Purpose

The purpose of this SOP is the proper scheduling and maintenance of network device(s) configuration backups and retention procedures.

Scope

Primary scope of this SOP is intended for Network Services members and associated personnel.

Prerequisites

The prerequisites for this procedure would include holding a full time position, adequate security clearance, access to secure locations, and top-level passwords. Software that may be required would include SSH and Telnet capable software and a laptop or computer with “backbone” level LAN access.

Responsibilities

The primary people responsible for this task would be all trained members of the Netwok Services Department who have had proper instruction on and approved access to the associated networking equipment.

Procedure

1. In most cases the procedure involves a straight forward approach. The device whose configuration is to be backed up for retention is first connected to via a telnet or SSH method, or from a “direct” connection to the device itself, using a console cable.
2. If the configuration information is to be downloaded across the LAN, an SSH method of tunneling should be used if the device supports it because of the added security it provides. 

1. In a direct connect scenario, this is not an issue since no direct network traffic is encountered. 

3. Upon connecting to the device, the team member will initiate the proper commands to “push” the configuration to a remote location for remote storage and backup.
4. If an automated approach is used to back up the configuration rather than a manual one as described above, then a separate piece of software running on a remote server is introduced.

• The only real change here is that the server running the automated software is pre-loaded with the CLI commands and password to access the device(s) slated for backup and retention. 
• All the same security steps and measures are still to be used as suggested above.
• Whenever possible, it is best to perform such a task via a console connection.    This is not always practical given the varying geographical location of network devices. In which case, as stated above, SSH is the preferred method for device interfacing.

References

Cisco's web site at http://www.cisco.com which includes multiple documents for backing up equipment configurations and automating device configuration backup.
HP's web site at http://www.procurve.com which includes multiple documents for backing up equipment configurations and automating device configuration backup.
Equipment documentation.

Definitions

LAN – Local Area Network
CLI – Command Line Interface
SSH – Secure SHell