Creating The Service Account - Cisco IPS-4255-K9 - Intrusion Protection Sys 4255 Installation Manual

Chapter A Troubleshooting
Restoring the Current Configuration From a Backup File
To restore your current configuration from a backup file, follow these steps:
Log in to the CLI using an account with administrator privileges.
Step 1
Back up the current configuration to the remote server.
Step 2
sensor# copy scp://user@192.0.2.0//configuration/cfg current-config
Password: ********
Warning: Copying over the current configuration may leave the box in an unstable state.
Would you like to copy current-config to backup-config before proceeding? [yes]:
Enter
Step 3
cfg
Warning: Replacing existing network-settings may leave the box in an unstable state.
Would you like to replace existing network settings
(host-ipaddress/netmask/gateway/access-list) on sensor before proceeding? [no]:
sensor#
Step 4 Enter
and access list. We recommend you retain this information to preserve access to your sensor after the
rest of the configuration has been restored.
For More Information
For a list of supported HTTP/HTTPS servers, see

Creating the Service Account

Do not make modifications to the sensor through the service account except under the direction of TAC.
Caution
If you use the service account to configure the sensor, your configuration is not supported by TAC.
Adding services to the operating system through the service account affects proper performance and
functioning of the other IPS services. TAC does not support a sensor on which additional services have
been added.
You can create a service account for TAC to use during troubleshooting. Although more than one user
can have access to the sensor, only one user can have service privileges on a sensor. The service account
is for support purposes only.
The root user password is synchronized to the service account password when the service account is
Note
created. To gain root access you must log in with the service account and switch to user root with the
su - root command.
Caution You should carefully consider whether you want to create a service account. The service account
provides shell access to the system, which makes the system vulnerable. However, you can use the
service account to create a password if the administrator password is lost. Analyze your situation to
decide if you want a service account existing on the system.
OL-18504-01
to copy the current configuration to a backup configuration.
yes
100% |************************************************| 36124
to retain the currently configured hostname, IP address, subnet mask, management interface,
no
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.0
Supported FTP and HTTP/HTTPS Servers, page
Preventive Maintenance
00:00
12-2.
A-5