Backup over SCP

[FatalHalt]

I' m trying to figure out how to backup over SCP. I' ve enabled ' admin-scp' in config sys global, but am now trying to actually figure out how to use it. Anyone able to get me started? Thanks.

[FatalHalt · Accepted solution]

Sorry to bump this thread, but been running into some issues. 

Is it just me, or are the backups you get from SCP not the full backup of the device? I've only just noticed this now that I'm doing some analytics on the files themselves, but they aren't even close to full. On one device, a full backup from the GUI gets me a file with 40,000 lines. A scp backup using sys_config is just shy of 2,200. It doesn't have any vdoms. It's almost useless. 

Is there a different command other than sys_config (or fgt-config) to get a proper, full backup?

[Elthon_Abreu · Accepted solution]

nbctcp wrote:

Ethon,

Can you please show me the steps

nbctcp,

I've attached the script for you. You can change according to your needs.

PS.: Script only for Windows OS.

[Istvan_Takacs_FTNT]

Using the SCP client http://docs-legacy.fortinet.com/fos50hlp/50/index.html#page/FortiOS%205.0%20Help/basic_setup.096.53.html

[emnoc]

I never heard of fgt-config but sys_config works e.g scp admin@x.x.x.5:sys_config ./ admin@x.x.x.x5' s password: Permission denied, please try again. admin@x.x.x.5' s password: sys_config 100% 332KB 83.1KB/s 00:04 kfelix@socket01:~$ Go to tip#6 on my blog; http://socpuppet.blogspot.com/2013/12/fortigate-tips-tricks-from-socpuppets.html

[FatalHalt]

Thanks guys. I was using the document from the Admin guide, but didn' t have any sort of scp client (windows host). Grabbed the pscp.exe file from putty and am now cruising along. Made a nice little python script to automate all my boxes now!

[ede_pfau]

Would you care to share the python script? Py pal here.

[FatalHalt]

Threw it up on my Github

[emnoc]

Here' s a simple bash script, that you can call and run thru a listing. It down load the cfg and timestamp the downloaded file #!/bin/bash # This is a simple bash cfg grabber # # if [ ! $1 ]; then echo " Usage : getcfg.sg <username> <fortigate ip_address> <ssh port # > " echo " " echo " Example getcfg admin 1.1.1.1 22 " echo " " exit 1 fi # # DATE=`date +%F%Z%T` # # A=sys_config # PORT=$3 scp -P $3 $1@$2:$A ./$A-$2_$DATE.cfg # # end

[ede_pfau]

Thanks FatalHalt, nice work!

[FatalHalt]

Thanks! I' ve also got a work in progress config parser script on there as well. Parses out different sections of the config to csv files (which I combine into spreadsheets). Great for comparing policy, address sets, etc. Adding more sections for it when I have time.

[jtfinley]

Shameless plug, but I wrote something [link=]http://www.jfinley.com/2013/03/automated-fortigate-configuration-backups-using-scp/[/link]