D-Link DFL-1660 User Manual page 85

2.6.2. Backing Up Configurations
Version Compatability
Since a full system backup includes a NetDefendOS version, compatability is not an issue with
these types of backup.
With configuration only backups, the following should be noted:
• A configuration backup created on a higher NetDefendOS version should never be uploaded to a
lower NetDefendOS version. For example, a backup created from a 9.30.02 version should
never be uploaded to a 9.15.02 version.
• A configuration backup created on a lower version can be uploaded to a higher version, however
there can be compatability issues in certain cases which will be indicated by messages from
NetDefendOS when the uploaded configuration is activated. Such problems can result in a
NetDefendOS restart.
For this reason, a full system backup is useful when trying to transfer a saved configuration to
new hardware where the new hardware comes preloaded with a higher NetDefendOS version.
First, upload the full system backup to get a system with the right version and then upload the
latest configuration backup. If there is a requirement to move to a higher NetDefendOS version,
an NetDefendOS upgrade can then be performed.
The Management Interfaces Used
Both types of backup, configuration and system, can be performed either by downloading the file
directly from the NetDefend Firewall using SCP (Secure Copy) or alternatively using the Web
Interface. Backup cannot be done using CLI commands.
Similarly, restoring a backup is done in the reverse fashion. Either by uploading the backup file
using SCP or alternatively through the Web Interface. A restore cannot be done with CLI
commands.
Operation Interruption
Backups can be created at any time without disturbing NetDefendOS operation. For restores,
however, it is not recommended to have live traffic flowing since the restored configuration may
significantly alter the security policies of the firewall.
After restoring a backup it is necessary to Activate the new configuration, as is done with a normal
configuration change.
A complete system restore will require that NetDefendOS reinitializes, with the loss of all existing
connections. Initialization may require some seconds to complete depending on the hardware type
and normal operation will not be possible during this time.
Backup and Restore using SCP
There are two files located in the NetDefendOS root directory:
• config.bak - This is the backup of the current configuration.
• full.bak - This is the backup of the complete system.
SCP can be used to download either of these files. When the download is complete the filename will
be altered to include the date. For example, full.bak might become full-20081121.bak to show it is a
snapshot of the state on November 21st, 2008.
Chapter 2. Management and Maintenance
85