D-Link NetDefendOS User Manual page 137

Note: Backups do not contain everything
Backups include only static information from the NetDefendOS configuration. Dynamic
information such as the DHCP server lease database or Anti-Virus/IDP databases will not
be backed up.
Version Compatibility
Since a full system backup includes a NetDefendOS version, compatibility is not an issue with
these types of backup.
With configuration only backups, the following should be noted:
• A configuration backup created on a higher NetDefendOS version should never be uploaded
to a lower NetDefendOS version. For example, a backup created from a firewall running a
10.00.00 version of NetDefendOS should never be uploaded to a firewall running a 9.30.02
version.
• A configuration backup created on a lower version can always be uploaded to a higher
version, however there can be compatibility issues in certain cases which will be indicated by
messages from NetDefendOS when the uploaded configuration is activated. Such issues can
result in a NetDefendOS reboot.
For this reason, a full system backup is useful when trying to transfer a saved configuration to
new hardware where the new hardware comes preloaded with a higher NetDefendOS
version. First, upload the full system backup to get a system with the right version and then
upload the latest configuration backup. If there is a requirement to move to a higher
NetDefendOS version, an NetDefendOS upgrade can then be performed.
The Management Interfaces Used
Both types of backup, configuration and system, can be performed either by downloading the
file directly from the NetDefend Firewall using SCP (Secure Copy) or alternatively using the Web
Interface. Backup cannot be done using CLI commands.
Similarly, restoring a backup is done in the reverse fashion. Either by uploading the backup file
using SCP or alternatively through the Web Interface. A restore cannot be done with CLI
commands.
Warning: Do not upload a system backup to dissimilar hardware
Do not try to upload a full system backup (configuration plus NetDefendOS) to
hardware that is not the same model as the original.
This will cause the configuration to be automatically activated and NetDefendOS
rebooted, with the possibility that NetDefendOS becomes unreachable. Upload of full
system backups must be done to similar hardware since there is no opportunity to
change the configuration before it is activated.
Operation Interruption
Backups can be created at any time without disturbing NetDefendOS operation. For restores,
however, it is not recommended to have live traffic flowing since the restored configuration may
Chapter 2: Management and Maintenance
137