Solved

Backup / Restore Cisco 2911 Router with CCP

Posted on 2011-09-21
20
1,777 Views
Last Modified: 2012-05-12
Hi guys ...

We have recently had a Cisco 2911 router installed and i am trying to find my way around it.
Before i mess anything up i'd like to be familiar with the best way to backup and restore the configuration. I have access to the Router through CCP (Cisco Configuration Professional) but not through Command Line as i don't currently know the enable or secret passwords (and i am not familiar with command line anyway)

Any advice would be appreciated.

Thanks

HICT

 
0
Comment
Question by:HICT
  • 10
  • 10
20 Comments
 
LVL 17

Accepted Solution

by:
MAG03 earned 500 total points
ID: 36578590
To backup the config go to Configure > Utilities > Save Running Config to PC

to restore the configuration, open the Configuration Editor, and click I agree. In the Configure window, choose Import configuration from PC, and then click the replace running configuration button.

0
 

Author Comment

by:HICT
ID: 36579062
I'm about to add a new site-to-site VPN to this router, and i'm worried that i might knock out the existing VPN.

Following your instructions above, if the worst were to happen, would this restore back to before i started?

Thanks

HICT
0
 
LVL 17

Expert Comment

by:MAG03
ID: 36579092
Yes, given that you have connection to the remote site and/or local site to issue the restore commands. basically it will replace the current running configuration with the configuration that you are importing.

This will take a backup of the running config. it is not taking a backup of the IOS Image.
0
 

Author Comment

by:HICT
ID: 36579099
Thanks MAG03, sorry to be a pest, but what is the difference between the running config and the IOS image?

Should i be backing up both, and if so, how do i backup the IOS image?

Thanks
0
 
LVL 17

Expert Comment

by:MAG03
ID: 36579183
Running config is the exactly that, it is the current configuration of the router.  The IOS image is the so called operating system of the the device (from the CLI you can see the image file by issuing the command show flash).

You should backup both running config and IOS image incase things go really bad. Now really bad means someone (an intruder or an administrator) erases the running config and/or IOS image then you have a backup you can restore from and minimize down time.  But for now when just configuring a VPN backing up the running config is fine.

I am not overly familiar with the CCP, am more familiar with the CLI, but to backup the IOS image might be located under Configure > Utilities >Flash File Management.......not 100% sure about this one.
0
 

Author Comment

by:HICT
ID: 36579301
Thanks MAG03 .. you seem to know more about CCP than most.
This is slightly off topic, but i'm going through the 'Site to Site VPN' wizard, and after entering the initial details (Interface, Ip address of peer pre-shared key), I get a Cisco CP Warning "Existing VPN tunnel will be reset to add this VPN configuration. Do you want to proceed?"

I'm a little concerened that this will wipe out our existing VPN. I need both.
Or does this mean it will merely refresh the VPN config and i will have both VPNs?

(I'm quite happy to put this in another question if you'd prefer?)
0
 
LVL 17

Expert Comment

by:MAG03
ID: 36579380
I wouldn't think it would wipe out the config of the other VPN.  Are you applying the VPN to the same interface as the other VPN? or are you using tunnel interfaces, do you know?

but might be good to double check before delivering the commands to the router.
0
 

Author Comment

by:HICT
ID: 36579384
I am using the same interface as our existing VPN. (GigabitEthernet0/0)

Thanks
0
 
LVL 17

Expert Comment

by:MAG03
ID: 36579607
Then I think that the existing VPN's crypto map interface configuration will be overwritten and thus the existing vpn will be brought down. To use the same interface for multiple VPN's I would suggest using Tunnel interfaces. Also you could look into using DMVPN (dynamic multipoint vpn) to minimize future configuration of expansion branch offices.

However I am not that experienced with CCP so am not certain how to configure tunnel interfaces using CCP.  If you were using the CLI I could have given you a config to work from to get this working.
0
 

Author Comment

by:HICT
ID: 36582281
Back to the original subject ... If i were to try VPN Wizard anyway :

a) could i restore the original VPN by using your method above through configuration editor?
b) how long would a restore take?
0
What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

 
LVL 17

Expert Comment

by:MAG03
ID: 36582516
A.) yes, as mentioned the config you will be restoring will overwrite the existing config.

B.) restore should only take a few seconds from when it starts
0
 

Author Comment

by:HICT
ID: 36582598
I've looked further into our existing setup, and it appears our existing VPN is set up as a tunnel (not through the GigabitEthernet0/0 as i first suggested. I may need to start a new question on setting up a tunnel/secure gre tunnel
0
 
LVL 17

Expert Comment

by:MAG03
ID: 36583510
Not difficult at all to do. Might be good for a new question as the title change might help others in the future when they search for same issue.
0
 

Author Comment

by:HICT
ID: 36583939
Doesn't allow me to do a restore as in your first post, i get :

"Failed to apply configuration.  The configuration may contain one or more interactive configuration commands that are not supported in CiscoCP" after pressing 'replace running configuration' button
0
 
LVL 17

Expert Comment

by:MAG03
ID: 36585198
does it give you a log of which config isn't supported?

Have you disabled telnet? I have heard of some cases where CCP will not write to the router because telnet has been disabled. enable it try the restore and then disable it later again.

are you sure you don't have access to the CLI? would be much easier from there.
0
 

Author Comment

by:HICT
ID: 36585310
Currently I don't have the enable or secret password.
0
 
LVL 17

Expert Comment

by:MAG03
ID: 36585452
Not sure why the restore isn't working. Could be that there are some commands that need to be entered in specific order which the restore is not doing.

Have been looking through some online documents and haven't found an explanation for why it isn't restoring yet.
0
 

Author Comment

by:HICT
ID: 36585475
i think i will need to speak to the install team that put this router in place, and see what they can tell me.

Thanks
0
 
LVL 17

Expert Comment

by:MAG03
ID: 36585596
If you can get the enable password backing up the config is simple.
0
 

Author Comment

by:HICT
ID: 36585614
Thanks MAG03.
I will put your first post down as the solution as i am convinced this would work if CCP were setup correctly.

Thanks
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
NTP Server in VMware 5 115
VPN Problems 3 54
Cisco ACS mixed versions 8 54
Management Network in CIsco L2 Switch 3 29
Hello , This is a short article on how would you go about enabling traceoptions on a Juniper router . Traceoptions are similar to Cisco debug commands but these traceoptions are implemented in Juniper networks router . The following demonstr…
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now