networking , security

Sample – Device Configuration Backup Network Management Standard

April 23, 2013

Overview

Device configuration backup standard means that the running configuration must be saved into the router start-up configuration file first and then it must also be saved to an offline location a regional NMIS Archive server. To maintain the versions of the configuration files on the offline server first the existing configuration must be saved by running the back command on the existing file before over-writing it with the new version. The only protocols supported for saving the configuration file to the offline location are FTP or SCP. TFTP cannot be used to save the file to the archive location due security issues. Although a configuration file may be restored to the device using TFTP. There is a local ID created on the NMIS archive server called “cfgftp” that could be used to FTP or SCP files to the server. Network Management Team will run periodic audits to ensure that the running vs. start-up vs. achieved configurations match. The location on the NMS archive server where these configurations are archived is /tftpboot/. The following network standard template should be used to save the configuration file using the FTP protocol.

Standard Template

!
! FTP
ip ftp username cfgftp
ip ftp password [set password]

ip ftp source-interface [interface] <- Same interface used for the Tacacs source interface.
!