Focus

PAN-OS CLI Quick Start

Export a Saved Configuration from One Firewall and Import it into Another

Table of Contents

After you import the saved configuration, you can then Load a Partial Configuration from the first firewall onto the second firewall.

On the first firewall, save the current configuration to a named configuration snapshot using the save config to <filename> command in configuration mode. For example:
```
admin@PA-fw1# save config to fw1-config
```
Export the named configuration snapshot and log database to an SCP-enabled server using the scp export command in operational mode. When prompted, enter the password for your SCP server account.
```
admin@fw1> scp export configuration from <named-config-file> to <username@host:path>
```
For an SCP server running on Windows, the destination folder/filename path for both the export and import commands requires a drive letter followed by a colon. For example:
```
admin@fw1> scp export configuration from fw1-config.xml to ccrisp@10.10.10.5:c:/fw-config
```
Log in to the firewall to which you want to copy the configuration and logs, and then import the configuration snapshot and log database. When prompted, enter the password for your SCP server account.
```
admin@fw2> scp import configuration from <username@host:path_to_named-config-file>
```
For example (on a Windows-based SCP server):
```
admin@fw2> scp import configuration from ccrisp@10.10.10.5:c:/fw-configs/fw1-config.xml
```