Backup / Restore Cisco 2911 Router with CCP

Hi guys ...

We have recently had a Cisco 2911 router installed and i am trying to find my way around it.
Before i mess anything up i'd like to be familiar with the best way to backup and restore the configuration. I have access to the Router through CCP (Cisco Configuration Professional) but not through Command Line as i don't currently know the enable or secret passwords (and i am not familiar with command line anyway)

Any advice would be appreciated.

Thanks

HICT

 
HICTAsked:
Who is Participating?
 
Marius GunnerudSenior Systems EngineerCommented:
To backup the config go to Configure > Utilities > Save Running Config to PC

to restore the configuration, open the Configuration Editor, and click I agree. In the Configure window, choose Import configuration from PC, and then click the replace running configuration button.

0
 
HICTAuthor Commented:
I'm about to add a new site-to-site VPN to this router, and i'm worried that i might knock out the existing VPN.

Following your instructions above, if the worst were to happen, would this restore back to before i started?

Thanks

HICT
0
 
Marius GunnerudSenior Systems EngineerCommented:
Yes, given that you have connection to the remote site and/or local site to issue the restore commands. basically it will replace the current running configuration with the configuration that you are importing.

This will take a backup of the running config. it is not taking a backup of the IOS Image.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
HICTAuthor Commented:
Thanks MAG03, sorry to be a pest, but what is the difference between the running config and the IOS image?

Should i be backing up both, and if so, how do i backup the IOS image?

Thanks
0
 
Marius GunnerudSenior Systems EngineerCommented:
Running config is the exactly that, it is the current configuration of the router.  The IOS image is the so called operating system of the the device (from the CLI you can see the image file by issuing the command show flash).

You should backup both running config and IOS image incase things go really bad. Now really bad means someone (an intruder or an administrator) erases the running config and/or IOS image then you have a backup you can restore from and minimize down time.  But for now when just configuring a VPN backing up the running config is fine.

I am not overly familiar with the CCP, am more familiar with the CLI, but to backup the IOS image might be located under Configure > Utilities >Flash File Management.......not 100% sure about this one.
0
 
HICTAuthor Commented:
Thanks MAG03 .. you seem to know more about CCP than most.
This is slightly off topic, but i'm going through the 'Site to Site VPN' wizard, and after entering the initial details (Interface, Ip address of peer pre-shared key), I get a Cisco CP Warning "Existing VPN tunnel will be reset to add this VPN configuration. Do you want to proceed?"

I'm a little concerened that this will wipe out our existing VPN. I need both.
Or does this mean it will merely refresh the VPN config and i will have both VPNs?

(I'm quite happy to put this in another question if you'd prefer?)
0
 
Marius GunnerudSenior Systems EngineerCommented:
I wouldn't think it would wipe out the config of the other VPN.  Are you applying the VPN to the same interface as the other VPN? or are you using tunnel interfaces, do you know?

but might be good to double check before delivering the commands to the router.
0
 
HICTAuthor Commented:
I am using the same interface as our existing VPN. (GigabitEthernet0/0)

Thanks
0
 
Marius GunnerudSenior Systems EngineerCommented:
Then I think that the existing VPN's crypto map interface configuration will be overwritten and thus the existing vpn will be brought down. To use the same interface for multiple VPN's I would suggest using Tunnel interfaces. Also you could look into using DMVPN (dynamic multipoint vpn) to minimize future configuration of expansion branch offices.

However I am not that experienced with CCP so am not certain how to configure tunnel interfaces using CCP.  If you were using the CLI I could have given you a config to work from to get this working.
0
 
HICTAuthor Commented:
Back to the original subject ... If i were to try VPN Wizard anyway :

a) could i restore the original VPN by using your method above through configuration editor?
b) how long would a restore take?
0
 
Marius GunnerudSenior Systems EngineerCommented:
A.) yes, as mentioned the config you will be restoring will overwrite the existing config.

B.) restore should only take a few seconds from when it starts
0
 
HICTAuthor Commented:
I've looked further into our existing setup, and it appears our existing VPN is set up as a tunnel (not through the GigabitEthernet0/0 as i first suggested. I may need to start a new question on setting up a tunnel/secure gre tunnel
0
 
Marius GunnerudSenior Systems EngineerCommented:
Not difficult at all to do. Might be good for a new question as the title change might help others in the future when they search for same issue.
0
 
HICTAuthor Commented:
Doesn't allow me to do a restore as in your first post, i get :

"Failed to apply configuration.  The configuration may contain one or more interactive configuration commands that are not supported in CiscoCP" after pressing 'replace running configuration' button
0
 
Marius GunnerudSenior Systems EngineerCommented:
does it give you a log of which config isn't supported?

Have you disabled telnet? I have heard of some cases where CCP will not write to the router because telnet has been disabled. enable it try the restore and then disable it later again.

are you sure you don't have access to the CLI? would be much easier from there.
0
 
HICTAuthor Commented:
Currently I don't have the enable or secret password.
0
 
Marius GunnerudSenior Systems EngineerCommented:
Not sure why the restore isn't working. Could be that there are some commands that need to be entered in specific order which the restore is not doing.

Have been looking through some online documents and haven't found an explanation for why it isn't restoring yet.
0
 
HICTAuthor Commented:
i think i will need to speak to the install team that put this router in place, and see what they can tell me.

Thanks
0
 
Marius GunnerudSenior Systems EngineerCommented:
If you can get the enable password backing up the config is simple.
0
 
HICTAuthor Commented:
Thanks MAG03.
I will put your first post down as the solution as i am convinced this would work if CCP were setup correctly.

Thanks
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.