SRX

Expand all | Collapse all

Copy config

Jump to Best Answer
  • 1.  Copy config

    Posted 08-06-2019 11:09

    Hi - Will the below work to copy a config from one srx210 to another for a new site?

     

    Open the existing config on device A via history then copy and past to text file

    Edit text file for the new site changing IP addresses, hostnames etc.

    Copy and load text to device B (Best way to do this?)

     

    The configs are very basic and include one site to site vpn.

     

    Thanks in advance.


    #configuration


  • 2.  RE: Copy config

     
    Posted 08-06-2019 11:25

    Hi,

     

    Yes. This is absoluately possible.

    2 ways I usually use 

     

    1. Copy the edited txt file 

    >edit

    #load merge terminal relative

     

    ^

    Ctrl c 

    #commit

     

    2. ftp/sfpt the edited txt file to your router /var/tmp directory

    >edit

    #load override xxx.txt 

    #commit

     



  • 3.  RE: Copy config
    Best Answer

    Posted 08-06-2019 11:31

    Hi Rjh,

     

    Generally, if I want to copy a configuration from one SRX to another, I follow either of the below methods.

     

    Method 1:

     

    1. Open putty and save the session logs.

    2. In the SRX-A give the operational mode command, "show configuration | display set | no-more"

     

    Now if you open the session logs, the configuration of the SRX-A is saved.

     

    Method 2:

     

    1. In the SRX-A give the operation mode command, "show configuration | display set | save /var/log/myconfig.txt "

    2. Now my configuration is saved locally in SRX-A under /var/log/ directory with the name as myconfig.

    3. Next, I need to retrieve the configuration from the SRX-A to my PC using WinSCP or Filezilla client and upload it to SRX-B.

     

    Loading the configuration into SRX-B:

     

    If you follow Method 1, then we should load the configuration to SRX-B as below:

     

    root@host# load set terminal
    [Type ^D at a new line to end input]
    set snmp v3 usm local-engine user jtac authentication-sha authentication-key Juniper
    set snmp v3 usm local-engine user jtac privacy-aes128 privacy-key Juniper
    load complete

    root@host# commit

     

    If you follow method 2, perform the below step:

     

    root@host# load set myconfig.txt

    root@host# commit

     

    For more information, please refer the following technical documentation - https://www.juniper.net/documentation/en_US/junos/topics/topic-map/junos-config-files-loading.html#id-examples-loading-a-configuration-from-a-file



  • 4.  RE: Copy config

    Posted 08-06-2019 14:06

    How will the encrypted user passwords and pre-shared key act being copied over?



  • 5.  RE: Copy config

    Posted 08-06-2019 18:51
    Hi,

    It will make use of the same password and pre-shared key. However, I would suggest you to provide password and preshared key manually rather than loading from the another device.


  • 6.  RE: Copy config

     
    Posted 08-07-2019 06:25

    Hi,

     

    If you desire same username/password for all devices across your network, it's safe to just copy the encrypted password. On the new device, you should still be able to login to the device with username/password you have defined