Backup Configuration
Backing up the configuration
To backup the configuration using the GUI
- Click on the user name in the upper right-hand corner of the screen and select Configuration > Backup.
- Direct the backup to your Local PCor to a USB Disk.
The USB Disk option will not be available if no USB drive is inserted in the USB port. You can also backup to the FortiManager using the CLI.
- If VDOMs are enabled, indicate whether the scope of the backup is the entire FortiGate configuration (Global) or only a specific VDOM configuration (VDOM).
If backing up a VDOM configuration, select the VDOM name from the list.
- Enable Encryption. Encryption must be enabled on the backup file to back up VPN certificates.
- Enter a password, and enter it again to confirm it. This password will be required to restore the configuration.
- Click OK.
- When prompted, select a location on the PC or USB disk to save the configuration file. The configuration file will have a .conf extension.
To backup the configuration using the CLI
Use one of the following commands:
execute backup config management-station <comment>
or:
execute backup config usb <backup_filename> [<backup_password>]
FTP
execute backup config ftp <backup_filename> <ftp_server> [<port>] [<user_name>] [<password>]
TFTP
execute backup config tftp <backup_filename> <tftp_servers> <password>
Use the same commands to backup a VDOM configuration by first entering the commands
config vdom
edit <vdom_name>
Restoring a configuration
To restore the FortiGate configuration using the GUI
- Click on the user name in the upper right-hand corner of the screen and select Configuration > Restore.
- Identify the source of the configuration file to be restored: your Local PCor a USB Disk.
The USB Disk option will not be available if no USB drive is inserted in the USB port. You can restore from the FortiManager using the CLI.
- Click Upload, locate the configuration file, and click Open.
- Enter the password if required.
- Click OK.
To restore the FortiGate configuration using the CLI
execute restore config management-station normal 0
or:
execute restore config usb <filename> [<password>]
FTP
execute restore config ftp <backup_filename> <ftp_server> [<port>] [<user_name>] [<password>]
TFTP
execute restore config tftp <backup_filename> <tftp_server> <password>
The FortiGate will load the configuration file and restart. Once the restart has completed, verify that the configuration has been restored.