FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
vkoodakandi
Staff
Staff
Article Id 212891
Description This article describes how to interpret the command line sequence to perform back-up of the FortiGate device configuration file from the CLI using the FTP protocol.
Scope FortiGate.
Solution

The command to perform the back-up of the configuration is as below:

 

# execute backup config ftp <filename> <ftp server>[:ftp port] <username> <password>

 

<filename>: intended filename on FTP server.

Example: test.conf

 

<ftp server>[:ftp port]: FTP server IP address and port number. Example: 10.10.10.10:21

 

<username> : Admin username of the FTP server.

 

<password> : Password of the admin user.

 

If there is any connectivity issue or typo in the interpretation of the CLI command, the error: 'Send config file to FTP server via VDOM root failed can be seen.

 

Collect the sniffer output with FTP server IP and port as a filter. Clarify where the issue is:

 

vkoodakandi_0-1653397267284.jpeg

 

Proper interpretation of the command will give us successful connectivity and the below output:

 

FW# execute backup config ftp test.conf 10.10.10.10:21 admin password

Connect to ftp server 10.10.10.10:21 …

Please wait…

Send config file to ftp server OK.

 

The command to perform the encrypted backup-up configuration is as below:

 

execute backup config ftp filename server-address ftp-username ftp-password config-password

<config-password> Password to protect the back-up file 

 

2.PNG

4.PNG

 

The configuration is backed up on the FTP server-specified directory with the name test.conf.

The same command could be used for the automation using the script.

Contributors