scp scheduled backup on 1200R

[Andreas_Aust]

I can't believe that there is no option to make a scheduled backup to a scp server from a 1200R device R77.20.80. Is there a backup script or something like that ? Every answer is highly appreciated.

[_Val_]

moved to the appropriate board

[funkylicious]

Hi,

Backing up the System In the Device > System Operations page you can backup and restore system settings.

Only to a FTP server is available and not SSH/SCP/SFTP.

[Andreas_Aust]

FTP is such a secure protocol. Password is transmitted in plain text and I have only a scp server available.

[funkylicious]

Do it locally and create a script to move it.

[_Val_]

@funkylicious 

They're is just one small problem with that: local backups are not scheduled by design.

[HristoGrigorov]

What about this command ?

[Expert@CPFW-2]# /pfrm2.0/bin/backup.sh
Usage: backup.sh [-hv] [-t tftp] or [-s SCP] [ipaddress] [filename] | [username] [password]

... and crontab it at whatever time you need...

[Andreas_Aust]

I tried that command but in vain.

[HristoGrigorov]

Well, you may try to run backup from GUI and see what command it is running.

[Andreas_Aust]

Which gui do you mean. WebUI or SmartProvisioning?

[_Val_]

Unfortunately, out of the box it is the only option. There are several ways to make it more secure:

1. Backup to an internal server in a trusted zone

2. If backing up remotely, do it over VPN tunnel

3. Use password-protected encrypted backup

[John_Fleming]

You can for sure make this work, but it will take a little to make it happen. There was one issue where / wasn't owned by root:root but by some random PID. Most likely something in the build process of the image was dorked up. ls -ld / will confirm. Anyway that will stop ssh key auth from working.

Then you need to stick ssh key on the system. I think its /.ssh that they need to go in. Can't remember for sure.

2nd you need to create your cronjobs by hand.

3rd some of this junk will need to be coded to start at boot up.

I did a write up a while back on how to enable cron and stuff from userScript. You maybe not need to enable cron anymore. Just check the steps before. 

BTW all the automatic backups still create the files local. 

Enable cron 

[HristoGrigorov]

Keep in mind that firmware upgrade resets crontab and you need to re-do it again. Best is to add command to userScript as this is preserved between the upgrades.

[John_Fleming]

yes, everything needs to be done in userScript. Even installing ssh keys and changing ownership of / (if that is still needed).

[Andreas_Aust]

Hi guys,

I solved it wit cprid_util commands from the mgmt. Thanks for your support.