Fortinet black logo

CLI Reference

backup cli-config

backup cli-config

Use this command to manually back up the configuration file to a TFTP server.

This method does not include uploaded files such as:

  • Error pages
  • WSDL files
  • W3C Schema
  • Vulnerability scan settings

If your configuration has these files, use either a full TFTP or FTP/SFTP backup instead. For details, see backup full-config or system backup.

This command also does not include settings that remain at their default values for the currently installed version of the firmware. If you require a backup that includes those settings, instead use backup full-config.

Alternatively, you can back up the configuration to an FTP or SFTP server. For details, see system backup.

To use this command, your administrator account’s access control profile must have either w or rw permission to the mntgrp area. For details, see Permissions.

Syntax

execute backup cli-config tftp <filename_str> <tftp_ipv4> [<password_str>]

Variable Description Default

<filename_str>

Enter the name of the file to be used for the backup file, such as FortiWeb_backup.conf. No default.

<tftp_ipv4>

Enter the IP address of the TFTP server. No default.

[<password_str>]

Enter a password to be used when encrypting the backup file to a .zip extension file.

If you don't provide a password, the backup file will be stored as a clear file with a .zip extension.

Caution: Remember the password or keep it in a secure location. You will be required to enter the same password when restoring an encrypted backup file. If you forget or lose the password, you won't be able to use that encrypted backup file.

No default.

Example

This example uploads the FortiWeb appliance’s system configuration to a file named fweb.zip on a TFTP server at IP address 192.0.2.23. The file will not be password-encrypted.

execute backup cli-config tftp fweb.zip 192.0.2.23

Related topics

backup cli-config

Use this command to manually back up the configuration file to a TFTP server.

This method does not include uploaded files such as:

  • Error pages
  • WSDL files
  • W3C Schema
  • Vulnerability scan settings

If your configuration has these files, use either a full TFTP or FTP/SFTP backup instead. For details, see backup full-config or system backup.

This command also does not include settings that remain at their default values for the currently installed version of the firmware. If you require a backup that includes those settings, instead use backup full-config.

Alternatively, you can back up the configuration to an FTP or SFTP server. For details, see system backup.

To use this command, your administrator account’s access control profile must have either w or rw permission to the mntgrp area. For details, see Permissions.

Syntax

execute backup cli-config tftp <filename_str> <tftp_ipv4> [<password_str>]

Variable Description Default

<filename_str>

Enter the name of the file to be used for the backup file, such as FortiWeb_backup.conf. No default.

<tftp_ipv4>

Enter the IP address of the TFTP server. No default.

[<password_str>]

Enter a password to be used when encrypting the backup file to a .zip extension file.

If you don't provide a password, the backup file will be stored as a clear file with a .zip extension.

Caution: Remember the password or keep it in a secure location. You will be required to enter the same password when restoring an encrypted backup file. If you forget or lose the password, you won't be able to use that encrypted backup file.

No default.

Example

This example uploads the FortiWeb appliance’s system configuration to a file named fweb.zip on a TFTP server at IP address 192.0.2.23. The file will not be password-encrypted.

execute backup cli-config tftp fweb.zip 192.0.2.23

Related topics