Backup and Recovery
This topic provides details on how you can backup and recover your configuration files in case of instance or service failure, both externally within AWS and locally on your vSRX Virtual Firewall instance console
To save the vSRX Virtual Firewall configuration file locally, perform the following steps:
-
Log into the vSRX Virtual Firewall instance and go to the configuration mode.
-
Execute the command
save /var/tmp/<file-name>
The current vSRX Virtual Firewall configurations are saved in the above mentioned path.
Using your Secure Copy Protocol (SCP) client, download the saved configuration files to your local system.
Using the instructions at https://aws.amazon.com/getting-started/tutorials/backup-files-to-amazon-s3/?trk=gs_card, create a S3 bucket on AWS and upload the saved configuration file. You can retrieve the saved configuration file as well.
For backup and recovery of configuration files within AWS:
You must have an FTP server that is accessible from the vSRX Virtual Firewall instance.
Run the below configuration.
External example system { archival { configuration { transfer-on-commit; archive-sites { "ftp://username:password@192.168.1.10"; } } } }
-
You can then run and commit the following configuration command on the vSRX Virtual Firewall instance.
set system archival configuration transfer-on-commit archive-sites ftp://username:password@<FTP_Server_IP_Address>
.