- Products
- Learn
- Local User Groups
- Partners
- More
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
Join our TechTalk: Malware 2021 to Present Day
Building a Preventative Cyber Program
Be a CloudMate!
Check out our cloud security exclusive space!
Check Point's Cyber Park is Now Open
Let the Games Begin!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
This script will perform a 'show configuration' on all virtual systems on a VSX member and will save the configurations. It will also backup important configuration files.
The following files will be part of the backup.
$FWDIR/boot/modules/fwkern.conf
$FWDIR/boot/modules/vpnkern.conf
$PPKDIR/boot/modules/simkern.conf
$PPKDIR/boot/modules/sim_aff.conf
$FWDIR/conf/fwaffinity.conf
$FWDIR/conf/fwauthd.conf
$FWDIR/conf/local.arp
$FWDIR/conf/discntd.if
$FWDIR/conf/cpha_bond_ls_config.conf
$FWDIR/conf/resctrl
$FWDIR/conf/vsaffinity_exception.conf
$FWDIR/database/qos_policy.C
$FWDIR/conf/sdconf.rec
$FWDIR/conf/sdopts.rec
$FWDIR/conf/sdstatus.12
$FWDIR/conf/securid$CPDIR/registry/HKLM_registry.data
/var/ace/sdconf.rec
/var/ace/sdopts.rec
/var/ace/sdstatus.12
/var/ace/securid
[Expert@fw1:0]# ./backup_configuration_vsx.sh
Saved configs: /tmp/backup_configuration_vsx-fw1-2018-09-05.tar
[Expert@fw1:0]#
Niels van Sluis, please be advised that although you can backup VS config with your script, it has no practical value. The only supported VS config in VSX mode on Gaia is through VSX provisioning scripts being executed from the management (Main Domain in case of MDSM).
Re-applying Gaia commands from your back files is not supported and may lead to various issues on VSX cluster member. For disaster recovery of a VSX cluster member, please always use Gaia backup/restore tools and/or vsx_util reconfigure command on your management server.
I understand, but there are some settings like for example bootp that needs to be added to the clish configuration of the virtual system per VSX member. So it has some added value to backup this information.
Add some weight, we use multicast through some of our VS's and have specific PIM, IGMP configuration defined in clish for these.
Okay, that's clear. You may also have some other custom config, such as local.arp files and other file based modification. Those are not covered by your script.
The script has been updated. The new version will also backup important configuration files.
now we are talking 🙂
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY