Exporting profiles from the USG2000 and USG5000

0

You can back up configuration on the USG2000 and USG5000 as follows:

1. Web UI:
The current configuration can be backed up to the terminal.
The profiles are in .zip or .cfg format and do not support Chinese characters.
a. Choose System > Maintenance > Configuration Management.
b. Click Export to export the current configuration.
c. Click Save and select a path to save the profile.

2. CLI
Configuration procedure:
Configure the basic functions of the FTP server as follows:
a. Enable the FTP server functions and configure valid login users.
b. Log in to the device by entering the FTP command after the command prompt.
c. Log in to the FTP server in FTP mode using the correct user name and password.
d. Download files to the PC.
Procedure:
a. Enable FTP on the FTP server and configure FTP user authentication information.
system-view,
[USG] ftp server enable
[USG] aaa
[USG-aaa] local-user admin password irreversible-cipher Admin@123
b. On the FTP server, configure the FTP user authorization mode, priority, and authorization directory.
[USG-aaa] local-user admin service-type ftp
[USG-aaa] local-user admin level 3
[USG-aaa] local-user admin ftp-directory flash:
[USG-aaa] quit
c. Configure the IP address of the FTP server.
[USG] interface GigabitEthernet 0/0/1
[USG-GigabitEthernet0/0/1] ip address 128.18.90.111 255.255.255.0
[USG-GigabitEthernet0/0/1] quit
Verification:
On the PC, log in to the FTP server, obtain files in the FTP directory, and save the files in the user directory of disk C.
C:\Documents and Settings\user> ftp 128.18.90.111
User(128.18.90.111:(none)):admin
Password:
230 User logged in.
ftp> binary
ftp> get sys.bin
ftp> quit
On the local PC, view the obtained files.
C:\Documents and Settings\user>dir
2010-09-25 15:56 20,116,676 sys.bin

Other related questions:
Exporting profiles from the USG6000
You can back up configuration on the USG6000 as follows: 1. Web UI: The current configuration can be backed up to the terminal. The profiles are in .zip or .cfg format and do not support Chinese characters. a. Choose System > Profile Management. b. Click Export to export the current configuration. c. Click Save and select a path to save the profile. 2. CLI The device serves as the FTP server: You can configure the backup on the device instead of using independent software. Note: When uploading files from the configuration terminal to the device, files with the same names are directly overwritten. If original files need to be reserved, rename the files before file transfer. a. Enable the FTP function and configure the FTP user name, password, and FTP path. system-view, [sysname] ftp server enable Info:Start FTP server [sysname] aaa [sysname-aaa] manager-user ftpuser [sysname-aaa-manager-user-ftpuser] password Enter Password: Confirm Password: [sysname-aaa-manager-user-ftpuser] service-type ftp [sysname-aaa-manager-user-ftpuser] level 3 [sysname-aaa-manager-user-ftpuser] ftp-directory hda1:/ Note: A password must contain any three of upper-case letters, lower-case letters, digits, and characters. For local users who use FTP, run the ftp-directory command to configure the FTP path to save received files. b. Log in to the device using the FTP command and run the get command to download files to the PC or run the put command to upload files to the device. On the PC with the Windows system, choose Start > Run, enter cmd, and click OK. C:\Documents and Settings\Administrator> ftp 192.168.0.1 User (192.168.0.1:(none)): ftpuser Password: 230 User logged in. ftp> get vrpcfg.cfg ftp> lcd Local directory now C:\Documents and Settings\Administrator. ftp> Note: Administrator is the login name of the OS and varies with user configuration. Run the lcd command to view the path that saves the backup profile. Commands used on the FTP client vary with OSs. For details, see the relevant OS documents.

Importing profiles on the web UI of the USG2000 and USG5000
Importing profiles to the USG2000 and USG5000 The profiles are in .zip or .cfg format and do not support Chinese characters. 1. Choose System > Maintenance > Configuration Management. 2. Click Select. The Profile Management page is displayed. 3. Click Upload. The Upload Files page is displayed. 4. Click Browse, and select the profile to be uploaded. 5. Click Upload to upload the profile. After the profile is successfully uploaded, the Profile Management page is displayed. The corresponding files are displayed on the list.

Importing the USG2000 and USG5000 profiles to files in other models
Importing the USG2000 and USG5000 profiles to files in other models The devices that mutually copy profiles must be in the same model and use software in the same version. The profiles are in .zip or .cfg format and do not support Chinese characters. 1. Choose System > Maintenance > Configuration Management. 2. Click Select. The Profile Management page is displayed. 3. Click Upload. The Upload Files page is displayed. 4. Click Browse, and select the profile to be uploaded. 5. Click Upload to upload the profile. After the profile is successfully uploaded, the Profile Management page is displayed. The corresponding files are displayed on the list. 6. Set the system to use the corresponding profile upon the next boot. After the system is restarted, the profile can be upgraded.

Methods used to export logs of the USG2000, USG5000, and USG6000
Methods used to export logs of the USG2000, USG5000, and USG6000: 1. The method used to export logs of the USG6000 is as follows: Choose Monitor > Logs > Traffic Logs/Threat Logs/URL Logs/Content Logs/Operation Logs/System Logs/User Activity Logs/Policy Matching Logs/Mail Filtering Logs/Audit Logs. Click Export to export system logs in the CSV format to the administrator's PC. 2. The method used to export logs of the USG2000 or USG6000 is as follows: a. Choose Logs > Log Display > Log Display. b. Select the Log Display tab. c. Open or save a log file in the following ways: 1) Click Export. In the displayed File Download dialog box, click Open to view the configuration of the log buffer and log content. 2) Click Save to save the file driver or folder. Click Save. If the operation is successful, you can view the saved logs in the log export path.

Method used to view the enabled profile of the USG2000 and USG5000 firewalls
Run the display startup command to view the profiles used for the current boot and the next boot. display startup MainBoard: Configed startup system software: flash:/sup.bin Startup system software: flash:/sup.bin Next startup system software: flash:/sup.bin Startup saved-configuration file: flash:/vrpcfg.zip Next startup saved-configuration file: flash:/vrpcfg.zip Next startup configuration: backup-configuration Startup saved-configuration file/Profile used for the current boot Next startup saved-configuration file/Profile used for the next boot

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top