topic Re: scp scheduled backup on 1200R in Spark Firewall (SMB)

scp scheduled backup on 1200R

Andreas_Aust — Fri, 14 Aug 2020 08:09:34 GMT

I can't believe that there is no option to make a scheduled backup to a scp server from a 1200R device R77.20.80. Is there a backup script or something like that ? Every answer is highly appreciated.

Re: scp scheduled backup on 1200R

_Val_ — Fri, 14 Aug 2020 08:25:45 GMT

moved to the appropriate board

Re: scp scheduled backup on 1200R

funkylicious — Fri, 14 Aug 2020 08:36:12 GMT

Hi,

Backing up the System In the Device > System Operations page you can backup and restore system settings.

Only to a FTP server is available and not SSH/SCP/SFTP.

Re: scp scheduled backup on 1200R

Andreas_Aust — Fri, 14 Aug 2020 09:00:25 GMT

FTP is such a secure protocol. Password is transmitted in plain text and I have only a scp server available.

Re: scp scheduled backup on 1200R

funkylicious — Fri, 14 Aug 2020 09:27:54 GMT

Do it locally and create a script to move it.

Re: scp scheduled backup on 1200R

_Val_ — Fri, 14 Aug 2020 10:27:26 GMT

Unfortunately, out of the box it is the only option. There are several ways to make it more secure:

1. Backup to an internal server in a trusted zone

2. If backing up remotely, do it over VPN tunnel

3. Use password-protected encrypted backup

Re: scp scheduled backup on 1200R

_Val_ — Fri, 14 Aug 2020 10:30:06 GMT

@funkylicious

They're is just one small problem with that: local backups are not scheduled by design.

Re: scp scheduled backup on 1200R

HristoGrigorov — Fri, 14 Aug 2020 14:04:40 GMT

What about this command ?

[Expert@CPFW-2]# /pfrm2.0/bin/backup.sh
Usage: backup.sh [-hv] [-t tftp] or [-s SCP] [ipaddress] [filename] | [username] [password]

... and crontab it at whatever time you need...

Re: scp scheduled backup on 1200R

Andreas_Aust — Fri, 14 Aug 2020 14:11:23 GMT

I tried that command but in vain.

Re: scp scheduled backup on 1200R

HristoGrigorov — Fri, 14 Aug 2020 14:30:24 GMT

Well, you may try to run backup from GUI and see what command it is running.

Re: scp scheduled backup on 1200R

Andreas_Aust — Fri, 14 Aug 2020 16:31:43 GMT

Which gui do you mean. WebUI or SmartProvisioning?

Re: scp scheduled backup on 1200R

John_Fleming — Fri, 14 Aug 2020 18:29:52 GMT

You can for sure make this work, but it will take a little to make it happen. There was one issue where / wasn't owned by root:root but by some random PID. Most likely something in the build process of the image was dorked up. ls -ld / will confirm. Anyway that will stop ssh key auth from working.

Then you need to stick ssh key on the system. I think its /.ssh that they need to go in. Can't remember for sure.

2nd you need to create your cronjobs by hand.

3rd some of this junk will need to be coded to start at boot up.

I did a write up a while back on how to enable cron and stuff from userScript. You maybe not need to enable cron anymore. Just check the steps before.

BTW all the automatic backups still create the files local.

Enable cron

Re: scp scheduled backup on 1200R

HristoGrigorov — Sat, 15 Aug 2020 03:51:27 GMT

Keep in mind that firmware upgrade resets crontab and you need to re-do it again. Best is to add command to userScript as this is preserved between the upgrades.

Re: scp scheduled backup on 1200R

John_Fleming — Mon, 17 Aug 2020 13:54:08 GMT

yes, everything needs to be done in userScript. Even installing ssh keys and changing ownership of / (if that is still needed).

Re: scp scheduled backup on 1200R

Andreas_Aust — Tue, 18 Aug 2020 05:46:02 GMT

Hi guys,

I solved it wit cprid_util commands from the mgmt. Thanks for your support.