SA Configuration migration

[jalaluddeen_]

Hi,

i have set up SA in DC  and DR.. Configuration in DC are done and all working fine.Now i need to configure DR site same as DC. so it is very hard to manually configura each and every things. So is there any way to replicate the configuration to DR. Is it ok that i took local back up form DC SA and upload to DR SA. please help me out this.

Any Knowledge base to do this.

[Raveen_]

Other option for automation is to archive system configuration in an archival site.

http://www.juniper.net/techpubs/en_US/uac4.4/topics/task/configuration/security-access-logs-archivin...

Regards,

Raveen

[Raveen_]

Yes you could take backup and restore it on DR site's SA device.

Regards,

raveen

[jalaluddeen_]

Is this just save the DC sa configuration. and copy to USB. then uplod to DR site Sa.

Is this the solution.

 Can u give me any  documents to pushing or uploading configuration to SA.

Thannx aloot your immense reply

[Raveen_]

Yes, you could just save configuration and save user accounts from DC site.

And then use the saved configurationa nd accounts to restore it in DR site.

Reference:

http://www.juniper.net/techpubs/en_US/uac5.0/topics/task/configuration/security-access-configuration...

(or)

You could do an XML export and import of the configuration:

http://www.juniper.net/techpubs/en_US/sa8.0/topics/task/operational/secure-access-system-archiving-i...

Regards,

Raveen

[Raveen_]

Hyperlink provided in previous update for XML import/export was incorrect, please ignore.

Below is the correct links:

1. Binary export and import of configuraiton file:

http://www.juniper.net/techpubs/en_US/sa8.0/topics/task/operational/secure-access-system-archiving-i...

2. XML export and import of configuraiton file:

http://www.juniper.net/techpubs/en_US/sa8.0/topics/reference/general/secure-access-system-archiving-...

3. If DR site is reachable from DC SA, you could use Push Config feature, so configuration will always be in sync.

https://www.juniper.net/techpubs/en_US/uac5.0/topics/topic-map/security-access-config-push-config-us...

http://www.juniper.net/techpubs/en_US/sa8.0/topics/reference/general/secure-access-system-archiving-...

Regards,

Raveen

[jayLaiz_]

Hi,

Page 922 for push config, http://www.juniper.net/techpubs/en_US/sa7.4/information-products/internal-collections/Junos-Pulse-Se...

Or,

Save system.cfg and user accounts.

Import on DR.While importin system.cfg, select Import everything except network settings and licenses

Regards,

Jay

[flip_pipe_]

Hi Raveen and Jay,

In a near future I will also to install a DR. There is any way to do the push config, to certain hosts with certain configuration in a automatic way, for example, every hour replicate this set of configuration for this set of hosts?

Regards,

Filipe

[Raveen_]

Hi Filipe

You could use push configuration feature that I highlighted in previous update:

---------------

3. If DR site is reachable from DC SA, you could use Push Config feature, so configuration will always be in sync.

https://www.juniper.net/techpubs/en_US/uac5.0/topics/topic-map/security-access-config-push-config-us...

http://www.juniper.net/techpubs/en_US/sa8.0/topics/reference/general/secure-access-system-archiving-...

---------------

Regards,

Raveen

[flip_pipe_]

Yes I know this feature ... and it work great to replicate the configuration from prodution to lab.... which I do time to time...

But my question is about the automation of push config.... so far I didn't find a way to do it every x time... It will be annoying to choose the configuration items to be pushed every time we do a configuration in the production environment to DR.