Cisco IPS 7.1 Installation Guide download pdf (Page 275)

E-5

Cisco Intrusion Prevention System Appliance Hardware Installation Guide for IPS 7.1

OL-24002-01

Appendix E Troubleshooting

Preventive Maintenance

Restoring the Current Configuration From a Backup File

To restore your current configuration from a backup file, follow these steps:

Step 1 Log in to the CLI using an account with administrator privileges.

Step 2 Back up the current configuration to the remote server.

sensor# copy scp://[email protected]//configuration/cfg current-config

Password: ********

Warning: Copying over the current configuration may leave the box in an unstable state.

Would you like to copy current-config to backup-config before proceeding? [yes]:

Step 3 Enter yes to copy the current configuration to a backup configuration.

cfg 100% |************************************************| 36124 00:00

Warning: Replacing existing network-settings may leave the box in an unstable state.

Would you like to replace existing network settings

(host-ipaddress/netmask/gateway/access-list) on sensor before proceeding? [no]:

sensor#

Step 4 Enter no to retain the currently configured hostname, IP address, subnet mask, management interface,

and access list. We recommend you retain this information to preserve access to your sensor after the

rest of the configuration has been restored.

For More Information

For a list of supported HTTP/HTTPS servers, see Supported FTP and HTTP/HTTPS Servers, page D-3.

Creating the Service Account

You can create a service account for TAC to use during troubleshooting. Although more than one user

can have access to the sensor, only one user can have service privileges on a sensor. The service account

is for support purposes only.

The root user password is synchronized to the service account password when the service account is

created. To gain root access you must log in with the service account and switch to user root with the

su - root command.

Caution Do not make modifications to the sensor through the service account except under the direction of TAC.

If you use the service account to configure the sensor, your configuration is not supported by TAC.

Adding services to the operating system through the service account affects proper performance and

functioning of the other IPS services. TAC does not support a sensor on which additional services have

been added.

Caution You should carefully consider whether you want to create a service account. The service account

provides shell access to the system, which makes the system vulnerable. However, you can use the

service account to create a password if the administrator password is lost. Analyze your situation to

decide if you want a service account existing on the system.

1 ... 274 275 276 ... 422

No comments

Cisco IPS 7.1 Installation Guide Page 275