Solved

Backup / Restore Cisco 2911 Router with CCP

Posted on 2011-09-21
20
1,798 Views
Last Modified: 2012-05-12
Hi guys ...

We have recently had a Cisco 2911 router installed and i am trying to find my way around it.
Before i mess anything up i'd like to be familiar with the best way to backup and restore the configuration. I have access to the Router through CCP (Cisco Configuration Professional) but not through Command Line as i don't currently know the enable or secret passwords (and i am not familiar with command line anyway)

Any advice would be appreciated.

Thanks

HICT

 
0
Comment
Question by:HICT
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 10
  • 10
20 Comments
 
LVL 17

Accepted Solution

by:
MAG03 earned 500 total points
ID: 36578590
To backup the config go to Configure > Utilities > Save Running Config to PC

to restore the configuration, open the Configuration Editor, and click I agree. In the Configure window, choose Import configuration from PC, and then click the replace running configuration button.

0
 

Author Comment

by:HICT
ID: 36579062
I'm about to add a new site-to-site VPN to this router, and i'm worried that i might knock out the existing VPN.

Following your instructions above, if the worst were to happen, would this restore back to before i started?

Thanks

HICT
0
 
LVL 17

Expert Comment

by:MAG03
ID: 36579092
Yes, given that you have connection to the remote site and/or local site to issue the restore commands. basically it will replace the current running configuration with the configuration that you are importing.

This will take a backup of the running config. it is not taking a backup of the IOS Image.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:HICT
ID: 36579099
Thanks MAG03, sorry to be a pest, but what is the difference between the running config and the IOS image?

Should i be backing up both, and if so, how do i backup the IOS image?

Thanks
0
 
LVL 17

Expert Comment

by:MAG03
ID: 36579183
Running config is the exactly that, it is the current configuration of the router.  The IOS image is the so called operating system of the the device (from the CLI you can see the image file by issuing the command show flash).

You should backup both running config and IOS image incase things go really bad. Now really bad means someone (an intruder or an administrator) erases the running config and/or IOS image then you have a backup you can restore from and minimize down time.  But for now when just configuring a VPN backing up the running config is fine.

I am not overly familiar with the CCP, am more familiar with the CLI, but to backup the IOS image might be located under Configure > Utilities >Flash File Management.......not 100% sure about this one.
0
 

Author Comment

by:HICT
ID: 36579301
Thanks MAG03 .. you seem to know more about CCP than most.
This is slightly off topic, but i'm going through the 'Site to Site VPN' wizard, and after entering the initial details (Interface, Ip address of peer pre-shared key), I get a Cisco CP Warning "Existing VPN tunnel will be reset to add this VPN configuration. Do you want to proceed?"

I'm a little concerened that this will wipe out our existing VPN. I need both.
Or does this mean it will merely refresh the VPN config and i will have both VPNs?

(I'm quite happy to put this in another question if you'd prefer?)
0
 
LVL 17

Expert Comment

by:MAG03
ID: 36579380
I wouldn't think it would wipe out the config of the other VPN.  Are you applying the VPN to the same interface as the other VPN? or are you using tunnel interfaces, do you know?

but might be good to double check before delivering the commands to the router.
0
 

Author Comment

by:HICT
ID: 36579384
I am using the same interface as our existing VPN. (GigabitEthernet0/0)

Thanks
0
 
LVL 17

Expert Comment

by:MAG03
ID: 36579607
Then I think that the existing VPN's crypto map interface configuration will be overwritten and thus the existing vpn will be brought down. To use the same interface for multiple VPN's I would suggest using Tunnel interfaces. Also you could look into using DMVPN (dynamic multipoint vpn) to minimize future configuration of expansion branch offices.

However I am not that experienced with CCP so am not certain how to configure tunnel interfaces using CCP.  If you were using the CLI I could have given you a config to work from to get this working.
0
 

Author Comment

by:HICT
ID: 36582281
Back to the original subject ... If i were to try VPN Wizard anyway :

a) could i restore the original VPN by using your method above through configuration editor?
b) how long would a restore take?
0
 
LVL 17

Expert Comment

by:MAG03
ID: 36582516
A.) yes, as mentioned the config you will be restoring will overwrite the existing config.

B.) restore should only take a few seconds from when it starts
0
 

Author Comment

by:HICT
ID: 36582598
I've looked further into our existing setup, and it appears our existing VPN is set up as a tunnel (not through the GigabitEthernet0/0 as i first suggested. I may need to start a new question on setting up a tunnel/secure gre tunnel
0
 
LVL 17

Expert Comment

by:MAG03
ID: 36583510
Not difficult at all to do. Might be good for a new question as the title change might help others in the future when they search for same issue.
0
 

Author Comment

by:HICT
ID: 36583939
Doesn't allow me to do a restore as in your first post, i get :

"Failed to apply configuration.  The configuration may contain one or more interactive configuration commands that are not supported in CiscoCP" after pressing 'replace running configuration' button
0
 
LVL 17

Expert Comment

by:MAG03
ID: 36585198
does it give you a log of which config isn't supported?

Have you disabled telnet? I have heard of some cases where CCP will not write to the router because telnet has been disabled. enable it try the restore and then disable it later again.

are you sure you don't have access to the CLI? would be much easier from there.
0
 

Author Comment

by:HICT
ID: 36585310
Currently I don't have the enable or secret password.
0
 
LVL 17

Expert Comment

by:MAG03
ID: 36585452
Not sure why the restore isn't working. Could be that there are some commands that need to be entered in specific order which the restore is not doing.

Have been looking through some online documents and haven't found an explanation for why it isn't restoring yet.
0
 

Author Comment

by:HICT
ID: 36585475
i think i will need to speak to the install team that put this router in place, and see what they can tell me.

Thanks
0
 
LVL 17

Expert Comment

by:MAG03
ID: 36585596
If you can get the enable password backing up the config is simple.
0
 

Author Comment

by:HICT
ID: 36585614
Thanks MAG03.
I will put your first post down as the solution as i am convinced this would work if CCP were setup correctly.

Thanks
0

Featured Post

Don't miss ATEN at NAB Show April 24-27!

Visit ATEN at NAB Show to learn how our "Seamlessly Entertaining" solutions deliver fast, precise video streaming without delays for the broadcasting and media environment. ATEN will showcase its 16x16 Modular Matrix Switch (VM1600) and KVM Over IP Solution (KE6900 series).

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
WiFi Routers with Guest Network capability 14 104
Automated backups of ASA's and Nexus (5k and 7K) 24 134
2 routers and 1 public IP Address. 10 61
can't ssh to external IP 9 64
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question