.

post-14624-0-69973800-1403868938.png

The nice thing with using something like trac is the easy clean way to view what actually changed.. Here I just admin downed a port not using - turned off snmp and set the port to protected.. And that is clear as day when looking at diffs between revisions.

post-14624-0-44438400-1403869327.png

Veteran

nabz0r Veteran

Posted
  • Author
  • Veteran
Posted

Ah, I thought that it should be there and I don't need to create it myself. Since it had .cloginrc I thought I can't create it with touch (i don't even know what that means). Anyway, I am going to work with it now and see if I can go anywhere, otherwise I will post again. :D

 

I'd like to try it myself, but I get stuck I am going to ask you to send me yours. I like the GUI so I want it too.

Veteran

nabz0r Veteran

Posted
  • Author
  • Veteran
Posted

Nah, this is pissing me off more and more.

BudMan, how about doing some TV instead of doing it in your own VM of course if you have time and willing to do so. :)

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

Yeah we could do that - lets setup a time.. My wife is gone all weekend (girls weekend), but I am going to the track tmrw! My son knows the owner of horse in the 8th race at Arlington tmrw.. Going to go watch it run.. Stopping for beers on way home tonight, but sure we can find a time.

Prob got an hour left here, no much going on -- send me a pm with the details if now is good.

This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.

  • Posts

    • Senua's Saga: Hellblade II to get 60FPS mode, dev commentary, and more alongside PS5 launch

      By +Random Stranger · Posted

      I managed to buy the original Hellblade: Senua’s Sacrifice through the ps app on my phone even though it was not showing up in the ps store when browsing from my ps5 it was buggy but more or less O.K.ish to play… I wonder if this original added version is funny fixed up for ps5 play
    • Microsoft failed to fix Windows Vista startup sound in Windows 11, but it is not giving up

      By LiLmEgZ · Posted

      Download old Windows Startup Sounds @ https://www.winhistory.de/more/winstart/winstart_en.htm
    • Microsoft failed to fix Windows Vista startup sound in Windows 11, but it is not giving up

      By binaryzero · Posted

      Pffft no
    • Surface Copilot+ PCs coming to classrooms from July 22, turbocharged with on-device AI

      By zikalify · Posted

      Surface Copilot+ PCs coming to classrooms from July 22, turbocharged with on-device AI by Paul Hill Microsoft has announced that it’s launching the new Surface Pro 12-inch and Surface Laptop 13-inch models specifically for education customers from July 22. The Redmond giant said that these devices are being launched as a direct response to feedback from educators who want practicality and ease of use in their diverse classrooms. These are both Copilot+ PCs so teachers and students will be able to leverage the latest AI features thanks to the dedicated Neural Processing Units (NPUs) that allow for on-device AI. The on-device AI, aside from delivering well-known features like Recall, will enable new education features such as a new app Microsoft is working on called Microsoft Learning Zone. Microsoft Learning Zone will allow teachers to create personalized lessons by adapting content from trusted sources like OpenStax, generating interactive games with Kahoot, and tracking students progress. Microsoft expects this to help teachers save time and deliver a more flexible and engaging classroom. Another AI feature that will be available is Click to Do. This lets students highlight text or images and get contextual help. It can be used to summarize a paragraph or explain a graph. To activate it, students can press the Windows key and click. This feature runs entirely on device so inputs to the AI are secure and you don’t need to ever worry about third-parties seeing. Finally, these devices will also have accessibility features such as Voice Access which lets you navigate with speech and Live Captions which provide real-time subtitles and translations for spoken content. These make the devices more inclusive for students with disabilities. Regarding security, these laptops come with the Microsoft Pluton security chip directly integrated into the processor for protecting sensitive data. It can protect data such as passwords and sign-ins, even if your device is stolen. Thanks to automatic Windows Updates, schools never need to worry about falling behind on updates either. With the impending demise of Windows 10 in mid-October, these Surface devices arrive just in time for schools looking for somewhere to upgrade to. Aside from AI features and security, Microsoft is also pushing other key features including easy repair with replacement components at the Microsoft Store and iFixit, their lightweight design and all-day battery life making them ideal for carrying and surviving the school day, and their compatibility with popular education apps such as TestNav, Google Classroom, Minecraft Education, and Adobe Express.
    • Meta will use AI to summarize your WhatsApp messages

      By Tuskd · Posted

      They trust me! Dumb f#@/s!

  • Recent Achievements

    • Rising Star
      Phillip0web went up a rank
      Rising Star
    • One Month Later
      Epaminombas earned a badge
      One Month Later
    • One Year In
      Bert Fershner earned a badge
      One Year In
    • Reacting Well
      ChrisOdinUK earned a badge
      Reacting Well
    • One Year In
      Steviant earned a badge
      One Year In

  • Popular Contributors

    1. 1
      +primortal
      545
    2. 2
      ATLien_0
      205
    3. 3
      +FloatingFatMan
      170
    4. 4
      Michael Scrip
      151
    5. 5
      Som
      131
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!