User Tools

Site Tools


guides:reference:nodebackups
LDAP: couldn't connect to LDAP server

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
guides:reference:nodebackups [2021/10/21 06:43] – ↷ Links adapted because of a move operation pgelsguides:reference:nodebackups [2021/10/22 08:58] (current) – ↷ Links adapted because of a move operation pgels
Line 1: Line 1:
 +====== Node backups ======
 +
 +Backups are part of the NetYCE lifecycle. As per the [[guides:reference:vendors:vendor_state_actions|state machine]], before and after a configuration change a backup is created.
 +
 +Also the NCCM can be used to create backups regularly.
 +
 +The protocol used to send the backups for modeled nodes can be changed in the [[menu:design:node_models:hardware|hardware section]].
 +
 +This page describe several items for manipulating backup behavior.
 +
 +===== Disabling backups =====
 +In some cases, like a testlab or until connectivity has been arranged, it is desired to turn off backups for command jobs. 
 +
 +This behavior is changed per vendor and per command and state.
 +
 +Modify the state_actions table under ''Admin > Custom data > State_actions''
 +
 +The example below shows that backups have been disabled for:
 +
 +  * Vendor_type: Cisco_IOS
 +  * Command: cmd_exec
 +  * State: preconfig and postconfig
 +  * Action: backup
 +  * Disabled: set to '1'
 +
 +> NOTE: [[menu:admin:users:group_admin|user/group level]] 'system' is required to modify these entries.
 +
 +{{:guides:howto:backup_disabled.png?direct&800|}}
 +
 +
 +===== Disable tftpd =====
 +
 +The following steps will disable the tftp daemon. 
 +
 +> NOTE: This disables feature like ZTP (Zero touch provisioning) and backups for vendors that only support tftp. 
 +
 +The use of tftp as a file-transfer protocol can be disabled in NetYCE using the global configuration file 
 +''/opt/yce/etc/**yce_setup.xml**''
 +
 +Locate the line "<daemons>" and change the setting for ''**yce_tftpd**'' to "**disable**". Ensure the ''vsftpd'' daemon is enabled. This controls the ftp server. (use the ''yce'' user to do so.)
 +
 +The result is similar to below:
 +<code xml>
 +<setup>
 +  <override>
 +    <configs crontab="update" httpd="update" mojo="update" mysql="update" network="update" />
 +    <daemons  vsftpd="enable" yce_ibd="disable" yce_nccmd="enable" yce_tftpd="disable" />
 +  </override>
 +  <yce ...
 +</code>
 +
 +> Note that disabling tftp server will only prevent tftp transfers, it does not control which transfers protocols will be attempted. The Vendor-specific and Hardware specific (see step 3) settings will define this behavior.
 +
 +As ''yce'' unix user run ''yce_setup.pl -r'' to regenerate config files for above config to be effective and restart daemons. At this point the tftp server will no longer be available.
 +
 +For each vendor_type and model you may choose to use a different transfer protocol, if it was set to tftp or the default behavior was using tftp. You may see the defaults in the [[guides:reference:vendors:supported_devices|supported hardware]] table.
 +
 +Navigate to ''Design > Hardware''
 +
 +{{guides:howto:configure_cisco_ios_vendor_module_to_use_scp.png?nolink&600|}}
 +
  
guides/reference/nodebackups.txt · Last modified: 2021/10/22 08:58 by pgels