CSM 4.1 - ASA desfichiersde configuration backup via TFTP

Similar Questions

• ASA - create a backup via VPN route

  I have a normal life (non - VPN) connection point to point between 2 x ASAs and I would like to create a link of relief using a VPN on our corporate network cloud. I tried to do, following configs example Cisco but the VPN is not upward when the route taken breaks down.

  NB. This isn't a default route, just a road to one 27.

  Here's the configs of sla/track (I'm confident with the VPN configuration, why have not included here):

  FW1

  Route between sites 192.168.61.0 255.255.255.224 10.20.30.3 1 track 1
  Route corp-outside 0.0.0.0 0.0.0.0 10.92.215.225 1
  Route 192.168.61.0 255.255.255.224 corp-outdoor 10.92.215.225 100

  monitor SLA 100
  site type echo protocol ipIcmpEcho 10.20.30.3 inter interface
  NUM-package of 3
  frequency 10

  monitor als 100 calendar life never start-time now

  track 1 rtr 100 accessibility

  FW2

  Route between sites 192.168.60.0 255.255.255.224 10.20.30.1 1 track 1
  Route corp-outside 0.0.0.0 0.0.0.0 10.72.215.225 1
  Route 192.168.60.0 255.255.255.224 corp-outdoor 10.72.215.225 100

  monitor SLA 100
  site type echo protocol ipIcmpEcho 10.20.30.1 inter interface
  NUM-package of 3
  frequency 10

  monitor als 100 calendar life never start-time now

  track 1 rtr 100 accessibility

  When I stop one side track interface, the route taken is removed from the routing table and replaced by the backup through the interface corp-outdoor path.

  However, the VPN is not running and I see a lot of:

  Could not locate the next hop for prod-inside:192.168.61.8/51583 to inter-site:192.168.60.5/11322 routing TCP

  .. .errors in the newspapers. You can see that packets are still trying to be sent to the interface between the sites , which is no longer in the routing table.

  Any help appreciated

  Hello Handsy,

  Simply by curiosity, asuming that you are pointing to the internet to a public IP address, traffic from when creating the exemption nat for the site to the site you use the command "route search"?

  Example for nat exemption:

  NAT (inside, outside) static source local-Lan Lan Local static destination remote control Remote-Lan Lan non-proxy-arp-search to itinerary.

  The route search command should make the package to look first in the routing table before performing the nat and therefore to follow the correct path.

  If you can run a command Packet-trace to check the path followed by the traffic while testing the option from site to site.

  for icmp:

  Packet-trace entry icmp 8 0 detailed

  for tcp (based on your timeline):

  Packet-trace entry tcp 192.168.61.8 51583 192.168.60.5 11322 detailed

  Kind regards

  Miguel

• SGE2010 how to trigger backups via SNMP?

  Hello

  I've tried, so unsucessfully, to trigger backups on our switches SGE201 TFTP server. I have backups testesd TFTP through the web interface, and who does not. I need SNMP as I need a method for trgiger scriptable backups on a regular basis. I run the query SNMP from a RedHat Linux server. So far, I have the following query worked, but it is a failure:

  snmpset - v - 1 c COMMUNITY SWITCH. MGMT. JPM ADDRESS 1.3.6.1.4.1.9.6.1.101.87.2.1.7 I have 2 1.3.6.1.4.1.9.6.1.101.87.2.1.8 I have 3 1.3.6.1.4.1.9.6.1.101.87.2.1.9 has TFTP.SERVER.IP.ADDRESS 1.3.6.1.4.1.9.6.1.101.87.2.1.11 s 1.3.6.1.4.1.9.6.1.101.87.2.1.17 FILE name I have 4

  The error I get is generic, and the same query failed on several switches operating the 3.0.0.18 software. The switch is set with the community having full access from the IP address of the SNMP-admin server.

  If someone here was able to run SNMP triggers backups and would be ready to post their query and/or software that would be greatly appreciated. Any other suggestions, comments or tips are also welcome. Thank you for your time.

  Jeff,

  The procedure to download or update the config via SNMP is as follows:

  (1) download the MIB files that we officially freed from cisco.com

  http://www.Cisco.com/Cisco/software/release.html?mdfid=282414069&flowid=3650&softwareid=283415684&release=3.0.0&relind=available&rellifecycle=&RelType=latest

  (2) compile the MIB on MIB browser in format for example MG-SOFT, Kortright. Make sure that there is no error in compilation.

  (3) configure SNMPv2 or SNMPv3 accordingly on switch SGE2010

  (4) search for the CISCOSBCopy.mib file.

  The OID is SNMPv2 - SMI:enterprises (1.3.6.1.4.1) .cisco (9) .otherEnterpise (6) .ciscosb (1) .odm1 (101). CISCOSBCopy (87)

  With the help of rlCopyTable (2), create a new entry on this particular table:

  a. rlCopyRowStatus: 4 (createAndgo)

  b. rlCopySourceLocation: 1 (local)
  c. rlCopySourceIpAddress: 0.0.0.0

  d. rlCopySourceUnitNumber: 1
  e. rlCopySourceFileName: (empty)
  f. rlCopySourceFileType: 3 (config startup), 2 is for execution of config

  g. rlCopyDestinationLocation: 3 (tftp)
  h. rlCopyDestinationIpAddress: 192.168.10.22 (ip address of the tftp server)

  i. rlCopyDestinationUnitNumber: 1
  j. rlCopyDestinationFileName: 0 x 61: 62:63 (in hexadecimal, abc)

  By doing this, it should be able to backup startup config devices unit to remove the tftp server.

• How do I configure backup so it retains only the 3 most recent backup games?

  How do I configure backup so it retains only the 3 most recent backup games?

  > don

  Original title: Windows backup

  Hi Don,

  Welcome to the Microsoft community where you can find all the answers related to Windows.

  According to the description, you are having problems with Windows backup utility.

  Unfortunately, you cannot set a number for the amount of backup sets that you can keep. Once you perform a backup it will overwrite the existing backup.

  Meet us if you encounter problems with Windows backup or any Windows question, and we would be happy to help you.

  Good day!

  Hope this information helps.

• The TMS Configuration backup

  I am a rookie with the systems and need help. I set up a backup on TMS (System > Configuration > perform backup) for our VCSC and VCSe a few days ago. I did not specify a time and expected to start immediately and run a backup on the ends of two infrastructure.

  But instead of starting, when I look in the systems > Configuration > Backup/Restore activity status indicator of progress set to 0% and remained at 0% since then.

  I did something wrong? Is there a journal I should look to see a mistake or another mssage status?

  Paul

  Hello

  If the settings tab is greyed out then you probably problem of connectivity with VCS. just try to purge the VCS of the list (do not delete but purge it) and re - add new. see if you can get the tab activitated. Also browse CVS to the system > external administrator and check if the connection is active. You can get your VCS, directly from respective VCS Server backup by navigating to the maintenance > backup and restore

  Best regards, Ahmad

• Backup via USB in windows 8.0

  I have problems with the backup of files on a flash drive USB on windows 8.0.I go to control panel and go to the backup files. I turn disc on which is F and it says that it cannot identify? Can anyone help with this problem.

  Hi David,

  Thanks for posting your query in Microsoft Community.

  I imagine the inconvenience that you are experiencing and will certainly help you in the right

  direction to solve the problem. However, I would be grateful if you could answer a few questions to refine the question in order to provide you with better assistance.

  1. How do you try to back up files?
  2. Is your USB detected otherwise or if you are able to open the drive through Windows Explorer?
  3. Do you have an error message when you plug in your USB key?

  First, I suggest you refer to the following steps to back up your files using the recovery of files in Windows 7.

  (a) press the Windows key + X , and then select Control Panel.

  (b) click on recovery of Windows 7 file.

  (c) click configure backup.

  (d) follow the instructions on the screen to save the files to a drive.

  If the drive is still not detected, then try troubleshooting steps for the USB ports. Check the following methods and if they are useful.

  Method 1:

  Please try the fixit provided below which will help you solve common problems associated with not getting devices not detected.

  Hardware devices do not work or are not detected in Windows

  If method 1 does not work, try Method 2.

  Method 2:

  Remove all USB devices connected to the computer (except keyboard and mouse) and reinstall all USB controllers.

  1. Press the Windows key + X, click Device Manager.
  2. In the list of the categories of equipment, locate and expand Bus USB controllers.
  3. Right-click every device under the Bus USB controllers node and then click Uninstall to remove them one at a time.
  4. Restart the computer and let the USB controllers get reinstalled.
  5. Plug in the removable USB device and test to make sure that the problem is solved.

  Hope this information is useful. Let us know if you need more help, we will be happy to help you.

• CONFIGURATION BACKUP OPTIMIZATION;

  Hi all
  
  I have a doubt in RMAN - "CONFIGURATION BACKUP OPTIMIZATION ON;
  
  Here it is the characteristics of this RMAN parameters
  

  In order to safeguard the area of flash itself with RMAN recovery, you must set configuration backup optimization on IT.
  Definition backup optimization on stop backups of read only tablespaces (RTO), whenever a backup is valid of the storage space exists in the RMAN catalog database.
  If backup optimization is enabled, RMAN ignores backups of archived logs that have already been backed up on the allocated device.

  I hope it's okay.
  
  Here's my Question:
  
  (D) I took a full backup and its valid, after a few minutes take another copy of the same database backup at this time here which should RAMN do this according to the highlighted above (* BOLD *) sentence.
  
  my doubt is:
  
  D2) I took the backup of repositories as below:
  

  RMAN > backup tablespace system, applehut;

  And this command brings me a valid backup in my local disk. After a minute, I wanted to take another tablespace, including the previous backup:
  

  RMAN > backup system sysaux tablespace undotbs1, applehut;

  This time also the RMAN is not omit tablespaces which already took a min before! Why this is happening, because according to the optimization strategy must omit the old right of tablespaces... I am right please clarify me if am wrong!
  
  Please someone answer me...
  
  
  Concerning
  HAMEED
  
  Published by: hamza on May 19, 2011 02:49

  It will omit the tablespaces in offline mode only

  OPTIMIZATION of the BACKUP of the databases is to Tablespaces that are READ only.
  Do not test by setting a Tablespace Offline. Set the Tablespace READ ONLY to understand the functioning of the BACKUP OPTIMIZATION.

  Hemant K Collette

  Published by: Hemant K grapple on May 19, 2011 22:33

• Copy startup-config for pix via TFTP

  Where am I missing it? I know it's possible to copy a config pix down via Tftp using the

  WR net tftpIP: filename

  How can I do the reverse copy, the startup-config for the pix using tftp.

  Easy to do with a router or a switch. I don't see any docs on ORC that specify where to copy the startup-config.

  Hello

  Use the Net Config command

  http://www.Cisco.com/univercd/CC/TD/doc/product/iaabu/PIX/pix_sw/v_63/cmdref/c.htm#wp1055799

  Thank you

  Nadeem

• Backup configuration ESXi via PowerCLI

  Hello.

  Is it possible with PowerCLI (similar to the RCLI) to back up and restore the configuration of an ESXi host and how if possible?

  Or should we use the beast ulgy Pearl for this?

  Thanks for your help.

  Kind regards

  goppi

  Perl (esxcfg - cfgbackup.pl) both PowerCLI uses the vSphere API to deliver a configuration ESXi backup using BackupFirmwareConfiguration and RestoreFirmwareConfiguration

  Here is a PowerCLI script that seems to do the job: http://waynes-world-it.blogspot.com/2009/08/vmware-powercli-backup-esxi-40-firmware.html (have not tested personally)

  =========================================================================

  William Lam

  VMware vExpert 2009

  Scripts for VMware ESX/ESXi and resources at: http://engineering.ucsb.edu/~duonglt/vmware/

  repository scripts vGhetto

  VMware Code Central - Scripts/code samples for developers and administrators

  150 VMware developer

  Twitter: @lamw

  If you find this information useful, please give points to "correct" or "useful".

• New ASA/VPN configuration

  So, I am looking to add one of my spare 5510 firewall to my secondary network as a vpn connection.

  All I want this new ASA to do is handle my site anyconnect VPN connections.  I'm pretty new to ASAs if any help would be great.  I know how to create a new access VPN on my ASA and I added a NAT for my inside and outside traffic to my new Pool of IP VPN.

  My question is, since it's only for the VPN and I want all my current internal traffic to continue to the asa 5510 existing routing, do I have to enter the ACL to my new single AAS of VPN?  ACLs are used for VPN traffic and do I need them to traffic the route via VPN?

  I'll put up inside interface of connection to one of my main Cisco switches and the outside interface connects to my DMZ switch on the new ASA only VPN.

  Thank you

  I don't know if I am how you connect to the external interface of single ASA VPN. Normally, in this type of installation, we would see the ASA VPN "in parallel" with the perimeter firewall.

  You mention the DMZ switch that threw me a little. If you are in France through your main firewall and go to single ASA VPN via the DMZ then Yes you will need to allow several open ports (protocol 50, udp/500, tcp/443 among others) and may have to do some other techniques (NAT - T, etc.) depending on the type of remote you are implementing. That's why we rarely see this configuration used - it adds a good dose of complexity without significant benefit.

  When the old facility is used, you need to switch internal to know to route traffic to the pool VPN through the only ASA VPN inside the interface. A static route is more often used, although you can use OSPF or EIGRP if you wanted to.

  Should generally not be any access list that VPN traffic around the Bank access lists incoming interface. Back to remote clients traffic is coming from inside and out through (and is usually part of anestablished connection) so no access list is necessary inside.

• automatic backup via timecapsule eventhough WiFi is disabled?

  How this work? I have the timecapsule connected via cable and wireless. I have most of the time the wireless not enabled. But still, the time machine related backups successfully. Not timecapsule active wireless connection automatically?

  Thank you

  René

  Time Capsule cannot control the wifi on your Mac.

  For clarity, you have your desktop Mac Pro, right?

  I ask because many users mistakenly post in this forum (Mac Pro desktop computer) when they really have a MacBook Pro.  With laptops Mac, the Mac will still make hourly backups not connected to the TM volume and when it is then connected to the volume TM backups will be written on this volume and deleted the Mac.

  On the time Machine local snapshots - Apple Support

• Z210: Bad support/problem with recovery of an Z210 system when changing the RAID configuration backup

  My Z210 accompanies stripped Bay RAID-0, which currently consists of 2 x 1 TB HDD where the OS partition. I want to change that in RAID-1 mirror, but as the application of TSRI does no such RAID level migration, I thought I would try another approach.

  As a solution, I'd do a backup using the Windows backup and restore application. Then, I would change the table using the Boot ROM TSRI before restoring the backup to this new array. But obviously backup 1.9 TB in a table of 932GB will not

  So, to make a backup, I firstly disabled 'System Protection' and the file 'Page '. This allowed me to reduce the OS partition to about 50 GB using disk management. Then I re - activate 'System Protection' and the 'Page file' before making the backup and the creation of a system recovery disk. This resulted in a backup of 35 GB that I stocked up on a USB external drive. And now a backup of 35 GB can fit on my reconfigured 932GB RAID - 1 mirror

  As such, I cold booted my system and during the boot process, I pressed CTRL-I to get the State of mind RAID Intel Boot ROM. you, CTRL-I've worked only if I started cold and the HP USB keyboard directly connected the first USB slot at the back of the system. The first USB slot is at the top left when you look at the back with the portrait of the tower. Connect the HP USB keyboard in USB port or in the hub of my Dell monitor does not allow me to access the ROM to Boot Intel RAID!

  HP should really study this fault

  In any case, when I could access the Intel RAID Boot ROM, I deleted the RAID-0 stripped existing and created a new RAID-1 mirror. Obviously, the process is destructive and wipe the BONES of the table but that's what my backup was to

  Then I started on the Windows system recovery disk, plugged the USB external drive and proceeded to recover my system.

  Everything worked as expected with the operating system partition uses about 50 GB. A simple trip to disk management enabled me to extend the volume to occupy the space allocated, as presented by the RAID-1 array. As such, I find myself with about 932 GB partition that appear in the windows disk management tool. After a check disk and reboot (which fixed some minor issues) all seemed well.

  But no, everything was fine

  Well that ROM boot RAID Intel sees that a mirror RAID-1 about 932 GB and the operating system sees a partition about 932 GB, both as expected, demand for Intel RST in windows States the following:

  

  I don't seem to have indication of what type of table, it is, an options to change the name of the table or an option to check the integrity of the array through the TSRI application in windows. If something is screwed

  But after the update for the application of iRST version 10.6.0.1002 Intel (the newest HP of) version 11.2.0.1006 (version Intel got very practice), the question seems to correct itself. Now the RAID, Windows boot ROM and the request of TSRI in Windows all agree that the table is indeed a mirror RAID-1 932 GB.

  

  I don't know what caused the problem, if it's related to something that was wrong with the process that I used, if she is simply resolved by reinstalling driver, or if this is a fix for a known issue that Intel has included in their questions later from the pilot.

  But what I know is that Intel has resolved a number of issues in the version 12.9.0.1001 driver (which is the latest version for the Cougar Point chipsets) compared to the old driver version 10.6.0.1002 HP has on its support page for the Z210.

  And HP seems unwavering in his lack of interest in the Intels 12.9.0.1001 test pilot and then make it available on its support page for what is a product still under warranty

  It is a mediocre service if you ask me...

  Some HP forum administrator or HP support person hide these forums should impose it in the HP management station and get it looked at. The Z210 is still under warranty for some customers and HP needs to pick up the latest drivers available to all suppliers, test them and then release them to their customers via the support page for this product. All the rest is little change us all.

  I was able to resolve the application problem Intel RST by updating to the latest v11.2.0.1006 Intel driver but it has highlighted a few points that HP should address, see linked post above.

  PS: Add this post so I can mark the thread as solved.

• How to set the parameters of "Configuration ThinPro" via the HP Device Manager

  Hello

  Maybe I'm blind, but how can I set the settings in "Setup ThinPro', accessible from

  ThinPro Control Center-->

  Control Panel-->

  Setup-->

  Configuration ThinPro

  through the HP Device Manager? These parameters allows to use a very strict kiosk mode, which we want to deploy. So far I found just to solve this problem through a complete picture, but this isn't a solution for me.

  I hope that I have forget something or you have another clue.

  Concerning

  Looks like there is no direct way via the HP Device Manager. Now, I manually configure a thin Client and save the registry.xml that I can ride with other devices.

  Concerning

• Software BlackBerry BB link do not backup via cable, wifi sync still works

  Hello a few months ago, I noticed my classic used BB connect via cable to the BB link. Yes, I tried other ports and other cables. Yes, he stays cool and yes I see classic windows Explorer if really the cable and port are working well.

  But the cable is required for backup of BB. Shame, I'm so hot on any other data PC returns with several internal & external readers.

  I don't remember if it was after a device OS updated. as I only need to back up once a month or more.

  I read the forum seen reloading BBLInk. did not work. I went to re - download link, but I see that my version is 1.2.3.56 and download day is 1.2.0.52 which seems backwards.

  All thoughts, I will try this version first?

  (why we are forced to update BB OS with bl * daily messages dy practically forcing us to be updated)

  with the general 7/10 s/o updates cause more problems than they solve - if it ain't broke, don't fix it.

  SOLUTION - BOOM. (Problem when connected via the LINK says BB cable still disconnected)

  I tried to install on a different pc with nothing doesn't so I thought to be a thing of the phone.

  parameters--> storage and access--> access USB--> EXTINCTION mass storage mode

  (I thought by activating this option it permits mass storage at the same time as connected back to the top because my Bold9900 did not allow this simulateously).

  PLUGGED in DEVICE NEW [even if when I installed the last link it also installed mix & drivers] WHEN I PLUGGED in, the UNIT has GIVES ME OPTION INSTALL the DRIVERS. MASS STORAGE; SD ACCESS; IGNORE.

  Select the DRIVER INTALL

  Drivers have been installed from the device to the PC, a new icon in the systray, click on the drivers have been installed, but first item says "DEVICE DISCONNECTED", so when pilots I finished DEVICE UNPLUGGED AND re PLUGGED & BBLINK BOOM now says device has been plugged in.

  resolved, return to fact & done.

• the ASA 5505 configuration

  Hey guys

  I have a server that accepts traffic on a port within my network and external clients need to access this server. the nat and accesslist works well, but it is a matter of wait time and connection failed... Note that without the client server asa directly works fine... and note also that the traffic is encrypted (ssl)... are there additional provisions that I have to configure? y is it expire? Packet Capture see traffic from the outside to reach inside the interface but no response from the inside to the outside...

  I don't have that only one access list reloads the traffic from the outside to the server and a nat rule.

  advice needed...

  Thank you

  Hello

  So from what I understand

  "inside the xxx.114 interface the default route on the server is xxx.1 which is one interface on another asa.

  This means that the default route on the server is an another ASA. It won't work unless you apply TCP statebypass.

  ASA is a statefull firewall. This means for the TCP IP, always see two way traffic. If SYN crosses an ASA should see SYN/ACK back. If an ASA did not syn and sees syn/ack due to asymmetric routing, is wrong in the wok.

  Change the default route in the same ASA server or configure TCP statebypass (which is not recommended however).

  Thank you