Backup Fortigate Configuration via CLI

[pacionet]

I have Fortigate 1500D 7.0.12 and I'd like to backup via ssh the configuration via SFTP.

I tried:

config vdom
edit <vdom name>
execute backup config sftp file.conf IP user password 

I got

Please wait...
Connect to sftp server IP ...
Send config file to sftp server via vdom <vdom name> failed.
Command fail. Return code -1

Any suggest?

The SFTP server exists and work.

[xshkurti]

@pacionet 
Have you tried with ftp?

Please do a test with ftp (not sftp) and check if that works so we know it is not something related to routing or communication.

Another post with the same error that might help:
Send config file to sftp server via vdom root fail... - Fortinet Community

[mle2802]

Hi @pacionet,

Can you please run the following command while executing the backup and see if there is any connection issue

diag debug reset
diag debug flow filter addr X.X.X.X (SFTP server)
diag debug flow show ip en
diag debug flow show func en
diag debug console time ena
diag debug ena
diag debug flow trace start 999


Regards,
Minh

[Sheikh]

Hello @pacionet 

This looks like a routing or ACL issue. Is there any other firewall or could be a firewall on the sftp server itself, that might interfere in the communication ?

regards,

Sheikh