Fortinet black logo

CLI Reference

backup full-config

backup full-config

Use this command to manually back up the entire configuration file, including those settings that remain at their default values, to a TFTP server.

We strongly recommend that you password-encrypt this backup and store it in a secure location. This backup method includes sensitive data such as your HTTPS certificates’ private keys. Unauthorized access to private keys compromises the security of all HTTPS requests using those certificates.

Alternatively, you can back up the configuration to an FTP or SFTP server. For details, see system backup.

This backup includes settings that remain at their default values increases the file size of the backup, but may be useful in some cases, such as when you want to compare the default settings with settings that you have configured.

To use this command, your administrator account’s access control profile must have either w or rw permission to the mntgrp area. For details, see Permissions.

Syntax

execute backup full-config tftp <filename_str> <tftp_ipv4> [<password_str>]

Variable Description Default

<filename_str>

Enter the name of the file to be used for the backup file, such as FortiWeb_backup.conf. No default.

<tftp_ipv4>

Enter the IP address of the TFTP server. No default.

[<password_str>]

Enter a password to be used when encrypting the backup file to a .zip extension file.

If you don't provide a password, the backup file will be stored as a clear file with a .zip extension.

Caution: Remember the password or keep it in a secure location. You will be required to enter the same password when restoring an encrypted backup file. If you forget or lose the password, you will not be able to use that encrypted backup file.

No default.

Example

This example uploads the FortiWeb appliance’s entire configuration, including uploaded error page and HTTPS certificate files, to a file named fweb.zip on a TFTP server at IP address 192.0.2.23. The file is encrypted with the password P@ssword1.

execute backup full-config tftp fweb.zip 192.0.2.23 P@ssword1

Related topics

backup full-config

Use this command to manually back up the entire configuration file, including those settings that remain at their default values, to a TFTP server.

We strongly recommend that you password-encrypt this backup and store it in a secure location. This backup method includes sensitive data such as your HTTPS certificates’ private keys. Unauthorized access to private keys compromises the security of all HTTPS requests using those certificates.

Alternatively, you can back up the configuration to an FTP or SFTP server. For details, see system backup.

This backup includes settings that remain at their default values increases the file size of the backup, but may be useful in some cases, such as when you want to compare the default settings with settings that you have configured.

To use this command, your administrator account’s access control profile must have either w or rw permission to the mntgrp area. For details, see Permissions.

Syntax

execute backup full-config tftp <filename_str> <tftp_ipv4> [<password_str>]

Variable Description Default

<filename_str>

Enter the name of the file to be used for the backup file, such as FortiWeb_backup.conf. No default.

<tftp_ipv4>

Enter the IP address of the TFTP server. No default.

[<password_str>]

Enter a password to be used when encrypting the backup file to a .zip extension file.

If you don't provide a password, the backup file will be stored as a clear file with a .zip extension.

Caution: Remember the password or keep it in a secure location. You will be required to enter the same password when restoring an encrypted backup file. If you forget or lose the password, you will not be able to use that encrypted backup file.

No default.

Example

This example uploads the FortiWeb appliance’s entire configuration, including uploaded error page and HTTPS certificate files, to a file named fweb.zip on a TFTP server at IP address 192.0.2.23. The file is encrypted with the password P@ssword1.

execute backup full-config tftp fweb.zip 192.0.2.23 P@ssword1

Related topics