Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Backup / Restore Cisco 2911 Router with CCP

Posted on 2011-09-21
20
Medium Priority
?
1,828 Views
Last Modified: 2012-05-12
Hi guys ...

We have recently had a Cisco 2911 router installed and i am trying to find my way around it.
Before i mess anything up i'd like to be familiar with the best way to backup and restore the configuration. I have access to the Router through CCP (Cisco Configuration Professional) but not through Command Line as i don't currently know the enable or secret passwords (and i am not familiar with command line anyway)

Any advice would be appreciated.

Thanks

HICT

 
0
Comment
Question by:HICT
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 10
  • 10
20 Comments
 
LVL 17

Accepted Solution

by:
Marius Gunnerud earned 2000 total points
ID: 36578590
To backup the config go to Configure > Utilities > Save Running Config to PC

to restore the configuration, open the Configuration Editor, and click I agree. In the Configure window, choose Import configuration from PC, and then click the replace running configuration button.

0
 

Author Comment

by:HICT
ID: 36579062
I'm about to add a new site-to-site VPN to this router, and i'm worried that i might knock out the existing VPN.

Following your instructions above, if the worst were to happen, would this restore back to before i started?

Thanks

HICT
0
 
LVL 17

Expert Comment

by:Marius Gunnerud
ID: 36579092
Yes, given that you have connection to the remote site and/or local site to issue the restore commands. basically it will replace the current running configuration with the configuration that you are importing.

This will take a backup of the running config. it is not taking a backup of the IOS Image.
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 

Author Comment

by:HICT
ID: 36579099
Thanks MAG03, sorry to be a pest, but what is the difference between the running config and the IOS image?

Should i be backing up both, and if so, how do i backup the IOS image?

Thanks
0
 
LVL 17

Expert Comment

by:Marius Gunnerud
ID: 36579183
Running config is the exactly that, it is the current configuration of the router.  The IOS image is the so called operating system of the the device (from the CLI you can see the image file by issuing the command show flash).

You should backup both running config and IOS image incase things go really bad. Now really bad means someone (an intruder or an administrator) erases the running config and/or IOS image then you have a backup you can restore from and minimize down time.  But for now when just configuring a VPN backing up the running config is fine.

I am not overly familiar with the CCP, am more familiar with the CLI, but to backup the IOS image might be located under Configure > Utilities >Flash File Management.......not 100% sure about this one.
0
 

Author Comment

by:HICT
ID: 36579301
Thanks MAG03 .. you seem to know more about CCP than most.
This is slightly off topic, but i'm going through the 'Site to Site VPN' wizard, and after entering the initial details (Interface, Ip address of peer pre-shared key), I get a Cisco CP Warning "Existing VPN tunnel will be reset to add this VPN configuration. Do you want to proceed?"

I'm a little concerened that this will wipe out our existing VPN. I need both.
Or does this mean it will merely refresh the VPN config and i will have both VPNs?

(I'm quite happy to put this in another question if you'd prefer?)
0
 
LVL 17

Expert Comment

by:Marius Gunnerud
ID: 36579380
I wouldn't think it would wipe out the config of the other VPN.  Are you applying the VPN to the same interface as the other VPN? or are you using tunnel interfaces, do you know?

but might be good to double check before delivering the commands to the router.
0
 

Author Comment

by:HICT
ID: 36579384
I am using the same interface as our existing VPN. (GigabitEthernet0/0)

Thanks
0
 
LVL 17

Expert Comment

by:Marius Gunnerud
ID: 36579607
Then I think that the existing VPN's crypto map interface configuration will be overwritten and thus the existing vpn will be brought down. To use the same interface for multiple VPN's I would suggest using Tunnel interfaces. Also you could look into using DMVPN (dynamic multipoint vpn) to minimize future configuration of expansion branch offices.

However I am not that experienced with CCP so am not certain how to configure tunnel interfaces using CCP.  If you were using the CLI I could have given you a config to work from to get this working.
0
 

Author Comment

by:HICT
ID: 36582281
Back to the original subject ... If i were to try VPN Wizard anyway :

a) could i restore the original VPN by using your method above through configuration editor?
b) how long would a restore take?
0
 
LVL 17

Expert Comment

by:Marius Gunnerud
ID: 36582516
A.) yes, as mentioned the config you will be restoring will overwrite the existing config.

B.) restore should only take a few seconds from when it starts
0
 

Author Comment

by:HICT
ID: 36582598
I've looked further into our existing setup, and it appears our existing VPN is set up as a tunnel (not through the GigabitEthernet0/0 as i first suggested. I may need to start a new question on setting up a tunnel/secure gre tunnel
0
 
LVL 17

Expert Comment

by:Marius Gunnerud
ID: 36583510
Not difficult at all to do. Might be good for a new question as the title change might help others in the future when they search for same issue.
0
 

Author Comment

by:HICT
ID: 36583939
Doesn't allow me to do a restore as in your first post, i get :

"Failed to apply configuration.  The configuration may contain one or more interactive configuration commands that are not supported in CiscoCP" after pressing 'replace running configuration' button
0
 
LVL 17

Expert Comment

by:Marius Gunnerud
ID: 36585198
does it give you a log of which config isn't supported?

Have you disabled telnet? I have heard of some cases where CCP will not write to the router because telnet has been disabled. enable it try the restore and then disable it later again.

are you sure you don't have access to the CLI? would be much easier from there.
0
 

Author Comment

by:HICT
ID: 36585310
Currently I don't have the enable or secret password.
0
 
LVL 17

Expert Comment

by:Marius Gunnerud
ID: 36585452
Not sure why the restore isn't working. Could be that there are some commands that need to be entered in specific order which the restore is not doing.

Have been looking through some online documents and haven't found an explanation for why it isn't restoring yet.
0
 

Author Comment

by:HICT
ID: 36585475
i think i will need to speak to the install team that put this router in place, and see what they can tell me.

Thanks
0
 
LVL 17

Expert Comment

by:Marius Gunnerud
ID: 36585596
If you can get the enable password backing up the config is simple.
0
 

Author Comment

by:HICT
ID: 36585614
Thanks MAG03.
I will put your first post down as the solution as i am convinced this would work if CCP were setup correctly.

Thanks
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question