SRX

Hi - Will the below work to copy a config from one srx210 to another for a new site?

 

Open the existing config on device A via history then copy and past to text file

Edit text file for the new site changing IP addresses, hostnames etc.

Copy and load text to device B (Best way to do this?)

 

The configs are very basic and include one site to site vpn.

 

Thanks in advance.

#configuration

Hi,

 

Yes. This is absoluately possible.

2 ways I usually use 

 

1. Copy the edited txt file 

>edit

#load merge terminal relative

 

^

Ctrl c 

#commit

 

2. ftp/sfpt the edited txt file to your router /var/tmp directory

>edit

#load override xxx.txt 

#commit

 

Hi Rjh,

 

Generally, if I want to copy a configuration from one SRX to another, I follow either of the below methods.

 

Method 1:

 

1. Open putty and save the session logs.

2. In the SRX-A give the operational mode command, "show configuration | display set | no-more"

 

Now if you open the session logs, the configuration of the SRX-A is saved.

 

Method 2:

 

1. In the SRX-A give the operation mode command, "show configuration | display set | save /var/log/myconfig.txt "

2. Now my configuration is saved locally in SRX-A under /var/log/ directory with the name as myconfig.

3. Next, I need to retrieve the configuration from the SRX-A to my PC using WinSCP or Filezilla client and upload it to SRX-B.

 

Loading the configuration into SRX-B:

 

If you follow Method 1, then we should load the configuration to SRX-B as below:

 

root@host# load set terminal
[Type ^D at a new line to end input]
set snmp v3 usm local-engine user jtac authentication-sha authentication-key Juniper
set snmp v3 usm local-engine user jtac privacy-aes128 privacy-key Juniper
load complete

root@host# commit

 

If you follow method 2, perform the below step:

 

root@host# load set myconfig.txt

root@host# commit

 

For more information, please refer the following technical documentation - https://www.juniper.net/documentation/en_US/junos/topics/topic-map/junos-config-files-loading.html#id-examples-loading-a-configuration-from-a-file

How will the encrypted user passwords and pre-shared key act being copied over?

Hi,

It will make use of the same password and pre-shared key. However, I would suggest you to provide password and preshared key manually rather than loading from the another device.

Hi,

 

If you desire same username/password for all devices across your network, it's safe to just copy the encrypted password. On the new device, you should still be able to login to the device with username/password you have defined