Intrusion Prevention
Reply
Contributor
NDCool
Posts: 243
Registered: ‎11-26-2007
0
Accepted Solution

How to save NSM Configuration

Hi Guys,

Can we save NSM config include all policy,role,and address object into local desktop??
so if necessary we can restore it from export file.

thnks

=ND=
Regards,

ND
Recognized Expert
Daniele
Posts: 164
Registered: ‎11-06-2007
0

Re: How to save NSM Configuration

Hi ND,
sure you can.
Go in:
/usr/netscreen/HaSvr/utils
and run:
./replicateDb backup

This will create a backup under the directory:
/var/netscreen/dbbackup/backup
where is the number of the day (0 Monday, 6 Sunday).

To be sure that the backup is complete, check the file:
/var/netscreen/dbbackup/backup/CompleteToken
This file has to be present and the date/time of the file has to be correct (ie. not from an old backup)

Hope this helps

Cheers!
--
Daniele
***Contributor at Router Freak blog***
Contributor
NDCool
Posts: 243
Registered: ‎11-26-2007
0

Re: How to save NSM Configuration

so how to restore the backup config?? we can't do in NSM application right?
Regards,

ND
Super Contributor
sylvain
Posts: 162
Registered: ‎12-20-2007
0

Re: How to save NSM Configuration

Hi NDCool,

No you can't do it via NSM GUI. Therefore there is a way to do it in cli :

Navigate in /usr/netscreen/HaSvr/utils and do a :
sh restoreDbFromBackup.sh BACKUP_DIRECTORY

In your case BACKUP_DIRECTORY should be :
/var/netscreen/dbbackup/backup1
or
/var/netscreen/dbbackup/backup2
or
/var/netscreen/dbbackup/backup ...

I ve done restores several time and never got an issue with this.

Sylvain
Contributor
NDCool
Posts: 243
Registered: ‎11-26-2007
0

Re: How to save NSM Configuration

Hi Silvain,

Thanks for ur attention,
I has trying to backup using this command :

tar cvf /var/netscreen/GuiSvr.backup.tar /var/netscreen/GuiSvr

tar cvf /var/netscreen/DevSvr.backup.tar /var/netscreen/DevSvr

and i think this is only copy and backup the guiserver/devserver folder. Then i restored it on new server and done.
All config and update attack included. But it's takes big space of storage.
How bout with this command "./replicateDb backup", does backup all config or the databases only??


rgds,
-ND-
Regards,

ND
Super Contributor
sylvain
Posts: 162
Registered: ‎12-20-2007
0

Re: How to save NSM Configuration

Hi ND,

You are not suppose to save /var/netscreen/GuiSvr & /var/netscreen/GuiSvr because NSM automaticaly do a clean backup in /var/netscreen/dbbackup/backup(day of the week)
With your method, it take a big place because your archive contains devices s ( FW and IDP ) logs ( /var/netscreen/devSvr/logs ). By default, NSM backup does not include device logs, that s why  it s smaller.

So as you said you can do your own backup via "replicateDb backup" or just do a "tar cvf /var/netscreen/dbbackup/backup(d of week"). These 2 way are similar and give you a package with config and database.

regards,

Sylvain
Contributor
NDCool
Posts: 243
Registered: ‎11-26-2007
0

Re: How to save NSM Configuration

[ Edited ]
Hi Sylvain, thanks for ur explain.
I will tested on my lab.

after i try,the backup take more than 400MB
btw, thanks to help.


thanks
-ND-
Message Edited by NDCool on 02-22-2008 10:15 AM
Regards,

ND
Visitor
piewacket
Posts: 8
Registered: ‎02-28-2008
0

Re: How to save NSM Configuration

can i just check...

Can i just copy the latest backup file automatically created by NSM eg /var/netscreen/dbbackup/backup1 from NSM to other media ( eg usb disc ) and this will be enough to use as a restore of the config of NSM in event of a total server lost.

Super Contributor
sylvain
Posts: 162
Registered: ‎12-20-2007
0

Re: How to save NSM Configuration

Hi piewacket

Yes it will be enought.

Just for your information, backup1 is not the last one. The NSM backup process create one backup a day every day of the week.
Do a ls -la in order to know the last one.

Regards,

Sylvain
Visitor
piewacket
Posts: 8
Registered: ‎02-28-2008

Re: How to save NSM Configuration

many thanks - have created an an archive file of latest backup and copied off to a usb stick

 

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.